Malware Analysis Report

2024-11-15 08:31

Sample ID 240405-qhvtysdf23
Target .
SHA256 a76364703233d375b024d5f3ca5415e42dd7283643cf67b8a50cba691c659c9f
Tags
asyncrat agilenet bootkit discovery evasion persistence rat spyware stealer trojan upx
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

a76364703233d375b024d5f3ca5415e42dd7283643cf67b8a50cba691c659c9f

Threat Level: Known bad

The file . was found to be: Known bad.

Malicious Activity Summary

asyncrat agilenet bootkit discovery evasion persistence rat spyware stealer trojan upx

AsyncRat

Modifies WinLogon for persistence

Process spawned unexpected child process

Suspicious use of NtCreateProcessExOtherParentProcess

Stops running service(s)

Sets file to hidden

Modifies Windows Firewall

Creates new service(s)

Drops file in Drivers directory

Downloads MZ/PE file

Sets service image path in registry

Uses Session Manager for persistence

Modifies Installed Components in the registry

Executes dropped EXE

ACProtect 1.3x - 1.4x DLL software

Obfuscated with Agile.Net obfuscator

Reads user/profile data of web browsers

Registers COM server for autorun

UPX packed file

Loads dropped DLL

Windows security modification

Drops startup file

Enumerates connected drives

Writes to the Master Boot Record (MBR)

Looks up external IP address via web service

Adds Run key to start application

Checks installed software on the system

Checks for any installed AV software in registry

Legitimate hosting services abused for malware hosting/C2

AutoIT Executable

Drops file in System32 directory

Drops file in Program Files directory

Drops file in Windows directory

Launches sc.exe

Program crash

Enumerates physical storage devices

NSIS installer

Runs .reg file with regedit

Kills process with taskkill

Uses Task Scheduler COM API

Uses Volume Shadow Copy service COM API

Views/modifies file attributes

NTFS ADS

Suspicious use of SendNotifyMessage

Modifies Internet Explorer settings

Modifies registry class

Suspicious behavior: LoadsDriver

Suspicious behavior: EnumeratesProcesses

Suspicious use of SetWindowsHookEx

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Enumerates system info in registry

Checks processor information in registry

Suspicious use of FindShellTrayWindow

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of AdjustPrivilegeToken

Modifies data under HKEY_USERS

Checks SCSI registry key(s)

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-04-05 13:16

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-05 13:16

Reported

2024-04-05 13:31

Platform

win11-20240221-en

Max time kernel

913s

Max time network

919s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\.html

Signatures

AsyncRat

rat asyncrat

Modifies WinLogon for persistence

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit = "C:\\Windows\\system32\\userinit.exe,C:\\Windows\\system32\\Windupdt\\winupdate.exe" C:\Users\Admin\Downloads\Blackkomet (6).exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit = "C:\\Windows\\system32\\userinit.exe,C:\\Windows\\system32\\Windupdt\\winupdate.exe,C:\\Windows\\system32\\Windupdt\\winupdate.exe" C:\Windows\SysWOW64\Windupdt\winupdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit = "C:\\Windows\\system32\\userinit.exe,C:\\Windows\\system32\\Windupdt\\winupdate.exe,C:\\Windows\\system32\\Windupdt\\winupdate.exe,C:\\Windows\\system32\\Windupdt\\winupdate.exe" C:\Windows\SysWOW64\Windupdt\winupdate.exe N/A

Process spawned unexpected child process

Description Indicator Process Target
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\SysWOW64\attrib.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\SysWOW64\attrib.exe

Suspicious use of NtCreateProcessExOtherParentProcess

Description Indicator Process Target
PID 9744 created 9708 N/A C:\Program Files\Avast Software\Avast\x86\avDump.exe C:\Program Files\Avast Software\Avast\x86\RegSvr.exe

Creates new service(s)

persistence

Downloads MZ/PE file

Drops file in Drivers directory

Description Indicator Process Target
File created C:\Windows\system32\drivers\aswKbd.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswSP.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswVmm.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswe4b1966b3e492a08.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswMonFlt.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswd8a7db71d232bd4a.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw8c95cc4a4ccc0664.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\asw50bfd9f4932bcc5d.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\asw6ba59c95c4f8414c.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw6ba59c95c4f8414c.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswf9c594b7192d95cb.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw48627fcc481a3eec.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswRdr2.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswElam.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswMonFlt.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\asw8c95cc4a4ccc0664.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswbidsdriver.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswArPot.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswcddc7e64a7627581.tmp C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\protected_elam.sys C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Windows\system32\drivers\asw4fe80cd55b87f7d5.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswNetHub.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswRvrt.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswbidsh.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswSnx.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswStm.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswd8a7db71d232bd4a.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\asw918256582d15a9a2.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\asw583c176ccb0b2248.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswArPot.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswbuniv.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswNetHub.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswf9c594b7192d95cb.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswRdr2.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw583c176ccb0b2248.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswArDisk.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswSP.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswcddc7e64a7627581.tmp C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\aswe016cdf750ed6ba6.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswe4b1966b3e492a08.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw50bfd9f4932bcc5d.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswKbd.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswRvrt.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswe016cdf750ed6ba6.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswa8199a4d82e4a0d2.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswe4311d44d0c74e6b.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\asw48627fcc481a3eec.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswElam.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswf7d442327919852e.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswe4311d44d0c74e6b.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\protected_elam.sys C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Windows\system32\drivers\protected_elam.sys C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File created C:\Windows\system32\drivers\asw1c569cf5a9ed32dd.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswVmm.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswSnx.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswStm.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswArDisk.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswbidsh.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswbuniv.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswf7d442327919852e.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw1c569cf5a9ed32dd.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\asw4fe80cd55b87f7d5.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswbidsdriver.sys C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\system32\drivers\aswa8199a4d82e4a0d2.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A

Modifies Installed Components in the registry

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\software\WOW6432Node\microsoft\Active Setup\Installed Components C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
Key created \REGISTRY\MACHINE\software\WOW6432Node\microsoft\Active Setup\Installed Components C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A

Modifies Windows Firewall

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A

Sets file to hidden

evasion
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A

Sets service image path in registry

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswKbd\ImagePath = "system32\\drivers\\aswKbd.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswElam\ImagePath = "system32\\drivers\\aswElam.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswMonFlt\ImagePath = "system32\\drivers\\aswMonFlt.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswVmm\ImagePath = "system32\\drivers\\aswVmm.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswRvrt\ImagePath = "system32\\drivers\\aswRvrt.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswArPot\ImagePath = "system32\\drivers\\aswArPot.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswMonFlt\ImagePath = "system32\\drivers\\aswMonFlt.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswMonFlt\ImagePath = "system32\\drivers\\aswMonFlt.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbIDSAgent\ImagePath = "\"C:\\Program Files\\Avast Software\\Avast\\aswidsagent.exe\"" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avast! Antivirus\ImagePath = "\"C:\\Program Files\\Avast Software\\Avast\\AvastSvc.exe\" /runassvc" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswArDisk\ImagePath = "system32\\drivers\\aswArDisk.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbidsdriver\ImagePath = "system32\\drivers\\aswbidsdriver.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswStm\ImagePath = "system32\\drivers\\aswStm.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswSP\ImagePath = "system32\\drivers\\aswSP.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswRvrt\ImagePath = "system32\\drivers\\aswRvrt.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbuniv\ImagePath = "system32\\drivers\\aswbuniv.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswVmm\ImagePath = "system32\\drivers\\aswVmm.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avast! Antivirus\ImagePath = "\"C:\\Program Files\\Avast Software\\Avast\\AvastSvc.exe\" /runassvc" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswKbd\ImagePath = "system32\\drivers\\aswKbd.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswElam\ImagePath = "system32\\drivers\\aswElam.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswVpnRdr\ImagePath = "system32\\drivers\\aswVpnRdr.sys" C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswNetHub\ImagePath = "system32\\drivers\\aswNetHub.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbIDSAgent\ImagePath = "\"C:\\Program Files\\Avast Software\\Avast\\aswidsagent.exe\"" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswSP\ImagePath = "system32\\drivers\\aswSP.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswSP\ImagePath = "system32\\drivers\\aswSP.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswStm\ImagePath = "system32\\drivers\\aswStm.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswRvrt\ImagePath = "system32\\drivers\\aswRvrt.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswRdr\ImagePath = "system32\\drivers\\aswRdr2.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswSnx\ImagePath = "system32\\drivers\\aswSnx.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswArDisk\ImagePath = "system32\\drivers\\aswArDisk.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbidsh\ImagePath = "system32\\drivers\\aswbidsh.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswArPot\ImagePath = "system32\\drivers\\aswArPot.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbidsh\ImagePath = "system32\\drivers\\aswbidsh.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswStm\ImagePath = "system32\\drivers\\aswStm.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbuniv\ImagePath = "system32\\drivers\\aswbuniv.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbidsh\ImagePath = "system32\\drivers\\aswbidsh.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswSnx\ImagePath = "system32\\drivers\\aswSnx.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswElam\ImagePath = "system32\\drivers\\aswElam.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswVmm\ImagePath = "system32\\drivers\\aswVmm.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbidsdriver\ImagePath = "system32\\drivers\\aswbidsdriver.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswRdr\ImagePath = "system32\\drivers\\aswRdr2.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswArDisk\ImagePath = "system32\\drivers\\aswArDisk.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswNetHub\ImagePath = "system32\\drivers\\aswNetHub.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswSnx\ImagePath = "system32\\drivers\\aswSnx.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswKbd\ImagePath = "system32\\drivers\\aswKbd.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswRdr\ImagePath = "system32\\drivers\\aswRdr2.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswArPot\ImagePath = "system32\\drivers\\aswArPot.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbuniv\ImagePath = "system32\\drivers\\aswbuniv.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbidsdriver\ImagePath = "system32\\drivers\\aswbidsdriver.sys" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswNetHub\ImagePath = "system32\\drivers\\aswNetHub.sys" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A

Stops running service(s)

evasion

Uses Session Manager for persistence

persistence
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000006900630061007200750073005f0072007600720074002e0065007800650000000000 C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000000000 C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000006900630061007200750073005f0072007600720074002e0065007800650000000000 C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\avast-du\icarus.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000000000 C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\avast-du\icarus.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000006900630061007200750073005f0072007600720074002e0065007800650000000000 C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000000000 C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A

ACProtect 1.3x - 1.4x DLL software

Description Indicator Process Target
N/A N/A N/A N/A

Drops startup file

Description Indicator Process Target
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4088e78febe06f86f68793b4dba813b0.exe C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4088e78febe06f86f68793b4dba813b0.exe C:\Users\Admin\srvhost.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4088e78febe06f86f68793b4dba813b0.exe C:\Users\Admin\srvhost.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE N/A
N/A N/A C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
N/A N/A C:\Windows\Temp\asw.e4c80524bcab92d0\avast_free_antivirus_setup_online_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
N/A N/A C:\Users\Public\Documents\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
N/A N/A C:\Users\Public\Documents\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\sbr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\avDump.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24040405\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\avDump.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24040405\engsup.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\svchost‌.exe N/A
N/A N/A C:\Users\Admin\srvhost.exe N/A
N/A N/A C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
N/A N/A C:\Windows\Temp\asw.96452c189a09b96c\avast_free_antivirus_setup_online_x64.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\sbr.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\svchost‌.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\avDump.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
N/A N/A C:\Users\Public\Documents\aswOfferTool.exe N/A
N/A N/A C:\Users\Public\Documents\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A

Obfuscated with Agile.Net obfuscator

agilenet
Description Indicator Process Target
N/A N/A N/A N/A

Reads user/profile data of web browsers

spyware stealer

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ThreadingModel = "Apartment" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ReleaseName = "C:\\Program Files\\Avast Software\\Avast\\ashShell.dll" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1637591879-962683004-3585269084-1000_Classes\WOW6432Node\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}\LocalServer32 C:\Program Files (x86)\TotalAV\TotalAV.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32\ = "C:\\Program Files\\Avast Software\\Avast\\asOutExt.dll" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32 C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32\ = "C:\\Program Files\\Avast Software\\Avast\\aswAMSI.dll" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32\ThreadingModel = "Both" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ReleaseName = "C:\\Program Files\\Avast Software\\Avast\\ashShell.dll" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32\ = "C:\\Program Files\\Avast Software\\Avast\\asOutExt.dll" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32\ThreadingModel = "Both" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32 C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32\ThreadingModel = "Both" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32\ = "C:\\Program Files\\Avast Software\\Avast\\aswAMSI.dll" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32\ThreadingModel = "Both" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ReleaseName = "C:\\Program Files\\Avast Software\\Avast\\ashShell.dll" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32\ = "C:\\Program Files\\Avast Software\\Avast\\asOutExt.dll" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ThreadingModel = "Apartment" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32\ = "C:\\Program Files\\Avast Software\\Avast\\aswAMSI.dll" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32\ = "C:\\Program Files\\Avast Software\\Avast\\aswAMSI.dll" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ = "C:\\Program Files\\Avast Software\\Avast\\ashShell.dll" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1637591879-962683004-3585269084-1000_Classes\WOW6432Node\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}\LocalServer32\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\" -ToastActivated" C:\Program Files (x86)\TotalAV\TotalAV.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ = "C:\\Program Files\\Avast Software\\Avast\\ashShell.dll" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32 C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32\ = "C:\\Program Files\\Avast Software\\Avast\\aswAMSI.dll" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32\ThreadingModel = "Both" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ = "C:\\Program Files\\Avast Software\\Avast\\ashShell.dll" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32\ThreadingModel = "Both" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32\ = "C:\\Program Files\\Avast Software\\Avast\\aswAMSI.dll" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ThreadingModel = "Apartment" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A

Windows security modification

evasion trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\SECURITY CENTER\PROVIDER\AV\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\SECURITY CENTER\PROVIDER\AV\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\SECURITY CENTER\PROVIDER\AV\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\AvRepair = "\"C:\\Program Files\\Avast Software\\Avast\\setup\\instup.exe\" /instop:repair /wait" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1637591879-962683004-3585269084-1000\Software\Microsoft\Windows\CurrentVersion\Run\winupdater = "C:\\Windows\\system32\\Windupdt\\winupdate.exe" C:\Users\Admin\Downloads\Blackkomet (6).exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\4088e78febe06f86f68793b4dba813b0 = "\"C:\\Users\\Admin\\srvhost.exe\" .." C:\Users\Admin\srvhost.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\AvRepair = "\"C:\\Program Files\\Avast Software\\Avast\\setup\\instup.exe\" /instop:repair /wait" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1637591879-962683004-3585269084-1000\Software\Microsoft\Windows\CurrentVersion\Run\4088e78febe06f86f68793b4dba813b0 = "\"C:\\Users\\Admin\\srvhost.exe\" .." C:\Users\Admin\srvhost.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\AvRepair = "\"C:\\Program Files\\Avast Software\\Avast\\setup\\instup.exe\" /instop:repair /wait" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1637591879-962683004-3585269084-1000\Software\Microsoft\Windows\CurrentVersion\Run\winupdater = "C:\\Windows\\system32\\Windupdt\\winupdate.exe" C:\Windows\SysWOW64\Windupdt\winupdate.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1637591879-962683004-3585269084-1000\Software\Microsoft\Windows\CurrentVersion\Run\winupdater = "C:\\Windows\\system32\\Windupdt\\winupdate.exe" C:\Windows\SysWOW64\Windupdt\winupdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\tv_enua = "RunDll32 advpack.dll,LaunchINFSection C:\\Windows\\INF\\tv_enua.inf, RemoveCabinet" C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A

Checks for any installed AV software in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Scanner C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\FwDataFolder C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{CB6AE6F8-D9A8-4794-B2BF-53A84058C58F} C:\Program Files\Avast Software\Avast\afwServ.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\UseRegistry C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\PassiveMode C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{CC13CA7D-229B-4D0A-8D27-E26129CDDF10}\SpecialTask = "1" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\CrashGuardProcessWatcherExclusions C:\Program Files\Avast Software\Avast\setup\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{C6156735-F7A2-4387-94A7-0479004A7310} C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{7C4966F0-D502-412D-A636-ACCC39A24BB2} C:\Program Files\Avast Software\Avast\afwServ.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{CB6AE6F8-D9A8-4794-B2BF-53A84058C58F} C:\Program Files\Avast Software\Avast\afwServ.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common\InstallTree = "NjM2LEM6XFdpbmRvd3NcU3lzdGVtMzJcd2lubG9nb24uZXhlOzMyNDgsQzpcV2luZG93c1xTeXN0ZW0zMlx1c2VyaW5pdC5leGU7MzMwMCxDOlxXaW5kb3dzXGV4cGxvcmVyLmV4ZTsxODk2LEM6XFByb2dyYW0gRmlsZXMgKHg4NilcTWljcm9zb2Z0XEVkZ2VcQXBwbGljYXRpb25cbXNlZGdlLmV4ZTs1Nzg0LEM6XFVzZXJzXEFkbWluXERvd25sb2Fkc1xhdmFzdF9mcmVlX2FudGl2aXJ1c19zZXR1cF9vbmxpbmUuZXhlOzcwNjgsQzpcV2luZG93c1xUZW1wXGFzdy5lNGM4MDUyNGJjYWI5MmQwXGF2YXN0X2ZyZWVfYW50aXZpcnVzX3NldHVwX29ubGluZV94NjQuZXhlOzE4MDAsQzpcV2luZG93c1xUZW1wXGFzdy4wN2ViM2QwOWVlYzY5YjllXEluc3R1cC5leGU=" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Languages C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{A9682249-08E7-4BBF-B870-EFBC63AA2888}\ScanPackers = "All" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast\properties C:\Program Files\Avast Software\Avast\afwServ.exe N/A
Key opened \REGISTRY\MACHINE\Software\WOW6432Node\Avira\Antivirus C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe N/A
Key opened \REGISTRY\MACHINE\Software\Avira\Antivirus C:\Windows\SysWOW64\taskkill.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\MicroUpdates = 3300310037003d00310037003100320033003200330033003500320000003400330039003d00310037003100320033003200330033003500320000003400390034003d00310037003100320033003200330033003500320000003500320038003d00310037003100320033003200330033003500320000003700330034003d00310037003100320033003200330033003500320000000000 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common\PropertySilent C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ReportFolder C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{19EA8BF0-A12F-1AF0-FB25-293AD7155932} C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\SetupVersion C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\DataFolder C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{CC13CA7D-229B-4D0A-8D27-E26129CDDF10} C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\SetupVersion C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\DataFolder C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast\properties\settings C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{D93EF81A-B92F-27FE-AF54-9278EA8BF910} C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Languages C:\Users\Admin\Downloads\Blackkomet (6).exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{EC4ECEDA-3E3B-4027-ABFE-29A5122D64D6} C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{2243A056-84B3-4327-8E46-5FE41F72EE91} C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{FDC844BC-62CE-4A58-A28B-77AA70274062}\Report = "None" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Delete value \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\LastAppliedPatchId C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\SelfDefense C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{FDC844BC-62CE-4A58-A28B-77AA70274062} C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{2243A056-84B3-4327-8E46-5FE41F72EE91}\Priority = "2" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{19EA8BF0-A12F-1AF0-FB25-293AD7155932} C:\Program Files\Avast Software\Avast\afwServ.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{2243A056-84B3-4327-8E46-5FE41F72EE91} C:\Users\Admin\Downloads\Blackkomet (6).exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\Version C:\Windows\SysWOW64\Windupdt\winupdate.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\SelfDefense C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\UpdateVersion = "494" C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\CrashGuardProcessWatcherExclusions C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{CC13CA7D-229B-4D0A-8D27-E26129CDDF10}\SuspiciousAction = "fix" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\PassiveMode C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\TempFolder C:\Program Files\Avast Software\Avast\afwServ.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ReportFolder C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{2243A056-84B3-4327-8E46-5FE41F72EE91} C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{EC4ECEDA-3E3B-4027-ABFE-29A5122D64D6} C:\Program Files\Avast Software\Avast\setup\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Scanner C:\Program Files\Avast Software\Avast\setup\Sfx\instup.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Languages C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Software\Avira\Antivirus C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\{CC13CA7D-229B-4D0A-8D27-E26129CDDF10} C:\Windows\SysWOW64\Windupdt\winupdate.exe N/A

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\A: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\H: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\L: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\Q: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\R: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\S: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\T: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\V: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\W: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\G: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\B: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\J: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\D: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\I: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\P: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\U: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\E: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\O: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\X: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\Z: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\F: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\K: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\M: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\N: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened (read-only) \??\Y: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A ip-api.com N/A N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.07eb3d09eec69b9e\instup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\setup\instup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\setup\instup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\setup\instup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\afwServ.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\common\icarus.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\avast_secureline_setup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.96452c189a09b96c\avast_free_antivirus_setup_online_x64.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\setup\Sfx\instup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.2fe6ff6fb447ef86\avast_one_essential_setup_online_x64.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\common\icarus.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\Downloads\avast_one_free_antivirus.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\afwServ.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\common\icarus.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\afwServ.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\afwServ.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\avast_driverupdater_setup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\avast-du\icarus.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\Downloads\Blackkomet (6).exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.e4c80524bcab92d0\avast_free_antivirus_setup_online_x64.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A

AutoIT Executable

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\Windupdt\ C:\Windows\SysWOW64\Windupdt\winupdate.exe N/A
File created C:\Windows\system32\icarus_rvrt.exe C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus.exe N/A
File opened for modification C:\Windows\SysWOW64\Windupdt\ C:\Users\Admin\Downloads\Blackkomet (6).exe N/A
File opened for modification C:\Windows\system32\icarus_rvrt.exe C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus.exe N/A
File created C:\Windows\SysWOW64\Windupdt\winupdate.exe C:\Windows\SysWOW64\Windupdt\winupdate.exe N/A
File created C:\Windows\SysWOW64\SETA865.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File opened for modification C:\Windows\SysWOW64\msvcp50.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SecurityService\SecurityService_Url_wqsxzqrojlfbwj3xmqn5vi2gsla5q5aq\ysceyja3.newcfg C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\AppCenter\c3f68d79-2e9d-4c57-bf3f-57489c789f23\Logs.db C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\TotalAV\vdf_1712323587.zip C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File created C:\Windows\system32\aswf32e69ea3da38db2.tmp C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
File created C:\Windows\SysWOW64\Windupdt\winupdate.exe C:\Users\Admin\Downloads\Blackkomet (6).exe N/A
File opened for modification C:\Windows\SysWOW64\Windupdt\winupdate.exe C:\Users\Admin\Downloads\Blackkomet (6).exe N/A
File created C:\Windows\SysWOW64\Windupdt\winupdate.exe:Zone.Identifier:$DATA C:\Users\Admin\Downloads\Blackkomet (6).exe N/A
File opened for modification C:\Windows\SysWOW64\Windupdt\winupdate.exe C:\Windows\SysWOW64\Windupdt\winupdate.exe N/A
File opened for modification C:\Windows\system32\asw6fa158a367810641.tmp C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\TotalAV\vdf_1712323587.zip C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File created C:\Windows\SysWOW64\Windupdt\winupdate.exe C:\Windows\SysWOW64\Windupdt\winupdate.exe N/A
File opened for modification C:\Windows\SysWOW64\Windupdt\ C:\Windows\SysWOW64\Windupdt\winupdate.exe N/A
File created C:\Windows\SysWOW64\Windupdt\winupdate.exe:SmartScreen:$DATA C:\Users\Admin\Downloads\Blackkomet (6).exe N/A
File opened for modification C:\Windows\SysWOW64\Windupdt C:\Windows\SysWOW64\attrib.exe N/A
File opened for modification C:\Windows\system32\aswf32e69ea3da38db2.tmp C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
File created C:\Windows\system32\asw51cdbebb8a059477.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\aswBoot.exe C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\AppCenter\c3f68d79-2e9d-4c57-bf3f-57489c789f23\Logs.db C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Windows\SysWOW64\SETA865.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File opened for modification C:\Windows\system32\asw51cdbebb8a059477.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SecurityService\SecurityService_Url_wqsxzqrojlfbwj3xmqn5vi2gsla5q5aq\ysceyja3.tmp C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\AppCenter\c3f68d79-2e9d-4c57-bf3f-57489c789f23\Logs.db-journal C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\AppCenter\c3f68d79-2e9d-4c57-bf3f-57489c789f23\Logs.db-journal C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Windows\SysWOW64\Windupdt\winupdate.exe C:\Windows\SysWOW64\attrib.exe N/A
File opened for modification C:\Windows\SysWOW64\Windupdt\winupdate.exe C:\Windows\SysWOW64\Windupdt\winupdate.exe N/A
File created C:\Windows\system32\asw6fa158a367810641.tmp C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\system32\aswBoot.exe C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Avast Software\Avast\defs\24040405\db_wat.nmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\1033\uiLangRes.dll.sum C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\avast.local_vc142.crt.manifest.sum C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\SecureLine VPN\avast.local_vc142.crt\avast.local_vc142.crt.manifest.ipending.7c91ec19 C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\1033\aswClnTg.txt.sum C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Program Files\Avast Software\Driver Updater\avast.local_vc142.crt\api-ms-win-core-synch-l1-1-0.dll.ipending.5d115479 C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\avast-du\icarus.exe N/A
File created C:\Program Files\Avast Software\SecureLine VPN\avast.local_vc142.crt\msvcp140_1.dll.ipending.7c91ec19 C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-z1eogrra.tmp C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aebb.dll C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe N/A
File opened for modification C:\Program Files\Avast Software\Driver Updater\avast.local_vc142.crt\api-ms-win-core-console-l1-1-0.dll.ipending.5d115479 C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\avast-du\icarus.exe N/A
File opened for modification C:\Program Files\Avast Software\Driver Updater\avast.local_vc142.crt\api-ms-win-core-interlocked-l1-1-0.dll.ipending.5d115479 C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\avast-du\icarus.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page5.jpg C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\aswRvrt.dll C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\api-ms-win-core-profile-l1-1-0.dll.sum C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24040406\aswBoot64.dll.sum C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Cleanup\libwalocal.dll C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\sp002.gif C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll.sum C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\avast.local_vc142.crt.manifest C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24040406\db_fn.map C:\Program Files\Avast Software\Avast\defs\24040406\engsup.exe N/A
File created C:\Program Files\Avast Software\Driver Updater\avast.local_vc142.crt\api-ms-win-crt-multibyte-l1-1-0.dll.ipending.5d115479 C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\avast-du\icarus.exe N/A
File opened for modification C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-0.dll C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus.exe N/A
File opened for modification C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\product-def.xml C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avkmgr.cat C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24040405\aswc8edbdaabad46697.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\RescueDisk\aswecb60d2673beb3a3.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24040405\engsup.exe C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24040406\db_elfa.map C:\Program Files\Avast Software\Avast\defs\24040406\engsup.exe N/A
File created C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll.ipending.81f33ccc C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-2xctrxvs.tmp C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\idx\savapi4lib-win32-en.info.gz C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe N/A
File opened for modification C:\Program Files (x86)\TotalAV\SAVAPI\xbv00060.vdf C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24040405\asw2acd681e26abff0c.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\BrandingData\licensing\asw2ba1d072299031ee.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw20800b9229dc762c.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\ashServ.dll C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
File opened for modification C:\Program Files\Avast Software\SecureLine VPN\aswCmnIS.dll.ipending.7c91ec19 C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
File opened for modification C:\Program Files\Avast Software\Cleanup\libwavmodapi.dll C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24040406\db_cmd.map C:\Program Files\Avast Software\Avast\defs\24040406\engsup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Text.Encodings.Web.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-b3fbwdnl.tmp C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb002.gif C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
File created C:\Program Files\Avast Software\Avast\RescueDisk\asw962b588a80152a83.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\sbr.exe C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\SecureLine VPN\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-0.dll.ipending.7c91ec19 C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
File created C:\Program Files (x86)\TotalAV\ReachFramework.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\aswdccfcec849d7a4e4.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\SecureLine VPN\avast.local_vc142.crt\api-ms-win-crt-locale-l1-1-0.dll.ipending.7c91ec19 C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24040405\aswd70ed2de65db3f65.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\Licenses\jansson.txt C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Cleanup\aswProperty.dll C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus.exe N/A
File opened for modification C:\Program Files\Avast Software\Driver Updater\avast.local_vc142.crt\api-ms-win-core-libraryloader-l1-1-0.dll.ipending.5d115479 C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\avast-du\icarus.exe N/A
File created C:\Program Files\Avast Software\Avast\x86\asweb1709509d053383.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\ashBase.dll.sum C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Driver Updater\libcrypto-3-x64.dll C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\avast-du\icarus.exe N/A
File opened for modification C:\Program Files\Avast Software\SecureLine VPN\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll.ipending.7c91ec19 C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
File created C:\Program Files\Avast Software\SecureLine VPN\TAP\aswTap.inf.ipending.7c91ec19.lzma C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapi-product.conf C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page17.jpg C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
File created C:\Program Files\Avast Software\Avast\Licenses\aswf7f14573e371ec4a.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\ais_shl_mai_x64-8cc.vpx C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\SecureLine VPN\avast.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll.ipending.7c91ec19 C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
File opened for modification C:\Program Files\Avast Software\SecureLine VPN\3rdPartyLicenses\3rdparty.txt.ipending.7c91ec19 C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-jr10xl0b.tmp C:\Program Files (x86)\TotalAV\SecurityService.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\ELAMBKUP\asw2860543f2e5e85ec.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\msagent\SETA2CA.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\lhsp\tv\SETA861.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File created C:\Windows\lhsp\tv\SETA860.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File opened for modification C:\Windows\lhsp\help\SETA862.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File opened for modification C:\Windows\INF\SETA864.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File created C:\Windows\INF\oem2.PNF C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
File opened for modification C:\Windows\msagent\SETA2C9.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\INF\SETA2CB.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\AgentCtl.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\msagent\SETA2DF.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\TEMP C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe N/A
File created C:\Windows\ELAMBKUP\protected_elam.sys C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Windows\msagent\chars\Peedy.acs C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
File created C:\Windows\msagent\SETA2A4.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\INF\oem0.PNF C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
File opened for modification C:\Windows\INF\agtinst.inf C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\lhsp\tv\tv_enua.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File created C:\Windows\fonts\SETA863.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File opened for modification C:\Windows\INF\tv_enua.inf C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File opened for modification C:\Windows\ELAMBKUP\asw4f5466c7ce976611.tmp C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\msagent\SETA2C7.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\AgentAnm.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\intl\Agt0409.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\AgtCtl15.tlb C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\lhsp\help\SETA862.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File created C:\Windows\ELAMBKUP\protected_elam.sys C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Windows\INF\SETA2CB.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\help\SETA2DD.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\SETA2DF.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\TEMP C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
File opened for modification C:\Windows\TEMP C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe N/A
File created C:\Windows\msagent\SETA2C7.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\AgentPsh.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\AgentSvr.exe C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\lhsp\tv\SETA861.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File opened for modification C:\Windows\lhsp\help\tv_enua.hlp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File opened for modification C:\Windows\fonts\SETA863.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File opened for modification C:\Windows\fonts\andmoipa.ttf C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File created C:\Windows\ELAMBKUP\asw2860543f2e5e85ec.tmp C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
File created C:\Windows\msagent\SETA2B5.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\AgentDp2.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\SETA2C6.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\SETA2DC.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\msagent\intl\SETA2DE.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\ELAMBKUP\asw4f5466c7ce976611.tmp C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\msagent\chars\Bonzi.acs C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
File opened for modification C:\Windows\msagent\AgentDPv.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\AgentMPx.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\AgentSR.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\help\SETA2DD.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\SETA2B4.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\SETA2B5.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\msagent\SETA2C8.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\INF\SETA864.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File created C:\Windows\ELAMBKUP\asw8f14b22aed3848ff.tmp C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
File opened for modification C:\Windows\msagent\SETA2A4.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\msagent\SETA2B4.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\mslwvtts.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\INF\oem1.PNF C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
File created C:\Windows\msagent\SETA2C9.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\intl\SETA2DE.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\SETA2CA.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\lhsp\tv\SETA860.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A

Launches sc.exe

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Enumerates physical storage devices

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Program Files (x86)\TotalAV\SecurityService.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\notepad.exe
N/A N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A

NSIS installer

installer
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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 C:\Windows\system32\vssvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000 C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000 C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000 C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000 C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 C:\Windows\system32\vssvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr C:\Windows\system32\vssvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000 C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000 C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000 C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000 C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Program Files\Avast Software\SecureLine VPN\devcon.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Windows\system32\vssvc.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\Temp\asw.e4c80524bcab92d0\avast_free_antivirus_setup_online_x64.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\Temp\asw.07eb3d09eec69b9e\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\afwServ.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\defs\24040405\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Venom HVNC 5.0.6.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\setup\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\setup\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\afwServ.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\afwServ.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\common\icarus.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\Downloads\Blackkomet (6).exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\common\icarus.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\defs\24040405\engsup.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\Downloads\Blackkomet (6).exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Avast Software\Avast\setup\Sfx\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\common\icarus.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\defs\24040405\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\System32\WScript.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\Temp\asw.96452c189a09b96c\avast_free_antivirus_setup_online_x64.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\common\icarus.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Windows\SysWOW64\taskkill.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\SysWOW64\taskkill.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\defs\24040406\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\Temp\asw.07eb3d09eec69b9e\instup.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\Bios C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\Bios C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BiosReleaseDate C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BiosReleaseDate C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\Bios C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BiosReleaseDate C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Validation\{3C5422B3-D1E2-449E-A736-809C934C2F80} C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Validation\{3C5422B3-D1E2-449E-A736-809C934C2F80} C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Validation\{3C5422B3-D1E2-449E-A736-809C934C2F80} C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Validation C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Validation\{3C5422B3-D1E2-449E-A736-809C934C2F80} C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Validation\{3C5422B3-D1E2-449E-A736-809C934C2F80} C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Validation\{3C5422B3-D1E2-449E-A736-809C934C2F80} C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Validation\{3C5422B3-D1E2-449E-A736-809C934C2F80} C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Validation C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Validation\{3C5422B3-D1E2-449E-A736-809C934C2F80} C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Validation\{3C5422B3-D1E2-449E-A736-809C934C2F80} C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Validation\{3C5422B3-D1E2-449E-A736-809C934C2F80} C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
Key created \REGISTRY\USER\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\OneDriveSetup = 020000000000000000000000 C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\OneDriveSetup = 020000000000000000000000 C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FDF-1BF9-11D2-BAE8-00104B9E0792}\TypeLib C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{74179610-5A56-11CE-940F-0000C0C14E92}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}" C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: aswEngSrv.exe" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\setup\\selfdefense_x86_ais-*.vpx" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_UpdateSetup_Syncer = "72" C:\Program Files\Avast Software\Avast\setup\Sfx\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: Base.dll" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6CFC9BA3-FE87-11D2-9DCF-ED29FAFE371D}\ProxyStubClsid32 C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BDD1F04A-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}" C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Starting service: avast! Tools" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: gvma64.dat" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{EDDBDEA4-5C07-453F-BE8C-81D738984381}\1.0\0\win32 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\aswPatchMgt.dll" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BDD1F049-858B-11D1-B16A-00C0F0283628}\TypeLib\ = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}" C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.lwv\ = "LWVFile" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5BE8BDB-7DE6-11D0-91FE-00C04FD701A5}\ = "IAgentCtlAudioObject" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F4900F6B-055F-11D4-8F9B-00104BA312D6}\ProxyStubClsid32 C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: ais_cmp_bpc" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: prod-vps.vpx" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: ais_cmp_bpc" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BDD1F04C-858B-11D1-B16A-00C0F0283628} C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Threed.SSFrame.3 C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2C247F22-8591-11D1-B16A-00C0F0283628}\TypeLib C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: db_array.dat" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Uninstalling kernel driver: aswblog" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: api-ms-win-core-console-l1-1-0.dll" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FD8-1BF9-11D2-BAE8-00104B9E0792}\MiscStatus\1\ = "205201" C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Agent.Server\ = "Microsoft Agent Server 2.0" C:\Windows\msagent\AgentSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\BonziBUDDY.clsBBPlayer\Clsid\ = "{F4900F67-055F-11D4-8F9B-00104BA312D6}" C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\SfxInstProgress = "85" C:\Windows\Temp\asw.e4c80524bcab92d0\avast_free_antivirus_setup_online_x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\x86\\firefox_pass.dll" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A945AD04-B2D1-4701-874D-22B85B723D1A} C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628} C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C8A3DC00-8593-11D1-B16A-00C0F0283628} C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\ActiveSkin.SkinSource\CurVer\ = "ActiveSkin.SkinSource.1" C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2C247F21-8591-11D1-B16A-00C0F0283628}\TypeLib C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{065E6FD4-1BF9-11D2-BAE8-00104B9E0792}\TypeLib\Version = "3.0" C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Avast.AsOutExt.1\ = "Addin Class" C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: aswidsagent.exe" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\ActiveSkin.ComMorph\CLSID\ = "{322982E1-0855-11D3-9DCF-DDFB3AB09E18}" C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{35053A21-8589-11D1-B16A-00C0F0283628}\TypeLib C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: su_adapter.dll" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: wa_3rd_party_host_32.exe" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer32 C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FE9-1BF9-11D2-BAE8-00104B9E0792}\MiscStatus\ = "0" C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_UpdateSetup_Syncer = "77" C:\Program Files\Avast Software\Avast\setup\Sfx\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\ = "Addin Class" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F4900F67-055F-11D4-8F9B-00104BA312D6}\LocalServer32 C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\AvUninstallTimestamp = "0" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories\{0DE86A57-2BAA-11CF-A229-00AA003D7352} C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32\ = "C:\\Program Files\\Avast Software\\Avast\\x86\\aswAMSI.dll" C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628} C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}\Implemented Categories\{40FC6ED4-2438-11CF-A3DB-080036F12502} C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0A45DB4F-BD0D-11D2-8D14-00104B9E072A}\Implemented Categories C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: libwaheap.dll" C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\setup\\ais_cmp_ngt_x64-*.vpx" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\VersionIndependentProgID C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{53FA8D4D-2CDD-11D3-9DD0-D3CD4078982A}\ToolboxBitmap32 C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Threed.SSCommand\CurVer\ = "Threed.SSCommand.3" C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6B976287-3692-11D0-9B8A-0000C0F04C96} C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A7B93C83-7B81-11D0-AC5F-00C04FD97575} C:\Windows\msagent\AgentSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\AhResWS.dll" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\setup\\iplugins" C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\Implemented Categories\{0DE86A53-2BAA-11CF-A229-00AA003D7352} C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}" C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Adwind.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\TotalAV_Setup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Venom-RAT-HVNC-v5.0.6 (2).zip:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Venom-RAT-HVNC-v5.0.6 (4).zip:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 740976.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\avast_one_free_antivirus.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 966042.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 706741.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Venom-RAT-HVNC-v5.0.6 (3).zip:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 514983.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 689927.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Bonzi.zip:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Venom-RAT-HVNC-v5.0.6 (1).zip:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 875244.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Blackkomet (6).exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Venom-RAT-HVNC-v5.0.6.zip:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Venom-RAT-HVNC-v5.0.6 (5).zip:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\VenomRAT-V5.6-HVNC.rar:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 465216.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 944011.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 499058.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File created C:\Users\Admin\AppData\Local\Temp\7zO448C87BD\Keylogger.exe:Zone.Identifier C:\Program Files\7-Zip\7zFM.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 104570.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 130061.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Runs .reg file with regedit

Description Indicator Process Target
N/A N/A N/A N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Windows\Temp\asw.e4c80524bcab92d0\avast_free_antivirus_setup_online_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.e4c80524bcab92d0\avast_free_antivirus_setup_online_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\avDump.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\avDump.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Keylogger.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Keylogger.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Plugins\Keylogger.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Plugins\Keylogger.exe N/A
N/A N/A C:\Users\Admin\srvhost.exe N/A
N/A N/A C:\Users\Admin\srvhost.exe N/A
N/A N/A C:\Users\Admin\srvhost.exe N/A
N/A N/A C:\Users\Admin\srvhost.exe N/A
N/A N/A C:\Users\Admin\srvhost.exe N/A
N/A N/A C:\Users\Admin\srvhost.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: 33 N/A C:\Windows\msagent\AgentSvr.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\msagent\AgentSvr.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: 33 N/A C:\Windows\msagent\AgentSvr.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\msagent\AgentSvr.exe N/A
Token: 33 N/A C:\Windows\msagent\AgentSvr.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\msagent\AgentSvr.exe N/A
Token: 32 N/A C:\Windows\Temp\asw.e4c80524bcab92d0\avast_free_antivirus_setup_online_x64.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\instup.exe N/A
Token: 32 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\instup.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 32 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
Token: SeImpersonatePrivilege N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
Token: SeImpersonatePrivilege N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
Token: 33 N/A C:\Windows\msagent\AgentSvr.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\msagent\AgentSvr.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
Token: 35 N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE N/A
N/A N/A C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
N/A N/A C:\Windows\Temp\asw.e4c80524bcab92d0\avast_free_antivirus_setup_online_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\sbr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\avDump.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24040405\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\avDump.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24040405\engsup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Keylogger.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Plugins\Keylogger.exe N/A
N/A N/A C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
N/A N/A C:\Windows\Temp\asw.96452c189a09b96c\avast_free_antivirus_setup_online_x64.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\sbr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\avDump.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1896 wrote to memory of 5112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 5112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 5084 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 5084 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1896 wrote to memory of 3576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy service COM API

ransomware

Views/modifies file attributes

evasion
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\.html

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffef2a63cb8,0x7ffef2a63cc8,0x7ffef2a63cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1952 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2544 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3156 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3176 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4728 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3448 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3240 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5464 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5144 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4496 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5316 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3812 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5764 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5980 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4904 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6788 /prefetch:1

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe

"C:\Users\Admin\AppData\Local\Temp\Temp1_Bonzi.zip\BonziBuddy432.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\BonziBuddy432\Runtimes\CheckRuntimes.bat" "

C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE

MSAGENT.EXE

C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe

tv_enua.exe

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentCtl.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentDPv.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\mslwvtts.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentDP2.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentMPx.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentSR.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentPsh.dll"

C:\Windows\msagent\AgentSvr.exe

"C:\Windows\msagent\AgentSvr.exe" /regserver

C:\Windows\SysWOW64\grpconv.exe

grpconv.exe -o

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s C:\Windows\lhsp\tv\tv_enua.dll

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s C:\Windows\lhsp\tv\tvenuax.dll

C:\Windows\SysWOW64\grpconv.exe

grpconv.exe -o

C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE

"C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE"

C:\Windows\msagent\AgentSvr.exe

C:\Windows\msagent\AgentSvr.exe -Embedding

C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE

"C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE"

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004C4 0x00000000000004C0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6988 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5940 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7064 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7388 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7288 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6776 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7844 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7996 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8144 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8556 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9096 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8912 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9600 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9732 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10052 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10568 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10588 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8768 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11116 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11084 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11372 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11636 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10276 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11288 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8204 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11320 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7516 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1940,4317101702359542601,17148000839798569936,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8324 /prefetch:8

C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe

"C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe"

C:\Windows\Temp\asw.e4c80524bcab92d0\avast_free_antivirus_setup_online_x64.exe

"C:\Windows\Temp\asw.e4c80524bcab92d0\avast_free_antivirus_setup_online_x64.exe" /cookie:mmm_sft_dlp_000_119_h /ga_clientid:7ad7165a-04e7-408a-8bae-3106b420f8e4 /edat_dir:C:\Windows\Temp\asw.e4c80524bcab92d0

C:\Windows\Temp\asw.07eb3d09eec69b9e\instup.exe

"C:\Windows\Temp\asw.07eb3d09eec69b9e\instup.exe" /sfx:lite /sfxstorage:C:\Windows\Temp\asw.07eb3d09eec69b9e /edition:1 /prod:ais /stub_context:3a70bae4-43d5-468c-b6bd-602527bcbece:9938128 /guid:f82295ac-b69c-4015-b55b-5c299e34af0e /ga_clientid:7ad7165a-04e7-408a-8bae-3106b420f8e4 /cookie:mmm_sft_dlp_000_119_h /ga_clientid:7ad7165a-04e7-408a-8bae-3106b420f8e4 /edat_dir:C:\Windows\Temp\asw.e4c80524bcab92d0

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe shell32.dll,Control_RunDLL speech.cpl,,0

C:\Windows\system32\RunDll32.exe

C:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL speech.cpl,,0

C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe

"C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\instup.exe" /sfx /sfxstorage:C:\Windows\Temp\asw.07eb3d09eec69b9e /edition:1 /prod:ais /stub_context:3a70bae4-43d5-468c-b6bd-602527bcbece:9938128 /guid:f82295ac-b69c-4015-b55b-5c299e34af0e /ga_clientid:7ad7165a-04e7-408a-8bae-3106b420f8e4 /cookie:mmm_sft_dlp_000_119_h /edat_dir:C:\Windows\Temp\asw.e4c80524bcab92d0 /online_installer

C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe

"C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe" -checkGToolbar -elevated

C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe

"C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe" /check_secure_browser

C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe

"C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe" -checkChrome -elevated

C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe

"C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe" -checkChromeReactivation -elevated -bc=AVFC

C:\Users\Public\Documents\aswOfferTool.exe

"C:\Users\Public\Documents\aswOfferTool.exe" -checkChromeReactivation -bc=AVFC

C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe

"C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe" -checkChromeReactivation -elevated -bc=AVFC

C:\Users\Public\Documents\aswOfferTool.exe

"C:\Users\Public\Documents\aswOfferTool.exe" -checkChromeReactivation -bc=AVFC

C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe

"C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\aswOfferTool.exe" -checkChrome -elevated

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffef2a63cb8,0x7ffef2a63cc8,0x7ffef2a63cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1844 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2576 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4824 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3632 /prefetch:8

C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\sbr.exe

"C:\Windows\Temp\asw.07eb3d09eec69b9e\New_180317dc\sbr.exe" 6644 "Avast Antivirus setup" "Avast Antivirus is being installed. Do not shut down your computer!"

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5312 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3856 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5620 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4928 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5384 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5800 /prefetch:1

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswRdr2.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswHwid.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswVmm.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswRvrt.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /elaminst C:\Windows\system32\drivers\aswElam.sys

C:\Program Files\Avast Software\Avast\AvEmUpdate.exe

"C:\Program Files\Avast Software\Avast\AvEmUpdate.exe" /installer /reg

C:\Program Files\Avast Software\Avast\AvEmUpdate.exe

"C:\Program Files\Avast Software\Avast\AvEmUpdate.exe" /installer1

C:\Program Files\Avast Software\Avast\x86\RegSvr.exe

"C:\Program Files\Avast Software\Avast\x86\RegSvr.exe" "C:\Program Files\Avast Software\Avast\x86\aswAMSI.dll"

C:\Program Files\Avast Software\Avast\x86\avDump.exe

"C:\Program Files\Avast Software\Avast\x86\avDump.exe" --pid 9708 --exception_ptr 0367EC64 --thread_id 9740 --dump_level 0 --handle_data 1 --dump_file "C:\ProgramData\Avast Software\Avast\log\unp31098716162313630x-unhandled.mdmp" --comment "" --min_interval 60

C:\Program Files\Avast Software\Avast\RegSvr.exe

"C:\Program Files\Avast Software\Avast\RegSvr.exe" "C:\Program Files\Avast Software\Avast\aswAMSI.dll"

C:\Program Files\Avast Software\Avast\x86\RegSvr.exe

"C:\Program Files\Avast Software\Avast\x86\RegSvr.exe" "C:\Program Files\Avast Software\Avast\x86\asOutExt.dll"

C:\Program Files\Avast Software\Avast\RegSvr.exe

"C:\Program Files\Avast Software\Avast\RegSvr.exe" "C:\Program Files\Avast Software\Avast\asOutExt.dll"

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" /install

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /catinstall:"C:\Program Files\Avast Software\Avast\setup\crts.cat" /basename:pkg_{af98c830-4f53-4176-a7b0-ec21fc603adc}.cat /crtid:D9D1E63123760F5EE0F69B6613E0933E9CBCAB11

C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe

"C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe" /skip_uptime /skip_remediations

C:\Program Files\Avast Software\Avast\defs\24040405\engsup.exe

"C:\Program Files\Avast Software\Avast\defs\24040405\engsup.exe" /prepare_definitions_folder

C:\Program Files\Avast Software\Avast\wsc_proxy.exe

"C:\Program Files\Avast Software\Avast\wsc_proxy.exe" /svc /register /ppl_svc

C:\Program Files\Avast Software\Avast\avDump.exe

"C:\Program Files\Avast Software\Avast\avDump.exe" --pid 5160 --exception_ptr 000000B12D4FE7A0 --thread_id 2440 --dump_level 0 --handle_data 1 --dump_file "C:\ProgramData\Avast Software\Avast\log\unp31098716180591530x-manual.mdmp" --comment "Cause: VectoredExceptionHandler Exception: sd is not loaded" --min_interval 60

C:\Program Files\Avast Software\Avast\defs\24040405\engsup.exe

"C:\Program Files\Avast Software\Avast\defs\24040405\engsup.exe" /get_latest_ga_client_id /get_latest_landingpageid_cookie /get_latest_pagedownloadid_cookie /get_latest_trpar

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5980 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6300 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6476 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3492 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4852 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5540 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 /prefetch:8

C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Keylogger.exe

"C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Keylogger.exe"

C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Venom HVNC 5.0.6.exe

"C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Venom HVNC 5.0.6.exe"

C:\Windows\system32\schtasks.exe

schtasks /run /TN "Update"

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Windows\System32\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Del.vbs"

C:\Users\Admin\srvhost.exe

"C:\Users\Admin\srvhost.exe"

C:\Windows\SysWOW64\netsh.exe

netsh firewall add allowedprogram "C:\Users\Admin\srvhost.exe" "srvhost.exe" ENABLE

C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Plugins\Keylogger.exe

"C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Plugins\Keylogger.exe"

C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Stub\Client.exe

"C:\Users\Admin\AppData\Local\Temp\Temp1_Venom-RAT-HVNC-v5.0.6 (3).zip\Venom-RAT-HVNC-v5.0.6-2022-main\Stub\Client.exe"

C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe

"C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe"

C:\Windows\Temp\asw.96452c189a09b96c\avast_free_antivirus_setup_online_x64.exe

"C:\Windows\Temp\asw.96452c189a09b96c\avast_free_antivirus_setup_online_x64.exe" /cookie:mmm_sft_dlp_000_119_h /ga_clientid:d2651d2d-3f68-4cb3-9ae1-6e94e5142f69 /edat_dir:C:\Windows\Temp\asw.96452c189a09b96c

C:\Program Files\Avast Software\Avast\setup\instup.exe

"C:\Program Files\Avast Software\Avast\setup\instup.exe" /copy_sfx:C:\Windows\Temp\asw.a29c56d40c61929b\instup.exe /wait

C:\Program Files\Avast Software\Avast\setup\instup.exe

"C:\Program Files\Avast Software\Avast\setup\instup.exe" /copy_sfx:C:\Windows\Temp\asw.a29c56d40c61929b\Instup.dll /wait

C:\Program Files\Avast Software\Avast\setup\Sfx\instup.exe

"C:\Program Files\Avast Software\Avast\setup\Sfx\instup.exe" /sfx:lite /sfxstorage:C:\Windows\Temp\asw.a29c56d40c61929b /edition:1 /prod:ais /stub_context:8c9f2be4-b9d2-4d51-88cb-39a4c421c860:9938128 /ga_clientid:d2651d2d-3f68-4cb3-9ae1-6e94e5142f69 /cookie:mmm_sft_dlp_000_119_h /ga_clientid:d2651d2d-3f68-4cb3-9ae1-6e94e5142f69 /edat_dir:C:\Windows\Temp\asw.96452c189a09b96c

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6180 /prefetch:2

C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe

"C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe" /sfx /sfxstorage:C:\Windows\Temp\asw.a29c56d40c61929b /edition:1 /prod:ais /stub_context:8c9f2be4-b9d2-4d51-88cb-39a4c421c860:9938128 /ga_clientid:d2651d2d-3f68-4cb3-9ae1-6e94e5142f69 /cookie:mmm_sft_dlp_000_119_h /edat_dir:C:\Windows\Temp\asw.96452c189a09b96c /online_installer

C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\sbr.exe

"C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\sbr.exe" 9164 "Avast Antivirus setup" "Avast Antivirus is being installed. Do not shut down your computer!"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4040 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5972 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6204 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswRdr2.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswHwid.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswVmm.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswRvrt.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /elaminst C:\Windows\system32\drivers\aswElam.sys

C:\Program Files\Avast Software\Avast\AvEmUpdate.exe

"C:\Program Files\Avast Software\Avast\AvEmUpdate.exe" /installer /reg

C:\Program Files\Avast Software\Avast\AvEmUpdate.exe

"C:\Program Files\Avast Software\Avast\AvEmUpdate.exe" /installer1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1828,5774497115728720040,12805108318402539540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3032 /prefetch:8

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\VenomRAT-V5.6-HVNC.rar"

C:\Program Files\Avast Software\Avast\x86\RegSvr.exe

"C:\Program Files\Avast Software\Avast\x86\RegSvr.exe" /U "C:\Program Files\Avast Software\Avast\x86\aswAMSI.dll"

C:\Program Files\Avast Software\Avast\RegSvr.exe

"C:\Program Files\Avast Software\Avast\RegSvr.exe" /U "C:\Program Files\Avast Software\Avast\aswAMSI.dll"

C:\Program Files\Avast Software\Avast\x86\RegSvr.exe

"C:\Program Files\Avast Software\Avast\x86\RegSvr.exe" "C:\Program Files\Avast Software\Avast\x86\aswAMSI.dll"

C:\Program Files\Avast Software\Avast\x86\avDump.exe

"C:\Program Files\Avast Software\Avast\x86\avDump.exe" --pid 10012 --exception_ptr 0313F40C --thread_id 10588 --dump_level 0 --handle_data 1 --dump_file "C:\ProgramData\Avast Software\Avast\log\unp310987161375343452x-unhandled.mdmp" --comment "" --min_interval 60

C:\Program Files\Avast Software\Avast\RegSvr.exe

"C:\Program Files\Avast Software\Avast\RegSvr.exe" "C:\Program Files\Avast Software\Avast\aswAMSI.dll"

C:\Program Files\Avast Software\Avast\x86\RegSvr.exe

"C:\Program Files\Avast Software\Avast\x86\RegSvr.exe" "C:\Program Files\Avast Software\Avast\x86\asOutExt.dll"

C:\Program Files\Avast Software\Avast\RegSvr.exe

"C:\Program Files\Avast Software\Avast\RegSvr.exe" "C:\Program Files\Avast Software\Avast\asOutExt.dll"

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" /install

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /catinstall:"C:\Program Files\Avast Software\Avast\setup\crts.cat" /basename:pkg_{af98c830-4f53-4176-a7b0-ec21fc603adc}.cat /crtid:D9D1E63123760F5EE0F69B6613E0933E9CBCAB11

C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe

"C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe" /skip_uptime /skip_remediations

C:\Program Files\Avast Software\Avast\defs\24040406\engsup.exe

"C:\Program Files\Avast Software\Avast\defs\24040406\engsup.exe" /prepare_definitions_folder

C:\Program Files\Avast Software\Avast\wsc_proxy.exe

"C:\Program Files\Avast Software\Avast\wsc_proxy.exe" /svc /register /ppl_svc

C:\Program Files\Avast Software\Avast\avDump.exe

"C:\Program Files\Avast Software\Avast\avDump.exe" --pid 10420 --exception_ptr 000000E3D9FDE950 --thread_id 10412 --dump_level 0 --handle_data 1 --dump_file "C:\ProgramData\Avast Software\Avast\log\unp310987161388163344x-manual.mdmp" --comment "Cause: VectoredExceptionHandler Exception: sd is not loaded" --min_interval 60

C:\Program Files\Avast Software\Avast\defs\24040406\engsup.exe

"C:\Program Files\Avast Software\Avast\defs\24040406\engsup.exe" /get_latest_ga_client_id /get_latest_landingpageid_cookie /get_latest_pagedownloadid_cookie /get_latest_trpar

C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\sbr.exe

"C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\sbr.exe" notify_ui 0 257

C:\Users\Admin\AppData\Local\Temp\7zO448C87BD\Keylogger.exe

"C:\Users\Admin\AppData\Local\Temp\7zO448C87BD\Keylogger.exe"

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffef2a63cb8,0x7ffef2a63cc8,0x7ffef2a63cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1796 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2548 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5368 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4984 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3964 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5720 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5732 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6012 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6360 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6452 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6544 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1848 /prefetch:1

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6188 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4064 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6248 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1708 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7376 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7672 /prefetch:8

C:\Users\Admin\Downloads\avast_one_free_antivirus.exe

"C:\Users\Admin\Downloads\avast_one_free_antivirus.exe"

C:\Windows\Temp\asw.2fe6ff6fb447ef86\avast_one_essential_setup_online_x64.exe

"C:\Windows\Temp\asw.2fe6ff6fb447ef86\avast_one_essential_setup_online_x64.exe" /cookie:mmm_sft_dlp_000_119_h:dlid_AVAST-ONE-FREE-WIN-PPC /ga_clientid:2f3832ac-2a7c-4056-8cfb-39da349c5130 /edat_dir:C:\Windows\Temp\asw.2fe6ff6fb447ef86 /geo:GB

C:\Program Files\Avast Software\Avast\setup\instup.exe

"C:\Program Files\Avast Software\Avast\setup\instup.exe" /copy_sfx:C:\Windows\Temp\asw.44b0bcd3b23079e0\instup.exe /wait

C:\Program Files\Avast Software\Avast\setup\instup.exe

"C:\Program Files\Avast Software\Avast\setup\instup.exe" /copy_sfx:C:\Windows\Temp\asw.44b0bcd3b23079e0\Instup.dll /wait

C:\Program Files\Avast Software\Avast\setup\Sfx\instup.exe

"C:\Program Files\Avast Software\Avast\setup\Sfx\instup.exe" /sfx:lite /sfxstorage:C:\Windows\Temp\asw.44b0bcd3b23079e0 /edition:21 /prod:ais /stub_context:0dc34ec2-9e9a-47cc-86e9-513ebe64f570:9937104 /ga_clientid:2f3832ac-2a7c-4056-8cfb-39da349c5130 /cookie:mmm_sft_dlp_000_119_h:dlid_AVAST-ONE-FREE-WIN-PPC /ga_clientid:2f3832ac-2a7c-4056-8cfb-39da349c5130 /edat_dir:C:\Windows\Temp\asw.2fe6ff6fb447ef86 /geo:GB

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6380 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6196 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6392 /prefetch:1

C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe

"C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\instup.exe" /sfx /sfxstorage:C:\Windows\Temp\asw.44b0bcd3b23079e0 /edition:21 /prod:ais /stub_context:0dc34ec2-9e9a-47cc-86e9-513ebe64f570:9937104 /ga_clientid:2f3832ac-2a7c-4056-8cfb-39da349c5130 /cookie:mmm_sft_dlp_000_119_h:dlid_AVAST-ONE-FREE-WIN-PPC /edat_dir:C:\Windows\Temp\asw.2fe6ff6fb447ef86 /geo:GB /online_installer

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7948 /prefetch:1

C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\sbr.exe

"C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\sbr.exe" 1624 "Avast Antivirus setup" "Avast Antivirus is being installed. Do not shut down your computer!"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8160 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7732 /prefetch:1

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7768 /prefetch:1

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /netservice:sw_aswNdis

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /netservice:aswNdisFlt /catalog:aswNdisFlt.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswRdr2.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswHwid.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswVmm.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswRvrt.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /elaminst C:\Windows\system32\drivers\aswElam.sys

C:\Program Files\Avast Software\Avast\AvEmUpdate.exe

"C:\Program Files\Avast Software\Avast\AvEmUpdate.exe" /installer /reg

C:\Program Files\Avast Software\Avast\AvEmUpdate.exe

"C:\Program Files\Avast Software\Avast\AvEmUpdate.exe" /installer1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=7584 /prefetch:2

C:\Program Files\Avast Software\Avast\x86\RegSvr.exe

"C:\Program Files\Avast Software\Avast\x86\RegSvr.exe" /U "C:\Program Files\Avast Software\Avast\x86\aswAMSI.dll"

C:\Program Files\Avast Software\Avast\RegSvr.exe

"C:\Program Files\Avast Software\Avast\RegSvr.exe" /U "C:\Program Files\Avast Software\Avast\aswAMSI.dll"

C:\Program Files\Avast Software\Avast\x86\RegSvr.exe

"C:\Program Files\Avast Software\Avast\x86\RegSvr.exe" "C:\Program Files\Avast Software\Avast\x86\aswAMSI.dll"

C:\Program Files\Avast Software\Avast\RegSvr.exe

"C:\Program Files\Avast Software\Avast\RegSvr.exe" "C:\Program Files\Avast Software\Avast\aswAMSI.dll"

C:\Program Files\Avast Software\Avast\x86\RegSvr.exe

"C:\Program Files\Avast Software\Avast\x86\RegSvr.exe" "C:\Program Files\Avast Software\Avast\x86\asOutExt.dll"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8332 /prefetch:1

C:\Program Files\Avast Software\Avast\RegSvr.exe

"C:\Program Files\Avast Software\Avast\RegSvr.exe" "C:\Program Files\Avast Software\Avast\asOutExt.dll"

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" /install

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /catinstall:"C:\Program Files\Avast Software\Avast\setup\crts.cat" /basename:pkg_{af98c830-4f53-4176-a7b0-ec21fc603adc}.cat /crtid:D9D1E63123760F5EE0F69B6613E0933E9CBCAB11

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7972 /prefetch:8

C:\Program Files\Avast Software\Avast\avast_cleanup_setup.exe

"C:\Program Files\Avast Software\Avast\avast_cleanup_setup.exe" /silent /nouiafterinstall /source:avast_one /edat_dir:C:\Windows\Temp\asw.2fe6ff6fb447ef86 /geo:GB

C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\common\icarus.exe

C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\common\icarus.exe /icarus-info-path:C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\icarus-info.xml /install /silent /nouiafterinstall /source:avast_one /edat_dir:C:\Windows\Temp\asw.2fe6ff6fb447ef86 /geo:GB

C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus.exe

C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus.exe /silent /nouiafterinstall /source:avast_one /edat_dir:C:\Windows\Temp\asw.2fe6ff6fb447ef86 /geo:GB /er_master:master_ep_aa703a2a-e5d1-460b-a27f-cf025cc075fb /er_ui:ui_ep_7bba7a43-baea-44cf-84ce-2deaa7f3aa41 /er_slave:avast-tu_slave_ep_e63d57a9-2de6-45f2-83c2-53ce5ebcb040 /slave:avast-tu

C:\Program Files\Avast Software\Cleanup\pdfix.exe

"C:\Program Files\Avast Software\Cleanup\pdfix.exe" /fixifeo

C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe

"C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe"

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k netprofm -p -s NlaSvc

C:\Program Files\Avast Software\Avast\avast_driverupdater_setup.exe

"C:\Program Files\Avast Software\Avast\avast_driverupdater_setup.exe" /silent /nouiafterinstall /source:avast_one /edat_dir:C:\Windows\Temp\asw.2fe6ff6fb447ef86 /geo:GB

C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\common\icarus.exe

C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\common\icarus.exe /icarus-info-path:C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\icarus-info.xml /install /silent /nouiafterinstall /source:avast_one /edat_dir:C:\Windows\Temp\asw.2fe6ff6fb447ef86 /geo:GB

C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\avast-du\icarus.exe

C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\avast-du\icarus.exe /silent /nouiafterinstall /source:avast_one /edat_dir:C:\Windows\Temp\asw.2fe6ff6fb447ef86 /geo:GB /er_master:master_ep_7d62b104-626d-46f0-81af-a7c856f0a70f /er_ui:ui_ep_5650cf51-767f-496c-ade1-f56a1056bd29 /er_slave:avast-du_slave_ep_da48c08c-a1fa-411b-b628-d5949b48e62d /slave:avast-du

C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe

"C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe"

C:\Program Files\Avast Software\Avast\avast_secureline_setup.exe

"C:\Program Files\Avast Software\Avast\avast_secureline_setup.exe" /silent /ShowVpnGui=0 /nouiafterinstall /source:avast_one /edat_dir:C:\Windows\Temp\asw.2fe6ff6fb447ef86 /geo:GB

C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\common\icarus.exe

C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\common\icarus.exe /icarus-info-path:C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\icarus-info.xml /install /silent /ShowVpnGui:0 /nouiafterinstall /source:avast_one /edat_dir:C:\Windows\Temp\asw.2fe6ff6fb447ef86 /geo:GB

C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe

C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe /silent /ShowVpnGui:0 /nouiafterinstall /source:avast_one /edat_dir:C:\Windows\Temp\asw.2fe6ff6fb447ef86 /geo:GB /er_master:master_ep_9d9835a6-35a7-4175-b672-93ab33046418 /er_ui:ui_ep_286ad354-e636-4a4b-83bd-952782f9a6ae /er_slave:avast-vpn_slave_ep_308125b6-7f62-4d57-99b4-d68cf1558d58 /slave:avast-vpn

C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe

"C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe"

C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe

"C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe" /reg

C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe

"C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe" /reg

C:\Program Files\Avast Software\SecureLine VPN\devcon.exe

"C:\Program Files\Avast Software\SecureLine VPN\devcon.exe" find aswWintun

C:\Program Files\Avast Software\SecureLine VPN\devcon.exe

"C:\Program Files\Avast Software\SecureLine VPN\devcon.exe" find aswTap

C:\Program Files\Avast Software\SecureLine VPN\devcon.exe

"C:\Program Files\Avast Software\SecureLine VPN\devcon.exe" find aswWintun

C:\Program Files\Avast Software\SecureLine VPN\devcon.exe

"C:\Program Files\Avast Software\SecureLine VPN\devcon.exe" find aswTap

C:\Program Files\Avast Software\SecureLine VPN\devcon.exe

"C:\Program Files\Avast Software\SecureLine VPN\devcon.exe" find aswTap

C:\Program Files\Avast Software\SecureLine VPN\devcon.exe

"C:\Program Files\Avast Software\SecureLine VPN\devcon.exe" driverfiles aswWintun

C:\Program Files\Avast Software\SecureLine VPN\devcon.exe

"C:\Program Files\Avast Software\SecureLine VPN\devcon.exe" dp_enum

C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe

"C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe" /skip_uptime /skip_remediations

C:\Program Files\Avast Software\Avast\defs\24040406\engsup.exe

"C:\Program Files\Avast Software\Avast\defs\24040406\engsup.exe" /prepare_definitions_folder

C:\Program Files\Avast Software\Avast\wsc_proxy.exe

"C:\Program Files\Avast Software\Avast\wsc_proxy.exe" /svc /register /ppl_svc

C:\Program Files\Avast Software\Avast\avDump.exe

"C:\Program Files\Avast Software\Avast\avDump.exe" --pid 9540 --exception_ptr 0000004FD514E800 --thread_id 9520 --dump_level 0 --handle_data 1 --dump_file "C:\ProgramData\Avast Software\Avast\log\unp310987163264306238x-manual.mdmp" --comment "Cause: VectoredExceptionHandler Exception: sd is not loaded" --min_interval 60

C:\Program Files\Avast Software\Avast\afwServ.exe

"C:\Program Files\Avast Software\Avast\afwServ.exe"

C:\Program Files\Avast Software\Avast\afwServ.exe

"C:\Program Files\Avast Software\Avast\afwServ.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8572 /prefetch:8

C:\Program Files\Avast Software\Avast\afwServ.exe

"C:\Program Files\Avast Software\Avast\afwServ.exe"

C:\Users\Admin\Downloads\TotalAV_Setup.exe

"C:\Users\Admin\Downloads\TotalAV_Setup.exe"

C:\Windows\SysWOW64\Wbem\wmic.exe

wmic.exe path Win32_Process where executablepath="C:\\Program Files (x86)\\TotalAV\\TotalAV.exe" delete

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /f /T /IM "avupdate.exe"

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /f /T /IM "Update.Win.exe"

C:\Program Files\Avast Software\Avast\afwServ.exe

"C:\Program Files\Avast Software\Avast\afwServ.exe"

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /f /T /IM "PasswordExtension.Win.exe"

C:\Program Files\Avast Software\Avast\defs\24040406\engsup.exe

"C:\Program Files\Avast Software\Avast\defs\24040406\engsup.exe" /get_latest_ga_client_id /get_latest_landingpageid_cookie /get_latest_pagedownloadid_cookie /get_latest_trpar

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\sbr.exe

"C:\Program Files\Avast Software\Avast\setup\Sfx\New_180317dc\sbr.exe" notify_ui 0 5377

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\srtasks.exe

C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6308 /prefetch:1

C:\Program Files (x86)\TotalAV\SecurityService.exe

"C:\Program Files (x86)\TotalAV\SecurityService.exe" "--install"

C:\Windows\SysWOW64\sc.exe

"sc" create SecurityService start= auto binpath= "\"C:\Program Files (x86)\TotalAV\SecurityService.exe\"" displayname= "PC Security Management Service" obj= LocalSystem password= ""

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5796 -ip 5796

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5796 -s 4560

C:\Program Files (x86)\TotalAV\TotalAV.exe

"C:\Program Files (x86)\TotalAV\TotalAV.exe" --installed --installer="C:\Users\Admin\Downloads\TotalAV_Setup.exe"

C:\Program Files (x86)\TotalAV\SecurityService.exe

"C:\Program Files (x86)\TotalAV\SecurityService.exe"

C:\Program Files (x86)\TotalAV\SecurityService.exe

"C:\Program Files (x86)\TotalAV\SecurityService.exe" --run-service --run-service-id=2788

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6372 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4876 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8044 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2940 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5204 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8984 /prefetch:1

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4876 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6392 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9024 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9456 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2952 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=9592 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6840 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=9364 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8472 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10124 /prefetch:8

C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe

"C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe" --config=avupdate-savapilib-engine.conf --check-product --no-dns-resolve --internet-srvs=https://definition.protected.net --peak-handling-srvs=https://definition.protected.net

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8996 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10048 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9064 /prefetch:8

C:\Users\Admin\Downloads\Blackkomet (6).exe

"C:\Users\Admin\Downloads\Blackkomet (6).exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads\Blackkomet (6).exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Users\Admin\Downloads\Blackkomet (6).exe

"C:\Users\Admin\Downloads\Blackkomet (6).exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads\Blackkomet (6).exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Users\Admin\Downloads\Blackkomet (6).exe

"C:\Users\Admin\Downloads\Blackkomet (6).exe"

C:\Users\Admin\Downloads\Blackkomet (6).exe

"C:\Users\Admin\Downloads\Blackkomet (6).exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads\Blackkomet (6).exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads\Blackkomet (6).exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads" +s +h

C:\Users\Admin\Downloads\Blackkomet (6).exe

"C:\Users\Admin\Downloads\Blackkomet (6).exe"

C:\Users\Admin\Downloads\Blackkomet (6).exe

"C:\Users\Admin\Downloads\Blackkomet (6).exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads\Blackkomet (6).exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads\Blackkomet (6).exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Users\Admin\Downloads\Blackkomet (6).exe

"C:\Users\Admin\Downloads\Blackkomet (6).exe"

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Users\Admin\AppData\Roaming\svchost‌.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads\Blackkomet (6).exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Users\Admin\Downloads\Blackkomet (6).exe

"C:\Users\Admin\Downloads\Blackkomet (6).exe"

C:\Users\Admin\Downloads\Blackkomet (6).exe

"C:\Users\Admin\Downloads\Blackkomet (6).exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads\Blackkomet (6).exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads\Blackkomet (6).exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Users\Admin\Downloads\Blackkomet (6).exe

"C:\Users\Admin\Downloads\Blackkomet (6).exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads\Blackkomet (6).exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads" +s +h

C:\Users\Admin\Downloads\Blackkomet (6).exe

"C:\Users\Admin\Downloads\Blackkomet (6).exe"

C:\Users\Admin\Downloads\Blackkomet (6).exe

"C:\Users\Admin\Downloads\Blackkomet (6).exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads\Blackkomet (6).exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Users\Admin\Downloads\Blackkomet (6).exe

"C:\Users\Admin\Downloads\Blackkomet (6).exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads\Blackkomet (6).exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads\Blackkomet (6).exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Users\Admin\Downloads" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8272 /prefetch:1

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=9324 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=9252 /prefetch:8

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=9640 /prefetch:8

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1880,2010121048987354497,10801804219560769355,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9860 /prefetch:8

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 10968 -ip 10968

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 10968 -s 104

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Users\Admin\Downloads\NJRat (2).exe

"C:\Users\Admin\Downloads\NJRat (2).exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Users\Admin\Downloads\NJRat (2).exe

"C:\Users\Admin\Downloads\NJRat (2).exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Users\Admin\Downloads\NJRat (2).exe

"C:\Users\Admin\Downloads\NJRat (2).exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Users\Admin\Downloads\NJRat (2).exe

"C:\Users\Admin\Downloads\NJRat (2).exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Users\Admin\Downloads\NJRat (2).exe

"C:\Users\Admin\Downloads\NJRat (2).exe"

C:\Users\Admin\Downloads\NJRat (2).exe

"C:\Users\Admin\Downloads\NJRat (2).exe"

C:\Users\Admin\Downloads\NJRat (2).exe

"C:\Users\Admin\Downloads\NJRat (2).exe"

C:\Users\Admin\Downloads\NJRat (2).exe

"C:\Users\Admin\Downloads\NJRat (2).exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\netsh.exe

netsh firewall add allowedprogram "C:\Users\Admin\Downloads\NJRat (2).exe" "NJRat (2).exe" ENABLE

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Program Files (x86)\TotalAV\TotalAV.exe

"C:\Program Files (x86)\TotalAV\TotalAV.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\notepad.exe

notepad

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt" +s +h

C:\Windows\SysWOW64\attrib.exe

attrib "C:\Windows\SysWOW64\Windupdt\winupdate.exe" +s +h

C:\Windows\SysWOW64\Windupdt\winupdate.exe

"C:\Windows\system32\Windupdt\winupdate.exe"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\SysWOW64\notepad.exe

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 web-static.archive.org udp
US 207.241.237.2:443 web-static.archive.org tcp
US 207.241.237.2:443 web-static.archive.org tcp
US 207.241.237.2:443 web-static.archive.org tcp
US 207.241.237.2:443 web-static.archive.org tcp
US 207.241.237.2:443 web-static.archive.org tcp
US 207.241.237.2:443 web-static.archive.org tcp
US 207.241.224.2:445 archive.org tcp
US 207.241.239.241:443 polyfill.archive.org tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
US 207.241.239.241:443 polyfill.archive.org tcp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 207.241.224.2:443 archive.org udp
GB 2.23.92.217:443 www.bing.com tcp
GB 2.23.92.217:443 www.bing.com tcp
N/A 224.0.0.251:5353 udp
GB 2.23.92.203:443 www.bing.com tcp
GB 2.23.92.203:443 www.bing.com tcp
GB 2.23.92.203:443 www.bing.com tcp
GB 2.23.92.203:443 www.bing.com tcp
IE 20.190.159.2:443 login.microsoftonline.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 198.187.29.31:443 bonzibuddy.org tcp
US 198.187.29.31:443 bonzibuddy.org tcp
US 198.187.29.31:80 bonzibuddy.org tcp
US 198.187.29.31:80 bonzibuddy.org tcp
GB 2.23.92.217:443 www.bing.com tcp
DE 140.82.121.4:443 github.com tcp
DE 140.82.121.4:443 github.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.109.133:443 objects.githubusercontent.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
US 140.82.112.21:443 collector.github.com tcp
US 140.82.112.21:443 collector.github.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 140.82.112.21:443 collector.github.com tcp
DE 140.82.121.6:443 api.github.com tcp
DE 140.82.121.6:443 api.github.com tcp
DE 140.82.121.6:443 api.github.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 35.227.233.104:443 en.softonic.com tcp
US 35.227.233.104:443 en.softonic.com tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
GB 104.103.241.197:443 images.sftcdn.net tcp
GB 104.103.241.197:443 images.sftcdn.net tcp
GB 104.103.241.197:443 images.sftcdn.net tcp
US 35.227.233.104:443 en.softonic.com tcp
US 35.227.233.104:443 en.softonic.com tcp
DE 142.250.185.130:443 securepubads.g.doubleclick.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
FR 13.249.9.6:443 sdk.privacy-center.org tcp
DE 142.250.185.130:443 securepubads.g.doubleclick.net tcp
FR 13.249.10.203:443 c.amazon-adsystem.com tcp
DE 142.250.185.130:443 securepubads.g.doubleclick.net udp
FR 13.249.10.203:443 c.amazon-adsystem.com tcp
FR 52.222.165.229:443 www.datadoghq-browser-agent.com tcp
US 172.67.41.60:443 btloader.com tcp
US 8.8.8.8:53 203.10.249.13.in-addr.arpa udp
US 8.8.8.8:53 17.201.222.52.in-addr.arpa udp
FR 52.84.174.60:443 config.aps.amazon-adsystem.com tcp
US 54.198.142.251:443 prod.us-east-1.cxm-bcn.publisher-services.amazon.dev tcp
US 130.211.23.194:443 api.btloader.com tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.22.52.86:443 cdn.id5-sync.com tcp
US 151.101.1.91:443 sc.sftcdn.net udp
US 130.211.23.194:443 api.btloader.com udp
NL 139.45.197.253:443 notix.io tcp
US 8.8.8.8:53 86.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 253.197.45.139.in-addr.arpa udp
US 172.67.74.173:443 wct.softonic.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
DE 172.217.16.129:443 e7a7d668414aed98b39d0682c7c75258.safeframe.googlesyndication.com tcp
FR 13.32.145.80:443 api.privacy-center.org tcp
US 34.120.63.153:443 prebid.media.net tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
IE 54.217.98.240:443 ap.lijit.com tcp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
DE 172.217.16.196:443 www.google.com tcp
IE 52.48.120.118:443 ad.360yield.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
FR 52.222.159.154:443 aax.amazon-adsystem.com tcp
DE 157.90.0.38:443 shb.richaudience.com tcp
DE 157.90.0.38:443 shb.richaudience.com tcp
DE 157.90.0.38:443 shb.richaudience.com tcp
DE 172.217.16.130:443 googleads.g.doubleclick.net tcp
DE 172.217.16.130:443 googleads.g.doubleclick.net tcp
DE 172.217.16.130:443 googleads.g.doubleclick.net udp
DE 172.217.16.206:443 analytics.google.com tcp
DE 142.250.186.65:443 tpc.googlesyndication.com tcp
BE 64.233.166.157:443 stats.g.doubleclick.net tcp
DE 172.217.16.196:443 www.google.com udp
DE 157.90.33.121:443 uidsync.net tcp
US 172.67.74.173:443 wct.softonic.com tcp
DE 142.250.185.78:443 ampcid.google.com tcp
DE 142.250.186.65:443 tpc.googlesyndication.com udp
DE 172.217.16.196:443 www.google.com udp
BE 64.233.166.157:443 stats.g.doubleclick.net udp
DE 157.90.33.121:443 uidsync.net tcp
DE 142.250.186.131:443 www.google.co.uk tcp
DE 157.90.33.121:443 uidsync.net tcp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 118.120.48.52.in-addr.arpa udp
US 8.8.8.8:53 196.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 238.181.250.142.in-addr.arpa udp
US 8.8.8.8:53 154.159.222.52.in-addr.arpa udp
US 8.8.8.8:53 130.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 38.0.90.157.in-addr.arpa udp
US 8.8.8.8:53 204.135.128.178.in-addr.arpa udp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 206.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 65.186.250.142.in-addr.arpa udp
US 8.8.8.8:53 157.166.233.64.in-addr.arpa udp
US 8.8.8.8:53 121.33.90.157.in-addr.arpa udp
US 8.8.8.8:53 78.185.250.142.in-addr.arpa udp
US 8.8.8.8:53 67.185.250.142.in-addr.arpa udp
US 8.8.8.8:53 170.185.250.142.in-addr.arpa udp
GB 104.77.160.139:443 qsearch-a.akamaihd.net tcp
IE 54.239.33.159:443 aax-eu.amazon-adsystem.com tcp
DE 216.58.206.33:443 cdn.ampproject.org tcp
DE 216.58.206.33:443 cdn.ampproject.org tcp
DE 216.58.206.33:443 cdn.ampproject.org tcp
DE 216.58.206.33:443 cdn.ampproject.org tcp
DE 216.58.206.33:443 cdn.ampproject.org tcp
DE 142.250.186.65:443 tpc.googlesyndication.com udp
DE 142.250.185.130:443 securepubads.g.doubleclick.net udp
US 151.101.1.108:443 acdn.adnxs.com tcp
GB 23.37.0.235:443 ads.pubmatic.com tcp
DE 162.55.233.29:443 sync.richaudience.com tcp
US 104.18.38.76:443 js-sec.indexww.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
FR 52.222.169.84:443 public.servenobid.com tcp
US 67.202.105.21:443 ssc-cms.33across.com tcp
DE 51.89.9.252:443 onetag-sys.com tcp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 csync.loopme.me udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 jadserve.postrelease.com udp
FR 99.86.91.65:443 api-2-0.spot.im tcp
NL 35.214.160.140:443 csync.loopme.me tcp
IE 34.249.188.79:443 match.prod.bidr.io tcp
IE 52.51.67.139:443 jadserve.postrelease.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 198.47.127.18:443 image8.pubmatic.com tcp
US 3.228.105.225:443 cs-server-s2s.yellowblue.io tcp
US 52.223.40.198:443 match.adsrvr.org tcp
US 54.197.132.136:443 sync.srv.stackadapt.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 192.132.33.67:443 bttrack.com tcp
DE 51.89.9.252:443 onetag-sys.com udp
US 216.200.232.253:443 sync.mathtag.com tcp
NL 213.19.162.90:443 pixel-eu.rubiconproject.com tcp
FR 154.54.250.151:443 ads.stickyadstv.com tcp
FR 91.134.110.133:443 ssbsync.smartadserver.com tcp
US 80.77.87.163:443 cs.admanmedia.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
NL 213.19.162.90:443 pixel-eu.rubiconproject.com tcp
DE 172.217.18.2:443 cm.g.doubleclick.net tcp
IE 63.34.247.201:443 g2.gumgum.com tcp
DE 3.73.17.159:443 rtb.mfadsrvr.com tcp
GB 23.214.129.249:443 secure-assets.rubiconproject.com tcp
DE 172.217.18.2:443 cm.g.doubleclick.net udp
FR 18.155.129.13:443 cs-rtb.minutemedia-prebid.com tcp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
GB 173.222.13.62:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 79.188.249.34.in-addr.arpa udp
US 8.8.8.8:53 139.67.51.52.in-addr.arpa udp
US 8.8.8.8:53 225.105.228.3.in-addr.arpa udp
US 8.8.8.8:53 136.132.197.54.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 67.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 90.162.19.213.in-addr.arpa udp
US 8.8.8.8:53 133.110.134.91.in-addr.arpa udp
US 8.8.8.8:53 151.250.54.154.in-addr.arpa udp
US 8.8.8.8:53 2.18.217.172.in-addr.arpa udp
US 8.8.8.8:53 201.247.34.63.in-addr.arpa udp
US 8.8.8.8:53 163.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 159.17.73.3.in-addr.arpa udp
US 8.8.8.8:53 253.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 162.185.250.142.in-addr.arpa udp
US 172.67.147.64:443 dipnahorra.com tcp
US 172.67.147.64:443 dipnahorra.com tcp
DE 142.250.185.226:443 adclick.g.doubleclick.net tcp
NL 77.245.57.72:443 sync.adkernel.com tcp
US 172.64.145.29:443 cdn.dxkulture.com tcp
NL 81.17.55.173:443 rtb-csync.smartadserver.com tcp
IE 54.194.237.178:443 ads.servenobid.com tcp
GB 96.17.179.184:80 apps.identrust.com tcp
DK 37.157.3.26:443 c1.adform.net tcp
DE 18.153.34.228:443 match.sharethrough.com tcp
FR 18.164.52.46:443 s.ad.smaato.net tcp
US 8.8.8.8:53 26.3.157.37.in-addr.arpa udp
US 8.8.8.8:53 use.fontawesome.com udp
US 172.64.207.38:443 use.fontawesome.com tcp
JP 124.146.153.164:443 tg.socdm.com tcp
US 104.26.14.10:443 lib.wtg-ads.com tcp
US 104.26.14.10:443 lib.wtg-ads.com tcp
JP 124.146.153.164:443 tg.socdm.com tcp
US 172.64.207.38:443 use.fontawesome.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
GB 23.48.165.147:443 consent.cookiebot.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net udp
DE 37.252.171.52:443 secure.adnxs.com tcp
GB 173.222.13.62:443 eus.rubiconproject.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
GB 23.53.172.14:443 imgsct.cookiebot.com tcp
IE 34.247.233.198:443 usersync.gumgum.com tcp
DE 216.58.206.46:443 fundingchoicesmessages.google.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 35.244.159.8:443 us-u.openx.net tcp
US 35.244.159.8:443 us-u.openx.net udp
IE 54.73.253.201:443 pr-bh.ybp.yahoo.com tcp
US 52.3.64.127:443 sync.ipredictive.com tcp
IE 52.18.182.124:443 ce.lijit.com tcp
US 69.166.1.66:443 sync.go.sonobi.com tcp
DE 3.75.62.37:443 ups.analytics.yahoo.com tcp
DE 3.75.62.37:443 ups.analytics.yahoo.com tcp
US 107.23.76.88:443 ssp.disqus.com tcp
NL 147.75.84.158:443 prebid.a-mo.net tcp
NL 193.0.160.131:443 p.rfihub.com tcp
GB 23.37.0.27:443 hbx.media.net tcp
US 107.23.76.88:443 ssp.disqus.com tcp
NL 213.19.162.90:443 pixel-eu.rubiconproject.com tcp
US 45.55.126.71:443 ads.dxkulture.com tcp
US 38.91.45.7:443 match.deepintent.com tcp
US 70.42.32.255:443 b1sync.zemanta.com tcp
US 80.77.87.108:443 eexsync.com tcp
US 45.55.126.71:443 ads.dxkulture.com tcp
US 8.8.8.8:53 255.32.42.70.in-addr.arpa udp
US 8.8.8.8:53 108.87.77.80.in-addr.arpa udp
DE 172.217.16.206:443 analytics.google.com udp
DE 142.250.186.131:443 www.google.co.uk udp
DE 216.58.206.46:443 fundingchoicesmessages.google.com udp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 80.77.87.163:443 cs.admanmedia.com tcp
GB 23.53.172.14:443 imgsct.cookiebot.com tcp
DE 216.58.206.33:443 cdn.ampproject.org udp
NL 216.58.206.70:443 12712129.fls.doubleclick.net tcp
NL 216.58.206.70:443 12712129.fls.doubleclick.net udp
DE 142.250.185.106:443 ajax.googleapis.com tcp
SE 142.250.74.131:443 csi.gstatic.com tcp
GB 104.97.4.23:443 is3-ssl.mzstatic.com tcp
GB 104.97.4.23:443 is3-ssl.mzstatic.com tcp
GB 104.97.4.23:443 is3-ssl.mzstatic.com tcp
GB 104.103.158.228:443 js-cdn.music.apple.com tcp
GB 104.103.158.228:443 js-cdn.music.apple.com tcp
GB 173.222.12.246:443 www.apple.com tcp
GB 173.222.12.246:443 www.apple.com tcp
GB 173.222.12.246:443 www.apple.com tcp
GB 96.17.179.177:443 amp-api-edge.apps.apple.com tcp
GB 104.97.4.23:443 is3-ssl.mzstatic.com tcp
GB 104.97.4.23:443 is3-ssl.mzstatic.com tcp
GB 104.97.4.23:443 is3-ssl.mzstatic.com tcp
GB 104.97.4.23:443 is3-ssl.mzstatic.com tcp
DE 142.250.185.226:443 adclick.g.doubleclick.net udp
GB 104.103.197.205:443 www.avast.com tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
GB 104.103.251.197:443 static.avast.com tcp
GB 23.37.1.19:443 assets.adobedtm.com tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
GB 104.103.251.197:443 static.avast.com tcp
GB 104.103.251.197:443 static.avast.com tcp
GB 104.103.251.197:443 static.avast.com tcp
GB 104.103.251.197:443 static.avast.com tcp
GB 104.103.251.197:443 static.avast.com tcp
GB 104.103.251.197:443 static.avast.com tcp
NL 20.50.2.44:443 mstatic.avast.com tcp
FR 18.164.52.40:443 script.hotjar.com tcp
GB 173.222.8.158:443 www.nortonlifelock.com tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
GB 104.103.251.197:443 static.avast.com tcp
GB 173.222.12.168:443 684dd325.akstat.io tcp
US 172.64.155.119:443 geolocation.onetrust.com tcp
IE 54.194.78.109:443 dpm.demdex.net tcp
GB 13.224.245.89:443 static.hotjar.com tcp
GB 104.97.4.131:443 c.go-mpulse.net tcp
IE 54.220.209.169:443 dpm.demdex.net tcp
IE 34.249.255.49:443 cm.everesttech.net tcp
IE 66.235.152.221:443 otr.kaspersky.co.uk tcp
US 104.17.209.240:443 siteintercept.qualtrics.com tcp
GB 96.17.178.157:443 x5s5cj3acgzj2zqp7jia-pc2sn5-910ce1d6a-clientnsv4-s.akamaihd.net tcp
GB 104.77.160.144:443 191-101-209-39_s-104-77-160-144_ts-1712323152-clienttons-s.akamaihd.net tcp
GB 96.17.178.157:443 x5s5cj3acgzj2zqp7jia-pc2sn5-910ce1d6a-clientnsv4-s.akamaihd.net tcp
GB 104.77.160.145:443 191-101-209-39_s-104-77-160-144_ts-1712323152-clienttons-s.akamaihd.net tcp
US 172.64.155.119:443 geolocation.onetrust.com tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
DE 142.250.185.78:443 ampcid.google.com udp
US 34.117.223.223:443 analytics.avcdn.net udp
GB 23.208.241.36:443 bits.avcdn.net tcp
US 34.117.223.223:80 analytics.avcdn.net tcp
GB 23.73.139.56:443 iavs9x.u.avcdn.net tcp
DE 142.250.181.238:80 www.google-analytics.com tcp
GB 23.73.139.56:443 iavs9x.u.avcdn.net tcp
GB 23.73.139.56:443 iavs9x.u.avcdn.net tcp
SE 142.250.74.131:443 csi.gstatic.com udp
GB 23.73.139.56:443 iavs9x.u.avcdn.net tcp
GB 23.73.139.56:443 iavs9x.u.avcdn.net tcp
GB 23.73.139.56:80 iavs9x.u.avcdn.net tcp
US 52.9.111.109:80 www.bonzi.com tcp
US 52.9.111.109:80 www.bonzi.com tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
DE 142.250.181.238:80 www.google-analytics.com tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 104.18.33.97:443 opensea.io tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
GB 173.222.13.40:80 x2.c.lencr.org tcp
GB 173.222.13.40:80 x2.c.lencr.org tcp
US 8.8.8.8:53 d3176133.iavs9x.u.avast.com udp
US 8.8.8.8:53 d3176133.iavs9x.u.avast.com udp
US 8.8.8.8:53 l2983942.iavs9x.u.avast.com udp
US 8.8.8.8:53 l7814800.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 y8002308.iavs9x.u.avast.com udp
US 8.8.8.8:53 d3176133.iavs9x.u.avast.com udp
US 8.8.8.8:53 d3176133.iavs9x.u.avast.com udp
US 8.8.8.8:53 g1928587.iavs9x.u.avast.com udp
US 8.8.8.8:53 l2983942.iavs9x.u.avast.com udp
US 8.8.8.8:53 l7814800.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 y8002308.iavs9x.u.avast.com udp
GB 23.73.139.81:80 y8002308.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 y8002308.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 y8002308.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 y8002308.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 y8002308.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 y8002308.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 y8002308.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 y8002308.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 y8002308.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 y8002308.iavs9x.u.avast.com tcp
US 8.8.8.8:53 b7210692.iavs9x.u.avast.com udp
US 8.8.8.8:53 b7210692.iavs9x.u.avast.com udp
US 8.8.8.8:53 m0658849.iavs9x.u.avast.com udp
US 8.8.8.8:53 p1043812.iavs9x.u.avast.com udp
US 8.8.8.8:53 r6726306.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 s1843811.iavs9x.u.avast.com udp
US 8.8.8.8:53 b7210692.iavs9x.u.avast.com udp
US 8.8.8.8:53 b7210692.iavs9x.u.avast.com udp
US 8.8.8.8:53 m0658849.iavs9x.u.avast.com udp
US 8.8.8.8:53 p1043812.iavs9x.u.avast.com udp
US 8.8.8.8:53 r6726306.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 s1843811.iavs9x.u.avast.com udp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
US 8.8.8.8:53 m0658849.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 m0658849.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 r4427608.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 r6726306.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 r9319236.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 s-vps18tiny.avcdn.net udp
US 8.8.8.8:53 w5805295.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 m0658849.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 m0658849.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 r4427608.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 r6726306.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 r9319236.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 s-vps18tiny.avcdn.net udp
US 8.8.8.8:53 w5805295.vps18tiny.u.avcdn.net udp
GB 23.73.139.43:80 w5805295.vps18tiny.u.avcdn.net tcp
GB 23.73.139.43:80 w5805295.vps18tiny.u.avcdn.net tcp
GB 23.73.139.43:80 w5805295.vps18tiny.u.avcdn.net tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 34.117.223.223:443 v7event.stats.avast.com tcp
US 34.117.223.223:443 v7event.stats.avast.com tcp
DE 142.250.185.168:443 ssl.google-analytics.com tcp
US 34.111.24.1:443 ipm.avcdn.net tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 34.117.223.223:443 v7event.stats.avast.com tcp
GB 23.73.139.43:80 w5805295.vps18tiny.u.avcdn.net tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 2.23.92.203:443 r.bing.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 2.23.92.213:443 r.bing.com tcp
GB 2.23.92.213:443 r.bing.com tcp
GB 2.23.92.217:443 r.bing.com tcp
GB 2.23.92.217:443 r.bing.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.43:80 w5805295.vps18tiny.u.avcdn.net tcp
GB 23.73.139.43:80 w5805295.vps18tiny.u.avcdn.net tcp
US 185.199.111.154:443 github.githubassets.com tcp
DE 140.82.121.3:443 github.com tcp
GB 23.73.139.43:80 w5805295.vps18tiny.u.avcdn.net tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
US 140.82.114.22:443 collector.github.com tcp
DE 140.82.121.6:443 api.github.com tcp
GB 23.73.139.43:80 w5805295.vps18tiny.u.avcdn.net tcp
US 34.149.149.62:443 ip-info.ff.avast.com tcp
GB 23.73.139.35:80 emupdate.avcdn.net tcp
US 34.117.223.223:443 v7event.stats.avast.com tcp
GB 23.73.139.35:443 emupdate.avcdn.net tcp
GB 23.73.139.10:80 uupdate.avast.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
GB 23.37.1.70:80 s-vps18tiny.avcdn.net tcp
US 8.8.8.8:53 s-overseer.avcdn.net udp
GB 23.73.139.32:443 s-overseer.avcdn.net tcp
DE 216.58.212.132:443 google-analytics.com tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 34.117.223.223:443 v7.stats.avast.com tcp
US 34.117.223.223:80 v7.stats.avast.com tcp
DE 142.250.181.238:80 www.google-analytics.com tcp
US 52.9.111.109:80 www.bonzi.com tcp
US 52.9.111.109:80 www.bonzi.com tcp
US 104.18.33.97:443 opensea.io tcp
US 52.9.111.109:80 www.bonzi.com tcp
US 208.95.112.1:80 ip-api.com tcp
DE 140.82.121.5:443 api.github.com tcp
US 34.117.223.223:80 v7.stats.avast.com tcp
DE 142.250.181.238:80 www.google-analytics.com tcp
GB 23.73.139.81:443 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.81:443 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.81:443 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.81:443 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.81:443 s1843811.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 s1843811.iavs9x.u.avast.com tcp
DE 142.250.181.238:80 www.google-analytics.com tcp
US 34.117.223.223:443 v7.stats.avast.com tcp
US 34.117.223.223:443 v7.stats.avast.com tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 8.8.8.8:53 p1043812.iavs9x.u.avast.com udp
US 8.8.8.8:53 p1043812.iavs9x.u.avast.com udp
US 8.8.8.8:53 r6726306.iavs9x.u.avast.com udp
US 8.8.8.8:53 r9319236.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 y9830512.iavs9x.u.avast.com udp
US 8.8.8.8:53 z4055813.iavs9x.u.avast.com udp
US 8.8.8.8:53 p1043812.iavs9x.u.avast.com udp
US 8.8.8.8:53 p1043812.iavs9x.u.avast.com udp
US 8.8.8.8:53 r6726306.iavs9x.u.avast.com udp
US 8.8.8.8:53 r9319236.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 y9830512.iavs9x.u.avast.com udp
US 8.8.8.8:53 z4055813.iavs9x.u.avast.com udp
GB 23.73.139.81:80 z4055813.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 z4055813.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 z4055813.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 z4055813.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 z4055813.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 z4055813.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 z4055813.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 z4055813.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 z4055813.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 z4055813.iavs9x.u.avast.com tcp
US 8.8.8.8:53 m0658849.iavs9x.u.avast.com udp
US 8.8.8.8:53 m0658849.iavs9x.u.avast.com udp
US 8.8.8.8:53 r3802239.iavs9x.u.avast.com udp
US 8.8.8.8:53 r6726306.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 t1024579.iavs9x.u.avast.com udp
US 8.8.8.8:53 w5805295.iavs9x.u.avast.com udp
US 8.8.8.8:53 m0658849.iavs9x.u.avast.com udp
US 8.8.8.8:53 m0658849.iavs9x.u.avast.com udp
US 8.8.8.8:53 r3802239.iavs9x.u.avast.com udp
US 8.8.8.8:53 r6726306.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 t1024579.iavs9x.u.avast.com udp
US 8.8.8.8:53 w5805295.iavs9x.u.avast.com udp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
US 8.8.8.8:53 l2983942.vps18.u.avcdn.net udp
US 8.8.8.8:53 l2983942.vps18.u.avcdn.net udp
US 8.8.8.8:53 l7814800.vps18.u.avcdn.net udp
US 8.8.8.8:53 s-vps18.avcdn.net udp
US 8.8.8.8:53 s1843811.vps18.u.avcdn.net udp
US 8.8.8.8:53 w5805295.vps18.u.avcdn.net udp
US 8.8.8.8:53 z4055813.vps18.u.avcdn.net udp
US 8.8.8.8:53 l2983942.vps18.u.avcdn.net udp
US 8.8.8.8:53 l2983942.vps18.u.avcdn.net udp
US 8.8.8.8:53 l7814800.vps18.u.avcdn.net udp
US 8.8.8.8:53 s-vps18.avcdn.net udp
US 8.8.8.8:53 s1843811.vps18.u.avcdn.net udp
US 8.8.8.8:53 w5805295.vps18.u.avcdn.net udp
US 8.8.8.8:53 z4055813.vps18.u.avcdn.net udp
GB 23.73.139.43:80 z4055813.vps18.u.avcdn.net tcp
GB 23.73.139.43:80 z4055813.vps18.u.avcdn.net tcp
GB 23.73.139.43:80 z4055813.vps18.u.avcdn.net tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 34.117.223.223:443 v7event.stats.avast.com tcp
US 34.117.223.223:443 v7event.stats.avast.com tcp
DE 142.250.185.168:443 ssl.google-analytics.com tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 34.117.223.223:443 v7event.stats.avast.com tcp
GB 23.73.139.43:80 z4055813.vps18.u.avcdn.net tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
US 172.67.128.20:443 venom.software tcp
US 172.67.128.20:443 venom.software tcp
US 52.9.111.109:80 www.bonzi.com tcp
US 52.9.111.109:80 www.bonzi.com tcp
US 162.159.138.60:443 player.vimeo.com tcp
FR 92.222.211.20:443 venomcontrol.com tcp
FR 92.222.211.20:443 venomcontrol.com tcp
FR 92.222.211.20:443 venomcontrol.com tcp
FR 92.222.211.20:443 venomcontrol.com tcp
FR 92.222.211.20:443 venomcontrol.com tcp
FR 92.222.211.20:443 venomcontrol.com tcp
US 172.67.38.66:443 embed.tawk.to tcp
GB 151.101.62.109:443 f.vimeocdn.com tcp
GB 151.101.62.109:443 f.vimeocdn.com tcp
GB 151.101.62.109:443 f.vimeocdn.com tcp
US 151.101.0.217:443 i.vimeocdn.com tcp
US 34.120.202.204:443 fresnel.vimeocdn.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
US 192.0.77.48:443 s.w.org tcp
US 8.8.8.8:53 217.0.101.151.in-addr.arpa udp
US 8.8.8.8:53 204.202.120.34.in-addr.arpa udp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
US 172.67.38.66:443 vsa29.tawk.to tcp
US 172.67.38.66:443 vsa29.tawk.to tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
US 104.22.24.131:443 vsa29.tawk.to tcp
GB 2.23.92.217:443 th.bing.com tcp
GB 2.23.92.217:443 th.bing.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net udp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.43:80 z4055813.vps18.u.avcdn.net tcp
GB 23.73.139.43:80 z4055813.vps18.u.avcdn.net tcp
US 185.199.111.154:443 github.githubassets.com tcp
DE 140.82.121.3:443 github.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
DE 140.82.121.5:443 api.github.com tcp
GB 23.73.139.43:80 z4055813.vps18.u.avcdn.net tcp
GB 23.73.139.43:80 z4055813.vps18.u.avcdn.net tcp
US 34.149.149.62:443 ip-info.ff.avast.com tcp
GB 23.73.139.35:443 emupdate.avcdn.net tcp
US 34.117.223.223:443 v7event.stats.avast.com tcp
GB 23.73.139.35:80 emupdate.avcdn.net tcp
GB 23.73.139.82:80 uupdate.avast.com tcp
GB 23.37.1.70:80 honzik.avcdn.net tcp
US 8.8.8.8:53 s-overseer.avcdn.net udp
GB 23.73.139.32:443 s-overseer.avcdn.net tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
DE 216.58.212.132:443 google-analytics.com tcp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 34.117.223.223:443 v7.stats.avast.com tcp
US 52.8.62.213:80 www.bonzi.com tcp
US 52.8.62.213:80 www.bonzi.com tcp
US 52.8.62.213:80 www.bonzi.com tcp
GB 2.23.92.213:443 th.bing.com tcp
GB 2.23.92.213:443 th.bing.com tcp
GB 2.23.92.217:443 th.bing.com tcp
GB 2.23.92.217:443 th.bing.com tcp
GB 2.23.92.213:443 th.bing.com tcp
US 52.167.30.171:443 fpt.microsoft.com tcp
IE 68.219.88.225:443 r.g.bing.com tcp
DE 185.85.15.47:443 www.kaspersky.co.uk tcp
DE 185.85.15.47:443 www.kaspersky.co.uk tcp
IE 52.19.85.222:443 5015.xg4ken.com tcp
US 216.239.32.21:443 sgtm.kaspersky.de tcp
GB 2.23.92.204:443 service.maxymiser.net tcp
DE 185.85.15.46:443 api-router.kaspersky-labs.com tcp
DE 185.85.15.46:443 api-router.kaspersky-labs.com tcp
DE 185.85.15.46:443 api-router.kaspersky-labs.com tcp
DE 185.85.15.46:443 api-router.kaspersky-labs.com tcp
DE 185.85.15.46:443 api-router.kaspersky-labs.com tcp
DE 185.85.15.46:443 api-router.kaspersky-labs.com tcp
DE 185.85.15.23:443 media.kaspersky.com tcp
DE 185.85.15.46:443 api-router.kaspersky-labs.com tcp
DE 185.85.15.46:443 api-router.kaspersky-labs.com tcp
DE 185.85.15.46:443 api-router.kaspersky-labs.com tcp
DE 185.85.15.46:443 api-router.kaspersky-labs.com tcp
IE 52.19.147.219:443 kaspersky.demdex.net tcp
DE 185.85.15.47:443 www.kaspersky.co.uk tcp
IE 66.235.152.156:443 otr.kaspersky.co.uk tcp
IE 54.220.209.169:443 dpm.demdex.net tcp
GB 23.48.165.147:443 consent.cookiebot.com tcp
IE 34.249.255.49:443 cm.everesttech.net tcp
US 8.8.8.8:53 219.147.19.52.in-addr.arpa udp
US 8.8.8.8:53 kp-chat.craft-talk.com udp
US 8.8.8.8:53 consentcdn.cookiebot.com udp
FI 65.109.109.243:443 kp-chat.craft-talk.com tcp
GB 23.53.172.14:443 consentcdn.cookiebot.com tcp
FI 65.109.109.243:443 kp-chat.craft-talk.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
GB 104.103.197.205:443 www.avast.com tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
US 8.8.8.8:53 static3.avast.com udp
GB 23.37.1.19:443 assets.adobedtm.com tcp
GB 173.222.8.158:443 www.nortonlifelock.com tcp
NL 20.50.2.44:443 mstatic.avast.com tcp
US 172.64.155.119:443 geolocation.onetrust.com tcp
GB 104.103.251.197:443 static3.avast.com tcp
FR 18.164.52.73:443 script.hotjar.com tcp
FR 13.249.9.110:443 widget.trustpilot.com tcp
US 34.117.223.223:443 v7.stats.avast.com udp
FR 3.162.38.9:443 static.hotjar.com tcp
US 34.117.223.223:443 v7.stats.avast.com tcp
DE 172.217.16.206:443 analytics.google.com udp
US 8.8.8.8:53 c.go-mpulse.net udp
GB 104.97.4.131:443 c.go-mpulse.net tcp
DE 172.217.16.206:443 analytics.google.com tcp
US 104.17.208.240:443 znb3hblkjhhpwrz9k-gendigital.siteintercept.qualtrics.com tcp
IE 3.250.252.63:443 mcafeeinc.demdex.net tcp
IE 66.235.152.156:443 mcafee12.tt.omtrdc.net tcp
BE 64.233.167.154:443 stats.g.doubleclick.net udp
BE 64.233.167.154:443 stats.g.doubleclick.net tcp
DE 172.217.16.196:443 www.google.com udp
DE 142.250.186.131:443 www.google.co.uk udp
DE 172.217.16.196:443 www.google.com tcp
DE 142.250.186.131:443 www.google.co.uk tcp
GB 173.222.12.168:443 684dd325.akstat.io tcp
GB 23.208.241.36:443 bits.avcdn.net tcp
US 52.9.111.109:80 www.bonzi.com tcp
US 52.9.111.109:80 www.bonzi.com tcp
US 34.149.149.62:443 ip-info.ff.avast.com tcp
DE 142.250.181.238:80 www.youtube.com tcp
US 34.117.223.223:80 v7.stats.avast.com tcp
GB 23.37.1.70:443 s-iavast.avcdn.net tcp
GB 23.73.137.233:443 udp
US 34.117.223.223:443 v7.stats.avast.com tcp
US 34.117.223.223:443 v7.stats.avast.com tcp
DE 142.250.181.238:80 www.youtube.com tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 8.8.8.8:53 d3176133.iavs9x.u.avast.com udp
US 8.8.8.8:53 d3176133.iavs9x.u.avast.com udp
US 8.8.8.8:53 h4305360.iavs9x.u.avast.com udp
US 8.8.8.8:53 h4444966.iavs9x.u.avast.com udp
US 8.8.8.8:53 l2983942.iavs9x.u.avast.com udp
US 8.8.8.8:53 n2833777.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 d3176133.iavs9x.u.avast.com udp
US 8.8.8.8:53 d3176133.iavs9x.u.avast.com udp
US 8.8.8.8:53 h4305360.iavs9x.u.avast.com udp
US 8.8.8.8:53 h4444966.iavs9x.u.avast.com udp
US 8.8.8.8:53 l2983942.iavs9x.u.avast.com udp
US 8.8.8.8:53 n2833777.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
GB 23.73.139.56:80 n2833777.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 n2833777.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 n2833777.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 n2833777.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 n2833777.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 n2833777.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 n2833777.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 n2833777.iavs9x.u.avast.com tcp
GB 23.73.139.81:80 n2833777.iavs9x.u.avast.com tcp
US 8.8.8.8:53 p1043812.iavs9x.u.avast.com udp
US 8.8.8.8:53 p1043812.iavs9x.u.avast.com udp
US 8.8.8.8:53 p9854759.iavs9x.u.avast.com udp
US 8.8.8.8:53 r3802239.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 t1024579.iavs9x.u.avast.com udp
US 8.8.8.8:53 w5805295.iavs9x.u.avast.com udp
GB 2.23.92.217:443 sydney.bing.com tcp
US 8.8.8.8:53 p1043812.iavs9x.u.avast.com udp
US 8.8.8.8:53 p1043812.iavs9x.u.avast.com udp
US 8.8.8.8:53 p9854759.iavs9x.u.avast.com udp
US 8.8.8.8:53 r3802239.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 t1024579.iavs9x.u.avast.com udp
US 8.8.8.8:53 w5805295.iavs9x.u.avast.com udp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
US 8.8.8.8:53 g1928587.vps18.u.avcdn.net udp
US 8.8.8.8:53 g1928587.vps18.u.avcdn.net udp
US 8.8.8.8:53 l4691727.vps18.u.avcdn.net udp
US 8.8.8.8:53 n2833777.vps18.u.avcdn.net udp
US 8.8.8.8:53 r0965026.vps18.u.avcdn.net udp
US 8.8.8.8:53 s-vps18.avcdn.net udp
US 8.8.8.8:53 t1024579.vps18.u.avcdn.net udp
US 8.8.8.8:53 g1928587.vps18.u.avcdn.net udp
US 8.8.8.8:53 g1928587.vps18.u.avcdn.net udp
US 8.8.8.8:53 l4691727.vps18.u.avcdn.net udp
US 8.8.8.8:53 n2833777.vps18.u.avcdn.net udp
US 8.8.8.8:53 r0965026.vps18.u.avcdn.net udp
US 8.8.8.8:53 s-vps18.avcdn.net udp
US 8.8.8.8:53 t1024579.vps18.u.avcdn.net udp
GB 23.73.139.43:80 t1024579.vps18.u.avcdn.net tcp
GB 23.73.139.43:80 t1024579.vps18.u.avcdn.net tcp
GB 23.73.139.43:80 t1024579.vps18.u.avcdn.net tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 34.117.223.223:443 v7event.stats.avast.com tcp
US 34.117.223.223:443 v7event.stats.avast.com tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 34.117.223.223:443 v7event.stats.avast.com tcp
DE 142.250.185.168:443 ssl.google-analytics.com tcp
US 34.117.223.223:443 v7event.stats.avast.com tcp
GB 23.73.139.43:80 t1024579.vps18.u.avcdn.net tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 2.23.92.217:443 sydney.bing.com tcp
GB 23.211.97.84:443 www.mcafee.com tcp
GB 23.211.97.84:443 www.mcafee.com tcp
GB 23.214.136.154:443 media.mcafeeassets.com tcp
GB 23.214.136.154:443 media.mcafeeassets.com tcp
GB 23.214.136.154:443 media.mcafeeassets.com tcp
IE 66.235.152.221:443 mcafee12.tt.omtrdc.net tcp
IE 52.16.112.232:443 cm.everesttech.net tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 96.17.178.140:443 id.mcafee.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.214.136.154:443 media.mcafeeassets.com tcp
FR 3.162.38.92:443 tags.tiqcdn.com tcp
US 8.8.8.8:53 92.38.162.3.in-addr.arpa udp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 104.91.71.212:443 tcp
GB 87.248.114.12:443 tcp
GB 104.91.71.212:443 tcp
GB 104.91.71.212:443 tcp
GB 104.91.71.212:443 tcp
US 8.8.8.8:53 sp.analytics.yahoo.com udp
US 8.8.8.8:53 uupdate.avast.com udp
GB 104.77.160.144:443 trial-eum-clienttons-s.akamaihd.net tcp
GB 96.17.178.157:443 trial-eum-clientnsv4-s.akamaihd.net tcp
IE 66.235.152.225:443 mcafee12.tt.omtrdc.net tcp
US 8.8.8.8:53 uupdate.avast.com udp
GB 104.77.160.145:443 191-101-209-39_s-104-77-160-144_ts-1712323488-clienttons-s.akamaihd.net tcp
US 34.231.239.183:443 l.evidon.com tcp
IE 212.82.100.181:443 tcp
US 152.199.21.175:443 tcp
GB 96.17.178.137:443 trial-eum-clientnsv4-s.akamaihd.net tcp
US 34.231.239.183:443 l.evidon.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
US 152.199.21.175:443 digitalfeedback.us.confirmit.com tcp
US 8.8.8.8:53 url.totalav.com udp
US 8.8.8.8:53 www.totalav.com udp
US 8.8.8.8:53 emupdate.avcdn.net udp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
US 8.8.8.8:53 lime.portmap.host udp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.56:80 w5805295.iavs9x.u.avast.com tcp
GB 23.73.139.43:80 t1024579.vps18.u.avcdn.net tcp
GB 23.73.139.43:80 t1024579.vps18.u.avcdn.net tcp
GB 23.73.139.43:80 t1024579.vps18.u.avcdn.net tcp
US 174.138.119.38:443 tcp
US 174.138.119.38:443 tcp
US 174.138.119.38:443 tcp
US 174.138.119.38:443 tcp
GB 23.73.137.233:443 tcp
US 35.224.74.90:443 url.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com udp
GB 23.73.139.43:80 t1024579.vps18.u.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
DE 172.217.16.196:443 www.google.com tcp
US 34.149.149.62:443 ip-info.ff.avast.com tcp
GB 23.73.139.40:80 emupdate.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
GB 23.73.139.40:443 emupdate.avcdn.net tcp
US 52.9.111.109:80 www.bonzi.com tcp
US 52.9.111.109:80 www.bonzi.com tcp
GB 23.73.139.82:80 uupdate.avast.com tcp
GB 68.70.192.128:443 install.protected.net tcp
GB 23.37.1.70:80 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.73.139.27:80 ncc.avast.com tcp
GB 131.111.8.61:123 udp
GB 23.73.139.27:80 ncc.avast.com tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 8.8.8.8:53 shepherd.avcdn.net udp
US 34.160.176.28:443 shepherd.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 honzik.avcdn.net udp
GB 23.37.1.70:443 honzik.avcdn.net tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.73.139.27:80 ncc.avast.com tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 udp
US 34.117.223.223:443 analytics.avcdn.net tcp
GB 23.73.139.27:80 ncc.avast.com tcp
BE 34.140.0.190:443 tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
BE 34.140.0.190:443 tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
US 34.160.176.28:443 shepherd.avcdn.net tcp
US 34.160.176.28:443 shepherd.avcdn.net tcp
US 8.8.8.8:53 udp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 8.8.8.8:53 udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 udp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
GB 23.37.1.70:443 honzik.avcdn.net tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
GB 23.73.139.27:80 ncc.avast.com tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 8.8.8.8:53 analytics.avcdn.net udp
BE 34.140.0.190:443 tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
CZ 5.62.36.167:443 tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
CZ 77.234.40.62:8443 tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
CZ 5.62.36.167:443 tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
GB 23.73.139.32:443 s-overseer.avcdn.net tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
GB 134.0.16.1:123 2.pool.ntp.org udp
DE 172.217.18.2:443 cm.g.doubleclick.net tcp
US 174.138.119.38:443 tcp
US 174.138.119.38:443 tcp
GB 23.73.139.81:80 tcp
DE 216.58.212.132:443 google-analytics.com tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 34.117.223.223:443 v7.stats.avast.com tcp
DE 142.250.185.72:443 ssl.google-analytics.com tcp
DE 172.217.18.2:443 udp
DE 172.217.16.196:443 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
GB 23.37.1.70:443 tcp
US 8.8.8.8:53 udp
US 34.117.223.223:80 v7.stats.avast.com tcp
DE 142.250.181.238:80 www.google-analytics.com tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
GB 104.103.251.197:443 openid.avast.com tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 34.117.223.223:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 52.8.62.213:80 www.bonzi.com tcp
US 52.8.62.213:80 www.bonzi.com tcp
GB 104.103.251.197:443 openid.avast.com tcp
US 8.8.8.8:53 udp
US 34.111.47.92:443 api.totalav.com tcp
US 52.177.138.113:443 in.appcenter.ms tcp
US 52.177.138.113:443 in.appcenter.ms tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 34.117.223.223:443 v7.stats.avast.com tcp
US 34.117.223.223:443 v7.stats.avast.com tcp
GB 68.70.192.128:443 install.protected.net tcp
US 34.111.47.92:443 api.totalav.com tcp
GB 104.103.251.197:443 openid.avast.com tcp
US 8.8.8.8:53 in.appcenter.ms udp
US 40.70.161.7:443 in.appcenter.ms tcp
US 40.70.161.7:443 in.appcenter.ms tcp
GB 68.70.192.128:443 install.protected.net tcp
US 52.177.138.113:443 in.appcenter.ms tcp
US 52.177.138.113:443 in.appcenter.ms tcp
GB 131.111.8.61:123 udp
US 162.159.200.1:123 udp
US 8.8.8.8:53 udp
US 34.117.223.223:443 v7.stats.avast.com tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 8.8.8.8:53 lime.portmap.host udp
US 34.117.223.223:443 v7.stats.avast.com tcp
US 52.177.138.113:443 in.appcenter.ms tcp
US 34.117.223.223:443 v7.stats.avast.com tcp
US 8.8.8.8:53 udp
US 34.160.176.28:443 tcp
GB 131.111.8.61:123 udp
US 162.159.200.1:123 udp
GB 23.73.139.27:80 tcp
US 8.8.8.8:53 udp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
DE 52.57.39.172:443 api.phantom.avira-vpn.com tcp
DE 52.57.39.172:443 api.phantom.avira-vpn.com tcp
DE 52.57.39.172:443 api.phantom.avira-vpn.com tcp
DE 52.57.39.172:443 api.phantom.avira-vpn.com tcp
DE 52.57.39.172:443 api.phantom.avira-vpn.com tcp
DE 52.57.39.172:443 api.phantom.avira-vpn.com tcp
DE 52.57.39.172:443 api.phantom.avira-vpn.com tcp
DE 52.57.39.172:443 api.phantom.avira-vpn.com tcp
US 8.8.8.8:53 udp
GB 68.70.192.128:443 resources.totalav.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
DE 140.82.121.4:443 github.com tcp
DE 140.82.121.4:443 github.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
GB 68.70.192.128:443 resources.totalav.com tcp
GB 68.70.192.128:443 resources.totalav.com tcp
US 140.82.113.21:443 collector.github.com tcp
DE 140.82.121.6:443 api.github.com tcp
DE 140.82.121.6:443 api.github.com tcp
US 52.177.138.113:443 in.appcenter.ms tcp
US 52.177.138.113:443 in.appcenter.ms tcp
US 52.177.138.113:443 in.appcenter.ms tcp
US 52.177.138.113:443 in.appcenter.ms tcp
US 52.177.138.113:443 in.appcenter.ms tcp
US 52.177.138.113:443 in.appcenter.ms tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
US 52.8.62.213:80 www.bonzi.com tcp
US 52.8.62.213:80 www.bonzi.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
GB 68.70.192.128:443 resources.totalav.com tcp
DE 140.82.121.5:443 api.github.com tcp
DE 140.82.121.4:443 github.com tcp
US 52.9.111.109:80 www.bonzi.com tcp
US 52.9.111.109:80 www.bonzi.com tcp
US 34.120.17.239:443 remediation.protected.net tcp
DE 140.82.121.5:443 api.github.com tcp
US 140.82.112.21:443 collector.github.com tcp
US 8.8.8.8:53 api.totalav.com udp
US 34.111.47.92:443 api.totalav.com tcp
GB 68.70.192.128:443 resources.totalav.com tcp
US 140.82.112.21:443 collector.github.com tcp
DE 140.82.121.4:443 github.com tcp
DE 140.82.121.5:443 api.github.com tcp
US 34.120.17.239:443 remediation.protected.net tcp
US 34.111.47.92:443 api.totalav.com tcp
US 34.111.47.92:443 api.totalav.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
US 52.9.111.109:80 www.bonzi.com tcp
US 52.9.111.109:80 www.bonzi.com tcp
US 40.70.161.7:443 in.appcenter.ms tcp
GB 68.70.192.128:443 resources.totalav.com tcp
US 40.70.161.7:443 in.appcenter.ms tcp
US 34.120.17.239:443 remediation.protected.net tcp
US 8.8.8.8:53 www.totalav.com udp
US 35.224.74.90:443 url.totalav.com tcp
US 34.111.47.92:443 api.totalav.com udp
GB 68.70.192.128:443 resources.totalav.com tcp
GB 68.70.192.128:443 resources.totalav.com tcp
GB 68.70.192.128:443 resources.totalav.com tcp
GB 68.70.192.128:443 resources.totalav.com udp
US 162.159.138.60:443 player.vimeo.com tcp
GB 68.70.192.128:443 resources.totalav.com udp
US 34.120.202.204:443 fresnel.vimeocdn.com tcp
GB 146.75.74.109:443 f.vimeocdn.com tcp
US 151.101.0.217:443 i.vimeocdn.com tcp
GB 68.70.192.128:443 resources.totalav.com tcp
US 204.79.197.237:443 bat.bing.com tcp
DE 172.217.18.2:443 cm.g.doubleclick.net udp
US 204.79.197.237:443 bat.bing.com tcp
GB 68.70.192.128:443 resources.totalav.com tcp
GB 146.75.74.109:443 f.vimeocdn.com tcp
US 35.224.74.90:443 url.totalav.com tcp
US 8.8.8.8:53 www.google.com udp
US 151.101.0.217:443 i.vimeocdn.com tcp
FR 13.249.9.110:443 widget.trustpilot.com tcp
US 34.120.202.204:443 fresnel.vimeocdn.com tcp
DE 172.217.16.196:443 www.google.com udp
US 34.111.47.92:443 api.totalav.com tcp
US 140.82.113.22:443 collector.github.com tcp
DE 140.82.121.4:443 github.com tcp
DE 140.82.121.6:443 api.github.com tcp
US 140.82.113.22:443 collector.github.com tcp
DE 140.82.121.4:443 github.com tcp
GB 104.97.4.131:443 c.go-mpulse.net tcp
DE 140.82.121.6:443 api.github.com tcp
DE 140.82.121.4:443 github.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
DE 140.82.121.4:443 github.com tcp
US 52.8.62.213:80 www.bonzi.com tcp
US 52.8.62.213:80 www.bonzi.com tcp
US 34.111.47.92:443 api.totalav.com tcp
DE 140.82.121.6:443 api.github.com tcp
US 140.82.113.21:443 collector.github.com tcp
DE 140.82.121.6:443 api.github.com tcp
GB 104.97.4.131:443 c.go-mpulse.net tcp
DE 140.82.121.4:443 github.com tcp
US 140.82.113.21:443 collector.github.com tcp
DE 140.82.121.6:443 api.github.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
DE 140.82.121.6:443 api.github.com tcp
US 140.82.113.21:443 collector.github.com tcp
DE 140.82.121.4:443 github.com tcp
DE 140.82.121.4:443 github.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 656bb397c72d15efa159441f116440a6
SHA1 5b57747d6fdd99160af6d3e580114dbbd351921f
SHA256 770ed0fcd22783f60407cdc55b5998b08e37b3e06efb3d1168ffed8768751fab
SHA512 5923db1d102f99d0b29d60916b183b92e6be12cc55733998d3da36d796d6158c76e385cef320ec0e9afa242a42bfb596f7233b60b548f719f7d41cb8f404e73c

\??\pipe\LOCAL\crashpad_1896_ZBNRBEPHBBOODWHZ

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 d459a8c16562fb3f4b1d7cadaca620aa
SHA1 7810bf83e8c362e0c69298e8c16964ed48a90d3a
SHA256 fa31bc49a2f9af06d325871104e36dd69bfe3847cd521059b62461a92912331a
SHA512 35cb00c21908e1332c3439af1ec9867c81befcc4792248ee392080b455b1f5ce2b0c0c2415e344d91537469b5eb72f330b79feb7e8a86eeb6cf41ec5be5dfd2f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c50bbd412f0b8a719e9cceaf0d31c546
SHA1 ddf2e49699d68a2c6f056b872e7031f96bc2cbc0
SHA256 d2563f182d80ac8cb2808554cf0bb1cad7666e5c89e801e3ba409a3c22478638
SHA512 5fd0a256e426a0cb5f1d1dc8f02d7313f30d4f6f4601ac646ca65f4e2899d769440833b048da289f9ab8b59f6efa12944435d4d72a5f2361be2f8df6e56efac3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 af94fbf06f854e1b274276cc098a79d1
SHA1 a16223414c41f03d8ab85440fee455f865cfe55f
SHA256 f6c71d5de664c5029271f69273223323a46cb96b4a0772607103e7debb0d3e20
SHA512 bceae5a57806c22fb24f0f50c9e3617643b8018badf08c10f3fb5f4e9fa454d2b5384778dc17eb3cd1e222567562822ddb0b0509719935b29ab31f846ac2f794

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ce378813f55ecb52e751f305b5b3c788
SHA1 c60a0f4de1510ff0c5ac0c557e79e86b158f63b0
SHA256 ee8ecda079a75453e3dfce45b5f5d46e594b74420cd5c3f515b698071293458e
SHA512 9f6702f82e7529075457acc0ab7d74f0ab655d4fa04b6403d1eb895598d667f5950aa0ec36af0a97e5cb1b20df4a7c041364b84451ee28ade5090a5b711d3289

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 72645b6ebb2dd6db65bd486875438eeb
SHA1 c33c29227c6ed1afa580b8af5618993926ca36f3
SHA256 8a37b91d886595911c77b6486af17fe545ab9a17330a7f9cd41edfbd80b3a921
SHA512 f579e38607a15f6a42cc56925c9e1824fb573469be146614a44c8f74fc46721912f8db3afc871ead41a524fe74cab6ae3b453699f77b7890ec37b39bbf9e64bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d629c9b91ae54982ace6447c356de9ee
SHA1 21d544ed135e187d31f17fa53d2392e64234f821
SHA256 d52569c04675977234649ef2f5bc80d5117a42a30d812182768ace18300dbab6
SHA512 4a4fdae05a9e921ae140978922e8001d1f8de85e0a511e5ffeee21fd270e9a8765385f9bd9d6a85ac2f197b5d14fd35acf166689d27e15c3fed1d860ce134121

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 813b22951539a08f1dd636aa554890af
SHA1 54c23883374dab80275b5c029a95463d8a2d8650
SHA256 f07f6fb5556f640a8fba57f71e457bf7b323c7aca6307a1c07d4997b34cc2ad5
SHA512 e98b078d81ebe7b4d5d5076c524ab8bd1e04f361e498d3f15fe984efed16b7b20b53424162dbe615321bcb89fb6cbd0b12ff974f11a1c17c58bd5dc1f2996497

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b6b1df03d6dd1b50c98521546b5c6dce
SHA1 32c6fa95d0fb358f2456986ad0de96a5d59272a8
SHA256 d198268a052ced04b8ef63743479e01c32571bb297fa3853643b5167b5ca0397
SHA512 085e1c1dcab7ca0e5eb7d952889b8b17d72fdc2c45c24f2d64769028c03dd5639bc1b15f921ae325e996ea69700cbc56014d143c36bb347a2109bcb9a43a0571

C:\Users\Admin\Downloads\Bonzi.zip:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 542f5d9ed9a91a0c155d8c39623d9a14
SHA1 95cd05d26c5e59be8fd8554f3f10b001d2feb7f5
SHA256 446c3ee23b25867e282c355c2f87c1b2fcea8c8d48b8e8a60aba7d7eea05d809
SHA512 9e5c605945549aa8c747254dff25774dcee57daac12d336d018626309af289deddb357a0ac5f8ba12ecb5969da40dd6a2ac9fd69feaa7f50d58ab840b86108c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 15119073b5c3f0f00552dcaa71971361
SHA1 6144e8a5f8415ce2ae427d384f5e141746dabde2
SHA256 e4c66b3f20ce149f0602b0b488ad1bd30ccb2f9c6e3aaef333ff56398c44e046
SHA512 a5015615e7e4e9420db4cfa4faa99452b7d20f1192fcc6c8632c517efa0738443eff811c317fd5f9a6a9001d32842e046b1c5af61d9d8f109b42e8792ab0a964

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 de2247e900d4855eae21f9e31cebb243
SHA1 0a97754df1230f2783eadeca32d339a3cd63abd4
SHA256 4a3e99ffc912a23a3e04f16143a924d2271c5623331f37de27756b2488e13ae8
SHA512 54c8f09db2f019c6d9ea1206ed66a661e4ed7d2218d9a886265cd2f22782f4a21e4147b8f1edeaf37155c4b36a650666b7de029c8e5aca5ae5af0c14ecde7706

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 a127a49f49671771565e01d883a5e4fa
SHA1 09ec098e238b34c09406628c6bee1b81472fc003
SHA256 3f208f049ffaf4a7ed808bf0ff759ce7986c177f476b380d0076fd1f5482fca6
SHA512 61b54222e54e7ab8743a2d6ca3c36768a7b2cf22d5689a3309dee9974b1f804533720ea9de2d3beab44853d565a94f1bc0e60b9382997abcf03945219f98d734

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 76a3f1e9a452564e0f8dce6c0ee111e8
SHA1 11c3d925cbc1a52d53584fd8606f8f713aa59114
SHA256 381396157ed5e8021dd8e660142b35eb71a63aecd33062a1103ce9c709c7632c
SHA512 a1156a907649d6f2c3f7256405d9d5c62a626b8d4cd717fa2f29d2fbe91092a2b3fdd0716f8f31e59708fe12274bc2dea6c9ae6a413ea290e70ddf921fe7f274

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 74e33b4b54f4d1f3da06ab47c5936a13
SHA1 6e5976d593b6ee3dca3c4dbbb90071b76e1cd85c
SHA256 535fc48679c38decd459ad656bdd6914e539754265244d0cc7b1da6bddf3e287
SHA512 79218e8ee50484af968480ff9b211815c97c3f3035414e685aa5d15d9b4152682d87b66202339f212bf3b463a074bf7a4431107b50303f28e2eb4b17843991c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 93feab00f76536d681c1b77eca2c7caf
SHA1 c48cbe893b3178a56357c132cae2fa63918d790f
SHA256 5da61564d6ae3fa4506522460d177f8b642b20bae63f81cee14b9ca71fd49226
SHA512 6276f945f1008c70bdc559a8d6a14c609a033af2fae6bd80c129da546e7df6cfb3fcdcc452508df8ee5be7a0a87a6f9930664b8b9726c4e52877802a9ceca5ca

C:\Users\Admin\Downloads\Bonzi.zip

MD5 65259c11e1ff8d040f9ec58524a47f02
SHA1 2d5a24f7cadd10140dd6d3dd0dc6d0f02c2d40fd
SHA256 755bd7f1fc6e93c3a69a1125dd74735895bdbac9b7cabad0506195a066bdde42
SHA512 37096eeb1ab0e11466c084a9ce78057e250f856b919cb9ef3920dad29b2bb2292daabbee15c64dc7bc2a48dd930a52a2fb9294943da2c1c3692863cec2bae03d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 ef7c9e6a1c5eb2838410f2912198d3f0
SHA1 df88a7937056b187477692720f53a4d7d1794a3c
SHA256 1c80f03fae6bc64a81295fecd552c54b790e0695d86b0f3ea28f6989c6ad0914
SHA512 42035e400666bfc7c230fe4872e4bb41acfa140af3c6e76be46703e3d1ff6a7d13776605e03ca397bad80e78f16a95edd624679e39b2a26da15c99a3f6fcd392

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8a896a67ffa50fb49a867a5b39e96169
SHA1 db2d284513b9a42f2b583b194de976399d45f2db
SHA256 aa4e54225146c7538987dbb4195a10bb7d29318b93989decd09806a8b22bee28
SHA512 0884c481bdf166ccbf62df4b173da908728272e8e7de343caecddbf050498d5dc67bd59a9c4c277cc4aba05a525de5e65660f80d74e348e45daefd5e5a30070e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 92e71e4f1ab2e593b3d781e12aaf3d14
SHA1 ca6334bc1da299f395bc4b15168ecfc8b423595a
SHA256 31ecdeae73400da85cfce35ded7ff76bbdd512c7ff3478a54608fdcb6cc30da5
SHA512 f350ba225ce33cb4a2a0935a0e469c9491e0ec95f822253d634d46b1e12770924d5ae727c44c52aa9f9c3a589016b3b9a0a70d4f4aa5555132ed43697359d7e3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5885b5.TMP

MD5 6d9b6b98a297338c76aa01ea0c1364a2
SHA1 9fea35a77afa207c66685dcbc7894d2852e11947
SHA256 15230fd30189444fcfa38b5e39151fe9bccc80b12f030a937722b478767715ad
SHA512 6556269419bd6280d25871d0479f3c30c413011db68d1581a9dcf8115dfb13a77842d9a4f4cdc6dc7ccfdb6f46faa676e3ff368f3803e9bb81f3d9cd0c7df6c6

C:\Users\Admin\AppData\Local\Temp\$inst\0001.tmp

MD5 8e15b605349e149d4385675afff04ebf
SHA1 f346a886dd4cb0fbbd2dff1a43d9dfde7fce348b
SHA256 803f930cdd94198bdd2e9a51aa962cc864748067373f11b2e9215404bd662cee
SHA512 8bf957ef72465fe103dbf83411df9082433eead022f0beccab59c9e406bbd1e4edb701fd0bc91f195312943ad1890fee34b4e734578298bb60bb81ed6fa9a46d

C:\Users\Admin\AppData\Local\Temp\$inst\0002.tmp

MD5 596cb5d019dec2c57cda897287895614
SHA1 6b12ea8427fdbee9a510160ff77d5e9d6fa99dfa
SHA256 e1c89d9348aea185b0b0e80263c9e0bf14aa462294a5d13009363140a88df3ff
SHA512 8f5fc432fd2fc75e2f84d4c7d21c23dd1f78475214c761418cf13b0e043ba1e0fc28df52afd9149332a2134fe5d54abc7e8676916100e10f374ef6cdecff7a20

C:\Users\Admin\AppData\Local\Temp\$inst\0003.tmp

MD5 7c8328586cdff4481b7f3d14659150ae
SHA1 b55ffa83c7d4323a08ea5fabf5e1c93666fead5c
SHA256 5eec15c6ed08995e4aaffa9beeeaf3d1d3a3d19f7f4890a63ddc5845930016cc
SHA512 aa4220217d3af263352f8b7d34bd8f27d3e2c219c673889bc759a019e3e77a313b0713fd7b88700d57913e2564d097e15ffc47e5cf8f4899ba0de75d215f661d

C:\Users\Admin\AppData\Local\Temp\$inst\0004.tmp

MD5 4f398982d0c53a7b4d12ae83d5955cce
SHA1 09dc6b6b6290a3352bd39f16f2df3b03fb8a85dc
SHA256 fee4d861c7302f378e7ce58f4e2ead1f2143168b7ca50205952e032c451d68f2
SHA512 73d9f7c22cf2502654e9cd6cd5d749e85ea41ce49fd022378df1e9d07e36ae2dde81f0b9fc25210a9860032ecda64320ec0aaf431bcd6cefba286328efcfb913

C:\Windows\msagent\chars\Peedy.acs

MD5 49654a47fadfd39414ddc654da7e3879
SHA1 9248c10cef8b54a1d8665dfc6067253b507b73ad
SHA256 b8112187525051bfade06cb678390d52c79555c960202cc5bbf5901fbc0853c5
SHA512 fa9cab60fadd13118bf8cb2005d186eb8fa43707cb983267a314116129371d1400b95d03fbf14dfdaba8266950a90224192e40555d910cf8a3afa4aaf4a8a32f

C:\Windows\msagent\chars\Bonzi.acs

MD5 1fd2907e2c74c9a908e2af5f948006b5
SHA1 a390e9133bfd0d55ffda07d4714af538b6d50d3d
SHA256 f3d4425238b5f68b4d41ed5be271d2f4118a245baf808a62dc1a9e6e619b2f95
SHA512 8eede3e5e52209b8703706a3e3e63230ba01975348dcdc94ef87f91d7c833a505b177139683ca7a22d8082e72e961e823bc3ad1a84ab9c371f5111f530807171

C:\Users\Admin\AppData\Local\Temp\$inst\0005.tmp

MD5 94e0d650dcf3be9ab9ea5f8554bdcb9d
SHA1 21e38207f5dee33152e3a61e64b88d3c5066bf49
SHA256 026893ba15b76f01e12f3ef540686db8f52761dcaf0f91dcdc732c10e8f6da0e
SHA512 039ccf6979831f692ea3b5e3c5df532f16c5cf395731864345c28938003139a167689a4e1acef1f444db1fe7fd3023680d877f132e17bf9d7b275cfc5f673ac3

C:\Users\Admin\AppData\Local\Temp\$inst\0006.tmp

MD5 b3b7f6b0fb38fc4aa08f0559e42305a2
SHA1 a66542f84ece3b2481c43cd4c08484dc32688eaf
SHA256 7fb63fca12ef039ad446482e3ce38abe79bdf8fc6987763fe337e63a1e29b30b
SHA512 0f4156f90e34a4c26e1314fc0c43367ad61d64c8d286e25629d56823d7466f413956962e2075756a4334914d47d69e20bb9b5a5b50c46eca4ef8173c27824e6c

C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page18.jpg

MD5 108fd5475c19f16c28068f67fc80f305
SHA1 4e1980ba338133a6fadd5fda4ffe6d4e8a039033
SHA256 03f269cd40809d7ec94f5fa4fff1033a624e849179962693cdc2c37d7904233b
SHA512 98c8743b5af89ec0072b70de8a0babfb5aff19bafa780d6ce99c83721b65a80ec310a4fe9db29a4bb50c2454c34de62c029a83b70d0a9df9b180159ea6cad83a

C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page17.jpg

MD5 e8f52918072e96bb5f4c573dbb76d74f
SHA1 ba0a89ed469de5e36bd4576591ee94db2c7f8909
SHA256 473a890da22defb3fbd643246b3fa0d6d34939ac469cd4f48054ee2a0bc33d82
SHA512 d57dd0a9686696487d268ef2be2ec2d3b97baedf797a63676da5a8a4165cda89540ec2d3b9e595397cbf53e69dcce76f7249f5eeff041947146ca7bf4099819f

C:\Program Files (x86)\BonziBuddy432\BonziBDY_2.EXE

MD5 8a30bd00d45a659e6e393915e5aef701
SHA1 b00c31de44328dd71a70f0c8e123b56934edc755
SHA256 1e2994763a7674a0f1ec117dae562b05b614937ff61c83b316b135afab02d45a
SHA512 daf92e61e75382e1da0e2aba9466a9e4d9703a129a147f0b3c71755f491c68f89ad67cfb4dd013580063d664b69c8673fb52c02d34b86d947e9f16072b7090fb

C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE

MD5 93f3ed21ad49fd54f249d0d536981a88
SHA1 ffca7f3846e538be9c6da1e871724dd935755542
SHA256 5678fd744faddb30a87568ae309066ef88102a274fff62f10e4963350da373bc
SHA512 7923556c6d6feb4ff4253e853bae3675184eab9b8ce4d4e07f356c8624317801ee807ad5340690196a975824ea3ed500ce6a80c7670f19785139be594fa5e70f

C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE

MD5 73feeab1c303db39cbe35672ae049911
SHA1 c14ce70e1b3530811a8c363d246eb43fc77b656c
SHA256 88c03817ae8dfc5fc9e6ffd1cfb5b829924988d01cd472c1e64952c5398866e8
SHA512 73f37dee83664ce31522f732bf819ed157865a2a551a656a7a65d487c359a16c82bd74acff2b7a728bb5f52d53f4cfbea5bef36118128b0d416fa835053f7153

C:\Program Files (x86)\BonziBuddy432\Uninstall.exe

MD5 068ace391e3c5399b26cb9edfa9af12f
SHA1 568482d214acf16e2f5522662b7b813679dcd4c7
SHA256 2288f4f42373affffbaa63ce2fda9bb071fd7f14dbcd04f52d3af3a219b03485
SHA512 0ba89fcdbb418ea6742eeb698f655206ed3b84c41ca53d49c06d30baed13ac4dfdb4662b53c05a28db0a2335aa4bc588635b3b205cfc36d8a55edfc720ac4b03

C:\Program Files (x86)\BonziBuddy432\ActiveSkin.ocx

MD5 3d225d8435666c14addf17c14806c355
SHA1 262a951a98dd9429558ed35f423babe1a6cce094
SHA256 2c8f92dc16cbf13542ddd3bf0a947cf84b00fed83a7124b830ddefa92f939877
SHA512 391df24c6427b4011e7d61b644953810e392525743914413c2e8cf5fce4a593a831cfab489fbb9517b6c0e7ef0483efb8aeaad0a18543f0da49fa3125ec971e1

C:\Program Files (x86)\BonziBuddy432\BonziCheckers.ocx

MD5 66551c972574f86087032467aa6febb4
SHA1 5ad1fe1587a0c31bb74af20d09a1c7d3193ec3c9
SHA256 9028075603c66ca2e906ecac3275e289d8857411a288c992e8eef793ed71a75b
SHA512 35c1f500e69cdd12ec6a3c5daef737a3b57b48a44df6c120a0504d340e0f721d34121595ed396dc466a8f9952a51395912d9e141ad013000f5acb138b2d41089

C:\Program Files (x86)\BonziBuddy432\MSCOMCTL.OCX

MD5 12c2755d14b2e51a4bb5cbdfc22ecb11
SHA1 33f0f5962dbe0e518fe101fa985158d760f01df1
SHA256 3b6ccdb560d7cd4748e992bd82c799acd1bbcfc922a13830ca381d976ffcccaf
SHA512 4c9b16fb4d787145f6d65a34e1c4d5c6eb07bff4c313a35f5efa9dce5a840c1da77338c92346b1ad68eeb59ef37ef18a9d6078673c3543656961e656466699cf

C:\Program Files (x86)\BonziBuddy432\Bonzi's Beach Checkers.exe

MD5 c3b0a56e48bad8763e93653902fc7ccb
SHA1 d7048dcf310a293eae23932d4e865c44f6817a45
SHA256 821a16b65f68e745492419ea694f363926669ac16f6b470ed59fe5a3f1856fcb
SHA512 ae35f88623418e4c9645b545ec9e8837e54d879641658996ca21546f384e3e1f90dae992768309ac0bd2aae90e1043663931d2ef64ac541977af889ee72e721a

C:\Program Files (x86)\BonziBuddy432\MSINET.OCX

MD5 7bec181a21753498b6bd001c42a42722
SHA1 3249f233657dc66632c0539c47895bfcee5770cc
SHA256 73da54b69911bdd08ea8bbbd508f815ef7cfa59c4684d75c1c602252ec88ee31
SHA512 d671e25ae5e02a55f444d253f0e4a42af6a5362d9759fb243ad6d2c333976ab3e98669621ec0850ad915ee06acbe8e70d77b084128fc275462223f4f5ab401bc

C:\Program Files (x86)\BonziBuddy432\MSWINSCK.OCX

MD5 9484c04258830aa3c2f2a70eb041414c
SHA1 b242a4fb0e9dcf14cb51dc36027baff9a79cb823
SHA256 bf7e47c16d7e1c0e88534f4ef95e09d0fd821ed1a06b0d95a389b35364b63ff5
SHA512 9d0e9f0d88594746ba41ea4a61a53498619eda596e12d8ec37d01cfe8ceb08be13e3727c83d630a6d9e6d03066f62444bb94ea5a0d2ed9d21a270e612db532a0

C:\Program Files (x86)\BonziBuddy432\SSCALA32.OCX

MD5 ce9216b52ded7e6fc63a50584b55a9b3
SHA1 27bb8882b228725e2a3793b4b4da3e154d6bb2ea
SHA256 8e52ef01139dc448d1efd33d1d9532f852a74d05ee87e8e93c2bb0286a864e13
SHA512 444946e5fc3ea33dd4a09b4cbf2d41f52d584eb5b620f5e144de9a79186e2c9d322d6076ed28b6f0f6d0df9ef4f7303e3901ff552ed086b70b6815abdfc23af7

C:\Program Files (x86)\BonziBuddy432\sstabs2.ocx

MD5 7303efb737685169328287a7e9449ab7
SHA1 47bfe724a9f71d40b5e56811ec2c688c944f3ce7
SHA256 596f3235642c9c968650194065850ecb02c8c524d2bdcaf6341a01201e0d69be
SHA512 e0d9cb9833725e0cdc7720e9d00859d93fc51a26470f01a0c08c10fa940ed23df360e093861cf85055b8a588bb2cac872d1be69844a6c754ac8ed5bfaf63eb03

C:\Program Files (x86)\BonziBuddy432\SSCALB32.OCX

MD5 97ffaf46f04982c4bdb8464397ba2a23
SHA1 f32e89d9651fd6e3af4844fd7616a7f263dc5510
SHA256 5db33895923b7af9769ca08470d0462ed78eec432a4022ff0acc24fa2d4666e1
SHA512 8c43872396f5dceb4ba153622665e21a9b52a087987eab523b1041031e294687012d7bf88a3da7998172010eae5f4cc577099980ecd6b75751e35cfc549de002

C:\Program Files (x86)\BonziBuddy432\ssa3d30.ocx

MD5 48c35ed0a09855b29d43f11485f8423b
SHA1 46716282cc5e0f66cb96057e165fa4d8d60fbae2
SHA256 7a0418b76d00665a71d13a30d838c3e086304bacd10d764650d2a5d2ec691008
SHA512 779938ec9b0f33f4cbd5f1617bea7925c1b6d794e311737605e12cd7efa5a14bbc48bee85208651cf442b84133be26c4cc8a425d0a3b5b6ad2dc27227f524a99

C:\Program Files (x86)\BonziBuddy432\Regicon.ocx

MD5 32ff40a65ab92beb59102b5eaa083907
SHA1 af2824feb55fb10ec14ebd604809a0d424d49442
SHA256 07e91d8ed149d5cd6d48403268a773c664367bce707a99e51220e477fddeeb42
SHA512 2cfc5c6cb4677ff61ec3b6e4ef8b8b7f1775cbe53b245d321c25cfec363b5b4975a53e26ef438e07a4a5b08ad1dde1387970d57d1837e653d03aef19a17d2b43

C:\Program Files (x86)\BonziBuddy432\Runtimes\CheckRuntimes.bat

MD5 4877f2ce2833f1356ae3b534fce1b5e3
SHA1 7365c9ef5997324b73b1ff0ea67375a328a9646a
SHA256 8ae1ed38bc650db8b14291e1b7298ee7580b31e15f8a6a84f78f048a542742ff
SHA512 dd43ede5c3f95543bcc8086ec8209a27aadf1b61543c8ee1bb3eab9bc35b92c464e4132b228b12b244fb9625a45f5d4689a45761c4c5263aa919564664860c5e

C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE

MD5 66996a076065ebdcdac85ff9637ceae0
SHA1 4a25632b66a9d30239a1a77c7e7ba81bb3aee9ce
SHA256 16ca09ad70561f413376ad72550ae5664c89c6a76c85c872ffe2cb1e7f49e2aa
SHA512 e42050e799cbee5aa4f60d4e2f42aae656ff98af0548308c8d7f0d681474a9da3ad7e89694670449cdfde30ebe2c47006fbdc57cfb6b357c82731aeebc50901c

C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe

MD5 3f8f18c9c732151dcdd8e1d8fe655896
SHA1 222cc49201aa06313d4d35a62c5d494af49d1a56
SHA256 709936902951fb684d0a03a561fb7fd41c5e6f81ecd60d326809db66eb659331
SHA512 398a83f030824011f102dbcf9b25d3ff7527c489df149e9acdb492602941409cf551d16f6f03c01bc6f63a2e94645ed1f36610bdaffc7891299a8d9f89c511f7

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT20.INF

MD5 e4a499b9e1fe33991dbcfb4e926c8821
SHA1 951d4750b05ea6a63951a7667566467d01cb2d42
SHA256 49e6b848f5a708d161f795157333d7e1c7103455a2f47f50895683ef6a1abe4d
SHA512 a291bb986293197a16f75b2473297286525ac5674c08a92c87b5cc1f0f2e62254ea27d626b30898e7857281bdb502f188c365311c99bda5c2dd76da0c82c554a

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\ADVPACK.DLL

MD5 81e5c8596a7e4e98117f5c5143293020
SHA1 45b7fe0989e2df1b4dfd227f8f3b73b6b7df9081
SHA256 7d126ed85df9705ec4f38bd52a73b621cf64dd87a3e8f9429a569f3f82f74004
SHA512 05b1e9eef13f7c140eb21f6dcb705ee3aaafabe94857aa86252afa4844de231815078a72e63d43725f6074aa5fefe765feb93a6b9cd510ee067291526bb95ec6

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTCTL.DLL

MD5 237e13b95ab37d0141cf0bc585b8db94
SHA1 102c6164c21de1f3e0b7d487dd5dc4c5249e0994
SHA256 d19b6b7c57bcee7239526339e683f62d9c2f9690947d0a446001377f0b56103a
SHA512 9d0a68a806be25d2eeedba8be1acc2542d44ecd8ba4d9d123543d0f7c4732e1e490bad31cad830f788c81395f6b21d5a277c0bed251c9854440a662ac36ac4cb

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTDP2.DLL

MD5 a334bbf5f5a19b3bdb5b7f1703363981
SHA1 6cb50b15c0e7d9401364c0fafeef65774f5d1a2c
SHA256 c33beaba130f8b740dddb9980fe9012f9322ac6e94f36a6aa6086851c51b98de
SHA512 1fa170f643054c0957ed1257c4d7778976c59748670afa877d625aaa006325404bc17c41b47be2906dd3f1e229870d54eb7aba4a412de5adedbd5387e24abf46

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTDPV.DLL

MD5 7c5aefb11e797129c9e90f279fbdf71b
SHA1 cb9d9cbfbebb5aed6810a4e424a295c27520576e
SHA256 394a17150b8774e507b8f368c2c248c10fce50fc43184b744e771f0e79ecafed
SHA512 df59a30704d62fa2d598a5824aa04b4b4298f6192a01d93d437b46c4f907c90a1bad357199c51a62beb87cd724a30af55a619baef9ecf2cba032c5290938022a

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT0409.DLL

MD5 0cbf0f4c9e54d12d34cd1a772ba799e1
SHA1 40e55eb54394d17d2d11ca0089b84e97c19634a7
SHA256 6b0b57e5b27d901f4f106b236c58d0b2551b384531a8f3dad6c06ed4261424b1
SHA512 bfdb6e8387ffbba3b07869cb3e1c8ca0b2d3336aa474bd19a35e4e3a3a90427e49b4b45c09d8873d9954d0f42b525ed18070b949c6047f4e4cdb096f9c5ae5d5

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGTCTL15.TLB

MD5 f1656b80eaae5e5201dcbfbcd3523691
SHA1 6f93d71c210eb59416e31f12e4cc6a0da48de85b
SHA256 3f8adc1e332dd5c252bbcf92bf6079b38a74d360d94979169206db34e6a24cd2
SHA512 e9c216b9725bd419414155cfdd917f998aa41c463bc46a39e0c025aa030bc02a60c28ac00d03643c24472ffe20b8bbb5447c1a55ff07db3a41d6118b647a0003

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT0409.HLP

MD5 466d35e6a22924dd846a043bc7dd94b8
SHA1 35e5b7439e3d49cb9dc57e7ef895a3cd8d80fb10
SHA256 e4ccf06706e68621bb69add3dd88fed82d30ad8778a55907d33f6d093ac16801
SHA512 23b64ed68a8f1df4d942b5a08a6b6296ec5499a13bb48536e8426d9795771dbcef253be738bf6dc7158a5815f8dcc65feb92fadf89ea8054544bb54fc83aa247

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\MSLWVTTS.DLL

MD5 316999655fef30c52c3854751c663996
SHA1 a7862202c3b075bdeb91c5e04fe5ff71907dae59
SHA256 ea4ca740cd60d2c88280ff8115bf354876478ef27e9e676d8b66601b4e900ba0
SHA512 5555673e9863127749fc240f09cf3fb46e2019b459ad198ba1dc356ba321c41e4295b6b2e2d67079421d7e6d2fb33542b81b0c7dae812fe8e1a87ded044edd44

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGTINST.INF

MD5 b127d9187c6dbb1b948053c7c9a6811f
SHA1 b3073c8cad22c87dd9b8f76b6ffd0c4d0a2010d9
SHA256 bd1295d19d010d4866c9d6d87877913eee69e279d4d089e5756ba285f3424e00
SHA512 88e447dd4db40e852d77016cfd24e09063490456c1426a779d33d8a06124569e26597bb1e46a3a2bbf78d9bffee46402c41f0ceb44970d92c69002880ddc0476

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTPSH.DLL

MD5 b4ac608ebf5a8fdefa2d635e83b7c0e8
SHA1 d92a2861d5d1eb67ab434ff2bd0a11029b3bd9a9
SHA256 8414dfe399813b7426c235ba1e625bd2b5635c8140da0d0cfc947f6565fe415f
SHA512 2c42daade24c3ff01c551a223ee183301518357990a9cb2cc2dd7bf411b7059ff8e0bf1d1aee2d268eca58db25902a8048050bdb3cb48ae8be1e4c2631e3d9b4

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSR.DLL

MD5 9fafb9d0591f2be4c2a846f63d82d301
SHA1 1df97aa4f3722b6695eac457e207a76a6b7457be
SHA256 e78e74c24d468284639faf9dcfdba855f3e4f00b2f26db6b2c491fa51da8916d
SHA512 ac0d97833beec2010f79cb1fbdb370d3a812042957f4643657e15eed714b9117c18339c737d3fd95011f873cda46ae195a5a67ae40ff2a5bcbee54d1007f110a

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTANM.DLL

MD5 48c00a7493b28139cbf197ccc8d1f9ed
SHA1 a25243b06d4bb83f66b7cd738e79fccf9a02b33b
SHA256 905cb1a15eccaa9b79926ee7cfe3629a6f1c6b24bdd6cea9ccb9ebc9eaa92ff7
SHA512 c0b0a410ded92adc24c0f347a57d37e7465e50310011a9d636c5224d91fbc5d103920ab5ef86f29168e325b189d2f74659f153595df10eef3a9d348bb595d830

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTMPX.DLL

MD5 4fbbaac42cf2ecb83543f262973d07c0
SHA1 ab1b302d7cce10443dfc14a2eba528a0431e1718
SHA256 6550582e41fc53b8a7ccdf9ac603216937c6ff2a28e9538610adb7e67d782ab5
SHA512 4146999b4bec85bcd2774ac242cb50797134e5180a3b3df627106cdfa28f61aeea75a7530094a9b408bc9699572cae8cf998108bde51b57a6690d44f0b34b69e

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSVR.EXE

MD5 5c91bf20fe3594b81052d131db798575
SHA1 eab3a7a678528b5b2c60d65b61e475f1b2f45baa
SHA256 e8ce546196b6878a8c34da863a6c8a7e34af18fb9b509d4d36763734efa2d175
SHA512 face50db7025e0eb2e67c4f8ec272413d13491f7438287664593636e3c7e3accaef76c3003a299a1c5873d388b618da9eaede5a675c91f4c1f570b640ac605d6

memory/4144-1530-0x0000000000400000-0x0000000000424000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\W95INF32.DLL

MD5 4be7661c89897eaa9b28dae290c3922f
SHA1 4c9d25195093fea7c139167f0c5a40e13f3000f2
SHA256 e5e9f7c8dbd47134815e155ed1c7b261805eda6fddea6fa4ea78e0e4fb4f7fb5
SHA512 2035b0d35a5b72f5ea5d5d0d959e8c36fc7ac37def40fa8653c45a49434cbe5e1c73aaf144cbfbefc5f832e362b63d00fc3157ca8a1627c3c1494c13a308fc7f

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\W95INF16.DLL

MD5 7210d5407a2d2f52e851604666403024
SHA1 242fde2a7c6a3eff245f06813a2e1bdcaa9f16d9
SHA256 337d2fb5252fc532b7bf67476b5979d158ca2ac589e49c6810e2e1afebe296af
SHA512 1755a26fa018429aea00ebcc786bb41b0d6c4d26d56cd3b88d886b0c0773d863094797334e72d770635ed29b98d4c8c7f0ec717a23a22adef705a1ccf46b3f68

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.inf

MD5 0a250bb34cfa851e3dd1804251c93f25
SHA1 c10e47a593c37dbb7226f65ad490ff65d9c73a34
SHA256 85189df1c141ef5d86c93b1142e65bf03db126d12d24e18b93dd4cc9f3e438ae
SHA512 8e056f4aa718221afab91c4307ff87db611faa51149310d990db296f979842d57c0653cb23d53fea54a69c99c4e5087a2eb37daa794ba62e6f08a8da41255795

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\andmoipa.ttf

MD5 c3e8aeabd1b692a9a6c5246f8dcaa7c9
SHA1 4567ea5044a3cef9cb803210a70866d83535ed31
SHA256 38ae07eeb7909bda291d302848b8fe5f11849cf0d597f0e5b300bfed465aed4e
SHA512 f74218681bd9d526b68876331b22080f30507898b6a6ebdf173490ca84b696f06f4c97f894cb6052e926b1eee4b28264db1ead28f3bc9f627b4569c1ddcd2d3e

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.hlp

MD5 80d09149ca264c93e7d810aac6411d1d
SHA1 96e8ddc1d257097991f9cc9aaf38c77add3d6118
SHA256 382d745e10944b507a8d9c69ae2e4affd4acf045729a19ac143fa8d9613ccb42
SHA512 8813303cd6559e2cc726921838293377e84f9b5902603dac69d93e217ff3153b82b241d51d15808641b5c4fb99613b83912e9deda9d787b4c8ccfbd6afa56bc9

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\Msvcp50.dll

MD5 497fd4a8f5c4fcdaaac1f761a92a366a
SHA1 81617006e93f8a171b2c47581c1d67fac463dc93
SHA256 91cd76f9fa3b25008decb12c005c194bdf66c8d6526a954de7051bec9aae462a
SHA512 73d11a309d8f1a6624520a0bf56d539cb07adee6d46f2049a86919f5ce3556dc031437f797e3296311fe780a8a11a1a37b4a404de337d009e9ed961f75664a25

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tvenuax.dll

MD5 1587bf2e99abeeae856f33bf98d3512e
SHA1 aa0f2a25fa5fc9edb4124e9aa906a52eb787bea9
SHA256 c9106198ecbd3a9cab8c2feff07f16d6bb1adfa19550148fc96076f0f28a37b0
SHA512 43161c65f2838aa0e8a9be5f3f73d4a6c78ad8605a6503aae16147a73f63fe985b17c17aedc3a4d0010d5216e04800d749b2625182acc84b905c344f0409765a

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.dll

MD5 ed98e67fa8cc190aad0757cd620e6b77
SHA1 0317b10cdb8ac080ba2919e2c04058f1b6f2f94d
SHA256 e0beb19c3536561f603474e3d5e3c3dff341745d317bc4d1463e2abf182bb18d
SHA512 ec9c3a71ca9324644d4a2d458e9ba86f90deb9137d0a35793e0932c2aa297877ed7f1ab75729fda96690914e047f1336f100b6809cbc7a33baa1391ed588d7f0

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\Msvcirt.dll

MD5 e7cd26405293ee866fefdd715fc8b5e5
SHA1 6326412d0ea86add8355c76f09dfc5e7942f9c11
SHA256 647f7534aaaedffa93534e4cb9b24bfcf91524828ff0364d88973be58139e255
SHA512 1114c5f275ecebd5be330aa53ba24d2e7d38fc20bb3bdfa1b872288783ea87a7464d2ab032b542989dee6263499e4e93ca378f9a7d2260aebccbba7fe7f53999

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 37188804d04f057ceb86e225132a40e0
SHA1 82248c8becdbc7aaa86af791d19834256b20921c
SHA256 cb9cae8c980a67cf3907b6a9322241827f246f70fc34a6783f219694a5442e57
SHA512 fe7126336039a4cdc2067f399966e1e6bf774ed95ff34805ab152e1124dc8575f17b197a1d9fba073d61ced2a84ac8f58326e8bc64d073cdf354516af9aa9c89

memory/4144-1657-0x0000000000400000-0x0000000000424000-memory.dmp

C:\Program Files (x86)\BonziBuddy432\Reg.nbd

MD5 a8ed45f8bfdc5303b7b52ae2cce03a14
SHA1 fb9bee69ef99797ac15ba4d8a57988754f2c0c6b
SHA256 375ecd89ee18d7f318cf73b34a4e15b9eb16bc9d825c165e103db392f4b2a68b
SHA512 37917594f22d2a27b3541a666933c115813e9b34088eaeb3d74f77da79864f7d140094dfac5863778acf12f87ccda7f7255b7975066230911966b52986da2d5c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5fe7f673dfa8f4e5d4959d28bb3ea7d3
SHA1 5c8d2d56aae12142e61112809d8e2e190dbcc916
SHA256 1184241ee349ce17ba13fefaa5464b0bf80583baebdd7d3bb20efc6587d094f5
SHA512 c325b6e180b58bb8381b8510341e427d998bbc78e11181a58cc0dfcc659ad6e3e565ef52e9c0a32825a1da738ebf9bc18415d55c98f8a2159f1e88ce1608b65c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3c6fe8da2cd479e0658349d3317daaa3
SHA1 77db9c62503ccd70bc64fbb04163ceb3fde83bb2
SHA256 5cd4fda9c4451d57ae21248f930bce57a1bf913d7a757a3a6087fcc2b902ee95
SHA512 e6fd763c63243ff04ef2d2639aa18c4544a7d132db0052f6d367b5bc77d8888cd30dd0929843697b087cb208c57ea31040defd9f8d784eb68af25b0d1e701ec6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 be7f85b610799919294229a4f5432a60
SHA1 7cc6bf4c8c6ccb0284c453ca7f234a7c1b6ea7a8
SHA256 6679ae5cb9590becf55685679861f16e2bae0fdc223ff590fb891afb8bc51ebf
SHA512 b62757a33b9e6e445d5cfae74513c37c3f2e62172931717776cf7a53024de78e637a1f1b60ccbebbc74521c952351559a59d8a3ad0347f74eb2ec3b7398e6033

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 cf989be758e8dab43e0a5bc0798c71e0
SHA1 97537516ffd3621ffdd0219ede2a0771a9d1e01d
SHA256 beeca69af7bea038faf8f688bf2f10fda22dee6d9d9429306d379a7a4be0c615
SHA512 f8a88edb6bcd029ad02cba25cae57fdf9bbc7fa17c26e7d03f09040eb0559bc27bd4db11025706190ae548363a1d3b3f95519b9740e562bb9531c4d51e3ca2b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

MD5 3cd0f2f60ab620c7be0c2c3dbf2cda97
SHA1 47fad82bfa9a32d578c0c84aed2840c55bd27bfb
SHA256 29a3b99e23b07099e1d2a3c0b4cff458a2eba2519f4654c26cf22d03f149e36b
SHA512 ef6e3bbd7e03be8e514936bcb0b5a59b4cf4e677ad24d6d2dfca8c1ec95f134ae37f2042d8bf9a0e343b68bff98a0fd748503f35d5e9d42cdaa1dc283dec89fb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c7213156bb75e7dab7775b3de18f632b
SHA1 7f741f5d4631b35e4db45eab29dd85d0efc7c846
SHA256 edd8b1d621569565e8af891a7013b88cf7bb16e2460a3727df220fed3115c85e
SHA512 b34fb2298b2ba5e92464ed02c1248603f4b52ae5b7d9c4e9236e11f5d1fd75240ffc5f845e3e7b0adbaae841d80de275de0c9b0a95a49fe3921e18a97771e65e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7d8cc03f43a84bf7d3f1efab2e39f3de
SHA1 c697d380d2e73c10e20af6e78b92ca1c4a16d125
SHA256 72cc1fa9012ddad4cffd0517515563627cc0d6666dd70774bc949c1d91519c7a
SHA512 c615af1fffd0ee5e0dc509054063cf81d7e116beb4c2bcf2bac2851c5c5c842e48a3dd75f2ee7f9a6f4f381a7a82e0556da8e43668e5c08ba355d4630de106b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c5c5b32947d14c99bbcb21ad93e12041
SHA1 cceecee3b3e3c7d44881d583a3510867445953e8
SHA256 fb12a03bd1384e7eb51bbbe6ea02fedd36d7c728473a9783bb63f6d933cedb22
SHA512 f9576a57a37f4407535e5db5c4867873789c94499c286af9cbed22fa8ff20c842669c18c947a7e13d3dbef9be82f8f9e266bca48eba6492c7f82d5ba3a726aa5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 41f7ba374f753b982a4c16910350082e
SHA1 bea7d6628196ca9a086df0e04f9b04415c06b361
SHA256 45d31b87c0b42ce683ac31be6294d146e86b6ed986831faf38a12f7731f2d375
SHA512 30f51c0690fa740d7af0a90b9f7af23138e70dd42a40059cb96e9bebf84090d07067b544cda8d8c064f19c9009a0477c0304dcfa659a3dfea4bc2c95e36a3149

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00006c

MD5 e0d823d82af46b76903d70d9e0db0fac
SHA1 8ca05aa26a10bc15ccf64abcc3a7d56446bc2563
SHA256 e3cc8c80cf5a8726a413e1e2e42e285ea4f8c37ba3a90f3f65b35e428bd74fe3
SHA512 52c94d4e42d86ccb2cb3a739abb914d9ff6be023ebfd9606e4e0b78fb2a10295b272e88cc580a8dc1ab083ebfb81acf6ccbc1aa571ba885129f847107cf17ae2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005c

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000060

MD5 6f80cffe0f079c9646228f860aa421ff
SHA1 f6622c4b9289ae07f62c4fff3051f4d9a7abbd9a
SHA256 54d8fdb63948f89f878e0b785b1ab7c275f8ecaa5e20048e6311f1a85e7f328d
SHA512 f6e508ead96273d0b0cbe63382081e277608a1b25622a44a99fa910b9cda07c12b73d88a24af587c238742aca45b4bf322c26ccdc7f3c6f056592849ede7e175

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000067

MD5 74c240d81e71ae376913677111b6fc7e
SHA1 9002418d668b0b5c3541a86fd6195693384b9fe3
SHA256 e0c7d5f46ac580b10c72b512709965137f941d206ab0995d13a77a0e3f5055ea
SHA512 66abaa43ad96f7466d1affa8bf039c90d2bd6fb64898e506fe0889ddfb3554d89a1c3e9f652724cb791c5c104ca68879e8145064173a09fe2580e3fa4fb9b64c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000068

MD5 c30d2da9fb20e32f49471c06ab0b4683
SHA1 0d1aa96700760ed1564756a24a0eaba66fa27430
SHA256 28c0929af10cee967c8c4b07c6e0cffd475fd6b02ee0fa430d6394c80b8fbe1e
SHA512 431314c00a7de250551d1015b256bcdb50859d43e86729a8ef72470d619a5ef146e6cd74183dba953e0b30e6393116c48aad1b54323905ccc795e831c1c08720

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9444ee6b0ad947a3dafae018c6d90bc5
SHA1 b45be028a46544a194ecdbc36b5113bd425a3b84
SHA256 8f7674a2f1a7f4d8be1c9cfe83974f3922f90f4dd963530437519982cd0ac4af
SHA512 4ec07c92d9a6c6ba037127e561ca8255932a5ea2421f582cafff4e003cb377f3c3b9ca95384e71300100272557de7ef4fe9f6f3575cf7b4f9c5001bef822790e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 58bef609718463cbcaf5f4c26780ef44
SHA1 5e44bd2c3c02e4e581f23c71c591e4859db55cc0
SHA256 3c5e0d9723699bcc5d2e555fc366712815573ec06f2c2e602ea2666def402e95
SHA512 7d77d0b343564895b5138e9b783413d971834658874208a14f3190096eba9a16410db070c962655e494eb2f6d5759c5308d58e700aa0bbbbd2f04011e2e0db35

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1ace2aad3211e72e70e9077d1fb3672e
SHA1 80ca03027976792dcac4decf9df6fda8edc899b7
SHA256 d95d9e7fd781096b8b15cf97e0bba44c8fbdc5d8343665a55da054730f073cde
SHA512 7bf0d4a0a6e14b262d293e67e81725c57ce36d498973c51b9f80804db45c7fe603ad470d556c5c06b0af1a4010632c70c6d053b0d6e8d4ef580bbc2e4a48912d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fd35b96cf4ad9372819efc9499e376b4
SHA1 6ff98da5c4c0933e6aa4811ed252e1b2086e22fa
SHA256 05ac39f28d3ea50f66fed82998c92ab44e50dbc878ceae82bcf6f266252ee102
SHA512 1d1d513e12996df9489491375a7505c73c135b49338a6722c180674358a2d5523d8c5e4c123841354f949ea262eb118fa93e10e7695a88c31a463bc8471f7329

C:\Users\Admin\Downloads\Unconfirmed 706741.crdownload

MD5 b9db9a4910cc86a1305eaa581ebce914
SHA1 d31dd0f37fdc11c2ba3f1b04e25a6a0005805940
SHA256 e3b6c58215067296f1e830c8a8f6f2ff303d85dd57133347d4e67a031adbab1a
SHA512 c202b52c7024113f72da88bd9963090b270580026beaa9da1ea929f1d1200aa03b1cbf4ed3bc503d8bed2402c655246149985cb9d6366d40c2321904ae4f4a9e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a67be8eef194e7b61650089e2814b7ec
SHA1 e0a63f4ae03756b470380f0c6abdc2ca7d88504b
SHA256 bbd07c72ea4c891bd10e4d1fc252426c4ae764b5f79cfea7327205ed26c1a7ca
SHA512 c7c77c56fcef4d22f214fd4198e8bae66166bba50620561514b80e2eac9c4179a15715108eb538ea0c7da8eb50515bd593f2177ad1f5d79680cd544b4c7e21e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 386bf54633fc0795d236ae136e51967e
SHA1 93adf7e22aca7cb94c283c1dff9e302977cb785a
SHA256 7dc85d7eddef05f3d533783393f3860c1be26630d640c9466060eb5ee6f1c0bf
SHA512 a3aedf6ffbc5128da5c85c1dc4c04f234769acb2ab8f0b6487a0fca726ba86330efef9054f4de8cecb029fb41e8f7a884a2ca2ff3fb1554fc2403844bfba2b5b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 34b4688fdfe3f8c496e71e906f0c3f87
SHA1 e73c511a19878c4d2e789401dde7c6a501a49fdf
SHA256 ddec459743c24050277c1aab63e83655b8a8d2baf95bd16a17374e0be24581b8
SHA512 3ba947aee58cb7575b5f130990d9003a9ebd4e265bced83f584064a8d94f864e081c265e43f03e9dab18d9692f41f6817a3151897b38d2928a99b4200dd94636

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 604395efce834201fb9e29b720be9d79
SHA1 04d82107d7e9e88f0f9c6f92f9172f225147319d
SHA256 75f44b75a0eb218dbab86255df98abcd1ad9c71f49810c15a45fc52b96ab1f45
SHA512 084c5f08baf1264588cb7ed55c9eef095f60d3a91e9cc1fa4280c3c7f0975241b515661e2486e3cf8bc5af53e9b12fffe15ca4e3699ddf381053ff8ed631158a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 f88b3e8125cd7bd82cd4ff2972bd28f3
SHA1 52ef166dff8687ea1eb50d2b2a854fc16bc15d47
SHA256 a87a15b569f6c92ddfbe890479b1fa733afc0f0d2a8653e4a37c9c00a0a4e874
SHA512 4738f44b4f8ab062f79d98e4b4d887293ae9295d3ead7e56b5438eea2b33519fe56c75d6cc7ba1da21164efb3d1e036e8033d354984f393df17764bbcff3d051

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e62d4a2d32e632c6e187fcc24e3ba261
SHA1 5dcd12a58ed616f592ef47a49b6130d3d5e72828
SHA256 3de0e0e824a2616f4405a9f856c89cbbfc46d79c6dfbd3a3b069f23363c36638
SHA512 aa178cacd8120a226e23c95a36a1a5b1bfc7b23ed68c8ebbcd64acd4f25e61a71a1740b119a21154f5d2874a039704ca3723ce211433601b889c7e5e9f6ba2f0

C:\Program Files (x86)\BonziBuddy432\Reg.nbd

MD5 4de674e08ea9abd1273dde18b1197621
SHA1 7592a51cf654f0438f8947b5a2362c7053689fd8
SHA256 56010f4c8f146425eb326c79cbad23367301e6a3bc1e91fdcd671ce9f5fc4b63
SHA512 976d5772c2b42616cf948f215a78fa47d8154798abf1148f7f750545ed3de9ec1ecdf2e7e16b99c1459e5519a81301b9c1e6864e992a807b78257f0abaecc4c8

C:\Windows\Temp\asw.07eb3d09eec69b9e\servers.def

MD5 f50c8c38d628323b1f44967f94e7b307
SHA1 c98c58ddbcc6655d8c3c89036b26486f465fa6c5
SHA256 52ac6e1d5aa22ef10f9a3016b65460f11923ee985efcde4647dcf11c5b7606bf
SHA512 ee6534fb1f88ee95054802c6f0bcc129b81de2ae5e96d387103ef8a76be9f95ccb2fe3e84ceb2daea36d922584a75a79bcdebdb2e9bef2c2953fa7a1f24e21c7

C:\Windows\Temp\asw.07eb3d09eec69b9e\asw1947b137ade166b9.ini

MD5 b0c80b9583596dc9039ed90db16fee53
SHA1 06d3fb3f0a9ab840519a589ba8416524eb8aa6e6
SHA256 4d1cf733bdecf337168dd4df21cedb3320f90b895eb168abfd59609101130a41
SHA512 a42236c5a793f11859cc47904e47d722b098ef7a3b90e65a14a83b57262f30320496e131208db93151ba7ece6aa44ead211ba75a44f381187f39c6196ce7eb4d

memory/980-2990-0x00000000039C0000-0x00000000039D5000-memory.dmp

memory/980-2991-0x00000000057D0000-0x00000000057E7000-memory.dmp

memory/980-2989-0x00000000038C0000-0x00000000038E7000-memory.dmp

C:\Windows\Temp\asw.07eb3d09eec69b9e\config.def

MD5 94a5f1f775935505601f7b8e8a9bb24c
SHA1 9737f09be0c1537141b5b269b5fdcb4f84d9621e
SHA256 697cc26c59c6f0e489704ede08d7648b7aba7ae7b1f31b85bf55855bae8e5847
SHA512 13c685344d4cbf88b88315d58425ad465e21d4b31f99b9e45a66f54a4ce08502cc1d8d7443c034422dbd2e605b4409cbe7e5654e46942ea1a53c1447c259f1ab

C:\Windows\Temp\asw.07eb3d09eec69b9e\servers.def.vpx

MD5 7d6d0aa779e3c412084cdffb97f6df21
SHA1 3bc1d5cd321046ff9ed6f8540f84936c11543b35
SHA256 b7829a4b85b33d401853642dc7d31598fe4bc64057e0cc72718016f29a0ebc0c
SHA512 264e0fe5e4bbdede45d81624cf33a34ae9a7b8cc7f64d867c2a811f0a5824fc8f3490e4606b8714576895ffcfb9d7b8a97f6ad6991a2d1f1526e3bbfb9a2e84c

C:\Windows\Temp\asw.07eb3d09eec69b9e\prod-pgm.vpx

MD5 26b89360ef429c2e746d52d659f75fb0
SHA1 1799be7617c4d48650bd31393ead0a86fcd51b6f
SHA256 5c0513d973426c0e46f4514b5d5839cf4006b798813448748d0230ff8ae10f11
SHA512 f43643e42e67cc5c349159b95a803c30009a4288de27deff789f45306bc012fcf096fead250328b88085a5b58d1042de6d598351de545ebf1d8120f7de13a0fd

C:\Windows\Temp\asw.07eb3d09eec69b9e\instcont_x64_ais-a35.vpx

MD5 2a1fcd4d1c63be04ee07d7440d5a33a6
SHA1 a264329e4db892a39a614c9deefaf00e57769331
SHA256 f0125c4fc5b39c3890ab0e9fff9e6130804a6d5c94e323cc8fc208e41517da40
SHA512 14c652bc28dc3bc9e1829ac439335ae4fc3537bd61ecadf46f337c8556eaea42cc40c2e6aa26767d73a28634f8631bcb28f93589d581a3083dcf338b20cfd7d5

C:\Windows\Temp\asw.07eb3d09eec69b9e\avbugreport_x64_ais-a35.vpx

MD5 c28cd34484c17758a3a8a5b4b037ea6f
SHA1 1415515b3bd578fe2b614ce9228da442b51e527b
SHA256 2f627f1ca0ae1738dc3de348317376397d927a6b7d30b4649beb29d5a05a42ae
SHA512 f578798aef7eceece13202a78f77efca842a8f01f46f888e359a9bf43b2b20b0f65715263b0ee62d2877525fc6fe7929079ae85b264cb72fd51795a392111e59

C:\Windows\Temp\asw.07eb3d09eec69b9e\avdump_x64_ais-a35.vpx

MD5 26e63db52833fbb24f27224afa7ce184
SHA1 013b6f965bb8d9dc45b985ffaba783327e2bfe6c
SHA256 c948d4db5d647373ad8e49268518fc2205b1b7f8d2e6962e5a05373bdbd0e9f9
SHA512 05b97fb0849c2891d16d70210b6844638ec49fe65215c6a2758efc3e5c2dca494660eb5b5bdef364334a9973576838a54c23c2adcdfa4825902013dcd9cf7ec3

C:\Windows\Temp\asw.07eb3d09eec69b9e\instup_x64_ais-a35.vpx

MD5 15d855b1103365bbfcbd5645701d7535
SHA1 ff665dfbfd645e4026498351b48a133a7599a914
SHA256 1b858ba540c29500787d9c00da346ba05adae63b3902238bfdfc43adfde3e73b
SHA512 fe1a488ec1ff83c9540e66025474b6ab9d5e1cb53f25693fdb1ca7c4f04c73c3ede603c8ccb071455cf9a8a63a61002b7efbc4a3f2cbc0f1da6e9edaa5dfd6ac

C:\Windows\Temp\asw.07eb3d09eec69b9e\offertool_x64_ais-a35.vpx

MD5 df1e6b885f09ea0c762a598de3a7332f
SHA1 f41c8389e270a02900c33712c3782e27bef05f0e
SHA256 b381bf6d4eac584217643db1dcf8ccd8c3be664bce9357986d84c7b38b0173b8
SHA512 2c306ae652141252ab1891f567b0ddf9af3064ff6e3021d03565490249c30984f77bd33d5834529e18e8ba2e4a5530b61782a84390dbc63f94430b9e5a0a0fb4

C:\Windows\Temp\asw.07eb3d09eec69b9e\sbr_x64_ais-a35.vpx

MD5 6a245c216083841e336052f51fee5088
SHA1 3ffb352bea29c4866a430a88ed5aba959c587456
SHA256 f625fc2da335b31c0f6c01cc765765dae6b8345d5fe9bb1683798fe5509ea23f
SHA512 1343d96197a56c2c11b69215b04a54ab8600b55b423ad46949620a6e9d1a38a82d4883397146e40e194839557f45ec693f7e0f140e19c21594c7bf34f20a3059

C:\Windows\Temp\asw.07eb3d09eec69b9e\setgui_x64_ais-a35.vpx

MD5 f9e6f883df9cafbdcdda9b408e2e684b
SHA1 f7aa64def7d141521d499980cec13ae90c3ad6de
SHA256 5741eddf470374d3b2552ca2f5f02ab399eef1af0a92ce5bc326420e8d7e4675
SHA512 8c92f074669506f166d328c17d6b4f72612cfdc19a2fa1e65920b4b52cb2583d3a618f4f429e87320ef88ef46424fd6f3e5081152d71245ca8c2573337072ca5

C:\Windows\Temp\asw.07eb3d09eec69b9e\uat64.dll

MD5 e94dc9ad1572be73b869eb53b42b6187
SHA1 4b5921c13396a0781ef6d20713758f6abe78e9b4
SHA256 f661f50fa1be5c4aa746916426dc239d8bc233258476e94c8fd446b083d7fd7e
SHA512 09c1cfe83ae441a8b19c83cded377b9dbb42b5c626d87436f113b2c1e2f44c5fa421a19689e424fb3775d798343a0cf20b6d074f19070cbd4e174742813fac17

C:\Windows\Temp\asw.07eb3d09eec69b9e\prod-vps.vpx

MD5 e862636ff2013679881692fdde02cc43
SHA1 751d88d675bdfa0082c0eeba2f45cb254120d87b
SHA256 bb64c039c3aef0c1ca76406212a95ccf0f58902adeabd4759169982d823f0f4f
SHA512 6bc2097b1217e3e4f9dd8840ae524d872de88e46d0a76201632a90ab19df8cc0fb1d0eb6d6bc109b1a9af3ca0342b89caa963d49430eb648f911dc7796d0af12

C:\Windows\Temp\asw.07eb3d09eec69b9e\part-jrog2-41.vpx

MD5 8244542112e55dd588ff0c9ebbbc7d7f
SHA1 b38ff4b2c23442f57cd006813dd8dc31459ce46b
SHA256 1b3c6c2f0520726b87fa356e76e4cd51ec365e4d982237318a7ffbffa6248855
SHA512 f4c91f152f99e1f2ab3b8f15b73db8791c7fa7061adb6c7a6a2bfa010fe51a7d6e09d14edff4ab920d341e5bcc539f07c1971fe076c87ee5cf27af4df80d9a0c

C:\Windows\Temp\asw.07eb3d09eec69b9e\part-vps_windows-24040405.vpx

MD5 2957ef1b5708fac03362f38408507ca8
SHA1 bd7769e70207d60e30057dfdb64b47aa834e6f61
SHA256 5fc360adbada89903934efb9593678754d80e7d1076ef3f1314d26b3113383ea
SHA512 236c6c7c0750152a1d648a7301022d36be33da73aeb760bff431b191d170ec3c83394638464c767b2afac9d99f5a0d9c702d080420d3d8cba9e844f97539509f

C:\Windows\Temp\asw.07eb3d09eec69b9e\asw3443b6d07d8de36e.ini

MD5 abdecd763ac3670c796a6f8a41dce7c0
SHA1 5dcbc7b4032559d2cfdc49ffccd47606c49ffa16
SHA256 845e12e5182ceb87eabdd74c58055b55f496e1659aa377a042f6a30a6f4e9ce1
SHA512 e9b6f7547ff78a52d186c34fb7764edba0b3e249f504903d0c82056330defde26c014ee4a887fdcead1f3faf15a459d20358e6881ab4dd3e4c99af1e547d3f59

C:\Windows\Temp\asw.07eb3d09eec69b9e\config.def

MD5 058124e579bc4c3ecf62658cc91f87b5
SHA1 8d7d81481a696c27fddbde02a75c675c52f05d74
SHA256 d09dc1a1d388b83e605af1765ef2247b531adbbc43d6801fd94f973c96c3439e
SHA512 f1155c03ffd8b619f31b4e5913cece89bac5e97d979d761030a8b05f221232bb8f11e0fef4b6f27607dc644d66c41be829f9f14f63c79bcc6851a2e26e0f286d

C:\Windows\Temp\asw.07eb3d09eec69b9e\asw3443b6d07d8de36e.ini

MD5 1e116b03304fcd246ca09f9f1d460e31
SHA1 56fcdc9005a2b47668b43eb6dcb9a519ca078e6f
SHA256 f273200d6c11b2ac5cfff9d8a10a8bd72f39f47b973e18f778132a714d02a9c7
SHA512 b2c83fe3ad7254d73aaf6a5310edbaa2927a22504c1f424301b48505a89f82c22facd9f65290ff326b16590c8e6efdb8e0cab1cdd623037262e46bd77b4ff9ca

C:\Users\Public\Documents\gcapi.dll

MD5 3ead47f44293e18d66fb32259904197a
SHA1 e61e88bd81c05d4678aeb2d62c75dee35a25d16b
SHA256 e0d08b9da7e502ad8c75f8be52e9a08a6bcd0c5f98d360704173be33777e4905
SHA512 927a134bdaec1c7c13d11e4044b30f7c45bbb23d5caf1756c2beada6507a69df0a2e6252ec28a913861e4924d1c766704f1036d7fc39c6ddb22e5eb81f3007f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 9af3c9fdb182174e9f17207c76209c45
SHA1 d913aae194de25fd64f7d07ea4ddc3020a16c4ef
SHA256 d2365352812d36311fb8c690f8bfa2eae930b2b7863e2c39ba4dd34cd30aaae2
SHA512 4f673f8e402a73a8fda46e5bbb29a91ade40946bfacd5f0134793083d0e198166725bfcbdb9e6d8e977e41b42b3d64fcc94f80b8e8dfc3093ce2062ad92b5d3c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 352880ee7d7ebdedb36227baffd59a19
SHA1 6bb261535cc7c9c71524c01bacfca9eafc5ebd4d
SHA256 f50dd7ec1dd8ead782605284c7a3adf9c664554adbe1e99f76ff4d2c6d4b3d51
SHA512 207f8f160df07d1e492239fc44ffbdb606988b21bd7779c11c056b52bfc8420df31d6ba1a192b98081f2f0336954ad83ea87cf594ed01531e4ba5c1fac35aa06

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 90327ac7c14f936ee54e220ba35e7b7b
SHA1 e959905ac9f4ef156749a26c49f81eb74517bf7b
SHA256 9e589c467bf177c52a9e3533d0e3857d94f8b9401df4064b03a1c48197623799
SHA512 6f24793e251ded3757bbc71f380733c9f85768bc30552f6332626790a6462574647631ec6128dd5bf8c97fa59779f234a9d647db9069471004a5b9b89a9b64b0

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 3aa910e9ce02f25625bf0ddba876779e
SHA1 f27cdf2691e1974813855462b829cf1f2ddd50d5
SHA256 50b18d79aac4e0674cbb80b3dc482fb53f4203077fe62c0e53942e68362cf6b1
SHA512 31de84580023e27d95d75d5c336aa5c0283772c8cc24ef1e9ebe255e2eb8562b3c84db5cd1961854187920fd4be6648e369113815f60ff5a59f15abe4b2841ec

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 be6792ce84a9f0c03974152adf624576
SHA1 b6ac302b362f8c7ca65d6bbd87cad6e9fd660f44
SHA256 0bf1c34e5a1fe86d5f957e74ce72f4d3b7a20c96d5b6245fbcee4ff3a99bf6d0
SHA512 37a61d24a288f2c75da060602a0c0d94a1377a2d758df6d60988474ef78c9a600eeeafae370d0559f1509f597636038bfb2ffba3e7cdd2fb7418258e18c83094

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Program Files\Avast Software\Avast\setup\ais_cmp_swhealth_x64-8cc.vpx

MD5 27f2f58c4684eae36874c2ba8324a774
SHA1 78aac2b5ef6aad0342100ed8308f2c5a135abb56
SHA256 fe8aa44ca226ee61cf02e43c769975df6129a42d00da6dfcac2a282a14be59b7
SHA512 78b533637d68ee5f0b15bb2ad3fc37eeedaa4383d3a1263845d6c1223272f3565c3567b50efc5201e78ac9ad313ae5fd9f60bc2d92b7dec4fe49dc7ba070249c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a7c8d776092bf693555b713d926e6866
SHA1 2c06b7dbacf0e061a6521e72877c207c9cd2c867
SHA256 444c9c780d73a49793b933f7efbad834fcf3e16201999732abff338baa20f862
SHA512 5354cfd63a143a851bc6a6234e2c43db72dc85611b0f9a2995112bf3441473d3eea61fcc24124f76adcc1e3f4695ec8369c6577717f8f096677a8635bce2fdaf

C:\Program Files\Avast Software\Avast\setup\ais_dll_eng-887.vpx

MD5 24c1ba1221544007db08b39196b08a35
SHA1 e6ed33311c7a9b8001429a5a63847bd3808fd0df
SHA256 bf4a8700a6335d4e322ccce957735a080dd1a18b93bb69a2bfa353b6cef38943
SHA512 02981130c8bebba5001cb277bbc14fe0c916b7f39ff4c94fc294655fff5a63409eab697078249623a5411a4fb285e08766de7e04177dfc5377042c3d55f9420a

C:\Program Files\Avast Software\Avast\setup\ais_gen_streamfilter_x64-94b.vpx

MD5 75b1536708d5370634e89b3db25f7245
SHA1 4d061ab3f6708f520d050de7f40841e77f573b38
SHA256 958aed08b058a1cf7656d0b28a51f633bc01982ac0457cd9d215d0617d9cca44
SHA512 e56cb06b1708fb0b5778b60641c5be91d31adc575fd3a7acabb432cf3e247091b4570e04699bc318bb2f5381e0d5ab44b6602c68b79040a94e661c63cae12028

C:\Program Files\Avast Software\Avast\setup\part-prg_ais-180317dc.vpx

MD5 3bf218a788fccaaabd1ac5bd6b89540a
SHA1 0860207ebd976e1abccd6570a3a496985a962587
SHA256 cd3fc3c6bddc212ec37238e3e58a9cfe6d33353a934f5f530e28430eb86cf736
SHA512 6c9a9ce861460f1586006b7fc353e4df7ee5b94a872b13727105af69e9b7485aae690493a09da989444660757f3cc3e1f0a78e55b6c932301764d4edb9519935

C:\Program Files\Avast Software\Avast\setup\part-setup_ais-180317dc.vpx

MD5 e96ce7c857af3d3ae1c94014ef0a3217
SHA1 5d9baf012aa29e0b8b922faa58792dcdaacc374d
SHA256 00cfe30b19b6da5eaa5b298460d25bab67e2bc195d1dcf6e724bdc61e283814f
SHA512 a3115d1330e5662c77e79f3ac69b590951da7246a76b4c0a5223bf80e313014a3dc3252c2c9868e48af8c53d51b36e79ac96e0731bb3eb92208f0a5ff1090a62

C:\Program Files\Avast Software\Avast\setup\vps_binaries-41.vpx

MD5 1f189ae39396ad4192a8e8b9e9e42e43
SHA1 5d89ea062f9e97714437861aba3df4e2aef7c620
SHA256 cada7ed29f57e2e5b7326aa4b296cb8e59479ac80e842bf209d26a5021881736
SHA512 63e0bb9561215ed6fbc14452d21ac152f78a99d9e36d2381652bcbdcb0b90c1a162a7c516c2e994615bdc85ff90cc934c1ee6f2f10ec80ce824d3ab9bd143a06

C:\Program Files\Avast Software\Avast\setup\config.ini

MD5 a36c8c4c17a386c686776b370eb9567b
SHA1 8897de06566684196b7d1230d144d784c0554b94
SHA256 822b239dda4d288f6e96d63a70dcee35f69144219c1c7b0c2fff9e1068a0fb7b
SHA512 8dc2884272335c1e494c3e00e9cf5d6dc383bbeac56ce34ee2be63d23b5de9337d9278efc373ef1fbd66a7e6ef1fe937c1d25393116363e130dfb71ce89398c5

C:\Program Files\Avast Software\Avast\defs\24040405\aswd4529a4c4b8227db.tmp

MD5 a928ee2e47ac8e4ed35bab529ff79791
SHA1 fd15005796e686a63676b40f0821306cf469120d
SHA256 5f12dcd8211d8d9721701d434013cd6599597260594964085cd7f4fb6ff8e14a
SHA512 81301c5d3f3e348a0174febac60b9fe30749ce29a6023d966b38726a2045e9fb3980455af625828753a1384716dd4962b011192ef5466ad2d528b81f734e5bd8

C:\Program Files\Avast Software\Avast\defs\24040405\asw742319625cdf0dba.tmp

MD5 94e9a964acc433db26a9550813f3cf40
SHA1 0f711ae6e95d4469568afaca9e50d9604c24fa3b
SHA256 1d4621b5d70564babfd2c7507396e166ca478fbaff4d80f1c7e6c2920d2242b1
SHA512 01480c08241c66110eca9f938ad4cbaba53305fbd09320acac751ebd238de3b1efe79248fc857ab755530f10eb13acd59b8b396351485d9fa5aab2675e9b5e7a

C:\Program Files\Avast Software\Avast\setup\vps_binaries_64-41.vpx

MD5 b945c26c42ca11104e475361e01c457f
SHA1 41973e4cffc22457d4225db51749bb6e9c3bfa59
SHA256 3787ac543609bfe19dd3ec7d56f633210ad0021fca5b0899252319343f60629f
SHA512 277e5bfba268879bf5fe1edf4614cd99a5bd4120ea5b7a7d185e50cff781a77cd00b9982720897ef3cae13bb28ce2e806b1a7e748bfe81985c0bc8fd9f496638

C:\Program Files\Avast Software\Avast\defs\24040405\asw7ffc08a113481d29.tmp

MD5 813b0b9e81599b155cca8e19f323f986
SHA1 253395f50ae0c77bfacce412c65ead08bc5b7e28
SHA256 b67ec40bb8569ee88485736c96617527fe250a93e2fc8e4f0382d26c951e22c2
SHA512 165d3f7aa5d3194ae41f9e9e32c2d99cb4f4af92117c15869d4dd4c1390c4930a2d6f329181ef348fa7be1a8436eb945041e8469f6d2876e3bc7370d7e09e89b

C:\Program Files\Avast Software\Avast\defs\24040405\asw30fcb85185615406.tmp

MD5 423c716d99be2f6822f5451fb4df3cf1
SHA1 28fc2c23a8086e11fe14136ee83502df1133222e
SHA256 25d58bbdca667dba70a28bfd84639c0c364adc41926ed7659de84dbe3cf61129
SHA512 c2b8f32b8c0f0457b961ac1e34b9dba847f96a41574dfd4350cd74a4bcf9bdbcc29caa075f97c51b7f6c174322b627551847e9184db4c72a6fcdde40b5dee619

C:\Program Files\Avast Software\Avast\defs\24040405\aswf40b687f60fcdc1b.tmp

MD5 295587a4a70ab30907b3775436dfbb0d
SHA1 196f409a585062b636537a1ad0f7cfb5d0e2d059
SHA256 ff04d93935aadac2e3ab048bd2df39cfbe14702f17a51ef21769405764b66b09
SHA512 ec5d28baff85cc5e10af41e144dff54372639c330f41a17595c73015a455193231d6c8330e0f4673cf11770b880059e3d03c1b5d6c81691f9b87dec4e1e1999a

C:\Program Files\Avast Software\Avast\defs\24040405\asw956160cf6a00bbbc.tmp

MD5 ca327980bdc7ba6fb5557a1b262d6150
SHA1 0df12bdb6b4a8e6120657abfd3cbd29c369a966b
SHA256 86fd85c6a9d246324d5f36676b6f44452ecd2443f27dcaf1a826875e2cc7cb82
SHA512 7da49515d4f6609f0671792c01623004843dfa571b6ba1edea1a7c6938701d9706eba54e19da18e63a21f58cbf5cbdb34c351c9e4768b02ae0d74efb78fdefc3

C:\Program Files\Avast Software\Avast\defs\24040405\asw5b7bd2d549a0cab6.tmp

MD5 f470c4eeaa000bd38273a9d60df6687e
SHA1 1ea2d9cae322e53ac7458d93ec316e4bbe879e0d
SHA256 d5fdbcb6b4e6d029937cb635ac9174a0b828f0a9d75ee1a65bc678b2f15ae918
SHA512 b9caaa5b0c05b824c8d68159c169c70d706d6ec1db00a70a64e8d9346ee8e77f18d7678b0279eec33ff5d775c44eab74c85dc8e6bf2d2c7039db5aebac0a3d71

C:\Program Files\Avast Software\Avast\defs\24040405\asw49b0689346faab1a.tmp

MD5 64e22f9bdd52c0d4d790e182c74f8ce9
SHA1 71fb50e5b3361f9e2fea7a5bc9f8b824c14ebd24
SHA256 4475ded56242f7ac9a052ca3ea9117cc7e72105e6d9f9342725e1cd7164b6017
SHA512 8a5a2d955787d5146aedcbbf927c74207e8540dc48acbc630caf4e62a4ca63a06e329e1b566583bf4ada4aef7aca709ca44856f81aaf68ca3ba737bf050b70c0

C:\Program Files\Avast Software\Avast\defs\24040405\aswa211a0f3d8fc4f81.tmp

MD5 4c7f75cd6ce1a8d9f040d9bee40b1d21
SHA1 3a8cf4d22b62613c9d5c9d30dfee9b2820cd5519
SHA256 b5fc8a732bc4c39d1b1e0fdf15324ee40f72b4327fd60ae0b56db18182299581
SHA512 42f1ee7ea68d742f7ae4127e4dc653518666d3239af14de52192b6d76af67cf8c289ffe828c4210eabab85ea9d05bdbb80f52b3c5c9c60a96dd3df3b3698f9af

C:\Program Files\Avast Software\Avast\defs\24040405\aswf1cae71e388de4fa.tmp

MD5 55ba732648d9a6946b7ca7bcdc5fc97a
SHA1 e680b141ae476b54a3a8d020f4f4079f76d79a84
SHA256 93bcdb7439db1c65d6ed66a2135610a01eb59cecbb0f8bacbdec07c1ad0aa28a
SHA512 3464fa656f2b0e5486d468403f316b6abb6c826072222d84ae301e9df45afaa78b6ef6bbce8ebeba2cd7cd96b1fcd6d9a1d5eb228553fe31c8606a0c8656fc90

C:\Program Files\Avast Software\Avast\defs\24040405\asw69cef3379446c529.tmp

MD5 1af6f5765669e370ae6155f9fe0dc7c4
SHA1 680f1654a414ad5897759466173f143a52d15ffa
SHA256 88e02feaddccc1cd7ca7242ccca75a7fdb7781d2f7170f4fb1b5c4662234ccad
SHA512 fcc5ab3bf9983f7b53c9ce6df1d3ebde70cc22fea0e84d697a195dc9f08c66f66d1fd3d73f4de0ef4e8789abf5121277304ec6b5204b3e2e621dd4196eaab7ec

C:\Program Files\Avast Software\Avast\defs\24040405\aswfa20323c3b964102.tmp

MD5 59072e357186416486db9cce442800d7
SHA1 b75895137411464a9a1df698f3f1a954e40960ea
SHA256 8b2bfd5123bc56d97a82b5b060d0584d857cfd8e510cf2fea1443545ffbb7a9c
SHA512 2835835a2d985101f2f18a1b19f5a46eb1eb23303526721fa3235b6271941af38461f5113d23e5564c5af2cdeca4b22a5b31a463907cb62694f5ac5d5fd37cb3

C:\Program Files\Avast Software\Avast\defs\24040405\aswd263885e75bd77d1.tmp

MD5 98795ab716b9349c4e29afe6ea3081d7
SHA1 777578da11a42d840c9ee13437c629ffc25c1983
SHA256 edc0ef52918036f0f421aecc5e1107f2a081a903681236fd799b755c6ba62d4d
SHA512 dd7dda64305923a7052f7d2fc83580c160880eeea1034c06c4129e7944c3a42203240a8eb23bd2638bfe658f5dea3d7790cf684575081764c1104da94cd9205f

C:\Program Files\Avast Software\Avast\defs\24040405\asw3b8ac97cfc429c95.tmp

MD5 facbdde18ca7472f31777904aba7ba58
SHA1 dffbe603ae8e85d895f1c664910ce534b522f435
SHA256 a84b0fe6eedfb93b43269469b1ccdcc8de0c874d7bf86574315123dbb2aa714f
SHA512 09e8acd1a294a4184b0901de01783a4c3d6dde951c33be525c16c145f25d9053e857f58de4ccbb99aacec185cfd0744b80fcff218114a2011e3456c13a39800d

C:\Program Files\Avast Software\Avast\defs\24040405\aswc8edbdaabad46697.tmp

MD5 25704a2b00a9194da3349558872282e0
SHA1 cbf6bca963a9b2266fc4890892e647337b8da345
SHA256 5fdc52b3d2d0e08ee0d3593ac9933299941eda0f6fd312d246f355fcf946a3c5
SHA512 b1d9abc53aa969c83d7829a40c415f9006442f2bd2b36d06c3cf685ef3d070c2c6aeb598272d895aacf8f69188b92e42ec1238ebcf0abfce94aa7c1df879eeed

C:\Program Files\Avast Software\Avast\defs\24040405\asw2876141eea66bdd6.tmp

MD5 03cb41627809af97aafca809eaf3cbd5
SHA1 b86d7190b4f41fd68671da10726a738d6dd9c506
SHA256 5bdf5c2ae71fcce220a95b50d883e1c8044b815aa30b892719ec37975467201c
SHA512 45fcb2373c6660415a46d36845a4d275b4b8286e2608f088798895a0adffbeff877e92b42632e3cfb81778abd2d91d74d6cfdf6b09ccda6fd2cfd9ef19397a48

C:\Program Files\Avast Software\Avast\defs\24040405\aswc07680c056140974.tmp

MD5 b2b2150c0d5b26e18aeb48b4f6a51689
SHA1 a7be729b7e091a1262f04d717f6a7813faf1c9ff
SHA256 7cc6e6d0b755075ee2f08927c1a8bfababd2d50872a32d71d8e8e7f73af4bfb4
SHA512 8d1833bc32f5197752963e7896b5a2285c41c1bb407b92e21338094a457012d46e26ca7b83185edff1b51ba719a6b0f0728b986156b91705c3a71788cf8353bc

C:\Program Files\Avast Software\Avast\defs\24040405\aswdcfc706c010d14d7.tmp

MD5 c196822216e78b5b9eb77b87da20f6b4
SHA1 37b7c1377c6233f46b03966240c8f987d27c901f
SHA256 916547b5690160888aac8d6163a11c632f6018af9e08cb7bffb55cc7ddba9853
SHA512 f1d773534dffb8b6937df881def02200f27591af4925ac42c148d3f96a0cd8191927eedf273afa56592d4cf9115dc7d84548d493823b650512710843cb5df7c2

C:\Program Files\Avast Software\Avast\defs\24040405\aswf7c4957e670a31f8.tmp

MD5 e6e937e9284cc4f28810c0e536cf7df3
SHA1 a2cfd51f66bced7f8333588fa8e49b42f1687c5f
SHA256 9964267c5f00d5a55531d244955c0359e59ff8b29d9ef7ef408241f8681add85
SHA512 ff02579188da1f4a78755599b4cd15a74cb905a1d3f6a2459aa53787c080356f74fbd3fdb1964e034d87f419f6f6381602f91825bdd6b270deb3e399d2cf1e4a

C:\Program Files\Avast Software\Avast\defs\24040405\asw3bdf99af52fb038c.tmp

MD5 99b10423ffc7dcaa9c4254ee44c90004
SHA1 a2a0928a08f9a5aa9609e80601f42975e6757ad1
SHA256 6f4e2fd3d4b6fe9645ec1b4d9aba5cd307f7114385cec7ba15b4ddc3e378f2fd
SHA512 e5eb6aba6356e94594e7808d42de407fa6ee74eea82f18a0604083321e8a6c0ae8a688b02f6a79062b930ed36f6b708784eef41c184c72966c1160e9cbf4d772

C:\Program Files\Avast Software\Avast\defs\24040405\aswbe062045a31bbc04.tmp

MD5 8c7cda7ea954fc63bf9081c3ddeb2092
SHA1 35f43e9732557338724ad2696e25df57fef47d80
SHA256 84c2dcff181be28f4e2c580e43e5eb11e305032a0dbafc6d2056268bbd2fee0d
SHA512 a6b6d52bef9f2ccb41ad7e73264e3a3577fdcd3e9b154a918f3debacb3e881af6ade44388a54ebbcb77e8f7a9822cd7a259473470ff0bb4d66171c2c0b5ceba9

C:\Program Files\Avast Software\Avast\defs\24040405\asw1c6a0904112e29ff.tmp

MD5 1a50ef084655a88079b0f894bb69c3e0
SHA1 8440b900bfe320bd64c016c975fa7e95b4ba8d81
SHA256 c745cc857e613b040e97146e8e753f5b9a2c489d08b35ee1e05c7cb195d858fa
SHA512 2cfccf11d71d7e452f0c449fde48d58b36ba9276427caf68d98e11747b0eb29ddb6f35b6ed665a4f7ad8b26a14d5b42916d4fc1fbbfd10e90048d0ab10d73864

C:\Program Files\Avast Software\Avast\defs\24040405\asw1c360db4f1ea9c82.tmp

MD5 391cd8a4567f7951bfdd4cc9e332340f
SHA1 de7b5b73c7d5b7073c85283ba7cbcfab96a65445
SHA256 4e24146eb7ad7f669d11c76852631183b8aa21d918974f6401ca61070c5a9802
SHA512 4c9706d3a067c4f527e6b1adf7505fcb2c33a0ffa9e6f4c1337639a9da497cc8834f3b6271d83c32d842ae65857cf2fcf9ca73b6299cfe89876530573316aa42

C:\Program Files\Avast Software\Avast\defs\24040405\asw86236ad4015dacfe.tmp

MD5 07d0b42d4fd29336b3e6a1c1ca690a35
SHA1 2fba5d3cecb3179ed8e685344ccb0e72b7f9de7b
SHA256 56ca6ad9a2df6371628eac9f7af351c94114e715c93d50bfd294fb4afafd64f5
SHA512 ef7659cd9598b1e757ab86e4f2e987fba8f79dca48f3b025edd7faf17d2a7a29638566308e035193b64ca5f422a3a249ce89a0c77c02c0630a08cf1adf56f1bd

C:\Program Files\Avast Software\Avast\defs\24040405\asw77b7ca0059c1f531.tmp

MD5 170bb16db83142e86eab43b041699f44
SHA1 2b29224e48ffe2b1eea22da12059cc267c8aeed3
SHA256 597e408c32b42350b36481e97bf437a7a7525fd9519fca84bbf0b7fbcf7db2b0
SHA512 9263c2f4e5c5249a9676e10a123d4acfc9f575880d511567dcd29f7c1d728c7799bd11d76db299e8a9af021a8c7e035f0aeccb6882ddef9865266887ff5d0a95

C:\Program Files\Avast Software\Avast\defs\24040405\aswce092f827f9b0692.tmp

MD5 bc1594a02aebeef31573e678e217f4f9
SHA1 97fae89e0e991a5a1d35d4d8b2b26419fffcea3f
SHA256 bf0adbd2e1076a9939e49586d93d83a238f92f08e3e7cefab0f736e8b364d8c4
SHA512 3d35486dac63e6605e0f62152e22693b2ed9be6dc80971bc03b62bb27b1dfc597522251e1c477bfb52942daaa221e31a6a2f82e5380b83b983d8422ddf505d77

C:\Program Files\Avast Software\Avast\defs\24040405\asw8404817c102fea29.tmp

MD5 be2d33eab7e2f2be578bbfa0ee47b0ca
SHA1 a374561f77b2ebaa204dd07b1612944e906fb0e9
SHA256 29f3c6a8bf77680bbeb900937063ce262b9e7e4b0c5c667a21235e8dc1febd72
SHA512 b04780462083da2d09924068d41707e04900622e0b0d3a082b76f87dd6b56316b21d1859d940cf954aaa61451e2233e2ec7760e5958efb2e0a4a635b9ef50f37

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f51afe85e9e6dd0e3296916a218b8f7c
SHA1 27e102020ae765ee763290f124acb57c758b0cd9
SHA256 be84ec15085be00cdc17a0385d69d5be2788e4bfdc06a3e3df96888ed9f98dfc
SHA512 865fe349011e803c726f131b24d39f8db9ee7fe8699ad51d11deda8f23857a2854e663606289fee30ba37c8344203bb8739e194ae70b0eaf61eb19b665657334

C:\Program Files\Avast Software\Avast\setup\vps_defs_common-41.vpx

MD5 926ff452dec6836e1ea8abaa67ac3701
SHA1 6b6bd2c48a15ecac21cc203d6d823686c758df3f
SHA256 7b10a2c63ac5d55d04324b75d149d8b53ceb1c78b244e1cb6bd8294442f653ed
SHA512 da39512e3a5cdc3e0c256de33fe7610b75d7a5561f16253d128abb8a02e8a70ca2f932d8287245ae0649938d70c5eadf7f649e9f1e0436b75e4b442531d99705

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7e86264e5fd28b957262f7b50b2dca79
SHA1 300a242d047902c16d21f52d5ec2c048bece5c66
SHA256 53a19535559d2aa104c21593ac3dfd6ffe48d66977e561600c2761487cafba24
SHA512 889c5aae76118cdbf080828f8ac393e872aefddabbb797a0ddfe0f768e5185c51f1ff72c0b7e9a72443d17ce6f4171249f5fbc0fca416b0bd0eea9f15730bd9e

C:\Program Files\Avast Software\Avast\defs\24040405\asw15a563298448c061.tmp

MD5 9b564b28d1c02c80705d5ff9353ed61a
SHA1 1de55b186d6dc4ec163bd99df3cc40fb6a1a5f9d
SHA256 6818efe223cc5dcb913222cb95e9c491d4b96b4213f90b1f5909bb588c000550
SHA512 d129db58e2ee011e2ddeb3c314f811bf5824a54f5e9d6c8d7e9b9963c389c2e4fc8761e43b9f8df7411b5e9794e3dca770e021c01dd59fc6d995c2587d6954bf

C:\Program Files\Avast Software\Avast\defs\24040405\aswaf90b940eaf21deb.tmp

MD5 bcac7e3c4f462039f1db5144752e2dd7
SHA1 c0d10efc98d188c126252887576789223af3b650
SHA256 fce1750b67a7b5d172a3f2380ae0e5bc4d38b2b9d73cafeb247c1f76055a7696
SHA512 b40285c051d6ff9b1fc3bef489df120be3c83142c96fdbc8068f1ce1daf2a92f89c24778fe9f9b87066f26efcd639d3143f404d9d7d864ec3f6fb71039bfd0d1

C:\Program Files\Avast Software\Avast\defs\24040405\aswcc1c14c7e2be4811.tmp

MD5 11f98d550722fa37a3cd33b2552ef4c9
SHA1 cc0cc377f96f19f0c438378dd1b8d0839ebebcc0
SHA256 21552f5086b2f9e37846ad974afa40f89ad87fa716aeadb27b29a698daf4743c
SHA512 e7b661b492bb3e58352b1e8a346000a420f8bd868e82a1a341243e7c8ec43bb1e29569463d1fca05b44993128e340eea699623a2934c773760f97cbe5e268f16

C:\Program Files\Avast Software\Avast\defs\24040405\asw7530b888a03df401.tmp

MD5 a65d7854311248d74f6b873a8f83716f
SHA1 d091d528b2e0e9264a0d377487880607ac870155
SHA256 68484e75c86aed8c948d83a9c55ca4d0b557987063f5e47493142d8e09837e4a
SHA512 fe87aacc0be8e6cc9c05725f7be3392ba850171e028f157ce786eb1ab6b5f06dac99b21394967253b6a7d0148b0013a2fd91d6d55afaa7ace52b066c60d4a79c

C:\Program Files\Avast Software\Avast\defs\24040405\aswe3dd45b1e4026e98.tmp

MD5 932b35c1258990c16c5abd16e8aef4f8
SHA1 bc4a0c2e26b6a004f8c116d78151b3bd95c00a34
SHA256 54e7d5be13c1d5457def015cc89912d328f11122a37c2a3afb8ec0f3b8366875
SHA512 0cfe081650d74e22f832b73d1dcd7e8fe3f14628c46b1ba5a439dc41fcab44ec75e467a55dfa27bd3310e3da5c1ff42adb33813c405c0473e75461cc955f159c

C:\Program Files\Avast Software\Avast\defs\24040405\asw353a2d00722400da.tmp

MD5 b9a032ab9413ffaab702137df382af7f
SHA1 53e78fb7ed3f3042d1d10130213081eee239b897
SHA256 796a51bd1d681da37a6d41830166bf97ed782e596a8463c43e4cce1466661960
SHA512 2290bf26a5c97488d9d2db3aed4ebcc172e09b369ea2c2983c1c284f10b236361344d3e4e866b95af3276961750e9242597912246e8aef6d3951229e84c08e44

C:\Program Files\Avast Software\Avast\defs\24040405\asw553ea66df9bac827.tmp

MD5 36404d4145ab3d21c0adc5b74f2ae53d
SHA1 84fab6b81775ebf36c233cefdd752c5aca1ee78e
SHA256 b5ece248d7dc259b7ed7d30ace8468858a59eb34342eacf93449362df4de88e5
SHA512 d14eb74d4dfaf0f8766d9c5f70d31f13a4d6925df80957421bc657651135e7585b20c61b64a29b162c4df2d8971db9284b53797a2a72817e4325c1d2567c7e52

C:\Program Files\Avast Software\Avast\defs\24040405\asw2acd681e26abff0c.tmp

MD5 32c700af17d928f73f62198a1a73f6c1
SHA1 cdd915d51fbbbfc294a9313b63b9ded95e32b18b
SHA256 e2f57842e4d1569c212629a8ab740daf7795700f981805eff56e9025306840c5
SHA512 82065d682b7387a28ce0311dce30c8a265220351e372473f881b6052ec82660bc7843e02b052339f6a4c773dcd5fcc03cc03964188f4dd203fbe67938818bb9f

C:\Program Files\Avast Software\Avast\defs\24040405\asw8413556856325a0f.tmp

MD5 72610141d5a8da549efb60b2061bf577
SHA1 ca86c49e4242f9e98a2f853757091b8bebfbda6b
SHA256 4a3ccc607113e6655843f6842a2d59007b8f5658dffb7b2e2fd8f5c684c70de9
SHA512 7f530387fde637d52dafbcd35832fafd5ea2d7329549c878301d88b0e7e52214f164137a87c8922c6f1a30934c2c6cb8f7100fb9d22258ed3f19e3f18ea2dedc

C:\Program Files\Avast Software\Avast\defs\24040405\asw65e580ba8fd30a3f.tmp

MD5 03ebabf0f3fc4dea240e018a4109b093
SHA1 c540c970fa72299efc6efdc4b8458aec7db9851e
SHA256 8fac6b87a915f1e58e291253f6fd2f251bffe72a6b05a654f86196800b36b1c7
SHA512 51dcd0b21a1522e15e6e10aac4ed4c1f9f47232193e876697d2eb60229230089f7d9d4225737d0fc87b9b23dbdcf6962787d1a719785dcad4e56240fdef84d5e

C:\Program Files\Avast Software\Avast\defs\24040405\asw05387793fe55ec18.tmp

MD5 e52358ff8d3a7da86888c28f421a4656
SHA1 d1f646c67ab3ace4ba03e2994389e4fb719b608c
SHA256 4892e7ce7d7bf06bf86217d54b785df70b93a6615812ddc4f6a2604f8c2a72bd
SHA512 4231c730fb207b0951c481c03a48a9e487c1f3435fdfd0806ac7b3d4337d9e5ced76ddae35a0b6ead6f10646800c8fad70af87db32621b6263edc674baacab86

C:\Program Files\Avast Software\Avast\defs\24040405\asw6276fa3eae03476f.tmp

MD5 f395d631c1492e90d4dfc38d2d7249e5
SHA1 cccd0162667c7781a3e6cfd630199b4bf10d10cf
SHA256 bef94ef7ad1a790802da29355f639a9fe01af93d5bc6c3fca9c64737de19a615
SHA512 6fb26cf52684a7beb5bbd9daf93a7e5fc73e19d6a346d41d8cca268fc51419ac14a6aaa66ef5b088e3ebfd3bf99da89a8417757fbe718149d431ddf111e13c03

C:\Program Files\Avast Software\Avast\defs\24040405\asw08cf60c697b12427.tmp

MD5 ced1bced491069f3b1fe35cbfb91bb6b
SHA1 836bf0342531aedcd6866c8a19d3e2599c576916
SHA256 be36bd28ccf235743e6a8dd8a8b944956c520d56ad7503f31a157e6876694fc5
SHA512 e882ef19b90843cd483bf44826f4b8df22e1a44df2ec83ea529902280ed532d287ff132701c3acf1b207492c9a8e55f738aa88902c936829d3e8b30d6ba85d72

C:\Program Files\Avast Software\Avast\defs\24040405\asw713e469a8036cf0d.tmp

MD5 a56f8d5888b3aa350d8ac42b6a5feeaa
SHA1 705b57e731550330794dd75b1be5d6e93a653707
SHA256 1ed4bbbed5e72768a7a0c708c1e4f17cfe03b9fe6f1860a25a0f78a03baaccc6
SHA512 ccb335e57538b85222fb1796ca95e0962fcca08b1fe1faa69a8143c9107adad10735d1a8821dac85dd019bb8e420cc33c04e93b57ec597234bc6bc896082f888

C:\Program Files\Avast Software\Avast\defs\24040405\asw58161e470d704cca.tmp

MD5 e271d8180e601124d63ba55d0748b624
SHA1 9615496c70d217c8fdf33ed4e27bb123545bc501
SHA256 376f85d01efb5739c1fcad981d371bfd225b19396d426dab33afd9b16ea6bb50
SHA512 745f7323bd2306eabf37ae17fee46aeefd1e6a5194a85ea828792f6fecf9b0b7f9288ddca476076194e775cfe5cd0c31feecf15a5b36c1ae4032978bb0e83cdd

C:\Program Files\Avast Software\Avast\defs\24040405\asw5d60913bb71903c7.tmp

MD5 4437d1f97f5c6c18853038262d6e4404
SHA1 c58c6f3af8cf73a62cc835844d8ac0287a0b708b
SHA256 e216282bfb2058cae3c55cbd30caf2419d872370b52553c119a2716aeb282894
SHA512 6d2fb840ffba01dbd166bad9e8a71e564ccef1672d314a74e02fcb343e74c838c6329dad6e19b5282648a73173ee73d797a0aa679efa8fcdb0c740e1eb7c3f8b

C:\Program Files\Avast Software\Avast\defs\24040405\asw3892fa20a9d2c30b.tmp

MD5 08b99ea4a077aa5d2590576af8c746df
SHA1 76c844d0013379bbc2177634e198a3dfb1edd187
SHA256 f6b55ce3b0628c798e33304adbb23c956f12aec1e9636f10ba8f766cf71ee21e
SHA512 28c83b789ac145f475d9cf83396e038f1f568e31338b5055acc3085a257961890ce2a9c55f35948fa9a64b4e6e214a30b9f48da9fff3622d1dc23274574dd21e

C:\Program Files\Avast Software\Avast\defs\24040405\aswbedeaf96aaaff544.tmp

MD5 233801265533a2cba7e9e5dc01095f5c
SHA1 6b4bd6af8b03d61fc1b10f1e7e3dd1ae307f88a5
SHA256 7872fc98979655c73cf40b9812a64cb00799665d8c6ca62b50dd01404766218d
SHA512 2a76fbaf96f78beea340424683d5c2ee377cfff24b508366d0c337c53d82cb8ffca0291d19ce2c09bba55b61d62d160cb9692f82e265445e1d56eb9c934aabd1

C:\Program Files\Avast Software\Avast\defs\24040405\aswed51b7373ddacae9.tmp

MD5 9d4b3990d789479b0c7c1358c6242d5e
SHA1 5329fc581868a578f16c8345ed91ad838d6cafee
SHA256 0f8a07797a340bc32d98c33048952c5ede05d3e6f89a580fe1854cbef6684ebb
SHA512 ad132dc46412ee7f68e803120411ed884b5b3b4b8e799b48de31618d85b8c47205ce74bbb4ce21168f2ce17de18ac90bc587b6df4a3f8519419a9019f11db2e4

C:\Program Files\Avast Software\Avast\defs\24040405\asw380c3a3f724e945c.tmp

MD5 ab1005e4b0a0813b70ff8b212c5cf7a4
SHA1 fa0088f31566f40b92e563c3bee052bbee47d033
SHA256 e2d5a3bdbb1a9c68ca8db3b1abae03b9d6ca76129626967b310cf4b5094963ce
SHA512 609924a0088adf613863bdf0fda44dae00ec7f2f8b77ade1a07aeab5811dc76744f3ac98f434e05798ac68c7929d7a4ee7535531f34da5379a0914c1e3594cf0

C:\Program Files\Avast Software\Avast\defs\24040405\aswde864aff104b352c.tmp

MD5 50f01ef38c49d73d12e7662504847810
SHA1 5564cfde1b461d31621d05e3e7407a177e42c8d3
SHA256 1e1ee00efb17b3eda22f9158b9a6651021075414344af453ded5b6fd7a50306b
SHA512 ecaf941d9809f09b3a9ba1eef8e1ce9b37790853034cb2f2de2372c8836540f90aa7fe383c98224ce4bdf2fbc29ef273678afe6b317a851831488922b26cfe3f

C:\Program Files\Avast Software\Avast\defs\24040405\aswa30093b3de7a73cc.tmp

MD5 4d61dacf1a4d8e7d4e2865496541fdb6
SHA1 b4d612ca9336cdd5101fd6545c3695b8a23be798
SHA256 4b3ed28963a4126173afcd03ef75c782fa636c3f7d965511f5a635f9bd13aba9
SHA512 2b875649e5a0038e5d09123311f3d9d837434d77ac408eecdc2cc56f6937bbe5b6f3a9bf57008e5a2f000d33bd425d45fc63019ec37b28110369a93397929b88

C:\Program Files\Avast Software\Avast\defs\24040405\asw5695b02be6763689.tmp

MD5 009de7b7fec051c553694b0d48d65700
SHA1 901548ca5da1be98e433b7fab7c33c4b8c34f61d
SHA256 986d90931c8952683128ae5a7d84aceed4df5cb31a9482073d35b25758eabbf4
SHA512 23c02cb0c56b27021c9fddbc469efd434dc289f0ec79bdd33b3e2559b1e74c87db408aaeb89f42c2abf54a7e75e74533f8bea7f1a949ca1c8893cd031c90914c

C:\Program Files\Avast Software\Avast\defs\24040405\asw4d3dcaee3859884f.tmp

MD5 055e9fae527fead571bb1c21c978ed6a
SHA1 15f6596048fd8f7c926f396d8fbf70d52d43f319
SHA256 a5d7ee23eff07eed12f907aa7f17343c1e156bdf04593d86dc6f0a6bd8e44b74
SHA512 62235e846d62dc445b1f28a01383e70df5dd20ea59a03fcd124ccadb6914ad2f50eef7efb14eb32f0d5e0bc0c4a023a0bc48f800c9b6beac5136a9bfca7ed9f0

C:\Program Files\Avast Software\Avast\defs\24040405\aswcacb051b5f450206.tmp

MD5 2e6c663e1bd5284c48aeeeb472ebaafd
SHA1 97d856dc9d1336c0a43ea3b9506e8bdbb088c62d
SHA256 0d6e786e153d442bdd080b9a533288b8b98492c8f4bb342c5a526a701a2969a2
SHA512 0e2584c92e49d81ace3290e01518fc9415e50acacc80b287534d189865cbc8e01941fa1f7b33a28710445267c20e2d44352e48c7e3435d29f1074f6acecb4212

C:\Program Files\Avast Software\Avast\defs\24040405\aswa4ccd8fadb37f8bd.tmp

MD5 28d791c33c0d3f1c00efa1c87eb60ecd
SHA1 0e83a89544dd322d36cf533457b36c3b403893f6
SHA256 0d89790dda16bc339ffbc8971764a6a43b94b3858f973b4edea3b5b42d836b0b
SHA512 e1afdf9cadd4dd54ac6a1b01350126344168bdc1385efef2b431ce535654d4de93f9551466d055574cdbeec257b3669dd62b303de13185e25991b06072ca759f

C:\Program Files\Avast Software\Avast\defs\24040405\aswc80953b0677db959.tmp

MD5 385fe9c311625869a9e33ca267db4b78
SHA1 33eab130b83e9eb47b84b058e7739751f35323cb
SHA256 ad6c15749a554137efd888ef1dffc3cc90a8ad7290bac9816ea7a77839768277
SHA512 efbc573ad4925b3d48618d84281f08e7ed04b1d581fbb384867d1e3d1288cd06ca276810bed8ec280205b240c5437ea37b78e78d05795ea3eb279785d5a35cf2

C:\Program Files\Avast Software\Avast\defs\24040405\asw2fcc204cfb7bc92e.tmp

MD5 e796184ecba9d9dbd838d72dec53a6e2
SHA1 85839694929c57c74b1acc4870b1a2e215020b6b
SHA256 7cbd255f539c182cf5a91b151554340be7f24131cf47a13b42b37f818790fa4f
SHA512 6b26acb696e2d84bd6cd8932e8fd9f722ce35a35a36179ae3615a4a847278ab6a168c8328a21b8f8cf397035083614d8cbea247cd19767c9daa1d2cb594c95e1

C:\Program Files\Avast Software\Avast\defs\24040405\asw236d77779c529e16.tmp

MD5 37707657a594f774f7239d8265bb35f7
SHA1 5bd2165ae889f72748abfefc19c8393be9ef8fcf
SHA256 ead3d220e14df6a8acbc164e6e897a1477f6e2a66fb6e3b6926321fd307658fa
SHA512 8c01ab9696a3e89f9a743a60b96a7a70999152b214c93b01d4518ed318086d590e8a3c7bd9387eca6ce69dcad1c009c13d0b245d44abac7eb8a4203d791bc2c9

C:\Program Files\Avast Software\Avast\defs\24040405\asw30066f1511fceda7.tmp

MD5 d67271bf34dcd4794ae016d824ca8b0d
SHA1 6ecc7241bacb2a75371e84a938998470d84913c7
SHA256 d5552e5e54a86305536dfcba5b0b0648acc0b270687b443d7a158c1101320612
SHA512 610fc6ae8b9b25b3bb3d64717f65531d432e8aa85e10b73fc4c46769f6aaefccab2fecc73e72b5817cc3526fe6ccd27ea3753422c197218e4ee656692e1647f1

C:\Program Files\Avast Software\Avast\defs\24040405\asw963a8e2d94b48f94.tmp

MD5 ef8962de776f9137187859fe731d3163
SHA1 489d54d67e3cee9e70f0ba917086692a87c5989e
SHA256 259fcce2691b19ec74c32d3cfdc56292e566aee28c2ebc2ab101c722e0ba24fa
SHA512 a8f27619ac04674ef826c2c57560d67908676f8d58947ac1fa6e282374e7d92fdfb8e566bafad6d4212164bb7f34a30423a6d9d12c6c6a8398bba6f167df46be

C:\Program Files\Avast Software\Avast\defs\24040405\asw8114ad88b252755a.tmp

MD5 cb8231767e26a32418a03d7323708fa2
SHA1 a7dfcadc71231f4044f1759a6f3ca6a69dc7f48c
SHA256 a3df99d26fa44719f22de3dc47685544fa4195d12601b8bbe53720b3a483742f
SHA512 6790151fdc7491ea904b1612d59b42f2b67b4b4ac7db4552b5cb4f62e4129100a0f0a08684e0a4ece1dfa88d13125bed4ed6df1fa8fb39cd7e762892bf95269b

C:\Program Files\Avast Software\Avast\defs\24040405\asw72a1375544fd4fc8.tmp

MD5 74900575a243af97c230bd5573d56973
SHA1 5619856db894990597a4fef9f2ff641496efdd22
SHA256 919f2d188a0789a69d60bdeca8ebd07a2687a0778be34a85305a049a9210c106
SHA512 5f981c965fbb95e853e19db6f8e8f881e380b5f09e28871f29f5cabd68054f5ebccfb6210c5bce56597ed73829df956b290bc3f66557f7100e00faf995c838fb

C:\Program Files\Avast Software\Avast\defs\24040405\aswe0552f49c49d97af.tmp

MD5 1990f2fc6d132e9f87448ff0922ba548
SHA1 1f3010499ded37b77396990a95e7b53dac6b4821
SHA256 e9b53ad2d352a3b73ff14774f6308d41fd913e328d48db212e18542d9781fa95
SHA512 0d3e75b908c5c1f1320ff4e1d7c0d0327c00f317131b95d88d4d04b3aa6256a1a5ff1cbfeda2f8ffc3ced27a06dc42b625a2a821b65537c10d0be9c10fdeeb81

C:\Program Files\Avast Software\Avast\defs\24040405\asw947da30e23d69671.tmp

MD5 ce585da1f4cd60f0897f088fe08ec76e
SHA1 be3190a4b0d18ce0d7c451eb9be36dd4a5fa20a3
SHA256 092742150307543415ec97b7c5dcdced385143490566bbcd4abc22633d02ba7d
SHA512 095746e2acb11f6d7f8befe2ca93e0ec28bc849f4c0730ef3f0011558c287be354e1258edbb010a7340e13dcd7117ddff2510b863b833757717fb2245bfddc4f

C:\Program Files\Avast Software\Avast\defs\24040405\asw54f8c859f9c7aa15.tmp

MD5 4e56ad611353c61404fe249767b65130
SHA1 1072c9e59d05cd7450e21004dd893875ecbe5963
SHA256 cb74ef52c9414f6137b65227e6121b84aab5c37a8cf16c690ca5d97985433738
SHA512 b96eebcb47abb375d6825fa51845f76546d32c563122bda7420e9130d5aeed174530e942cf2b4a43fbc29d14dc1e9c143579e832f047277ee020e2b84e10384c

C:\Program Files\Avast Software\Avast\defs\24040405\aswd70ed2de65db3f65.tmp

MD5 30182c8fe2f3e1693ebd9023b53aa51b
SHA1 a1978bc174447aaf1ceab68e28476fd0e96d7398
SHA256 69298d35164f216e2151dfa692637d698032319731eca333ea827ea9e2985d48
SHA512 906204679cefd5c34438fe70e54e9975275b693e9435a2387a5eca52531d2f255f21c5278d8994d8c313eafa4a74144949d1a5b6fcb44534300fd130ca94e070

C:\Program Files\Avast Software\Avast\defs\24040405\asw20836eb8a452dd91.tmp

MD5 8638688482115566e6e1fb6a0d4b2d5a
SHA1 d3ad3153f3f30c316f863e178d75cd6d1b735257
SHA256 7dce60d097210055f523577b22019d4a86f8a55167086216921fc74a2fd36d49
SHA512 9f91e791cca6d1aa5506b6f4532ded9765b52e93ba3095a0fe612db7d1264f1f5b058a49c4c3758917743b984d76f9d67a7297e202feda607f35fb2c1438f020

C:\Program Files\Avast Software\Avast\defs\24040405\aswd6eceaa81aa289ee.tmp

MD5 3ba447270ba4481c24ef925cc870a7d7
SHA1 07396a0dc4d2c699e9a727056fef0e04700de4a3
SHA256 383562e1183766c7fe2f8cdc6c7801417a710d69719c3129965a364af9a4aea0
SHA512 58f736fc90083cfb1a4917d354daebbf96f66ead02b7c31ae58b5eadf4408c086679aabd73fd9acc925fef870e1ccdacd85ab90d6722727935c1bcb6b02ce29b

C:\Program Files\Avast Software\Avast\defs\24040405\asw8011378d6c0d5f81.tmp

MD5 ea74de7ed002cefc43364ff7f6dcc588
SHA1 19b5fec30bd1e2979d86b6f824da4a8e1b6e1d7a
SHA256 3fb18a7e489c3e312d4c6367e575c2268d38577ead550baf3252b8532d003086
SHA512 7dd36502fc9da5c8354c6f7e1ef198b7e7fdcbac9c85508fd830f78bba800094ce822d0b028e44bf8e66fa4efaf41d5f980efb0b31be412dbc939ca4974fea0f

C:\Program Files\Avast Software\Avast\defs\24040405\aswfd19ab5c1e971bf0.tmp

MD5 acfa847892ff7b2c0bffcb86b3da4963
SHA1 cae5145b845fc1a9aecc5e558aa2d28b171ad141
SHA256 29e5d807e92758b1bfff29cb11f7befb76e445e4f14d4642ff199a36fb0712ee
SHA512 5de2925c37c56987a34cc5e51fa2bda6196809791eefa38788d8a8bb101b53cbb945743a2053848353ce850190fbdf127731c9f2065907470e981b0bc9986302

C:\Program Files\Avast Software\Avast\defs\24040405\aswe887f38962a507c0.tmp

MD5 fede58c5e447d2fa7d39b9340d72ef0d
SHA1 4f258d23692d795e2a78d73ff299063a0abfc33a
SHA256 cf52174b647373762150cd11a50eb0ebf1383caf6f641e3f79cbc713959d2a2d
SHA512 d51a55e7475d2d78cc7f79915729e05075b4c24484f60ce89149d1a5a4c598fb260a766b9b5e255d414d8adc3f3d19da1cbbb89a18601ca313f1cefd226d10cd

C:\Program Files\Avast Software\Avast\defs\24040405\asw617259a1be6c9cf1.tmp

MD5 c6b902a91a0f7990a59a5e0a02079b37
SHA1 1d28aadac0b9aa10d1e40e5a5dc18b439fb61e8e
SHA256 3d703aed5dede16026cc370a019ee442cc11f68be3e73766aff4bcd1c1101c86
SHA512 eccf36cc23a1b106d2bf46dd45b2f64599157251621a1dfa1391f086cdbb445282f63017aa1b36ebbb551e5d6a1fd373d7e643ccf685035ecc75ca7a95b08571

C:\Program Files\Avast Software\Avast\setup\vps_tools_64-41.vpx

MD5 32071dbb04960620a58a03ffcb6b64c5
SHA1 e03019d277284756eb64f1a42b58fa7cf8292bde
SHA256 cedf0c6491ae185cdb253aaf5cec8acf02d376308d0f08086bda7a9d61090a80
SHA512 315ed37490365bbe746adc671dae3e7d11415bc02aa26aaeace164577b997f6e33460b8664726c05c59946646f014262cbdfd2a251a53ba1e0086915d12ff93b

C:\Program Files\Avast Software\Avast\defs\24040405\asw89d10151eebc822d.tmp

MD5 e58a560ef0413011d2aaca9833ed8ffc
SHA1 23f868ff851af3011c6cf9f42a3b38f4ce263029
SHA256 5e0b80735b6b208abff3df7b3204913feecd3ff37fb62983cde6f075d7539784
SHA512 a3fc087bfad6656dbd1b3eb4b8948b92a165ab2521d425586b8cf04e420465be6b112d3cbf14d1b933a413e0030d860aed6e84b8498b0ed695af875cd0a85271

C:\Program Files\Avast Software\Avast\setup\ais_cmp_bpc-7e7.vpx

MD5 6a1910c51f39d1d89946615ad7c532f7
SHA1 584530581f5f30d09859d3031595441cf9ddfb04
SHA256 8d5a3de2b259d2c0fb35ad6d424ffa1dc00f890ace85b7c37932aeadb6482359
SHA512 04fb819b28281d28ad0fc97ed3790223232c79de19ae9826254db144ba6f944c811a37c5f9e5ecc0c6e4dd6c283053c59360aa4d9a1023d17ceac94a2a3f5112

C:\Program Files\Avast Software\Avast\defs\24040405\asw7ab803ef0837ab44.tmp

MD5 b7009b200da3486cf29d4187cc4d5029
SHA1 1629997924f931c3dc3c84eeb03283a74e529bd3
SHA256 ce5e70590d8ba54d7f078ace3731a099507f32a6d22be9a4497aba97c863cac8
SHA512 4936834eebc2fe442c9e4f48885c2e118899540fccdc454707a9eef3d7af61dec6df6f56df93ea16e7979d16e8fcc7ded45bbabdc991587bb7437ca11ff751ae

C:\Program Files\Avast Software\Avast\defs\24040405\asw5d979b0a00c8118b.tmp

MD5 3446f5d8e4fdf724569176c24ba5ce7c
SHA1 1cb347338d0f0a10482fa9188a8a752616e3ee7d
SHA256 a6fbe01f4911823e63e292611cc90c737780b141543eecd761850392e1c4ed2a
SHA512 825372e2f9b685828818ca86fd4deb52de73ba2c37ba144c980402c612f4d930a2c4b1097cddbd5a0f878b8f1d8e54863df097b59c2fc28a50cd9579ecb78af6

C:\Program Files\Avast Software\Avast\asw39516b9c3e2de204.tmp

MD5 4957ed73d5e5e303e351c8f8b7b53e1c
SHA1 e61238f49e44237c56d4d5b41aeb150160880b74
SHA256 59727f7a256b7a70971f2e62b43b0a923937f85689fc3aa4ae50e4fbfbf83499
SHA512 db4854667285bb1cd8d07ab189607ec5bc489afb2d0a5b5a3388f91cefd012feca689787452901e0eb1de6e8792e69c0097c38b89bba0d977d0b29e5e5ef2feb

C:\Program Files\Avast Software\Avast\defs\24040405\asw708986e46d684417.tmp

MD5 525f4fe527ca7c09d4ee3cf687547757
SHA1 8332ab48a2ef07033b97d2178442d8c6ccf6649d
SHA256 aad3b0a87587ea79ceb4cfda51ac5c93c565357f1c62b21b653ad5ce916244d3
SHA512 6763281d8aa1a985e767d4d7b8c22ce361ceec646022bfe33c66452548cc519aec23e9afab61c12f5c3e6bc7ff191554f226f3b8e94edc2458b8190056a38fed

C:\Program Files\Avast Software\Avast\setup\ais_cmp_cleanup_x64-835.vpx

MD5 81efd09f5f155a8cbe6e34899271f293
SHA1 1f831d9a974cc276269f0ed9920354bc612b43a5
SHA256 8841ee0badd63cbeafce4b9994ab49f5d9e05c7fc7191e18958373d39ca01228
SHA512 6777bc7773857555059fdba2e8f3ead6356c8286363729cc90723e5a8302c31d3e4b63c59464675b27a0a86860e62b987844db1f8c689c13fdd2f37ad2dc79fe

C:\Program Files\Avast Software\Avast\defs\24040405\asw1dfce71f4793b319.tmp

MD5 2fbb5f8665819c59e301f003d316c376
SHA1 81404e60752d791270951356a47bbd7bfeec2b51
SHA256 e54a0b7343c2fa40d51327aa965e85b9848d110f803815f8e28546ff14914c73
SHA512 ebae424480c5fe6eda83da4aee1c5592449f14357026b52424dba3f2e28fc9e986a8c04a391bbf7ef6dbb0689e767adb73d3ae224651578dc11f4ed5740aa79d

C:\Program Files\Avast Software\Avast\defs\24040405\asw01bd3ec1a94c5150.tmp

MD5 434a15cc096f1e2c9e92ac345181e5c5
SHA1 386722af36273b0bb22dda2cbe387aa4b437a843
SHA256 586bf1a6a6f1031c9bc69ca1497a957a46b7d7fc9487219932ca478c5669cf5a
SHA512 ec98d6bb6c6e05fff42ceb074514c1c834c3f4a2551fafb5db581cf4ad145036dfcfd2b1ddb60178518a3bdb3d6a078f5001605f65bb9b6480004ec0c1d05c80

C:\Program Files\Avast Software\Avast\defs\24040405\asw02f99e7d32498b4c.tmp

MD5 cc171805495180ae75c0240feccde4d5
SHA1 d5362f46283b9348c44ee4e7e4f137772326d1c0
SHA256 2e9358abee34addc7dc250c646224ffd1234f31867a8c98c45620c253226d193
SHA512 8a25446b365e3fe4cc2d85803919986daa2b47bfc5741d5794233907eaa0fc9850ee0815f1f04efcc16866169ee3554bf61c7b13580c0df83ce2021ed3058e08

C:\Program Files\Avast Software\Avast\defs\24040405\aswef64f078138f01dc.tmp

MD5 fb476f91943580bceee6ee5300da8500
SHA1 f1d5ddef2cb77fa92189a026d1d48aa02eb9eead
SHA256 ff947eb513b959c56c40f4641d0ee86a36c75310b86cf440aa2918fa5f6b91a3
SHA512 54661100bbc050e1042542d561fd334323ddd5ddc1c6bad5a4eb1bd9fa68c3967eb0d4bca8671ce8cab10d9b964425ad1582f0fd666b0f13290a2a82abe72f99

C:\Program Files\Avast Software\Avast\defs\24040405\asw5389ef5066ca0dc2.tmp

MD5 534fe68a98dd9a38b72506bbda9a9daf
SHA1 8b33da97ba8a55c28745536ec46cc3fa22876c96
SHA256 847756a48e1371ae2a6008772ec5e7993db907c2cef716740e67c71aebd89bf2
SHA512 8495e8c23b463d84513b25d472e31cf8b0be902d9a4f24bea11e4f39f8745d6b6a7f5d26b5e211dfaf9570ca9f16174217a6ef4365c846b1650b0fda0ccdf6b0

C:\Program Files\Avast Software\Avast\defs\24040405\aswffec1f7de1a8cc2b.tmp

MD5 cb4a7a9c9143d12d76f5367ab3c612d8
SHA1 02997965cb84d64a8146bd6e47bd79026157a826
SHA256 de92f02c0a0e4dc70196682fcb2e922a43d46958049fa4540ab1b681b2d4784f
SHA512 fdae5e9718580a6245561d9a09f72dfa63cb833cc77963e53aa7492d4d746a1f3acf40e2d263ff1417802116766330f9fad8a2992b9b376fb5374301f6e0759c

C:\Program Files\Avast Software\Avast\defs\24040405\asw56705701b1f6448c.tmp

MD5 4281d93b49b84ea47a0cc8d29d501bc4
SHA1 3c6da52d23b7d7d04c3f07b30257e500c064d00c
SHA256 3a0e072cdd5d3148e4ae3fd27720fe7af88b95fa78bd2aa3d3c1e0a3d25ad4e5
SHA512 ce2fac28824fcde94f1f13cc3240ef0d24cb5c5368993cbce9e833c5c398cf55dfc0b1dfe98b8a4041a0a085c31f7bdc13af9364654751646babffc2f824ab45

C:\Program Files\Avast Software\Avast\defs\24040405\asw17b7096cdc204e92.tmp

MD5 4944f1f66fd6848dd7eb1f6882c43eca
SHA1 984af8b1d5b0bdcb0714a4c4452f6bd0c4db7eb7
SHA256 1ffe4ab1c5e2b6733216ba87024195161071d8e4c7f6d3853f7d9a1214e6cacb
SHA512 5a20abc197ee953f87cd2a3cee571cb14d007c81c6a4f991022c43fc996158982ffef1f617b9be4accc390bb1e5694ce39173268e4580f080d86b2e1b8d21aba

C:\Program Files\Avast Software\Avast\defs\24040405\aswd35a2a22b2c286df.tmp

MD5 c9844445b3b7eee2b45655aae413b5eb
SHA1 003d93dbf93d49c87948f0024fc53e62fe9acdfe
SHA256 4b78bdbaddc9cd75b06843ff415477ff7e0acae26857fc5217bf1f6a5f443df4
SHA512 3cd3b56efe9f59a592489ba0056ab89cac0f1cc7cc5a827b4203bf68640b0a3f34591e115ae2f09f125c5f3e94666f810d8d159aa8b74a2d0d08d799e5a7b5ac

C:\Program Files\Avast Software\Avast\asw6de5a27ca75c64b7.tmp

MD5 bc339c4375dcaf244c6ca6aed7920d9f
SHA1 d52a60ab548305ac634de0ceef4ecc0a99b0a700
SHA256 417d73a1abc11a094988f0a5cab5d8d1149af3e4ff9d972fa2b8ec7ffeab4792
SHA512 4f3aef98ce2e964c3838123cb156bf457bc5b72d319404acb102f7e7a83f7c7cbfe78311bfbaaa65d88d82d1dcb5b0cb4a5acbcf4f8840088adf34950399910d

C:\Program Files\Avast Software\Avast\aswd6c1b695c816f39e.tmp

MD5 0d63986cb214f9f78951943978b9bb49
SHA1 c3506074a3447c59bcc3ff12377a5822164d7653
SHA256 501e933ae8f9145cdc7bec18cfa3d6003da03a396ddd89056a1d515336951bab
SHA512 1a62c40f51b0716072e46436b60029f17d5100a497bfe8154456a56ff080dc19c7d4d1c2e1589e22478c0c79f70f515fa59892d58c355549a260814ca29dbd45

C:\Program Files\Avast Software\Avast\aswfd65cb6f764e5431.tmp

MD5 0b6b80205995e3fc66565e185ff95c6c
SHA1 8324e0e5eeaf72584aff8304280e4a87707ad8b3
SHA256 b7c3b601acf2786556b8b59be309264ea9f188347b64b4d9a14cb859d85ab882
SHA512 2c7d28eb8123f66e0534da17082c7441eb733a5545e35d7b5caae2004af07f6fab3f293edd25e942cced05f0d2d6bfeedad4fbb1902498b469da127bc49fd1c6

C:\Program Files\Avast Software\Avast\asw4ba05f155a1c2440.tmp

MD5 998786fe78664098754eefe0203ea661
SHA1 a33140aa6b00f545e65a7ba970cb061544e92199
SHA256 7a796318905ac2db623f3666f59ec8479cae7968fe35f92a856cd4960cbb031a
SHA512 d56c0fc4f0ea8bbb8f840a90355cb47cfcf64491986ed594c6128d03f9307b29879bad02453b7ba6296551c0139f2002da2ba380fc6bb237dcfa5048ff67e39a

C:\Program Files\Avast Software\Avast\asw06cc19620794e99a.tmp

MD5 730d58a19a0231e705d7d63419d03051
SHA1 4202e59cf8f0fadf89260504d1a237fd1fc3d440
SHA256 595eee82ea795de27da52e2e57e9f1d41614485a0c3c9988017cb4c3d8b2c081
SHA512 8f59fcac4f01b1dab22e08f58f8a80f8988f59b85d31fc0ac711d616d359e4fb0a0d0c219d4a524007802c143ba9e4e22129580f54aacdb720482c1ebd2d7547

C:\Program Files\Avast Software\Avast\asw84187c026092b289.tmp

MD5 78678d949d8855917c55a117f8087eae
SHA1 6c87c3047ff5e2a285a0e13112d4631f3b6392d1
SHA256 6f84673ce9ddb6344913888f39fc586cb4977d51286154d3303acf7f1cef4511
SHA512 32546da0790fb6da798459cef0fa88a9443f764c2aec2025ea71c143e253e374307f50f0a4ee9a3cd363c801a6ee62238e6c5fb02790ef0f3599e69052d23e3c

C:\Program Files\Avast Software\Avast\asw6bbca707203a092c.tmp

MD5 489ef097414bca18c70d2d264d08517c
SHA1 85ef7e63faf5b920cc26c2690dd019cf4d901822
SHA256 fb821f4fc17e2d1033e6f3a214239ea3557abe6469c6f82c5f96fcf2a141e32a
SHA512 9326fb896979fe93e04c8cd1be4baa7f9a7a43e034498801c2a1b67df0bc7d34d54d29d1fb471d05cb17e9464684dddc09ec37cb3ef91ce021ec6ce3919313ee

C:\Program Files\Avast Software\Avast\asw966993b363e2fe92.tmp

MD5 e7f252c85e890053f5eea0e8987b045a
SHA1 16a41893a47bc3980d25b0960930c79ec5d94180
SHA256 78cc816826359a85b231483c2959a2efc3d739d156cb7e410711804f17dc259f
SHA512 373d21a72f54850e851a89149b61518983eb3d9ac4ab9a5ace775a64f0537126bbba8e8b63340f7d255a85dc79cd550e6b3174ac092c8079cb168a882f348ba6

C:\Program Files\Avast Software\Avast\asw607c360d32c2a01d.tmp

MD5 bbb225deb63e874fb6872a656bc5954c
SHA1 6eaf5c3d70ffc386cb07dfb10f7724722e97fde0
SHA256 738c8cd49e87c2e27194891fc76d21237d3cb4a91b5e875955b150a78e2f9d52
SHA512 701e046586a77b46a8ce2308b746b76dd45c7c7c911ef57de9e69cf621255c0d986dc5d2bb14faa81c8598a1fd4931f4afb834abab215d336fa69aac9383d053

C:\Program Files\Avast Software\Avast\aswb42ab9da8b5a878a.tmp

MD5 257226235a707c228953478b3bb4596d
SHA1 625e89b738bf6bb853b57611366bf9b92e2b32ae
SHA256 541ea25dd14fea03051bbc61e05dab94d1ea355ba66917fbcb78c8734a40f0f8
SHA512 39b9e79511d17fcaedd1731062e93bc68267de4316523bb7d9f759aad23eb211c8dc8eb3f5d16b9c203ca14851ccc23092844fc116fa7eff36c2369687626021

C:\Program Files\Avast Software\Avast\setup\ais_cmp_gamingmode-918.vpx

MD5 189a93709bedd00f1adf5d696fa15cf7
SHA1 4b079a9aa0229d2d0a8558b92cefde2a42967baa
SHA256 b242638b7ed47045516c19890be7864a51b754662d0e7995561cbfd0a4e99e9b
SHA512 097a3a279485e35c354e0a8add52bdfa0e0c598da88d530b29038c3f937a64944d3bfe2134e87715cd1d63c0b6e16aba6aa359a3c1c9cba30f1573179ddc50a0

C:\ProgramData\Avast Software\Avast\gaming_mode\asw2525155f2d2fbf9f.tmp

MD5 9bf31c7ff062936a96d3c8bd1f8f2ff3
SHA1 f1abd670358e036c31296e66b3b66c382ac00812
SHA256 e629fa6598d732768f7c726b4b621285f9c3b85303900aa912017db7617d8bdb
SHA512 9a6398cffc55ade35b39f1e41cf46c7c491744961853ff9571d09abb55a78976f72c34cd7a8787674efa1c226eaa2494dbd0a133169c9e4e2369a7d2d02de31a

C:\ProgramData\Avast Software\Avast\gaming_mode\aswb28820d9cb02dd9d.tmp

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

C:\ProgramData\Avast Software\Avast\gaming_mode\asw6d5a2d208cb06023.tmp

MD5 1527c1fd5da898c3bdb68b8a105937a4
SHA1 d0f9fd4a698f91f54f78dd2043c1349a7e4ae7f3
SHA256 c269c9e66b2acdace62e8ab631f39c24801c4644193bb3934a8dea3c43f669df
SHA512 d574498392a55b47dc81276d63a33e9870232e77f60ac0d78c9bd29e3d419d015a19241e86a7963191643f6c0d0fd2db613ca5290d559c3801358a60fd5cd27b

C:\ProgramData\Avast Software\Avast\gaming_mode\aswdb07a7d396976943.tmp

MD5 0bd42763975dc54ad5efdcd321c750cb
SHA1 24202455a58c7ced31240a90603c6489728bbfce
SHA256 4845a0d7b287399933536c12ad5549fa4f4d49f42500c7311dc2c3c108480a7c
SHA512 9204678ddef894657c0f6bd5451294e104ffdea90dae12fc3f642547debb80435b0cc9d08680f50482bc1236daf5ae1cd79c322eadcde7765e9e251231753e79

C:\Program Files\Avast Software\Avast\x86\aswed7ee9040bfdc26e.tmp

MD5 8fb8f124773e6759b3ee9e46ef42671d
SHA1 f9d28a35e69dbf00fe4c13b668f5ba619c269fd9
SHA256 06495ff297056aa235ea424c59e37e208055c3722c285e7eacfcc8700a27c332
SHA512 3c09ee3b9fca4198d86960720e6ffe2f4c2a551a4eeb4837b25689e883383b588f1db2598f25b1b14af7e9ea628da11e9c74f0aff6a337b041786b19543c25f4

C:\Program Files\Avast Software\Avast\x86\asw4b1fe7811101524c.tmp

MD5 5925de54ea5775bbac42d7e9671cfe8f
SHA1 9d72f5ba6eb73bbe471a9232a646cd30abc03397
SHA256 77a06b50b60c6865835306c4beda85af324cde8b2672413963a6cbaba7d186dc
SHA512 7d5f218f59fa345d56db68e9aa27c56573bccf891f414cbc2273456ebadca0daed3b422771576c4519a83f9804c71336e93bf37889203103b59e090de0955749

C:\Program Files\Avast Software\Avast\asw84b750663abd78f2.tmp

MD5 63ee667043f221eadce0dba7d8b24035
SHA1 a972c5c86b848e821224695d728188fb04fc12f8
SHA256 f016a1ffa6e4fec707cf75bfa170e0458c08d8ed13cc3603714f21ab5226b636
SHA512 c7dd965ebe7fb04bb301b876d0f9e5f678cbc7015f5e5faec2f9fa4e2925dd4e94668d88b069e658a39e90219b1f98e1902d454a904fb589004b61fa73e986fb

C:\Program Files\Avast Software\Avast\asw72c53cd3de1dd309.tmp

MD5 dfe443f3abef2ce3b2fe1d3c309ce50a
SHA1 cc4041eb8d66549df21314f50834659f0e23bdbe
SHA256 04675e23275a9ad0305e8c5b53e2edd5bd20cf170cb2a1a0e25c4b71ccec7461
SHA512 a232a683b5ccc3eca4b7f380d48673c7a342d9263bf1afe000f54108516989801a5bec81dadd14e9e6495d1c59f1419d8fd916a3b3445ffd52de3b415d1e1f42

C:\Program Files\Avast Software\Avast\aswa8ba82c94ea70b23.tmp

MD5 5ab9351d33fe30a3b436e85a880751d3
SHA1 409e9c0edb2b9998625191be9ea8b715ce21e0da
SHA256 386ebb633b74d25ec6fdded220d18b09b1e6d31a12504f350bb7e64e2b969046
SHA512 083b750790454ae2407307ebb77d02b23b44a09d73a0d91eefdafe4ebede5778a455ce492aad035c9c8de6173a0d7a6851963bb1885e6fed3cb87aabf35cec21

C:\Program Files\Avast Software\Avast\setup\ais_x64-981.vpx

MD5 9d975ae7b800dcdf3aab5a5c6cd41764
SHA1 3fd28cde11eaf7e1aeada3c2c5a496a4090dfe64
SHA256 a8318b3be99d8aa610a1430e7e4df40053d3146213913deedfcafff03a5306e2
SHA512 cad42cf6c61ccb5339c4357e170a20ac9328cc92e8c4a439a4685839e23ad5926b99556f84ff87ec582fca55788a54825c327a1a5f6daf09da9333a508891356

C:\Program Files\Avast Software\Avast\aswf4102afee486f87c.tmp

MD5 005e22df77a180c212a6e3d26cbb22ce
SHA1 8c3fdc806f5caef48be776cdf7e2b1fb25a93416
SHA256 4682f07898fdcab0fa9ce36fbc26ab96e48a4d9ab34b776876256b3e95a07515
SHA512 8e3963185ff333f074d9bbab143a484d6db26e73a07c12dce999f3377406008fb45b8fd69b23f0ff756af7b7b1869e30b705d85ade903340e3a20debb38fed99

C:\Program Files\Avast Software\Avast\aswab1153682cd9dd3e.tmp

MD5 315ce94f67f83bed759e4e664536c50c
SHA1 084f12e1f17a953dba7d488f6fcaa8ba96c293e1
SHA256 1807e1e090392b7389ef267ddec09f4f2c91459217994d6864ab519fa40e6ed7
SHA512 269cc37a9f686f8b8ed843db34c71ae6a78f25e711f319ff3784eb4f5346890d58401c83e18d879bcb0eec679e5f6dbb5a679e11b3c8a9c5559d175997843127

C:\Program Files\Avast Software\Avast\aswc090a9ab9d8f7d1b.tmp

MD5 dcc96b09b2541b35a9b63f5cae13102f
SHA1 197701c4b6f53b88af0958851dc39d3abb643195
SHA256 828d03c5044d3a0e9a675f4ab06fc82c330a5c230e9756153bbdd94fe4858936
SHA512 2d201280affbb6c0d47b51dd1f9c393e9dc97b98614ead9d31e0fb591eaa48288863993e26bcf9e54ce2ac8051b4de140108e829faa8d5d98f891d711aa51b69

C:\Program Files\Avast Software\Avast\setup\ais_cmp_idp_x64-917.vpx

MD5 5bb7fa30a9ebf3d8c793b20d0f36245d
SHA1 9e1306044bc5fc614ac443366dcb5326be30199e
SHA256 0cfffbda887da21b20ebc194c0f839c197266a6963d19889a18cbb5a082a345f
SHA512 4cbfb3e3f7938dd6faa916d682d74d8606f0e8add71c0d2f6fcf3a748aa91bcecec47fbf5d4e0a5f83b50f08d5389594b624c0edd0c137eb401aa55cdf1de99f

C:\Program Files\Avast Software\Avast\x86\asw3c713b71da2feb2c.tmp

MD5 fa744637851d83ec91bb0d73d84393f9
SHA1 fd7278bcdd6724abfb1339de3c4434a4911e29fd
SHA256 043351fc691bcfbd31ca2882609358a0f0a8fb7333e3673b0fe14883b02359e6
SHA512 08ecfe3c78003c3c2d8482d0ba1cd4304adabe6d829acb648a6ea6dd59171cb58583b61b12bb1f1c58ab520aaab77d4fbcb742bc32a82dcc135ff17b6013ab5e

C:\Program Files\Avast Software\Avast\aswa9e27429d3f7547b.tmp

MD5 5f386a4e4123a990ca31875f25dacad9
SHA1 c8601ed887bb5c7da788d92975a5d436fa55bb7d
SHA256 bb11737da3e5e4baee18400233c28731fed40dbdcce3ce7775c9643471d0c4ac
SHA512 e36fe6d53cbb2eea1bc50f78d9b79caf5b0f917ebd797986252b2fe6ee82eec54c49838f9b1a99fec348b98b732eda7833acb1f72ee5e758f9bd3e56f3949b6a

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw35c0ec6cbb754076.tmp

MD5 2dec9960003e978cb318be97ab618c63
SHA1 c4349969e816f075eb31ec0238208fe7782282b8
SHA256 738100bacb927eb3bd448d4be7a7693c2bb1810a98100ac30626bc569eb9e722
SHA512 bd710e9cd2efaa597884188366da76e419def53969c68f178af74462a049ca578b16e28df46e220dc1e1484ff6a306f80be1a5e018bf5738b233429517cdd9b2

C:\Program Files\Avast Software\Avast\RescueDisk\asw962b588a80152a83.tmp

MD5 51aba93b65204620176963b8437ced3b
SHA1 5e52b7d58aca658da053f7cb6a4d982dc04ecbfe
SHA256 875204eb16b067619ee9ef540cfd822391685e16ce9119c74dfc7c9b5b940206
SHA512 abe37d442508fb8fd749b694e900d30d70fbaded4f5c798214ab2ac7d9a3ed55d853a5c1b59b24bc26e9c58ec079cf1f32a611a447f95d057e3e4d06323d6de1

C:\Program Files\Avast Software\Avast\RescueDisk\aswecb60d2673beb3a3.tmp

MD5 1fb0fddf13d90f785de23a4ef7e2989d
SHA1 61580f779bfe15a27a7702e5910f8e0c4e063c5d
SHA256 c40f472b580205331a0e68542997a0334c33ccf60d96ba644ccc2489f75afe0e
SHA512 a17f4ef91b671996e14e2fa32cbe42eac44661bab96b5903745a0e76a1e5eaea543c07fc3a66bb7c9689ffe0ed0abdaba6dd2f40b3c4e7e68d705e5c30535833

C:\Program Files\Avast Software\Avast\aswc2f4a934d5ebc652.tmp

MD5 2939eb2731cb25c9a97b270f40147622
SHA1 68acf078d9546cf9b653b760e46271781bea1c1a
SHA256 e43428efc68309b891576b7b7f4a020617f696274f1b55fdbe6cfa315bf42c26
SHA512 6d165b82a22211ac617ee096a321be6b2cfa5060ccfa0e12799be3530438b01541f90d91658d8ce818d085129cefc941c4db27f200f32239a682b5d00a181679

C:\Program Files\Avast Software\Avast\setup\ais_res-981.vpx

MD5 86ad1292f215ec5bc476703252ebdba6
SHA1 a7e551a11549385b93a0c9daf5940d799098dc44
SHA256 a175d4add82c53299fc0e98ec530670379dcdec814816c1573198d8ef503dd4f
SHA512 8301b052c46af16686b2db7071e5b1b87dcb7110bb0e6a057682b533e2770cae7769df8234fd7ffafcadcf6097cd89bee8543f3bec89b6640d72f7efcd4a3dec

C:\Program Files\Avast Software\Avast\asw8f0077dc2cd54f28.tmp

MD5 dd9967ab1e1a825c1cee06a1cffc435b
SHA1 15f2cc84a44d87f92ac81cb600a5633ef849dad3
SHA256 26ef5b6e43c4092c781a1c269f004913e40fba100fcb9728c697bca1897e1029
SHA512 92f1f0d210b90fa013b3c1cd41a7b0c1627ea143e703121a14e3f7d99a05bdc8af763d82218323e4559dd6df9284c7c85f778bedba0ad5e4c76908884c895003

C:\Program Files\Avast Software\Avast\setup\ais_cmp_rescuedisk_x64-8cc.vpx

MD5 4cf845536f5ae74bbf2be1fb63a78e39
SHA1 699c46b1afdacc06861e12f9043502183eba7756
SHA256 e50bbeb3c7b9f9c1ecdefe63c6d8c6e9dc338529bcf2370a0f5fad71f2931f18
SHA512 fff87686729b1e73ce27b25ec1312c5011382ed09fee7163fc24ee96d6cde12f00a6516e1d2e6ccf0aad5ef5ecc7454b7269acc4f2011c7d86d90a24ed106170

C:\Program Files\Avast Software\Avast\RescueDisk\asw8e062d1c7f7b8a1f.tmp

MD5 88781afdffa6c70eaa63b9edd6633c48
SHA1 e034615b749156d96cc345070ec06a07641fbed4
SHA256 6fd9a08ecbd5e82937688818ef915dccbbc71483d008e4deea86073929736869
SHA512 f3a9723e94c0ef615d2e4d0406a99595c37ace68e1d125c428e9994b200793b8a59f67c5ef918bd2e34fda43ffb2751f8ae8198e28483ef8736dbd884268d170

C:\Program Files\Avast Software\Avast\RescueDisk\asw7794786817c434e8.tmp

MD5 f9ac4ab221895471e59ebe36b9ae5499
SHA1 b040c3704a13bdebdb1351a05b68224ae4e99f1a
SHA256 e8352b81a33345c5ef68710d2a661f8c4c4517a4005e9eb5d55338b50cf7247c
SHA512 fbd50085ad3dc8603fbd195620eeb8306081b840691b476674f2be2184cb6c97d18b163419ef435a1e277e214ac1d5a3a61b1580bc0bcfe3cf1969d346591700

C:\Program Files\Avast Software\Avast\RescueDisk\aswcff4cb9b9f37be66.tmp

MD5 94853dab6c9bb97bc57f9cc4b3b5d3d3
SHA1 d4329d08e2e3207708d8f59cd91da30b7c95c253
SHA256 7411911ec0c3b39ad5cf5937231743f2dc8030f013d9640132854292722efc31
SHA512 e73e9d2e7a62e97f76f4400b1444b1979eea1c6bbc840692868e25fe9833a25ccbf8a9109c2349f1a75ac12c6aebdb882f7c3462b0bc9e4879c081f9edb7772c

C:\Program Files\Avast Software\Avast\RescueDisk\asw9eebfacfd895f28f.tmp

MD5 3280cadb1434afb931acca140d27afed
SHA1 e0e73c71fc1abd039b6894e2daac42d6611b3227
SHA256 91d713cd24ec9b15fb73e1043eb6a5e691916edbb18ffe0dd96cee8eb04f79e1
SHA512 583c097a0daad42f3894a651334f474f9e5434f67baf9ee5b9617bdf2b4894f64ccd1aee6f98bc67354418e7551ce2fec38a56d06fe7d1be2efac898f88224f5

C:\Program Files\Avast Software\Avast\RescueDisk\aswb81afc2f2d6da025.tmp

MD5 ec82d1081d31554e75d7e72b30d31d78
SHA1 ff5615640cda8cec9fb0ad3fb8a4e441bcc8e398
SHA256 0823905ce46355fe514ed547d5c639af39b2b3d28a5bcabd1846997c7a4208b7
SHA512 2f36323db92f1c1d4e3b8f18f8258830a6200bc7061eaaeadcd0a655e30276592376fa4c4f706f497d5fcd00a1e5c5649e20407d3860910a184ccbe4b36547b9

C:\Program Files\Avast Software\Avast\RescueDisk\aswb033eeb4c53c6374.tmp

MD5 8218f8a588846d612e3b7fa3fe062967
SHA1 585e19143c18415ea9fcb1af1ccdf015980ae187
SHA256 eea72dc96a0e78406b89f75b271e60d2b62cc7703c653c90a79aa9fd6d814dbe
SHA512 239fde7668494fcc8707c792ef0938116970e69c55dcd6862fa3fbb700517dc39ddd3896791b50f8a1a3848406abb68e2cc5ee96e6e751e3136e945d1a260f5a

C:\Program Files\Avast Software\Avast\RescueDisk\aswe052e6434661fbbd.tmp

MD5 3e7ba4bd04a5b7f8a16e0ffe1fa2d784
SHA1 5f9721956ac82c4f4bb0a2c51aa4f6a28bbaa764
SHA256 cbc6db623054550688b363e670ad2eca17ff54c8ad50bb30d9760e88aaf5de62
SHA512 b843913cae85828b993563a2fac26f8ba0bb2fec52668270b1a0add50b46792a7b813b9df3abe34136658bcd92210fe346971938615054de7efaf246744baed2

C:\Program Files\Avast Software\Avast\RescueDisk\asw9c51b71325fa1ca5.tmp

MD5 bbd60a023299b63864fbfaaf9699cf34
SHA1 514838176e634bf2249f730895cb7919c16c5463
SHA256 3b7e420a3207016d2d80aecad0664b4d9bd518b6bac72e4784fa0e85bb0c7a39
SHA512 e5b2740d314ce766d3a5e2c818badd876967a050be0a6ebd5909582be111a178745881e23aaf944ef3a3c8094719cf480b6d808f4bdd2f360f131f723b5cb02e

C:\Program Files\Avast Software\Avast\x86\asw6fec1d3f5022931d.tmp

MD5 c723c367a205346433eacc4c126c26c9
SHA1 574a135a385ee88a750722ae198dfc8a28be3c77
SHA256 38d2d3b347ab5f46ba7d260fe79f1ecae3ca0e97f85524b3dda2bdd7a35e3fcb
SHA512 645bedb7319671ec28b2901d8afab3f9fa4af5c1d1e43ac8c55d597adba0af493a365e300d104ecb5514f4e68cb6fce0613aa01ba5bc074a70ca059119feadf1

C:\Program Files\Avast Software\Avast\RescueDisk\aswa94e85b5479f760b.tmp

MD5 82dc347deb8b9c8e196a19223566a212
SHA1 fce43a71dfedeab1a79f01e1abb9537185afecf7
SHA256 fa14c8b264fa60fed54daa93403c007f8dd4e272bc47684b069ca125f9916b0e
SHA512 6bd1eb8abf1e2067acbced14a9587d74fd001dceb2120c261c74366f88a67dc03d5f629a026ec971ea727d0636e12b864ed41819270f30af7641e7d1889745ea

C:\ProgramData\Avast Software\Avast\asw9699ad215c08a19b.tmp

MD5 db89473157a2109d2cc065b9c62acd27
SHA1 d903a0ed7c5aa5a686c883a597894657a8c0beb9
SHA256 2b8d115e38b1ac4ea4fe0ea24006e4e2d7e6429f469b4ff0f1ea45fee4e7e8d6
SHA512 41486f90632e52127358b7a6046b347d47ffbdd62970ed67980b56c247f68ece4d7d0250e19c28c7045ab3d4c9d7db40e1aeaf2a4ab33d6ae4b591f05ebe3d3b

C:\Program Files\Avast Software\Avast\asw23e118fa608c089f.tmp

MD5 94f4c68cc320cffcd64c14de40ac76d4
SHA1 3d7f5716051763e9559999f1f5221a9aa6a8cdbd
SHA256 e88406e3db0ffff7f78943f01a18b73e69670e82610e0c6ed1cc331f14bbfe7c
SHA512 36cf4cfe4ce1d392f87ce484907e28800e257d0aac28ba16770beea015685b247c7b868183e619d1f805ad1b1a32a5d26a00d1e53a709828e23ac65d76014fed

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswf3f558f989fe7aae.tmp

MD5 2b86c5ddbf65905c6569f1508a9c40c1
SHA1 d1232fa2e3ae6ce5bed3a3ba19c347f1d3bc1d7c
SHA256 c5d808fe19e81a40ee4d80a623ac5333c036d47e0816eb319e6022e9aad509e9
SHA512 819af3f6cb1f837ea56f0333faad70afe5fe2606d333def8dedadea26e72038b34da8f0efb68095956b9198909d11683db109c6bc13fea309d559e72335b57f3

C:\Program Files\Avast Software\Avast\1033\asw2e964be196807eb8.tmp

MD5 9cc0f27acfd3c4da4b9daac4b362f3bc
SHA1 c56f5f8ea53d73bdd13aa160a775cd3b89cbfc43
SHA256 d576d18b4bab7e4f74e03bdca0d0853d2740ef95a2e20060867897d63ac0e088
SHA512 99dfbab3a9c324fce78afb42906a921f3d6a418df263143a6144703ebe85c8acf0624eb8b385170093772fc4ff1faf0c45364eefcb4ba54c8c63f5d5f0f23e8f

C:\Program Files\Avast Software\Avast\1033\asw0028186f2b194df2.tmp

MD5 c90a9845728310113b416c15467973dd
SHA1 abf27753addbe931bebdb760f5af207100a6d565
SHA256 8383741771116816cdf40de2a5d453ed74c669bb5ce7a626e63e0c62f2ebbb39
SHA512 a1725f9b4f35f613b51e021460a15dd76b2d1b9deff0d6528aa3551c58a0f0ae0b037e2ff7dabd87f6307c3694aa27cc875fc7fb45a9034806c890cab6e15c00

C:\Program Files\Avast Software\Avast\asw59dd0939f4b77945.tmp

MD5 58f1b812b76f2c844f23cee2d2a43fe5
SHA1 3e7f4b2bd2852ddd0a1a56d86658f4ed1c1e462b
SHA256 6b1e95582edeb7ffe98bb3f6f223b8bf5d74ab2a4092adddda4d4a8b8ac18359
SHA512 cf9a4f620630018206047aa7873538682a48c2481bed463c155e014a12533c4364a58d21601885f04fa957fe4c7f31b0d33c476a6d4dd6fca45101054277d0bf

C:\Program Files\Avast Software\Avast\1033\asw8760809d9f499b0d.tmp

MD5 305126d7183f01ec6f1acf7bfcaea7e1
SHA1 7af9472f353a84b3478a7f9d2ebc0144a2328b9f
SHA256 f38dae99b094acd30990cbd13be8c1985ad72caadc912f6ea0a9a6d71a8648b8
SHA512 ab6b7ad952907ed1dc7f2acdbb56633b63065e5c095f5b9781a3a3da2f75032755673266d122ce4a6900bb67ccb503f4b4bb71ed8113e4b2d9683366c6c70159

C:\Program Files\Avast Software\Avast\1033\asw700d4b6560950688.tmp

MD5 4de428d3d08518f525c1899ae87ac899
SHA1 7cd9591c9be7ae345601d58609b54acb6b2f48bc
SHA256 b8b40ae0258e1da4a8ec6c9f862221ca1ad4f223a54e9e72cd03cae9650416a6
SHA512 c2b3df49a3b1f2bd20f7ef5ee33bc2818125a619881d9e49417191f9753b1b6a7f4adc19644a29a5120c6288ee15b469d02c4a9393ce227d17eddb76dd6e69e5

C:\Program Files\Avast Software\Avast\1033\asw873695bdfc462d9e.tmp

MD5 029c831dc4f9739b6250f050809d9f56
SHA1 87eb6c56d56a73c03f627bb72682263b4b5eedd6
SHA256 fa2ecdddc43642f1f17d6f5c603b4a69442726ae07824ef7e2f5bb2ce0b9bff1
SHA512 8dfba42e3414dc9da747bb3efe3c5e2ad816fcd709d0baf74a9595f2a78f2375b50c6f96fa7dbf385d44443a7562f21a987c3d43562da677b580149413207716

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw5a1f0f1a945d09c3.tmp

MD5 e191291f7b8972316470d7e24a9aaab5
SHA1 2c8ea4b37d5a76a579a5b5324eed8bf2f9aff2ca
SHA256 5bb65316ffb94a7243e668d8f4a4798c09d1af31f5c3c52bce155184970393f2
SHA512 c5fdc1c2e459b8e3073a2936abc83632eaf876ed06fe4225e0a394e4526bc682cd15a2118d54fe7663699237f9efad4edbaf799f8af702a94907da0cab74a5ae

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswa39081c6aac8b5af.tmp

MD5 ab62d68c232f55045ae92b392be58bb1
SHA1 cd73da9599227fc99e3616312a83af6a854146f6
SHA256 b15f2638de37ab56f2dc4666e14ba9f66efd2711df334daf48069f2638d67dc2
SHA512 d1da189008888c7e34535d0723a07424064d2ce14c7a052ddc0b8895067de937d5f6ddd94bebb108beb6fdc0fb13ecf7cfaa75259ae6459f8a0cfce3f3e5fab6

C:\Program Files\Avast Software\Avast\BrandingData\licensing\asw43ece01927581eac.tmp

MD5 176d0d77a0ee1c8cc866fa1c8dc2d4e6
SHA1 a9fbac7a9ac1997d0b5fb709e468f2db60de311d
SHA256 cbd1e58667b88a9eb1b852895dcb8234ecef878b9e29fd773d79cc7563eba0a2
SHA512 77cbccbb6717443ecf45ae2348c31b8de6a30644871ed477459cdc8f418c0508c613aeb6de4eefc849f36f67af2a1e7fe48b9aec6470aadad7ad82166daf2b5e

C:\Program Files\Avast Software\Avast\Licenses\aswcb94d1c27e40009c.tmp

MD5 b51058fead1aa71840b79527f5bffd3d
SHA1 bc3c4d41d4cc7753bea8e7a77fdb7cd384adbb59
SHA256 beb8e42e9d6b4284e03304d05a81a0755200a965fc8d0a5e0aea1e84cf805d6e
SHA512 f1a8d21ccbb6436d289ecfae65b9019278e40552a2383aaf6c1dfed98affe6e7bbf364d67597a131642b62446a0c40495e66a7efca7e6dff72727c6fd3776407

C:\Program Files\Avast Software\Avast\Licenses\asw05df731d96468e47.tmp

MD5 97aa3aafa51953d4ad591398b916595e
SHA1 a849084b5239438f44c43b52576171f660576e2f
SHA256 ed72ce2b51ee58f117e5a021e2e04af158857f40269fbc03491f0b2a99dbcc96
SHA512 0b54f6b692ee9c92e0a867361b1601459cf6bcbd653b902e1dafacf3ec445af11023e8a5f7485e4513d351ec662ba39dfd52a9e84858128e512e68ace970c18b

C:\Program Files\Avast Software\Avast\Licenses\aswb65aab20026c4065.tmp

MD5 4cddb654fe704264c203b4d9c7c832c0
SHA1 9d236e8f305b4bc8c486de24549a706a3957c210
SHA256 634788199f33637e3cc36c61e5272f72ccbdab87be0c07eaaaf487c5f4f1ce82
SHA512 1933696744c8a95bc6c82ef0d19e99f1d4291f6e0aaf8570e45bd74065ec076ea9b3e4b030ebc8df52903f4f98aef6a9727d3370834efb9187e4ce24ab9a0180

C:\Program Files\Avast Software\Avast\Licenses\aswad73005447307e07.tmp

MD5 ce79a5e699943b3a132c0deba1777ac6
SHA1 57919d5bf210193d05ba496a870832582f475559
SHA256 f4df8b2457697851385d9ebb93267832c1dfa24e0e61881952f6b0c452663dc9
SHA512 82cda6f61e3dff94228d3eefe4e1f65dc483aca9c8597e482c1d6584d2f70ab7327af6461080447649dc4986b9932025dbcae5c078a2dbcca82c3a985d118f4c

C:\Program Files\Avast Software\Avast\Licenses\aswf821ba3fc7e1e5b5.tmp

MD5 bdc36270610932ff0c405f7dbec4f1aa
SHA1 36ef609b122ccde100fa096a4703f3433af6e2d1
SHA256 8c109e1d8394fd4557d916d75ef61fb406319106cbeab77736d7c666befd1ab6
SHA512 83f1346cbc0d4e49b0e4cc338fa12813661eafb00acba39d350e28c54c86d6d19317545dddae562763e6794e5268731cf4d1d8f24db42a0cf8d9ab9165970beb

C:\Program Files\Avast Software\Avast\x86\asw0103fe8b5ddc4e9e.tmp

MD5 ec1d0935fa49d55050caf22a3541dbd6
SHA1 5ee3659430aa23102020a22e5ef55c774925fef4
SHA256 3f350a07044382cd54135e2cba8700c379015517233056aabc4632c432513ffc
SHA512 ce7e9641cf49d8fbe17d59bcdd69b8146fb2e898228cbce4e076558e031752b770f675a78cb53154cddcb29bd0551f8f2d03620296278d9769c6fe8231ff6408

C:\Program Files\Avast Software\Avast\x86\asweb1817264573c1d3.tmp

MD5 6711c90aa5527e976331b39f023ab731
SHA1 c9fb927a069f61aa943b84c00c1a5ca34fa98def
SHA256 2a27dc9d3448d04c85a6f30529bb71d24590060904d3593bd863579c249eb9d3
SHA512 482b537aee9b85fa4d2876b01c03a5bd222aca7acc2f29e51364e72de6994ed3e0c6a12aca3e8b75fb40f9204852267200c94580b9968b8cf2e34458919bc751

C:\Program Files\Avast Software\Avast\x86\asw79ec58e40d1b2761.tmp

MD5 30cdda168124bab1574bb12e232ed304
SHA1 4d5bfa513c452b1449a74db629ce4a651048995c
SHA256 5085c99af61e81351361589a3585d399302d045d2451144137b8b434ad55b4ce
SHA512 281b7b2c3c78e1faa53406b34068e83353c5ecc7af8ac250c94c83d5eff1df30aaaa57a1b78a6ab103ab007bfc9a6862dff54f04d632dd98c343884cab178f45

C:\ProgramData\Avast Software\Avast\Fonts\asw7fd98d7527a80ea3.tmp

MD5 50145685042b4df07a1fd19957275b81
SHA1 c1691e8168b2596af8a00162bac60dbe605e9e36
SHA256 5894a3649b213cf5b2d673b6e7a871815fd1d120fa68a463592f27db14eae323
SHA512 9c995725aade5f126c727faf1c4453344e37b590a14152d31d44dca3c9328a54207bbc7c840695cb55bc1b559097b457888655e11199192cd5197c85aab8b1b6

C:\ProgramData\Avast Software\Avast\asw39ba55aa664ed7cb.tmp

MD5 ad6bb231d6ca341d585caa0881bbc680
SHA1 249d7ed96bd7368985770fc91243ffc27a6787e8
SHA256 362c8627a8cde159dc2b52d1c3315c4499dafc8a5a6781acb373307453584785
SHA512 70c0943d74381c9b00b59cf28297211905a983c3c5b0203d71d9f28a1367c01d821f329aee1fef6d2b04f2ad6552e32d5c7f7eb8ec053691d2d1f6b21940694e

C:\Program Files\Avast Software\Avast\asw45077beb7f96c66c.tmp

MD5 63a9c63c4e5e58a7b0dc0cb6f4f48b84
SHA1 0ebe0a04079596dada6e199dc0ecc931f6f847bb
SHA256 55a14371bbc439c335641f4efa332dbd54f78e8b86350640425e7b7d6a1342d5
SHA512 a959ccf3074ec362998048e7dfbeb26bc9fa118e409e10ecb77d677f4ee228041903192d9933b6b9a962016bf31aed24b100109c3ac18efda084a0eb443a7316

C:\Program Files\Avast Software\Avast\asw8fad5d3fd85db7cd.tmp

MD5 8e3948dd2a3971650272f022a7831b97
SHA1 d5cc18ffd9191ba64a252583bd2bde938e0e3ddc
SHA256 a5dc6e35a5318500e15572778ec7a896d840829f2ea20c86f8ca625439023088
SHA512 b9dedd7193a80c9e8627d406bedfbd5d55034dee74f03dbf652fc068fb94d4b7c4e0c7538a920c451d28d20437933ff06da7599203352c2d31d0b8e110deba63

C:\Program Files\Avast Software\Avast\aswbc996ad259782c26.tmp

MD5 d24a59a2a2d3a9c597a8d2160b00f2d9
SHA1 f6404d6d63a3e77c9dc3d30cbd5f2df3dca1136e
SHA256 12f3d39626a18fccc9b309909f86cf46afbb518d657b318abc88bc4e7d3e0c74
SHA512 51607174d07c3651d47aa7a6fe3aeb269452dec2a8178ce1fab4d4c0beeadd735dd8c537e920463904632147e81ffc199646e74b92ca2f5c704b61388b600095

C:\Program Files\Avast Software\Avast\asw9d0a9c5039be75a2.tmp

MD5 e8382ec7d1ed102504a62d0f3c1f2ac7
SHA1 f9f33bfa3f2ab873d777ea9b82b314b7278fe417
SHA256 5de54dd984cdc91cf01457b14c548f7080df9e83b0cc7d50259178d526f6de6a
SHA512 10099abe4892ac10487dea0c63500ac0c1a76bcc0d04d7499352724059f2b05b4463b75cc7ffc78f5cb2a338a62154655692b9a93d0f0b820ef95c399ceff182

C:\Program Files\Avast Software\Avast\asw17222a18c76b9b1c.tmp

MD5 23792a200f63b4ea835324213cfdab1f
SHA1 9f3146a12598483c7444a015856e0cc43f7c8d3d
SHA256 9c0233e40b76f6ff800af97d951b19f9cda295da33394044cde6a48beefb778a
SHA512 3451c15916b0eaaaeffb96383d68a491737151acf8b9dcc997bdf06efd42973667f15ce272db5d355de8021bcaa207626cb01334abb58a03980f54f3bc830772

C:\Program Files\Avast Software\Avast\aswa42adf05c79af9d9.tmp

MD5 e985c91ab1846521e116a9a75e00a7a0
SHA1 3cfaa8233b3e69c4910ad4ebe9c49b525fed6b5b
SHA256 4e082f94b07e3e43d1fd61dfa986ad48042efb2d4d2c71018766472850e94ed0
SHA512 18ef98d0a1ebec17880d54973bf2b9c0d44d56531e1390fd300e769d83fe25cccc5586a7de09050709fd445ebd98663ba568ee2583138b0d1728a382ac67e3f5

C:\Program Files\Avast Software\Avast\asw7b06028c16682e87.tmp

MD5 7b1326a691d296352e5eee8525e06aae
SHA1 d2bd810868648c815b51417cc024ffb1f299498d
SHA256 e17e3f7f5b8eecc825498ab2a15bb36b4b68134939af16a7a9499df7c458673a
SHA512 f6ecf3b43bfd09f7204e848533b8cb8cbb2ebc7a88a3db2e1c8d1fd5f401f06ee01c1e3f73ab639dd4d3951fa33ad6dc8fa1d72906ac4b12204321d4e8e96093

C:\Program Files\Avast Software\Avast\asw099cf269486d80f9.tmp

MD5 da2438ca676d0f348386c99dc8c9461d
SHA1 66ecfcee15aecbf40147b0c1d5d14eb3dbabdfc1
SHA256 c7a8862ac24adbfd699f6a52f826451d57461a361bc258a19562479fa00d0617
SHA512 812ba4fbc7a5165c76c475cdc1e342e85105cd48b671c1a4817fdd20f1851505e5a06582308888b46fb7c869324225cd83a806e609c5c95ddae5eae500310fa6

C:\Program Files\Avast Software\Avast\asw1fb1852b86dce723.tmp

MD5 46478cd0f550ae83ec4e1d70bcac1467
SHA1 523f5916ff9aa73c1c3a5c6d227df2e99f314b32
SHA256 ba1d8b3c478169c0e15083d0711bc0eb90431e52c13f9be586ac7ea86d513a53
SHA512 6d7a2cb1db52444bc7550c35ee37c0113a663da6302cc54472343ffb49533742a2ef731e619311b67d84e51aac456a987fcdac4b8f070cf006aa0636117e128d

C:\Program Files\Avast Software\Avast\aswd8e56561565800fc.tmp

MD5 7b3b11cb8f49594adcd9fe4a4ed97ca3
SHA1 71e446fbe436c02f392fdec766d312ec501b7718
SHA256 4ef5602964ef570c8b7aa79bd354afe570d4fdb4bdef982ee1ddf843f3986ade
SHA512 14a25c8628248df0fe25cc19cc15b64fecfc05be7815603251a62bd16df7a0162612e4140c25f4894b15308ed6b9292ce2daa05b24e8385af3adc701298ce85d

C:\Program Files\Avast Software\Avast\aswc4178966345f42f4.tmp

MD5 d5164776846985e90bf4e1d25bd04da8
SHA1 e2c0b2055340821fa48d081b3b4d421b53bb90aa
SHA256 065c8da0fc7b9731c1ee0597184e72c537e2946d27779b53048057a65a196eb0
SHA512 7140dfac957df348c3cd156eb59cf7a56b7e1bde4bbd528f73fc8f846ca9f48f5c7e6bfaa2bee48e6ee0d362e8226d9f147b20f3c041e655f4e4c6004f605524

C:\Program Files\Avast Software\Avast\aswc16b023cece63b96.tmp

MD5 bd28b53e296df7ac003a496f8510ac3a
SHA1 9bb53855569dd387eb47408eb591d3e1a29f2a73
SHA256 a00d92fa212716c7525431f871e2d0da4548f5c7bbbcf14c822cd97d5bb42600
SHA512 107bb098af7447b5ca87e479b95442507a7293ae4d000b8dfe34ebec0c485a60d25ab37372d3e74fe759fb79fb28fa5c2f6b171face0be280d16f8687058d2b3

C:\Program Files\Avast Software\Avast\asw32b1538e5ba120b9.tmp

MD5 f81af851c89ad85fdd5ae0da795c138b
SHA1 f59247fabe2fc05dbfa362dece5ab6107b494f93
SHA256 18159263fe7c15d0db384ae6cf7cbdd8f17e68458f40a88a06fcf7c2f82f7576
SHA512 2075caf3f359983ea0f2eadea785187f93f173221af47f42b52f2b13999b2f829792e16e1ec662f980dc44d59a71f8a9a2f7c2a1f038d83e9ddda3ef3e818e05

C:\Program Files\Avast Software\Avast\asw3a51932640ca50f4.tmp

MD5 4b5554c0eb53525a5f53bcafa090fc13
SHA1 d76907c0702eb1ad90a54b0fd606dede45488c08
SHA256 5a8c8ebbff47be1cc98f8cbf489bcfda03879ad5602ee71d4b42552f6a19033c
SHA512 811498f3b0245fa1b36d6eb79b68ea7b4be150499f04dfa6f687590d06e58ab775f261d8da8e2e0bd0b4edb71274b21c935a3818c301968f5cc261380cb4ef91

C:\Program Files\Avast Software\Avast\aswe9480d4dd37e03eb.tmp

MD5 f9b61d727701b01da43c42953e74cd9d
SHA1 8de7238dac51d8cac708b5312d1afc2a54ea7834
SHA256 eab620b2de48ecbfc4cce9c79f085aefc5eb6eeeb467369d5f98acdc68bd0964
SHA512 a35f748f20ddcb7a1970d790e88e4daa14571acc29e6e052f7eb9ef3d7de0f688b2e810738ddc5a9759ab289681727b4cd248178bf5636646fbe1d2ff8d2cd29

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw4c69f882268a112e.tmp

MD5 9fa3992f5dac5ea5dfa15b9669c68154
SHA1 a453fb6c4064da8c01ad03a4ea3c0434efe82635
SHA256 9057131f628e547c14754d545140ad6544e64606358104da50841e9a1b03f442
SHA512 ad73f3952dda55cfaa6a0d6a0233df785650f5965caa4859b6c1577e3fbd6020e60b4b26338387690cc48b16a186d2b530708a71d2671ab17ee8904399de292f

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswbe05122f87cac660.tmp

MD5 4847091828ad3b0734418343c712cffe
SHA1 24e69b32dba65631b92493b7aabd68d141cf21e3
SHA256 d9388848ebfe27138998518332bb507e5dbeb1d8851e9ed0300f15e14b6958c2
SHA512 5e8061cc226f3471e3964c04cdc5fbd3a607c9abd22a11a1e818eaec42b20ae873fa80cfce7f47b8f8844f3127ce98282c737f25666d20ded47704e0db6f29e3

C:\Program Files\Avast Software\Avast\asw51b9c9e708c5fbb5.tmp

MD5 cad16fe5795c362b05905bed436b5e1f
SHA1 20b845f469e94e533b545bfe05fe5ede0a3fe32a
SHA256 706583f44a797afc17d2c394eb792a33f2aab0829a1f5867cc36fd94f00dcb74
SHA512 b2b1ebda861ee710700bca22c38ae33043717036c3cc07a236670b6c9c2f006a20b28c2eb98c4151259bbb670ce159e3d346a0854f73fe37ac1124487c29aced

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw3074c9999a749a6f.tmp

MD5 c542c43d910dd6ae2f4a7cffebccf613
SHA1 02086fd8e53fcb3ac20cd4aabd730d46458d698f
SHA256 230da452a8068ff5be158d84618c9d291bf9b8bc878ed5d56318558d52e4966a
SHA512 364aa5a59c10d95c6a93024a443972a06dfaa1693c942bca517700bcddb9372aae1c76bdf35453a5ea256179fa61586922cae7d22f4623135fe7168b5bf04153

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswfc78ca320adfa42f.tmp

MD5 8a090e342a1cfc590b468b61e0c6e23a
SHA1 2ce5c404d0e926d3829565a819142657374271c7
SHA256 c432d3c6a02d636c4e66cb97bb738655efb1786a89d2ef446cd0aaedc7f6fb7b
SHA512 50ea6a9241dbbc52f93703cf29d2024ad49efd8f69f8552e493039640f2d0e625bd5c038e942079c0e291784674d531ea256c2556c637ce292ec6de8c417292a

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswd704c4ccd89ce1a6.tmp

MD5 7f3ee43b54d37613ccc45853e2f3eb5f
SHA1 00f31d346db1c01a5db610319c86f41076425dbf
SHA256 3fb204842fe88c30c04ee38f9baca19d0ec35e8e1ccb82e15462f990dc4951ce
SHA512 3e38840e9692282bf8e7ce56bdb5a419454576acd71d94fa849a8a10d0902b5f02c925cee074768bdf111c3c91fdd4f34435cea9872bbe28d068edb766ab3463

C:\Program Files\Avast Software\Avast\x86\asw587ed1f086a0e713.tmp

MD5 64c993edaa1ec13f126271294ab74e6a
SHA1 3e65f1d4e02c87b12a6dd3fe1e0ca87c912bef59
SHA256 ddda6347571e8988ffb0dea97d96f90a29bd7c4c4615a1c7f5a682477d224aea
SHA512 71c1ca3dae0e84c07bdd765302969d2dd1d4567f02eede5974c9eb57eb4a72243c8f402ccaab722fd99f7d2aa6b95e0057238a704744b32409fe92e6959d93df

C:\Program Files\Avast Software\Avast\setup\ais_shl_mai_x64-8cc.vpx

MD5 6898613111806370585b49bcd58d9ad3
SHA1 bb82382b73ea95b9974118f93b6c0013f1d69457
SHA256 ec2f7f28cf24bed97af070709522168f285be9f187c530241dfad215f015cdf9
SHA512 7b3cab500417ea6b8a72f18db2cdce88417ef101f6f6ca3b3c103ea1b7540365092f1c74c4e3cbe266ab5f2d05094f08c89bd1223e8a03d7153213c06e74a7ba

C:\ProgramData\Avast Software\Avast\HtmlData\asw2dde5e67960308c2.tmp

MD5 c69e876c8bc4f3bca56ba333eaae7a71
SHA1 d00ac516dadf10b6a9fbaa8b6fd7f7800511d36e
SHA256 d1e88cc6880e3667b06b2d006f5fb8516f28467dd1153453c1bf954571fc4f00
SHA512 3453ec35e83ed63f2e88326c1a3f4ee23a6b979d272243131c37bb06ce8d2467585e311a3c01198f3384d852ee9fe525434f8a6eb58b7698c0c8c56b7a8f3b40

C:\ProgramData\Avast Software\Avast\HtmlData\aswee02da1dd1c70c79.tmp

MD5 94aa8569ec9b33e05f3088b136dda05a
SHA1 2e7779731351517e2e6df18b313e5df28079160b
SHA256 179fcd4c70b0e5958c56387c7849e4b49e695a284b75471a15a8e6c8637eeefd
SHA512 52cc30da7dc6e6ae7266bf171e4e9c9e16c0d8bf72abda793a0f03e2889eda6171044ed65960fd2c40251b135015a0fa62132c76cf16065ef6fa47476b6d8ff2

C:\Program Files\Avast Software\Avast\asw2e7d08d63c6618a5.tmp

MD5 215194bb490c15bf71c41e42a2fd7697
SHA1 b517011a16257d854fea07d019c74af8454de230
SHA256 0dc397db4a6ac60f0249f57e12f6b0574d6deb824071f77b766475ae08233b1e
SHA512 84097e33da29a0843c1329973bb7742d7c840a5a5ddfc53213cd0f6659aec015fd5a8e6d7f5a943846fce36ff682f94651a1e6155bb1225f0484da01c17c267e

C:\Program Files\Avast Software\Avast\x86\asw869f5710a798b255.tmp

MD5 e064b5d61b886f612129b99a53d4fe70
SHA1 4f8d534a908e1439c0bee5c06dde0d562454b521
SHA256 c0f88e6bdfb610277f945f3f146e47a0e48336406c8c7875ab21e6fa9969ffec
SHA512 02082253ec2c2fbf7994dc89e92899d7733b99403fb107b2e0b885a31afdd356b571701a3088eb3d30355681d615f34c8f8b96c26b717e6f2e2aeac98030fd0c

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw1a20ace32b0aebb5.tmp

MD5 b1b2ef05c95cb3905f42baee21a38055
SHA1 fbd4d98e237010a9d4a3ada00e76995194bbf44e
SHA256 c63383ad6a632b4376e952ccde2f94ea06be30c3f81978d81d44e8679807adbc
SHA512 8b41919209cf95e634126acbcbc2162fcd665ecaa13303d415a72618bff00f6120efbc1f34a0a6287e9876f867cb51bff19d7cecd269f104c111fde3dcd7abb7

C:\Program Files\Avast Software\Avast\asw7a7b2e7df7b4cc81.tmp

MD5 42c5d5908c9a280f027f044f91999f99
SHA1 f1a8f7884808293cfe3cabfe1810aa7e2a4ebc17
SHA256 12b410e23e879fb9a571d723feab056d8c8cef003e9fb3718fb733c745663314
SHA512 ed97f94e8a0d199428521a011f6707a10ffdce3b41c4466af5471780440e23605bb5650c654d81227647d7dd00a3d7968cf4e779f4a81036991e59a6594fa708

C:\Program Files\Avast Software\Avast\asw19c45de3dc71da75.tmp

MD5 3b83df3c59f45d48f785f896fd88fc23
SHA1 2c4cf3554b1933b0b6d18c9d6f3da9b14d9a14eb
SHA256 4e3fb0d055ce5e35e9162ca2c3227cd8616d3465840020ab0a702bf0a1944c6b
SHA512 6d58de30861769d7eb38f2b63e7398ab21892267c20ef1685b16e6116f0e4c036d5da83880019433f142c64383cafdee76580ee408ed7cfa8eb7cbc282e89c25

C:\Program Files\Avast Software\Avast\setup\aswabc2e70ddf0abae9.tmp

MD5 1770e768e99254927e6ebed43639a9ab
SHA1 55375ab40477fe6b56f6eeb4d6d05fd659b5dead
SHA256 c63a8e890489ad01766bfbf31b9af03d3be8fa4b97233be0c94ee5a5895c6c65
SHA512 834dad84ce9d6a13d979582e47c5850e6a8055707cdfb5328297845735c24c5cf22cc74582b4fa81e43afb4a87de2d526f0de52d985df97c6d32209a116083d3

C:\Program Files\Avast Software\Avast\asw1b9a17d087e346ea.tmp

MD5 673fdac49d2b7d8a8430e70d75396884
SHA1 efad70abb55e258f7ebc2904f7accf6016fc7eac
SHA256 ab5cdd13a77b8e80cfb30927966986554e3c92d764759a4a510874cfb4cff582
SHA512 81998ebad3db3ad76c31bc2465efb8eb02ada20ee198227dce00dc5c77b0b629f5f1480eeb5fc2e1927039e3e18a20e426959c38eb913c628734a7bc46a83fb5

C:\Program Files\Avast Software\Avast\asw951e1af1778c996c.tmp

MD5 ccdfe6ca3cc08a18800c4ee3b93d1a5e
SHA1 90d2e6b2f0bc843f2b82c63fe13c278d09625dfe
SHA256 4904f75c6db1ea3d3c6c76afe737ba80207c3eb8ac450b1d0779cf780c935e2f
SHA512 400bc5b583f6013d9b728d5bc408e39cc815a0a1cb7a3aae0b40431c49b03f094297b8865617073ff6be2905fd13d4f2e469570f3122251dde91608fec2d9759

C:\Program Files\Avast Software\Avast\asw916b254e6d4ed0fe.tmp

MD5 0d0d0487bdfede6b7913855329f1e80e
SHA1 8ddf774dbcfb9758fed69fa322949b1170e9b85c
SHA256 62297ffc607d910514b53a1f36f5779463173886e74e118d4a94e0ea338d2cbc
SHA512 3c58c09c5e0b716b6e327a2ab889729ebf3d2ab9add2bb09fb49db78b5961e5714c1e0b02c415b27720dfe8c4daa8cb94ae4c9cef18d77bd7fabe9eca59866dd

C:\Program Files\Avast Software\Avast\setup\ais_gen_tools_x64-96e.vpx

MD5 c13f2b56af8d5010222a87c361384aa8
SHA1 1429b38f96865cc0d565286e8ebffddaa3afd127
SHA256 3bfb339797e8c1077f0f4a3b97f3dfe4a94674d23673bb56e3f8df32ff7c1e3d
SHA512 5c22973ed60dc8466ca327ce1662927ecb905205aa111559b8116e2b1f0b0223ae1ef4d0d8df7ef5f46a5dc269498df0c7632474251e11d8ca0a029cad2e603d

C:\Program Files\Avast Software\Avast\x86\asw1382e8f8fabd22d8.tmp

MD5 b052d7f9baf01b9a14be7595ccbd6fa4
SHA1 c8ee07397bdd30c87262649deefeb6e1311ffda6
SHA256 b7097d470c8c64b7413805494ab94736abdf442c5f911cdf7b7972cdb730ba40
SHA512 2cd083517164aa08b2ed34af163fa83bd8dc1677ad99d30e364d8f4fb10301b3011dbf7aa4803815a5c90910259c358c80786f65bdd388e21d45b7c61c55b968

C:\Program Files\Avast Software\Avast\setup\ais_gen_tools-96e.vpx

MD5 615ab86e91a0c2754931bc7b81e1fd16
SHA1 15cc78849523f440e6e66fc276e44de16b6b27b6
SHA256 fced184386404a2cedb26742b3dca2e9b8510fae4e9d0a44d732fafef273e624
SHA512 b1d2dd73ec78bc74ef02b3b73d0777cd15ecdd9f89b8a456656dfcc77b8e2a20a4568cef62fb86334fd52938aba0c4a9d9c2b3f4a7bddb02eec01a019761378a

C:\Program Files\Avast Software\Avast\x86\aswfa3daf48086a7dfd.tmp

MD5 dd461b74fba8022c3efaca082e95ad1d
SHA1 361e5149e76bb96d73864e764b2b14714f64db47
SHA256 29b0fb7bdc8860f16b03c186b95fc62c9fb3bbe3157722fa2e10af8bc46c5589
SHA512 2702d899f5056fb668d54aca6ba171590a995e1fb58002383c87d0f7d1fa45dd2fe74a325174ba882f36ed745b8fc2cc1aac95969723817b36158a7ff0a523d7

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw91af08d1ec07ec69.tmp

MD5 a2c0380d658fd78e9f962664b781b635
SHA1 c5b27212694a0ad323022b3b2ff8e2fe6e620d45
SHA256 cc40c8a6df149cea58709506554587eb4c7cb21491e4e6a5d641773e8d3f98f5
SHA512 688fec9ea7a49134d01e0af74a547331342485f9d53fccd8a8d571686dfdf9afe88726f15515446cf82fd0fed4c5f5697377ae3302d79100693065202b6ad36c

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw7e6d1580e3f3bc07.tmp

MD5 e487d98b0ab4e8d92e4c0e0474196e78
SHA1 2a06e20fd93b1e998ff1397ad3867a61c3612ee5
SHA256 faac1f98e6bf6e2025e2b237d51da4f91f169ec8e46e134a19aeede585f848ff
SHA512 d9f2a553a21de4543b8f29b5ca6d652c4d3b76881c58536f80a0203c5566fe376be19805e95433d58e72e82fb1e527ce206aaa0a3f5004d55a5fe1dc13bd5073

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswf62cad6cac2241ac.tmp

MD5 ae4dc8432489f29f4fd6d9cb2a73d1c3
SHA1 7d38d5bd11e732beb88a05b70083a72932113d07
SHA256 1f3c1e7f16bc6f49c110b8a343b270e600cab05ffc454acac8dd1768a44c40ac
SHA512 5ba4b10f41a3c968190f247677479fe78bcf5dc3d160d714cb2d3c77388b698ee358ad330f6cebc3100a64de62ddf8ff99989b0b61b52cdded0c965064b10f03

C:\Program Files\Avast Software\Avast\asw0fff4a267e6848e9.tmp

MD5 d7ba09a05ef112e8098d89e3488c51e9
SHA1 7791cd100868abd1aed4c8a3cddbbec8fd86b6ea
SHA256 f08c1b39642a417d7d7e50ecf593b4a4dcf371a9160a5dc8ff88a9f39ae17e0d
SHA512 5e940934adc63ce63532365b6d9b858e32556ae7742dd5566669d56c7549474e878af07bdd8f65254db0807e1400bf6b9eebbb68e95a0ea5cdc71a235143a9d3

C:\Program Files\Avast Software\Avast\asw519ed11de870a065.tmp

MD5 3721be42ae698ab5da16f60c05113053
SHA1 0b0260c4e3966994cd7705aa43ffff9cdf7b166e
SHA256 0412db612e869a860cb2577748459d2b175ab9292bc99d8db2ace2162e757d16
SHA512 9aaacbf6332af38dda2227b3f9fea04a57fb1c34b6fd00f1f01411859ba7f8954c30112e0fae9ab0bfd4fa83384915e2c77dcfab390e14c7b561aa90f1d8508d

C:\Program Files\Avast Software\Avast\asw5c136a021de21ab6.tmp

MD5 77984a5e727f80b6966b33b08c89ab46
SHA1 a19a9528f20c9e0c81a85aebabcb21d7ee51dcc0
SHA256 b64a2ad2e44f70046466f1e7a9503a9b09838cdfa847577d7e91116f3968e6b9
SHA512 d2b36c3332094ae972c14000f7379a69788398f1e9cafd29d5112da62855beacb0372551ef05f73d5a156e1f2a0d7fd512060dd0b21c7cd2d39a6bbc5c18c7b8

C:\Program Files\Avast Software\Avast\asw803f31fd068fdb28.tmp

MD5 d789d8625f346b16223df548854b85e0
SHA1 3f7bcd7db33a92e57c2b967760b0d7c2faeca750
SHA256 aa6f3a01c1b2dbf9bb7a8bf36313d2df0c33300c3399905afca70cb5e4f89896
SHA512 247d7bccd87565ef981c8299b324039b225c9dc18fb972d05d13eeb153141afa763714779af701da646869fd1fde865c986cae71531e6f9fe5ee576046259471

C:\Program Files\Avast Software\Avast\asw7e7c68227e432d51.tmp

MD5 d0c8789d53ba5533cd57e30ab1c174ce
SHA1 da8279f1c487f286ccbd083650f41a2ec5ebcf7a
SHA256 8a6162a896efab27a95bb8a21b3772376a4ae4779e3872a53ca470da76a2c0ef
SHA512 0d1baf29469ad630f8106eccc78238c88733d29218097f03e2f8bd0dc09d1d0f9930e5a0918f877951b98f15dbfc03115c9dc7e50e8b57f39f68784ddff948f4

C:\Program Files\Avast Software\Avast\asw6a4caf78a01a88be.tmp

MD5 c2a53e2d7af8ecff00b4510ec0fc5f90
SHA1 307adcb2723ea82e6aeb1a3cc04b91d364d3fd1d
SHA256 509ec3d77bbcb8dcd3f52d3614b1c560b2045220e36f31eb80ed7e5c42695528
SHA512 e81922cdb9f427a301807eaa4c0ed5cc4d189d4c4a5ddcc9518c77bf526742dd04dfdf6054a6f942e6e65ddb1e8aebee46cab901679ad028093e93e36d58d0ca

C:\Program Files\Avast Software\Avast\asw9034d3370702cd0c.tmp

MD5 54250dcef9befd2fc52cb854db3bb3f8
SHA1 f143c87239d449bc6ddba3c09ce1d3d9de050c59
SHA256 b8c0ba55b5ab01ab60f7f46a32378103e86be8c79ce7123096c0fb32ab9ebcd7
SHA512 fbee3f9f83ea8c059ac65ccb65fe12e0185aa47e90c61d94140837afcaa54524a66113a1fb5c3b613d8b339be45a5af646fcdeb09975b31ebb89d91cb5b2477f

C:\Program Files\Avast Software\Avast\asw52f9213cf77e089f.tmp

MD5 666413d8173912134ce80b6c7b2d8a9f
SHA1 72356fb90cbb534766b2c71e7ed877d347ba2452
SHA256 a693037c64186448d2c2e4336bfab23a7c4fd24c201f42c721880a402f8bd2e8
SHA512 01be98e1eff334a807a42869fdb18f2c3022807e2a66bdbfd30e1f1ee4821995e511cd436b405092e4e08cd515c972c3362f64d329f852ca7f25bb4acf9e13ae

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswfc8e1af2baaa7337.tmp

MD5 dbeaccfbc149a6e2928a4d20837fc373
SHA1 2efdfc96375cb8e92bf5427dd5494c6639e1fd24
SHA256 4b5561cf9687704bf0d1dc48bc2d4eb06350566ec66906831a560d02427c8683
SHA512 828ec97ed4820f4ae2e65222b08497ed07ecf90ffa802adc2fff6fcec7d3bfc0e012c4d2cb2362cbd9981735af342f6f115c93332f3265b64cba0ad831141bee

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw242748d1417b490f.tmp

MD5 083310d59f777755dc5439046552f1a5
SHA1 1d66c641653bb14275d29495173bfad2c52a8dbb
SHA256 ca08276698062e1398654b5f92c2443a9f3dc3588f60aa324ce51af410b87897
SHA512 c209767a179e6dca87c7ca837a634e4efbd846864f73c4d94cff180cf92e6ac0451ed1c33bd54917bb0cd27e7e3c8068af34389431cd9810c38dff3f2462946d

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswb6c67f06b7959d81.tmp

MD5 4aeeb33bad81fced46fa7f90a17d60d3
SHA1 f3d6e8bbd96fb42f5c52b5ae4cebd933420102eb
SHA256 5cabd407ae502f3ea4bbec56460bdf6fcf5bf39284dbbc6d10db90665da4be62
SHA512 8dc259e22a3b14e8d6688c7b9a1113cfba8105ec7942518019a944a9ff1eb87c896ef149cc2f913429733654f6211bd6da944d3aba113cb513c0123f8848beb9

C:\ProgramData\Avast Software\Avast\asw51eca50c9144704e.tmp

MD5 1a90bc8644262cd79e806a222f38e95e
SHA1 0b9dc24a50654a32e0d5974f9f4370bac30a90f1
SHA256 1210aec78a7a836e56e94accf4eea74d5c0f26c2dbb25ae4d6023886ed3c9d64
SHA512 4f67699dc93ee7df09c4657a9fffbeb1f34ac615eea55d169ac03f7f58c50640c968f4215ede9dc59b5660166a9e2392fe10b8f2f68f6b067e9631c94c805941

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw0415e2ee304f6a20.tmp

MD5 f2e23a934f72b87e8d27d427bcc4cfe1
SHA1 e89e0a0ef5fe8e462cdd10109e438f61e1b198db
SHA256 ded97328c112f14470efe731c67cca09fa919b9385d027c3721b55f899eee3a8
SHA512 11448449f2969cac95f2ba2174d7b0d9d6dd41b4e3ca079005df68322ee8a336d7b0a912927af180b460477d4da5a1cba63d94aea4050c6fa723f19493f3415f

C:\Program Files\Avast Software\Avast\asw46e8c15484f1b991.tmp

MD5 c1a76d4eefeb28afbbce6ae590ef52fe
SHA1 790794021a71ddabc421e30855153457c462b1d3
SHA256 1e9ee30c2d147bd8d6ec98dfac74a6869f5b8f870fc2a89087d75c54e1af1bd0
SHA512 10b631d3a68e543f00d6d549c06d0ca9bdf65c4a4aa9ad6b5f80e28631288a431cc046d77690b28835a963f4d6339a8c96592d2aa615ca66447eac2ff2e89ec6

C:\Program Files\Avast Software\Avast\setup\ais_gen_protobuf_x64-7d3.vpx

MD5 71f2ccbe8b33caa436bd4af3988c46ba
SHA1 722f356ff23e54c751daca2603be3d89fd15c40b
SHA256 aae3db9261468b3dcd85b72e7fb7277ec7e115472b017a38962b394bc2884c62
SHA512 82e1e10080614d52633f4827d7575174fb5b05f3662ce16440d575a8166736166ed4c853bc9bc7d66db2a62933220d7e9ca200fefa97cf2393bd6d2701024a38

C:\Program Files\Avast Software\Avast\aswa3ca110db4f7cf4d.tmp

MD5 d0852a1f0b71fc1c2b672f940e3a0092
SHA1 62f6312ee69efa93e4d56e2f56da6ecc4c70de5c
SHA256 c763789c8f0fc5c33895f3ce19bfcc13d529572a008efec07affb2fd5a6c8356
SHA512 62e348c79867434d38f619c05edcb90cb2cf86de70fb10f5c9a1bd14f207971ebe077ac66cf7d9bd78a6900c9f0bee20640730ac990d6946af74bdd3b0743af8

C:\Program Files\Avast Software\Avast\asw06056dde56d9c651.tmp

MD5 49ec83e3a67f168b42d7ef3ac198939b
SHA1 a28e92b43e38130d52a4f50bf83a4e5b2082035e
SHA256 376796814046c52b3d79a55eee65d25ec57aea696269d34b6ae2d6ba7f122ec5
SHA512 ea71a5531d9d888646679a5a669ae5080813536aca3773ba8d25af500402c88c89bca26509da7c0f2b5d006f2bc36f90ddb40a9331426b49b98935a7cf4c4d69

C:\Program Files\Avast Software\Avast\setup\ais_gen_openssl_x64-7ed.vpx

MD5 fc31244ba7131c6f0bc6d9acc65ed9ef
SHA1 e4c43cfc6b960cf2eee52524f59dd1a21c3826c1
SHA256 800e4c704d540334857b9d1d372c3bc31f785ab337321b22ad03664cb3fc5796
SHA512 9c7b7fa96bdc5027c158135cfd5d0200aa903df7a12f176f6298ecf0c626fef9ed0f5801037f2360a798b0bef8745beed94085ffc6c7be8175893f53591fff08

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw93e8aaae29b9a127.tmp

MD5 2acd6fa999e77fe9aea56291e39ddb4b
SHA1 46ab62401f671b2aa6a9dfe6cc297725ca49d998
SHA256 413342b5a3ff91f80104dbf2024e5776986960dce52e93c57fa7df35557b6f4e
SHA512 5a96446ddf3858ee520ac0c1a172ed495647f07868f201af30fb3da41c1fb5e0e512353bec3f5c5efde50b82680d2d6e02f31e82024fb25c2e1422005072f06d

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw97948ce12846ce4e.tmp

MD5 edd037e904cdf54ce09e9631ff147fdd
SHA1 02fc77f7711401c028820d427482283a3de22b20
SHA256 60cdae6e1b1f2cb7cacbd3618a48d7186bbeec9891b65cbce43be4280b5213ce
SHA512 86ba81cdfa45ae8b9b1eed81cf7fe055357a4b302f769c6280f12e6ba64da3bf8344f016f1e868f489d63db392f8b7c3b20a555c783dcb828d70f8b52890f457

C:\Program Files\Avast Software\Avast\x86\asw927071609de6adaf.tmp

MD5 b055a63315e55167b95d5ce14858ccf8
SHA1 63517c5e87288077455c2f2c8e2031f337a7111d
SHA256 9f68ccc3498ef91598b09581f94c984e56599c6b8451c13acd80701d06d61833
SHA512 5271792f8f219a03f2460c4a5a5e587655942b98a4cd7e53eb6624de8283d28f6fead3926d2263f2a5f39bea38e87fe3a8e2224e9a49159f9c453f47589e2f07

C:\Program Files\Avast Software\Avast\x86\aswffba3b654277e75b.tmp

MD5 974a97c77ee560690162e72f0feb9e3b
SHA1 b960d627eddef7f2b5775a074f0761c9514cc397
SHA256 535f3343c4ccc7f620c937b8f1f7d7b9b16f375a86ceb4baa0695ca13039f8d6
SHA512 d776df8a8183550c9ab38efc851ca3129e6aa154ee312e942bc3ff20f5edc7205b8703fb1570892144dc40d26f339c01e18766d75685f35f659604b3385fdec8

C:\Program Files\Avast Software\Avast\x86\aswd623ba145037d1f4.tmp

MD5 8afc93334d73886adc9843bf3a99bca3
SHA1 c66cc5a139d9c62e59843b355743da4478578399
SHA256 8ab6cad2990558b0afd0b96a639601dd5d1d1a9ef1dd1d1e5851ad98bbe6e2ec
SHA512 28f8d9957224cacb6cce3cfd17509560db8996078738cbb8c7dce3c1b8e0b11bbee84133365994f15ecf7f6b0145c6c5298a85af98308afbc532ce1dde5272d9

C:\Program Files\Avast Software\Avast\x86\asw4531909b1e795b59.tmp

MD5 fde1f7ba80c6bfaee005e055bdcb3db9
SHA1 2f47d5dbe62762bcabdd135ee993bcc4f5b0ce9d
SHA256 097036c630b4c2a854a2a16685e341e631d1f9a169bfce4c35cc99690201e9c5
SHA512 d7ca13bc4defe5d6a4107ecc3ce53675a27db9ec04351581e623297e0b1d024e47a126a3118c0b44b5e2afbb4c58137efc60b00ba5232607ab788deed484354f

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw9859564a452656de.tmp

MD5 7f9531927e58fe32981d195625a17e2e
SHA1 c2831c6c980e9ffd05f450302cf81af11050c300
SHA256 88241636a8d3b8ab2af9d3b3b9e40cad4a17896f87c468ce5f177724656b7340
SHA512 92bab7dd259a9509ca2cb7ed82dee4de77a95780b9acbf36f657666630e9790dcfae51b3efe8a10563edd0ca8a29ba9c9c8138a740240ea106cbdebf61a10bed

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw1a554901e2eeecb8.tmp

MD5 8ff7f31d203d158ca42f0bb4fa077587
SHA1 721443995a06600be6db636dbbd44767f2d2a349
SHA256 a5aad3483ab030cce01bf33f5a72da627755f13596bf3fe72db766463d9acc57
SHA512 a65478de5e6fa74723f66af35c3c24762e0ebddfd575e4bd7e868233a846e7813454d0542670159b91c74978a1db667d23229d4605080cbf6e96c3227ca2d7e3

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw8866f632fa173090.tmp

MD5 b65aa2646529e9c1de570d28c2e37c2b
SHA1 0c0516631b589a6d87ae53442a7ecb8b277127ee
SHA256 783aad71c976972def8a34579123439cfebff071901d97bc91033a05d9c2068f
SHA512 4cc7496c2c0e18e10c0d3783892b0ba15c1241fabb2ffd168e981f60e3993fcc4cda07f2ae9afec4869f7d06928fa606be53544a109a3d78067cfeef033ba009

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw65fee394374b5b17.tmp

MD5 0c94dee60cf90c0950680ab6aa2c2b91
SHA1 d7051e98366d14a440111ffcd5b28379f8c67806
SHA256 ed53b64f64fc8371f8ef39b4366449aa764eaae971de628aa2b09b3a6847216b
SHA512 0cc66c7f194ddc4c0bdc9cff0709c75455a35b6c5ba78ab5d3e7093ab9388336755850f3567a93c96cc66d7376126a45ec8e0cce370518346647d1b18dbe67d9

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw8405b4c058ccd389.tmp

MD5 cc556ffc1ee06111ba305967b089779b
SHA1 9b515a2f8e7dcf570f040b19a64b36166e17d93f
SHA256 be242784fa947e505ab9d79a23d7ae96e5979af03bc51297ae840517942f8675
SHA512 51fdf6c92ac6cc06b04092a0b1f9d391ed36d8ce0b2b123fff9d228875bd91b55dc218615f757f06f34c11d2527344f21c7db48a7b0502685bf6f77650d240a2

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw244d3fa56ad9e249.tmp

MD5 1b73cbc1a51c5c2e61072729535e3148
SHA1 52f3494af0555caeaae477173dbd7a8c171997ee
SHA256 4279fe19e9d88988a93f5d334518b204a8956543f84467168d5c63d490337593
SHA512 9898d2952dc3cadfafdacd6d281d8e1614f6a8ca88448e52d393fc540e543f810d434e8eb74a640232f83c4ee2a07e8b37184f59adcfc9c8551cd0e061cb4460

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw9cb5d1dbf51ed04d.tmp

MD5 8ecd8aea1af9dcb3bff28b1d4e0795d4
SHA1 acd125327614726c4069fcc4cde256d276f57ef4
SHA256 ec4743a6044224132ffc5f20c25bd7e36dea25f7ea9baecec7db40b0904dd7de
SHA512 33ba68e27fc769f0166e72da458244981622ffbfad33ae1015ec73ff83751eae9aebf1aff991247ddc31f0223888f8f03fa9b2b1d6069112ad8e1689e519057c

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw3110493dd5bbea0b.tmp

MD5 0d3e750f8b8882470a74db90de94f814
SHA1 cb07462263379d3f5dd89e2b62ac31a2f7538821
SHA256 5b858fe4a054adb9461cfd12a5f3b8a9622a2eae88bca8dbd7d84a9f972a20b3
SHA512 b5ac0039428d844db36327ce6637d207ab02ad4cd89e0eac361d61393d396d6e2fff76d1007985889ec88d20e9c62ad29363b984b77d791feba588c1ec64f084

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw495d18e10e1c0dd0.tmp

MD5 2126db527717014c6695f9745a480c2e
SHA1 3d564a111a7f5a2a3e9b06ace066931fbecdaf68
SHA256 50c864c13306921277e9c43f0133c754938e96cfa6982879d106b32b4551d984
SHA512 a47423d6ce322d297b0ec222ab8fb7cc46a31f840f412f6da0bd4ee9c40080ce4dcd2b00267de53721e61ba8ea02ee99d366a1047e41805f7feab8c43e4babbf

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswbff2ce360947192d.tmp

MD5 d942c1700059ae77f3c06918cf79d7f9
SHA1 09b1431e2c3ca7479ce6f185d2e6ea3c9052cf0d
SHA256 500acf4c502f9bc7c7ff43252b9a3f6245ff4cd7a609dfd24a1c3b5fa19f2950
SHA512 fcd75cec93463404cd588abe1b5d25f6e0f5e41fd01591d51eb8dbd49b973187181b722875d72afe7002c27309819f37f88165a5e6af81b9d2f708da4ecbe219

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswb2db21c3417e758a.tmp

MD5 b52238936bdf50ab985435a176281f68
SHA1 7bd2be0808c538b6f15f20a9a1228cf4a20adbdd
SHA256 3a23171aac49453f931d69cd55f6ec742243f5835386d9e6b18efad96c2be450
SHA512 36999e6cd50e26b1620fe24ba2dc11a40b25d1d77cc7a0337c7a3f65b16383fdb224e179392a215e6dae846e8bda6acb3e027445fd334e26e34278a397452f6e

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswb2e51459757b0794.tmp

MD5 0713775484e95e5bebcbe807d53488f8
SHA1 222dcab5f38d72971fad641201ba3ff9a2a0ecdc
SHA256 e63a096b1ae68a774b1f1afc51b5dbef1a5ac2d79dccc1104112c22841e3e378
SHA512 f19d30d37718de3edba15358888b13afd9f9dfe4bdf37bdeb3204fb6cdeec3f249e388d06a89b21dd4a0da9d1cd70bc4f5244f287a4d907dc0a786df7ee97097

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw4803bedf390fa9fa.tmp

MD5 841e4ff9bb531b52218392db1d7cfbe4
SHA1 5607c2a987436195f1e241a0b29e8fb1f734102f
SHA256 4da31e582dc47d46132cc73ad34d5b87dddd2338495ceb2772f7e103a9a32ebc
SHA512 93232073d95870043994c752318f9b319db508fff452e4aa0b8e42e66d13623803be4537e1798dd05177b7427175d989c8e49a379fd932297e161d461bae268b

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw77decc90c7b6da62.tmp

MD5 85444893a6553a4dd26150a68fd373d8
SHA1 ad9b46da45366f13a22173b06e22a45a211e99ec
SHA256 65f2a93490c845833541de1376d5bb65e6e864a1a9232f58f86a7a84408508c9
SHA512 ad56f71d0dc6d2dc5dd46eaa00247bd209403014648fb9c8f98937fc8e36fc85c0107365d2f6ba4f6d530f340278e0205d94bafebc78d10201e71dbb5d4c36d6

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw9df326d32dfb69ba.tmp

MD5 90340ac74d22b9a67237ea52a4dc1c75
SHA1 75d44b240afd4198b0f3b7256a4a9533ad1ba73f
SHA256 fd48da616f2d17054bcab961239431d99c247586f96bac69aac5b704ea694352
SHA512 6f52ae85b4d9ab8516d72bb1662ac9cf602092fc61ea78bd85af05047c70a0adc5edb67266032f12a86601c983015276f15a457935f5b6143dc80d335351e5ec

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw8c33a13745780262.tmp

MD5 0444624f30e8030d84bb169fc2410444
SHA1 05c1cd844368ae2c113585b477f91507430d72a0
SHA256 0b87358da7882fed313facee92bb8f4e45299c63ca557fdfba1478b364575fc5
SHA512 648a79fd30a73582907c7ca008be5ef78e6e72aa22478448721c4c5bad45a45bf76570d24e061dfae5e535666e79154f5f9f66a08746313620a17582e3998304

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswc6c30edd4820fddd.tmp

MD5 3b07abbe272e9b9e2989e2d6a400fa53
SHA1 f925e5e58377dcdc13b6d80ff22c775e2334e372
SHA256 a170d9851a1427066d1fd61c32a9ae4b9545aa926be55da7e7d94275be281dc8
SHA512 14762c984aa6736b1330b1f0b296622fc1ce3ac79108c0bfee793a51131deacd09b494e8c851c6e437a84871a864dd65389657df8b2256f931e3c60a61fade8b

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw763009a148805bc7.tmp

MD5 7442e7059f712705d4b97699bf56de35
SHA1 f924088428eda3b76030091cf59ad38afb590118
SHA256 f822289ea5a9b0ccf9777a72bc8b73ce68b596fcca811e0cff0adc4031056b20
SHA512 dec6228063bbab561ae0c02cbcbab3d08c15f261758405d8a709707a180a09af9c462b0b382b700177f285a1ce3bf7e71e093f9031d15f932120fbfd396aa851

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw4dce85885a7ccdb0.tmp

MD5 46aaecdb8d337980c82cb2714a985986
SHA1 22104d2272b592a344df5b575fcff83ca0e4b161
SHA256 34457a002e90a590b516bbf58530cdddbb618a46bb3e764e18167c44934917dc
SHA512 33c91058a693b82f1457d49bba2e209a90b825927be89e38523671ac16f4fef208b98efa980a3e11185baa4df6d7639d447bf30e19dc91b76f04ee61b6169bee

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw36507aee560cc603.tmp

MD5 592a65b922d4cd052bae1957be801a4f
SHA1 8371486ce1b38e692c0abc4a2a9e0c3e1945bb89
SHA256 d78e74087d151454365adf6239967c8ecebe85b1c6c6d3f59e70f0980028b1e7
SHA512 0837209e518d5db76ceb8128dd49cf03b8f0d11526630ad20c716ade1e02df1b39a8440d20ee20b488c6d6180c155d00a9cbbd311fc50f4803a8b95d4a545726

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw787ef98eafec750b.tmp

MD5 0651bcd9acadac1d50653be35378a82c
SHA1 5d1b2233c7acb3915d33f7b29cc2f0cbf34ea1ad
SHA256 fcf66176b6f7ab86f98f38d5662f61fa61ad3f1e59740d8a1df0e1072248cf6d
SHA512 1ce05989181faa8d291bb0df34bb4e93f2f576187cf2d0c5110988ce17e6a682d815297fcc9fd174bc1791713fb07b616ed952729923abf8c06b8b8f6d71d82e

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw55207c3570690e6b.tmp

MD5 d1f28f796bacea3d58eca271fd128758
SHA1 934efde030a54a441c342af18ab5275e5facd0e8
SHA256 b8d3d45141ad57d917b25d2491a07f20c77b1dfd047e203e26dad591c40b225a
SHA512 4b6ada7f10a4a660c3b6ac0fd81a41c680bd6752eb1a70da08510feb10fbf2b7d5ee177a94d5093239914eea79114097329a64067a72068a8baea8a9963e3901

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw8406e88b359b9d9b.tmp

MD5 490c63e6b1aba9a525404067ce3c20b6
SHA1 04997f8a146284f8369c7db6204949658d6d7180
SHA256 c5131d1abd188d009e72b8c6474c74a262b7b8ec504470385f7f69428e7ae0e7
SHA512 245c4e2545e7eb5462e20e12d8092cdaba24d48e6c53d02f3eec586de17eb9cb6c15cea204a18deeea3cc8668c8afbe9f35b0fc1e751d2f515edd18ae149d275

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw316927a1b3f14540.tmp

MD5 03c2c3d48cba89a77a8c06158056aaa8
SHA1 3cf294991250721c2100288d4dbcb0343cc04bf2
SHA256 43e0c37da7bc6b2786f95765f14177651bea534ca4d1d966c79fc301a55ad5df
SHA512 bd9787ec2cf87f8c790db18724a5cc10d1a6de005fa8cc6a74733521bb11251bd0d026af9468e98b616a6d8212cb41c3da102248e105a4b312d7b068e9c407d0

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswb7ce777605bbbb26.tmp

MD5 410fb7adfc54094b95609747a5376472
SHA1 e2e79f589a2e71009d9947bb02f05b877e208266
SHA256 77f2e7e09fe542ea78f4f6f23440014461074b993e50bf75d02b2c6571f5d696
SHA512 57fc04e4c770766ee9c2cdf7ec166792fb4164d7657fbbb6a6ec74a5073de953860b7c1d5754b28b61a83b7bb1cc0a1417a2f13c246aa06044045687b207bddc

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswb5cbb78024d92c20.tmp

MD5 b179b9f02a2a42a92c8eee8722d03745
SHA1 86021ffb09e59a781e96158c8f5fd7b63ef950e2
SHA256 9c57a5fbaa0a57530b988a4aada32e378b1cbd1fe368b90e147f12069c8ae7bc
SHA512 4fa0ba86b83d4d3ee041772cc59c17407d02eef04385ad9c6d63547fd9e039a90d5a161b9acee7af9defce761ff47e288207f60b2b81a28cebe73ee1d68f0482

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswfe2d99545af7404d.tmp

MD5 2a21692ef3a54e5f4a016a3a1767a7d9
SHA1 9890261f7cc42d660371c1b9d3a96c09b1e48783
SHA256 01f6b2760031ed0d521e8d972a6e7b4aa05393934a37266c3f9374042cc97b3b
SHA512 7ee03077c29867a717245bbcc1f4c7afc425c5e248c7c70f884e3ad0bc0267f95b94ea2f47e3554b2d189160d56ba4a6924399bc80201fde24cbc943894e60af

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw20800b9229dc762c.tmp

MD5 7ebb75a1000e52570ca55c35dfc7bd6c
SHA1 764dc860173990e451f6aeb6fd9b0164a86e447e
SHA256 2b151cce07a4d9c8507a1c547fdcb6ad904f9ebeeee71439d6151eeee287984f
SHA512 6d9c127cb35c122cb028eb9e8e7cdb466dc7b429ae8a13ec818df96917120f5e1f47902ecb3ecce9ddb1379029c63db3b6504d83dac8b6342484124902672c09

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7ce76440406d0a5615f43b29b6ccc159
SHA1 fa15b124149c0a2ce790659737d1e612cdae2b1c
SHA256 cfde9e3720b3da49a2bbe6ab565ea4ef14ed787c7c8922ad565c6710033de657
SHA512 ae57d2692ca946d65369302503b6041849ff3b921c9982e497d875f416e955ad7e5ba37f13840248f01b127ac1c89cb30a86fa453b847bce42d338739564c605

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw70951f6ee2e57966.tmp

MD5 364d65fe7f976fd00702f5bd63eea9b3
SHA1 e40359ed2e2deb198caefedc27acf8c7715fc80e
SHA256 85fd25863a60e7c627494dcf14b169480023c0b8e4682a0e495f4f7389407149
SHA512 dfbc7b8660a7b96135ce0b35c8f2f576e536e8f8bfb53ee268611fabb4ddc4c53fe06a1a9e81ff26a8e10dafc40eee5d579a2bd1e19d7517bf6f089c605ece6c

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw4b1d32d3e94d3e48.tmp

MD5 c748312b0f6dfa5440bfecbd094f9180
SHA1 d991110deb52177634630ab6165e195ea62ab1bd
SHA256 7966a70a6113a131c563914f8cc7acfd8b8922d8ef1ddb2a18caede076f1eca5
SHA512 c5554ea1436d27ff336d7e25f6f68d485c65d916389213cb9c33df2622cf08314411ce941482c03a251e214e2faa72abd266e2ccd444c95c65f12f78eda5a830

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswe287637eac54329c.tmp

MD5 796e70f25faf0353eba92c001569c976
SHA1 2b427d0ad6e6ada06c012860a532da24e3f1a8c0
SHA256 9e153dbf1c157a910dfc62d1f1ae6c728ae3d5f2b767c5659a6881cecd35d8f7
SHA512 e0a2b6716add6542de78d409a4986a57a7d2e7d10672a57bc5a44fce3e65e365727cc64e9fb34deceeeec96b544d22b0901605985f5cce7f11341a00f898b56b

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw79f3fc00ec71b58c.tmp

MD5 f04d8cd1c228b2a9321429bc9d72599e
SHA1 6695fc5cbee5c73077c59ef514353a4e2d6485f8
SHA256 498d2f02f5fe0a73cdaa1617be6bf7b2b550ada0537f8b1673c590ea99429c30
SHA512 afa2baa1a7344e795e325cf3b757371978d5e1c2288c31354095f4c30a4d308f2d405fd00b4efa86fef5830930a247dced395f11cab49e6a620df2241abbd069

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswcbcede05043fd232.tmp

MD5 5e50911343631e123b2de2d19ad5e2ef
SHA1 48f0330e58e1a17a72bfc9b1283c8eadc96e1ccf
SHA256 b3caf7155167f5d1d4ada4df4764bc78b85032bb769e5ef586fcab27fd681cb5
SHA512 eb6e19b6b51a4422a861615d1f1d0742473e49eb4ff4a2a25c84bc485b9db336f14e3ee83afe8d221d91466ec7ae436b1210288ee3328a2ee0f66addae3be953

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswdce8c6bea984c6e0.tmp

MD5 51b851eb7b58ca2c3280def9722a9602
SHA1 75aa3331eb7da58868f700158df56fb49e3c4507
SHA256 9f0d6efb48c7f8c0f001ec30d45558c5d8675c06573eca7c8125a7d5a1db2634
SHA512 e9b0c683b58ecdba5d5132f6808ea2dd85a3db3b0d9690efb54aeee92c29b8b2b4535437d861d2fa2a8033e623aeb4ee0661dd01e17527a74d6002c9926e8783

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw8bb92e246fb1bcec.tmp

MD5 fc776a56634728a146211939d14187b5
SHA1 f8372701ba9ee1a51ecf4649c74e27d1e996a45a
SHA256 ca2b5493a6699756b3bf63d9bd807b0204419ec3087d02f4bb5c7b01e8fffd4e
SHA512 dd468a46c62e8a5a2ee64332522d5ca5f8093b13722e13cfd996b32b6efc74cc2a8502b44cada19ec0c30027dab400c8567c84937f08ccd989d8a0b75b470a75

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw0a915d049543adb8.tmp

MD5 9c46e030383d0f85a113a1f3b7477a77
SHA1 7f762360a7cb9881fa9c153f42f3a39be89db946
SHA256 d08d50eff27e71af2e72655edf22dbdea85346cc14be53c48988a3c039fdf17f
SHA512 6ab0490d9eb82f010dc4bdea8e54b9b760a417a44bb88a7bc74ce7d61833e355cef54712f3340b37fbdf07dbcd83e17295ab546d864ac06e84e0bbb7d8dd8649

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw627bd721ef231819.tmp

MD5 4ee09ce90a33fc4f885539370d3ab11f
SHA1 023fb903cb6ddd95e25f18fd72e1b57b4a5ccff2
SHA256 4b00d5be82d9eae3445b559f4eb1c62eb192f5554b9edad50b09f98fbc65c126
SHA512 afdd5f50fecb5ada09a4d8217f1db396a2501b4ea14db90267ce51e964536a9e7c32cc55b5a8239c357f9146a7f4fa601181b7b8222670550667fae95d55bcf4

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw0f9a0780e0420658.tmp

MD5 2b3eae5e560be8c87a246d0e8fe3f593
SHA1 8f9563bb72fbea30d37a27c353daceb552279603
SHA256 b858256aa6a926f89714f21790d25e90b7dea5096bd9935454a8b4c7abea736c
SHA512 e33e50380d37f075b8d7fa283d5b4005ccbd7c35af1d11dc6ea4f4529c39571f50114d2c678061daa47f6b36bda9c948ca724acb9aaf9595ed7caaef2b0c0359

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw9460d3189c73fd66.tmp

MD5 ae1eb2e7a5de49e2950cd2f7892d5513
SHA1 ab7ea36f3c4232f0b3f6036edecffdd4e8603936
SHA256 23fbe7263ca595af627fc37e774fc6fd5f66daecb54e38d48486c9df09e438f4
SHA512 ef919e89dbfe93ea2f45e01913c9b7d1695520f3d0073f2b578ef814e3dd6443bb506e5766d09d41e802f9c2cb4d35778c87f86faa89baf7dce66da787b85418

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw8bdf4a40a38f8b09.tmp

MD5 f6f0270f98f5cf857d1e0667819fc9d6
SHA1 959209e5e068aa2564f4f777e1c8616a9d4cb6a0
SHA256 616ac120e3b9abb6f245a09fc17398bef10c5e6aa617849fe68a89efdcddb7fe
SHA512 1ef69bcf037e2ead4b4c3518a8e8e3c2dd3065049649a6973aaed9300ff6fef4bc2bc25f7d0b92dc4ab5f6a576850537ce9d6e00090af86512d080417eda42c1

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswb61254a9e16b28c9.tmp

MD5 e36e88531f284b1135617b91f73e5ec7
SHA1 dac7d7984c7f906f66a2eadec395207a4fd9a599
SHA256 0c25f2284aec3aa7dcf6432ba9416e2fb289e08bbd996bcddadaabe42e361b46
SHA512 7e2f7095bba85a3d6aa21cd7371b73d9aea6b07d89a82c448a65f3188d9365a0070cf8b5312a3ef0eac1e4a2d79eb3d34dfbd7a16a7d9da19545ea216c195c4d

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw5161bc509fbeb276.tmp

MD5 0e37f414237e14f395f8914ac2532581
SHA1 2b06c81103d7c94075dd63a8df33b72ffda75d2b
SHA256 3ab7f3707a380352c5aff32c0761c5ff86f358f3683b1dd273da8be18f6521a1
SHA512 3e226dd4a8c2aba7fc81132840e8087bc2fbc11096098345051d6eb1dc724f3960789f7f958d362c6cbf7d58904bf5ec7ac84945730256a50583c41dd2135bda

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw509b64eb6dcdd744.tmp

MD5 320629a907048b64a99ef484417df721
SHA1 0de1886eae33bb5f16de27d647048a92586259d4
SHA256 b5823ce2d6e600eaf4e2b1353600dca0351c46d014f97ac525c3ee9dafb2bf4c
SHA512 6567cd36297cb05ed301e5f7eec87a5f796aeb9fb63ba30cbe73087bbe9539e2dc47a11947c8461cd79ead01052999913143d32ecf4cbdf5833a970e61d5bfc4

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw9f35c4a460bbcabf.tmp

MD5 918b087149a2571d9db1eb04878c3603
SHA1 aa1d2c7550df6eddd2e99b44ac9de925888281ad
SHA256 b2546e21336714858d2b03d2532b6955dcd7ff46b30435f6d309d8c39d0dc957
SHA512 07c0d13e505c69985d6354c450887260345dc59468eb82b9b0534d1bd13f5f960d2d56932b204b300ac7e5f0ff7234c5e459de06d0e466fbc3f710fb9551793d

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswf08219f1a679ccab.tmp

MD5 4d0399f0050b13586b8b04f62e95b16b
SHA1 407ca079a3bbe2837203beabf41516fdba776a16
SHA256 420395ac9ab87accb00fa478be0b73b583a42d406d1341d98a77f6189b556998
SHA512 8908cbf7cb7b87fc78a2baa1eb2aef52303e733987891361db07098fb70d776fe936d48221a846787d67adcfbaf30ad93b867d5578b7dd566fe8addc480cda18

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw31779c4e0f2a274e.tmp

MD5 38646cd15ac25a8d71bab09d5b077338
SHA1 4c153622a3f069480a194bf98add276f9138e168
SHA256 cb9f01af9ba4b50c604633073e4003652f1e99faff93daacd4502d4c08177688
SHA512 43844f5e82c7bf6a485a5411ce19aad3bb0f418852b86bb479f41170d85e04d02eaa76092b84ac7a1abf14b285d66fa2ff891cc9c97bbc18633af14ec44cebb5

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswd8fa1e560bc27560.tmp

MD5 b2eac5c213cc442820167617d568e179
SHA1 9e61baac12e1a536be5e553530db8957ac606d37
SHA256 8b4a9ba2855247adddb4ee1e7f503dad5674ea7bb45015bd69cc83a3332f696b
SHA512 af7a8e6e16b86d4e2aa3141fd41a8c897957486b4d87d8ed14210590e86577e030b4b7c419ed988d22851c5fdf75236c23560fd855ada97a76459c9c93802c83

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswcf5a696c14dfee4c.tmp

MD5 1c76698d36fce20d2919e67e3f08bfbd
SHA1 eb85df5d35cad00ee7eda50e8a4eceb2490f9245
SHA256 d95f01fc571294b128d0cfde5e68472b8f6a0b3dd5f0c18b676e3a077df80cc7
SHA512 7b0a9de7a2fab1b969b469f7e7edde93b9ede530080f4090ca0066642ce6bba28023bdb8ac5bd85eae38d918549be7066981a08263a3fe2a657a5cec15c62487

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw96514c538ddd548d.tmp

MD5 bb66dd4c715754bfa99abbcbee3a4449
SHA1 21a9bef9112c1a614bf3d5f6eb2d2f0f17b58531
SHA256 55804126146c7c575add104eec386f161672cb740e765eaaf7ec8707a7cd2af6
SHA512 aa3b8ec6c34ce2d162783595ff3902cc1e8812ead15f2e723feb82fb0202f654d7e1138e4b3f83c7cc0204e15c41a34ad0b1d07fd3bfa609e97c01241271d136

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswaeccc3dbe8a553a7.tmp

MD5 4228b8901e130b70052da8562dc7b5b9
SHA1 5007d4da77465c38d66689312418acbef9c7aace
SHA256 67f4d89f85a61b18ac1f5d6d04f625d64bedb252c219ff9785cd1508876bc718
SHA512 cb42b5a184fe08df207ac391c3e87d44dba15008efe2caaa0774439e8f7df2ec35f63e981d080fdb8fe2f46e8a43ff58a332d6cd241313ce419fa2ea0ac2f40e

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw17877d4582313be3.tmp

MD5 cd3ab89fadee9d9ab307f55390798102
SHA1 7f5646953d2a90c1033cfee8d2e6d394b05d0a5b
SHA256 915c296fabf88b9e3b43b5a570a6e8e642071678ac443c555f6e95bee7925bc5
SHA512 5b68fbe6456897695fdbc683dd703c286531e831fa3039ba19bc376ac5f363cd0588a815156b18139b82e64ae5c9d87bee025805658005e46d3fce915a9f332e

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw69b615ef8bb8a357.tmp

MD5 b685358b3d0f37b68a24a6862f2ab63c
SHA1 b98d6706b7c922a2c93a75280e599361502697d1
SHA256 7cf73e4f69b3dfd89f3b24167f2f421b17537f3a4e707c63c675457b4fbf850b
SHA512 965580bfab334a217625e64dc5ab8622dcd18e5377453252b0c40c8e171040411a8916145f98e1bbe7476ad140562ea52ba148bf584d3389a07c2654d122e9b4

C:\Program Files\Avast Software\Avast\setup\ais_gen_crt_x86-833.vpx

MD5 20785b3f71eabf85fcb7ca07031fbea3
SHA1 ea4a6ac7d945b5b8b6c8c01a8261d15d540fcc77
SHA256 aa973a07daa5af629d42a130c6fb5092839a742479cfd683bc2c849dc1464795
SHA512 3c70b93417f2e7bd8862f7acf732e3a1335ef8e51cf2fd4da3f6227c76a9b1ea76ea5d8a38af6302aad3eff533e48f0bc64bd55d64375313f67fc4846d36fa64

C:\Program Files\Avast Software\Avast\asw1124ac7126bb149e.tmp

MD5 cd97b86463a7755aa6902a18625993b4
SHA1 3cc6675550719994b237635a62d0874d4f3d604d
SHA256 05f3d04060880d09a4c4f03fa8a17cf15b04e9f7f764fa346e11ce4e98d2b777
SHA512 c454dccc466e10a10ffb7161398eec473b70336527063a18e353ab25a5d7a2576176c2af2a7096c47cb98acd826fadc0bf6c1e0e6b7cf7421528c8be07d00a35

C:\Program Files\Avast Software\Avast\aswf91c2262735d1853.tmp

MD5 e0f0d9c1ea05cac4bfbbe7c2247aa61f
SHA1 ac73392983afb5a55c245c79b55d5506db6fe8c8
SHA256 f0e82a2f1290346217138b3d892cd916d8ca69855f63977d9561f5278d350332
SHA512 bbf3d0db25821381ece3cfa161447513f28c2ffbf107ff6c8752cf61cbe2c497d7e5c154533a35da95505472dc475ce83ac89baff5762ef9cae7d83c89b14ce3

C:\Program Files\Avast Software\Avast\asw36b4e9e4e520c3d3.tmp

MD5 575634e4b6719eb8600605a31c32750f
SHA1 f327886d113db53d209d9896f0cc8df1f0295efb
SHA256 9e6d05d9b6d8bbe66c647a1f07b3be2234f070c9938a10724dca1ce3fc05ec12
SHA512 0da85512e6ac5673e51ef32e4e95a60416c80f76c4612194878f64b6a70ff3c026717c0708480d6141f4ffd8c881157e67ce703936ac5529d2bc225909f00e5a

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswb2defaa9a33d66c7.tmp

MD5 268036dfa28320d2186b9b21631d443d
SHA1 96fa44f2214af9ede1160e043c7cd31b890b437a
SHA256 edb3ff7cef28496d535e40769625e542dd3e13110c38ce2e3dc1caa8687b892a
SHA512 99ce4bc5798320dd7f736725eb85a98553e277ab93353e1675fb7842bd258bb408a5df7bc530a161d91c1eccfcb510138f98085a80e892c3f54e2e8a723bb841

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw5d8e77dfc2b924fa.tmp

MD5 9410ee0771ff1c2007d9087a8c316a4b
SHA1 3f31b301b5a99a13486ddec08d25646d5ad510db
SHA256 e4e85eea1106d361923995e53a0b961a28d4fb58555f40945003f35e5bf2c273
SHA512 434a32ca6c4fdd8ffeb45d1bdb4d9f3c1b1259a1260ae66eb241f8bd63524cd1a3ec29d5eefa2d2f266dd740273e69b6bb8a7771badb77e781dc789dc18de2c9

C:\Program Files\Avast Software\Avast\setup\setup.ini

MD5 504dcead5390fd71fd072283df5939b9
SHA1 f147b319fc7dbd22c1a13dc5f2d144b90ada8515
SHA256 334f1bccb9088ed0cd3a20bcac4c4864667e0e95068d942555222c11e5778876
SHA512 97d1c5a757b702e40cc8b48607d35d0fddd712d5f35149fa49365e165421ee88f28b5ff9c305de397a6714d07add7118f20aa46d5cbe0ae1c40b812e426a0cfd

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswf15ffff94dfd7b33.tmp

MD5 699dd61122d91e80abdfcc396ce0ec10
SHA1 7b23a6562e78e1d4be2a16fc7044bdcea724855e
SHA256 f843cd00d9aff9a902dd7c98d6137639a10bd84904d81a085c28a3b29f8223c1
SHA512 2517e52f7f03580afd8f928c767d264033a191e831a78eed454ea35c9514c0f0df127f49a306088d766908af7880f713f5009c31ce6b0b1e4d0b67e49447bfff

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswebd9a84f26669d8c.tmp

MD5 22a66d8309244779b8a7f275a3ff5cbb
SHA1 195e58fec7a5d39fe7a6275dac37295777da1352
SHA256 aca79a9c1f6d664d99691fd0d3d84a8819993f784b2ff6d7baf8e8ab2e15e7b0
SHA512 b39eacf78b9b97d968e96e357725bd6cbad7592beef5e0e5b301189cc76847be49f8a5299a16d68bd5c1c2d0e86d5263f865b29b66df8360cb1d4725b7b00ac2

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw55ee8caf22f567fe.tmp

MD5 932dcb8d7d06f4b89fc3915726c418b7
SHA1 33a1fdbfc3dfa0a1b7d2fa3b2e8bad8e8c71e961
SHA256 a73bd7d75f368ab2fe949dcddbb25cd5d5975ff9091761a01b98f5e26de543ee
SHA512 fa24b5f9a4192fbfe737506899dc052c51f48980992cbdda878deef01ed0280ca455bed0c813089503da3ccac92a0289dd8fdfe64cbf6babdf70d7bab531540d

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw8e2ffb44415a8b07.tmp

MD5 0f4e5f6c68c514e63c4cdae9eb9e40f5
SHA1 b755c91cb14e9f22c690209d0b4c3661ab20770d
SHA256 945225e01a65e5199aa7372b893da3b42dbd99f315c345f0e7c136af88e897ef
SHA512 8962e7f92446c535151b38a7e34bacbfb9f0f48ab57d4c2c8f2162dc2f1cd9f15be70742032192b41aa368c97a149e1e6fa6991e29077b7b7d7c1708f1a54f9b

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw7397828a4fed7dd0.tmp

MD5 f9c7a19dfc5fa60b1405c81208bd959b
SHA1 4eb70df0a412d79fbd8011fa17ef815e10189c0d
SHA256 2f9cdd965650440cebaf2349140a7dde9b587829b7753de8cd051933a777f499
SHA512 2ea1e4d7d63af427a0c764b4a9a646421dac1f1eba15c1d43bd040b284fc611c8059d889c48edfca56e745abb996939d8f430ff3e249a5c6455e81b520307a55

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswcc4d2ab37bf09449.tmp

MD5 718e5c4a63d2f941eeb1b4e9d6d85a8c
SHA1 deca5196d35d43c7abb35d9ad4b0ac0756585fd9
SHA256 f3117e3445945a872a35e91371e2a6c9f7b3fa5e74e5985f6ab12ac101b280fe
SHA512 61694ff307bcf3869dc14dac45e74b0cdd5a661d40e8483cfe96debe4727ec45ceef867d18e972d25a6b294c43ba0569562392b6752e068f2ba7c15407fad975

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw2795ece49b792113.tmp

MD5 11d5d26552c1730ccc440f13a1fce188
SHA1 4c534eb613cb05455809b6471d38e1e0976aa919
SHA256 edfbcb2ced712f23842525cb076ee2c09cc7b811a389cf37922d04ef1985e10f
SHA512 2428c4257ac8349035ebb286dec236a25acdbf23178aaa80fd5461b2ed3101c0a67574bf7db8728d0c101d92f45dc72e7bc578049d5b18fac367bdfb44ecfbf2

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswbfb6209e256b18a0.tmp

MD5 ebf8072a3c5c586979313f76e503aabf
SHA1 2fd9609f099a8f42b1b7ae40ad35be1569c0390e
SHA256 a030dc2dfd2eca28a9375c92989adf4daf161f988db5e16b9e10678eb0dff4c7
SHA512 438c2db953606818b843e42c04240d510b5e398617e8e5539498264f93cf1893ae9a6b6b02ee35b169ae60b0e3b5621d7d9f7e2945d0f1e7c2e7e0c1e9e3c1de

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw2d496d6c8ee042cc.tmp

MD5 e6d7ff1c7c1311a9011f1039639adc3d
SHA1 d47faf7b6f8af8ed67546e75693200d022ebeccd
SHA256 993af3de5e1fe2e3d0954cf06254fabb91a5a3aa513183fe0841b897eafdaeee
SHA512 35eae324dc30a6bf652cf571daefa8d34d12c09361b248d8931ce721940347ed50a2d51222adaa655abbf9c5a0ab58d57cd91cb1cb26dabd487ed721790378eb

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw9ff25176aae4d661.tmp

MD5 0307284d59b87eb2a10219270ebb2f4f
SHA1 a0c911ad793223f3274097afaea112081246853b
SHA256 1621c35f57a6202245b8b06468fc1cb2ef20de75cc2ae110819eb753607146b5
SHA512 b33ed63d6d928a2345310f9d2aeac50d3d2a55179c8cd79bc7dcd2a7c5ae9a1425af354654f613715bc2aba836108986daff83651208b437345071e2bedb7bcf

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw3c625fde8ae37a34.tmp

MD5 7b7f4484966036ff86a7e4cd303d3871
SHA1 18a789e9d1e9df0fdf22e94d71a18c483cdeb611
SHA256 7d3d88332d4744c9b6be81e2ba8d42ced7657ce7879a26f5b8a8d3bb2331ada0
SHA512 39e986994a99361fadcccbf5bd861ce9c4c6de65ce5e3da4d390b234fff34d7c561637ec012ccdb2757794adc222bc80de19a60a8917fe65fc221fdb3054149c

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswbfa3b08daa411c5c.tmp

MD5 6aa7b1323c5d8e314f2fb42f855e9b12
SHA1 044cd0167de5e9c1b014e07287c90473c96944a5
SHA256 9c5880c395b4e7db4b8d6de49c75909abdaeeef0b041c1703c7339b05d7d2866
SHA512 e99a14c8772662dbabcaa504bc61ef616590bb6f7384adf8ae0637e0a365f94c67fe4222b978605b7a2eeeaa62505e57c32857b17b51f4b2e9a0d8a033f0a204

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw20a5d14e2b002d84.tmp

MD5 d7164ae82b7332432bf2eb7fc7774e72
SHA1 221d79c77a8a80068621a0eb8688ddb86224408c
SHA256 08d811ff57efe50d9f365c76ec29e095474e0679e06bb4d0d4d0134b0120b40d
SHA512 d1a4cfc0a21509382606f4650a67556b0616283231e71bb1870ccaa5deba42fd77583c3130d60d632e98f5acc4763f57a2ed932aa2eeef49601618761acd9429

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw18a95c870b63567c.tmp

MD5 58a8c2d2404ad7bf6fca8bdfbb8a5b3b
SHA1 6e834364437bfd23b48e66d8d891966860528d08
SHA256 eb7851e182a4675bb34633869938ff3579779a92a6c094194efbc970f3765dcc
SHA512 d44e3b47dabd29621a3fadaed16074a46b646e1190ffcfffb7ec835b8cd6eefac88570812e41a490daae485a1d71fb2d035c91e73b65c2fbde649fda8733ceb9

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw50d0e9c09eb3d671.tmp

MD5 80e80532239aa8929ec0fddedb7aa8af
SHA1 312e743535e66735d782cbaffacf94c6c791edab
SHA256 d3641bbaeaa5a7e7d4ee0ee0ec64ccee0327cfba3d10b89094144eb70a0867a9
SHA512 87e7a5496bb2dfb9bed4e9b9913db2656b335b916eb1277ebebc33ac9d6622bed50a22293dcc02193f846be5e0b4b0f032dfbcc673955aa90f04cf81b47a9305

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw4f0a6a32fd5fd03b.tmp

MD5 dc3fe259a9b778480c2405fdd7405c9c
SHA1 d28a588217738af932fc43b809add215eb932856
SHA256 b33a762f0eb072033044e7ee89505b695f357c958d4107ce6f1c4d68f88d3277
SHA512 54f58f5a0d1aecfb9a6c8f12b5aac30e26ec427dccc097f8015d690a0a2244603e80810c19fb8eb2ee7ae9122d14829b3aaa81c69c77b6b4c5751d040c3849f7

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw0f36655f0c55b38b.tmp

MD5 533b418afd2ef8e423f42d414cdaf5ef
SHA1 09d3a595bad8f0e7ab5604fc02ef832d11a26b88
SHA256 66f910721f4477ea238603e5c14c858d1e26fc2ceaab3b48294cac069790202c
SHA512 eb73c82a91ce67f8d0265ac4f0739849e5696ec0069ab6508660368b8d382a230dc88eeb89aacf8bc9fc6b7e31c009521fdeeb979f4ebe6e80cfec083129ccf1

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswe74a866f83a856c5.tmp

MD5 bf69d049653e504a7a1f8b55a6dde7bc
SHA1 737a1cbf1fddc0ae93a0a99d2feddd474f4b85bf
SHA256 e6e839c6d205f91adaa3d980f843bab3131b8a25e06d152d0f70a6e98fbe0fb0
SHA512 a8d834d46fcaf03aa53bd48b4cec816e0fd599b06b16a14006e402bfaa5a470f47dc6a55c1a94314d635af55ff2322eb242b0c535a02fc830dac83e375adc6a2

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswe8dfb55dfd6477f4.tmp

MD5 152925be0e3a0ff77b0979bcae7a7583
SHA1 4ac4bb649b42893a8d5ba345a1c92ab2ddd1ddde
SHA256 2e23b53441ba6b0779b222c120d44eb9a156d55cc3648f76216017ef06f9a16f
SHA512 17b41057b82b1eb037a59715970496d402ac00a59fcbe67245203f117fc38f1b7e7f5b78872850ac4fd7a5dcf4a3ec561dfdb3fb0e827ec7043978b535e9ee26

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswc616d4e18e96c1f5.tmp

MD5 374d505ced3719d875ac316ce365b1d5
SHA1 24da4d65eb7a9116c626bf16c3bc95b563f10176
SHA256 1edf013e890072987b8957b77baecc37140bc01581e5de6b020ae454bb57f8bf
SHA512 d9b82d1679afd85c660ea985d6f57cc13fd35b4d7b8104c6d9ce1f182789b615a573b68d5f1da6c25682cb35068ae0aad3c1c9b4509f339fa1a83a9eeb7f74ca

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw0933abb44c7031fc.tmp

MD5 e4fcbf91666504c1eb70644dc4c5f479
SHA1 bf96622c082eec928920a052bff477cb0c9e0573
SHA256 58d9a9b2442c10140db98ba705e8c7b7b9ac5a2c030d3286a66debf63b615c1b
SHA512 9dd34f36144010b3c1400ed1b1db8ac8e97997a0d2c803858abeaca75e26d19dc56512714b566edee581ca20c813c3cafd47a3f774a1596b31e23208b1eee4f5

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw31433466d243d3f2.tmp

MD5 6e245fdd89bb6f88f56784adbdca0b0a
SHA1 9ac5d68ff969f984f74e6a8cded8e683b98ffa36
SHA256 0e195a8d013a329a06df877a4569a3ec772f112ad29295f086c6d3e53f322fb5
SHA512 601248c38540dcbddd61fd26203df39ef5d450827570f01cdf0e415873e098913d82ca6e3c7b21a9bcae267b4cb67e970237cbd1c6320b8ffab58c9fb675a3cd

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw443844c6c4aca2f6.tmp

MD5 b9d80efa3f5b0b75c523d4ced4da1fd2
SHA1 f493358454a273d0ddc6467c9ad82bf460dcebc2
SHA256 44ebde7f2681c0b8518e55ca242261b24f326994f089a4ef6c060f8dda04d62d
SHA512 d597c0e7c5309b9631966b01fff7e166c0dd0fc9d63534d588d47f9deee593cb2cf79cd490145aefd472b9493dd65144e875d5870742c8d09fa4c7d459259feb

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 deccb1a74b113c681c07c7c69c97ca21
SHA1 0c4f1e7cdec1b8399721dbb1bb229030ae494b10
SHA256 6dc81d532fbf4a5210523d5456f774b54daead0fb06949daffec66f7f5701d94
SHA512 3dbb41f6a295cf10082a9e828f6f23f49155c67b61403ad303c06d856d9c1124c1fbd1578666dbb31ee2b495c9f71e5acac87f5c1730ad5e476fa8942a203627

C:\Program Files\Avast Software\Avast\setup\jrog2-41.vpx

MD5 9d34fc63dd1147029b8a6f5952e305fe
SHA1 a4d8001741ceb2082f00129878a9c472d55bcce1
SHA256 74893245e11725afe9c4fc7aed3e6ee8bbf53045b46b8138efd595c3b78b1199
SHA512 bc8dd7e8218fd19f922b443786f4c6fdedf1aa77f01e3bb633dca96c44cc420afb797147cd0670b423ae7aa73c314861bbbe54cbc7ce0f49671c56814d9d52ca

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw9e35bf4cff7c596d.tmp

MD5 a1bee0af7bd944fae7f14174d9dfdffc
SHA1 ea699130cd63857569bf34826b9cbcb5ecfa1a21
SHA256 2c557f6a21db6c99af6184637b5efb57e44b40fae892230a43e96ab05ab27d40
SHA512 c6e9473ec6cdfc0bdd1b8f9f42bdcf3d31855b6e106b811ca52d2eca895328889451726fe12ecaf0af9a238d74c10e79bcf0870f056e7e85ccdb9be49f4515a8

C:\ProgramData\Avast Software\Avast\SecurityProductInformation.ini

MD5 8a1ef92be2a3df74dc96532a605afffd
SHA1 15700a8c48c07f7fc91f83579deebdbf12e0d3b0
SHA256 4ed7eeb8fa0487544074517782d7acc05a611e842afc3ce892f3828726c7b078
SHA512 2498e365aae82a589a2bf02cda61c4b09b255a56621a28726c8a54adf323859fa7dee985b2a007dcae778fe8e53af80644064a8c17fa68405666833b7a7d2c22

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswc1654a47b437b03c.tmp

MD5 d91e6c55a2304aa59d24e76f34884535
SHA1 04ebc0bc4932c09c3dc7d9259fe7c9a6166b7233
SHA256 8875816a3809753c04acd961244608e9a47127523c1d5e50cddbd83a4627821c
SHA512 19c1e2458c5475de2b41013fb18dcf3d149c88c0b3816596b67c90f7bdced3d5214fea97dc3782f56f8a276f93fd28cf519018257bf432c00435ef6bae60a8b9

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw73bb7cc2c1f9b045.tmp

MD5 70f8acde94e2c3952b7ba7f56a4ebfb4
SHA1 955064391f0c9b41362cddbff7a070ab3888ad3e
SHA256 91decddc6e80d742755a1f65261d10c3c0d059aaea6389bb2da6fd3aa7ec5289
SHA512 71087a283d560f08e43b1a183258f1153ab5091d5d318cf4ee0fc8385285592c377d8e68a0f06d3f0be84202aad6dc7376b56057e23b6b3753a445323580f287

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw95ffbd4f5e3bc86a.tmp

MD5 177009944ea3860b58c09da1871db999
SHA1 01cf9cab3aec3a1ea89111269f8cb036e73916d6
SHA256 f353bfe02e30f4fd5cdc89bd7f44703257f229a09f0d815d7794df902f67d1a1
SHA512 279d1e663ecc151dd2dd15462191ef41e668c7a2bfcb7930b8d568facf7695a030948c3af7f9907226b00dede255a7f30169083ae2ce544f2381548db31c9981

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw3e6268c50bc178ab.tmp

MD5 5dedf9f86ba1366d9e920f33eb03721c
SHA1 605312ce6d623889a1d404354ee653414a7e4920
SHA256 0ced53f1ac2adc9525047d2c2a7592300dc48a5f52ad8b740ce22e3f3aad85ff
SHA512 bed8c7a74e57f4cd44bd0edbc1bbb1f528ce261d7ad6a5545c33974c223ba910d648f0cbea8bf0736deb5aedd3b257f373cbbc4f9765d12c56a78e823d05d4b0

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswd80167b4a1a1aee3.tmp

MD5 afc4db1ae7eb74d1b43eda3d7ea5b43c
SHA1 f31b2c1161024ec2f89c72631631e11fd5ceac60
SHA256 fb4b382e2dfa80b3427a98c51d3270b1e80b5c2a10fdae1a72b7c464e57fc6a7
SHA512 a014e4bbe207fd707a87aaa0228241fa7c414062af8922f51e46210b958284096357b21f89e59141fef28039a999dc6ac832ec7fc38bc4895e88fbed6b9a45a0

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswfdb7058537cb15c8.tmp

MD5 1862f49d5c2ba7c2bbc78bc517cb0b38
SHA1 dbdca39d6d9d166f9cb5b8855d456653419136c2
SHA256 90ba9da43d6705d76905e630505bd1fd097d1899c9bca3241ad0de5ab08ee366
SHA512 c9c85ec2851f5b793de07e672365e6db28f1150ed6b6057d15be828a36029f4ba9e0d4cce12c7d424da4c94713c18ae256d9ecba9e59ab88af639adf56ed6a3b

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw33a203a888ed7d85.tmp

MD5 57745a06849d90cd5c79ccbec559e7b5
SHA1 71d3d3c0998e648ef6b061f7c65850c6a2a8593e
SHA256 890dbb72c4c35266bd658c663c1242cfa3b50cf51e2873e986b7ab2e055af4a4
SHA512 ca28053575e40eb805f366a7363257b3d40a6fa8ef46ffb5b58ff17cfb0ea2668f5cdf2661355e94866b73b914950c09940f5c32fef5f9a22439932e35391dca

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw3d9cdaecf82cd5ea.tmp

MD5 948e3c479e87ad905a3689bc94cbf86b
SHA1 c9b2dcc45feb9b0bcd52122b51adf98d7fa5b0e5
SHA256 982fcc32d7614cb921cc5203970e3997a33b31aa1d91f14db5db25a582dcc3af
SHA512 6f15478ba5e7b403580b4b52924866e52adcd112d82900dd17a2ce67efa10306a5a86e1ba5cab76bbe3577e2497b83adafd6cf6c39a81c35b53b528e8bf6b440

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswd6c117c2ed2202f0.tmp

MD5 31f60bf9a22a86cb8879fce5c1022254
SHA1 23cdaa4d6ae0e953d083b968558a2af49bf95a4f
SHA256 53afac76a7124a132a7c11261f3b6ba8d6a5466e7e8f683c8d12ac370b7d6b62
SHA512 c41ebb39cc0939b38d788b692e75c10c78a806cc8844d8526ff25869777eefd086518cfd817ebb700e20b3937401d6c0f7f506bcd479fafe1b801507376f4ba6

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswb94eac040682420d.tmp

MD5 9ac788a87032640e046f305413585503
SHA1 41b74cecf0f78134204dd3d8aaddfae34d6aacbb
SHA256 363825adb27d5a5bd249fe58460a977077f823e50dac7509e124fcbac1512128
SHA512 cc725796af3f7793ce6e6faa96a201ebf5e77ed00dfac3211a66a95ee071e559c9efb8e47ae0287d9cc1feded559000a582a2138736ab8c628325428c78e648c

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw5bbb88699c675ae8.tmp

MD5 772d6c07e47e77a4479c7a9eccfeac4d
SHA1 b88db71fc80eb57182db6dc6ac00b022e1e47cb3
SHA256 2c9a8f8d47b49d04a82e8e689ae9f6552482b1861eb8398f3733e97327191c2a
SHA512 f87bb803e818372f57319af97227834673cce9988c81ffd4a3d1c6d7038c6f7398e06a7133a17f063cae152ad27666a6d18f87ed77bb46dbe141c1272bc3ac84

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswd2699ad1e3be8073.tmp

MD5 9ad2e67f2b1f04b760deb00b889fab53
SHA1 465314c9bdd359840f7da11a619ad0b409c271d8
SHA256 5662035361e37f6c5e4a5a19de134df2ec20bd4c0f1be803203b37c95ee61265
SHA512 cdb358848d48cd3913e7249eaa45470bee4ba9f9d92d975215018477a57db930c16b349541da2d82a2f9131220ec3b3cf9ff471ca411c2f705bfe916e8736be5

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw33e20095d7a3b19a.tmp

MD5 714e850aa29e808568933c5ed8c7df5a
SHA1 ad84833bcac69b5217705e1c4d33d54c856525e1
SHA256 4a244eea4596ebde0f9094cc6dfeeb5abb3c4385225bb0630ef55a431fe1c4f2
SHA512 3a220ad4e2fd49f40f7fe5fdfc53608b114661f31993c0329e993c5d733b6d6f3a366eb46f93aaa9d5cad90766b21d85e5ccd09cb9c5ab905118d70702a3ed11

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw7df417718a1e0221.tmp

MD5 d4bad006e413ace7d729b1249c49b92f
SHA1 cf0dff1b371316c8517619fdeff81c583268bad3
SHA256 245d48bfce5cf6e9c5093e995d6ab5988e2401d32530fd6863bd5f8fd688d780
SHA512 d1a5001633f1cce60db2687da28706f66644613672fa8487b065e3aa8d77ddcc96d9272c665d894b243e222e1c104be10be1dff8e5d007490e50f2bd2a708d0f

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw61a45bcb545e4270.tmp

MD5 6337654372aa9adf6a8fc97d9676a33d
SHA1 b790f4828e7aa18cd0eae77e78c67ddd66f3ec5e
SHA256 6fc551cfbcaa0f90ed24dd09fa117e9fb3b6755a3fc0251d33ca64862a9a3414
SHA512 4a888d71747c64cb4a964d8df956c5ed9e3de9e8cf30d804e3ba76e8c35502e1802423ce527a419935b0d8c8e4c0f6168657b2734ab79d01afc946521a88d528

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswf8d1a9556e3afe4b.tmp

MD5 d8999e328af5ee1eb23c216336637cb7
SHA1 a7bde6c833e4d6ddefcc4050997b1583ff1ffa42
SHA256 4ea02b683513a157e21824b1c1e9ebb782d22f14209b67961f97b1f79673d3ed
SHA512 4f041ed2daf781b7f86b4459e74330650b2687ee46dfb961ed7a0716ac7ad2082a631cb619cc6d3c7d19f550bc030553b9656aeba14f969dd52df0b40a0e418f

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswaed0332fb95568a7.tmp

MD5 892e47390f34aac7d20afe63ffa92f20
SHA1 4a78a77ae1d5bdba55534167f781a3c8675c7ed3
SHA256 6070ffb5e20ed032d460d323df981d369fa68045fab130fd100803a00ab88c23
SHA512 8b37866ebdca5047673d984bd779b1df052e3d44e3fabc3a4ce2e747489baa2bd86add629d95c76cf08150f74281d89d46372ef64266b90304cf7dd581af3a93

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw6096697226e71fdf.tmp

MD5 1902b85a588178857e9637902e5a1b85
SHA1 31ae4cf76a34ccbd92fdbe60bee080998741ef4d
SHA256 5e48c99dd6318b017686bde507cdcb9d6ecf25f4f78f345845b865e443f1ee66
SHA512 0755e9c0adc9e374060c851d4f7fa62633ec07dde0bbfd56ffc9bc8ecff5b9efd6fa8418c43e838770eed43a54a48fd61a41226d9ea84834275a4a36c7796472

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswdc24b0048c96446a.tmp

MD5 7f0ef1cf592d04b082b65f75584652cd
SHA1 f7b9a2851a66a6a8eb509f2541b6ccc3b551f2fa
SHA256 9f496e181b1c862c7a7d03c09d9b0a5361535c98acbb1a9d50a27bcfb0a2bcc5
SHA512 30d2d695773e7bfd67de8691c40e571b3b91858e72eab3d78c84902b359108e9988247bf81689ab15fef6ed0a9ef62031f1937c6e7ce4ce8e1a34970ba23e727

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw005874178dc3a270.tmp

MD5 e334f2fe1e0e6d5d6966f139ed328d97
SHA1 68b2cd826f3dfa59531397ebb3f382dec9af5fe5
SHA256 d56eae93c55abdc8eb77d132777049634e28a9b59fd4b2101d51351546b984d1
SHA512 fb6ee02f06447c906a4353d93ce247e14a9a1ea4255819a88e395afe2e3775fe3aeb622b7a97d86086d88c739ba4d2e2fba9e8fd6467e167fc75d595c9182327

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswdb4847f7ee18dea1.tmp

MD5 817f9a76b7eadc1226b006ccbdd38a11
SHA1 8b81897cdd4d48befa389c1df2d0b887ffeb58cb
SHA256 99ed148ffbb35829480412dc64da6ad24dfabe2f9a0eff9ba1493455d7127677
SHA512 53d8b2561862c6b2465665d761612aaa8b7adc887058260fbf970aac0fb006317283ada01468b1e042fd9dd44def90451793afee297ed787086645cebce45cd2

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw9c8c609632376e77.tmp

MD5 059129bae1776f03c59d3ba66a6f6dee
SHA1 33b1dbcaba1d16eaf5413f1378119cecc1298724
SHA256 a83af0f79abb5e5c818c6f38a38da80e531081f3255cb006ed4c29635cc0b9ce
SHA512 6a7da7e58620bc1ce4b6d3cab1e0b746fc9fcf05a84d85931f845412301880786fbc63b31611d9442b5a1cfa72558966375ef14edc749473e2b7c988dd20b675

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw9c0461dce391345a.tmp

MD5 607703b245d9b4fc69a8b5363ff626fa
SHA1 dcf4626787ea220b19e08cc5bf9e55553a3a2aef
SHA256 f65b1b3ea2767f98f0c29118e85b06f4e61654bec34b60b3abb593b24ec29af4
SHA512 92d761f733f2c678946894ca72459b0e6dc62cd3abe1073653104689ab48c19603e6e1109c07b2f110822b424430f22d112f87c629b99d0b3ccc16e179549628

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw039a889f4ecbb4b9.tmp

MD5 2b4a3a51e075ab9819c6d6bc40efb4b5
SHA1 bc52c10ded8b087c73229dc2f98714b5a368f521
SHA256 d718e1b6c352112c2f8e36b4ba5ed28e6179257fd2fe944c4a0d404b5c15b5ae
SHA512 13b07dc2247d51dad1ab9bc7df93e0d3e1bd6cc4fd16f9aff87ceffd40a56933d569a5fb82177dea7b6ea04ebf9f909f95451d123126155a13de6a85f747c592

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw61267ad9c0c37aed.tmp

MD5 6b33e6f1d77cec0901ea8e91473bc18b
SHA1 a397d2c6aead0b3e57d413a8d4af7f28e67f4166
SHA256 449631a3f5fadef72acc2c2f84765208d0ca014ec1fe93fb9ad805eec1d40eae
SHA512 8f5214e38202719f6a7549b2b97ad24288974cfb6cf0da1e9eec5b3b2092220f2330a260b17e28afa90b90226666a765a4e64fe91107e2063cde8e285f64773b

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw886a0bff4b3f12f1.tmp

MD5 0909e61c8c9c717976828f65c987e5f9
SHA1 b5affabb8afda55ebb1f404edab69c6c239affe6
SHA256 03ffdb036329a25beacf905d62611a13e3dfdda6cbd2d13af830258e8cf40ec0
SHA512 7f78746e40da64631c08d0e173fbdeb40beed180932b42382d9f3ac0cdb4348d2a5b1c29770bb98f5d4823cfd66ecac2285afbcaf109f82c8b75c7711f10c49d

C:\Program Files\Avast Software\Avast\setup\ais_gen_crt_x64-834.vpx

MD5 cbab7dc59df765813881abba6f8b9780
SHA1 65f87c9daed5d61ab1a0dc783727677a33484e83
SHA256 b3f909a53f081590a5c847e581de93520ef76e33ddd5117bdf924be3937d5030
SHA512 f3f1305799065dae8de65703b66a162e07f3572967637fb82231281242e265c31145b88e8f7e7bca537d7e58d01781d81e13e80adc24c39f80eeb532d97fd52f

C:\Program Files\Avast Software\Avast\setup\aswb81da0e85264ebc3.tmp

MD5 da251273f6b395c3643553d138013014
SHA1 6aa71a8e73ce5fe1a06ea5da769f37df1543d0ce
SHA256 ccf508b092e866ecb3c4487c832390ba8fd257d45e5b8ba8fad688c59ecac3a2
SHA512 1ce7ab315049c37f1d7a3e361f464bc2453a4c5892b4ddee209e633d0c9114703deafc90493abffdb42534343da08231886d7411e5878a6ebd37d602b3a5de2d

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw18da175ccc368a29.tmp

MD5 932485692b9eca9475c4caa8f3e943ca
SHA1 4cf7afce3f1678048668c6e7841d7296c7c4d656
SHA256 b6b27fa6664018c7e3ea5f11fa8da914716c0968dda6fe1ea87d2213864edb37
SHA512 b024e7aacb46b161e5cd8427a89be32cb508a1ceb5e3ded5feca28fbde916583f3fc958608c0dca4a945b15d063cf151193933efb9992fcef781e611b5d60d39

C:\Program Files\Avast Software\Avast\asw6e8cc43cb28dc0c0.tmp

MD5 7cefa19bb1eaa218e139641afe5f7ebb
SHA1 a7e9779e8638eb304f6ed251c598bd49d050bc2c
SHA256 1e7fef380e3b0a873ec4f19e089af82d40e1999163f4018c316e93efd725a8cd
SHA512 0336c0984f01fc432442a12a5d3084dfb05c9b1e44a253d1073288cfd5ce0da4a0841ca6989047697107d553d7a04f354a6898f1d00f2f7efd6469dd50a49f1c

C:\Program Files\Avast Software\Avast\asw4b3c76b5444577db.tmp

MD5 542c3766b477772742c58303131688ac
SHA1 776efeb8accbb52e1aa5a2e6d44c5d341f618c2c
SHA256 dcf73de686a8975f8f734b7a78dc00e9f58e37295c38b4897da783d2d59138d1
SHA512 3a10f50538160c46107acb778727aca40df3ad7de8e55143363d2e1f6d3400268550cbe877d56949812fe9dbc743d6a5cc33abc84213b5462391d1df64bbfd19

C:\Program Files\Avast Software\Avast\asw0fd63f162e48d0ef.tmp

MD5 5ec8de507eb94ededbe9235d40e34485
SHA1 477fb33f3919fdcb15856cc1e6a225667389f77b
SHA256 03584d9bf0eed39064cda9782b993fd95e66fe2ac49cd2e708448a99c3cc67e2
SHA512 c8027e11d5714277ae811d8bf16541524cd0ad69647cf628334ae56a61c161a7c563bcdca1ee98b3d171e88f319abcf8aee5fc4eaab595c8938b98b6218914a1

C:\Program Files\Avast Software\Avast\asw3b92d9e889f3de24.tmp

MD5 2e74b8c1915534fb3adeed4fe50cf1af
SHA1 bbaa3f429913c7dba3419f77a79f653fa0f71487
SHA256 24ab22eb6130c1a6060867ba9c73a9eb7f8d0da758f0ecaa5a8c1c515c372f4c
SHA512 1269c96799030721eaf856f79f23a20f3f6b028c3ebe22c257230a8b3a94b88f1267615002972fb1faa8ee2d4f26bc41358b20222df9cc7e2490d1d14004ef18

C:\Program Files\Avast Software\Avast\asw348af1b69b55641a.tmp

MD5 a705f3e8d281dcf01536d218ceaad0a2
SHA1 f967b629befc1bcf88bd8a263b482d3d46ffde8c
SHA256 c5f70f7c74f95d846c428700d9bf37fdfdc2d06e039b37ce29b72ab1810bf88f
SHA512 0243f1d4dabb1e87dd4707b100a34690cd4afac0a83e6a909dce7a83d9dafb647cb79d05826dbc3a4f69e67a52d7787d7ead2958d8b97b6af2a8af85ca23bdd3

C:\Program Files\Avast Software\Avast\asw0df92404de0372f8.tmp

MD5 87b7f99302394578c2c7a3b91032c283
SHA1 f411671714a63e7ecf0a7d15bfca4634bc191a72
SHA256 426c833a0a9b8e2a884c6d99da66278ad76b029c233abda54d40131b2bcbf0c9
SHA512 004fbfe9fa417dd9aa221ac72329dca3d3663ede5e2c7410e64e1fecb94ea669cd33c99a25ef71a39a5d8c8648f01f8cf652eb30dfcf31f178166054a69d380d

C:\Program Files\Avast Software\Avast\asw7369b29044fab76b.tmp

MD5 a8b0f3c0834c5f149dcc13588d70d70b
SHA1 0c14407913c6cda8dd542a4f9d2b53aa33b8600c
SHA256 ac7dca3282942e2d846c919f6d37db6f380312e8cd8966c6a12cd5ccf1b2ecf3
SHA512 172e416c38815b04e1efe4377ff6f2fcf8c907a42c17dc489100eab19cb4eff20705bc8fa5d86c7541fd022931b6a3480ab852e5582a075c93c5d0927df34cf5

C:\Program Files\Avast Software\Avast\aswa1fdd43567d8d122.tmp

MD5 2247624722cb8d2b02969c3922424072
SHA1 e99bc24efca237ab68805bf730585a72e8f142d6
SHA256 026f47f6621fd8cf5d7d6ea8bf320d555b784415c9c9079cb3494008a4b62996
SHA512 31c896eee258852a16a8b4efe2a53a8a276f7686eb1285b86c596c24c17bb51a3b549c5fc422dec3a4bce77f390b586097c5d83351cf0fa977df11a209a77088

C:\Program Files\Avast Software\Avast\asw353dfa049a198bb8.tmp

MD5 a27b63c64a8da89a1ea12eea35a46bee
SHA1 31b809658f63300d7588eb197b5b7cf9ab336693
SHA256 5bd81ab37b48978acfb8ed9294648b67f1b72ff69c79abeb6a10d416d2f48094
SHA512 789574a0b8dc7b9d75696c3909cc50deab9b574aca63325ca622afe11164d3e346e1fc87168a6d002b0f2f2f28e48da7b748320cb0b2e3858f9d9fb5ed632080

C:\Program Files\Avast Software\Avast\asw7c9fa995de6e117e.tmp

MD5 a0026aa8c80017f8104194bf52497d2e
SHA1 2b75d4e079f556378acefb5951733033372c4e0b
SHA256 d495052da4c31a6ca0e1640521a72c37686dbbe94ac5e385598b1d41ae9d4ce2
SHA512 f99c58af5a81efb30e50a550dba301ce972a217338ebdd9e1deb1c99b934df6cc07e76c60fc8b91b3c3b5dc9b07b4a82fc7f74753acea7cdfbe091fb91e1b2ea

C:\Program Files\Avast Software\Avast\asw8a486eb4e13b990e.tmp

MD5 ca664968398ab0bb625a0709da6060e5
SHA1 79ae1ba0e665df4f5329cd67c5b5edaf285967c8
SHA256 d9d419e14b002fa6b780481d4085ca670d43ad3820f017835c4d3a15c065b24f
SHA512 48ba2f1e6f160ee687175ad0663b198cd8b8ccbf3d1a1eb9d15360699b0dd377244c5e34b3b247f2e34a84429e9abaabbffe5ca8b1ff447eb00434d34b035e87

C:\Program Files\Avast Software\Avast\aswa0d19f4996a3bdc5.tmp

MD5 86c0e4571a32392c20b6ce2002f73fcc
SHA1 12c463109782888c63250e53f6624bbdde4e346d
SHA256 8b4c42c8f85d47b246ff74b0c2ae40f54cc7e0b8960ec6a433ceaf994050979a
SHA512 70667d292e44f4ce2424b9a606bffd6c80dbf56f56ef23d13efd2b24a463ec4104dd0d45e4af1e233eb01dd6d1fa49a2a4018d4dbfcc52a6a65c356aaf4c4b47

C:\Program Files\Avast Software\Avast\aswabb705f5d8839b92.tmp

MD5 2c3d4ff2e45c76403522079876e2c767
SHA1 6e77ac6830a54068b3b89c7d4e488cac8db9c27c
SHA256 30c49040e553f3b06153209fa6e03b99d337264b5414c8ee0691c1bae8cdd597
SHA512 94119ac54d7dc37d0e6750865fc854a982e8ff9cb37b81cb2f80eae9109c2ad12606458bcbb6975e97e9c3e651aea44703de1777fe03f903bcf662158cf3ddec

C:\Program Files\Avast Software\Avast\asw333acb6682b17fdb.tmp

MD5 50db15c5617d008b54ca3a461cdfebdc
SHA1 880867d514e239abaad0744861337186191783c4
SHA256 66674ed2a1172d23a9f4e09b159d146f870701dcc49d718fd23a422400d6a820
SHA512 b8258e3e646931676c5b7faf99f65e58b6827ebf3beed70b98c61f2f26c04ee4f9248184944a631d471f436ef1a93292bde89d061e7203f010749f07b7ea0b8e

C:\Program Files\Avast Software\Avast\asw1ece2130b3109e74.tmp

MD5 b568abbcfbe2d2ffbd018ff0c4e58d19
SHA1 dcdfb8c217b27ad8d23f895888335660f2366972
SHA256 8ac41b0158c064cad4fcb77c59bb4bd80aaf881325c12f154b339a584bcaa270
SHA512 deffd2e43240fe2d8f266510c16f12d1188c0d974421b38e0c2fda97c04c58a85e37724a4a33a0ce15f0a525e8d49bb71a4bb365850d5425558529f7d6070fdd

C:\Program Files\Avast Software\Avast\aswfca14132f8940af2.tmp

MD5 4ea279aea3c56aa971e849a369a7e469
SHA1 44717bdc0b99abac4c628db20d6420c6547e21da
SHA256 1a732e20de06eeb501ec2730c3c502cf23fbd9e9fc46bef59416c2074c127a7e
SHA512 2efdeaba45b9b7ab84fef7dd16dbb3e6cc742226f993dd02253a10642cb8c69adc5f94eef156223f0eb57f54cddb2a4fac4eb4bc9fcb104a8eb578487875d89c

C:\Program Files\Avast Software\Avast\asw4c07719713279fb7.tmp

MD5 bae65a3548bf2abba85e6ff77adc78a7
SHA1 dc24dd281d12eb82204a64993555f3c42edbd451
SHA256 105a083a38ef161c0db8c7718574243ec856ae36963ff87fbafde0a4f58dd2db
SHA512 c3143d9c3987467c50626719b0935c1239fd69b7b2636de04c98f3e9fa792ffd91c42b5d08e0580e400d4ff6c9c5220449e2ffc553677455d314c101d9a01cb6

C:\Program Files\Avast Software\Avast\aswc743f2f90d9f30f1.tmp

MD5 1be297a2eef4ac8162377ce9ec7d8080
SHA1 6c8b33aba73c4b909166ab4c9e8d352c638b1fdf
SHA256 e14a5eacf1d3e671343e68d76aaed6b271e50bd9f0ef37652a532852fc040a6b
SHA512 d6ab8f76d49b90ff6cb79d93ef6c37957a7f5143494ef0920835f106604b7a2649b5ff0c896b1e4fee59c2498c9fba6034860f54b627f8e92d4bb7ace85f4d1e

C:\Program Files\Avast Software\Avast\asw62048b09ae250f5b.tmp

MD5 d8f954e04c414c70baf247f12af04a7f
SHA1 e93ccbeba689bd64afcd071d337a0754e4a3467a
SHA256 341f277d3a829265996bf1d1eaa8e2ae33f9dcf27fb69eec084335fb56daed6e
SHA512 a9c977e00ea344380c1b4ae70f0af93d3b889b8a33f56ce8c4dc082ad2da46e4e452f6e17f0b46ed22d324636f2805735de4f8ec4e3af424b8b566d189d599f4

C:\Program Files\Avast Software\Avast\asw0c108a171c9eeee3.tmp

MD5 829cf1637417970432fa72f17fdac9c9
SHA1 7af3c3ef668c2085e3d70f71f6214525d5bb0d28
SHA256 4cd7c93b98eb25064505d1e75e90f46873a24c3d236482b5a2c4172b177fe7af
SHA512 8f0cae00960c08306b9f2b7a3fca0a2cf5dc6bdbcda5b64edcb74a9f7f557e28f80bbb28c2e5f16731b2929062c518bceeb910314bf6868cd4f0677a6b740987

C:\Program Files\Avast Software\Avast\aswfc58c0d9541535b6.tmp

MD5 667573772dc77b78ca7f9a970dbf85b8
SHA1 63840e19bda0e4863aca220c0bb956f54871ab92
SHA256 e705a24eee5ecff8041637736c9f555fae21c341be48d240d4155a6dbea0e5b0
SHA512 adde88bbf1aef467b098bfea33742f38d1454464161e967f6b01c4565179990cab3abef09e01827a313e1c1e531c97682deffd6f79b45b624889d65351ba4a4e

C:\Program Files\Avast Software\Avast\asw4c2ebb2a350b2305.tmp

MD5 26a7d980cbd6b47316b8319e43a4deee
SHA1 80557918a55b14d24e265c2e5f3e6c063c209fad
SHA256 5f9ad2be343e33f0639a806e8d9d08abaf0ed3abf3f8ea309988a8e8a793f70e
SHA512 c89c56223b9a7b7ddf9e91a47408bb1d5ed825cced74f52ab3393176b84baaec210546115af69ad15ddb4ae6d101b21fc3961bd532121ea9fe536c7d08e4cd92

C:\Program Files\Avast Software\Avast\asw34d1a22922fabc0e.tmp

MD5 5be20ae5be9ced44a857824481138813
SHA1 975cc6378aa227cc34cd8681dc74d1fb9bd85db9
SHA256 819357a1009c5fc615e19da59ada644631bcdc687af7ff9c3c6c5cee31bf53e6
SHA512 de5ac258f4e19786dd7108cd7bd9f5cd437df88a021d636cd6d5c9fd21bb21e53ef167005a838234fd63ede475c9e40ac2af5a02a2aaa847dacfc38f7b35ad4f

C:\Program Files\Avast Software\Avast\asw2f1b924c4c329d02.tmp

MD5 be87fa0a0435c735b483701ffba21375
SHA1 fe7a2af56d931aa40afb7d71a15bd48cddf78f12
SHA256 b810987976de17c99300a65126f709e54ed70830f89d866337b289a83846ca01
SHA512 eaf9e3af7b07ff754c0ee068485dcb8091c4955a69511dc1e2056984e317fbeb0b3fd9a9a9cd127f14646a827dca728226073963d3e94b114cc5fd02dd233a3a

C:\Program Files\Avast Software\Avast\asw268748bc949a442f.tmp

MD5 1b4ce215ad4da22ee036555cc5ef356c
SHA1 ae0421805b844024355e59e17c9162d73526963f
SHA256 f98d1c685b365fce1ff7a9c09d598d3f143f2717cf2d962031522234bf3acd50
SHA512 fbba4f37385f50b53da2878eeb92de7df11d2a9e2d4ad6e9f5092360d10001be0d8b62b3f3fd10f9ab5a806ddca2350fa038a5862b50b0bfff8b197060813ce8

C:\Program Files\Avast Software\Avast\asw3a163ffe8d8d8294.tmp

MD5 0465cea4b13d3f03f720a87f2be176a2
SHA1 5c222b9cc4760cda9cce636236bac23be019697c
SHA256 665c7e81e8a26ef90a94bc4d4295b025d44e4c3ada810002aa85a4d6763bddda
SHA512 cdde788573146fdf059b5aa2a4dcdb174024bce6ba5c9385a86c64fb0efe9fa4d53d61189fcff4694ec33f5d53c37c8acda536a1341e482a7d4164cb4e7e4517

C:\Program Files\Avast Software\Avast\asw62e561f12a1849a2.tmp

MD5 17428ab7fec60d5ac0dbc5533036b8fd
SHA1 19449d8125a7cb4463c8733e2ad6468dd3f695d8
SHA256 d60d5f5443dd711eaa3dd811af43cff9b56124dddb058d43a801db78b3a50e73
SHA512 6376c5cb366c96cb18778b47da58f799144f866d6bf4f5b2342288cb71a6cb7218117e51daedce9d7b5ff66cfede8291272ee9f57df3b6a9b0230333ab6cd9d7

C:\Program Files\Avast Software\Avast\aswcedd545d765084d8.tmp

MD5 bc8cd3642dd0c38e6f218c934b5696a8
SHA1 17ab02c32470bc5ba488d4af997602ff966025ff
SHA256 05f16c8e2de85fda0874a6195cfc9989f41bec5340579144d2a4410853128ef3
SHA512 28f06349ff28d0f200ed5cfadd6199a127c87d054be0641ec4845f1e878656ff26da0f66181e27cc6cf074c11b8e21a59c77a0a68252f2ea335bd30ac49a4bdf

C:\Program Files\Avast Software\Avast\asw1a81fbe5a1358232.tmp

MD5 d0e4eb194e61ecb8c9bfdc065293a27b
SHA1 c644d524be8f994aad9a8fc27ac44d49c29e1b56
SHA256 c5bfd3d7c1c60d6a5b1367a440fc8f544f8e4b55be3707b8300a99b10db1ece8
SHA512 1518aa9de5cbfaf6cf1b838e591574eb1511391438aa142794ac38a9a25c1958632f0004c4d337d1aeac89823e999c1a00472744a768a0fc0ea3dea95ce24266

C:\Program Files\Avast Software\Avast\aswce453dea4bbe418a.tmp

MD5 5b5752427b37acdac06d2814b06173bc
SHA1 bd9b27ae85c02e703af89f353a34050fae774603
SHA256 3208730a8ec2b7a17a8248bab1b30692043f4db4c72631b5e32d3b9336d0f99e
SHA512 8c33d75c3d7e75ef6a89f9078b24b609196eb8ba221b2079892083b48889617e5d970cb88fa3a27123e0de47d9401d12861a417a1683f5b2485a07207ae2b64e

C:\Program Files\Avast Software\Avast\aswbb27a6b5c8e693d4.tmp

MD5 646d990bac1a8fc7fc8cbaca693033d0
SHA1 552513ec88af98c6504f7298d91c2f6d451a8e46
SHA256 d87dd9ba169bffc4007c54d59123723399fedeaa167c5a5e9d434cbfe7098b00
SHA512 1d1495b1de98b34434de6474b447471cd0a22a8214ed08d92fde5c193441407f5ff331cf7a755677c2535e06484ec1cc2ffc4b4a619cd684d2a7509d06f7dd04

C:\Program Files\Avast Software\Avast\asw2e76faf2701ed389.tmp

MD5 2e43cfc0965314c84609890a566fe3d3
SHA1 430d0253b44d9afb7980798fd649103294157cdc
SHA256 d43bb006dd404c6cb9d98e499423f84d75419d927afc64a35a4471f5a4c1b72b
SHA512 061f6cdaa022f62d7ce392fb4939822c0df4c4f3717f6f464bc5407728174ff453a7e8617362f22d07786d85ea162f18771ce75d098003434b17c88f1c21a3bf

C:\Program Files\Avast Software\Avast\asw8f8f8c04cd012737.tmp

MD5 4591bc16991a125ac85147731102530b
SHA1 fb5bde4fd57a0463021b09114500f5492cfb37b1
SHA256 2e959b13f5fd233724de564c0f7a8c8c62e53cad3296a378e4099607c2fdbfb0
SHA512 4e45355a5df436a4b32f1e4ac26cc6dfa6b1ee330e1d6c7dda0d1fea06dcdfb463f246c9ef56ac52576ef6cd4ac4e6aaff60edfe4258185831ef6bdf43ab4eb4

C:\Program Files\Avast Software\Avast\asw0d2f91896a0f4c93.tmp

MD5 99a16834ea0dc38af392387d5fedafca
SHA1 ac8478388ea0a03703959b5abbf997a7fe14ab78
SHA256 2e4b60d396611e54da19ec7605b31b44b23bb720122e30dd744f546297739a87
SHA512 1ab1dee61d07bfbb34d5abd7ac942824c15dc7997bfaaf96e9180fbc4e9f9eff3660d668ffe698f79e7d85896c5ee27f7b15b148825725e9e2afd9306094c9c5

C:\Program Files\Avast Software\Avast\asw2dc71e0d31b9fb61.tmp

MD5 55abec0a2ec4db347b6e9b628c295e41
SHA1 20a5c41510e558a7f0606d7ac66036df134e9d95
SHA256 20563f09d6b1b6068c667e91cf325bec00f72b9d29e4168aae2ae5cbf6b52def
SHA512 e8020ab081d22834bd24ea11d3f84f54160f233ca58c74e5dcb876d5f8e04e14f2a14b75f02f3744cfe196ed897a3f1ec668ab0f70cd77f6b6aedabd3ddaab1e

C:\Program Files\Avast Software\Avast\aswc191136c68ccb4f7.tmp

MD5 9364b9a0b407c6cc19156792b720a917
SHA1 19eb587772ba81a7218089f0f0cb9f13a35d550f
SHA256 c56d8db3732c52ea7d433ac4e2eab4a250ba1a2e6850047ec242b0f3f26f4b4d
SHA512 d5c44eebaea135b91fb1a04797d0e5ba1f748c4363583409b616ca74094cf254929a991a530c04977b910118cb52b093e18bc7d2966657cabafe917421ef4f3d

C:\Program Files\Avast Software\Avast\asw67f053ccdb511b63.tmp

MD5 74db26c073c66baa3867fc64023cfec2
SHA1 27e54496bdae0f4180615966cdcb2fdcbe00e52e
SHA256 125185f2ae87422617361bdcb22cf694aa48b158d728521b2ec4fd411cb85ec8
SHA512 a191f87a9a7b4558a39129a7cb80d807ccc2e0ca08632a8198a7a68df97e5329bcd2ea641631018e27a29b9fa249a3cd2ed0e1188c2ba3823046e26b4fedaaf6

C:\Program Files\Avast Software\Avast\asw0e91753480c41bc1.tmp

MD5 7171500c92b5fee66379652370daf4b6
SHA1 68621a22835497bf6703d005b19d304edd8ddd86
SHA256 2d0052f7690e50db1db1cf25a850e46ce617177d08a29c56d316443566323a1c
SHA512 90ab06730ca8d5d370e0d74216343e4e7493ee999f9e6d30b5749bb0c43ac83458a770ec22dffea13771a77e90e791c53c0fce0f21b0fc619d31b02b26beec31

C:\Program Files\Avast Software\Avast\aswe57fb8959d511659.tmp

MD5 ba0e79eb30437bfee13f0b65ed48c0dc
SHA1 b619e06773d5427f5156649bca55148dd76f65a6
SHA256 eef4be6d715576de9b23afb7d9cf1197e34ff57158f1bc4262595e5081ee3187
SHA512 469fb5f226a730a2b5b4b55513f973e4d97d04425967e7913bb2f0cdcf5ce5b8ca5ec2ea5702f9fc2b992d0c4ff0703655823fe1f56f72096cf8fed4449b29ce

C:\Program Files\Avast Software\Avast\asw0e90134d229fb33a.tmp

MD5 94641c4781c2afca3e0e47af8a559c71
SHA1 375f890cd8202d192e129105f6ba3ae5665fa863
SHA256 dcc254c1dbebaca29ec07e393a89fb8933055c31c32dbd87389950041df69e8e
SHA512 1eb732d87f2fa6fe835db26090c354303ec7d8b04b2430d5c2ce6e587525006b6e02157a9d4368794422b6ed0be69371f781ec1d064b71da8ea57ee8efb43564

C:\Program Files\Avast Software\Avast\asw0a660cd0c59850a2.tmp

MD5 02bac930c822ac9def0f078cb544954a
SHA1 79c80d12f4468e06c025b184d4b8aaedc3f69e26
SHA256 fa102b1846fb31eae905d989f4b0a73742c50ca44a0712b23d12b2761dd3b91d
SHA512 3d75c1a6d524b920ede1fb2fc778ca17b2abd79f6dad60e0a885255e919f502163966a19173568a428e608f84823fe8c38378c8e581ebcc6f34b88e238a21b3e

C:\Program Files\Avast Software\Avast\asw5f63a64ad219cf9f.tmp

MD5 e68a84bbc962223df31fc38acd183a7c
SHA1 1f983f0305d1eee238ebd3470876ecd5436900c5
SHA256 5233c4e6b343d97937a23a37e9013b193759a8a0ebd1fe019eb2b2532c7cc5e5
SHA512 f27f29af8fd61bd628f4cc5c195aa7d6eee5790cf0b4b4fe5b0d79da07886b362cff007e8163f48010ec58f8f47c1e800e25996985ded3c0f35232e9de00722f

C:\Program Files\Avast Software\Avast\aswce16f1f8e71b0264.tmp

MD5 10d595e94d9e344c3a7b6d9af02551a5
SHA1 6bdc771c5b54ab0e1de93bff24ee2c6e6880019f
SHA256 229e8aa82578099c75a2ecf4ba828a628c5c24db981dc3fee64adf140f710ee1
SHA512 e50c3a5e143f7e053ec18b72e37b05d54ef6aa359ae6f0c03239a11662a724c7893c2d25995e04ba579d5e39c163fe16aeb56c7bbb5014fc6d6082d2bf355a13

C:\Program Files\Avast Software\Avast\asw6f9193d392a81984.tmp

MD5 b16a4fbc49f02d8c5115fa68646cbc61
SHA1 563e50da76c17d39c421726fa51e30dd8b8d0ca6
SHA256 f6f07bd0c9260e6f53db0b79620d536d678c819f2844946d299a49197eecb87c
SHA512 f887340583e735991d628a5a49e9b62e741e8ea8aa2b737e298eeb9ca646ccdcbbffe791ff402d1a3e1e0b343dcbdd10d105706c2274ab0cd55d67be6f6aaacc

C:\Program Files\Avast Software\Avast\aswa8184f4997f7db8a.tmp

MD5 28c83e035e89e9cd90c8a68c6226799c
SHA1 329627f6094b071d31b9411de70096146002bf7d
SHA256 2fa63dd45c9b0714c24abfea31087dc9b52a74ee548d1b88b7b2917d0a89f381
SHA512 314819ef3408d34b092f3d48ff95231fbdfa74b6909f5ea5987914631a71b16a7f6f971fa5bd7daff41d68bd1fd0756a6ab1d08d86c546ea614cc7a47f1d4736

C:\Program Files\Avast Software\Avast\asw48b748dfa3508b21.tmp

MD5 1b231b5c4d36de4750a587f08338dede
SHA1 80305bed318b3124f3c3f5c5a1e577bd0a1ac498
SHA256 79e53d36a40951ab328e153bac9c1e3adf3330b45899345e645889b9046f06e0
SHA512 e46ef05924aad05ee9fb8592babd53c9fc4bbd136ebd2032acf28682ded9e78ada3de1276c2eef63cc9630a8e8cbd618013e1562b1af550178d84e0f0c11fcc2

C:\Program Files\Avast Software\Avast\asw893146c77aad0b08.tmp

MD5 697c86b2a5241762bed2c15d79b37bde
SHA1 12174bad6646a3b8ccd88c6169e5bae600277df3
SHA256 2152b39a54138feb315aa5e4bebf8d156b86b5c949a990736481d689d867bfa7
SHA512 804dbfc167813cf109187157bf70792ed82094971fbe6f3ed8510f558797974b8b26ecab3fcf4eb74e13fba41dc0265b1de64feb6194e7baae70cd0c61d9eeb8

C:\Program Files\Avast Software\Avast\setup\ais_gen_core_x64-8cc.vpx

MD5 c7b55689b38457a6f63f994a3e7bb373
SHA1 3495c26bdd6b4f85712184fc91be8a3688d4ee22
SHA256 bfed8a0d7eef7ea8fb3837769e9ee8a14daa5f370ee5c6790f79a8be2135898a
SHA512 b8c0d5ba1f2ad10b246e5b896b1ea33aa256db15ae1f648502e596cb98f3a19b3e4fd98e61e2f88a5cc4d4ff4a8445f824278945f9af7dbbcf09982eeaf8a4b3

C:\ProgramData\Avast Software\Avast\asw6fd589b8af25acea.tmp

MD5 9224a48b87ecc5fb3801b7a50d6671d9
SHA1 3a72a356ed0d83070638deab19affa1768650a1f
SHA256 94a96219634a3de20dfb98371730cf938ba65d35338a02ccc298fda587c638e6
SHA512 1b78613b2a30daa344534f720b227c5eda50d50de42ba3a7cf699f0c05ceee7a495daafcfcb55302717861e7cfd9a4ff61979aed229c5200901ec8a1bbfed040

C:\ProgramData\Avast Software\Avast\Fonts\asw2bc3d3dd08e11d15.tmp

MD5 9372d1cc640df70d36b24914adf57110
SHA1 374508b24ea24906f25655de27e854e69cda2935
SHA256 31daba103891abf8b4d0537661117a8689c9ee5d91ee264f74e64ef1bb37a61c
SHA512 8100e80e7c7a6283a348fb0c2f9339600dca96f8db21e49c3c875ca6c0129d87452ca0d678904e40f65404f5c78b37a82718def85efc085d5f2c9d0ff94182d4

C:\ProgramData\Avast Software\Avast\Fonts\aswf2b325fad80aa926.tmp

MD5 b7913e898d3cddf10a49ad0dc3f615b8
SHA1 560917b699fe57632d13cf8ef2778f3833748343
SHA256 1e90e49b182c8b5876ee6805ff3cd2e39a23fda79df33d2e8b57020d6f208334
SHA512 baee3e6114fb8b4f946cd85fac7bae19e1cc681820c6c5824092ad955e70ce7253ae471aaa28ad97412e67d4a9c741137bf3ff27233bd94b6d3a654f72adee16

C:\ProgramData\Avast Software\Avast\Fonts\aswe0d1a5265ba4035d.tmp

MD5 0018751ac22541e269f7c8e0df8385f6
SHA1 541e47f0b29737b74c2758b1f040783485de2a6d
SHA256 9f4d35bd7ca167c7659a872bdae6fde11c306b07eb5c758bae762f7258b39071
SHA512 6b6465848cdc0fb24ff2b1953e71b17c19e5e4224857df761222224778b4659443e8ce21bea15c76abfbcd9e371e607a0c1a94addbe761c2f07c1648971406c8

C:\ProgramData\Avast Software\Avast\Fonts\aswbc3d3002de5016b9.tmp

MD5 0e1821fdf320fddc0e1c2b272c422068
SHA1 c722696501a8663d64208d754e4db8165d3936f6
SHA256 4a7c36df4318fee50a8159c3a0ebde4572abab65447ae4a651c2fe87212302b5
SHA512 948adb943bfae5807e0e88a23364d8e706a8bdfe8c4d00592a95cdd34081a64a8d44c4ba6e33a65874ac8a7117927c3de2b995fdc57c2746aedd7161df727293

C:\ProgramData\Avast Software\Avast\Fonts\asw72427a7675c1c14c.tmp

MD5 52f9b35f9f7cfa1be2644bcbac61a983
SHA1 c348d9f1b95e103ac2d14d56682867368f385b1a
SHA256 28a1d37668b4cf94fff5256e9639f175baf4dd654ec84ba910485d38beefa6bd
SHA512 de48b5e6751134c7fcaa8ee4c734e0f458e86fc59249ef19d9c45b7098eb7273c4119d5944332465080154a3d9c8acdb1aa84ccce011bbe5c7f32251acde6cad

C:\ProgramData\Avast Software\Avast\Fonts\asw83507d100881ee97.tmp

MD5 629a55a7e793da068dc580d184cc0e31
SHA1 3564ed0b5363df5cf277c16e0c6bedc5a682217f
SHA256 e64e508b2aa2880f907e470c4550980ec4c0694d103a43f36150ac3f93189bee
SHA512 6c24c71bee7370939df8085fa70f1298cfa9be6d1b9567e2a12b9bb92872a45547cbabcf14a5d93a6d86cd77165eb262ba8530b988bf2c989fadb255c943df9b

C:\ProgramData\Avast Software\Avast\Fonts\asw3399077bd4867c25.tmp

MD5 1bf71be111189e76987a4bb9b3115cb7
SHA1 40442c189568184b6e6c27a25d69f14d91b65039
SHA256 cf5f5184c1441a1660aa52526328e9d5c2793e77b6d8d3a3ad654bdb07ab8424
SHA512 cb18b69e98a194af5e3e3d982a75254f3a20bd94c68816a15f38870b9be616cef0c32033f253219cca9146b2b419dd6df28cc4ceeff80d01f400aa0ed101e061

C:\ProgramData\Avast Software\Avast\Fonts\asw2b0b050f8f6b3cc4.tmp

MD5 c7dcce084c445260a266f92db56f5517
SHA1 f1692eac564e95023e4da341a1b89baae7a65155
SHA256 a54dc8488f8193bf30c3820cf6f261f911f9d328d699e1a1b8042641554cec70
SHA512 0fe7ec4c8eceafe87fbbdb9780519faffb646a23579ce5a4f5170808284c1ed85b9aafdab18cc4ddcaa9a7e6e2559fa6ed984d986ba93d1bbf4bc0551d5661d0

C:\Program Files\Avast Software\Avast\x86\asw0e8bc0dd1d708792.tmp

MD5 20c808cbbe3670bb33a20b39df074dc4
SHA1 0f4e27aaa017e0384127310f79a88f3e6cf09fca
SHA256 bf7ecd8cf2f49da5f2e4f3f97eb9f030fa6f6102097ec14b7adb8376a3230141
SHA512 2a2e0a4c728bc79ea3c60bbb92a00e8737edc8d0654a36296d83a058b45f61a37f4c690f95486b3298ff7f1d45c8901a43aaec73e2b3f6c6b82ce2ee10730ca6

C:\Program Files\Avast Software\Avast\x86\asw8ac5f4eae1e5ac13.tmp

MD5 02288bae86be1c19f2be2f6cc6122f35
SHA1 18c5e07ee8e7f087b05f32d6f1d89b771a433541
SHA256 731913cb7e9453860b9dd18d51cf44d6b152df438bd207c5a344d915b38d9fb2
SHA512 f0efdaaa9a14f19f8bf977b3c202f4558956a1c96a4a34432335fdbd147eb282e65d75f7343ffd8606fb1f59e719fe57c9c355c95f9590618360d8f3ed78caed

C:\Program Files\Avast Software\Avast\x86\asw03e38396ffc245e7.tmp

MD5 4de95632c177c113608a8cfdbb12e178
SHA1 f67cde70e52a8b83d005f785b727478074598383
SHA256 15e4a5d3f63bf56ada7d88470197902f319f7382282e41b4cd8689f2ed539e66
SHA512 7c5834c590a7f5e2fcc84f7bcf397ec09fffbd150d9de072c4d14d0d3ea16663a132e6aea2c17c19fd21516cda22f0168f671165d6ed8e5b3b8e9e04d68a0f50

C:\Program Files\Avast Software\Avast\x86\asw81e19960178eabac.tmp

MD5 0c67e96a7045960487cc4ea34319bb96
SHA1 258c0334fab2748d5d197ca2d390bacb96d871d8
SHA256 1c97764fedda1a102cc019d2b722de0645b53d2eadf34d76fedd76d0ff0371f2
SHA512 ccafdd078cd990ee81518d50ed7c899c1a1be4abf8d0ea37e2299b81e973318dd1dcf2ab7df7a2c68af1ea20e47def82df9ce8ccd8f1bf22686f67ee9cf00b6c

C:\Program Files\Avast Software\Avast\x86\asweb1709509d053383.tmp

MD5 dab2c66d51dd14acbc3d9aa83bda1db3
SHA1 e65cbe3da35a96ba9aa750332dc4ca288687d3e8
SHA256 8751cc929fd32a9a204c0c842f5da49e54e81fef1ca9a2fbdf95f4aab984d9ae
SHA512 8490ab625b2a3aa392650e50b83a4eef2a341ce1bdc30bab418089ff78e06a7209dff619b9e206004851289f3ac657b5baf9faf767a8457302a2a6e191bab527

C:\Program Files\Avast Software\Avast\x86\asw7b15d133970e024b.tmp

MD5 f88f79154762ecc2d75f0b076ba7bef2
SHA1 e42a736b93348b08cd425b0ee9089e2be59c9e98
SHA256 1ba28f2ba41ec5ae31904f45e82dca62b7dcb6eb343c027e84ec9835d2925606
SHA512 0fe0fc37eece0accb2b6c16056b6fffb56ca0784a1c312bfd3c4abeb422ecd5da7a7b2ceaf9260e005cfa4206260132f640e32334a6c19cf5110b79e1d0f86d6

C:\Program Files\Avast Software\Avast\x86\asw2f455f9b0e91fdd1.tmp

MD5 023c907831bf7013fdfa1ef72b9b1213
SHA1 3d18a49dc220765456ccbe30bc930f66c9838d75
SHA256 93c13741a5e714a7c7cebae063c88082a94135bfe12632c5b5e7fc26175a04a3
SHA512 ac5da452d7eac47cd7f64c66a4a61fe1f7b4e485f205812bda6a02843ddb06186a1d3a0834508a5c61c49a9f59c397332cc5a88bbfc7844f7eeacf2e6000874f

C:\Program Files\Avast Software\Avast\x86\asweafa7af848409b82.tmp

MD5 8da7a9745d0786bca7824b333bf55968
SHA1 84f36f9f0d96d8cbb075814b7848f963869dd40e
SHA256 433d341ee2bc1e4c840559420f1032d3b2f9a443f46a2b208a00d98693f74655
SHA512 01ff3cca5abe07d179c8039db72b3a41bfec7846219d99de208402eb55365535066a4797b3b9f78dd63a244504e1991e327600b8675cab376203772cc0fa24f0

C:\Program Files\Avast Software\Avast\Licenses\asw926150c4c88d0cd8.tmp

MD5 8041053262bc492837749777c930a791
SHA1 e8cbe20136c6d1627d40932dc4398d2053be5228
SHA256 d988d5362ea432d8c8ad9f05af876ba9409eb1ebad8c34b899fc9cc8c7ea5311
SHA512 0f321a821b1ab36a5e60a5d5e94dc26564a2cb03347b54279b5530f7b50ab3105d537637f338553dfc4ef800d28be103ab0ca50f77da3b4627fb6d7c558bd3ea

C:\Program Files\Avast Software\Avast\Licenses\aswc4a8aca49be7c659.tmp

MD5 4bf27a810f9a1f9e7c76b029b3b457cc
SHA1 8edff1174e110de6aec218a8d9ac56dbea27a1e9
SHA256 1e5a5eae04b378d12f93a3acf56dfdcac7005bdd67fe22d71c855f4e994e9928
SHA512 d818fe6f1905f46445fdbed9ea63751441fdd69651ac532aae946181fc28da8d2aac98146fb507d3df9720b24dcd2f05a20735f32e113503253fd85defa2870e

C:\Program Files\Avast Software\Avast\Licenses\asw12923262b6dfb56f.tmp

MD5 06cdee91812ddfaf4cf3916f7a5309c4
SHA1 00397115d379f863279d13e823d33ed9c8b51be4
SHA256 7a9555c822ed30fcbf6832004edac893ba10bbcdb8e12d9a3662ddf1b52bd6e7
SHA512 cf22a889618b15fd40dd82809c2c8f5003fd40236798d8738fd3c56cf0f27b52e4157f834e5339bf12388dedb96eab1dc3e9d01968e1a4aa155e60cea9c96694

C:\Program Files\Avast Software\Avast\Licenses\asw647599e22894b834.tmp

MD5 a3e6629906286395714e96dc4ac8edf4
SHA1 e1faf4917a367e29be497afc8ca14bb7b4493efe
SHA256 bdd96967d9b60683a91e086651ec03eed0d4ba142b37993111a0b1a608f8a05d
SHA512 c9be16142c2d45b9e81b2e33840b58837eabf94b3659cbce65e18d1501ac85cfa35fa087a467cbd55d633f1dfe370e61abeda2ed1e6db4e8b65826b7c41a4ccb

C:\Program Files\Avast Software\Avast\Licenses\asw7e6f4ef36371ab75.tmp

MD5 7c3860ffbb2e3df660f4762e02a28a4e
SHA1 9a689135294896040420ead4e5a05038d0ce8cbc
SHA256 803b8b5aa4151030221b3c3f71a645da6241938421e49901444a79e5cca75fa8
SHA512 393e4077221420b1a1d73cb1d89ad264b65e36dde03271959699260e8305ff8715ab1a7535c356f2bf961f316ccb1ef1ff6e13da1708e7b53a9b6e12ad7066d0

C:\Program Files\Avast Software\Avast\Licenses\asw2483d44afe3f7ccb.tmp

MD5 7cf65040f98baf1ba15f488d76f31e6a
SHA1 c9e9e12d8d124bdc38b63a1c832bf36890ddf046
SHA256 64578d53633622b31d19024184265f01d045b637da98fbd15ca81e39acfba63f
SHA512 4ffb42ad75204da6a288aa2d748754eab2a94386c33c9981ab1edb6f848e02fbe4590baafd81f5349a4c09bb913aedd7f57d49c43d96b8ad6e63c0e44d0a8ca1

C:\Program Files\Avast Software\Avast\Licenses\aswf92d611c54690ba8.tmp

MD5 cff54e417a17b4b77465198254970cd2
SHA1 a2922ac9caf1914313d4117dd30f4f1de71c5e14
SHA256 60ab263d1868282cb8262199edf648c21e45b729a78c6768bc9c27214a673da0
SHA512 a8cbf26c8babcf722623a709d5810baff798448a969000c36bfb7570d6ad388220066973783d7e162c1968fc42d0418a1c7ae15f51eea2ef2a2e843fdd9cddfb

C:\Program Files\Avast Software\Avast\Licenses\asw9876ce40649be54a.tmp

MD5 ae1fcfd0aa84b946bb9fc04ba39dafcf
SHA1 e1391ab3bcdbdd0fb6e9169ffa1d72c1650f839e
SHA256 e9c108afa89f5f9ef50484bb1c64a8d07d0c0bfce171df01840702ceeaec1e34
SHA512 bb9635487def64130a10ec3cd4106e5018ce17d9b979124d9f6674ab1fc7fa549c32c0602aead88cfa78f6900ada5a1776995fe4b864b466d6dfbf1cb53d942e

C:\Program Files\Avast Software\Avast\Licenses\asw2cfdc2c48bae7492.tmp

MD5 ae3f3d4fd356269cb456df973156650f
SHA1 4f58ec889575f422dfe25fe14f22eeb5d009a4c9
SHA256 d0a9c5d1e40d1179f0669bd93e079a518b3067fad240410804170f05d1ba04b6
SHA512 ac1c0e7d7020f7ae091bb53e4b5d1afa8e9a669bbed4f7a418b8cb9975eace1c8c6eaa840f1248ea4f607f87ba8765d61ea0f05fc0e586ee21275633c8f1c3c8

C:\Program Files\Avast Software\Avast\Licenses\aswf7f14573e371ec4a.tmp

MD5 c58efea00b9a80527a4eb1edf3b48d42
SHA1 7a9460def676dec00affda16aba1e93f0fb26f74
SHA256 a9c42b959825bce9b7c72a7b0797a41580cb21f407b73e08168fb1ed1db438c4
SHA512 6cbcc440792e05c8b73755acb329e2961a1991b730fc468d7483b1c005bdc664271237de634c3a1969967f8feea03b36ee8d2dd58e94dc61f553c4d728ff9d2e

C:\Program Files\Avast Software\Avast\Licenses\asw307046c0e429963c.tmp

MD5 d273d63619c9aeaf15cdaf76422c4f87
SHA1 47b573e3824cd5e02a1a3ae99e2735b49e0256e4
SHA256 3ddf9be5c28fe27dad143a5dc76eea25222ad1dd68934a047064e56ed2fa40c5
SHA512 4cc5a12bfe984c0a50bf7943e2d70a948d520ef423677c77629707aace3a95aa378d205de929105d644680679e70ef2449479b360ad44896b75bafed66613272

C:\Program Files\Avast Software\Avast\Licenses\asw3f9faea98a2f3534.tmp

MD5 d229da563da18fe5d58cd95a6467d584
SHA1 b314c7ebb7d599944981908b7f3ed33a30e78f3a
SHA256 1eb85fc97224598dad1852b5d6483bbcf0aa8608790dcc657a5a2a761ae9c8c6
SHA512 e2f81cb44129e1bc58941e7b3db1ffba40357889bace4fd65fd254d0be1bb757625bdf36bf46d555eb3ca4b130dcd1c05225caec28d8472dccf52a63dbd6e185

C:\Program Files\Avast Software\Avast\Licenses\asw1db7d5a57074a4d2.tmp

MD5 fe680362852389fe7a16c47aae27bc92
SHA1 377ea1b96cabe859af78bb561ca4171544ab0152
SHA256 e89251cdaaf385d93f74b819412217e47a7a06cd65115a1f87eedda0dffb2947
SHA512 8bb0e1ae7fc66e12581b43c0823e82011ec88d714eb244a840a46272d9c04163893217b6ae6c42d07ef72c88ea154950282ef09f0aef2dd44a3e42de709135ef

C:\Program Files\Avast Software\Avast\Licenses\asw2d20c05524074f08.tmp

MD5 dcd04d4748467021571f4a01f797ddae
SHA1 c59d498fa113b09406389f8828dde6407f5a651d
SHA256 7b8c5dbc64e5ce65c94d31b5690a0e30ff83222bbbbb859df2a56b9dfef14326
SHA512 7ae6a19fdda606f467c15e97ba08620838961bf64d9c5b6843cd877a23f0697bde8874842b12e3c317e18b4f8609531bb05414d5ed4ec68337ce8e1c73aae64e

C:\Program Files\Avast Software\Avast\Licenses\aswea627c8dca1a067c.tmp

MD5 d6913685a013829414179d17903310af
SHA1 d665df4878ae79173751d5a8a4346c1e2567f232
SHA256 8dd48e57572d33854a835ba6bb045d9a01321bae43377934fc08ce642992206b
SHA512 228fa37c918f781f3151b7cebfaa2575c70e515193adcae66a25c5de0035199ba935e677c1df1b2acf6951b43ad4e253a5277ccd72aff9bc60cf6f1bbf444eaa

C:\Program Files\Avast Software\Avast\Licenses\asw4cc816360f0073a5.tmp

MD5 9c08c5872a3314661e37289d53a846e4
SHA1 ddad81444c937f22e749ab9518058682953b1cdb
SHA256 0ad3bfee8be10e5519949e7af492e36bc349376b75fbeb412229a5967e3e9434
SHA512 dda85f29349e7222a6487f91e42e798c6d93a091fb01ed08d7caff5b906a2732788fea763d3e8fd10084361af8531ba2059e2410e845390c937aff659cd0fa36

C:\Program Files\Avast Software\Avast\Licenses\aswd53f62f71fd57883.tmp

MD5 928ffcbe179ca1faa2d4a2747ccab1b7
SHA1 0978fa6a4bb455f6237eca37956d179b7512fc1f
SHA256 c8d3b9240b998223daf58ea16bf2856caa5cdbcb75e93d4fd20c548033d885e2
SHA512 627af0d12924e508694e977823fd6d705700eec590e9edd432605078b007143cee5c70391143ae259cff9287db89fc3e613198c4c586236d71e2de70cbc6d0cc

C:\Program Files\Avast Software\Avast\Licenses\aswd5f56f7d1678a1c6.tmp

MD5 7eee1933e27bfd222f8ecd48d463c30b
SHA1 506dd04ac3db8729abffd4132294d017b8b1fba6
SHA256 e9bfbf4cd2bb60ea2982dc50dee92466a81a42de9b40e65c4ee17298646c7bce
SHA512 279d059dfa2c81c371000b865fe49389fa911bebf4c4f7e83379598e3e109852b14a185f1bd970dc94ad53a804d7554a4547dbe7bd7902781daa8da1898f7885

C:\Program Files\Avast Software\Avast\Licenses\asw6d7238d871bb1983.tmp

MD5 4434d135a9d9631e1741ce7254375a0f
SHA1 e2d2dd3fa7a0f0f7814118af8c03094fc325d333
SHA256 2e69c36a7eaa4fa153426eab635c607ea0356cbc7a68a70f42a49e8ab8eb8106
SHA512 9c59379e08895138e88b588f0ee3c4ab0938e8fd6906ab041484c6ed90da38c7ef9df7843002abe5249b359dac56c9c064f9119e58eeb1fd34bb2b7a35194450

C:\Program Files\Avast Software\Avast\Licenses\asw9dc2d17880cdcc25.tmp

MD5 8915cda79ecb12328ccb33113dc85ecc
SHA1 127e0111a102fb3f6af9ad82d0620f4c4ac2c164
SHA256 7c3794f6aa18b133dc86045d00f3d5894682084692a959ce521982eed4554f37
SHA512 30acf8eb04e4063478c8ce0879c838dd9f9083efb6e239393f4727cea279a171ac4c597f3f1bf855210eed3091acfb50d9d31851cf6a147774f3bf246d6f4d59

C:\Program Files\Avast Software\Avast\Licenses\aswcdf0a485a8b682a5.tmp

MD5 128b02ba4177d31ef91600882bb0baba
SHA1 6b98f098fa3f1cab58b9610b0af9c9545d5010e2
SHA256 b87ac954a37f855f6f7199a3154e2e84623558df980e8afccb94c5c93bd4cba3
SHA512 77b2fb5862bd1d999cd9549319ffe492ed20aa63659003bfb48c2426242984f97b6666ba9afbb0cb7d71a46f4f5f7e883e31c248f9b9eec339e3d4d7ffa66a0c

C:\Program Files\Avast Software\Avast\Licenses\asw4fee984939674cd8.tmp

MD5 9087d9182e280d5a124e844fcf52af82
SHA1 058d1d953744a7ace99b86c97238a3083dde120b
SHA256 5eca2c8028dee3a4728012bc60a763f69205325d0eb75b344cb7e10a788faa96
SHA512 18758d28733aa9db4257db7a18176a8459265021f6cc60e48ee6bbca422411d798bc597a683afefce0045c2b025e65577f6ed085fa8c9acb10b3e23464da6dfb

C:\Program Files\Avast Software\Avast\Licenses\asw82c95bcc15509ee4.tmp

MD5 a5f132cdee178b77dcac80346cc12b62
SHA1 d44350c4d2332a9a30f154f896e88a3e89016825
SHA256 331b34c5d939627eb370fe4250beaec0d0fb5edbf687b0c3631930385026cf7c
SHA512 d3e45ff903524667e40fd06870c957eff349e44eef22a2d9e9e01db9ff806dcfb3082ad5bf974b864944a6c4b2d7d9910d67e440a5bdb50be23600115537588f

C:\Program Files\Avast Software\Avast\Licenses\aswc7d4390172be26ad.tmp

MD5 7df5cd81700618ef9926feb32290d2af
SHA1 4763ba7dfa7730d98b190dd8a4a2c6818d301fcb
SHA256 60ae0f13e76cc2eaaa108677eefa4ce16b647f6bbe8cf0a1ac9429d82eca7248
SHA512 92c0bbdc5155d6e218682840dde38697327973b8f45e0c6d100705601449a6f1f8eba74cef8bcadf09ea945602b378bc64e81885f40965fa038d7974a71e5641

C:\Program Files\Avast Software\Avast\Licenses\asw06e70e226c694e91.tmp

MD5 b2feaa6a26c0149af9c4fbe2d6b692b1
SHA1 23df548394b0b16e6d5c733b427307288e1b359b
SHA256 d7e3eaf9a5ec61dd5f4065d252a2b0130c0e300ac3ac9cb307469e2a86ebbca7
SHA512 156e4cb2a1ae146cee9cd25258b299fdfab716866eabbab3e01f23a0e063e4469537c0a1e497d36f829e710211fca7db58608ae6bce87cacb75c66c8a57483b3

C:\Program Files\Avast Software\Avast\Licenses\asweeb8c1ff5fb0df9f.tmp

MD5 347dfef587108750fa72297199fcc986
SHA1 0e34d7cd8afeb7e3a17bb25f371262a1ddc564df
SHA256 08bebda80b178f4b558faed4e52930f66e855614e4dfae15a436733b4712e041
SHA512 defa096320296c640a94a6abead06698a7682bf522dc1f216bd6a3fb70519d789b83ac061a518672987f6cf2d5fe5f7e60d1f9dccfec5b74c9b387ed591339ea

C:\Program Files\Avast Software\Avast\Licenses\aswc296f5123b686abb.tmp

MD5 d774c7a88d7b41d7c73490067b54e3a4
SHA1 661206b3d45d9f6836915cb266f8536ef8ed39d9
SHA256 6182268f7c8c37fef81e83f722d1ac9bd1ea4307f16005a6900bc1aa473828e0
SHA512 7f9bc6a96e2cd7a1b8522edbcb72be141a5136dda654e0e8ab5ccf39a216b23478c64bb4fc68a71ee303237e6e9e063adb84873bb786e235e9a039d914e7b762

C:\Program Files\Avast Software\Avast\Licenses\asw236a2aa9dba6d379.tmp

MD5 513ea4bce55c427e58b1b6d40d087d24
SHA1 d2f6cc5490d34da9fd15e6edee4995d6eeb42892
SHA256 7732fa42ebc8652ee3300a086a068f6aa5008cfa0d14948b144e4b06c82efda7
SHA512 0c9f8d90f4ca229b5f175384d0cf348cdb8bccc062ba5b2f97d5aba0b9d823b0ebc2a0634041ec70e62715250a238b41b0c31ccd76ac24b8e864508d93251931

C:\Program Files\Avast Software\Avast\Licenses\asw91dd584a483eeacc.tmp

MD5 51d2728ac2976fdf6eeb3a02cd58982e
SHA1 3d4af58a6b52ee70064abf68a2412aac2cddd42e
SHA256 c3aed6a54154090685df3bbcd72e7a84943a4f3d5e5491bc6446a0b2d538c493
SHA512 734dae65afc8b551ecbf6665dd0a48de8eff2cb815a079a2bd7e37e19388253e39441a779403cb553d091449ae1eb858ba560726b86b2486220bc694f85cb6b3

C:\Program Files\Avast Software\Avast\Licenses\aswec32347452dafd2b.tmp

MD5 a2a0baea9713f129f7d433dcfc635167
SHA1 349e31d4f425c71d5c63e2dcf4a19f5e0edcb57b
SHA256 f155f8f66833bdc8e0479656256bfac1d66a9ec9df4aa56292308f522b4e3fa7
SHA512 87dd90b17aed6c5aaca53baaa3d149c07028f730ca34681842aa9c855817413345af27a0bd27dfc64677ed6d9b2e9013b585bda06130315cbdccf0a27103a809

C:\Program Files\Avast Software\Avast\Licenses\aswb29d2d682b08182d.tmp

MD5 598fd6266b820d382b6f1134f56351f2
SHA1 91d5e0457d0b8a0b9c0a2f557e0e2dc4d7f3805f
SHA256 656e11ea18f7fb862f6625469b822583f3c08e986b3a24962d74737ebf6927e6
SHA512 a1de7199ffc3adf0a4679b47ce77ccdd6ebe7ece123d286c58236a08b64c13c707e590fb5a12ad0a72e6a5907356f4d5754151eb7fb45a99d71caa50912c16e5

C:\Program Files\Avast Software\Avast\Licenses\asw2d063225a6cfd6a6.tmp

MD5 c26b34f5996c7ed7f7bce6aaf6c8a98b
SHA1 553e3a3efec9a07d9b08fcaadbcd88f2099aada8
SHA256 f854ae8aabc0404652b48a2b3bf7f21ec174c69d73f5596934c20884eb0639ef
SHA512 e3c82bfe3bacb07e3a8327a01b2c9772e44bfa1a8012c0f0b363d6e3b2ee2371bc66f9c207611cd6f73d6f1ff1ceb9b2bf2c7d0864ade256d41d533b598a804f

C:\Program Files\Avast Software\Avast\Licenses\asw49190e07e12e0bb5.tmp

MD5 15f12037d9859d059c3a557798163450
SHA1 b3609a3d6832159913cc9b8fb128df1383087b24
SHA256 e668af8c73a38a66a1e8951d14ec24e7582fee5254dd6c3dae488a416d105d5f
SHA512 a976ecbe99ab8f29c8290f26df5906326e820eb3f212928cd2b74783716bb6b7b6e75104140b2816408af15a1db30f4f5ab05133baa2c2d3a6e48c6d915fa915

C:\Program Files\Avast Software\Avast\BrandingData\licensing\asw2ba1d072299031ee.tmp

MD5 82cc8690ca1106945e7498b46adbe6b5
SHA1 886f56a93925439aebf31bc636ba648bbf84fb8b
SHA256 b2621cabe4f088f386d1b5cfb2dc36e4e23b343ffdc71f4e790fd98d1c7d7cf0
SHA512 9a5fdbe5b47acaebc36e97b34b500f532c5836862066947dea959caad7284ef2cd0c702ac56a510b30d534b230e0b7ec9da00d21e704320215c8b3ab97f379fb

C:\Program Files\Avast Software\Avast\BrandingData\asw2572b3e7a52fdab3.tmp

MD5 0d5e303798b74c90f5aa20dde60cc285
SHA1 c745d52ee327e8a990d8e34209ad7de1630d4940
SHA256 3097fec3faae594780371bdd7fee94238cdf20db47051f078a9aa2396eebe831
SHA512 77e17089684683e106a400bae093e414b4dd4881ae5166f456f2f757d3817cbede009fab6d75c2ec58d8fa59f45d67c6fae6e927259295ac33c048d238d56c0c

C:\Program Files\Avast Software\Avast\setup\ais_core-981.vpx

MD5 02ea417a8525951260b15c73379b8a8b
SHA1 4e6db817b5301cb9206d78e868ecd6a43829f4bc
SHA256 b6acc79e0acae27a5abccc6307e0760896fc1d6f97ca08a397686f2fcf5a7caf
SHA512 34fcc799a1598bf48e41c14be4fad6fc898fe40ad28a3be7fab2eb8d9a1e2286a6cc6a92162db008344077970fcf4350e5eeaeeef95934d67ea1a5ce611a5d88

C:\Program Files\Avast Software\Avast\asw3be511a6c7a15a2e.tmp

MD5 88705ece4de7b921b25a8b967d3b1eec
SHA1 8c01ace20cad95d210ca6026eeaf45e61c2fef40
SHA256 a0c5d53ea41eeb43f36b4f196d06980e0671139ba969014344d567b7006471b7
SHA512 182314b90b8f0211bbca765a87706ceed736210280f0d357ef434d5159cb6cf1eecab29ea6d4e7cbd6dbf181aaa1231e76e22b144ca7746519299c2f2bda2724

C:\Program Files\Avast Software\Avast\1033\asw4144d4115d50194a.tmp

MD5 c1d286cec1ee87a60499322256224b5d
SHA1 a50ac0b41d77afcfb9f34e73c0b541d2944a611b
SHA256 4cb43cd4871bb63b9c2962f040f8e213f356203d4649461760c289307e32770b
SHA512 f6d084869acf4f7b153ed47a899b27b7c2ab2318753fc0a632a5687d02c19aa211ee109e128b75a884df2e7c7837c83b3bcc2c35438c0f0d835a9ca060c70d33

C:\Program Files\Avast Software\Avast\setup\ais_dll_eng_x64-8cc.vpx

MD5 17d66799c8b6bc8f817c4870ac75dfe1
SHA1 9545b5823331251649c900c499ef568c886df7ae
SHA256 cae6ca6a323b5cad073efbf64dfc4d661f7b62bcd41e2d3fd417aebb7bafc540
SHA512 f5879b912b61c85f82e2fe543b0377eb5917abf9537ec1f21ad8562b9886591fdc28029afdaae83eeab57b786bd0ce81bd3b21db2cd84a9b466f84dde852d6fb

C:\Program Files\Avast Software\Avast\1033\aswb344bb6cd3c69423.tmp

MD5 218fa59d7554e0b100b924e4caaebd7a
SHA1 e3b4cc7dcf0055476b5a44aeb3f9942bd32d8476
SHA256 d437eb23d17bf8852581c78dfc535112fbe6f9fa74a087bdec624c964599c562
SHA512 72b11bb35837c67f379fe9069fd434482be4d5abe7ee87402db49094fed7b9257374c05e1bffcce2c695adde87c1f58085f31c57c843ff23c2dba45c5ed68e12

C:\ProgramData\Avast Software\Persistent Data\Avast\Logs\Setup.log

MD5 dd60a06823b5258b597e56eb4442f6b1
SHA1 02c266f98e62471de0db76976edcfec7583fb469
SHA256 2b7609f4e2a0da6b6152eb86f342d816e9ca8243b49a56508ae0385c0065f496
SHA512 d4636c96d38c5d9c32abe99a2ea7684292de690a7e406e5b2e748ea340317bdd8e3baae5ff62e27dddd6f458dd9c2f4a3edcd3d5193689205b9f7ac392a90b85

C:\ProgramData\Avast Software\Persistent Data\Avast\Logs\AvEmUpdate.log

MD5 27bb6bcf1efbf32adc560169dff6a6d3
SHA1 70ad2f3be6cb6c33205fcdb195a585c545b58c7a
SHA256 bb0d93fefa75e41b83647c91c89a16fc07dfe28579eec6826b3541621cfeaf6b
SHA512 e8eebb2b1c4df37d837f6eb25cdede2a0545b31c89164c5e247f9ddbc2cb1da8d66b3afa195637aa01a89eb1b78f99475c04b4544dee327c45865a94f47abbbb

C:\ProgramData\Avast Software\Persistent Data\Avast\Logs\AvEmUpdate.log

MD5 c47c0b0c0f866c662febe7a8860189f5
SHA1 0de7582a66eca9df6c94f91e1d9b0c7c6583b12f
SHA256 f5a58fb845fbd35a1fb5afb5e887ba8dbe56b39a683d130baf86040873d8a210
SHA512 09cc45ee3a48fef620c0bf51d709ee2775718fb815cd000547698b520ab0b47bfc227bc6489edfcf17078475c38e4648af1919e43ffbc2c683f0849b6d264cc9

C:\ProgramData\Avast Software\Persistent Data\Avast\Logs\AvEmUpdate.log

MD5 fe79bee137e4b3f5697570ea6ce44d9b
SHA1 5da35c2158d0309e3f4df01c1647f12a1fa1b239
SHA256 6e008b2cbb140e7558516cd3f145dd4bf45a9f0107b0f7bda0ca4d3704d1d4a0
SHA512 c20957ae93550f2931cca05178d25cd549ffdb3d9683b783c22044cdbfdca124da14bebf091c160d202538973800e54d61a746a0d47acb02bacc9d1971ee22fe

C:\Program Files\Avast Software\Avast\setup\250af217-ea2a-4ed0-bbe8-bcf3a7e0362c.ini

MD5 81051bcc2cf1bedf378224b0a93e2877
SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d

C:\Program Files\Avast Software\Avast\setup\890b72a2-ba53-4a8d-a2c7-e738a6d1bc79.ini

MD5 25bac562e5bf3d9fe40f43a7644dc072
SHA1 b5be000668278e6c1ba2c29993e3c7c88e11b483
SHA256 6c2e37cfd957aa51531649ddc0428ceac72e2ebad067d46288a7526543db4b34
SHA512 db8c12d369f064298ea337e508fa05e593b4ed75aeb9084267093b561183ec25d3ac4a6fa467067dda9ec4eb5865c22e79b0049671a4ab434641b2716a01998e

C:\Program Files\Avast Software\Avast\setup\11d927dc-c2eb-4d35-bd91-f313f7897362.xml

MD5 a2b89a46f40daaaa0e851176fb09e5f1
SHA1 a2fe6d08ebc6fb1120fe91905c8647e4b48c38da
SHA256 d50093ccdf51641bcf66dd5748496cf341c2150cffc10b589553375b81db2536
SHA512 34490f2f8b938520fe2e9a69d0555f02a6047e775832fe0741ab9216a11e5ef1201ffa9c52b97da69653e8b0cf3cd865f1ea65b062f86e2be831ccaebc7eb426

C:\Program Files\Avast Software\Avast\setup\7239f6dc-57e2-41f9-bacd-57fd771f2ca5.cab

MD5 d9023d73bb27513d251a6abf5d6b12dc
SHA1 c96941903231185b0f43f159c650aca348d48057
SHA256 855f420e9f4b5f26051fe7669db8d016dfeb9c8926854205c4d2d9e9407570d1
SHA512 5bf99c826e73e9e9e8232bb48fbfe264ad674584d37cdb71de671f885a123b466b91bb40d7efc013819a92fcd54768639eed629665307e257f5ea033e9b7e43c

C:\Program Files\Avast Software\Avast\setup\df455028-b883-46dc-af52-1799e7b1f026.cab

MD5 d1ef32c42378f0b7a34f7f7936f03d6e
SHA1 230649ef7320df5939a24e3668aacec46509b693
SHA256 e8f5636f5f2e6717caf2fa5caf9a7f8518d499ec42604ede23687be8ab2a43d1
SHA512 12a1a2d63935bbe10923bf81bf2bfb112d6f550f2533fd778cbe3a67e1eb77947c016773d56212ee3beda67d2f1ab8a67b14bc88a95fe4193fd8772236d6a671

C:\Program Files\Avast Software\Avast\setup\c512046c-7c13-4bfe-88f0-72af0e2bc3d8.cab

MD5 64ae0041df10366b9dcd791181fbe2e2
SHA1 b0a8a9b4913b784290b5a1bfff7579dedfaba6dc
SHA256 f2d3072a159b79d49dfb43b01b63601ff7f2b628e24f0a1ee397ae3e34a0617d
SHA512 9dea64a78099e191319c2734d2cf00ccd3c4dfa1f6fd73f5d0c5d20b9d916dda489cc359a0a380f6112fffd27c678f5143e2fe8867cfdb7089a70bcb68cdfca2

C:\Program Files\Avast Software\Avast\setup\4c020e52-3662-4aae-b817-b70d46bd4608.cab

MD5 138dfe6b167cdfe9fccb3695a399d305
SHA1 03c92db2378e43aac40916cc2ff46d9a4bf374a7
SHA256 b60c3b77b80d34d1ffd30fe29199dbc8db7d6e5129a27677dcb414761efba323
SHA512 4d5bb00cd759395869052886c223d34b11c000b8a9ac0b421e9b47feafa1e2ff6195d4327a49004a8ef6fda60ed52cc9d858b437bf38ef822631365750d2011a

C:\Program Files\Avast Software\Avast\setup\effde543-1f0a-4a85-8a33-4559fd48f391\avast5.ini.171232323165604

MD5 3a3c9efb77053e8ff775a51e77fec5b8
SHA1 20bd7474934bec52dc34b96533cebd1010b20e11
SHA256 caf028e8ec822d3de835e554e2e98676915597be1c14d74d367f52b815edfc02
SHA512 e83dd33949d88ae9b08e408d138d1cc8a23b65aadeddbb13a71f8152a2cf816429c293a132b79289cde7dae84470e79282b2a02fb4fd769260d77730d5ed3bb2

C:\Program Files\Avast Software\Avast\setup\7e76df4a-2d9a-4a77-884a-d3236a914d4e\update.xml

MD5 a3613e997feb8adc35f80b03a30b2b0a
SHA1 584c5c04ae5cb5113725aed4b1e35b2ae732d85b
SHA256 ac2b45e3664db47a9b30f45c508355562de21e15af2b3d34f2d4fe2da993fbab
SHA512 59b7dffc80502397098650ed50d3009c8a547b2c7e6b845e45c3eb1495e7290a66d39b70ebfe4c911ed079b771a75b47d698b00f1f80f80fc375d25fd58839ba

C:\Program Files\Avast Software\Avast\setup\7b7c0391-beb3-4962-aaa5-556e54398119\update.xml

MD5 f73f5401e824b4805fbe673c8b93dff1
SHA1 f5c34316e2d10aa039f2fb99204ed4c879eb06c7
SHA256 41fa82253a09e17699692d1787d2e25640c96a812bbff0094a721bc34682eb9c
SHA512 8aedf35b7e932427d02b1f731a49d3eaa1fa9a283cf3f02e11c2ab8b5e07e33c6ef51830dcffd576190d17b33272f38e4b35c4770c6279b2da306dd261b09fe7

C:\Program Files\Avast Software\Avast\setup\98a439a2-7ddb-4cbd-a7c3-63b660b8fd6c\update.xml

MD5 8af0864a31a55000bee9698a36202540
SHA1 eecb9dade8c96963bd7b2a757b29f9728fd813f6
SHA256 dc569a279563a93971b0ae6db00ab515e68a00417894168ed5300664d314c794
SHA512 26c7c1fc1281db4c32a9a12716eae49193eeaa341b03365a6991826efcb827ae447c529b201bc702f892727174fa33cd92ad4d9b220ac55533ddfd1670bff232

C:\Program Files\Avast Software\Avast\setup\98a439a2-7ddb-4cbd-a7c3-63b660b8fd6c\38C3B7DAB7280EB84C7D0C548ACB2554.rmt

MD5 3edc211e869e0b3fca5af6c45e5f6177
SHA1 74474d6d56d9266f0778859d7da8c1fe13c53ccd
SHA256 0506da2ff2566a5e1be266d7d86f64d8df1a6a2c593b5222cc69ad298eac0ea2
SHA512 bbff2e15d94dbcfac173f974238b9778a30a37e75282f4e1b91b70cb78d0ccab84e81251d05c874e731a282ded6510aeecdcbf1f645920404536edc6732bf9a4

C:\Program Files\Avast Software\Avast\ashServ.dll

MD5 2bf1c6db005931bb1b415250666046b8
SHA1 f6b516082f5e6014dda904ed9a1e49850d4c6a0d
SHA256 66bfcd08f8317c9c5e2f6706d06afb8690f1399c1daac98b25916c7f1dddc1a4
SHA512 706d93d32fedf547dd3d35f5cc62ac6ab41d75adbb6029f3ec8c26ab81d52162daa3af3de80df6fd0c97107a8eaf358c119061ad136c5a62602a6151302d05d5

C:\Program Files\Avast Software\Avast\setup\bb15f26a-d52a-4757-89a0-3a9ea305bb5b\update.xml

MD5 6d44e2ef867d499fc9cf3b7ef3353235
SHA1 20505d23cd3fa8c3f54686dfd8e2ff94d01e2294
SHA256 10aad74761ee36cf5e2da79a1e41b46b04700fc5ecefdff726ed30f32f01f23d
SHA512 7a0515a98c39e5b402787ee531bcb33f811db4b97a53d7fc658b93dbdb5b575c3174228281324e0d0dc2fdf7e9380cea10c4af0919172d28782cb6627b3c72a5

C:\Program Files\Avast Software\Avast\setup\bb15f26a-d52a-4757-89a0-3a9ea305bb5b\D50C7A48B883D2DCD1823A8F2AEB197F.rmt

MD5 d893397960425fc87116514c47bcc607
SHA1 91b826b32288bf4bff10e7cc109a34afe663a556
SHA256 a01b570ee5d729ba4901f9978dcbeef48e6a25252e3ead5de7f9e06727db7524
SHA512 4b75c951a72505237e563845a7f3037a6c4cf936da4524193f5f2c4fa0f368e7c3d0ae3246436273ba81ddee5d0b69fa042008d9cef59546305d53381d6bee9a

C:\Program Files\Avast Software\Avast\x86\snxhk.dll

MD5 3c49212edad9a38c47104d3fe9e565cd
SHA1 2941317f515bc689319454f2d5d364cd2393024d
SHA256 97c03096fffb98e5eff61739cf0d4f5908a3f9411caff2a2c16b189c07ca0683
SHA512 7fe5fc23f9fd478a94c74e62c85fde0af32b3c878a19ac8dc29f170deb5fb4cff67feed8e1fc1171fd3929009a6d19cc63a2d2a9bd40a67da98a2c63a33714c9

C:\Program Files\Avast Software\Avast\snxhk.dll

MD5 7dc47391d137542a9156fcbd9e27c789
SHA1 08b4ef926233677fa8ab63b6b350bf174baff422
SHA256 c97067a4547b449104dc42da77664a3acf1dc7d136329e1dc5c1d9681bc790ba
SHA512 eec066d3d7f28c237d2d30c3b3a765c6d8318336b1c62d3ae4315b7d6f43b85db853253d8077d88490ae7b8a5c9b4dc20cddc570e65d2a8fa5dcaf498b776f46

C:\Program Files\Avast Software\Avast\setup\bb15f26a-d52a-4757-89a0-3a9ea305bb5b\0D2B1357756D28404D53AC3E6AFEF102.rmt

MD5 50b157bf4a8185aea3b2484a710464db
SHA1 7c92aefad694a4a40d43e712b39f8205e8901de2
SHA256 50fb8b3269fef0c881fced33b65a6e985f35edaf5411921c5fde10d32e2e88bc
SHA512 068604b9887740dfe7bc14db9056b9302a8ed7b415f0a6fb13601e15c99898e5225b1d7b4ba940e4a39593765a40d16b0869956ac64d5fdc72a5763a8a4292d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 28953ee5166b67aba1dfb9796c4bd597
SHA1 cd1169e19bd0118a64a7076afe0541741400b1b6
SHA256 d97f46de45f7df8ad10dedabf90c08a40b32c86f47f74522fca04af1abde6f5e
SHA512 1170118e92f9f15a5f18b809733853cbdedd164c9858b9e059503b56f13be79c7edc816f954eefc36ea9d920d38d67b7efbfb8820d2448cc9db47179defc7452

C:\Users\Admin\AppData\Local\Temp\app5045f6bac5aebe8e.tmp

MD5 c9ff7748d8fcef4cf84a5501e996a641
SHA1 02867e5010f62f97ebb0cfb32cb3ede9449fe0c9
SHA256 4d3f3194cb1133437aa69bb880c8cbb55ddf06ff61a88ca6c3f1bbfbfd35d988
SHA512 d36054499869a8f56ac8547ccd5455f1252c24e17d2b185955390b32da7e2a732ace4e0f30f9493fcc61425a2e31ed623465f998f41af69423ee0e3ed1483a73

C:\Users\Admin\AppData\Local\Temp\app49910570494ffb54.tmp

MD5 d367ddfda80fdcf578726bc3b0bc3e3c
SHA1 23fcd5e4e0e5e296bee7e5224a8404ecd92cf671
SHA256 0b8607fdf72f3e651a2a8b0ac7be171b4cb44909d76bb8d6c47393b8ea3d84a0
SHA512 40e9239e3f084b4b981431817ca282feb986cf49227911bf3d68845baf2ee626b564c8fabe6e13b97e6eb214da1c02ca09a62bcf5e837900160cf479c104bf77

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 a33bf93d7d2df05a72e08edc35ffe725
SHA1 c7d9ed8430a9cc5f3446d2cbb99f9a354ee8e23c
SHA256 074f819c334ef88523b29f41e7b354fcec8382641ee7421ff4b59d6f796c4969
SHA512 3cd83281a4a681e2991dcf73b798b8a2d1539f95d1ca0dfedf9d89978c9a24d778c61f196e8f16a3522bbf5118e107f8cd46b57f9920d2e1b9a2473a1fc2f95e

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 c847694e1fdcbafe300e688d6c6a3e1f
SHA1 8f071903bedf94fd5e09b0e4984098e6f3290238
SHA256 c210b86b68663d8ee207713c76b880e4b9933da1eec793fffa6ffc5604925ed7
SHA512 965c405b1fb0b7daae06998303e036036a33ac8df3adab884cec7ff64aaa639bd61bbbaea3225061be8acc4aae922bd6ef35be3c2dcecbd8836d2c06d39cce01

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 81d0f422f8b17d1437d0e0ca157a46e5
SHA1 53151975a8bdbfc1dd7830a33a2f13cde6c45ab7
SHA256 ba72ef3ea7336c0cf45617af78adf910e281fc9f0b98f1cc2245beb3b590fe69
SHA512 7fca7b514db6745905573157f8724d25ccac1b2f8b7f5b245f2a75de649148b2ef5f6378853f6d912fceb866936f9093bc91737c7a41a66b7668361de9a5f4a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\blob_storage\fae67bea-e394-4f56-922a-d8f907cf1fb4\1

MD5 0a93309428c521fabc01b1bc23b83e70
SHA1 9b41a6f76f963beb06d06edb0562f9683f5bddb0
SHA256 d9ce4054aea08cf3c9e4d1691a1697e33359de15f30e27d8cddbc11eeb6d5995
SHA512 ab66b8dbaee5ba891666b5cfce5926cdec654a1809b51d458a0441b3f4623fa059710771135e96caeec340dcdf83041fe67f119db92288555f29b92545102601

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ad

MD5 262275e2b99b21c597b327b2d92fe97c
SHA1 3a4feaa74a9404e53f8e832ea40ddf139766acba
SHA256 2cb314c07066ec740e87adf4b8746bd42f66fb031e350b39aa2a7ac9a3b06f81
SHA512 82fd95d36ab55147d19c44a31757dcda04e1dc6493c52a43a92f2a2c7ef1292b3cc9646886fcd1bb20dd0f89683712b1f6468017faeecf3d1e79d5191b8dd0ff

C:\Users\Admin\Downloads\Venom-RAT-HVNC-v5.0.6 (4).zip:Zone.Identifier

MD5 0f98a5550abe0fb880568b1480c96a1c
SHA1 d2ce9f7057b201d31f79f3aee2225d89f36be07d
SHA256 2dfb5f4b33e4cf8237b732c02b1f2b1192ffe4b83114bcf821f489bbf48c6aa1
SHA512 dbc1150d831950684ab37407defac0177b7583da0fe13ee8f8eeb65e8b05d23b357722246888189b4681b97507a4262ece96a1c458c4427a9a41d8ea8d11a2f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 0f954549ff60299d49ced8a8131ef471
SHA1 99d733149570db9de91e052b369dd28498317007
SHA256 8ad80f6f714bb257b5a4a60afefae45f438f80f832ac171d2aff4bbf72d27236
SHA512 d66ad02c2fc3a5670227cf2d782219ed39850030ad8d0a063addeb0df2f86ea9e891fde97ce4f84dffef0249be2af64e073a0d8493696d41a5f87840f77c5991

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 69f88723edc449d9a3536e1214bc9263
SHA1 af1f45c5399baf41ba0d509b96c07a81e6578afe
SHA256 25cb1cb420e44616312b6c88c2905191f92af1d7f0951551b73796d117d58583
SHA512 f90ccb5d2ca2d4e2e5cf6a77bb6daf4041bbc0617d8ee332d2df28005c48b34046acc5622534319fdbf3a4e6fd519fd6029f29d3d35d0985ce36f59fea06a202

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 b551a0be5692053531b301273dfb4858
SHA1 974b0e07e9a0a4983f642d530d63a60eaf7d0e0a
SHA256 639e8d7ddd54c03a4cd7c83e27cfedb600011fde90e1211291f52c02c3d3a2d5
SHA512 5e45eccced04643d66d64be81e5d84d86476061da7246a6c128525133bfaa9cb64271d3e086316e536ad930c8f88acb7be2becaad9179da35d1080fda5cd5574

memory/1368-11333-0x0000000000B70000-0x0000000000B78000-memory.dmp

memory/1368-11334-0x00007FFEE05A0000-0x00007FFEE1062000-memory.dmp

memory/1368-11335-0x000000001B830000-0x000000001B840000-memory.dmp

memory/2076-11340-0x00007FFEE05A0000-0x00007FFEE1062000-memory.dmp

memory/2076-11339-0x00000000007F0000-0x0000000000856000-memory.dmp

memory/2076-11341-0x000000001B9F0000-0x000000001BA00000-memory.dmp

memory/2076-11348-0x00007FFEE05A0000-0x00007FFEE1062000-memory.dmp

memory/2672-11349-0x0000000072490000-0x0000000072A41000-memory.dmp

memory/2672-11350-0x0000000072490000-0x0000000072A41000-memory.dmp

memory/2672-11351-0x00000000015E0000-0x00000000015F0000-memory.dmp

C:\Users\Admin\srvhost.exe

MD5 4ecdade518cf393bfb466729421dd4e4
SHA1 b44c93fefdba501de89b3a0293d5b9b68e5cc3f0
SHA256 40c238c4e18e12eb68cc97cb76c25be86b5cffa1a5c448a00c62df3d4c541c08
SHA512 b7a6e4f0fc2b3ac1386feb7405b44c7c0a2dbaca3471053a20167f0e548a3c67f805264c3143b93c83ef3a132bd77acf36b120b949da9b63761f387f7759b888

memory/1368-11380-0x00007FFEE05A0000-0x00007FFEE1062000-memory.dmp

memory/3932-11381-0x0000000072490000-0x0000000072A41000-memory.dmp

memory/3932-11382-0x0000000001440000-0x0000000001450000-memory.dmp

memory/2672-11383-0x0000000072490000-0x0000000072A41000-memory.dmp

memory/796-11385-0x0000000000A60000-0x0000000000A68000-memory.dmp

memory/1368-11386-0x000000001B830000-0x000000001B840000-memory.dmp

memory/796-11387-0x00007FFEE05A0000-0x00007FFEE1062000-memory.dmp

memory/2608-11400-0x00000000000F0000-0x0000000000104000-memory.dmp

memory/2608-11404-0x00007FFEE05A0000-0x00007FFEE1062000-memory.dmp

memory/2608-11405-0x00007FFEE05A0000-0x00007FFEE1062000-memory.dmp

memory/3932-11406-0x0000000072490000-0x0000000072A41000-memory.dmp

memory/3932-11407-0x0000000001440000-0x0000000001450000-memory.dmp

memory/796-11412-0x00007FFEE05A0000-0x00007FFEE1062000-memory.dmp

memory/796-11416-0x000000001B7F0000-0x000000001B800000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 1a7101a6becdcabc4fd818c9a0691dae
SHA1 03c5d2b5465fdf9028751fcd7cb599646acc8eb2
SHA256 2b56c516f23528b2925a817467d269c390d369bb7430860414709c7a263dd1ff
SHA512 5a5ae73a32061de2c4b16555b867f9e33a588b219e9e7ddbb5abc938a60bfa11e74c67dbea4da175f57b16f8549038f168ad6fffca2a0496e17772df0d77dd76

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 cf64ce8005faf3fe8d0f20ea92bba247
SHA1 bfe2910b3b08ecd19b7d7b4d32b5a0c90c75c7b5
SHA256 c3a86e00523db21767251995ccad99c4efad8c9abf6903855ff514044be050bc
SHA512 3f2a0bd63857418dd580f28d000c33b23620cd7db289e11893ba7c4849b74d36c8730d71df8f6973f4f39d48b399709a00316604782b93c62ead053815ab1217

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 808dde84c07510c9435dc2ed91b84228
SHA1 c990665784ec68bfcafc4fcc40541f05a295a8dd
SHA256 0162dea6269fc1360d5a2b5769cbe0365101b8734bfcd586dc8c9cf79b667514
SHA512 03068f4168f2ce347fe7b4a1006f6cb673d44e1a3d207ad88af2d9d438e45f74d0a7f5442925ef1fc5280d93b3c0c7ee80a79e569f19ad5bf3662c9b11654450

C:\Windows\Temp\asw.a29c56d40c61929b\uata64.vpx

MD5 8839c56d8dc801767560e66318084e3d
SHA1 b6f05c722de1fad3ab17f705ffacdfb11fd271a2
SHA256 20164ff4424516bc2d656b056fcc36a92b9e78926d72557913dbc839c835a29d
SHA512 010b1244b03b4d98b00d9a21ee5b1858466a66ec084c5ac583c23bb1d6660866be60ba1e2f3f13f27d3172cb434a39cc4b3884dc2b15904307a4eed984ef15a7

C:\Windows\Temp\asw.a29c56d40c61929b\uat.vpx

MD5 c0f925296912a1c0e06e31e722d858d5
SHA1 3b149dc30549614ad9ec803e2153427391208b02
SHA256 096b31dd6d336a6f16dac5a987592e55db695d822430b586b99faf3bc5caa8c8
SHA512 5d8d96ee4be9456dacab4e1fe2ff1659c443b41d7851522199817946ce3d8cf53ede905f23fdb74303da5b12c4d1cf283381baf1ba3c25c62387a3898c4977d0

C:\Windows\Temp\asw.a29c56d40c61929b\part-vps_windows-24040200.vpx

MD5 d78065664eeafc0d543aa58f2f2186ad
SHA1 47c9ca76ac5719b04c8bfd2000f194755256e3c2
SHA256 c29539ad935e10a7869e33bb9efed1b957dc6352c4127f2e6b7ee93e32090dbb
SHA512 90c0d39537d6b1529368fcf0a0d5d9093748e5a96e98704b7febb0d521037c5c6debc05e0fc20c82fd2d55946c30983b4653a44e826ca2d5fcd03f02c6c1035b

C:\Windows\Temp\asw.a29c56d40c61929b\part-jrog2-13ce.vpx

MD5 d2295a88c0db372a61ee021f29a70fb2
SHA1 27f9f1eb89563753a86e4765471092b9d091a52b
SHA256 c80a23fcab624333ca7fb937635d37c847720250619c6175f195b9aad9e92e26
SHA512 ddfba085b1f2453896e9846d36e7a60a5eb59afcca73668fcb79f43c13dce5ace9284972bcbb095d88676e045fba882b71341f88fd6ec9af8aafc296bd3857fa

C:\Windows\Temp\asw.a29c56d40c61929b\config.def.vpx

MD5 edf1b71717138f5f61ff7f8c05a58bd8
SHA1 fed0b8183a932c3b16d565de9009e4a87ac26364
SHA256 70fc036f2985b87c23dc97e6d00f01021730a61294e031bfe3873a8bdb70474f
SHA512 cfec7981cb1a8c949a5332b55c1a6715e3dfd61b0975bc5d088f7a894d0138ec54ffd4b0e3437eb5f0fa5aa95040c15650eb6e6628c796e06f9c50e797858d15

C:\Program Files\Avast Software\Avast\setup\usn_cache.tsv.tmp

MD5 204f3ac828cca525f2b9082bcb9b2df4
SHA1 615dbabd4cb7a8cd9f0fc24554f1cfae2cdd4f57
SHA256 9272d231202f93f0716c854399dc30eb58afbb1cf26ed97716c401d5e5eb01f2
SHA512 fdfa408673cdacdb8dff84629b4cbc00a6605c675c587ecc04cf4c842fcc4a2925a29114d16c7f3150d380dc2867edc83af0ee955483c372ade8d489ba47a08e

C:\Windows\Temp\asw.a29c56d40c61929b\setup.def

MD5 a335092a4e80f9bb46ee285a429817d1
SHA1 8a40dcaa239bde02684a61508c9c80d1feb0d844
SHA256 72f2ccc60221bd4a273753e790db060d42c449e0a6cadbbd54c6e128fa9a6caf
SHA512 d1c2c189dc1a6b3b348b202768d6f5b1c406082922ac764bf00edb5bc0d7dcadc6a1cb30ef16972a6271129c91546ce9dd28ceb939843f8d2eebb255d6f0c1fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 dc94e1f46ffe8322d576f6c617ad60f8
SHA1 97c026cdb95f1093c64e1144bcfd1d82ff745c94
SHA256 cc23b72ccd14b99ce8ce39ecb8633fac03f4ed3d5cd8f1beaa668c1883539e0a
SHA512 127d61c21791cd3843ff306712d20fa97714eb3fc4fba8369322bf42540d719fe6d361982f7809c73ec3abde5e57e91f4fa5f08cde15dc7e6550aca3d7475747

C:\Windows\Temp\asw.a29c56d40c61929b\aswc4a5375315474d9f.ini

MD5 cf3c2439a3119cc60b3cf4c059d1356c
SHA1 096eae34905688e557663e5d6de3db6fe5a9f332
SHA256 4e5ea9196d69da55639b919c5c6835fedcd4ecbbb6085107d3ab0e5d8bf1f352
SHA512 7e9d77fd54fbb570266a77dcc8cfa25e9f11c4faa8aae2865ce47e44692ad76ad0b4a7a95231278696f067fe8499b4667c49f4bf1fe8f668e28dc26e3f6cc83e

C:\Windows\Temp\asw.a29c56d40c61929b\program.def

MD5 75bae3231f3663d1117cc26307285791
SHA1 0b11618d4a8a943c7451daf218efc429cd9c8acd
SHA256 bfd59ab3a46cba6c2d6ac5e168d903d231210002b32109993a62770cea89cf56
SHA512 9d17dae3fcc1af6022b288769c367c20b5049ea481978b2d80687d7546cf47d6c3c0c62233d702063c50865bfff16608f52c617166cdbb4a4c9b07f21ca0d898

C:\Windows\Temp\asw.a29c56d40c61929b\vps.def

MD5 8b53bc15511d0dac8e12444dadbf459a
SHA1 de7f131ef6fc5070cd57bd4fc5febf2f9317386c
SHA256 71f44f5a3cb20a589c1f5346af014b5f49ecd0f3fe5dd86930a3c3bd350e24c7
SHA512 fda36180d59aed3494f9f765f0138c63cf8d443c48739b4e39c0f6248702496863d57ab0d69f9d15920bb67b8a76a35d88bcfd534a46d6501f6fc133f18b67f3

C:\Windows\Temp\asw.a29c56d40c61929b\prod-vps.vpx

MD5 de503ed5d91e210214595fdcaa7d6050
SHA1 7ef42e9ded68aed8a3f076b2757bb532977c4441
SHA256 c36a8f39412539222dbb217cc57e42558d4857e6a31b359705aa1a97211b9a48
SHA512 a40307187c006bceab2fc024202870204e628ca9be2d341d3cb5daefff9fa5467ee7434cf55715001b62badd97bab3bdb06d837619de2173cb5435f0d9391949

C:\Windows\Temp\asw.a29c56d40c61929b\part-jrog2-13d5.vpx

MD5 5d2066298d6ef16118e507f2b033a257
SHA1 42db08e153e56bc399ae4751ce7d245dc5e79e65
SHA256 8fa5839a8f58a8fdac4edd972947f5755faabe0f44cc4a302a671a18bdeab405
SHA512 f7805a0ec58c5b90f329f42693e4addec1826f6ebdadea420b063447d70fc1a727ed0d7bc3de225e4dcc9606edbb4b8bf6f52b84c07b52fa1dd4d0f7f1cf9d25

C:\Windows\Temp\asw.a29c56d40c61929b\part-vps_windows-24040406.vpx

MD5 5928ce31581776b919363d4b8eb50cf7
SHA1 c25c3cb5097ff1f41c9802f35531177286fda8b7
SHA256 ab01327d97199a70f771808ab1132b1550d720ec4ddbc8faf10853d1b4719523
SHA512 a785c7f7c465164cc05b1e62436e76a32a9c591d89b39818f65f270bb239d7df6dc7d7377ad2d01301b479a3a8443f63130559a7d1c939b051b4a6d8d91e6d70

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bb9c7eb15dd21e613c81900b5b57f1c8
SHA1 fe7f136b2d99afa61dfc1e444191c00ba6780c3d
SHA256 a8a800fc604e6f78b04ae22a9bfe01d20c020926ab243f265a934564d99fc3cc
SHA512 24a99aecd4166672244f79f2cb87d163da446f67a43e5fe669c72f897dd36be42eea5463f190096575c00fb87a384a4281404005da9d6aeead72ae662f56ee2a

memory/2668-12051-0x0000000072490000-0x0000000072A41000-memory.dmp

memory/2668-12052-0x0000000001320000-0x0000000001330000-memory.dmp

memory/2668-12053-0x0000000072490000-0x0000000072A41000-memory.dmp

memory/2668-12054-0x0000000072490000-0x0000000072A41000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b05219f877688ea10136a5bee7579873
SHA1 f80952900bcca88038f92961b773423e30c76842
SHA256 4e95a846df30ef632ea6de2c738166b7e7170b10d398565300f6558715a9024d
SHA512 b47336f88d83f303bb4d32f2d6c5fda4c0bb6ee9fd8832f09d4df42ed793d49bdd90de5401a6c5763388c3fefd2c8418cc68d87730ac2af4252121e134cc7940

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 70650659d58be0e9b493fb3144e0ccbf
SHA1 639dae439c720663849808348cf61d0589850807
SHA256 79e589ba99e26ddc0714b97a29eaef60ab251916742479e45d561c57037eb8a2
SHA512 a93d0f3b1e311220de56e840ae6bc9866c5d6afa0c8e4d6d8da7163c00e4c1cc6341373518865c04e5f10b5f8750202e1b3ef81f8ade5fcfcce5096bdb90b64e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9abf438a39446764a1c7d26de627a2e0
SHA1 5f8c64ca88d7e78f36a84d09ff9307f902783093
SHA256 12d60cf15953fa14cd9932d1f6a71ac9c9b37dfb7620f1333cf59e61dcc46a7b
SHA512 229e617f4ba6ae03c9f37cd355329666be113ea016ab6e1f197d1f813069bc1315c1d19ea9f5380f009d23f74b60c70538d6b99cdfe7b9758c3b24d3e233486a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bb4ccf37f16a956f7eb42f461be96c27
SHA1 d7496c523c97c35c65da94e93e27bb5e65c20ada
SHA256 762c4def763ba37da29e98fe02cb66fe9aa6e0c950f8a432a3e27070dc301012
SHA512 f8c11e24488c9a6e13ece46b04734e810f47edd3c2c06bbfea5cb5a088adfa6d98b62923d7dd46c5c9621919f3020cb6eec275c6e9dc6d1ebc5bdccacb1ffbfc

C:\Windows\Temp\asw.a29c56d40c61929b\config.ini

MD5 24302850348e1624bcb9351d41c17872
SHA1 f93fbb7cce317355bb6da99b761fa9fafbb4364e
SHA256 f65e2902986838b8de9d75ec8dca5c60ed0f6a28e8fa57130a351b833609408d
SHA512 a782714ee8deeaf4ef91585afa0bdcbae0aec8a60515c5a084b5ce6a4def76a81aab3fd2a7c6984afcc45e4eb80ed40a4a6325b75a3fa4aa5629cf52f51c82be

C:\Program Files\Avast Software\Avast\setup\vps_binaries-13b1.vpx

MD5 042f2af71e81d9e9561a8de9af5a23b7
SHA1 d7354cab75c4436fe9bdd0e31e3c78596bfffa27
SHA256 3015af411fbc8c9eee82cbe7babafca5498e69d5e6e6346e659f5212968627f8
SHA512 00518879bc56a73fd0d1e790e95ebf5a3d0fea70dc86dc6c9173b7700887dee839012fd1de5a5930788912c1c62a0ce9bfc641450f169472c1c4daed39609283

C:\Program Files\Avast Software\Avast\defs\24040406\asw33ef573c48b0edfa.tmp

MD5 806850e2cfb6934376492d2df97646dd
SHA1 57aa2a17318065371b23e6bfc278f609992befe5
SHA256 c9d85d0cc75267240227568f91d4aff3aef930f06fb8c159ee0339a80d563fdc
SHA512 84ace4c28ef49d8eddf05d7d5135aba5221730e21d5b83a2751c75ce4ebd9c05337065bda9a4a8dd7f56326081704f34e8ccb2543ec183a7b9f8a229be2f50db

C:\Program Files\Avast Software\Avast\defs\24040406\asw7f7436574921835c.tmp

MD5 2dcaef5df31908b7bfd7ba5359db2b31
SHA1 265b430ae3de559f8aa4a014df8a6c5c174f2df3
SHA256 d998b3bed97b58946c7a6c9b0c4996452b01665e8b172d0d5e8f0537c5dd90ba
SHA512 26469f029fdd72fe35c40fcd841318d6c6c70b66f2985d3c97eef9be13aae74512995e62a59240ddf9d48851281151a0fdf602d8499f3ea773d3c151dc6fb8ef

C:\Program Files\Avast Software\Avast\setup\vps_binaries_64-13b2.vpx

MD5 f2e1d480cd840bf797a50b47960a75ea
SHA1 14b0d9a6d8e5d7f741338bfa28cf46b8f855c7d2
SHA256 9369c4981095a20c7f23ac9b7ca1af80a84caaf48cc56fd7bc4f77d66a315424
SHA512 4b8758f4f3103789eafc52ada7986ad65ba89303f9ae48e2708ee269424062637e9564f063da7f9f37cf7f920e87d1bfd7462338c97a21968d4619c03d78b7c6

C:\Program Files\Avast Software\Avast\defs\24040406\aswe585d2675172706e.tmp

MD5 4574ab7332d2dbb69d979e85bf3b855e
SHA1 13053086a54120a874f1089f3f51f6dd6194be57
SHA256 687bb0219626bb7833ddf8d0e0e9600c35d01bd8bef1c5cab22e2ec85203a316
SHA512 d8b97969a1e9d098ecbdc714300e8e733ffaf5e665f4279247a258f60cf8b590d0e743b5002cd9302758a6d2362f8b77ea99b615ee5261fca8a7b31ec3659371

C:\Program Files\Avast Software\Avast\defs\24040406\asweb3edbe7a2c9a6a3.tmp

MD5 d5b2e6bb3eceb9d1e579983d65489119
SHA1 44244f8d05fe099d8f18d1d64386d1951b57e376
SHA256 8e55fbc34ed1e54f19a17bc1b6f46fc5e18182521090ff8ee33ebf1430ed414d
SHA512 48574e99ecc8833b02b74259f9bdd1e188458b27723e48883ba3b8b26811f1affda37f37c4f3a42a28b97a5f53e406eb371ff612eb20f965229de7ac39ace9b0

C:\Program Files\Avast Software\Avast\defs\24040406\asw897bc9f6cabdfd01.tmp

MD5 628c77186266ffa60e6525fb5dedec11
SHA1 51b66f7731123cae3de5ac5ceb2ea1510d1f5ef9
SHA256 49c632c677cd2039f237c0f2858fcdb1f16e6307e1a4fc9c9cb77d9d6a55ca10
SHA512 79d8db2027569458c8f268a4efcf3eb4bd4244505d2f25eab689080eca885b6491de59f39992cee53dc68edd425cfe66fb9a6e8aab73292b227b3c686c938f25

C:\Program Files\Avast Software\Avast\defs\24040406\asw266b8604c12c346e.tmp

MD5 f615f47b13e8197f1d26e4f71746b118
SHA1 d51dc1b000193fdf961803891921b3c90da24b68
SHA256 de5f399286225a7b91d04b6945c8c9aaec6dda7888e2420223f868d03122f00d
SHA512 4de640949a4ae40899718ad044c367102877f99e5fa454a6786265f6c1a82f61186ad2cda4f0b66cedbec79e9cae9b5e0601fc604e479e66c4dc00d8ec7f3ec4

C:\Program Files\Avast Software\Avast\defs\24040406\asw6aa385f99d5e7513.tmp

MD5 f6fb67fe489845e35c09b4118d72c7b5
SHA1 a0cb8a9da5fccabdb82c6fabbd18da4ac92d2101
SHA256 b7dd1ca8be85698447d010596b3bdb1d2a11e643fde8a24f53880028bd9fdbfd
SHA512 15a7ab453d2c6ba57b65b2d7c2b289c7eabea0149bb24c85b4a134922ca2f932e9947f0be368e69418e586f92784169b777062f7eaa565177dcbb9e16d401a4a

C:\Program Files\Avast Software\Avast\setup\vps_defs_common-13b1.vpx

MD5 e66b855bd151e2c899be10756062ceb0
SHA1 349e3cc71fb9f1c570c3461cf66ee086174ffb3e
SHA256 b643d9bdf63dfaa6b7c599b9ed75653fbfdb6c01756a488d64b79eddd8aa70bb
SHA512 61214bed6b8564469880471364aa311145a2757f89e681a6d174dd4abdf28537e75c05042f2f73fee5f7acad93abc91faa6782aa3b608d0c2b4076b9fa90329d

C:\Program Files\Avast Software\Avast\defs\24040406\asw3cb210c9812c6299.tmp

MD5 ec31008e738eb8b36da94dabaa2dc3bf
SHA1 ff9a10d2a5117fc2067b95eb061d4d7dec95b329
SHA256 c3897b5dd4f05623650d14fc1dea1dab1beb4cc648c094a832707b8f0cffc035
SHA512 941e40d58624a9742848895ea011e7aaaf85e2b7c4553df779cc040193003fde245c219609f7754aa927fb5311f82cc1a73aa5e732dbcb2da8b5adae9a1faf2e

C:\Program Files\Avast Software\Avast\defs\24040406\aswa4372be676e3fa22.tmp

MD5 7732e403b7a9d018e07af6984874dcde
SHA1 254d7b0d3355a8f20cd3a62fd0efce21bf68072a
SHA256 36d6da4b2c780fd2d0b869ad62a36c78f97329d1c94fac466a70ce9417dcc7e1
SHA512 a4d31672dae988ac1edd966b8b0691e860aacb9951aee4e76b196695b65c68c6be48efb22475a9ca6c8991da4b40b03a7ccffda9050b445cb198e0a22978eb59

C:\Program Files\Avast Software\Avast\defs\24040406\asw6b61078a41da0468.tmp

MD5 a52ce881c6d0cf87f088a8e4895f722c
SHA1 f1ca005bb876da91b9a32dfb283b9bcc0283cbc7
SHA256 538f110ed6cc108b1b9772e94ba3297facaa0b15323e222dcd2ce6cbbea50967
SHA512 c24c22a6417149ce3a442ecfc3154a2ab728c7465b271d79a3f85561f8561380254a9f32cdc193f1b610446fde906323075dd5ea114bcc8e9118c4ca2f9afe61

C:\Program Files\Avast Software\Avast\defs\24040406\asw64ff9587e8d13f02.tmp

MD5 6e15ab1b50c9bd1ecc125ec9a4e5f3f0
SHA1 1bdbe8837813ef3693edc4b23503e17f211cf9c8
SHA256 4f7be04385f2b863fedc0a82e649c349ac5f3d067620c29576aeb9e329fa7273
SHA512 36df3f9d0d7dfd8fa7b8da768b4d09ee9c096567beebdd406228921d1542cfeded505668c0608325b3568cb37fdbd8702aec0e5dd2b716d5aeb5f1b7a6678e46

C:\Program Files\Avast Software\Avast\defs\24040406\asw463b48765a76829d.tmp

MD5 b45811d85e8d225e7496a0eea6875bb8
SHA1 7524384743cd4e64ea2a09fa9346a302cf1e52dc
SHA256 1ca2f06de5d14528eb5dfe8531d59d4a43c5ca2cc1f0c577ea892c452aa153b2
SHA512 d9ae26b7665a3f67c858b520766d42b890c5bf7c5b9f084e42c9b0f87b981a9c6a6082a1f5ad17ae063e63505d290f7e7a9bae594fc678952bc3b6d54a5a1296

C:\Program Files\Avast Software\Avast\defs\24040406\asw03185b0e87a0331b.tmp

MD5 ca00a152d73971bfeb473cc8000f6ebf
SHA1 7e7bb280b9a78d570443a04b7313f7b294c23e5e
SHA256 d6d7b2f6caf6a48cb5c5bf3d7a1c28a6b4da7f9806ad2e8806c1fd524178ebf5
SHA512 2fb21a18376e66f9fc483852cadbdc47619dc0b9376463d99649b058666ff563ab1883dabcc9a75c32f58e5e01c0e17576b924d8830f6f99f7937ca0da877336

C:\Program Files\Avast Software\Avast\defs\24040406\asw0f58d3df646e6521.tmp

MD5 9effb61598c6eb0efa71b9a529d5b0d8
SHA1 05540b3e49364a8d8d45407000c1665abee28a0f
SHA256 822293703112da912f470df8dc4e7fd45d2d11ec2000514fb6e27d63f2cf13d9
SHA512 67759e9fa626e97481476d48bb553aa91078ad3850485ae6e7180dad74681f4323fea1d7a309825d46975b065706efcf4622497c2f680be706d6cd04579123d1

C:\Program Files\Avast Software\Avast\defs\24040406\asw5bc8c707b2c33f60.tmp

MD5 55bdcddbcbfb556a9d76b85c06f2ce9b
SHA1 1651249de7de46d7f21923b76c169ccbcd1cfd42
SHA256 6408e61598be3d27fe6eaf3b950ab21c4101f52465b743d7ba98bfb40966d30e
SHA512 bf3c21b4d374b80f24e2f35bce47cdb0b50526313e975044d82fc0d43e613f898b69bd76f5e8e8d4c568839b143316abad4a64e7dad4ad3db3c7ddc64234387e

C:\Program Files\Avast Software\Avast\defs\24040406\asw95e655b7e869728c.tmp

MD5 6a48b5da117782c90b139a771e45b91e
SHA1 14eb5c1d5498f5b51a83bb8e514e1bd391998d67
SHA256 162146ff3c9f6f6248575d0c64c70ad8e54e0744e0362100e4b4ea8ffa1ea8fb
SHA512 bba10673fde1465c9807332fdcebcdebd10b68f6db9d8173deb5c833e826588a78341ca87180a78956f0b539f3f238e30754f69a53064454c0ddfec5d12830b4

C:\Program Files\Avast Software\Avast\defs\24040406\aswf7ab9f4d50769393.tmp

MD5 b7396d22570a426a961c36d4fd1ad20b
SHA1 a6e4c67d277210a5db4172cb36a149fbb9cf1486
SHA256 bdb8441f04f38aeaa9b0d80f71411ce30b0e249bb758cbed26ca2b6cfea8f58a
SHA512 b817fc3c464c4f79abe14f937957c379626db9590555b9e28450d881e73b52f286da02742dae0b8a613c30bf226dbf4ad9794df32832982739046a04da9eb4a9

C:\Program Files\Avast Software\Avast\defs\24040406\asw7550ba042d238cde.tmp

MD5 b3c625c7433989a7495a700f94ed3835
SHA1 4a4311c2899828d2cb0948d0767de0f43f05d3f8
SHA256 d7a0bd6baa33b021153e3dceddd3b1462557699b61eb92a5d36086fe3c24ab0d
SHA512 c981f385cf6b93d55c91760c7f6fbd2ae3f962bbf35324381da86192d3dfddda41478d3bb14a99303bf91bbf29b3330e5358c28f85d1937f95593234264dbdd6

C:\Program Files\Avast Software\Avast\defs\24040406\aswa7bef1687084d8e0.tmp

MD5 e6051518ad80cf517a029e31a7de28de
SHA1 095ae168a88ebe889dbd899d321bdb7b84502e45
SHA256 8cf721aadadf5c320b7883f13cb207e362a7e58ddd5d36cbaa4bbba181fbfb5b
SHA512 1f5cb13c6b1ba33fbeefe15ccdab726751c65139c48f13c7bea46758f62ba09356f1b215750c40a5581052959966ca230dd14a1da54e3bff10e737737fd43910

C:\Program Files\Avast Software\Avast\defs\24040406\asw0a886d1c419cde23.tmp

MD5 115d6c0c3f6ec0be5f461a1b61ef7d19
SHA1 dd40a4cb577dd86654b9e4b2c074ad0c8f75dbf9
SHA256 22f4b07afe7316ff6c2d9145fa9a8adb5d74ad1e340475dfab57dfa3b4546ef0
SHA512 aa6105235a73248cdc588a39727bbd1fc8e025bdbeac11d2dc0d6ac8eb1ae3fa9510c36c619998d2790db0910e034d5088136e2792f9cee8e3a0c502f8b51d9b

C:\Program Files\Avast Software\Avast\defs\24040406\asw495307983fc613c5.tmp

MD5 47937e20f0414189c28564eddd2ff27b
SHA1 a2199c04f89f3db98020baf40f3ff6c8396f5f6c
SHA256 a65ea3339ccced96c1918f53ffeffaf00f0bf854d254ef049cf199db0da85bdb
SHA512 6bffbf1a5bac8f7b8ee65ce21ea348a176cc4a1a12f53fe0d74d3b9d10107972c6f4bbca0bf27872811abe03841b7c724f3c36a981b597d1628059366d0654e5

C:\Program Files\Avast Software\Avast\defs\24040406\aswb98bd1ca5fca97a3.tmp

MD5 4bdd8c438fc62212088211bae73c1881
SHA1 a8a867838f5a7b70a90f6f0e1b26a1717245851a
SHA256 6f41cc0a419b0481bc19c8e7dfe507733319c4185b2340a73920d15c932e9940
SHA512 ca2854348644f9a92188373cbd8ac56cd16fd9c8fddf70350d3f85b0528862d6bb148fd562f869e60148c2bf5fa986e30daaa7085b8b8a12bc5b35c256afdf24

C:\Program Files\Avast Software\Avast\defs\24040406\asw01afe6d5cde20aa0.tmp

MD5 128f93c06bc710a2f93bfa6094ac60eb
SHA1 da5894ae76257cc270d0e3d72066d0527ed6a686
SHA256 cc1c9e0adccab76a9071239a2951e0ac824608d9bdb9ea6aeb49b17709597675
SHA512 2faaedcc70b5e0da2f8bff9f02b35fc35680bbe37420e8c3df5173146edb33ecdff4d1492b1cf88ffea2cfd932da67b18a6c96676bedf1628f376f4ab7646df9

C:\Program Files\Avast Software\Avast\defs\24040406\asw2166fe427f8e6e77.tmp

MD5 e91983f91c4ca25acd00fda4ca594169
SHA1 19bebc4d4e477f975ef7145a5153edc6917fd7d8
SHA256 33b2ab54240b92c97e26c05606266fb9c4fa7818b0865e3a76b827bb14b1fb81
SHA512 e0e3853f010ca7df020385b1ff179ff1d52190be44705d1e485db5d46cbd5c263d517b21bb7b4d4e3a9be10ada54a073a86e417126e47315b273c3604285984a

C:\Program Files\Avast Software\Avast\defs\24040406\asw7c0d9dc9661e2c8a.tmp

MD5 7459e3cfc80f2e208cfe223d48e4cdf9
SHA1 c7742234cc83858c483176a10d459f23678cf013
SHA256 3373c08f23f2aaa74622ae53aa4f574b9e254436a2ff3f50722c7781063dc724
SHA512 71c1ed9f228b0aa48d19a5a0f8434c86dbfd3a85c4e9c71922648f6d45fba2a7a9b3e48b1b6672ea9ba87c69b7c7122d0975834275b3c846244ed78c7987dcb0

C:\Program Files\Avast Software\Avast\defs\24040406\asw4b268435a2cfb277.tmp

MD5 0af648e1fc3c7354633e5460a27cfc01
SHA1 2d80d7d3c8080e057603d049212a61d428e44457
SHA256 e29b5677327401f7b9a13ce12f0936569d07f1d683fc3061805237997d3947b3
SHA512 7b7f8a95ed5231fc96007ea35246746cd65e229b836f47383197f51f63dd39d357429a4f7a47d632af6ba6578caacc5b269ab5d6caa00d9d3d080f7b810480c6

C:\Program Files\Avast Software\Avast\defs\24040406\asw1fdf27766f4c122e.tmp

MD5 f70b71b63dd9b808abfc30f959a93470
SHA1 5918d99c8015d5a9682304aa8c2acfe480c90245
SHA256 d16a1dc124dfaccb1149ff5e50ad376fa471816cd6e3538cf67518018b254292
SHA512 c4103dd67c9a563ccbd28471bbcdef9f06ad8a06d1b4c5b5c1111e691aacaf36d13b54e17cddc16a0241ce970eefbd164c82370a53373d7503e802d024f71000

C:\Program Files\Avast Software\Avast\defs\24040406\asw639e41eb63b12fdc.tmp

MD5 027738e7a6a7130f8ea54517f7abecef
SHA1 eab0b0b160f07d94cacd64a14930f526d534d7b0
SHA256 e9bdd81169488ae5ad3d380d063df0d2df7860c63aca300b2e5062efc8e96057
SHA512 1fef54fae16237ecf2fb5abfe8fd2a30ece3857bb735c6845775f662007318f80b07c8fcc2ecfa02e8cc951431e78ad2ac84f93681dc1779e8345d0cf4e58b22

C:\Program Files\Avast Software\Avast\defs\24040406\asw04700e8ba4a0a4cc.tmp

MD5 2c8d094ad8362ec0f1f01b79d5df47a1
SHA1 18fe591f59453d41d17700b2ea9a3b85a45e16b2
SHA256 568df493c5a2d77abfb1f66b32c688fbd564f0892bbc807310db4f0244fcea83
SHA512 563a5ebbcdb3580c6fd93e0f7095628a51d75f869e24be4722fb657b085208e6a24987d0b3747f9e5f04181f2882b70d7737b041d821bba89e169463622ebd3c

C:\Program Files\Avast Software\Avast\defs\24040406\asw8beaf0d0d52f53cb.tmp

MD5 0b862ecb3ccd5fbbd47a5c1ac0f6d877
SHA1 3b9c5f24e5b867354698b9d9655be3cfe5c9970a
SHA256 2778f2bd6b882b22e0beda673406e816945964cecd3c87bd347d72b19fb03831
SHA512 0c8c18e5ac03f60308499857ada08682acbcf4bf4448e1d08127a48e59e69e27e61e42afbe15db056411dd2b8481357b61b679603d0c01dcb30b49cae98f7d4f

C:\Program Files\Avast Software\Avast\defs\24040406\asw700d3ebee0d470f6.tmp

MD5 60d660feb60b95bbe938e68fcede81f4
SHA1 622293c030898b2b86e2c4241c7720916e151d1f
SHA256 25372c6e0e1ff8b3073045adb7c2e5fe651329e1a637da3dab5fcd5e38d50e76
SHA512 653c3da59bfc0bdf029ae33167e3dacf86348a8ea480beb48120a2a40a12b0ea25ec8aedeb392fec3b7c0ef3a673ae68d1b4c34abee7ff2317f0a12a907351ce

C:\Program Files\Avast Software\Avast\defs\24040406\aswf368a58a24bea172.tmp

MD5 adf3bbd00d6c3ebfc0b40a759a5c4ac4
SHA1 40710806f178a8cc0115306a5e3f3337773e9a95
SHA256 7f4192ef9bc469e4b987107f4bb72bbb61865081bc8b4ed8c33f2279ba908e8c
SHA512 d4a575871158e2ee5af581a605dc883b56c5282b762b3a3ea14d668261ff96315b42090466a8f03233131f3a180085801073df36faa58d3825caf91060c767df

C:\Program Files\Avast Software\Avast\defs\24040406\aswb0a275c07e5b003f.tmp

MD5 4938d8ceb3b870b904fd668ab2ef15cd
SHA1 a676febab37854733245674db465daa83cdc1745
SHA256 1bc7ced4ab406c746cd9a48ee432c9957ca3b7a96cb7224ff057ac3a543b40ca
SHA512 9f19bfae0c6e96585bdaa768b65e20a5faa455de7d754019936e0030e58dff619df7b90afe04f52132d56964dd6504cc1dac7a60cd54f58f0653d5ca1b742b0c

C:\Program Files\Avast Software\Avast\defs\24040406\aswac6256b85be297d4.tmp

MD5 498f0e0ecd517509a360a797c4bd6eb3
SHA1 7eabde3c4bee55dbb007dacc56ee2c521dfca1c8
SHA256 450d093232918dfe663ef8ad0bd615250bf970a4bcfd626e188d37569703768e
SHA512 65347f89c43452c0d54182e33b12857b949d5c763fa14c756d34c2b034e87275d0e147ee18da9893d1154c36f1acf5ee76b63321c1d58e996b45580aff191dbc

C:\Program Files\Avast Software\Avast\defs\24040406\aswe075fe90f56a8371.tmp

MD5 13cc2cc12b2752bf14d49188a1195da6
SHA1 8adca3a81e9a7748881d73f0d35a93f93fa0775f
SHA256 e24430528a9707173f08c5a2a4b327b7d790fca2fa44b7be58d8e3fb31d9d8f6
SHA512 baebfeef682a0f8cee62b5d3fd1af0c0aa64b9a93f07db8e2364cdd39efa424d5c49baaac66def8d137bc4c74c8b8cba0986b16466d75471ef9db6f2a9f76066

C:\Program Files\Avast Software\Avast\defs\24040406\aswe5e74910e7805a8d.tmp

MD5 347029062242054408664d26c82d251e
SHA1 3bf548dab8cd449daa71695bbd62df608ab4bac9
SHA256 2ed95b1a8589afbf02157785b4e13a32f41fcef084595c2f0e3d8afebf56f03f
SHA512 b950a468c4cc4eee4da2852112ba4e8d730fbf6254357039fda4365a2933a27a2c741380d22bef8a77d15b468531b6dfaa1298f850306ba5ecc81fc089299cd9

C:\Program Files\Avast Software\Avast\defs\24040406\aswf0ea70b4e1eef40d.tmp

MD5 3b9542113fb216a7fc1e40729bce5b2a
SHA1 547a07d1d89c558b58d05d823b91302aa0187a01
SHA256 146a15d2958e907b98fd37b6fa1c9202960c25f4c5fb6b3c36a4310c8b569325
SHA512 71221a7b486cf5a30bafc30499ee4dfe6d8a0e767cbdfd6d3ac0e5633dea1c537ebedf9466c784b38371bea31f81cdca264e3ff2cd71b5556b6d79fbd8cc10f3

C:\Program Files\Avast Software\Avast\defs\24040406\aswa58a7aa4ea2e0d64.tmp

MD5 26e1241030964c1558f9f78fedbdb33c
SHA1 2d8f9082390631f4c1e7766debb9ddc38bb984a9
SHA256 854eea92844aca8babee6f13cb4fb447696dcfaa4295411becfa7c102edaf19a
SHA512 10cb2cb0c4c2a305cd7bed85ec94176c571b797954332444066487c266ec8a7a1f022cfead037fd183f411790f88b1fb709baacd8ac0233ed7d3520187796297

C:\Program Files\Avast Software\Avast\defs\24040406\aswdd150529f4815e57.tmp

MD5 40c13b5f2d04a75785a0a8ba2292bfc3
SHA1 ac62d4ba5dbebc4718e158821a349659be19cf46
SHA256 a8b96a8e074f368a924aac0e4ed8049da7bd808cd518ee01fd4e6b8bdf854f7a
SHA512 d354675b156fb95a6b964fb2ecda3038055c8c898943267144e88db132cf32044dea6fb6fef0078fd87c69415926418207f22229e1e4bd59cce0949fb98ef033

C:\Program Files\Avast Software\Avast\defs\24040406\asw8d8553512a25e934.tmp

MD5 e7fc654869b937c4c8ef26363767e63e
SHA1 172497fb9ece7f1e0bbbe292cf2650a6409f23f9
SHA256 60e34b8f42aa399379863d0ec624df1f944feacde1d3af890b01c4d8cf396170
SHA512 53cc520ee053ff145952b4e1ccd11ff71520aa85d89491fb1c54e8fb86a18e0bec559a56f83e29a2276bf203a574891bea8840ca36ccc43d03fdcdb32da99e4f

C:\Program Files\Avast Software\Avast\defs\24040406\asw9d980a5fcc06a5bc.tmp

MD5 1322e16d4f1b34d7975d415195b25278
SHA1 791ad014215f4a19a281bb8822ab51c9b7abc6ae
SHA256 6ee1a376dc2a311ac2b4b0bb05b95f936e2d5bf3ad87c7922f72ad8badfd6327
SHA512 2a4ba45c4bea73f19499a04bc640b97dce1516ea6cd457ce69fcd90f2bf4501f067bb7304ba07d3382c7ff47430bfe4c3b3308511f0bdd292304fda90427e887

C:\Program Files\Avast Software\Avast\defs\24040406\asw15b15f8d41a30264.tmp

MD5 d9e702b0770fcde0e8972ef908f407c1
SHA1 1dd133a49bdbc660555e6b1817e7f32b86cea207
SHA256 80462d9f317d92d6a30859cc7dec5eee5f0831ae3314a6028ad75363e64dfeb0
SHA512 eb1beaba3e6acf231e24ed339b505ec9fcfd5391f5e79b2328f612212b01e281dd17538f74e9b2601dc157da57f07c963fac5549e6c23c92571d42f182ea886e

C:\Program Files\Avast Software\Avast\defs\24040406\asw7c8ec0d2aadf9473.tmp

MD5 0176987e81329582b8c6d45d1bf9316b
SHA1 9a8d03d9b7ec9d19067e7df98395c8585d6daf63
SHA256 1ff320ef381d93c834182669426dd5ecf5d12d16e60d725dfe292570733ee8a6
SHA512 a26279e662a8aabf1141f63a10d31fce76c4717d4375d3a53068a6ff0fb2008eb331d28ab0416962b3c8b8ffe9c56a22ab7824ada7d4ef842b6e93705b9eb49d

C:\Program Files\Avast Software\Avast\defs\24040406\asw54d3f6a8393f4dfe.tmp

MD5 af0b80fb8a97bd02b5af0fdc838bd05f
SHA1 c2587ede6f3fe3ffb62f7d2944e5ca8b900088dd
SHA256 232867c4cffd5d252960f7b8a87c084fde65ea9edbb377231202f8f060a6a53f
SHA512 3b7f32567b36240a271bb4d99815c9416c94bd9b1549e5f96dff8bc00546ba054f102f00cd6ba0fef23820afde46bdf68de11771dfab27e1b0262f748e064de4

C:\Program Files\Avast Software\Avast\defs\24040406\asw832e2ef0b02d18a8.tmp

MD5 44ffe8a111f94a16858b8437be04db08
SHA1 fa4848430eb9889fb1a1e838bd4ace131f52290d
SHA256 bfa79959a63f53855494c3dbc0367c224e787e4353a37c801ae1218976826d43
SHA512 169c3d98728db288dd88c69192df4e8219e033eba9161f391fced44297d045e2e1c9b0c91eb3feee5f111885315c1a3589e38aeee4153978cf5287987ff5685d

C:\Program Files\Avast Software\Avast\defs\24040406\asw939fab6690a5dc2b.tmp

MD5 6eafc6b178ba81a9b4794176cd2445b3
SHA1 dd5fcdcd18df2d7652dabf500545578fde57f829
SHA256 c3b8286715f98d76d611069d806d881afbf72e5ba139c6f3807080a9fc885389
SHA512 ebe7338c733d2307c7a4b542249eba4588bf47439c3d012794d1700b4e5f805292514126a044b96733904175add8777763bbe254d7590f927e2ab333cb9a7663

C:\Program Files\Avast Software\Avast\defs\24040406\aswbffc453ed93d3ba8.tmp

MD5 d3d61156aa25a967b01827d5d478c7d8
SHA1 1e35afc1fc55c587d2b6a0dd0b1fa5a3d21e476a
SHA256 2086e21de1cdf7a16bdada153364053ad5efbe4ec5688fddb9111ad2dc7c2876
SHA512 b9651703d1ad7b7b065f430835e5196d864b9c464b3544dc01583d45550298447277d95bedb661c45a03dfe3b67360629f53b0ccbf9b1f92b578f67dc8e2440a

C:\Program Files\Avast Software\Avast\defs\24040406\aswed2dc7fa567ed5f0.tmp

MD5 0440c929905e7ed9b0296fd111fe4090
SHA1 0a46484083e0cbb84ea742d947b42daea0c74e78
SHA256 9875523ebb89e054fc40dad7335a6896e1ece74151755cbaa85052e77453fe9b
SHA512 bf4cb5c1e072148cbb86aa12a03d86879c5bd538b4f53a19765a5247022eeb24ac6b161222a52a802c7f86126907067414ce63055397ba7e662418970a85f467

C:\Program Files\Avast Software\Avast\defs\24040406\aswc2db3c9892d5c7ea.tmp

MD5 e241047c5cc9dbc7efd7e98d96da7253
SHA1 0cf34634cdd3fa90b2e7f73e2ba9ce09351cf383
SHA256 b0a5a55bdfd0521894e156626d4374201ffd843263ad6cebe89aa25948c6ecc5
SHA512 817c50fc26a92eb4af8ac9ca9dccbb29fb38a5498b4c3966928ab6c61e1d360860d5f67a6ad9c8b7c6e0b1847bb25dc0069df1f64d192ca9d9e8813a1ed06371

C:\Program Files\Avast Software\Avast\defs\24040406\asw2d08b60fafd400fd.tmp

MD5 39a89882ecd07e73c5c83913b776e1e2
SHA1 3cae94562a0074c7bc9b78519ce2d94326461c3f
SHA256 b9d8797ebff64d62792b0df417bd433ccfadfa8a92bcf13d0aefacc4ca50d42e
SHA512 0005f234423ea37d9957391aa2c4465e6de878f9f360201eb3b0486a057039d2fe998733372c434789a4ef2e7abc483121a87a7272863413a2f543bc40e2bc4e

C:\Program Files\Avast Software\Avast\defs\24040406\asw87e4d69183305d91.tmp

MD5 23fec0f2da9fb607896be94e6cc00b49
SHA1 5313ec47d153b629c2be5b41f4ea98ae8b93cc63
SHA256 bc99bba69776cc20023257c9811ac6adff12fea4601ed35154834e9d72b1b685
SHA512 cd57067a0c4932be862fec1b21c6b2d61440e2a5ad86e2724993fa4479b432e27a2a5500d6189e585c4ad063c28ff0751b888393ef155a286c441cec90d9cac4

C:\Program Files\Avast Software\Avast\defs\24040406\asw75892d191885ca5e.tmp

MD5 1d21ad58b65f66987c03104442f45cd5
SHA1 235c0e8c3bde8b1b9e581c3887f28c3aff1a9f08
SHA256 9ff981c3338c384508591c9448dbb60121250cb15bc99a9dfe802f1f39d7356e
SHA512 2e43b7baea9cc168bff0ff6b6c82729aee8ddf32397f7c36d56b56c92a5f8a9850dda611fdec5ee4a59713da8f627e657c862f65894fe5db87f7442f0a67babc

C:\Program Files\Avast Software\Avast\defs\24040406\aswffa61863d65e48c7.tmp

MD5 3c08ec0f9ff5b5a1d687cdb860c513d0
SHA1 6749c0dac54c83c19f261ae8b11e178cf31ce1b4
SHA256 4abf372de88875cc4c4d58db6365eb69693199e3960d97315a6c5c24669aa8be
SHA512 1c2212e644b4d618fffa317a85adde61efa1f11d77e2ed4fb53e6499db52a9f425c6a14c2f0302cbbe40e50e92c7b3e11363b510fe5a35ed667a7ddd52fdb565

C:\Program Files\Avast Software\Avast\defs\24040406\asw146e7a53d61f6c7d.tmp

MD5 9e8d3d87825897f301fe7f31651374d4
SHA1 53a40c4bf1fdfd4a74e4f0ffe648e92153780c49
SHA256 85f9a442c054695f46d566b783bc97947cef4a4f9525aa438299910d51d36581
SHA512 f0cd3d2c909d2a09d8f17d92a8c7516e13b1d0c40baf45c37cf9fa9d319c3ac12d6a34de9dc0587eccf987cc05932eb80b922cacaedcbd9f8c9100c4fc4ed57e

C:\Program Files\Avast Software\Avast\defs\24040406\aswb12a18d79c50aea9.tmp

MD5 da77aaebd832ae6cec3f57aecdf84e8b
SHA1 aa47fc8aa4f8cde0638ac4d8e7eb882639afa115
SHA256 54d457b8a167996e105fa4b9b1818988336aff969e01824eccf64c15379bf83b
SHA512 be04c95b0fa398ceb005cc5a79765bdf7719f9b84fde7e9506bce6887ae5bc72875f8b984b0d36e0187ac61cc59127d95168bd58d384955c5b866773700528b0

C:\Program Files\Avast Software\Avast\defs\24040406\asw44f505e0e89e3a63.tmp

MD5 7ddffafd73b0a78afdb2e25447d17357
SHA1 51563c9857dd59e87577564d864a60d88f18a22e
SHA256 522354dc744d348bcf8306c9fa1aa54795a528dcb0b8e133f2fb6707e461a00e
SHA512 b85bbf46a464525b9e2ed17ee13cd13fe1bb43875fa07f223d8eaf0f9b87ead0753a87ac805efcf3985bb852fb7a713f6ef97836237a27494c9f3a175355516f

C:\Program Files\Avast Software\Avast\defs\24040406\asw9afc3a21c78e92d5.tmp

MD5 26856cd0951783148ea47dd183742d3b
SHA1 356006e84bafe5f038d9a6323399c64a57b1bc4f
SHA256 323c8e19e393d530e01973f20b72c3a157d99cebfe1fda6a90b554cd7416a373
SHA512 e92e6d743ff918a793e091edf281aea4837762d76b80626e57aa44b8b12d0ae4152d215eb2cba9379a2d92ff5978c8e315ae54c0c3cf0d6247834088ca58ecc9

C:\Program Files\Avast Software\Avast\defs\24040406\asw90e43e8eaca35eb5.tmp

MD5 190c425477c493a78aab659c7f1800d5
SHA1 4f4a385bfb502dcd20aa43555dc8c71022f3a680
SHA256 9bc87d9ecb1b4787b317ca9883624db2b3c13c2f76cc0bf5014cfd291bfa3eb7
SHA512 bc0dad01b23e564eeb3b39510aab2881e011be6ed2100cc95cce9d96a7f72aa7cf2fef692f81f70cea3a0cdae309b3ef32367cd63692af418c9cbee7a83add47

C:\Program Files\Avast Software\Avast\defs\24040406\aswabed9deb14a735cd.tmp

MD5 c3eaad0cc1d9a82a460e6a90ff0c76c6
SHA1 be33dbeaff35c23901ea3d0f0491ca53e6f670d6
SHA256 38d6c1dce4b206445240384225dc63ac434da814ce57b798e81fd43821f03921
SHA512 b99c3df3c25b9ed6da568a2a3cd184482c2fed5f1a2c6686f65bbb87fe3bc29cd8f40719bd91cf1f6210e86669f9f0e32ba2229811adb332af2b464d6fec5d1a

C:\Program Files\Avast Software\Avast\defs\24040406\aswe501163640fd1ac8.tmp

MD5 9c4645ee12ce3b338d9677a83d919487
SHA1 fca63d74d2738418230305195b51b3d56b3309b5
SHA256 99b81be7b29652285c366374988a01d6d99c5848001a897df15947d6e74cf32d
SHA512 ef6b7c3969f92ea04de1286491d61446659f8867a001f90294873b8a0513c1136cf126e1d79c6b64a3ce29041475883d3a26dbce912df58b756d9e6ce7d4bd18

C:\Program Files\Avast Software\Avast\defs\24040406\asw883f49d2c1b9874f.tmp

MD5 4a6580a61062b3b262ac49ff93d0a4f6
SHA1 ac693579414cfec883e69cd656795af099321e3b
SHA256 a83d050a35a20b10addf01155121e067e247e1954b31025cf8763091b137bc0b
SHA512 ce5bcfa2e422d80e1ba03c8307fb17245c527244b5cf2c17760038b6b2b78fe23dce046f1ec68b14ba10553397a641fd3c8f8dad0792d41c47627bc56f9370d8

C:\Program Files\Avast Software\Avast\defs\24040406\asw7ad0f1aede3880d2.tmp

MD5 14de05ca7eae5b02aef5bfb861defd38
SHA1 f2044b8383de20f3c7b465af71619f2c38024c23
SHA256 74020eb6a1a6c3d97049967d808ade63018f7d1cfcc5b7164f30931de1a4e2dd
SHA512 819902b559d54ccbe9f8ad0ee682b166275a7220d3cc22c3a50c38f5f02a944b9748c2f9e988f5153740d9ae0af471a9e015dd103f1ea03a52da73a614e04ef5

C:\Program Files\Avast Software\Avast\defs\24040406\aswc56c0fca28e59ea5.tmp

MD5 c87f6f9a8bba55c7c4c282dcbf2a19b2
SHA1 e0bcec54877266d51553cbe6a3af468f19a8e9a2
SHA256 4c890125a976542d75b5050d84c5c0c75c4b1cbd9e9d07b385f48df385a916b0
SHA512 ba5c95de0daa2dca8fc8add4bf2f094310af8750c4c34f0360eca9bd4f4fac6e4f6d156f0193ed93aee6f9a6115f6327416299b0da6a4a0cf4c07a3105cc280d

C:\Program Files\Avast Software\Avast\defs\24040406\aswd737c039744bd3cf.tmp

MD5 5848d91326f4439f47a4667d53a145d2
SHA1 e3ea5cf99e774144e17d5e05bb8775b52b6c9638
SHA256 599bd37aab9a287100c865ed4cf36abca83a90e574261070edc4ee5183c817b6
SHA512 e7ce6c0a5f21ae29bcb2c863b198125b5a5aab5b4c2aab78e1f30f7309934d17fb797919d35209bdcef359da745da4c40cfe78cfc755962fbf3b832f72663c08

C:\Program Files\Avast Software\Avast\setup\vps_tools_64-13b1.vpx

MD5 746c3a73d3daa290dc39a045ac0375a3
SHA1 e560242582f01bd5c2a56b97334baa5a5b00f3dc
SHA256 864c708a67888133eaae62128634d73bab8b4d72538a1ada992be6e6d428647a
SHA512 c035e2b51c4bd1939476f0342176afe5a5ea6ec3c8ffd728a4ec691dc99ebac2f3d9da72ebacf6ca4630238342052dc73fbee6a6602ee4c6640018620b65e8a2

C:\Program Files\Avast Software\Avast\defs\24040406\aswaa9cb26da1014646.tmp

MD5 4ae83c34e6f621c63bea444761d6e7e0
SHA1 9a33aaff358e8091de19d26d02d38acba4477857
SHA256 21020f14122b727517a1ec38644578963c2e63165e7bc254c8b2c2516e05e04c
SHA512 3ad0c1d5380e1ccb8a8bce07fdde20d3c48940766e9a7f7fb664557b8be004366d4bef8d117e405dedd26888b6f0025173f0c56ba4211fa3194ff5307806f678

C:\Program Files\Avast Software\Avast\defs\24040406\asw19c98017930e6d05.tmp

MD5 1ec7c4feed230426245df226f55ff5af
SHA1 86cd49511bae8209a98689e9be55036e35c12554
SHA256 0d280884fb0a08c0e62dd5299df248501c9d94d9714b67990833bda5d592104d
SHA512 39b09da401b99360a9c404f46cbe2ab6d87a944d13ae367ae5aab0b768963fbbf9df66616dde11e53e12ce9216f3434332a7e8aa451e6c5cfe385a15f086b4ce

C:\Program Files\Avast Software\Avast\setup\setup.ini

MD5 804f7636effeca5e1dc0c5845a07b858
SHA1 e9e2fe8badbac9c2e1220c1150b3862810f4c9f2
SHA256 459e7edc0ec070f826c20434601ebe937eb9c3558aa18cb569c2c88846fd693e
SHA512 c628146e4333cd6feff90542f8aab179b756b909ce41bb19bc86687ae6b1b4ec86695dded019f0ea4a165a4119432bb67d8156af19e92ba6d046cb69b73d2c73

C:\Program Files\Avast Software\Avast\setup\Proxy.ini

MD5 d6de6577f75a4499fe64be2006979ae5
SHA1 0c83a2008fa28a97eb4b01d98aeab90a2e4c8e69
SHA256 87d882d37f63429088955a59b126f0d44fa728ce60142478004381a3604c9ea9
SHA512 cb4b42c07aa2da7857106c92bc6860a29d8a92f00e34f0df54f68c17945982bc01475c83b1a1079543404bb49342fc7cdc41d2ac32d71332439ceb27b5ad1c0c

C:\Program Files\Avast Software\Avast\setup\jrog2-13d5.vpx

MD5 361df24a8467af95ff992e30823cc904
SHA1 c8e28c18d1c57510c79051917f0a05d59161e5b5
SHA256 cd19d8a53f6f94bb5a2523e32fbde4536f6a30f27fda98b55611ffc33845bf14
SHA512 0137a2b2e1a5ec4f8cafe7220cc530ab1c04855316b1c1830dd63c7e113becd236626f2e014e588cc181608566a5e93b9bf995c642ab0a8d53003650b745e812

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fcd1cd8fb43a1a575b649db65c3c3413
SHA1 2d61ddcb80ce644807c1e185ad4c63f2936dc569
SHA256 7492f227a03ee67190c96bac90357aef2f3ae30ed9048947b13547c66a89d620
SHA512 22ddfda966b8740dc4b044753e9b4b106b20c4fb964e60614a165d9f01eec1189678185626bb0c636ecc8b9fdb6411e9dd0171b6ee75731955d01603c5b4d1c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d34c80ae5221be44064e6839a46fcea2
SHA1 e169c1555242361556865eb11a69a48e45676a7f
SHA256 1c12efb0479860823ca75d93577535a10f640fc18728a7efa09b862bf38ef70e
SHA512 5666bf896d4c93aeecf349216f81716ec31651347a5ae6840d2b90888b9d419df7beece266ee7eab0ac989958f764e7c12e7936b1e15440dbc17b5f358efec77

C:\Program Files\Avast Software\Avast\setup\53993a31-c81e-41d0-8eb3-bd7b885a8dae\update.xml

MD5 288d98281c275eda5183d79e90b442c7
SHA1 d8ee822f27dcb7f750f3ae1e2785df9f68764674
SHA256 ad9cb3d76fe755c22e405caf92259097a12a02d0edeb12bb3b053ba951a4deb7
SHA512 c7241ab56546c2648254cb8b926f52844f329df4c55612d6c43e3813882d0f9e90295cd07b73c5115256db3199633891b9fc620a110a811136594b11366ffd5d

C:\Program Files\Avast Software\Avast\setup\23f7e65b-b981-4c0c-8648-a8caefbb7ceb\update.xml

MD5 dc3d8fb91f022a92f2d60c754af1ddb9
SHA1 a5a226f20d517fd80333c9f291523b83a2fed722
SHA256 d95c67828baca1910933207e94ad97234e79bdcca02ae8ad0b593a6ff9c34bac
SHA512 ea321c68ec9a89828aa71fbe6434a7cf0dccc4c983d0be6b20617c10d7a0971d9559eba2a5034f67324b4ef31f7995dac41b8a9a0f2da59b1216f36d3ec11413

C:\Program Files\Avast Software\Avast\setup\6476c5f6-e9d9-476b-87ff-1b7d2c8aea86\update.xml

MD5 f57894f7c34a3011cde040e07f5864f6
SHA1 e9963192760b37d199003092c58c542faef7349e
SHA256 3556ed4d80397042d0077e58fbfbc1d9012cfe703ec253078bc585e1bc23c8c3
SHA512 49017d4308b771a6c1c9e50266f6375dbdf84e5d44430d5a7f24adf08539437a8b4b1f84f1f65b27eb989add3bd007cdc744105f920716e4c58af92f2a89cbd1

C:\Program Files\Avast Software\Avast\setup\2b1b2d22-d9de-445f-b3fd-411f02ee53ed\update.xml

MD5 92f0de80782f5aab47c6ea7d1e866e08
SHA1 b789f27dd3a368187f6623aaaaf9677dc67a6560
SHA256 c791692288440a7a60db162bd731f226f6fbeac5ca101abc5e4462b1110c6690
SHA512 a64b9b2a111d623e0a0fd26c84ecb13fc15134bd63f290ce552e3507c79b9138dc67d463d0786875f79502e9f11dad182cb57f39de64da38904a45474504773f

C:\Program Files\Avast Software\Avast\setup\6f51f6d4-62b0-448a-a073-b98fb0e46c08\66BFCD08F8317C9C5E2F6706D06AFB8690F1399C1DAAC98B25916C7F1DDDC1A4.sum

MD5 5b8b19ed1539ee3a1b8446d4ae631dce
SHA1 7b2bb59a74afaf409342858018d00028db80a49c
SHA256 5717af00c72a292c4fe367d2fe28ee6eb1549c95a788d046c50b8320de5fc4f3
SHA512 33480d574c6686305c551a39daeff50fecf09aed429f1f2894e5c16b2197beeb52533a383a6f42594a303fa6a299fdea226d83dcddc948182bf56a0c5cfd10c1

C:\Program Files\Avast Software\Avast\setup\db2aadd8-c8e6-43bc-9512-9d87913e0bf9\97C03096FFFB98E5EFF61739CF0D4F5908A3F9411CAFF2A2C16B189C07CA0683.sum

MD5 2fc20b867d9ca3e98da73fc615284e3a
SHA1 c26af0e5e5b45124f111548f45a1185aafa4b9f8
SHA256 407c4f489df633a9a64c8619566d7b9cd6fef60fe48541361d8f1268c2153d20
SHA512 615d34c342032bde3fc89dba3e54ce0d9034e591e3d1c5825bf02b131317d90b60f5bdec6569443bef983109e4e11bd053ff3edbdc3535e28f635205467cc436

C:\Program Files\Avast Software\Avast\setup\db2aadd8-c8e6-43bc-9512-9d87913e0bf9\C97067A4547B449104DC42DA77664A3ACF1DC7D136329E1DC5C1D9681BC790BA.sum

MD5 8e5c474fcabafc91268d3c1de4843b83
SHA1 585a031c4f551a3b7389dabd95377d09b5187853
SHA256 76db7386113fd509fe563e22a4a24f954463e11d2fc5343a9fffa66efffda202
SHA512 0dcc1eb4f47b096e69d0349fab03390215071a89e72ef7901a71b573758b55108dd832af3048f36df0a8692d0ead3019cebb88c9483e87332cb332254410f361

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 e0a5f6ce3b1ee3bd7eb200f1d0833985
SHA1 4924cfde3f97ff02ca5a00dc62f47ab5c380ae95
SHA256 b96c0a262b361fb9df77082efdf46e25202230cbe1e652c294a224842c0ec0f3
SHA512 59fc3e8539b189f8f2a556340e82ede3d5f3df94173b37df94d92712a3c74eed773059c108f49e3c3c99ca728a5cb56ba916b2d4f65895aa429c38a0289774c1

C:\Program Files\Avast Software\Avast\setup\setup.ini

MD5 f30dd6b6d07f2ec644f21010f93c17ea
SHA1 54bb19ed1f9f9f08f61d1bea08bf174b636949ee
SHA256 90f7d1b0ea029e7221a94ed282c2b646808961cdb930c6df74f804f4c058b727
SHA512 1644b654d9a3f90e6d85b66220da4a1c4cc6dea5515d16a92b623d762db0e0322de3075886b8e9bb5221bc45bfa13e1f1241aabc3395430da0ee29fe4a5559b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3a58bb37a0b6aade1a1ae6a6ea7243d8
SHA1 03851ffee7ad0e24f72bce3fc29ee0add0ebf355
SHA256 cc0fb456a166c4e5a67f9cf0ee6e6651277cbf21e1566d958065d05345b06cbb
SHA512 aadff8796023c7141e70ae094f7012577c7aab63c8e0c3fdd36b4eb08d95a2482565a58ee071af19f48e3fb5e475ca12abd922ad7defd63afee52afea03c755d

C:\Users\Admin\AppData\Local\Temp\7zO448C87BD\Keylogger.exe

MD5 b8607b7921cd9cba78058fcb56bcfb9d
SHA1 1344f12ff7e23122b62fcc7f3be548c73d3c3efd
SHA256 b2a992052d32a5b9d3702350b133289b45a8d209acd0161d9c3b0bc6fd702b3c
SHA512 dd36040e57f2744437684e257caac0987a90deac0a60536f1cb8d690e256505d427931a3beb8d58f87c2c1bf5beb0a40c4b09417c451a07e5856044efbac1449

C:\Users\Admin\AppData\Local\Temp\7zO448C87BD\Keylogger.exe:Zone.Identifier

MD5 e557cf4e906b5d17c35b07cfcd751a72
SHA1 e4c98ae291d55aecbc9d0ecb854a36cb723d9881
SHA256 126fa60eb1c0861e075f154276fd7a7e9a6982e2af3229941e1779274409dc8c
SHA512 2c59bdf824f096439b6c6c896169a24d6cfb2d2dcdb5e65ae40b800d55c3fc374ea0ab7e3920885dcdcee900d37b46d113f9f19e4802dd055beaa43387c83958

memory/7476-15220-0x00007FFEE05A0000-0x00007FFEE1062000-memory.dmp

memory/7476-15221-0x0000000002450000-0x0000000002460000-memory.dmp

memory/6500-15236-0x0000000072490000-0x0000000072A41000-memory.dmp

memory/6500-15238-0x0000000072490000-0x0000000072A41000-memory.dmp

memory/6500-15237-0x00000000013E0000-0x00000000013F0000-memory.dmp

memory/6500-15239-0x0000000072490000-0x0000000072A41000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9f1f9fa6d2d2edfce189bd8aeb47b04c
SHA1 78a039f90b73ce4d61f4598dba8a5b42b9a672ab
SHA256 2c6a3c333a50082911b43454f2009796d94d70d7ae14fde2e7fb09b031fd6437
SHA512 a4246cc7f3be427bd4ac185fb699cf87b061887d2d09cc468fe1f391b152bca945e38cf90fbd1c12443d131b709a227679db7b0196491e2c24bbf1be914dcae9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 04a5c3e5eee9e48331bd5b6f16a6c66e
SHA1 9bf418ffe268236949a25307e0f3feb8dcb53be5
SHA256 b4ecd060c978be6190629343e747c411cfe14524eaba666d6f73b06375aa5483
SHA512 68835116286c5300235b69382f64dd3c0df37b2faf005928ff49ef68fe7ba5d8f408a2d21fa9ca4496e780c09614949039c3fc9c778732c75854d7dfab3d6097

memory/7476-15277-0x00007FFEE05A0000-0x00007FFEE1062000-memory.dmp

memory/7476-15278-0x0000000002450000-0x0000000002460000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 636f09202e5079a1945509c9f0c90218
SHA1 73054c618d039440b7d5e58e1ea2839674243635
SHA256 135556152fe53a6c25ebd1e6f39de131b0bf70e3aa1cc721f9ea83051fa8e7ae
SHA512 752c3ebe2a0d6637eababa05ac525f25088c9480910377cee7ca0786c5b336553e70865fedfe512fe287203cdd214451a790ad7bf14e41084c320899f2106c5e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 99d87f400a48fafe7b4b506d6aed942c
SHA1 660865a9f35e7e26b96f5a4ce84779583dd21a64
SHA256 df3ec91f08a52c3e33e269d4e29afcf798ed2e777299ca5b234b0424cb415f59
SHA512 31aeac61e902a0dbce79cdcbf2afef6588f3c2abd33146900ceb773ba36a02516a6a2e0c3e75a76140ebbb29432ebf0303ceccfb3871f56553846708c30aad8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1

MD5 aa35d514cce6fe7bc1dbc66040e6b97a
SHA1 bf452577d960652b79ce03d7a6d6d23cc7623b14
SHA256 c61f5a78c0f2e05a2e510100717e6c29acc6d2b8921f64a443be31a1f44ae355
SHA512 14901cea415161d7cd7ef06253741d371a2530a9167dd91f5cac0fe14fef21fbbf46a0e191bc954dcead2cae650de328f044d5d27a7a7b3e25a34cab6bcfb594

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0cc8263d-6ec2-4db4-ad95-46098fe212c3.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 50464a3d15b6618df4a8710de5d008d5
SHA1 a04a398435c42479ff2963e8527bb9b422b1fdea
SHA256 2f1047b37d668f2131e6c0f7afbbceb2ce7cfcf7a5c692a05757229691490f09
SHA512 a7d89d819a27da679ea0988aa8358ad09036aa9c34573436d7ea2692c20038644865da057ea2f76c1a653f777f37590696fbf68d812160b4afdb18bded4fbba9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 34436478ce16307732ac797892e35174
SHA1 5735830bf27c590caea2da376750f37064b541a9
SHA256 44cdbd64e1bf8957e2e1022a436d59f350df5222da99d64dad8993b5b6e20218
SHA512 e094bb1ea89f275c73b6101e1e0e656b133edecad400e41bcba009d16127f07f88c08233cd7e5287e80422ec5c27c92884ff0c6b6ec7dc38344dfde2b96a2643

memory/3932-15449-0x0000000001440000-0x0000000001450000-memory.dmp

memory/1368-15455-0x000000001B830000-0x000000001B840000-memory.dmp

memory/796-15454-0x000000001B7F0000-0x000000001B800000-memory.dmp

memory/7476-15453-0x0000000002450000-0x0000000002460000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 aefd77f47fb84fae5ea194496b44c67a
SHA1 dcfbb6a5b8d05662c4858664f81693bb7f803b82
SHA256 4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611
SHA512 b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f13d17c89a84eaa58131043d93b4af0e
SHA1 51308cda925d24222e44a97defd9e35839f3b493
SHA256 343e5113ad560cee6f177f42327265010d33db3e015d1f7341d4a2792352ec8c
SHA512 25edd68bf679507fab05addb3278e51a2e7522d2248985b347d909014b5f266538c53290eac255eabb6674b1d478e6c239816bb6957cf338a4c520b95e42da6d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000f3

MD5 a3181a27069a1143aa23d167695ef871
SHA1 71d688fbe4a98dd13c17210eedb387e627004061
SHA256 26007678002cb23ae5ae69ae90459cc6608d7f708bd3a3fb87e371b77109fb6a
SHA512 b1781a94fa111d65198609454bd0c1acc0f460003b47a2db81f5cd50d52bd9812ef6454b79bce14f58104881207b5789767d9f28a08459b7b27b5a425f90f966

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2087c6ba9d14fdc2319d9cbc6a1f6a49
SHA1 214bec07fa9d279c61db2dfebb93fab4ca6e3b20
SHA256 9a461336c5285b2f77e12fc288961266d194384cfa373ce8bfe6110f920606b3
SHA512 0a5ebf77a3fe6f445dd1765348cff25344071574e407f3d085272a7edf73de4a23132d97a113de26c0b8adf902f75ad9416622595f31f9edaf41386bcadeab3f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7af2cc77a96420dd11d1085022bb412f
SHA1 29c36a1bac11d5e40250232b188f7491278fb641
SHA256 7107ac616ca1885cdb567b180bad0923590661541c1db8e0de977c6f49dbce58
SHA512 4670558a3c4585a9c4e141fb1544e359f37a26ccfc4ccd99ca5e6161de839432ffcfaf561b576f0620362ca90ec2664ee152f34b9878cdfd626016ecb40ab02e

memory/796-15690-0x000000001B7F0000-0x000000001B800000-memory.dmp

memory/1368-15691-0x000000001B830000-0x000000001B840000-memory.dmp

memory/7476-15689-0x0000000002450000-0x0000000002460000-memory.dmp

memory/1368-15738-0x000000001B830000-0x000000001B840000-memory.dmp

memory/796-15737-0x000000001B7F0000-0x000000001B800000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f59eb4f578c3d76aa53aa3efbdaed969
SHA1 4100896458796d53f0e834627bb7afbbbfec6a90
SHA256 9c0152a9de1f9b50f2e905ebb01cab38c4979c994f4a39511b91f6b682202231
SHA512 e2eb31f847edb46c2fa0f0e89c5c21990d0e6b8d36afdcf17061bfb79a8195aaefcdb962a1b256a4801b6f94c4aa83096c79437f830b6a5f76e67ecbdfbce673

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 3f1d4b4eac09131fc2b4de36eae3c57a
SHA1 350a39e6b4be3e01da3c97848ba5296af51ab517
SHA256 4680c6dc1f5e1d061b6a3c7b0f777d1e213930e4a613d4c884962071e9b617ee
SHA512 72ce12e32c3604e3b5e809afb5d8c0e9b64e276deeafb344a70cd20a715f983433129c8920d9e3761f937de30bf6864de58b6ef0c8e38f07d7aaae064e705aea

memory/11172-15807-0x0000000072490000-0x0000000072A41000-memory.dmp

memory/11172-15806-0x00000000013B0000-0x00000000013C0000-memory.dmp

memory/11172-15805-0x0000000072490000-0x0000000072A41000-memory.dmp

memory/11172-15808-0x0000000072490000-0x0000000072A41000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 63e919e3c5238b4c2de0a06693a7f631
SHA1 468eaf294579c4ff3548fe7a56faffaa45802239
SHA256 d44689711cec46fcb5602715abded8a66d09557bca1d80082485ae3244e3796a
SHA512 1d81f39b4aabc376a7a05e55fb006081a42c48c56482b4902f216e781d688f4f42dd74bf28f977abfcfd9087b4eb8a3c6a0ae856b7cacdf876e99092456060ea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d98c3c0280c0910ef92cca8c4f734dcf
SHA1 1135ed5a7ee582992e1c5158a3cac23324d3d67e
SHA256 2ee374f3263ab023794be7b6573a25722e6b71eb2c29cb82e8b92dd551f82345
SHA512 1c5fe71f4f6625542299f508849e3427f08ff141b740bbc5191c9229ebb05049046548cfa1f33f592150bafc965b49208541423a7ccc531e3a1cbb29923114e5

C:\Users\Admin\Downloads\Unconfirmed 740976.crdownload

MD5 db9568f0c0b2d84dc18edadd1c54f7b0
SHA1 1469e109cce5524f1a1fba51a5d2f1e86b9b10fa
SHA256 b42a0df24b1cb607f3156377d5b6f194eaf2ea5f0728f7fb6103167ec7cfb277
SHA512 557f20432d2f03415570f15b9fbe4e2f5e38e49bdd6ed902b32bf1db1cd92ef6dbbaeea8e99c388e482b3c2ffa651e39839ce277d4bc3c5c4c08d0ace2e2d21c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e5d9bae06f878ea76e7bd609ec5d7bdb
SHA1 76ec2cfd953c11e5f87f970769b2d6c34381ed44
SHA256 db8311009e1dccd634d22f8558278c3bd2bcbea05fa50248531df838da9138ad
SHA512 70001e3a621ba733e0a6e9f6b3eaca21e7850107a67103a45c00c629487cc237aa7d6d25aa2bb6e5a1845df3c1bea7278f878d09f480e132154ecef2ee78a6e4

memory/1368-15916-0x000000001B830000-0x000000001B840000-memory.dmp

memory/796-15915-0x000000001B7F0000-0x000000001B800000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 567925e568bb8eda7ae4a2fa7f413efd
SHA1 f336ae75aee84c1160063aeccfa63c1931ac700e
SHA256 d7a097a5850a07f6ce648f716be9165ec286430383c9e63b71c2b6556ccc1afe
SHA512 1bfef24ce155fa41948f8d5e8301a62b963677e50b6b1acf85e896eee3e06b14a7c4b935aef9e52118815b92facb54ed18092577a03cd5db07ed1a6be3f08242

C:\Windows\Temp\asw.44b0bcd3b23079e0\config.def

MD5 11d234acc4aa3492884d532c720221a1
SHA1 6c2f3b0a728b0794fa77ddce08a21c6197562ac3
SHA256 43ed5b91d77a916d62660c14248ccd735d5d715106db7c4d86dd91f6466bf333
SHA512 b567fddf0643e6a63614f87fd4b2dda800bd2b58af2c116ad1ec0793932037dd7a789c17a0214d8a45054714b53c78d4fda5cef372858addc46f4d79981adf46

C:\Windows\Temp\asw.44b0bcd3b23079e0\prod-vps.vpx

MD5 dfa1834812a0eb9d26481a0d04bf17f6
SHA1 f549e226e0b9cd9d43975682d4750fdae05aa1cf
SHA256 65c6d6ea7ec175683bc9cca2801c2b5fa54fb575de0d2e6f3b69d6297996da7d
SHA512 ead07c0756c5495145fb8d1c8e6fedf9a2e7504d2d8609f7986181c1552aea24f42c9c398033bfeae77883443f552bbed8cf738337e4f4d56ce0b92819941ac9

C:\Windows\Temp\asw.44b0bcd3b23079e0\uat64.vpx

MD5 cb415a68c2539edf346943b0beab4657
SHA1 c7a45a97371bd74af202977326465bf703d4217b
SHA256 4ee43ed417a5d790d2ea3a67290429bf801cb36a2c0fe4a9552c8a0242a370d5
SHA512 47c1219fd7dfc14efe88406da787b949cd6c4a97f2e1875268478bd7b5a8cea1775a962d53ed5f6e2e7b321b42ac97f5f2185a8c793667202d8b0cb7adce8d2d

C:\ProgramData\Avast Software\Persistent Data\Avast\Logs\Update.log

MD5 21da641eb5211c8e82c91a198c2b902f
SHA1 2d10bf95d65a7b54fba83bb6e7eb9c649fff3419
SHA256 eeaac14dc12d737b7a2e19eb6a8366e946f5be1059a2cc59949f00e768e00443
SHA512 2b75b77321a9bd9c727b1f0b918e39a66b65be7d04bd774b1312c69349b8854a6728692f36529ba928b30f245549b88e59f06547d20a0784c6f6f01d9d3ceb46

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a94ce784b5659fd34527e7050ad492b4
SHA1 e61305bbabca828a65e1aef17b3598af1811df9a
SHA256 830de36f91dacd684e98c18a9c2b7592fda4bd0189ebc1967acdea724a943a88
SHA512 7b7a5e7639d0c919e9be7741badc01146af4a2a6971afa01535b851f663a2e9e3a4088859ed782e384df6b4298de0a483eab6a8f8489def29ce582ae5ec7bd7c

C:\Windows\Temp\asw.44b0bcd3b23079e0\asw613001765aa9bdcd.ini

MD5 5f8f8b772b678be738308af2498d074f
SHA1 9d70f84a1ad692aa8e549c47a07ad8d1950c8a9d
SHA256 6c3ab4f737dc75843337b9bf8bf185b7209cff6df85b9db97771ac502d460da2
SHA512 a377b4622cd8b5306fac33e59c2915be9903f8414bcc374b4fe374414926690daa0df70b30c6bf4a8bf983669c08aec58027e8345b06d73df8877eec70a3b9ea

C:\Windows\Temp\asw.44b0bcd3b23079e0\config.ini

MD5 baf76e9aa385a08d9d1a789c737a77ee
SHA1 b81d0707ff8a215213672c2eb0422ca354b28f6b
SHA256 20966c40455ab9c152fd197aae1ea63948ad44c8e4e80ab2d05beb394fd3dc02
SHA512 5c382528254cc6cf20abfb909bee3b0ef1a52a44c3974f71f368d2712a915fe1c69bde0760cf854b816ac25e753172ad8da338775c136937b5102b56db58119a

C:\Windows\Temp\asw.44b0bcd3b23079e0\config.def

MD5 397d10f58154be83b488eca5d7c295a6
SHA1 e70ea339806234139694fc2269ecab9b646fd670
SHA256 be1e254eec96cf412037a064ca8276758dc1711170ca67d47dc40a64f41193c5
SHA512 2353b411e3b2c5b503d6bdd14ae8baa6805948cb8cfd16df36a12c5cf2a627ab46299a9b3546aac5336bfd265eb496a9f39206c40878f3ed818d1d0983508d16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d0a7b163d3d6d09a758373e5fb541553
SHA1 fadbbd96a93b1c57561f8d502c41e46428af622a
SHA256 e2e9983fe2980e734a7b34bc20aaaf1640076742a0dffa9867463219d5e49c6e
SHA512 7dcd9a639cfd154da524a94e4db68b3136a797ba98480edf56d54fc754ffe84784b63d14f3d060e152e97b1d66e221a8aca90181f65a75c9cee1cf7c85c93cc3

C:\Windows\Temp\asw.44b0bcd3b23079e0\Stats.ini

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Windows\Temp\asw.44b0bcd3b23079e0\avbugreport_x64_ais-a35.vpx

MD5 d0948f2b41df217becc22bb1b515cc82
SHA1 4e20fcb747e42d5ab2ec2d26abfa1260a2a5ea9e
SHA256 3276881e43b17beaf78ad1626ff64e18da6e3edf2e6f2e0cf20467a112852001
SHA512 df7be15494d52cec3b9cfa32ff534ceb2691d1b6d371af17183468fddc6f5be9e0ac287d6bea7dfa66c80bd8a8c0cd888d7e5218ccd950689d89a8b631551290

C:\Windows\Temp\asw.44b0bcd3b23079e0\avdump_x64_ais-a35.vpx

MD5 6e5020ada278a0c789dda6b258a6caef
SHA1 29bc92bcbe33937dfada3d498618ae7d3c3bec61
SHA256 eabd73d19cc76e8ba28a0e10324f65cd4bf159818f663411fce461ae4fdab138
SHA512 8d403df73559fdcc9b3473d8b5f504fcf5b9e2d34cc0074a9fd44481468328e3da9005fef44872a47bd68b490a9f9b9360ff015ad044e1879632f334723764ae

C:\Windows\Temp\asw.44b0bcd3b23079e0\avdump_x86_ais-a35.vpx

MD5 b8b026231257a3f251096cc548e395c7
SHA1 9361be584819a30feff2f94b8cf6fc98176fc434
SHA256 e029d34aba354b1ee79d99d3a07741b8a9f7c60bdd9268a7b8f7da5ecd7568bd
SHA512 bba8bfa973fba4eb75ee03fbe4e214ea342566ed50b08205759fab9e5b371708342915400ee750ad8c23a2541ca42bf773bf1ac4dd43bcaf588ec520582388b2

C:\Windows\Temp\asw.44b0bcd3b23079e0\instcont_x64_ais-a35.vpx

MD5 6108d56b849cc95d3955292e89a7a354
SHA1 db143ce2f3773175c74a56980cd048a2a5846217
SHA256 b3bc441e0d17dacf426fab982ff0501362677a412bdf7fca840f6cc7ace3a3c6
SHA512 53f339eb58a2bd270b9b9c12f8bea884bbdc919797a83f38c5203d816f4dbb78dab1f648724842fbcadac1c7f7a7f3a9cbca0ead8ebf1fa79c81e1cba2a75119

C:\Windows\Temp\asw.44b0bcd3b23079e0\instup_x64_ais-a35.vpx

MD5 07aba42a11bda8b49223a5ebbe2b2099
SHA1 d3e333e26320f0ac6bb7e8161544acb15addf2e4
SHA256 cdc435b250be2c939c3b85167b63a1f0e0c2f4597fb561ebf3218556edb2a6eb
SHA512 f8ee3a10d31ec78b3b3893ce9512944282ca691008b6c23117131367cb069738a88b22c935540b7387844f09b8f12ef9ad43da589b5e044ad297a6a036b2edc0

C:\Windows\Temp\asw.44b0bcd3b23079e0\offertool_x64_ais-a35.vpx

MD5 d67e4198fd0f49235d39af278f19a5c5
SHA1 f5ae3dc761401c7db77aff5852e266fa02f9dcbd
SHA256 b8d35371b5e946261a674d961748f44757b5cb43e862e4bd220f665c64c93732
SHA512 eeeb5c122201325501ad6c7d3e5944bfaccc0ebe56916f2446b8c0e8d9af88987c474515eebd06057bae0dc86a6f403944bbc45d91d8145d69d9ccf927038753

C:\Windows\Temp\asw.44b0bcd3b23079e0\asw10631734592cdb5d.ini

MD5 bdcdc9555fd7ad1e50e97631c81b8d7c
SHA1 e70e135f46d19bb1333c3266168f2e7c295358ca
SHA256 6b7673fbd4cdc537e1ca5b58b86fa9072c9a31da0b23c5bb49164ce3daf71b2c
SHA512 f8b2bd9eb1749d1c267202b0f2b767b92d123174f7b553b6e792eff4609acb769fd42592a2637a02f4dbad4f195f74fedb6fb85039369d340ef6b8132436951d

C:\Windows\Temp\asw.44b0bcd3b23079e0\asw10631734592cdb5d.ini

MD5 503ca39f80468857c1a469d0dc682c01
SHA1 0913078d829deb9bca03c7e4b6c1f60377c38301
SHA256 2688595ee6f1fb36f46953d2de7c0480b9c69a7fb8823b230b6943adac4eb853
SHA512 63961549eb5e53137d0c4a34122d140db32d2af7421f3c27bd885b773ee6ed6d81f1d88901d42a5576aed35bde458cbdf943c3d99269bf2cbdf35e5865c5f780

C:\Windows\Temp\asw.44b0bcd3b23079e0\config.def

MD5 65a09edf6d271cd3f07d41854875fd84
SHA1 bb00fadc9ddfb29aa1eda19207da8d6a60650dec
SHA256 879e09e77d189661845ee92a1252acfdfe4b89f742cd3aabc1cc75513c815c82
SHA512 cbde1d2bcee98064c272d73e958f95cf4169e18420d3c940f4be05f8e8d03794529cd24928e7ff40c8323620d0039ac4b7fa8a96bb2ff53788d1408ea363ce2c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4b6afc07f1d517a30cc859bbb1a1eac7
SHA1 e150b71bb7706658a565c255a14b732232acd21c
SHA256 c65b095e547c4078b6a33302431650e9a6a47184d9a1eaa2e7702a2895fcfc97
SHA512 dbb75decc269d6865e52e69690a4907b926d16b5bc87915bf940f86f73bcb8b2f6f56835a98b7ffc6396b73057e6ff7bf8d144dc1416d5b872191896de1c8625

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 3523d31b8ba35a1b324cc38dc69099e1
SHA1 0ea1746085b95f26be1028d5a39fb8c82052acfe
SHA256 49ff2b99aa6ea9a12dcdbc011e11b920f7933c5351923ab960888ad0d0efc5a6
SHA512 779a55b0e6a345de87eb8e0789579da1085ad751001d731e80df3453df8ce58e6af800ee9d3ac4dc1b041e6c2a2117db27cdb30f42192e0cda10ec8eaf442a91

C:\Windows\Temp\asw.44b0bcd3b23079e0\ais_cmp_cleanup_x64-835.vpx

MD5 fb62a5041a169f571191017ca7ebd156
SHA1 cad4bb40d4de930f3f5294bc35eb5042c86e662e
SHA256 bf4a19bf242ef39a81b7c0b2b0d053750ca6bd8e5a513188e664f6c9fc2409b0
SHA512 6e460edebb4d5160f3b72abad33d9dd9e28e71558e2bc96fbfb0720b16033cdaea20619842200fc4354d960917457367c5171b0459fcf3d403ccc1db8292f01f

C:\Windows\Temp\asw.44b0bcd3b23079e0\ais_cmp_idp_x64-917.vpx

MD5 8d4ed6a08d15c9700f9ba4f5839245d6
SHA1 1a78ba8ca880dad60fc5b116f404fc8f07e79e93
SHA256 0a77ba0d85148a2ad46a04ee226ed71b34fbfcb04f82c8f993472e97e514ab43
SHA512 16c6fd52b46ba787442cfa6f25f5a110783cfa8ed22dd50d01e1a9684ca4a24b0aa8055e9831f07aea22cf09ac6c3c2c3e519de7ef2c0bbc2afff0ec90b38722

C:\Windows\Temp\asw.44b0bcd3b23079e0\ais_core-981.vpx

MD5 dd7852f3476087804e72fb781a214820
SHA1 79bc2c50b4600e43aed9955a7daf6f2092e938b1
SHA256 0ea01be3e1e5a22ea1e72b687d606845af32b4dc4bfc3e7560b1f7c920c79755
SHA512 93267e246343362bea170fed81ead665fa705510b4aa9b53720f7bb4d9d9fbe60af008eba16dfd08513df279516faed423496b2cea39b3f7c29b6065aa9e4347

C:\Windows\Temp\asw.44b0bcd3b23079e0\ais_dll_eng_x64-8cc.vpx

MD5 c75834b930184f9aea316e26086ff889
SHA1 210ba5401da484939fcc3cf96c4bb903e081c87c
SHA256 9dbd99851858be9fa4868af2e45c425fdec428989289f905ee19040a0ef132b6
SHA512 1eaac8b4cfec771450253c7b911eda2ae922afe20c7f2326ec03f4eb1ce5ef736de0e3c39e1c25dfb220efae8b2eca5fd0e96c943b6f032ddbe84ba06665f56c

C:\Windows\Temp\asw.44b0bcd3b23079e0\ais_gen_core_x64-8cc.vpx

MD5 17dc567c3ff97ddd4310895580b11a66
SHA1 ca0c0277db2d5719be55a82a486d2b759b091759
SHA256 2d0378ef4b0e9b95c471a4a4b5902ab92487b9444660126d5eed69b66492a8ef
SHA512 1f2c3cbe66e4480f6b001ef29e65b18156c1b07f9e6c9790f629425a4abeb8e1cafe2547979f2851669cfec87db9768d20ce54fedee4fdaec9357e2f64452fdb

C:\Windows\Temp\asw.44b0bcd3b23079e0\ais_gen_crt_x64-834.vpx

MD5 47972754eae439cd5c618ba4d37e10d6
SHA1 99cffe323ae978930e193c86f09937dfbab83c4b
SHA256 751d68fb894edfabbccd2f0ed94cc9f123c64f05cad7c952c943b3269acf0198
SHA512 cbadcd1d675df0e8a2163f6e902cc20ebaa4bb867cbd0be4864a9d6b88954e40636f3f41b0915e21d6baa3c7ca39ce9d3089aa4515b32c32ff35fe20bab0550d

C:\Windows\Temp\asw.44b0bcd3b23079e0\ais_gen_crt_x86-833.vpx

MD5 8123e553366f7c82c702670d572b7da7
SHA1 b4ef6a6a2d46863c34cacab28faa6d1daf12a6ba
SHA256 b531140f0c9358762ce452b83fe5d6e2d415ca6271ed69c47bf0920e1d3910cd
SHA512 5743bc3441e71149be90ca860e223d80e60cdc95b2afa2ad6defaff1af983ecf46d40961a2e63585f223fb4e8325ab5e09610f7416384864f2778c55399b35d0

C:\Windows\Temp\asw.44b0bcd3b23079e0\ais_gen_openssl_x64-7ed.vpx

MD5 789e15ef5f24d52a29c473d89630855b
SHA1 bcec1a80fdd82b19f90fd0c8fca4a8cd33e05199
SHA256 07fc3d208d8a1c577fb29033ccda7de34b095017bb828da3bf7e02cc42b27700
SHA512 96dfd44349fd6819beb96eb1a5a8c85a59fe0aa3905cd91b57348f084ce7e616056f598ea8fd28fbe36060c0247a974fd914965bfec9d0ee5877cd6bf4f53c16

C:\Windows\Temp\asw.44b0bcd3b23079e0\ais_gen_tools-96e.vpx

MD5 2d2f352da3ea23c4f29f3dc1439a4a77
SHA1 2666911ecb2db10de63fc0607de745cb11bc72df
SHA256 81779159489dc7f0990d6618693563e2791886461a0d22c0c42fdf447cee9824
SHA512 c58b0b0beb8a9fb0bb88156d1972f257a8c7f16bb421178789e272e86a76dae5d3236db0b446aeb6c9fd03bc69ca67abab7f0eeea3ad17f99e2547634b110951

C:\Windows\Temp\asw.44b0bcd3b23079e0\ais_gen_tools_x64-96e.vpx

MD5 39e2f40b8acd0467449fadd0553605da
SHA1 ef0f86db6912f0a648e78af78685d1a35a3a61c6
SHA256 313816c1c9b97e73bf9e6b72b732a05065130c926ee3376db906bdf6fac661d0
SHA512 8c1dae79787fe5d3d899d1905319134b96294dcdb425d9e34535ea340e1a8fb9775b71b9f02848f74468f077a10f358842573ee45d41a0a0cf052b1b4ed0e3ae

C:\Windows\Temp\asw.44b0bcd3b23079e0\ais_res-981.vpx

MD5 fa578b58ee235a5ba7e88a9ab0dd2bd5
SHA1 eff99edf6a83db580afdf56d72fe5a308f746a59
SHA256 cac028e9a0917e4b67dda280ddbebbf8190f3b93f9b582dccfff632de6e5c0a3
SHA512 26a980fbf3edd0cedc2913d041a827da9b81230eac563e68b6ff4cb823290804e4244ac460600574c79a19b0152ce3d38618eaffd06e92e44da36abf89cf5446

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00011a

MD5 b6aa5f6d31f3a1da4f8e35f1981019e2
SHA1 7e694ef40a6e79e6bfc451602b6abb33fb474d88
SHA256 ed284b198d44ab10214f6fecdb94ea7792ed0ea0c2cbc42445abd23b1cf46f3a
SHA512 50648ebf63972f47673f58eb53fcd221658c17e6572337926daf951b95d83298a1b65c659f790c453044f402ace65dc337aa392fa8f0e834de8cb1dd105189a9

C:\Windows\Temp\asw.44b0bcd3b23079e0\ais_shl_mai_x64-8cc.vpx

MD5 3c32d14429c904425739f9e3f1d606ee
SHA1 5e9e9421238a0bbb726f2303a7e391a2802179de
SHA256 6d8e4bc758643b97e9c51b46f0afbae926d03c646b42f5316045392e0ea99f6c
SHA512 b110fb420033270988a7c5932dca9692248558d1eb03bdb1d23ff82d4853b4e02224b2b42e0e8654269c4310f59cc8b875a4f0897a879c7d95d2748db7215005

C:\Windows\Temp\asw.44b0bcd3b23079e0\ais_x64-981.vpx

MD5 56d58a0bb144781b29f251fdf604c195
SHA1 e655cf62f8771eae712196a0b607f1e9aa7c0c26
SHA256 e2314f96b37aa8dd8adfe79a14451812c4eeb38cd23dd86308786076369c7495
SHA512 12802c65c7d6fd3337f5fe6e4a291ccae6f93c29a1b43ac6d462bcd65163833cfed707bd9d40c3c35734f73cbfb9031fc0d48eb0c71d72b29a4b7406a5ad7d2b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4568f477cd5468b1b2c56ac4f3407b33
SHA1 0d45e6a092e905a0b1a027d4fb6126c8707f9033
SHA256 ae69aa4cccb2789128a62d8ae042fca7ec09e089df67bad7eb0d41077313dad7
SHA512 d1e0791e6f8708f004e52e6d07296d97948bedc754435ac4a66275d1e21e8e589f12c29c20e95e1bc75ef744498fd8cf19a18705a5b3db9238cf0fbd846651d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9125dc946778dfcb5695aad490bc7e32
SHA1 d84d9a6d48a3d8e6ebd4287918c666effd038979
SHA256 2addeae3c743b60136a7bd5877be985fb243090015d9b05e58fcbb46e1558d23
SHA512 84cd3fcf8459e4e6cc592408166f8557577eeb759d57511ede3e3f6062883f6c8c2db0b0e5b110edda0aaede2779e26ed361c277b2533ba96df0037540341b3e

memory/9868-16694-0x0000000072490000-0x0000000072A41000-memory.dmp

memory/9868-16695-0x0000000001910000-0x0000000001920000-memory.dmp

memory/9868-16696-0x0000000072490000-0x0000000072A41000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fbd9faf59aeb225cd19a9ed6803ae3e3
SHA1 00aa6abdcbf8577c2f79cfc9011bdab8cca377c9
SHA256 46bc67b76e721325dba01a742e0f716513e0b45be932e5df42d373faf9f75672
SHA512 1951a09486e9fd27b1e6e5c652540f22326692096b59b8f96794eba3b6cbf07789ed41e4107ccfcb8a2016431cf04884f323086f02a3ada9e246cd765adaacb8

C:\ProgramData\Avast Software\Avast\ch\asw96cffa566fd7bf13.tmp

MD5 fd1aee00b4b1bddb8bf62e51301389ee
SHA1 1e6cddb12de4c029c15544db512297edc73bd5c9
SHA256 d1ef91385a86d13091392f9ed1aa615855cb4dfc700218b7057b7e96b0ad6069
SHA512 d47be728bffd36a86bec36093e4f324b4ce1e690d84f435dcae952a90080b9bc284b32c5bd0448dc1096232e5b80352369a40a5095b32c98bd0d693990d73f47

C:\ProgramData\Avast Software\Avast\fw\asw863b17f4b3bf68ae.tmp

MD5 8a30b27740546e1450bc36d66d5c229d
SHA1 80018e8c66a14aae7c014f5fcd2435419917b7fe
SHA256 425012b48ec1638d0f3f29060ea475a37152994c841c47dc0244063dba2ef254
SHA512 0053420ec01554849abff44b53265b8176223826d43046f377e8ee7ea42ec0e0295bc1f0c1774e34e223d7c976e6cb9695f9986c70ad93b8673473705749e13b

C:\Program Files\Avast Software\Avast\setup\ais_cmp_fw_x64-971.vpx

MD5 fae29167bb65a257c1f53b48436691c0
SHA1 ccebd8e6850a02bcbf41bde8dd185627118b29c5
SHA256 b0ea8320ea1061348e4cbd5a35dfc2319d100b0a28a6a4767392b58146e87a0b
SHA512 519a9d60d8a89c4ddeddc66743ed56f0cd4bb953f8145c2c06a4a6b50c2d790e96a165d243db8f13d90434d9606448147510868df89cbcdd09b803beea0f593d

C:\Program Files\Avast Software\Avast\asw80247fed4edf3838.tmp

MD5 cef7d858723feeac3c910eec6504d083
SHA1 3081fc61171f480a9e5bebbd06788f362a986300
SHA256 2b6e9dabda70c090a735ee328147eb69952fef6c9721ed0afb6804d7308d9579
SHA512 15486e65917c8bf31bd38d8f92560c207f1f55d1f53106384cfc457eed02349a04146f7ad59fde5d8d95948d19787c114cf918f1c93968530ca5f93ad2fe62f5

C:\Program Files\Avast Software\Avast\asw6afffacff9f8daf7.tmp

MD5 8341e090c34fc860949ac334ff599f9a
SHA1 bd7e48225931a699b0416265428205d2b0e2f59b
SHA256 d3bb20b5bf89cbf9b28703e899cd008722f810aeacb03ac7cd876d4bac20d96d
SHA512 a0e79d207e5dac27c713b6f445bf90502eceee2092a281380c90bd952ad7fb9fd5123a8edc4eb75493b0d8073d64d7c83c989fa897aa81126d77ab729bb76f6e

C:\Program Files\Avast Software\Avast\aswafeb5d95c8a35759.tmp

MD5 209eefc0b9321750a0487f09c6c52a46
SHA1 cc18eb3b0937bc583e8d2440c796915fd0c20a69
SHA256 cc059c8a3aef7b819088e5d1d5d34eef8e871af7d93ef3429198207bcdc31054
SHA512 20d096ad546ef5d7ac5d63a88cc2e14b1b8a73ba5d24f6a3bc2d480a3263d71d17302de7b6059987b3324cf0fd27f3dd7c75a3780409acb709aac8569b6bea7d

C:\ProgramData\Avast Software\Avast\fw\aswf9ff9f4aea1861d8.tmp

MD5 2fc4e6e0dc7816f855189f4018d1c935
SHA1 141f4aaa087369ea2b872e21b292f44afa611e71
SHA256 5aa5a5d5a9061a50c93893f88ca06a53d78550640c417759a44341a11be915be
SHA512 6f3b2ffc4260ab36b1e02206c9cddcbb8d9520619436157947179031b18585c0ccc57fced9860198fbbd74e8781c84b23d5f0b38b5dcffcbab731e1a60cfbede

C:\ProgramData\Avast Software\Avast\fw\aswd142980cadc6d73c.tmp

MD5 b27bb54e1fce83e05eb13c960c19b357
SHA1 5b7931054732cc7cea414b90cb37aa329122d7a7
SHA256 6c26bf93abfd6f2878b608f6169e46be2365644e9de78c0b9e3177f3d0aff0af
SHA512 82a5f72ebe55e79a6cdd7449aede0945db9734146c4b6d08249bc31010393bdbeb65de861e6cf24168dd25519db7d55498e34eb3c85c6bc5a1f707e2a0149e90

C:\ProgramData\Avast Software\Avast\fw\asw469a228037a98512.tmp

MD5 75128eadc720b56babb24ac629172155
SHA1 83bc1da43e4f51326713e43a44625987507b4467
SHA256 130a4428ee45f3a17252aa797cfaa35d8e71070dcccbc6059b31eaa087c5f5f8
SHA512 da45704247caf68c7deb59f587f392eb431a1ad89a653b78b7d6af286f6c6af7676575fcbc310679e4043040038f5ca3e0ef0167f6f6aa199bd4007291a39c57

C:\ProgramData\Avast Software\Avast\fw\asw8c596ce54b240432.tmp

MD5 4d0a40f5714712c5f1175769a93666ac
SHA1 2c57f1bdebe1bea9ccfa06bf42c967154d35dd41
SHA256 397c21a562d5824dd87e2c34a60f2b3e8b678d52a7bc7297ba5828e4d7b9cf4b
SHA512 953ead668e3f48e820209674dd894a1fc6482bc53d3143ddd45a37ebf416982f126825eeb7f8a9f43644d53c2c47b420f95c95289427765ab14b28ec476f1e89

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3f66ddc275aada8408da411f9b7169db
SHA1 4f6dbca899200b21494d61eba3da12f4e499996b
SHA256 979ed95cd06f9f1e1cf62cdd758a1abf30008f77db421dfc9522ebf524bd88b3
SHA512 4cd88826baa0fe689eac2b49ee00aced403857b6a34874f78aa87c4b83d96e3afd77c4c83e2fcbfae0965b3d8479ced5971af26a26eb5f575c19ac8f3453c64c

C:\ProgramData\Avast Software\Avast\fw\aswb63c6f039eeb581c.tmp

MD5 60424032333d4723d7f4ff7543a7aa76
SHA1 1fa9fa26b21439adcd5258727f9cd0b954d0f5a1
SHA256 be79affc10f1d93f9ae438c6320feed7846bcb0950cd32e8a564eeb59203b6ea
SHA512 859a800dfd2de9f0bc0f5e81a8f0ab80eefcb56fe0a9e634ab8cd13881ffd26e13448529d9a0d096a61d5f1e410eead06dac75a91b09faf7f692d8884a41456c

C:\Program Files\Avast Software\Avast\setup\ais_fw-88b.vpx

MD5 4a1a96df9d8c281177c6aea1517417be
SHA1 193bcc5992405a7724127d9d6c10fdc5c0ab8f12
SHA256 59de1479a7c98c667d479437f99aa2fcbc6e0276d2eedf5442784fb5fdd98c58
SHA512 0d2192d121b4bf3f7393b69c18de433833002956f9d48dfe65db608d64568e58cdfd7d92d1dd04c38d74402b5a94a823b291a45e7a9f07a1288be4eafc6a6d08

C:\Program Files\Avast Software\Avast\avast_driverupdater_setup.exe

MD5 efee6c561bf0b5c58b0564d18ae7087a
SHA1 30894f636280c3de5113dd23cab248191ac4df93
SHA256 b088ffb66ca78e56fe1c7c9226a81168f91ac0430173327d8ce6b09cfef09eda
SHA512 9ffdc0230d6d69aae6aaacebac30a7efbfa9c6de472368e16ea161f1c637cf1d5e842fcf6068350349c9f56ad3822b1968fa7ca1eb0e42c5e0bcbe9f0248b0d4

C:\Program Files\Avast Software\Avast\avast_cleanup_setup.exe

MD5 af203baad1f5aa9589180cb38e6c921f
SHA1 c956ae63de2847a38545d6bf99f231c06c207177
SHA256 c0020f4a2868cf19ebbe1e15280c313b418444002d31463ed4df4a95229408ca
SHA512 22b96c00ba703fe0f34e1d678abb23afec7a65ad37cd781e49f49d87d644b792cd79afbc83770589e5ded06c6c2f18b91a0e81ec9556892173a005c4995a91f2

C:\Program Files\Avast Software\Avast\avast_secureline_setup.exe

MD5 39ad7dc1fa8e37fccc910fd1ea7d07d2
SHA1 7d0b9227a2bbb1592b460d7d08677f734109d8c3
SHA256 18f26d7946592dc2ac456f2c3628d84836fe3b94128255d693e4961d778c5e8b
SHA512 dea90539275b7cac02f60823f12daae2671d331c592fbf97b7f9821e3437dba569f1b9cd333f703ea170c5e167f8f4d51a8283c8f77a6613d958fb8bbe38895f

C:\Program Files\Avast Software\Avast\setup\setup.ini

MD5 6109b5433ff25ffdb6e2fe0d700e49cc
SHA1 2938862853a39671b3ef7f8db437ed06ec0ff6c2
SHA256 c7ee6ff0091b454c790f3b17dc5bd00b5b5cf6b2d5f369399b90ac4a1fce92bb
SHA512 974eae43a637884ff5ee58fadf6ccb0dfc9b76d16ac1ad89cc2164cf9f0b6abf5ae92c0af39eb176f3c3ee1c38c17263a45324c09223b89328ac1f626a7d05c8

C:\ProgramData\Avast Software\Avast\SecurityProductInformation.ini

MD5 b8a89d0c3c48a1e258cd9e2c84724012
SHA1 b81f092df1c592e38142d02f4710f0cf7972d6da
SHA256 23c1b87fbf6eab4242c2e582f3421c1ac5632f0595e2a36693619a8469b890af
SHA512 bb6a4e2020c8c3d53a63b6ad39e4358c8b242d8bcf5e1695cc3cc225a7eca4f4d2f7d58ae1f31a9667fac478954cd193efaa07ace07a46b2606129677694b89c

C:\ProgramData\Avast Software\Avast\avast5.ini.tmp

MD5 a4bcab5b7bfe99cf695027f7ec121295
SHA1 c5f3ab0e1d573c1dee2cbdaeaea091e093ad8066
SHA256 699aafd69a4239d122a6d3f1f92eae7ec8f3f0c44dfc04e98d21f1e8d5e2000c
SHA512 294951de08de8aac902ed90f88c8981afa8656d0f591b01c03b4663096ed5dfe8b2f51bd9f78a630685aec69319ccdcc9021abdf188b735c1d9c9debf44b9faa

C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus.exe

MD5 2344ae43f312a6b0329bb4c73e8d497d
SHA1 655523704145994b20c178a548e7b61565c2ca27
SHA256 eba7d0df07fda8229755df38b513c751ea7b83f2163cf37368cb09763d92edc2
SHA512 201b07fb720766d8065f416652f4c0afa1200e9aea7e6882e9de3808d69a99673c89ea139460c6bdc6687c05dc9135acafdb5b8f5d4bd4087c0547e4e99d1b5d

C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\dump_process.exe

MD5 1c04c437444d3cf6eb95ac4bd61a96a9
SHA1 6ea354d9c39940186f92749c8b180d5679d7887c
SHA256 473fb60161ce8aca028dfe95745b614cf32c4b74928d9a17f53f3a34d897ae6f
SHA512 e16d6de2135fa282127007d8e8df43158b4b88aabad195df817d649195fce2613a1f00f7d5c247bf8da2c6650199ac02d07ac548cbe7d46a29fe6ed1eaefc96f

C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\product-def.xml

MD5 f688b8e5ed2716f3aa67e4e65eb3d02d
SHA1 5aa549d8d518571e66f75e4f8daa016c818e2356
SHA256 a1a09bad86329d618e67e323d367b24c244cf693ccbb6214918e229e18c58f99
SHA512 55f436e6a0685943c1e5fe43faff8e4e52f5c5a26517da6a6f6426d2c06c1a7eaad5a212edd5fc4cc8a093ae6822b52e325752f8f6f043ae0e41a23d3dc1143c

C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\bug_report.exe

MD5 f5b4f4eff871a151cc1923016218bbb7
SHA1 75c7d4d1ae272c24e3446f7af82f181c0066994d
SHA256 10d10466b725991fb3e79cc29f91a603bb1b041f3d7386cfbd6e4c8307981289
SHA512 8a8b6ec3ad3a0b09e63936e87c5b0c341e3b8306b9781ed044c44b02ede0f04a4cc329c84cb61c00623a92a27df0331f595f00594dac58b31832cfc0e4309f8d

C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\icarus_ui.exe

MD5 59fa7564e52436739cbe6afdb3d01eb7
SHA1 af70f914d2dc20ab55633996c52e6c1d765965d3
SHA256 ab57748f6c1079e61de1397cc853baa1ebc5d6dd6731227ad26d6a073dd523d8
SHA512 8f15a5ccf7ecd4d2698ba3c571d22bc873858e5f817cb96f6be2a08094f9bb2bf72ab75a83cd446e558b05c54799cb69912d086bc7355f415d3418a4389bd4b9

C:\Windows\Temp\asw-e41d181f-21ed-441f-96fa-8eeccb956f87\avast-tu\setupui.cont

MD5 20eb0c685299b54143bea351c7b30f34
SHA1 8b85488d2c3469e821d82baa848ab063b50e2ddf
SHA256 fa0c81bac68ef3134599ff8cc558fcf540b050808cab02f74d1aa1605dfd4207
SHA512 188c2766b5d90e003d3b3fd540df6d661dc22f0e5f95fbe91f82b632766b31d4b7133b38b40af14b1405c300347d59ec286de7ba9d7aa2cf8d6db1b2a86b47b3

C:\Users\Admin\AppData\Local\Temp\D566D7D7-DCD6-471C-8109-BE0AD33199E3

MD5 22417b5d5eb168147f2c237d658a7163
SHA1 6ae67daf07c0a187f397923ecba497e5ab01ed58
SHA256 f1945b77f21bf5b8174bc94d0d69d4446baffd6808185554f8ae541e4254ecb1
SHA512 392b79a63b451495cc81877c288c0068d6c159bf0d7ce9ac0cc290128e57a5a1ebe0569dcbab85433448b3c1928be03cf01300ec7ae99573cfc4ef8c4c9b3cb8

C:\Users\Admin\AppData\Local\Temp\F07D8C6A-04B6-4025-869C-70A788D7B5C0

MD5 933636a912a36846dcf3604bcb130ed5
SHA1 ad92aa95cf78afa6774b695a367ee8f30f242947
SHA256 fffbda3cb8a24b39eec6369d2c70c44fb9955f504c16fe737ed041f95c42aa72
SHA512 ec9466286685bb50a6272f4ea29cf93aac3570a3c18368029dca814439321528aa31cf7f74211f3c30bac8cd7d7f413083dce0d97a2379bedde3abebfe8991bd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3866c40c6c2429be75d70a5d39302924
SHA1 9b60900f18fddc0c6b28e668c0acb035b063d6fe
SHA256 f1bf4dc1c0e6dddcae3d4dfecaaf30a4a532372d7f6d3edc0d7e9b9973126fe0
SHA512 2dd4f41193ffcba3900bce416855fd24650d182c7269ea558aeaabf940d1d01355301d6cd7dec329040cc4283d73e2a4619ea5a40c341d73186814033ae52476

C:\Windows\System32\icarus_rvrt.exe

MD5 97f5d0caaa1988c95bf38385d2cf260e
SHA1 255099f6e976837a0c3eb43a57599789a6330e85
SHA256 73ee549578ded906711189edcef0eedbc9db7ccbd30cf7776bd1f7dd9e034339
SHA512 ad099c25868c12246ed3d4ee54cef4df49d5276a5696ca72efa64869367e262a57c8ff1fb947ad2f70caef1d618849dbab2ec6161c25758d9f96733a7534b18f

C:\Program Files\Avast Software\Cleanup\aswCmnBS.dll.ipending.81f33ccc

MD5 6425512ddb0289d13de62dabe8fa5217
SHA1 de0048ee704e181ef341f1f601ff937617015c4f
SHA256 9a064d6140ec7edacdb0746028f535f12712219ce5a1bbf6c9836992c58081cc
SHA512 abf6e229ae6408bf44636a91b6e4b132b350c4f7f80a064631332e184ef1402fb69316e195de9052fac840806125f5dbe4f94e82267f0e1cc149046b308283ab

C:\Program Files\Avast Software\Cleanup\event_manager_burger.dll

MD5 47fb7ae591571b836c723eb960fcb041
SHA1 e81f37cc4e3969d5c343ec5f64e42fcbea6efcc9
SHA256 8ad1a2edc70b0524eb039eb51b8ceef6a9ada19368c19aa85403ab8e7829482d
SHA512 21df30685a540eb2f145fc480f98db34809b8fefd52e836af6e16b9dc21217f367d264244fc1822b47dc76ece20fd63c7f861ba704a1bba8b09b224f8a0f3324

C:\Program Files\Avast Software\Cleanup\dll_loader.dll

MD5 eeeef30b67a2f3830dbc96375f7385fe
SHA1 753a4ef8cf919cf507fc4ab8eaab1136786e13b1
SHA256 bfe5bd2597b1812106021a27cf2839748f5e0b190745ec77185915d4c5fbfce2
SHA512 71ac77beaf7d68556c726ae582848db4eb053aec805158393e8e0b489fb740c44d48eeea7f5f2e83cdd45a9ea438cdcf45c0164393a04294024dd039e74825c0

C:\Program Files\Avast Software\Cleanup\serialization.dll

MD5 072029465fef9f90a3fcb3942d47056b
SHA1 ba192bd3a4e74d124d2a90f301a516182a82fe75
SHA256 1137bbe74aa899c18c4d440e9a5aa3801ab2d45fe7bcf469f4a498fdaa4fdc3b
SHA512 bf9df71e1bbbab90dc6cdb100fcbfdecbef66d87d79a3ac7cfd831bd0876e7d517f6191046956d3018c1030e44da2916c7fb21a724f2e86620d30663b543d9c7

C:\Program Files\Avast Software\Cleanup\aswIP.dll.ipending.81f33ccc

MD5 b529b31e6bc07fe73bcc60a0939dd9ae
SHA1 a93b2ac9d84a064e5d169b6dda435e9b77c0bf04
SHA256 8368dc31104fcb6690029ef5e3da867a5305de05fc91173d67cfccc8a8b62cfc
SHA512 b030591fbe86aee89205993b4ec9d79fa2cad990ed346e2824362595593c5bde5c51cfd168e6802f6ec182b2a3b4db4200f222c9a189f0f8cceeff90cfedcc62

C:\Program Files\Avast Software\Cleanup\avDump.exe

MD5 19ff15f473001128ecb5a1ce745c2b43
SHA1 eba7c81702573092c5a7b31069ece43cebe59244
SHA256 d397539bcad9cd5af95f9d466af255ffff11e97efd10fbe1d114541f9a840c8f
SHA512 09ca934a90eca17d637186aa192b36bbf2c0b4ac25d7a8d715489f49c92e043e2c86d61fa0a56d68ba41e813278fac7743636bc390f5c8fdda65019a530fdeac

C:\ProgramData\Avast Software\Cleanup\TUBrowserCleanupTC.tudb

MD5 18a56639759fae7d4cb1f09d52d3e7ee
SHA1 7197845f296c3c22956fc2e08eb3831f785d3ccf
SHA256 bb7a4a5a1876c82573416be7fd1dd2d07fd8388b50f6db578f262374e4dfb47e
SHA512 b18f433944ae36335006a1ad96c4b73178abd1f2ac4c43f46df9dbdfd82d69bd10dbf2cd252248f4a24ad57f9d83a2374358bca6704b9a16bb12961678fcd337

C:\ProgramData\Avast Software\Icarus\avast-tu\icarus.ini

MD5 00f99b40e0af180aaf63e580f5bbc773
SHA1 4e332d0eae3d0b3c140a8de6939196c1e1f8b639
SHA256 66711256bb0d0922f7a78ecb701a214bb033c7d92f1522fd42fab1203f156f42
SHA512 4ee6289466072a27d6ccb83b455bd28febf74d1802d11368b460d9f0522e2c9b1815cf0de04b866825c1f0b01a2ea624c508d50d0bd81411f1bf25aa747a58dc

C:\Program Files\Avast Software\Cleanup\wa_3rd_party_host_64.exe

MD5 9e5e2d7147f01e5e92a31b092f57fc95
SHA1 91885377a370ed1136c1d22349030806842d5e4d
SHA256 a36ac245bc037d63d3359166174a1c1854ac0ddf580e02eaaaa4a1eb0ab40685
SHA512 562996cd6273ace2fad48ebbeffde4f4e6ffb3d2d557999baa0e6302b561f30efce4e96ef460df5ef650e3cb47d0e74c7245c77fbf70913c2857c9d7529af913

C:\Program Files\Avast Software\Cleanup\su_worker.exe

MD5 18302ffc6d80bdcf0937120e7a7575e7
SHA1 893c8e6e0c853d3fe81128f3d7215de603072d26
SHA256 33f8ef2cac004911d70007a16502d53d3b9e59f61a8aa214ceddd3e1a639a643
SHA512 a8d08b4746aebaf4bdb469184450808614653f5344e2f4ba2b600a8e0fb400c54fb9be78fec98a6e92def303f04a7a585598fe6c87362654e087d3fefe16e555

C:\Program Files\Avast Software\Cleanup\su_controller.dll

MD5 7269fe5c1108dd398fb54abce66eb33a
SHA1 978eeb5c58348dd9039091a5a16100a63bc95f73
SHA256 455138c23234939de33aa95e18dcba157fa63b75be5b2f702cdafc907d5b2fe3
SHA512 beb1ee456703d396bd0b2ac4ff988e0c2f7f198b2c83b48ed21b45356ed403d82279d7937b687c7785b991f4c9a7fb5aee44ba4bb6e5fc0e31afab3fa937adaf

C:\Program Files\Avast Software\Cleanup\su_common.dll

MD5 893b1a4f9f8aad531fe466a60b60365b
SHA1 c2fcc90692c1de3d2fb11c5c5848d6a147eb48a4
SHA256 ab23d983253853539c1048ffc6ac0002f0447375dcf320d86a38e7e16b728467
SHA512 950e9bc20399b65fdf347707cd440b934aab6b27045da18ef8befa4c66a65331f53ef6cb87970e0e4ff435a1bfaca6a15da9395bc17d6c599593b4d3bf051df7

C:\Program Files\Avast Software\Cleanup\su_adapter.dll

MD5 960ecf795a3a4e7527c7131e91639a6f
SHA1 f264e8bde3b98e65c07e41ba574b4cf088055f71
SHA256 15ef5ae4aac327bcc9c10a05dcace52ac33cf2bd63ec64aeb8752d52b57f2a35
SHA512 89e25da836748eb47bb47dd8486ce7d3130a6be9473c44bf0f1715e72d5551a2aaa6f75d4ebeb0a1716a8f79de8a262ce93aa8cd2dc1806b00c8ae78aad2d18c

C:\Program Files\Avast Software\Cleanup\libwavmodapi.dll

MD5 fa4883ef89babda6c2e986c464b613be
SHA1 81b1a8103920e3cbc336ce22ad4e0c7fa1540681
SHA256 cfe0101ab49439b75ff1e13df05ecac59a54a329b6cb830480c3635a2eb531f3
SHA512 17dc2c6f2faf23fcf78f8cf285453c4ec7f0576b8f32395fecb9d1d39f1321c2b67de67916cef6dbe62df9e676ce5a1345a41d0c5b45a4b118c12ee06c8d8a10

C:\Program Files\Avast Software\Cleanup\libwautils.dll

MD5 7f85a76eb93f63bbe75352a7f212d848
SHA1 d007d0871c357e0cda036ad227c3a2f4d8a6b88a
SHA256 cfe4d9c799c377609309aabde6de25f956333d68a76413e56ae3d5f4524d1ed4
SHA512 2a9b0733a03751ea2571114bb8bbb9a4336b9681a5eb4886eec4abd55171dddc92d1c8430395b9d12c01cbcbf83a9d8a4b457c07ea00467b96d08e49154e40f0

C:\Program Files\Avast Software\Cleanup\libwaresource.dll

MD5 e7c2840726f82903369b546f5a0c1648
SHA1 f9111b72995d50a03fb884441ffb14831d6051e7
SHA256 e8e0417e309b4c0b30df01007f3db403e0b49447d376e05b0035b0bbad21c238
SHA512 1eccd80ed67a5432fc0dd54c3d16eaebae96775533dfd348c75f783c452c5ddbd4ef10671fb68a15f73116860ba44aa53739e059b30b63d81174c84944999010

C:\Program Files\Avast Software\Cleanup\libwaapi.dll.ipending.81f33ccc

MD5 3ccc58d1603b95452743cb86f67f7f8a
SHA1 6897b4ad545d81c9fe2cf4ecf987093e5cb03489
SHA256 86e681d8dffb560d73ca0d2523e6aea4cedd97035a65eb8f1b8d0bc86214d148
SHA512 28502f8d832b49ffb624323e725d170f2b1a3756c1a4d5f29172b603bf451cd55fcad94673fb56cc7e6767246f854a15bf09a35a513ac1d96a9af2b0d2178834

C:\Program Files\Avast Software\Cleanup\libwalocal.dll

MD5 562de4b9dbb51bec9361b832b5efbff7
SHA1 5b512f449914d4deb4d1e4fa4d467946068af1c1
SHA256 c3c99b98f69fbdc9654dc368ef699314f88158aa190df9bf950010e6df242754
SHA512 aab5eb532c44b47e1f184301389662f7786c938e6821dbac105c8180728d31348b613863868ef96f4ee413c3e3eb54b00d5047e055139657a16295a3a97421f9

C:\Program Files\Avast Software\Cleanup\libwaheap.dll

MD5 b1114307ac17601b7070a5e45b35d7a2
SHA1 378a15c5cb3006c5b9b253f549183e1e47d04a49
SHA256 3591fabfbc4ad6de7fa9d5325cf7163c43fb73d82afd12c4d6de03b739fd1f3e
SHA512 1ce1ce32c9ca10960a7668bc564906c690affe11ece0057989709c5044835ce3ac3da833996bb8436ae48fc3b0bec3b272ef27adaaf711863778dfe67850faff

C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe

MD5 b41908c0bee5f4e7ab1a06a5f4381175
SHA1 38302744f6dc591a8b94799cb423b555b73b740b
SHA256 8da6eb4c787b7421434dd8a4090d1f5ec6279d2f6b1942cf4a6e9acb432e9ff2
SHA512 248c1f7687097f56f47cf8f8e8f788904e15f81c9a8b96ee6f3b720fcb694859b0836d2c4da7ba1bc2168ab4feef3c3392367a2ba831276898d2c85b9f68edc1

C:\Program Files\Avast Software\Cleanup\servicecmd.exe

MD5 19fc118df44a53ec433aef82988775ed
SHA1 a8b4ab2eea78ae25f759015c5c8235befd4c3275
SHA256 1ab96088123ee6c309b023e3bbcff008b8e1e29ddc8bd389266a34eeeafdd5bd
SHA512 ec4219ab91df6d705e69aa3b38a79920c743acf9ebc0baae2c39f07f1da5faedc828dbe6da1d3abcea462de5a120637aabcb7602cfa79f71b8b5327b321af1cb

C:\Program Files\Avast Software\Cleanup\pdfix.exe

MD5 9c64b70907318dd20478ff7932cf8f67
SHA1 905993020dc7e99d0857a8218cd2943afe7b9eaf
SHA256 8a8482dd258f9b6de549796614d80abd03b161383e65e86585ff8c53ecfaa164
SHA512 310571a1f3590fe44c4cb5ce8f3fabf844a5e6e6f13c2590341c92f933f0f2048b7de1d159cc20baa0491a460daf8e8bc9cace252b201d07adbe932e5ddb516c

C:\Program Files\Avast Software\Cleanup\gf2hlp.exe

MD5 5502b7e0a8a0128a91b992de8f0710a2
SHA1 bebe3fcee854b530e74a37a0a027779c17f754bd
SHA256 a5d3c756d7f5cf99b93092d1c41761fa9511dda5d248921ad6868a985457c528
SHA512 6a6f992f9a371272f3d07402d8068153f29de6d7e542b4be040538a30d448ed57b29527ed25107ff89812115b57c1439a1e777a345008b50fe280b81c86ec015

C:\Program Files\Avast Software\Cleanup\AvBugReport.exe

MD5 0c31aa9899982389e80a5f02b44bbba4
SHA1 f4212ffd712f218bad86eec6b1404995dc06e1df
SHA256 e6f923e4bdc0c8c37d9095fc49ebfbb63b3c32705d10a43176df4fca2666d1ef
SHA512 7991653307db31cec9245388966d5bc0f0e2788781b38873cd42ba90c52960190e22db3cfc7e3fbb004891ab5e6dcbc9dd459b8021bedf0a1b93e629d9273b86

C:\Program Files\Avast Software\Cleanup\autoreactivator.exe

MD5 01e31779f8d9544d4db4be1519a82257
SHA1 43e9542a2d9b7b23e9e81372ad5822d28962efb7
SHA256 b89e953bb2f1c008e5c66dca09d5b795f9cc8f76688e57178e4ed823901c039f
SHA512 6863dedb28475a6cb6efc893cd14a615bc1d77f7304f7d3781eb0c0fb305adadb622d6e5898ac6eb91fefe9c6b6bdd97c62e04df47dd38c79dfda7147128bdef

C:\Program Files\Avast Software\Cleanup\asulaunch.exe

MD5 2f9e021700fe5156cd59f8e7723b323a
SHA1 69c99a67a1ccd60998f794128cac632a011cba74
SHA256 9bea473160833c0eaa97b71838d9369b1a58c1e7d9841b113a0be7679721eb04
SHA512 f754d43811c3fbd71f124487db7dd79d8c8edc86e7f2e36ad235eaa54fdd08aac966854c80f03da74e5fc9c8c0df6f2933317b57336fdc9ecdeef5f5602aa32e

C:\Program Files\Avast Software\Cleanup\libcrypto-3-x64.dll

MD5 378fa3744d2d62d5875678b447dae5e5
SHA1 e6bf904938854e807ce888fab54a06f1a154bc34
SHA256 fe242118c96866cfa3045e169579d3a4659c4fb2768593f652279b0c9768a61a
SHA512 ea6af6eb03689a28b9bfb75b6fd0b7f5423b0c3a303d9c39d483fa50536b37f7d1754dc22996924c3943a2eca5275d1abccff36762f4d46c23a179315f114dfd

C:\Program Files\Avast Software\Cleanup\ntp_time.dll

MD5 c249cc51de8125dc257bf537faad9340
SHA1 567565337ccba7a24f4082eb0a93222909ea1bc5
SHA256 0c1395a7d49274b94fadb6634a309f0eb9eda99ac6451fc4e1fe7c871054857d
SHA512 118a8d04383a121b86a04b967139bf18477accebcb1d097b0fd61eae6c74224e54f47f5badfa985dc78314de9db273edf6a0e754d711f72f69d1c4b05200adb0

C:\ProgramData\Avast Software\Cleanup\usercfg.ini

MD5 92b692184d3ece84ec71f57c32aca7fa
SHA1 9915718c65736a534f0ef6ede6ca81f45dc90f9d
SHA256 0912d1681b8f1bb0682c0c8d2540efff3c78056b1c07f82571526bb0a24f9743
SHA512 cdee25fba36d2d5700209f388e5b68b677dacae4f2a43f93e7eceba60b560a54dac2412356a08d78f4fcc4c3fa810de7756f860d72b33f31e9042cee1d501bcd

C:\Program Files\Avast Software\Cleanup\perfstats.dll

MD5 85a6ab8c3efc7c76d96fae042f11558a
SHA1 be402adb6c80d66188dc99efa83e514246183ad9
SHA256 d4e38fdb30380a166bdbb9f390cc1cb15002f8219cf870812fe2f242943e33ba
SHA512 a23a4de4ab62072417d6d36b3e309294e282aa76571ee0939e970eaf00c0de3c7d1da793364525513fddf3eb3da201f52141aed1296ef9ef9fe9ab0bf16bae43

C:\Program Files\Avast Software\Cleanup\nos.dll

MD5 562bc5b691cb00f98c8c3f70ddce2f21
SHA1 b760c3ce495ab2b3b12d3d1613371760553d7231
SHA256 3aab416bdf4c1dbbc9f48c1d0678e6cce8192e0fddbee8f22edbaa4cef008180
SHA512 939b71466baa3a6144f62bb7640209a766a15ad34ba541d1ca5439ecd8cc805f6b943db20092e933c8060b87381a4af8d4130967fe02213f64bcf50896c9f2e5

C:\Program Files\Avast Software\Cleanup\commchannel.dll

MD5 f2cdda08599718118e66489f1ae0d9f7
SHA1 53d6857cb6e2cbecb893b5b9b705d068d1d4b76c
SHA256 7a40d123f94a1995126839584ba1740f43d951fc0a0db43a864d7b951de46d21
SHA512 beeb525ca84054ab5e424f9e653f3434cda74b24059b67709c1160135e506286669400fa7bddc9c975ae35cc339564960dca00dfacda7e8602933c9022a25557

C:\Program Files\Avast Software\Cleanup\module_lifetime.dll

MD5 a8a3ae000f26f715bc619e0b93383f5e
SHA1 40649491973fcbafcaf43fd476f0218e4bca839d
SHA256 ab208ea255309b03817a38729a0f8d21bddfa670181f35f09c7e8c76447de808
SHA512 d4ddbb7f46ad7e4dc936ac2f6a7420a53bda131bef0040737d5c5ccb05931e9cf26a289ded7e3f130bdf8cbbcaf8b5233f1f24e5e2013ba93f28966b6c92a507

C:\Program Files\Avast Software\Cleanup\tasks_core.dll

MD5 fbbf48a9c0c1c3776bc449bdf60744c4
SHA1 9956f47e369ca9ca5fac1ef19bccb5137c2e8174
SHA256 f5d3121e4b7b81c6c96790f2e7c2af7d168fdc57e012d378c499690f760b652a
SHA512 89dce2e3be7f7cf99380fbd80b297d1a11d3362b0faad46d4373efea0d3f0ee8820541b51504ab53435d4b6f62448db29d69a30d5fdea7601171f0fdaadb2ded

C:\Program Files\Avast Software\Cleanup\Setup\stats.ini

MD5 dd63505e2f653148e7a053162ddecdc6
SHA1 e609e5b47554dc480d10e55a311156be46e5d8e3
SHA256 0c3a94983e5edbfec15d2a0ede36181849c344b5c328a5a03ad345b79f3dc124
SHA512 395d2f6d22ef6b87c41cd724b16b307066cfa46a434569a1179213c7e20ddbfa13f8d083c24af0eccf68d7cfc54e5d2abd47dcf46eafd06618bd53a65f831c39

C:\Program Files\Avast Software\Cleanup\burger_client.dll

MD5 5ef9f7940966be05211da76413c9d77e
SHA1 e9de887eb2608f116e08641caf4ab1702dac1b3f
SHA256 9bbd28e8d3a44793d0b75781156ea397d00d405ecf58ffd995e04a44ac6d2bd9
SHA512 930994dc2385ba10bc40461c29e7200f1b8f4c58b3713ab0be8c72064bff609338805c2186d7750a22d47202cca0def04067560bf4d759ff4ef9e608b7320aea

C:\Program Files\Avast Software\Cleanup\event_manager.dll

MD5 2be8278ebdb9bfb9b0ddad3b6b3564f1
SHA1 d2e80f302f1acba9bab8164b382e7b9be686c8da
SHA256 36f7524ce8574ebebf6d379c660527ea9b1a8e04c7a7a908d520a23ce281f62f
SHA512 0589f931f85e4a0e15235383ce1a91edf3dc48a757bfcf6cd27353a835f5c9f398c5e00ce8238e84948edd15857c8c0c49b08d2769cb01ef95f21bf427e89ca7

C:\Program Files\Avast Software\Cleanup\log.dll

MD5 088cec095f241af492a073f1be2a194f
SHA1 24f10fed27c3fdee2cc9f676834b7114c9e9adc6
SHA256 e45cb6a906c95d29e46b86acd07e02c7175ff448fa6e2b909f01b54d50d6798b
SHA512 b0a2edbf08e14cf0585f1b56108976cf0af37eb4947167cced63f8659cbc9212faa5fc861148e3972e0291ea60366c2cfcb0cc7b02877fc577a4169a7cda42cf

C:\Program Files\Avast Software\Cleanup\event_routing_rpc.dll

MD5 50d1ca56777ca7741a07054551948022
SHA1 bd86a2e6075e4751438e7c40a7ba3463786af7aa
SHA256 baf83cb6cdbaf1348cc5807398879a9c798e0ef046a74eb1459979b95dc2b6d7
SHA512 e7d9f2ccc810676b4f168a2d7ec6c5a2ecf568dd389864b7e3cc0b7ad7c82ef7b186b29733dccd0d202ab6ed1c17aebe24fabcaad29d14363daa88c6503c5555

C:\Program Files\Avast Software\Cleanup\event_routing.dll

MD5 a93758bb083c387b34bd71ebd2400dbf
SHA1 dd415eeaa4c52914614adde517dd32ac69d19d71
SHA256 3f05c4eaee4357e66f4c84c6d10b0f88a271cb524ff946c52d247abf8fccf753
SHA512 8bbdac71921196e6ed7b7c893f11c89bcd6dd8aafe29bcbc7145139b70e030673e3aa0d0e3133dc1dfbcc0b3fea70ac3038cbd24c6305d5334e7609fa81d9109

C:\Program Files\Avast Software\Cleanup\aswSqLt.dll

MD5 84c174d3246b1b65a0e01bf8fcd3900f
SHA1 91f93de662ff1d8494b6e5435c55e52dbc985061
SHA256 2af7f222c63643ecf3cd155fe63371e1a6ea7ee300cc461f5953de0feb873d02
SHA512 d1bbc2cbbeaafc7b9883af8c56f174051851324ac1bd21c00365c7100d045ec251cdc875b60e4a49d35628fe0d9a2f9d1b3dd41fe149b8f4819b62489a9dc57c

C:\Program Files\Avast Software\Cleanup\aswProperty.dll.ipending.81f33ccc

MD5 e05823dfecd5e1ff83dd30a0c42dcee5
SHA1 72d3554668dc86d38710173d2012531042b22f2d
SHA256 520ef1e08344421b4d2cd7bd9e83d9b0416bb0d1ff8111e60db2ffce879d300a
SHA512 e9fbfe304f8594d43a5ef171926f8bbcdc9e241569eff6739557f1be2f064547237d9a0370432a2a95d6de0d9f3fcca300bec0903439c0e9bd82f2ce8ae49c6d

C:\Program Files\Avast Software\Cleanup\aswCmnOS.dll

MD5 11554455dcb557223cd46dde58bea6d3
SHA1 99dbe92983fd9a4cc8b546e05006eec437a69b0e
SHA256 23695bd6c2f95fead5680cb31f93924f606bb0c02b1bb115ccdebcd3d59f6ec3
SHA512 ecd9b12caa834bb97c138e188b98764a1bef214556c9d522c9c336283d593fbccd6700681e6218a3e22a967a5807e72eac5d3309b1e005ae4c95293fce0c34fc

C:\Program Files\Avast Software\Cleanup\aswCmnIS.dll

MD5 2ac694056b6d6c70ef6f9dba42caf0e0
SHA1 d578060b144c23d2ee0b16b1b0e24e666691b938
SHA256 7729360a7a4bd22a95bb585e0a0cc042d7a57f190a0e7235728a51f3b16ccc2c
SHA512 7481840be1ee4e47a0836e17f8460ef612cf448d6e9937daa8233920f37b0b7632593a563db32edb354ee79fb2c21248f8118f851075accde2d0b2e63f8cd46c

C:\ProgramData\Avast Software\Icarus\Logs\icarus.log

MD5 6c2df2663e6ba4ee7b644417fc756eae
SHA1 bbd83b1b26920f5fdb7588739019255c72729015
SHA256 3ae3eb5d028ee251c489dd466e7afee4cf91306190c242420dc5e6fadce7f4ec
SHA512 3b9f336ae2943114f1c21cbd16846f654046abb97e3074bfd9a0ab622ee373f3fd64531f04d6841c43f2f197d12c7296cfceed7ff94a65738ada70fd6fc5295c

C:\ProgramData\Avast Software\Cleanup\usercfg.ini

MD5 2e68b4fbbcd6f27da2ff5264d63d4952
SHA1 5981321942032b4ad50daae02d613a9308b09e48
SHA256 75e1fa41330e6e999c7d956d51b28bf854e5f3d6b1936f415bcc2d43d28cfe23
SHA512 e84f56e941d68318f87ab928f065df32bee2667010fa00ac39ee5e25e077a14b78a34652d8452b8f2ea865ec382d06015b334bd1ddb585771e90d4f051907777

C:\Program Files\Avast Software\Cleanup\Setup\servers.def.ipending.81f33ccc

MD5 a2d21fd7e238eb53f1afb52aeda4214d
SHA1 0523387a1110b3fda6b5ecbbd099b1a3f72c5fb1
SHA256 d28867006eceed94995b6db166ada3cc80a7045bb640b3d6e23954bb417665eb
SHA512 d1df99ca4e0c63d3ea38678e79b54a854ebcb8934b8d8d38e708237d3be50edb77bb53910b52eb3b9a90ce8607630962aa12d6c985baea0d4cd40e3aebfa6317

C:\Program Files\Avast Software\Cleanup\Setup\config.def

MD5 96824dda099b9eaa9042ca5d00fba32e
SHA1 9e70ca0cb90ebdedc85be43db385f1544bbb42ca
SHA256 4abb0e5af79adf7adce791b65307ea6d4062b4e614dd2c0c87b31b8fe9ab1e93
SHA512 c3cc11510cb2ed28c5963943120d087d50f00f95b4923e67ee54cd99cca1964eb4b80d048097a65b5c06a5b82698946cbb4b6c3441e4d2826992b527e9c383aa

C:\Program Files\Avast Software\Cleanup\3rdparty_licenses\licenses\3rdparty.txt.ipending.81f33ccc

MD5 700f3f201f26dca17e81e99c5956ce9e
SHA1 d5109addd8a6ece20288f2f182c6f6459b010d51
SHA256 85ecfd8aabb2d7e1d1ea50641ee2fbfc2985b225fb8cb90a514028b47844d367
SHA512 88dc3030217867cf35a5294ff4de886c9d4fbd5549ed28223a34feb19b8266410d7a95ce44e7911d95305dfb0d37bfdea17385c208af90a956382a43da71f22c

C:\Program Files\Avast Software\Cleanup\3rdparty_licenses\readme.txt

MD5 ea5d490f91c4aafe91878fd57d511a70
SHA1 a994b05062fe359970fafd4840529bc55aee95c1
SHA256 564f66a078ff6e186c23983a233193e81e2c68df11933c1645464cb999d8d7cd
SHA512 6f61f640877f491936d619f44dc983530cdb7e4713b7340413a18967fc69750e1b47ff859b9b802de733304ec0ce1e5216b7c7ab5bbcf5d062c6328280ad037a

C:\Program Files\Avast Software\Cleanup\eula\en-us.html

MD5 9d6ec82f7319f401d73e3e5634596749
SHA1 b30ae36ddbaeab05a31c7225a8efc79b343f1817
SHA256 1b0087bbb82d37048f2e3e67b981407de8a2aec642d263c4d6eacbef3953ac0d
SHA512 919ad8428517e30e35e5e2eb9a3fd3c7f23c8eb72917eaa937f4efabb1f9058e20ade953c968490f0f117bc9b5b3b7228e5e9250fc9c22380588a707c7653a42

C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\avast.local_vc142.crt.cat

MD5 c8d9f1d775c52a92450b0b7680d93785
SHA1 5a8cfd770dc5c1f5fa479c09e773e3bdf1b4671c
SHA256 a80616ba579b7f41424de7a43b7aeb05268cb110c987cf5862814a98eee2b3b2
SHA512 a917e19be0bc75e5f39c42a23021cf609dec451248c7f3dfee06696570918ddff130ef78760bbd663a0b721cefc2f6a0447034ddbdc6e37aac5487711810e45c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 392ce16a9d064baa4a56fa4d9099a096
SHA1 492d62d156be476098f9a9770ebc64607f0a8a4b
SHA256 8ef63bb607b18ff4297a4e8e67f271c7dc0e4df5f0d8a5123a3d0b597500235b
SHA512 af6a91b1c8ebc9e98f9946040b0e220187ef765ae9dfe5256346ff6d7d1379fbcc8e7f671aae6305f71261e043871c0b97361e23c5edeaecda1bc288f4866b9f

C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\avast-du\setupui.cont

MD5 e98075ff83fc682e1a2fdae40b09ecd6
SHA1 fb0e193eba378b5b88f4f7287bd1e9cc0b3383b8
SHA256 476762411d60b408553d8b4922f6190f01df26cef1a6e126d515ecc871a475dd
SHA512 014d688256359ac09c2e1e47fb51cf99dc06af2b6de05ba39d999da73f5a1413dbb7b4ef53f202286a8813998efee66ee1c745994124069269340b29d82ab90e

C:\Windows\Temp\asw-da951943-7cf5-45e1-b0c6-9fd2951c2904\avast-du\product-def.xml

MD5 6cfc4894c1f22367e67b187baa3b1f1f
SHA1 c2164668b9021dce8cfa8b8c83b2860e476e9566
SHA256 00cfa616979513da2b1817e1b7928a87c1a546ab6be4da78d2e5dfae6b613b0d
SHA512 c677ac059093e004d841d73e15d112e5407676fa6d2aa0be9dc5709014639910cab5ba2937b8ab2d132c972e786f5d3f61de6a3ea9f55464d79c270ad526e82e

C:\Program Files\Common Files\Avast Software\Icarus\avast-du\config.def

MD5 034b36267199768b675b84210a88ec58
SHA1 fb619e2a77013960d4a84b822b1225ec442b2020
SHA256 ae4c6c353cf7442bb86d0b219b0cee4ee52458586b1e8de12e21851c86d22c48
SHA512 8c2ecb10c04279c23498e6c9efe5518355383142f135d46813864c588efab09a181459f902f778bfb80f03c8832193828bde0e9ac8048d97d4b067a8c4410a5a

C:\Program Files\Avast Software\Driver Updater\aswProperty.dll

MD5 c9417949411c11bac7ef9e8d58995058
SHA1 fcd2589ed003cb1fd958105bbbbf640c27c9bef5
SHA256 460caa38bbf300e62dcedc4d7fb973e72ddbd5ce1e3f089049e604436cbe6c95
SHA512 fab75eb3f5810edaded57d4a31ef55a22d216a85e9367c0e39976ace3ad473d1216665e6486543194c9055e74a4f7d69be10e33dd9647d026b28751c2e8f2e67

C:\Program Files\Avast Software\Driver Updater\ntp_time.dll

MD5 99a670ee658f66aab6923d66d05bf247
SHA1 48e5e68c5045e7b014eda9ac8aaf773173b571ff
SHA256 bdc72c712a4487e23b0d48801a57ceb1750a511c3ff396649f721223c65f7c5f
SHA512 3b6ea7a859575688ea7a88d8d253cf9f089cc9a454d5214cb2ae5c143b741458276a26e312b0e7c1b39fbad26b7673784146503ca54dfa60a5cbc79e91f801b5

C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe

MD5 c0a0b96665fc4cb7df058717c80e2cac
SHA1 4b9875cfcec7a0821945dea89a3c1aafd50130e2
SHA256 4540c36d8725cf9cdc76d4a38440b4959133d6327d6bdffa7bc293451114ee52
SHA512 a49d82fefde4de1743049943f131c1113a0ad5cb6cecddbeaeec0fdba96952832506198830764b2494a566e769f2c2687772612c967fce822d6bf85d0f98a421

C:\Program Files\Avast Software\Driver Updater\RecoveryConsole.exe

MD5 39b80119a302e18c880ba9f89dee8e27
SHA1 d94aba2b3d8c5a620b2e8e2ef4fdf79825a5c77d
SHA256 164d5fc99e69672f9a298a99d17563ad941a5a950c5c398a8cc873e636417b79
SHA512 6b201fda89f3e38561328677f1e6b7f686e315fc1a9dc2eb192152cce507442388ae39cd1eee855cedba9826e9af4989c557364a9385261f8bf12b6a78cd412f

C:\ProgramData\Avast Software\Icarus\avast-du\icarus.ini

MD5 8bc46e0108bada8ace32d71090465131
SHA1 2ef0120a56fa641fccc7ece2ebf970a345cb0b55
SHA256 755c1d84c623eff431d530b2e2abaad44c965e3dc26a109544f2ad318c12f17a
SHA512 f4658725282d262143fcca50652e79dd60b4f0522155bd5c979669d299382d25b8f97fb876b0038e1e9cdf01141b7a228d123bdee4cbb40cde162742d450c76b

C:\Program Files\Avast Software\Driver Updater\servicecmd.exe

MD5 08c076e3e6d7166de85677315b774c30
SHA1 36f53368c021880e3c8725710c82b5cea5d4ca04
SHA256 09ffa8b54f3d36e6fd8f4f4404ef25b94ba24710e4fa9e27ca08f0a65c5b65b9
SHA512 0c39cfe16e97c5435128f9372c0b1c416671a30ad327062595c544175c3a38425781d3d21370e30f0f70d9c734504a17f699852fc42fc5ab642495667b7158a5

C:\Program Files\Avast Software\Driver Updater\avDump.exe

MD5 09dd6a34fe16abd0182e04867106c59e
SHA1 82dc39f7e740136423d384a3ec510963464f60b4
SHA256 0b8c01c15f11a12e099290c34d5ef14ad2ccf20b3c05ccd7cc95951fd04e6ad3
SHA512 c67db99c19a4c82e5be014661281fae60b5a1fab40497a1d145b58d20badf4d8347696eaf0942c3aed50029a1910aea16264dfd712cb1a8ec2ecf122e5e562e5

C:\Program Files\Avast Software\Driver Updater\AvBugReport.exe

MD5 c0fb55c52ccb282acf39e4edf781d81f
SHA1 1a345a7a5b8dd8b1cb6adf8bb84c163fef5df4a3
SHA256 06cdd7f557527f3168b8161ec5f8614292af58627b8e29693e0d7a2e7ea3bf8e
SHA512 2e0974f9331c06631da85da1d2b21e06eaf016fc54ddc6575f62028a08d0d156de8a84ba99981a2c0339c6a0ed81b6dc9257012c08874a61bf2f6128c20e9771

C:\Program Files\Avast Software\Driver Updater\nos.dll

MD5 23baa71249220c4c0b34cf2a630eae9d
SHA1 4fcc16de06b5e11340583103bc2097039f4f0e28
SHA256 4cce8763faeae8b5ba0c843628b9d4bfd972c287929efd4a1635bb3f2f5cc1ac
SHA512 89321441c224b7135d40323784a8bd80be53e1ea19f416da2dd9d9d0d99975126ab25ff04907f095cde46dfa5dc581f4680afb00c834a7868fa61ddd90237ba0

C:\Program Files\Avast Software\Driver Updater\perfstats.dll

MD5 ec21af84a0bdfce39669480c3fb7d554
SHA1 40f20c05bc3e15d4a894ff70aea23d3e595223ea
SHA256 5ced1eec23bc9288413908daf4054a6c101ce29352d5dc64da9863ed26c62b9b
SHA512 d40fc5fdf6f93b534366a14aa45c3d300d342a0ffb6c996950354de093763a5c31eab214f25553d66d34776ac5926517c32c181188714fefa677ba58c4790861

C:\Program Files\Avast Software\Driver Updater\serialization.dll

MD5 03dfb4630b4e107f4fc99dd018aa025c
SHA1 2c42cbf42d525e1e00265c9ccc227e8e68a20638
SHA256 bd3c67f2b1c9b05c05db83b08f988610e4f50814b985b8dae2c8f8088022e698
SHA512 8583965f72eb4a4d255d74611296c924b906ee345a552ffc049d778c97ed2d9d8b38477853a3eb7e03031354c42fb170ec9330defafa5c21ed1c5de64f50b6f7

C:\Program Files\Avast Software\Driver Updater\aswIP.dll

MD5 0a005f50fba28b8ff9f90a6e24001816
SHA1 effe6ebd2d73f30fbfeec5e9ab31f74e234cb2ff
SHA256 b11174fe2e745f580ba807483db73de194739a22e3121198760433f3629ccc31
SHA512 35d3c67898773073b1e19d38b9e7e834410db72fa7f8eaefd83e5f24e1cc41e3951eb8e0d79caa37ec306cbf1a002680e14deb17a2bd53592bdb56cc9a54f5be

C:\Program Files\Avast Software\Driver Updater\commchannel.dll

MD5 e2e3f0c1d413d52e908757041f67b77b
SHA1 6aa50211fb46ceee07388302ac77505f795a26f0
SHA256 b32209662c4aabce2d280ca14cf43600f3273994580ae525d02e073341061237
SHA512 0df959564b0ba598186c5ed306f759e6b30df3280de906a5cd9187bfc449a1fb0d4a78e095d681fdc798d9809876dafb7ad4665e8d0933636321affd0fc6177e

C:\Program Files\Avast Software\Driver Updater\module_lifetime.dll

MD5 a835d97a5556995e09ddcb5bcca18da8
SHA1 3c8cec4d9ad505741a4451550edc3240068c67ad
SHA256 c2023a63e35d5d2bb812054cbbb9af2ab4efd4d0db6e49e7f8e2e1e1d9e13776
SHA512 3eb518c1d1cedeca22d85b8b0941ff4ff3bf0382653a85c39a7680b9b111a03e37f37de021133dc4e0ae8889df7e7bace02b7b4cdb0d8b841f734256428a51e8

C:\Program Files\Avast Software\Driver Updater\tasks_core.dll

MD5 1481ef287a5571559e864f8028ac9ca4
SHA1 34ca425473188ee860755b144303b70754d0f62f
SHA256 a6c72cd97339e6e710583217cb2f34f8b51605c8286149fcf89fbfc2b76ae7f7
SHA512 f1693af3d60cecbf20230deac8cb5a279fe11903d5503d82c9c2fbd9ed3b2098bf0912e0bbe57b86789fd29773d9970e4ec3a977e168df4c3390ced6bd3d592e

C:\Program Files\Avast Software\Driver Updater\event_manager_burger.dll

MD5 e61e3c02cbf90ea2903d82dfc18f6d0b
SHA1 079cd67e1d4c0b7a3922023aee46a82da0ffabe3
SHA256 79456ab027b11016f41e13379d285ff05bcad09026afdadbcaf783d174a56d89
SHA512 c05fb7fa89c06b416a678f410bfdc00a3b8e38041aa17b07352c31acb443d2ac232955cfa38f05601f6b14406dcb842e387b8c906316129d9165a12fdd2250b8

C:\Program Files\Avast Software\Driver Updater\event_manager.dll

MD5 5a0d7bd9aef820fe92e8657ec06f4113
SHA1 e93edac1b876e140500678c894e5b316204a2c35
SHA256 423856c43fe0896c099930f5f260bf5d9fe5a65d3b86122342c0472fc8b51861
SHA512 88a16d19c36082cb1d1794d27e3857ed22afd61220f9ffa56b3c498dc8a3d2d0cf22f9ce921628c689a25b363ef085d6c1fe9ef1dea66e3505185b085688a538

C:\Program Files\Avast Software\Driver Updater\dll_loader.dll

MD5 5809c6945dcf061ad7f6b66452e89a90
SHA1 148886aad40d70e6f33dfb8dde102db7b15d32a2
SHA256 4d6a4ffeb47eaa361962aa5de65aabf49aded3757e0088834e27bc8d94271b36
SHA512 d2803664a8dca1c318b05167c90a7d1b901f1fa9c17fad8bc69d27a59affeb21d0bd8fe316385f6d15e33982e71163dca40871eb7d0244184c56da0253acd72c

C:\Program Files\Avast Software\Driver Updater\burger_client.dll

MD5 8209728f43a815a6d6230f52cec82dae
SHA1 3d3fdeb789cbce3691f0146d4d1f1c3e31e5773d
SHA256 3c18b57a643180ad1a1ff53abc45eb132c0f9a71609eb2ad03595a6c8dc60e86
SHA512 55fd5d8d03353432f211eda24dad1c4f35c8727f00d368b5db611196462a182ff699499e3b384e4a8aec8f21038a2d3f019b25fecfd2c828a1857f9f0ae7310a

C:\Program Files\Avast Software\Driver Updater\log.dll

MD5 18de03142a1fecb9ef2c862062234634
SHA1 3864cdacff0b3319c1d0efdd833b74d15aa11096
SHA256 0ebde701841d9fe480e98f22e96eef16856ea316f02243344c0d0ad9cec14b32
SHA512 64069cc545d5e6b4d863da9388e5853092ac830e48793056fd684e340928bff24d2c94dfb50f09f1a538f124c5c76dd047d873add909846fe55a0c4c7480c00b

C:\Program Files\Avast Software\Driver Updater\event_routing_rpc.dll

MD5 0d069f58a9c1398fdf8f048c694947d8
SHA1 9b732509c9044bc4463ce3d8d9a4d624d75d8234
SHA256 359a4e5eef1643dd056ecc0db6e45046cadc5a916a06ab3ad09e9f01ae59a866
SHA512 262c7031ea4a67e5a96ffd9e57f8a8727ad0194f921805e9cd0f9a08b60ec164871eccb782b4decf2a1d5253fb13a49aba1072a10f04dd6afabc44c19db5b7e1

C:\Program Files\Avast Software\Driver Updater\event_routing.dll

MD5 1b14743fc01c6e71056d995a04916295
SHA1 3f0ff62b2288f47969df7db5a464a3c72317d704
SHA256 9710c130a531ee4b461ad89ab63ecc09f8f51d50d4840a88b889e9cbaf3c05c2
SHA512 767a6f0be62890e25464ab223b3b87f9e2b610b695f598612afcba4d8af6b2d07a9d900f6706206ee63aeb4e50732b5ecd53b79ff89a14e86f89b99a5d13cf6e

C:\Program Files\Avast Software\Driver Updater\aswSqLt.dll

MD5 910a8faaf9204c9e33455fd2f7ff8675
SHA1 88f2e66fcc63e88a1fb66e5b1ddd9ac5e89a662b
SHA256 e9ae3f0ba5e57fbff7d99dd7d998eeeee4f74eb16bbc64e4257765d1ff4be9b8
SHA512 1a8398f86c46c5e37dd2dce049f1710134602f8f554ba678c843b4bb47bd6e2bee5311f39a543d16858e81bf8198a2c76ed75193df776780e7c63c78debb5342

C:\Program Files\Avast Software\Driver Updater\aswCmnOS.dll

MD5 a531727791ceb11fd027750893f5672e
SHA1 48f504a9537920adcde85a519b5567d6af74ada0
SHA256 a5075793a32717e13062502a25e3a2c029f2a700b8609c7916f6aab90ac2aa66
SHA512 89a7076e2789ec5251776be349566472272e0990e6b4b807fec1316a00205113783516fe455cc2625c9b19f6a8fb39808bef615c38d93264a56f4bca795173f5

C:\Program Files\Avast Software\Driver Updater\aswCmnIS.dll

MD5 8e5b614a9dc4952ad01ab331f31bf13c
SHA1 f356ff4425386b9a4bc223e82b7fe647cac0318c
SHA256 ab63d69505c5e49894b68d571e73ed38c08b40f244c8e711664065267af52c49
SHA512 be2537d129b079293a68762039b5ea91ac6a76b983435a7ac0214509907f95067e6e346df7580db2522a77f97f57d34b2ee6983873090379d76d4e7678eda608

C:\Program Files\Avast Software\Driver Updater\aswCmnBS.dll

MD5 da774fa6cedd6d21a0ed69021c184551
SHA1 b2256f8ce1ac97f8e1a80e52e20405e556248f9e
SHA256 2774e41674d328e05fe72c0c46a25c134962f7f6f4d0fe530f0786dc7146e9ec
SHA512 bd7e70dc0f9a74427226f4b52fe3acbaa6229ee3328e8dfc7c4590dd8f4e9610a2d23f2a1080f549aff68cfaeb0415ddadb44718d7ca47497c0145db760e5dd9

C:\ProgramData\Avast Software\Driver Updater\usercfg.ini

MD5 0ab0533b4e0547123f7540374eb7f000
SHA1 70d1d3e7a7ba840fa0dc90d3975267e0bacf90db
SHA256 f8bc3ca27d31f50532daffa2f0e883799f982def38b7c4972dfc6ce3be50e243
SHA512 23bb733fdd2a169ecfc65cbfd74bbe08c912ccf28bf8b991f9117186ad6c5e011b5ed3c6ad92cb8ad9728712340572f0bfd4081ec0f4ef0a8edb0e9e941b8861

C:\Program Files\Avast Software\Driver Updater\Setup\config.def

MD5 0807ba6996b6cbd6b4afa538716c80c8
SHA1 32403dee718374ab320b5d72964944fe33c3b7cb
SHA256 3c75f44c8b10170c80409913c59a2464d6e5971d47ff9d6e05a347a080165974
SHA512 4d232ba93fb2ebdbc30bfec2e61b74ef4b32058bef4c85f0e2f4f52f964f46c1db7dddac3c47f3b64b9524a3a6306fa23f442190e2a244327e50c101d8944f37

C:\Program Files\Avast Software\Driver Updater\Setup\stats.ini

MD5 f83767a1e0297c3fc9e3673c22bbb5f6
SHA1 7bdf5acfefbffb335d1c697fcc2219ca3813d242
SHA256 547c52700bc6d0b86bd5a94004028d982edf3dda3547562faab95888e48e7049
SHA512 0a090cb21046e4e65a1ec167661e52e989365d96ab385b208894b8d0d3e88d810cc7f18c5f8677280ad22cca37be17bd34f884a80712e5e4b788bb8640dcaade

C:\ProgramData\Avast Software\Cleanup\log\TuneupBCU.log

MD5 714f855f60c1175911dae1e5deb159bf
SHA1 b98853091e0c1b505e8c5f5772080c4614d4da45
SHA256 3388fdb7d51c5b8063eb5acc8021b06f454f1b4d9003a3eed7e7a56f208f420a
SHA512 82c2d2c0fd7ceb3730195b879082550846ba4177efabc1b7c23f3d7160e3a73b6b7948b2bf49fd452dede4cdf263d3ecc08cf43204dae9ce96c7a36773f7f8a3

C:\ProgramData\Avast Software\Cleanup\log\TuneupBCU.log

MD5 152b2dd100a982c0a0ed7acbac6992ff
SHA1 6ab4a317568f64770d1ea5066040c126bc448437
SHA256 0b126189f8e368daff6655997912020379cabbbf44b95a0c96d104b1cd06d197
SHA512 cad329e3005bcaa092ef4cda176d6a03cdeba1b06037aaea83fc706d6d7c3f96736e294b3b8cb1d0e33244e50dfc56853f22369e6ecddcf62299a22f2d203ea8

C:\Program Files\Avast Software\Cleanup\Setup\opm.ini

MD5 94c28844b70524b61ed724a3f37fcbfa
SHA1 6971c2ce435a38144e9cfb0cdef2ad075f2a21de
SHA256 cdf78e11b3e925ac14c788e0bc7e410d95193597f01899ec6c4b2eed3890900d
SHA512 77f5b3b750277113f9353503d6f27a75820492f22a2a9c541bbcb236067a38b42f77a71e092dc302b4405998e6923adea9402e3889cb3714326c7ed30ce892d7

C:\Program Files\Avast Software\Driver Updater\Setup\opm.ini

MD5 96a32568bc2ebba983433687cf99ea09
SHA1 ff652a369d9b38767aef1c37255fdabab8de8ea5
SHA256 bfe6d0637b852ce6784c5651bba1baacd05cfd6fb52bbfa633caaadc12c81516
SHA512 d84414d87bdfd30617c9b69a0a2ac28398bea143eb205934f05f182096ab43e28c1067d2b8c8e985e4d9a2f30dac00179bbda63b84f887b1df565d371c916e25

C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus.exe

MD5 771d132b025ccd15f32844cfd53d3632
SHA1 f5f78d85297148ef2950522fee0c57d4e8da8bec
SHA256 2bd9414f1391c3faa342d47050b950fc9cfc375ae5d375a6fd42566c573b7a9c
SHA512 d4de8b038fe5ce68fd859b5dba6c39cbb7d5c0442593100f2480c8b8e7dba690157a5bb200706caab4ec08293b33b3a648b754d17ff22a01d8560dc2d76522d1

C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\bug_report.exe

MD5 24fba36d183f2ff43282759eef67fc8d
SHA1 8e87312c92f5db0a14cb73610c0770e8b720285b
SHA256 3443c184fd1e5f2e006909e3657824edaf19a644ed1b64f5aa725e021f9c8d01
SHA512 9bf438f356175fa4afc7a718e9d44037ad1027f0831c44ead9514319d133208ee82ac10204a702255c3b622d017d4533e1cd7054111f27175f71bc5761a6c925

C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\setupui.cont

MD5 42607a78d51acb232f7b5aee35c81584
SHA1 59c5901a444d7916b0416e04fcc6810b1a967de7
SHA256 151e229cf01879fc31f211070ed50a46e556d37e5a91c40027a81181b28f6c4e
SHA512 27ab2ebdf8543449ac4a1e4f3aebc5d6e7fecf4a6868981b8519b6bc69f1344dedad792e6651746317e8d91d797ec912bece1023e774dc5bb9626e13c3ada606

C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\product-def.xml

MD5 f982388c58d181881e26c306ec3bd3b1
SHA1 96262c8cc8858befd03736c1883636f1aad6b6a3
SHA256 78be8abc84cd1443a5334be27dd67a67acd7456542004cc90a135b3327787416
SHA512 37d573bf9a263e5600d51a265763ce5e8cb2fb5928aa03435699e068dd778ebe946398172ca1f32bfd1be5a5aa7bbaf3c3d4ff2a7b4e45b338aa38c58aafeb04

C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\dump_process.exe

MD5 6526cc2f42187b4b6c34d1fbdc3da15f
SHA1 7c53fb157e0ef7a87d7110bc2f7c6a7f83803e05
SHA256 fa406fee2ed0889642ed968cc01e2d51a017d5e1c9d862b4cb6af3446f5c904b
SHA512 c9c79dd999dc9314db1c06a2e1f536bbb32c462f9866cc355bed32dfe729c185a82f69b830bf0933d26e4978d2c573ef9079f95041372f0af953cb3aa0716e3e

C:\Windows\Temp\asw-85756926-1019-469f-86e8-75ee8cca48a7\avast-vpn\icarus_ui.exe

MD5 b077b5fd0ef429f5c194b593d3677f6e
SHA1 29dd2441819dc1a30e9f4e749599667c2756f03e
SHA256 d52a4a4a69d78548f304433897cf332d9cad9f8a16174553964e015d80a87ff8
SHA512 d53044efa54f3e4e432865194edbf893f72d556ad6b3e1bfde79caa8d087f9446f0166e7d884f67382452c0c3a7e41552bbe2055d947197e02da9c350de69730

C:\Program Files\Avast Software\Cleanup\Setup\opm.ini

MD5 0df072106f10d0855da76066e26031ac
SHA1 aae75e81064df9983cf573e1c5736f1ee38e20e8
SHA256 f61946086b0cc1045e24278b84fcade8939c9b76c13744d1b51e7cf082f43581
SHA512 9173506c96312b28656620cf0959afbbb7607b05569de9d556479f8700f974eda34e05d81baefa11c1f22843d84b1862e7846d9d85695a5d026f84efbd2e6b2d

C:\Program Files\Avast Software\SecureLine VPN\aswIP.dll

MD5 71b926113fe48b14ecfc67ebb8011179
SHA1 54776130e73f7f464750bfbdd6d18ac6e8a2b439
SHA256 8b67eef431378e6a2a09cae461ff8b16b8471d1382badfe1bcf8a8273ae5e60e
SHA512 6a007559bd38abab6a6b9e9bb56c8d6dc1a9fe35f3291f6eb999fdb8f5fec71483df5796276bcda2cbb4b5cc863a950f8ef6b6f4565183fb92bef0249105a702

C:\Program Files\Avast Software\SecureLine VPN\aswCmnOS.dll

MD5 00a5d7727cdf88e03debeaba297e0a20
SHA1 24ee5ea9a7e3ea469b9bd46f98ecfc43a4b23666
SHA256 a46bcf5984d016d64c3636c9772dcf0a2b08b0ebc8e455cfcebb07d862819458
SHA512 ce927e122f3ed191e4f34b5070499685180bee38b10ed02467d449a9500af984d32dcf6da9bd2a7f38177b11b7290cfa715fcdad735eb0be03f93461cf5183de

C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe

MD5 f0500747767d38cad821f9b2586bc42f
SHA1 3a6a1a137d1609b81ed5e99714131df21feb4e04
SHA256 f1436814d0e020ea8646093c5163b02a5e30a34873cff2c2ba0ffadb9b131781
SHA512 986aaa79a71205d5e54f0e9b7a4b58cdba6ffae9f95dbf9892b08379343b9a7e6cd6541da86e1f585b5abb95686de4f29a8c64e128e3ab9e77a63f0a62eac96e

C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe

MD5 dacaa7cd9c3e56513bd27fc87fa57569
SHA1 0598c4f87d5a1db6d6bf3a09138d3e6575b2b8af
SHA256 d2c2ccc82f30fe7dbccbd20aa2a86549ead288791f00f40acbbec9535377451f
SHA512 7f6f7bc44929fbe70b34156d87d400a51f44fffb4b9ab74c07e94562a81bbc29ceee6e3b739904fd989aa94b83ea384dc9488b914a0a96ae87b2b26f89d7f823

C:\Program Files\Avast Software\SecureLine VPN\tasks_core.dll

MD5 2302a6f9f471c2ded38cad1dcb77d558
SHA1 80d8ed48267c75a1a7af7a8bdfcb3483968e1f0c
SHA256 e9c5cd495684a79bb2e1d2659ee9cb1648f8a78005354592f15b62df8e487d14
SHA512 6883084ffddc4dceb79b69f5bad77fb25700137397c83f14536c3cbf29542a4372d287c42c42eef5b96f48048e9ba04f2f38fba3dc1a2aac9dc5d78ed5011fab

C:\Program Files\Avast Software\SecureLine VPN\serialization.dll

MD5 f0db6587d7793ec63cc75b62582a25cd
SHA1 ed79b7cf260d66241b16e45fab014032bdf52446
SHA256 e434ef7ab62a34b4cc6fe20f5ecbb829f3ee7abfb9171fc38e635ee74649e987
SHA512 a008b7f2d7974649d219e5de3f0559f5094573c12b0db715078e70e825ac7e371a24ad43d1a7588670b361d830fd84164e320be8b598ec8f33b4b780b2b88f9f

C:\Program Files\Avast Software\SecureLine VPN\perfstats.dll

MD5 eb8ee7d07b1d494926924db5975c296a
SHA1 1c09942de08a6f88177619700e751371c3f4074a
SHA256 0fabd9ada377e49c26ae246307a7ee655d582cf06d5aad608e555b68cd7e0920
SHA512 08cf0c8a0f4b562a71d2a4ccf431f314fc935bea4ca8e48d74fa5b557e14f75468b5b64b7e859d8459e2d04b76522c0f34589fbf67ca7d6a7855e04c34482f4f

C:\Program Files\Avast Software\SecureLine VPN\ntp_time.dll

MD5 0422c807fa401b4b38117b807b74ebc1
SHA1 80508cea3a64b3967c48e12d51e728d1c8119f7a
SHA256 b8fd56158bcef19cbddee889c898f9d1890c4015a66a04dd9d579b16e9d0eab5
SHA512 7b3aa8b5ba81a5779159f381ec495087bda54cc3138c00a08ca8995583c18fce8d23f231851183a27a785cb7fb3cf9ed8e7f01850f453ec304c0d898b8161585

C:\Program Files\Avast Software\SecureLine VPN\nos.dll

MD5 31a4789d17fe4ff7e5ad154c43765e1c
SHA1 a1e234a66be4759a62e15d2394f9b6ee7494987b
SHA256 8aadcc90e2059166a853152be5b7166a69352d9dcd7cf211a35ec5dc503a425b
SHA512 33130645bac171f86c2241abcaf6623e82451392f6b1d050ab4e939a3f5c2dc38b23af07eb599c3fb38360530c2bd70c9ef5141ac58c594d2aeee2a16010c07d

C:\Program Files\Avast Software\SecureLine VPN\aswProperty.dll

MD5 b431d4848cf83b0587ae60b7580cd9f6
SHA1 34dbbbbb3171190d688f4ea4d4290edb1f3a6a6b
SHA256 1962e79c205c8f41f88b00382345a618ae1324e03043c7d13f293b521c24495f
SHA512 5c31afbe0bacac35667271ab38dc1eba1f8642c815bb63c9f028874f7227926871799f2ca5e9dc8a93ab463fa1ee0bc26337dd6707de38c63b76b6e01acd0a5a

C:\Program Files\Avast Software\SecureLine VPN\module_lifetime.dll

MD5 a91959f400e62155cb7048569d2077b6
SHA1 086b48333c2d4709874d7b594b707aedcd3ed153
SHA256 c304f66309f5fcca5b6d9fcb407158bb93427d8017f2f9c698c13cfd1abbbe99
SHA512 89d5f2ae837ec39123f264c3a05bfdc8ec5b3bb4364ed344bdee0b85d85b7185c6d8225d24cdbbeaa84bccf806419b75e0734751b0fa65514393dc802c279497

C:\Program Files\Avast Software\SecureLine VPN\log.dll

MD5 245f905f693db79f88ec10981536eb87
SHA1 05d1caf619c82d8623d02ed9ffa49559deb50f40
SHA256 1fd91b3dbd4718bc804bfe4d2d7402f431b7e981948a59cd0fb1cac29550f9ac
SHA512 99e7fa5d0a4ed5c139f4e34802a5e5b17fe76979457a8e162f2f7b8107434d2e321f3ab41ff6cf51ec69204bac0a17e7f8964ef60c8fc9c4c9ecfbff6b6ef374

C:\Program Files\Avast Software\SecureLine VPN\event_routing_rpc.dll

MD5 092875b4367b9a5bdfe6bb20a1b41310
SHA1 c7073c3aa61dc63b8f2ee66a23b85a969215eab5
SHA256 913c07f9ad2591cafd39cc411411227eb760bc4200547282e66f2e1cd2830dd7
SHA512 8a6bf33584cae29297b5274e7fd38b30473a42a3a36b384dd015f78fd9030ff6a7c84f364975ff1af93ff0cdf1010d4dc4dfe92012d2a572cd04728728a696ed

C:\Program Files\Avast Software\SecureLine VPN\event_routing.dll

MD5 561990af1db58d99864e19af6062ed5b
SHA1 c192692d84351f813cafa333a195ddcd1bec9e80
SHA256 64e7dc3d306e334a2b21350b1273cbdaddd4ee6f6909be27569247bf38923eac
SHA512 b70fc8938ef3eabe9786b86231ab81d8d4d2da018355fff26a8d33ca6a683e695fcec6f0f1d99c2e575cf308e5c3beafaaef3eba62303639b1c32c847428538f

C:\Program Files\Avast Software\SecureLine VPN\event_manager_burger.dll

MD5 bf16a1c867dd878f02738003465a466f
SHA1 14a1cc23934be3987f948d5ba84016ed7a7b07db
SHA256 fde50d0f30833f9a2ff27b4686d2d7e928a26a9209081c80018dac810526dc5c
SHA512 63b8cafc3699dfbafd5c0b3d1d2867301580a2a15139a795a22ee19ede3da677e96f409215289f0de0fc20f7a45bec27c4fad871acad644b4c2b2a153a08fbbc

C:\Program Files\Avast Software\SecureLine VPN\event_manager.dll

MD5 e435352dda9edd8a1bb29e1d592c0305
SHA1 82de1d41747904c640fdb16758680a2382896566
SHA256 8024b5a068f4e240b886de38d410e0d9b8c6fe467a171e531dc15e13e52db5c6
SHA512 83b43b5d616907e389fbf69fdeac248271db7643ce151a85d3f44368e2bfaa52d15d13f3d3e514af37270d92985a5183876696a88f983630695d0427b8516d54

C:\Program Files\Avast Software\SecureLine VPN\dll_loader.dll

MD5 9f533b9693331b93f39d351f7b12ddee
SHA1 c149daddfdd66adb2d231f017ba74e9b4c5be196
SHA256 aeb6b4766e169d4d6182b5116974fd4297f525e670875a785902e6bcb30d5951
SHA512 67768d5db19807c74365ce736d5ee6b32071e9c8f90a5e9d0909824a9ece4dd55b743910b87983537dfabaeb729f5269b756403d88c2efd9e1409febbbab7f31

C:\Program Files\Avast Software\SecureLine VPN\devcon.exe

MD5 f2c1d2c1409523b24b65afc4035e3df3
SHA1 e47f6152471b022f21e4efdc401a4947e3fab7cf
SHA256 422bacbdaf8a42c3592c8b4cf619851cb16f6b4b2459d4cff9c1738272add49b
SHA512 25878f1326384e76bc1481310e2fd3a32eaae86d27454541bba97814c399701aa5dab6c9dcdde2deb67c48c9f5473a72ea41e71efd9d3b7bb517f12615a6495a

C:\Program Files\Avast Software\SecureLine VPN\commchannel.dll

MD5 6e2ecaecefd39c5d14cf7d89ec0ea2fd
SHA1 9bc8ade651676d6417c4f04de42145ea37d2d214
SHA256 7b715f0a9268a5a55a7df6d4fc928d3a7a0395c0002eff1972f2e8c18824c358
SHA512 92bfa1a77d50d62967939500137fe573f093c3d1b7a0c677b42715363a798964a4a30c67afcea5a7254e63d1e576b34b6c9e2113995c2eaeb97e41da1a58f7ca

C:\Program Files\Avast Software\SecureLine VPN\WireGuard\aswwireguard.cat

MD5 aa638f10f96938ce48a7a6a1e59899e6
SHA1 b79cbdc4da415cb50e2f24ea25c4a8bac0ae992c
SHA256 2ad52dc42d2ab288a47c872f7bff0e07700c6d45d52276ebdfaaaaf3e4aef691
SHA512 b3d8bdb6fabb8982321c394aa1c44572781cb6776847dd639f435ba0f67a818634ca51e5c3047c1b87cf6c9122bee7d320735a3a557b9c1b4630f23f84d2f2cd

C:\Program Files\Avast Software\SecureLine VPN\WireGuard\aswWireguard.sys

MD5 9906c24b9dfd24e0912f0fb153dd56f4
SHA1 5eacf499f87393a2c66182f64b4249b9cf15f17b
SHA256 f2cb78096b7851b79f37ab9c863e8ba1d240df9d6af3e3669a9668288100d7f1
SHA512 b34af40c9c34b6f007fd05a4a358827eac689413fa0af06f966f59872bc4791f2eef7a1b8519b13f9875c9e4cfea52b2ae5deff089fcb834ba913a54f3b57515

C:\Program Files\Avast Software\SecureLine VPN\WireGuard\aswWireguard.inf

MD5 58b2adfc1ba4508bf54e734c088b2d6f
SHA1 1765b0b45e8be3d0461a47d740a61cbbe73c3694
SHA256 35f0b0c7fcd612387a1f18063c779812a8ab8fb304160843d5d3af18df37d575
SHA512 fbb1ecb6c66a81dc9e0f87d9f640fe7b4b144ff0e1e7e2fe461efaed27480a93c734dfb4367ebb9cea812af5278241752dc577ff3b01d0eb2fa3cde16f037e93

C:\ProgramData\Avast Software\Icarus\avast-vpn\icarus.ini

MD5 886286d2a635ce465efbdbdf7044c9f4
SHA1 42f0470ab95c7a8f7f1b96a6dde2e9e62434574d
SHA256 efa2b3691c9f9984b8b39cc714663d86f4d6b9c5b327794e51ba0a7cfbe974cf
SHA512 3c0817e5416cb2fb1916501437ab73994eb53807863d24a8ae9d30fee4deccb66483f9562b7559cd7c273c102c139f6c6f22567d9d95c0665456f35fae12ebc0

C:\Program Files\Avast Software\SecureLine VPN\WireGuard\aswWireguard.dll

MD5 5dfaa2a05e92c997396b6d169d178d68
SHA1 73675cac49dcf815fa5d63d6fd919ddc727a00a2
SHA256 a955080b2f14da3fdb84e3a17cce716ea93ce6b9a6704e92130fdd1e7ea14ce4
SHA512 131963428fa02be3701859c0619d5bfbe4426bbf122460c7c8a818fea090d5b5f6cd675d3d16cb8e97ba8e4167cadd306eae646b1b9463981a33bd7a656b868d

C:\Program Files\Avast Software\SecureLine VPN\WireGuard\wireguardtun.exe

MD5 40c2f869114127c2b0cdc0ec01b7b95a
SHA1 1cf035345418e800c06150b07ae34cef09a3d4d6
SHA256 4c7da85260eb920867a0bba912e5dfd3770adceb96b820dcc094e50e6cc1f0de
SHA512 86df9a1f81aee04cdb19307e17d4384954b7f378e64025b414357835fe1bb29f0956aeb52a49c63c026a063aaab3aec7e533abdfe27c047723a331f4dbbb5a26

C:\Program Files\Avast Software\SecureLine VPN\burger_client.dll

MD5 ec12e5721831d15741c39a505ae1591c
SHA1 a2b38f89ea000e3f7c7ce1c9d4d624fdffbedbf7
SHA256 9b88e2e17f972e758216c16714a18f484f2aee4c409cbbd57268aaa458c2b5b0
SHA512 97d6211b32be628235f7c9826bfb5d27255966f8838e24056eecf1f5e6ea9c85dbf7c7b54313ad4e7f3beba6c8bb92b2730b27efef4b79c57d60a227ebf6718d

C:\Program Files\Avast Software\SecureLine VPN\avDump.exe

MD5 121c11d38baa54bea911465bec4b4b8b
SHA1 f6e0731ca5797f043bc9d6d642d612d900976295
SHA256 0320b262737e6a87841d8aa4c04255de7ba6cb2528447c078fcc924cba261f6a
SHA512 3e4a0b9487f39df28d26586cc5cb008c37e491e6e49cb8cc776749ecbff48b117ed412ebb54079df0005b5682beb19dcc7e7960b52a11d242e5660e066149a77

C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe

MD5 d740cdbfb5d10e97f2ddcf47ae412ca8
SHA1 259c7310f76d610a58d3ff72f8d5b88b20f7518f
SHA256 6a4d36ff131e3288b1527d0a7584aaa5b2af72c4e6eae7616de7bcf86ef144df
SHA512 686b62125c2135859a20f16a6a13679e680f9d1fa8529e589b425432f7565e43be4e434e44a5949e42fb88b657bff9296fc4cc3d6c59a721bad88a575786ddc8

C:\Program Files\Avast Software\SecureLine VPN\aswCmnIS.dll

MD5 86e73efd6f0d713efdc0b085a28f7b4f
SHA1 e778a00ab31d535767d723447f7a0bc51d38b96d
SHA256 80939fce93748c684d1320bc0b2e6e85c8503341235846662d87f9a17a829357
SHA512 77986a028510a51994ae5295cc1f6f55ba7832f6e7e4cab982d97d0c0d2746dd768c2336b0ccd0c96abca6db3ae78edf3bb4b17f511691a8d8fc50b7963be46b

C:\Program Files\Avast Software\SecureLine VPN\aswCmnBS.dll

MD5 6d8c8344ab5619a1385b2734245bb9b3
SHA1 f21e57cced2629f88c71da5210081effbad15896
SHA256 d1ed15c6cae7746f0b77ad89d1357aac99032ad4f74280a6de89e80a121a0c19
SHA512 493a14b56492044faddfcd83e125cf8114c1555b8c363e6f8c7a1d45f2810dcee5028e4dfb7e11dfbb00e0c912b5d0b72ef06570d313a23fc2205ae06027e1af

C:\Program Files\Avast Software\SecureLine VPN\aswVpnRdr.sys

MD5 a5e6e4cc6c44c36354755d2f6b1b8f44
SHA1 94de8a03c08119b925f4cf044f79d2c6f775382e
SHA256 8ec18e1b2c49fe371994c1abb3c704d2dde338e2211f8d4f5f4ac113f7b1dc3b
SHA512 1afbeb16a20788f0d80d1de4e04ba4b5e511e207b011124b6f1fd7a7d26a9553db44269a27d1200c12ec9abbabbedddda4aa31dcfd994ab6646df3afc81d3b7c

C:\Program Files\Avast Software\SecureLine VPN\OpenVPN\libssl-1_1-x64.dll

MD5 d7b1c2e90bfc3b633d0fb76c75e33815
SHA1 e658117e8042673854fb19125df40c4bf88d888a
SHA256 cdcb54e4b656d9c22942a3c92769ac55d955dd06521d12086097bfd76075ae33
SHA512 4136fca0f967c9bd1b811f03dcec45d0d5b92432c544c970bdc9b77ed9aec98431cc5537406197488ed225d1a8d47f044a86459ef521d14222abe5d6757941ba

C:\Program Files\Avast Software\SecureLine VPN\OpenVPN\libcrypto-1_1-x64.dll

MD5 2063f90dcd53fd627f50c4408ea88f57
SHA1 de6424a4941eb4cdb5e1ac3e2f92d4601c9483a8
SHA256 0f7d05ba4289b16634b8ad618b0029ef5df2867aaef272840366ea18c3b7c89a
SHA512 c3ff1e7b4dfb166e39e0adc1dc98ddf6f3db77ddc0be1dc096572d8be33de9b53db10aaac4711ed2a4453ef6ab43e4b81d17cc98497d6cdc303066622121cadd

C:\Program Files\Avast Software\SecureLine VPN\OpenVPN\openvpn.exe

MD5 4af6402c9b1bfb66a580ca9605e4df72
SHA1 6a21c1f0f0b6bd79b2af9a37dc3f26eb586e11be
SHA256 633796f573287114476021b4ac8f789c6e0793c9168bf739ede8bc594eb794f6
SHA512 dfd50f2ff8326ee53fb80ea30a0fc48fd4ef2ceeb92756dfd08cda00ee703b9d9928a0951589edc017b2ca40f01a5300a9ada9a3e338dc05bec9d8145077ae03

C:\Program Files\Avast Software\SecureLine VPN\VpnNM_chrome.json

MD5 9e3521d9eb1b9896b4681acdef40145b
SHA1 99bd53174c6899b463033fd26d2f4235d038f548
SHA256 41a77c37228599ccfc92fbd9e0299084a8033cdb78dc120721e1099fdc751f47
SHA512 2b3da42d5adf616c3b1e3dd743609d1e1f95731be96adab9930bd0860786755ebaee2681bce65fd62811c0f02865a35dc5af527c5c6998ac94055b1c760ac0c4

C:\Program Files\Avast Software\SecureLine VPN\VpnNM_firefox.json

MD5 7e6a5c23ef620547a66d123411a8a3f7
SHA1 2032b7b4c0ffd0fa9115663822ca5382e4c2877b
SHA256 68f001df8555bc29ee3a98475ff965964acd119a00580856b28ab234e57bc9d7
SHA512 5cbc95854f4939680669b7f8f3c190d763147a134e429cf642d2457129b05cb13a93ea4d8d5f6cc590c3304c68c34387767b671ea44bef2266d7a7d48a4f5d44

C:\Program Files\Avast Software\SecureLine VPN\VpnNM.exe

MD5 002829e4020101a5ba42aeef1935b226
SHA1 d62e455b6cd55ae53da2f4806cb3fa6c9d474513
SHA256 416fcf2cc51aa4c88bf1a354eef072b2fbc4fc016e356b3512a47e4436cdf46f
SHA512 8c273295f10b995154d654941238bec30ab60cb896cea579a99869c46b3660814953398e8cabc25f85f616b23e0272a41484ae5ff9a38d8e04c79f94f0761619

C:\Program Files\Avast Software\SecureLine VPN\Wintun\aswWintun.sys

MD5 fe8e5600744dc2a9f18c63f5fd59f30d
SHA1 86ffd4a494a7271046922f7253ead03e37c832a0
SHA256 f11625ddd4fe6ed19d94ea327aae7a28470b45212f6ee9eb7e2b3efc0754275e
SHA512 30658af7e298e2740d19abe735c32f33f5d5b24c48044b892b9272668ce1dbe4515b63882165444a547e223fced6eeecee7312b41ee7da33cd3bc9a2240acbbf

C:\Program Files\Avast Software\SecureLine VPN\Wintun\aswWintun.inf

MD5 3f9fc1d58361db2cfa2723bf9c7546dc
SHA1 4884d4ce2ac78535d0a1e25d09a64440ae920c66
SHA256 af0cbfbd587f55963a23ca5301b5a75b6aa5c99318a0d5515cde099ccef82372
SHA512 ba6b78f30c6043c4e1e4ee6a66eb846364e4af070c48377286929ae49d44aabaa58f27ff7d4de983e7ed9ee444d91938cf6ecb96462543dbdd4cb4573e4d1f95

C:\Program Files\Avast Software\SecureLine VPN\Wintun\aswwintun.cat

MD5 b5b8186bbd1b6a3b9b6fdfa177c51504
SHA1 a82bf045dfb67e907795dd29666773e10d1e80af
SHA256 48b86d1a2b1ec4d849b209cf15a308a13b9d75b4967b09860d9a0ea550dadf54
SHA512 9db31810f81c4a81edd2684a5a24c033951e4f188bb277c60055eb3d7b68344f6dec29663ab930e6b3ffffd8a4c4b1daf5a9a92808e194b712e83080db7c46bf

C:\Program Files\Avast Software\SecureLine VPN\Mimic\aswWintun.dll

MD5 b4bd3f36afb399976e4db2a92b7ba939
SHA1 7b0801f48ce77ea44f4c3d08ffb642968fbde8ab
SHA256 1d8ba60a3c915fd295ccc099cf5559b2d0b3257cb9d9ffd61c37f62718537243
SHA512 2d66e5c90b55d6ef4d4c5d58a723e1273cf866e0dbe9e60392a74a6cbaad73a81aac7bf373ef84e774486ba4fc4c84a377d8132334036fb220de654edaa7b300

C:\Program Files\Avast Software\SecureLine VPN\Mimic\mimictun.exe

MD5 9a7d5659dfdac0053e0cb9f0d233b57c
SHA1 ac423d792f99b27cf9b0841c434c02454600d79d
SHA256 7eb2a422777d264abbe5f1cea6e0aef9576b66a9a8fc9ba2e24c39578301a8a1
SHA512 b4f6467cc282ef1d4c2eea27356a6d1fee18a907d48bc9ae40a09e5662792ded5aa017911359e14959350a2d4d80bf8154a1a2257d682be836b49c3b75e14d3e

C:\Program Files\Avast Software\SecureLine VPN\TAP\aswTap.sys

MD5 81d77ba862c2cac331b9e49d1d55477d
SHA1 121daf145b2add6c751a70453a88ed5bd85d9e24
SHA256 66a3634bd6bf3c8197217c678d0f7d9e821f153b464e39b3b35a4ad8a69933b4
SHA512 5f720ae0b49886e41657153ab064dda9e7a3baafa9615bedfb2ed141420e8879ef18e680a8b1e37281a9d4b8f88fae3f19c62f43f148d56cb691c8fb098ff5a1

C:\Program Files\Avast Software\SecureLine VPN\TAP\aswTap.inf

MD5 fe2ae1b12b37c7e25ccb573c426beceb
SHA1 22c2812abf9909a8b52bb8c70bf85ca5d2c6147b
SHA256 02ed8047a16be618f463d6718f49023c88f5c0042f404a4b5eabd8ae5451acf9
SHA512 9c4537dec97a777d38408eaaddda5eef282bfb38a275396525c3f717da7e612869a2e39e99bc805566afdffb149a70125aaced9a9bacae69d7729260f3643fc4

C:\Program Files\Avast Software\SecureLine VPN\TAP\aswtap.cat

MD5 7a83f401fde1f23fd05239e0ebbe901d
SHA1 7849668afe9bcbca4f03935586813fd37b3226b7
SHA256 0cbd8fd35eb94d18c0d107d4aeada9d55427e0fc61e5c79a230c72ef07304286
SHA512 e87c156df7d8ea29cd7c17da5abcedf7c6c624f149aa4924e60587be3932f0cfd3a9319ef27019b584a18e29b518e13fcfefd889096f46763f59b9e584c16590

C:\Program Files\Avast Software\SecureLine VPN\3rdPartyLicenses\readme.txt

MD5 1441b82bc07cf3e366ddffdaccf70e68
SHA1 a350af181d86ce43d3b6e46eab38a9cde5317d7c
SHA256 9218c9cea59c8ec28ef2325fc8d71a380ffaaa19024c6665159fcddc426c3b28
SHA512 13a4e0f023407a2b120dd262eb95e2f6b9e883322e683ad901295d37c35b0fc972b24c9a1dd866146723a618a1da9b013eb639a7d4b7422675dca24515842df7

C:\Program Files\Avast Software\SecureLine VPN\3rdPartyLicenses\3rdparty.txt

MD5 7acbae33d4323f31e70da49eda0d1bd8
SHA1 d7b945a1a20febf371045dcd0f6eaf06688bb3a5
SHA256 9f97c892c37d0b062bb0bb3d09088748da95bbdbe8ab2975c0e2520b5a4a9949
SHA512 dd024c32e407f105f6e05ffc5e8ade0832c25ac21e211a0862de7f3e9740ac0e47dd6a5b1d55a7f2dec8d0b7ec7da58e9034161063367a01934225068b8730a6

C:\ProgramData\Avast Software\Icarus\avast-vpn\icarus.ini

MD5 085fb60502281d538ec010d9b12aeebf
SHA1 2f68d97be3a3ab7e4a614d3733877270f4ecc712
SHA256 83f86dc259eabb33a683b4dc72b497ba81b599ece7effffb2cd948b303a545fe
SHA512 28606fd76ef0df1379da00d50042a60788f90efc4f0127d716187d108f070efd292760e5d2860703f0c70a82414daf8b52cec41a4343e9fa5d5dbecfa425502e

C:\ProgramData\Avast Software\SecureLine VPN\config.ini

MD5 34b11161a717e882332b969589cddcf4
SHA1 cd5d93cf1373a7166e492b0e591c77d21345a72c
SHA256 d1822a20444c8c8c8a4775d408c31a5f08d6b33f868a549ff874a54117da545a
SHA512 7ce9f60ba82e565da46df4a0518431cf1fc8aa28a4950ca3b32918fcaec12b19509bb38977383d1fd82306811402f2e4959c8dcb2780762415e5640085ec25a2

C:\ProgramData\Avast Software\SecureLine VPN\config.ini

MD5 1d70b595875193091b412e46b5c01c09
SHA1 aa2d5cab962392470520efa3576e1aee0d06757b
SHA256 1d31c00a9392b79fdd342737265619be74ddb91415575271aace35a0af9b4b62
SHA512 d5163f3b2bb6e43234978232d1bde0ae005ea5d1f7f3835497f6400c7940b6d675e8517b4b92d73eb5bae8aaf4fa9f31bd08f2cc5d193c4fa81d8d305632fce9

C:\ProgramData\Avast Software\SecureLine VPN\config.def

MD5 5d98008f00d3a5659b7b4a88ffa7a1a3
SHA1 6811bb439df49a9c469de17098f6eddd99dad9ce
SHA256 56d0bbe36fe272a42db15d6eebce1f29ab1a6dc3364a905345222e47b40734ae
SHA512 166443ab0277c825b5fa9e5c82e62712bb5c30f52c7426c76ed6d8443931974c75da9535e7f45695fa020f1c239e3bf57c8b69341ea04c1e3cce6f76c8c4f2ae

C:\ProgramData\Avast Software\SecureLine VPN\databases.def

MD5 e8d114d458cdb5ac3e1fec32414a5816
SHA1 049078cb3bbcb0f9db1121f6d55a38c7fa823251
SHA256 8f2396095c519fb387e5518b1356fdb7027c4ceca99e3c21af9d6de8c38c8e37
SHA512 b3d654aaccaa5ad81f5085e51020487fffadfeab57d680b53959ed521d5e03e4d8f1c16583a2fc3c72ea47f12e7f14c147647c58b56afa2fbaa2c4c3b869cb00

C:\Program Files\Avast Software\Avast\defs\24040406\engsup.ini

MD5 d1a9405f3f50a1ccc0dda898fe80929b
SHA1 95b6b96645c24b45f23133b190d0a687906f968d
SHA256 6cb432b660443f42b1f529e0a5f7c90c5c85eeb71ec236e748ad6bb7cc671567
SHA512 655ff5a94be50c655bac9130f41ebf4d21dc62805e72f8177a31a6e1feca00c1a230ed1e92c1364fc61020374b39a4403551020249e038235de2a77da5f96427

C:\ProgramData\Avast Software\SecureLine VPN\databases.ini

MD5 b243d4da36c1d11a48783afcc3aa1253
SHA1 ed97d55a78814c5e545dfce8166e042bd2a8b063
SHA256 c995cc82df6eb621105706524f556cdcfa8bfb87a418a4f8111e5cbb5c1bc4e3
SHA512 5f3b612d934f95a6c67d1c48406ba70960d785848f1dac782bfe119c71085daec353e790be7753aab999b11992f3d2ef240539d3a0fbacb940a6e749b2ce1c54

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 fcb02f4cd9b9c48ad1d947c7282b34bc
SHA1 81295977938f07dae50bc903412adc826e4c336d
SHA256 cd497331e8c00543237c6bc61e1d045883fd5dfeff026676e18f75ca16c5cc33
SHA512 42042ac0fecd6e3503259f4705831a3276f6fc6ffb8e811d4c3069b8dbb0f71be053f8b680e1129f62aaf325a0ba499a46a0530f14107e6453486a1c777b09d0

C:\ProgramData\Avast Software\SecureLine VPN\opm.ini

MD5 a18ae3c91375b0f9c1596d425d9c7d33
SHA1 029113f948907f8d2a0232cc9dd6a8710c7ac459
SHA256 bef9924713052264638d2e1d72df2c492c746fec46fa854e3cf3d93ccfd1b28a
SHA512 e197ce89aaa9117b40aa22f3769cdeaed51f0481398d91741aca7a8c5415fc395861e264af3d6cd94bc34b29288254d78556aed2c21096025bbb22910e422a68

C:\ProgramData\Avast Software\SecureLine VPN\config.ini

MD5 95a3bec6a433bef32282465406316ec0
SHA1 72e2dca72e145e43f9ca8a5cc332d604d6f00c12
SHA256 c37d68775c7b4ec24933ecc78d6c28b1615b55ceb85066a744a945f923aa1fdf
SHA512 b446b875511621527543cb7cbb1f67f85e1a258bea6acd29d8df9aba5d5c58ac8a6ff6bb455cdc5046a7e63ae63c9f25578217977b2ed8254a0c5b0660d1fa8c

C:\ProgramData\Avast Software\SecureLine VPN\opm.ini

MD5 54ff4225fe7e3dbe005e57e1a5fcd824
SHA1 1f545c3b185b80cdc9a2543169fd8181be3143ca
SHA256 a09ceb63682997ba16df2266d9f7d47670d43b78d50012b506380bb00b726874
SHA512 a00a15390782a8221082ed75d9ee8f774211509b33f5e8d7b4956f93aa55d6c9bda078492aefc8dab8bf9783d7fc4642f17b759f5b54020e82823e3875b9defb

C:\Users\Admin\Downloads\TotalAV_Setup.exe

MD5 7e1760c63553d56fd73d0fc2dcbf4b5a
SHA1 3bfba02d7ecd632c34de3803faa73315be4edb98
SHA256 b9a83fd92044028d1dd0264b972c95c2cb7564e8bbf480b245c8bf28a1dcb51e
SHA512 5f732813fc40726f8762297ad0856232dd94c30695949915a1b2bc5303429765acec772c21408e9b88fc469a16ba721f58e1a8827ef797d002b666d756aeb00b

C:\Users\Admin\AppData\Local\Temp\nsk100.tmp\nsExec.dll

MD5 09c2e27c626d6f33018b8a34d3d98cb6
SHA1 8d6bf50218c8f201f06ecf98ca73b74752a2e453
SHA256 114c6941a8b489416c84563e94fd266ea5cad2b518db45cd977f1f9761e00cb1
SHA512 883454bef7b6de86d53af790755ae624f756b48b23970f865558ba03a5aecfa8d15f14700e92b3c51546e738c93e53dc50b8a45f79ef3f00aa84382853440954

C:\Program Files\Avast Software\Avast\defs\24040406\engsup.ini

MD5 836f36775711059722be123b9e6384c1
SHA1 ef9c2740893b4dc5613aafd4f239e6be9e5f9de7
SHA256 5e5838afdfe274ac24e46da4b8f64115e020856527d9dfad47d663734a8b53ce
SHA512 f32aaf71f6d8386d9abe703bc610578255fdc5ae22499a0b93bd2e39fd6e1b515816c7ff7cbaa4fc2b27fec6c50eeab9dffbe6eec47217a491b9736fb948e9ac

C:\Program Files\Avast Software\Avast\defs\24040406\engsup.ini

MD5 f4ff844b17610eae19eb8a0c1a1c6ee9
SHA1 3bfc714b6600d969449cdec8859b25874aff6f60
SHA256 8d29141720868c5fda029c1a5f550b2e9898c4d24356a1d67477521602bae8d2
SHA512 7d49983fb3c50b8a8306573cf6808b1b990425de418773d0d7f8cd0832213bc2d1fc43677e0011b19cdbaba047fe26b522119dee36dd9285b9a2c2aed601674e

memory/7684-21240-0x0000000072490000-0x0000000072A41000-memory.dmp

memory/7684-21241-0x00000000013D0000-0x00000000013E0000-memory.dmp

memory/7684-21255-0x0000000072490000-0x0000000072A41000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsk100.tmp\nsRandom.dll

MD5 ab467b8dfaa660a0f0e5b26e28af5735
SHA1 596abd2c31eaff3479edf2069db1c155b59ce74d
SHA256 db267d9920395b4badc48de04df99dfd21d579480d103cae0f48e6578197ff73
SHA512 7d002dc203997b8a4d8ec20c92cd82848e29d746414f4a61265c76d4afb12c05bce826fc63f4d2bd3d527f38506c391855767d864c37584df11b5db9ca008301

memory/5872-21324-0x0000000003270000-0x0000000003282000-memory.dmp

memory/5872-21325-0x0000000003270000-0x0000000003282000-memory.dmp

C:\Users\Admin\srvhost.exe.tmp

MD5 9230edf00fd459655e417c6085cb29db
SHA1 daa889d89ba2f85ca4a2b8e2d673294d603315ea
SHA256 155bab41d1b9792d18a3a17300cc500e3af4768a340178ea5f5c2a8aeb82cffb
SHA512 28b71fe4e3eac161b1bbd913ef00b2b2647ca5886496099176c50a4e90e61b28e60f004ea62b6d1b4f708f9eddfd01483711daae4122faa0edc8f327f6bbf0a7

C:\Program Files (x86)\TotalAV\locale\it_IT.mo

MD5 9e5efee9c003ff0f7c23786b049d1baf
SHA1 623e5c61dc11d1ca88ebb6722ead5287e543b12c
SHA256 6e6e5ac92a3341cba3585430d460f74071dbff1bde2f79b8246810dc35983775
SHA512 22061fefc040800a40f487efb023807fb5dcffb68c2aaa04250fd4e0265b7de56f021da0adcd147dcbba1f60f78df998efb32c7996776abb0d051cbd496f5541

C:\ProgramData\TotalAV\updates\SAVAPI 11.0.1\on_access\win32\win7\avgio.dll

MD5 49e51045f2951fd248318ac9f1ccb18e
SHA1 7a09bfa925fb2703bba5b26ddeae1ec7e3a481fb
SHA256 73b563935d96d328d5e13d05ddc35f24b69237e4c4b7b183ee66aeeb3ccd9c16
SHA512 df00015514bbcdd6d0ff9c38485ee65d7700fb7cadd4327d12230d63f078da5e9aa5fd11aec9f8c741bdf7c84c84c38543af1f71ebc12a4477415e2c5ab9deda

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avipbb.inf

MD5 b9a877ecc51ee9f13d9e5451f8b12895
SHA1 45a8abeb8c295295e4952893452c54850f721868
SHA256 4bdc3b2fb007febf3718c453e08c590d00378fea4e2628431f85ccbb1099605f
SHA512 079cd60a4d3f6bc990119574a4d493571afbb24209f1a15bb0202d3c24c66fcec3151e132d84ca036f46cceabac34d1a20c7d1034f0bc487fe9feb2740fb95fc

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avgntflt.inf

MD5 6fae3f1bb20b9e1f2ea6d8e0a1c35e68
SHA1 d281eaf5659ac3b6dfa501bb2206b8a7af86f230
SHA256 c17477ce4372a43268b01e398f438efa52729bb3718324be9ee1508849374f09
SHA512 f77032a6451e43e0b0c7e881afde1ee83fc542412ff6ee3dc9932608f1c61943f18da31200c4347e9373f575f5e6f2ee3ebca655cf9f190adbc12e5f7e7b5ac6

C:\Program Files (x86)\TotalAV\mscordaccore.dll

MD5 87a7aaf5ae5b7de4e15572166ca95d74
SHA1 76ec73926d22b708904e01623beb0138009dec5a
SHA256 5e63a9d0e5a7d10a738a7ce4633bff84e223183ef2155b7adf80c211a2b80a77
SHA512 5f0b2761c04c5565b5232446e3ca77a07f4a15567fd3a5de69661e705dd872a3e87358d79d6f02e807879eb1e15934fb09ad2e066a805c12c67c8d2c917e696f

C:\Program Files (x86)\TotalAV\driver\amd64\LICENSE.txt

MD5 747025499b4a05d19a0e3431c634cdc0
SHA1 c93725625c81fef7ff8663bdc5d5df501a3586a4
SHA256 fa8e8f02f81de56cbf470b91de1f6fa69c3b39a996c6e1f057df6212324cc564
SHA512 2b4eb9ef2ef7dd28fa0b30f268c1ed53130ad79686a1f785ccaa925a3015eb1617fde45ffe14068a08ac2ceea34579aa07f0199da57ca057783d193759bf8b49

C:\Users\Admin\AppData\Local\Temp\nsk100.tmp\AccessControl.dll

MD5 9e7d36edcc188e166dee9552017ac94f
SHA1 0378843fe1e7fb2ad97b8432fbdcb44faa6fc48a
SHA256 d52a83c2a8551cebf48ff7a8d5930be1873bce990f855ccab4d7479cfeb22e3d
SHA512 92c31355cd124ba28c0ff9aa8fa34d5db9db0b093edb8978bc3cf94e1f72d526603d5d5c1e221dcb2ac6648bc420f4df9847c2b1e71046384d827814a77d1783

C:\Program Files (x86)\TotalAV\PasswordExtension.Win.runtimeconfig.json

MD5 1bc39e80d6d10935c1e3c9503108e508
SHA1 a5272c88b3cff15e52f1f1ac348284fb962ec875
SHA256 202001a334948c50b6754226e1d935ef79b42e8b51c7c2311f5b86d4c3401acf
SHA512 5c7a59f20016e42f002585cad1998f50de5e22e7486344177fd61feb18f4d9130dc84e7d9c925034f3b3454310ff4e608ceff3b829ad3c8572803bba17c9dbda

C:\Program Files (x86)\TotalAV\TotalAV.exe

MD5 cccaf3ebad69beb64c9973de315074ac
SHA1 7bfb588c11d01b58559af45a5560cf9b65633069
SHA256 1228ead05883abee346299ed08de684c7438af548b4a527dffe469777fb00987
SHA512 2697992b45a58845d782e9f31b485bc65130d3bf55e618ea13195e47e6492907a77c46ebe596f9851280b8d7fec6b429329c71d8884796ba18203a349b9a199f

C:\Program Files (x86)\TotalAV\urldrv\wfp\win10\i386\webshieldfilter.sys

MD5 709ae7d4bb1817abf5b22bd5eb6d1943
SHA1 4123eb3773d91e5294abb1d1ad3cac52a34d5a48
SHA256 7a8748b1531e99f3549f579534e193fd9e2b1a96042313037d2aa6ad9c1e140d
SHA512 dc1f66be19368e7c9325a4f52e47b9d813912d06257a670ae42ba26206c751918fdf3a61eb2e383230ba6bb6a25865e594c5df80cb244ae1137e517d4dcc24c2

C:\Program Files (x86)\TotalAV\urldrv\wfp\win10\amd64\webshieldfilter.sys

MD5 b797771c87184870eb95d2e50e17a9e7
SHA1 b303acad4220542c3150bb979aa966c2640434af
SHA256 c190a676d707f290a0f6fccb60ecbc4b3b5dea5ea27d552095acd4110aff51bc
SHA512 60ced524fa3bb611b6a73734b7aa6bc30d10fdbf9914a8e4c79e1b79c6402a678fb4963a29f237418affba806ca39bdf766b229b7679d50431aa834e6fa99341

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\README

MD5 dd70354b0df8379ef2edecbe4304f900
SHA1 04670a5a3d483ae50bb5488cf8cecdfa7b7083aa
SHA256 43b602dc083b9e5836f32def1521b42f5971f7b12e47e8d272049283316f0aed
SHA512 1ee14e8834c0817305e01a03984a73484a23b26f9328224513412b764017501cdce0473f58d2d64ed647adf78f51bdc7b50f5efe3f0183d736154cab83ae70ad

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avipbb.sys

MD5 18ed8302d083dad602823988a304a4f6
SHA1 01014fd10d7babd6d81bb7e9511ffa7e13c890fa
SHA256 629da28ac97f5b17b1603059242088727e1552d68fe350f97fcd0b67d412ab25
SHA512 de9ea04221fb1270db37d35fcc1acdf7265103e079fd31566b0a043a1fa3b2267a034b720a3070538f289fd3847171d3d54277417ba0f67aede86f1b78db220d

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avgntflt.sys

MD5 ec059af10524644bddcc073916e78375
SHA1 93a9466afee21f61f643f540b2ab82ac7db60b62
SHA256 868ecdf543865035a3703e8837869441683b8ab396eaadf6aaa0e455e8393c5e
SHA512 88310251e07eb6edda3eb28d057a18fd7d1ea7a9adc5f861fa7ad127561bfb035468974fd11685b66654fc37dc3577d7d720e2e9e4f4fc38d116c1089ee9afe7

C:\Program Files (x86)\TotalAV\ReachFramework.dll

MD5 948cb84290473e06b8f69bed5a38ffaa
SHA1 61acb3f2aafd33d9c40ff848ed02e91995d02986
SHA256 8d6192a62168a5ee42b45eefb3abaae9cbaf0fd46e2b4ab64a612b6efe8a4c8e
SHA512 69ef93290fe2b1f180a78fcf99c9fe9871d4f29361493649e1ead42fb032af6c0b9ec0ecbfb46af64a2aefdfa5202b67a16a86e16e9b4d0a6c61ec2f307e94e4

C:\Program Files (x86)\TotalAV\System.Text.Json.dll

MD5 48112a26c30f6ab0e3147c19781f9a95
SHA1 f74bdc8fedd5155b6f6b05396d4d71761420104b
SHA256 cac807ba6fac5a4143b0a566af8b74837063c6d5f7d6ff768152e7894bc066b0
SHA512 a151b2356def8e14e30a22b08e604fbf63d45edac819ed972924c2f636768c01a4f75e72d911c2d96515098357c1d54d03600d949c87e90a69fcf6ad314a68b9

C:\Program Files (x86)\TotalAV\System.Text.Encodings.Web.dll

MD5 d77768c5b136738822dc17848759c273
SHA1 74030398f47c2fccc1b7ea397f14b7c5fb9c8f44
SHA256 b3507c7ef158f6c8b53ae24067c0f47cebca9c8c809021952d0e7eb8b13ebd54
SHA512 987ea9241fc320cb246f1b8347ab99248642dafc718a83c5e00dfc17ac9668bae35cf6c26f90b45c9ffa5654ed88f52803f41ed8c75090fe8194abb2b7f07010

C:\Program Files (x86)\TotalAV\System.Text.Encoding.Extensions.dll

MD5 97841b84d7abdc787982ef00e8e8cb50
SHA1 0b49222bd54cd700709ebda224df72248c85cf27
SHA256 c2c9f41c1be3596afb8eb4fce6e21867917a14351d2ab01faf9d81395f6c976a
SHA512 0a07c2df770f569702c2a2fb8d26faa0fa62d1b8b83be003433f2f60e2ce366fc8393cf5d1337d136797fc28eec9753e609acf5c5a223ea1b012162153024ddc

C:\Program Files (x86)\TotalAV\System.Text.Encoding.dll

MD5 f6171bd56f8697584d4df2a4b3866ae1
SHA1 62afd05f2f293dafbab3a2aa3c039b057cfab6cc
SHA256 d2e860bf41fba3b7aa9641e2121adef6a797353b31e7d14a581d250436669fa8
SHA512 8e3139a36ebb37a722837148da9d1858082966ae986f57a30a9a118d83022e1cf08521d385f4f0582ade74ee1e18ba63dcd9c9647b5bebb2f32be32672b5df31

C:\Program Files (x86)\TotalAV\System.Text.Encoding.CodePages.dll

MD5 d1f3cbca19f67eb146480b577b931fcd
SHA1 acfc89c89166d1c588ecfc281ded70d5aa439d21
SHA256 6cd6df23521771e17e24dab563dc5816403f87c86e5c0948320aca5cdf18e271
SHA512 3026ff16006257672dde064a330885408229eae6d37cd126c7c6a7ce7b6f63e65a087f0cf3331772a77dbae2f0cb66065369908e462a49fb4d0f19ac87b68495

C:\Program Files (x86)\TotalAV\System.ServiceProcess.ServiceController.dll

MD5 07f6b753e85bb69e38d866e5fd428aa5
SHA1 074b4652f8bc5389fe56f2d6f3a614ffb27bb704
SHA256 1fb83e4a791c8e25c12a91ecb99646b53e7b61fd26ca8af7b843e85548c9c81c
SHA512 9e6f67180422197acb49cd6a05bfd54ab3153cf9ff4dfb3eed89c7ed0e9e8931a192990cdb5d6e7880fae45257340c80e177dc122083c01cfd1ac9743fe512cf

C:\Program Files (x86)\TotalAV\System.ServiceProcess.dll

MD5 baff65fe62f0297fde0ca86c1a45a52b
SHA1 2707c063ab78c88326276fe72f401c59ce5b4bb2
SHA256 49fa12bee017d82a95f0cdc2267b06588ce8f592774dcfbbcd68cfcadf5b4ab0
SHA512 8a3dd74a52585f284f869d44e964df9327f968986aa6d03fa2b6fa763b87cd9e0979404a89c06441b135154fd72d2dfb73cad58768246ae3bc9ee75ce0c08ad5

C:\Program Files (x86)\TotalAV\System.ServiceModel.Web.dll

MD5 52b3c9e708baeac9d218001b93e1cef5
SHA1 4554ff7982595d29c9526029870e596ecd045fbc
SHA256 7f0f6b6db85fcc9739cf3256a0bc20574842f3e7f833b4e64cd45faa7e4e5a45
SHA512 a90734f6ae0ab78805614d9899e1f0137280b4e02a41789c55e8aa8f21fbf2333c35c2298465b84c3b83344917bf63fa7943143959c143f15b7a02880b10ec04

C:\Program Files (x86)\TotalAV\System.ServiceModel.Syndication.dll

MD5 42aa1719a875f869c067ada18f516934
SHA1 4e3724a54926395370bbde2bc9d0363c23dfe9b1
SHA256 48d6d299813cad6fece7bfa7a2674404750be32dfa541cabacb1b9502b7fa11c
SHA512 1c1df8fd476d513ce019e5ffb0a872cf420e0668e547d276b87d3bcc8b997d07958b0301d5bb575e59e2b279c78d45426b11d6387f9158c93cc81f6dbdfd3e32

C:\Program Files (x86)\TotalAV\System.ServiceModel.Security.dll

MD5 99a41bbee6e343283929baf92b1eddac
SHA1 1e174d3b47efabbd683cc6577a8ed6e77d42bfbe
SHA256 dba1d155da566afc2bf4d131f47f6e770374b7f2d5e6679e978cf5ee099bb73b
SHA512 41064b29dbdc320a4b7f53d39dacc8faa864059a6dd114ede610427ac7aa2c73a15e7bf11193d6d026bf3ff0dc237e410001c8c048f5899ca8baf9b570dc99c4

C:\Program Files (x86)\TotalAV\System.ServiceModel.Primitives.dll

MD5 8757fa6120b249a4dabf41f1e86c1a88
SHA1 090aeb4e0e18393df97a6daf6bb2ea7c4e512349
SHA256 9d10f481254515208b78209309db31a804f55c742a45aa843fde4e7ed3e02341
SHA512 69c515ced32a8539907523e63372fcbeaee1433fcf6a2578f894bf61c474920498951f3e60cf3e7af5a5044edf3b926a20d3cd7062f447e4a41d326a8bb30efc

C:\Program Files (x86)\TotalAV\System.ServiceModel.NetTcp.dll

MD5 41cedc634a584887a57ca22be8b29b3f
SHA1 eb1c0c22cd6b447c6814f24f5895a3c52a2be93e
SHA256 093704aded9db781a65a234b7e8fbff649e112599056115ae5120b5e2b194559
SHA512 57f5ef0a95b2e0fcf4cd29be381628b29f4b52b430ad4b573c2241d61124df81cba5dd76e2c4ad16a59c6897025ffba63aea0625f36cab8d1ba971a33bca1066

C:\Program Files (x86)\TotalAV\System.ServiceModel.Http.dll

MD5 3708250f24df059d4814a560aa348a25
SHA1 fd9da7f8cc293513e7add9e7dd62ef6ba9074a03
SHA256 e5ee987c419900517173a5ce5b4215396faa8fbcad7c5d45a7699dfc6fb8f174
SHA512 430567a2603a96a9d68094f93abcc7bb75ec0363b46d13e045c32858b465bcb39471d0967dc800839546d4932e8173a85c02b53809de5e008b127389acad5523

C:\Program Files (x86)\TotalAV\System.Threading.Thread.dll

MD5 520073af46143bc7128f8b3a6de0a2b8
SHA1 a9639dcf892633231b65552ef7c748feb9362435
SHA256 926e642b0b6cadfbc3a4cb11bb81454eed8adf50acbaf19385c2ca40decd40d1
SHA512 aa086ba704a3f75a761af0e265271abcdd10fda6d66076c4462bd74eefc3987ecf42230dac6df05a0d56b79b8bf8664163dccc1ce87e05c5f4e5dd886932353d

C:\Program Files (x86)\TotalAV\UIAutomationClient.dll

MD5 f9115542337c422922173108f35f6a98
SHA1 fee4b41a513c3061f4bb040f26c9af39f0c7de96
SHA256 df0dd3fa1a3463a0e94a44b70bd9fa9f4e4e91ca7a9e0229ac86442614c42268
SHA512 b3d29a436582f86aee4c204fbe814a8d934a45e265e0144ca8e209e269dbf554bae281164cf687bce777547c67e20bc7052210e3335b8e1ba30176da53da53dc

C:\Program Files (x86)\TotalAV\x86\update.dll

MD5 8fcfabdf2458336b061a06d7362f1c37
SHA1 ed669e2c73292d3a6510ed9d670bdf56cb7ca92d
SHA256 fc85d8cc5fe0327be1253c1f69ca48eaa30d9aa583becb6f1e678e7960e33022
SHA512 056eb2071e33efaa7ac52002a906008baf0f8c59f8fcc99c500510c327a6b2917922706c9ec05e12f716573d6d9321e28190f1a911f765d596fd4c0d4c882dec

C:\Program Files (x86)\TotalAV\wscf.exe

MD5 25330672ddf4763c86f65438ea2561d6
SHA1 94a602fffe514fdc9d3824263f6491f1342a9cf2
SHA256 266d4d9769b1498992fc953f2c82b9b6853b311f06adca63825a07c4dce72da0
SHA512 0cb2aea5155843e9ba4a5657acb8451665a722720f0e1d4a66935752aaaabcb56b032f31a5dbf4e5f4f310f28ca0d9e597c2f3f12a9a162e56063338db018630

C:\Program Files (x86)\TotalAV\wpfgfx_cor3.dll

MD5 52d8f7f0ab9d679209b707c7ebc8377e
SHA1 7042a8788ea40f29b2fab2ec249dfd9e8c6ed7e6
SHA256 69c03db89ad14cdf2c05db284d1452a517d7127bafd871334685d715f662d203
SHA512 8617663d2292ca05d1873cbf9cf2397a0e56214c5bf5d66d5b1c8e95658a5604e1d27656ce853d1306c4a21575e3fe45934a0b8e5bb256644cd064b8d8269c87

C:\Program Files (x86)\TotalAV\WindowsFormsIntegration.dll

MD5 0a90d6f7745945ac8b4ab943117a2997
SHA1 3bfc301f7c1fe06d24ae75792985ce0ff96d0b5a
SHA256 1bc138863ad0bd5ad76cbe133e6091e774c875e02cf070653eaf10dde099c299
SHA512 63825e8a0a5f085b9b513d14e8e3103921f2cf3a0250cea3bfcb03bc2e562543c89cb5ea92bb4bf12cf0b885dbf5248203ea59500bc0ef55788f2bae1498e346

C:\Program Files (x86)\TotalAV\WindowsBase.dll

MD5 d1ba0f8dcdb06bbdb31b92f21557aa92
SHA1 41d096383c3334429ecf27309c496142c09b59bd
SHA256 8f6d8283bbc65f2e5d101b6465a80b130060e27ed304301aefac5e370b4ee74c
SHA512 811b671d4d7271e682d5f94a0e1605784866f27545abe9dbe6fe10bc2a8a80240b15dbc9949f3bcba056fabca402707c732f32488f60d11029863073a350331c

C:\Program Files (x86)\TotalAV\Webshield.Client.dll

MD5 61de4c9a5119a54f7c114817b2cc362a
SHA1 3f3b0776526746bad4775482ad17c20821f99ce1
SHA256 8b29bd93b6e919f7098f0eacdc66d72ed25b3e9472e3c61a17ae5cb43419b8c6
SHA512 a6b6bfc70a1cb7fd810dbf4b320eff94beefe2a8f1846e7acc709ed92cbe9d6b5b750782ef189608a2e44011cbd5924fc34a088fbefab17fe8c1dab61b00be6b

C:\Program Files (x86)\TotalAV\vcruntime140_cor3.dll

MD5 1a84957b6e681fca057160cd04e26b27
SHA1 8d7e4c98d1ec858db26a3540baaaa9bbf96b5bfe
SHA256 9faeaa45e8cc986af56f28350b38238b03c01c355e9564b849604b8d690919c5
SHA512 5f54c9e87f2510c56f3cf2ceeb5b5ad7711abd9f85a1ff84e74dd82d15181505e7e5428eae6ff823f1190964eb0a82a569273a4562ec4131cecfa00a9d0d02aa

C:\Program Files (x86)\TotalAV\Utilzr.WPF.dll

MD5 263efe529fce04baa4860e5114aa847d
SHA1 132451c90e386912941b95d74f709679acfc4a74
SHA256 69465cb04f9d591f2fbeac213b9e4c2ca61b3f17f2e537528ec48b1205ef591b
SHA512 a7c83396cf84f0ca0bd7e1fab10a57b998016ffa73af7466ecc10b13ecc711473c0567125217b99f74de311296b54d4f841a248ab6571fa835e8e7926cd99892

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1b00f3cc0a8403114f76c9dae62e339e
SHA1 9e9a81711d67f67756ed4a9e0f80193b0625f6b3
SHA256 b7fd3cf58e49416959cb1148ae741b65ce895f0d2a87549b38af0955bde94db1
SHA512 027acc4ca5c3b176dea1f5e3a91aa0ff38c3481f14fe3670ef7e880a7c74545a19212c0ff123ebb31889f1396ec09d439ce6cce5377858d27a3271d91adf3d4a

C:\Program Files (x86)\TotalAV\Utilizr.VPN.RasSharp.NetCore.dll

MD5 2958f26b0902352fc73b3816efad4e4a
SHA1 38b9d9a075dc9fd24c9b18baf2068f3f67daead4
SHA256 5b9a3b0d0348b33271caaac006b2205d0128a246d74086d230501e53ec907732
SHA512 f993ad41614986e72310e10b414c3e232c4bc6e3f55ff1d15d4df731224063dbcf55ead14d57724ca39f75b9df60e34d4de3211ccfbb5d7d9895faab51364bac

memory/5796-25015-0x0000000070740000-0x0000000070B6F000-memory.dmp

memory/5796-25016-0x0000000007210000-0x0000000007220000-memory.dmp

C:\Program Files (x86)\TotalAV\Utilizr.VPN.dll

MD5 cf81d3cae034b4dad84060ef063e5765
SHA1 86e72fc9699b7674d503fa6268eae4a65e821e45
SHA256 a1cdc1133f8003c020ab7e2d9393a76eb11d3f9bb3e11f7fd55aef39d0f4800a
SHA512 2841ab2b445b180097112ebab21dc8554284c360d42d8c534e813bd2aa8e1d72a1815a5325d47558873489e444260870d811ad277477b111fff2e1d35246d5c2

C:\Program Files (x86)\TotalAV\Utilizr.Ras.dll

MD5 bda74b0b910ef7f8ca46d50ecbcf69a5
SHA1 467cde529a82b6a5e7f52049eb3b6326cf0f195c
SHA256 80927555d953ce14fb8b22ade23ee4b534b9e6b63a85939a3f41ef6553de7e6f
SHA512 f8f537ce90b16294e0577127016ddfda1c3d232ebf0a84c1e7c821793cbd47550f26027f9e5715667f572e00c1a683c7f6570579c2e9289deaf37da1ad9faaa8

C:\Program Files (x86)\TotalAV\Utilizr.OpenVPN.dll

MD5 3bba1a6b2a0a573013004def7d072f85
SHA1 15899568a637f3ec4df7f7bd1b23b9edf02aaa9a
SHA256 81322aeeef6a98186dceb13ea714194feff82bc2d33b5c42409d45f912fe1a11
SHA512 53205b4fb7d54d0aab67141d6209b6e8f9cf2974cddd7ca0f5f6eb95184760d89af6b628652ee49483f3ba7db59e6aa67294cf483af91a7ec74c2609e2053a49

C:\Program Files (x86)\TotalAV\Utilizr.NotifyIcon.dll

MD5 1e3feed90d5602cd617ab521ac90212f
SHA1 45f96effea4fee95c2ffc733724e42a988d70ede
SHA256 671bd4aad1a91b134c2fd4e1c4a48a82d667d936a49a60b4c41de2552d9fa868
SHA512 1b792747d6b8086d25828b22a329367bc59172b23297daa235436e0591fde5cad3738169f6a3c8eecdde18d88c2eb00ea2965b631bad2dd09c01c3a5247f0685

C:\Program Files (x86)\TotalAV\Utilizr.Native.Win.dll

MD5 ade3eb76f24c6c0296452433d35ed54a
SHA1 6bd0976acbebc0dde8d21c118b687991a2e1dcfc
SHA256 6eaf5cca444970d80abc62e95dc2deec1bcc4d6945e8d1b463c0ba40d50d43a7
SHA512 7c92157e5fa82215d4f259b3db953ddfe7850dd16ad263265d0ca5f31a64f5532b6786157a7b7643c8e7033f0f4630b7c13de233ec7d1ed4675ebf402b59d964

C:\Program Files (x86)\TotalAV\Utilizr.dll

MD5 34405f7bc238783edff4f7d27d5db5c0
SHA1 9054362111e4fe721bbd41fa0e58c871d2edb2a9
SHA256 1caebda591a0931781de7f1295a931f1ea1c7c99bfc27d1eaa9e9e7c385bffe4
SHA512 82eb90e8492cae875dfcab66acb3c95fe1ec67a627e9585c6d1fba0bdfb5abe0936a5eb2cd132be3ddd49e5e5490141271c35436040c882bccbef7f4c06af350

C:\Program Files (x86)\TotalAV\urldrv\wfp\win7\i386\webshieldfilter.sys

MD5 9508031dacfbbaf2595fdc9dacdb3b2a
SHA1 7b85a2830535a53068a8167093de36a3d3176e26
SHA256 3512260c75fe5ab584e7c072c38a9b17f4603c7b735d9e9e1e0b2f0ff901abbd
SHA512 a27287409313bd084510f92677111b92424c6a39eaf20e53519f563fe5a8d3a339b5e5d7399713164b41e1e22fc6ad87f6161f602ebdc74f9785f87e0bafc01e

C:\Program Files (x86)\TotalAV\urldrv\wfp\win7\amd64\webshieldfilter.sys

MD5 36a5f7f6601d2427426588ffd415ea89
SHA1 e69a5cfde38c82a6b0081e476fd83f1e3211337c
SHA256 16399d8faf4a30ed463b8db7900fe0e67aa981a519d324f32349ba2abd779647
SHA512 3379adcfbcb23cbdfc62390a0ebedde75810b1f90c19bb66ce142594994a11545090583cc9d71e4e28fb2bf875fd5798f9adb9e339ba9a146513734fb74693dd

C:\Program Files (x86)\TotalAV\urldrv\tdi\i386\webshieldfilter.sys

MD5 2aa6d30e357b9a3e63d178f244482150
SHA1 44577e1a2fbc916fc8acca1ae5c7958ff64f8da4
SHA256 3282e62445815de2e45092d9476f6ba5625dc50c96077845c2e32afbf8c9d2bd
SHA512 57964eb6f0e36a4eaf41e7586d1fb37e36896fa26687767012443898c1b59f8bd4900da1f639251ae726e60be8df97812a9b700d5064fcccc0343e59bbb2e0fe

C:\Program Files (x86)\TotalAV\urldrv\tdi\amd64\webshieldfilter.sys

MD5 21a332af5c8e929415dbde71db19b8ca
SHA1 dd908daf05b0fa89de836110e68f97cc54859d21
SHA256 b5ff1ea46318772e179c56e8e386f9b6c5831a304ebc4783501304aa2a9f8d33
SHA512 c0dad463aa71c1cfe2cf7de1b605be36f57fc49028a68b37e823ab5449f985b07d4c7b66e828aecbb2fffd240bab3f51d75a2d4ba43fb14674c0af50684d40be

C:\Program Files (x86)\TotalAV\UiPath.CoreIpc.dll

MD5 5478941a84114d61b7e0d58fd1a9ea18
SHA1 3f33fc1d6bb6b3db0cd6a94db659b72c93c252af
SHA256 2b825223319529860a85edb1267dde625f11719beb70b64a3f4794811ef74dde
SHA512 16f81df471e8c52e88d19010a0c3e26235b25cd79b59337fc52f145189ddeea7c11c21711d66e4345b793172920e7110806156e7a4ebf4459842e8bdb3391f63

C:\Program Files (x86)\TotalAV\UIAutomationTypes.dll

MD5 ac463388a5bd074e0c5f78faedae7a3f
SHA1 aa76fbb442eaa382551166d24ca7c484b9815235
SHA256 b6b78e5d676aafef787cd80e53d346e00d32d4c4b5f538b2bb4bf73aecd4fb44
SHA512 91703a92529ef366de0d13a0621fa0a6ef96d19144d33156b79472e0e28fbb79c00603e245daaabf73848190f04c3b13d4e1dbdb316c7037633c64f714aa80b5

C:\Program Files (x86)\TotalAV\UIAutomationProvider.dll

MD5 c38441a8d1c6af274c9dcaa36371ca37
SHA1 67d327632db75839da87a85859452943e8fdc83c
SHA256 1f1cd0d5ecd1b5cba7f0e13c47201368f1e2670a274f51ab3a6f6352b5472988
SHA512 c280c3d75d1d083337465a60c6ae1a1833039b925eac5066ffe423706cddbcf3dd66e61aad782829edcf59d160df963d5e5977726f12a4b64d7845ef1a532b07

C:\Program Files (x86)\TotalAV\UIAutomationClientSideProviders.dll

MD5 774dbd0432c038e0cd1f12bd9815b406
SHA1 dde22f173c178920b0c680d59ac692ec12170395
SHA256 fe614bc0fc3a928c692aa9a124ad23df2e8340589812128dadd175a5a7aa16ee
SHA512 f14f72318203e126ff0e1d97e6d5d27e37dbaf1961246cb5022032fd80e44cce1b4c7bb015291d6e9ac614c4defb3a379d9b1d71c359b9a158e977040a235fd8

C:\Program Files (x86)\TotalAV\ucrtbase.dll

MD5 6343ff7874ba03f78bb0dfe20b45f817
SHA1 82221a9ac1c1b8006f3f5e8539e74e3308f10bcb
SHA256 6f8f05993b8a25cadf5e301e58194c4d23402e467229b12e40956e4f128588b3
SHA512 63c3d3207577d4761103daf3f9901dd0a0ae8a89694ad1128fd7e054627cdd930d1020049317c5a898411735e2f75e2103ae303e7e514b6387a3c8463a4fb994

C:\Program Files (x86)\TotalAV\Trinet.Core.IO.Ntfs.dll

MD5 bea773dcb85e63a9bade222269c62367
SHA1 1572e3baa0c7d7335222acd435cab3616dc08c10
SHA256 4f750952c56bc9800cf7436c90ef983dcec12b5d156223522c9c2156d59b12c5
SHA512 a9c592a8675c96df544d20a0d0c004614789e034a2add26515fb4974d8c7caa98c018e92cb6e6df682f0f6e01c01e2d23395313b3564ef34315f0b4dab0ef1a0

C:\Program Files (x86)\TotalAV\SystemToolsWindows.dll

MD5 beff09abb00b97ab6c7b6190a772280d
SHA1 a1f9a9f65d94a701057761e1d21c2c2a266ad93b
SHA256 891d80bfc25e80de19ec819e9a4d3059d40a22a259fd349a6c2f5aa1492bf352
SHA512 235224d4eeb91ae50236ff7f8a43e10ebc6f1ba2437dee6d47937c1511f97c8692ee3a86d83f2532fe6b876a5996a1b53730998c311580a36cb3056086fd7937

C:\Program Files (x86)\TotalAV\System.Xml.XPath.XmlDocument.dll

MD5 f9b0a48e6992380cc8bc1125ee3b7df1
SHA1 4eb18e5115c8be53a61bf8a7092c479917c1ce37
SHA256 5aef6270411213995e83fc1c886c2545ae7f69d3f484f0320a7ca373f66a95b7
SHA512 db762dfe8d4724416dc5924e3d1aa1f7685aa20788a8bb30b8b2135265a03281182adb730bb122364676088bfe6cc2f19deade4bcb53f4943b2e60182a57c88c

C:\Program Files (x86)\TotalAV\System.Xml.XPath.XDocument.dll

MD5 85df03f8eea82a8997ae5d5e7216f516
SHA1 c7651ce2617239ad1fb2efc0d7afdf586a6e4309
SHA256 8ba41be47a40f344928c92181640b5db841fb325500e3fbf772e3cf4ce78d056
SHA512 62d2d220d9e1ae36c5c88af9740ccce186548deda39089a9c7703b8a4855ef3d24666608d2ba5b8a97a6779ac75d5286c667fa8380a12e49d4c2cc8a026d50d9

C:\Program Files (x86)\TotalAV\System.Xml.XPath.dll

MD5 fd7b5de88e17c734cd46495addd2e9b5
SHA1 6bdfff284a9039ad0baf1c01ed5a1b16465ad9b5
SHA256 fb076cbc2c2998fdf3fb59c1a8a3ee7bbebf9def922466f8f200b93076263ca4
SHA512 2f67c81c64d1d5b99d2c36bbfcff87eec7c22a70c744dba1e67a8040464db883aa0a5ccd268aac15803bbded3a309c4ca7b5d04415c7fcb6e8e3e2d6ab476ba2

C:\Program Files (x86)\TotalAV\System.Xml.XmlSerializer.dll

MD5 c89966f292c5e6b479c2b3aad9c8cd86
SHA1 836c1db80dfbfab4453df6d7eb01f82ee7c3d5f4
SHA256 38019b08132f45e928cebdc0312a0aeba3f71572192a682f207e43bb860048e6
SHA512 6ee43e72c97263423c415af8e013595ffa35fdd41c4e992913b69280d86a4af4b28ed3b8996cf873c135aee0c0dd1ce0ccc2ea47be09641307cd91bcc3a35574

C:\Program Files (x86)\TotalAV\System.Xml.XmlDocument.dll

MD5 b4fedbf764780b7dce28da95a420d697
SHA1 4941b0a0e9511694b5d27cda36877b4dad89cdad
SHA256 a5f438c4e21d1739df9595a0a9fb064de2b74fea35755a74633cca5f875d4dda
SHA512 55200562f072f04acd2c9e03fd0b8ce379e329e9e7435d8d0d97864712ea4f774ff1b92bbef30b3856fbdf7ea80323dad4738ce6f36baef642b75ed4914303c2

C:\Program Files (x86)\TotalAV\System.Xml.XDocument.dll

MD5 0bbaf643f66860420adf5ebb16fad642
SHA1 27221e1ed6c03613792ad6c14b3446902d624b4c
SHA256 a284999ea5a18a713ce7f63565bb8c089d70b261de5b9835825e37b295b510e3
SHA512 c0ab539ba2018ba06aee3050724ab0be2e463b7b63b227d544fa4f415dad624ae3f938872983be28deb31ae81f6e0cd10db71acaa8d1492c0fc90d2aa37a1132

C:\Program Files (x86)\TotalAV\System.Xml.Serialization.dll

MD5 f3e53f561f28a72396d8880b5fd43061
SHA1 e6600eb8b032ed4b45aae94d0b16a92e316079ac
SHA256 fc6423505981d34502ec151c12e462dd87614167a7652f1cdec3964ac41757fe
SHA512 886000f017296a211de5dd020c0ec0529f5fc483231e2391506e56a23961ada65b0f8d05b48e5ba2160ae0ed11c3c3bd014e222cdf903111a24368e3ef04ea0f

C:\Program Files (x86)\TotalAV\System.Xml.ReaderWriter.dll

MD5 b9e09b548bdb184b83a5588f598bc4aa
SHA1 5aad884ec792fc88fd610663aac11adf3fc7de13
SHA256 e5d1bc0eca4b452c6bf1ac792c9296397d8dc072195147cb66413748c12e3318
SHA512 a8b4cc181d15638c5e82c28b51d23631780395ff5945de6ea25547498a7f43fbcf3c12b0877b5bbbb60d08e42aa3f63306396047919bb9f626eca9df7e6234f1

C:\Program Files (x86)\TotalAV\System.Xml.Linq.dll

MD5 992c84a8940aa608d19b3d8a7de37250
SHA1 1408d2e802e482b028e0a74893b76f24050b0e35
SHA256 ba4fceca075f4bc010a20506237f939903f4b0dd39fc707cc2ac9678bef88bce
SHA512 673bac1579366398faf5a620e664b72f51d567692a729ea4c5d1a1c93b1e62149c5d2bf31cef9da23a571c95074a438cfa1aafd97693ddc35bcff1d536c342be

C:\Program Files (x86)\TotalAV\System.Xml.dll

MD5 29619d04b8d76177ac3aa6531850d780
SHA1 74663ff0da33fee097e640efe61ea7ac3ef5c0c4
SHA256 ac8617f3ea708d5c8ccd5801030713ea7366a80f99ee0f4bab74212e98ba917b
SHA512 2b7769ba99166d5eaf56142ec495c2f39c5b9bbc56bf115ecb73b82c18b2421fa722c8293666de337d3d28f599e21778a30944e04a5d42f8eb3b8c37056a3469

C:\Program Files (x86)\TotalAV\System.Xaml.dll

MD5 0eafae3a741222c0c70c684f95ba0ca4
SHA1 d637d064819f6e9c26c42646f3c20c113ebea664
SHA256 4c00761f3ae97b3925442e25654dba81a033e89a678109c276668202d12878b5
SHA512 9e669c28f9e242d409b167f4e16217ce40b6daced6bfee9b201f9596de748043631d6edf3b743253d36cef43314c006869d3944117b88239e07682bced0a9dcd

C:\Program Files (x86)\TotalAV\System.Windows.Presentation.dll

MD5 b0026d4bc150bfcfaa635cce3c0274c1
SHA1 554e69420dc20dacaf714627c67be5580d192835
SHA256 1e26e9e1dc838a2daa84ca5aa4102d0fa0e2b2003d0bb4f28265f18725e3b019
SHA512 7bccfa7e72fd89bbe2e020e83a241a1b2967d7c741cb83be95d25486e4a97d8e0097e88cf09fb80b16491ec0ffb55a4a7f793f03c54b684cb0be240acde88eb8

C:\Program Files (x86)\TotalAV\System.Windows.Input.Manipulations.dll

MD5 21a4ed44f42411c0eabbcb9d557ffe75
SHA1 72d6911b4a9e2c18f47c31bd036694edbe05aa10
SHA256 d030c8145d86fc3e2765c89765ea15cbb157c06c7faea155f26ed39e2e50cdfb
SHA512 e70e97002a9f447147535ffcda5ed9fc1942209e2bb95588551006692cf76b07204d33f906ec219ce2fa67ee574a44c910dd293ac6037260753a692e584f9600

C:\Program Files (x86)\TotalAV\System.Windows.Forms.dll

MD5 ec5a7dc7bfbcab037901f174b52c7bd5
SHA1 73a89e6046617a3af7ba724f92defb0365761a11
SHA256 a76af35171df472e387dc467956c6b056e19a43c1e0e09f89a1572628c54fedf
SHA512 33548b655ea172de39c216e959f13db8aecea63780b4025b2235e097ecc99f732793548bb03b481203abf28905fc4f23a5dedd73591549c01699b6249a3d5ae3

C:\Program Files (x86)\TotalAV\System.Windows.Forms.Design.Editors.dll

MD5 59a01daff776bbfbd979bde411b3f560
SHA1 3c74c9b82065a232e281d90b8f822c9cf81d4cbf
SHA256 75bdb451824e01c715f233f830238ade3e272be34c71bd7a2df7aa1b7efce2e6
SHA512 ccccddea85489c9687b32f66f0a0db638243d739693e7a66fce67b4801053ecd01c8a52eabf00fbcd0018d9f5f0b60da3a5910d26814846675299f8651f90d9a

C:\Program Files (x86)\TotalAV\System.Windows.Forms.Design.dll

MD5 9e214e42857781903f5be6b42ac89ddd
SHA1 185c472431ca8c94ea9c49da9edd4a981a2a7cc6
SHA256 5ea9190a7c0b339365d03c0c48866746cf2ad3f0e7640ad54b80db954fd64d96
SHA512 22b545d8429f0317a75662bf3640fbd88d7587d4fa1a3bb0f79778e7d326b25ba23a8ea0213b43a962bf2b7f0a72105891f346f15fcd12c6f8bdb0743f0b9274

C:\Program Files (x86)\TotalAV\System.Windows.Extensions.dll

MD5 d22b23b27ea42e5cb673474bdfeb4177
SHA1 fed248f1c6b4f9c726cc82d68b2f44f7d9597142
SHA256 8f5587ce58efdd95d3e07077b56ceb0a34f42613f10458138e4a446aedc7d3a5
SHA512 b06873684c7e30432ecf0981a997c168462039913a097375919da2329bdc16896e9dfb626c1564d6f331339ee46efbb78f36a2039c2f86b9ef751ff89beee0f6

C:\Program Files (x86)\TotalAV\System.Windows.dll

MD5 718ad855af94c8999ed3ef8d6c6bd425
SHA1 12c6ef3b222cbfb39270733519857562fa2d0953
SHA256 2c0db98ff26ed75ff5a0363d71437fd68f2aa32d07fe191ee3d5682d2e067f5a
SHA512 fb5d1f5af77d6c4beacf44dbc9d3168457419465f03c1420916512e57c4718967aa5b58b3ac665c54ab75d8c9fc5ab3a72c0be03d7b7c19d8f273ba3e662c30b

C:\Program Files (x86)\TotalAV\System.Windows.Controls.Ribbon.dll

MD5 359717d50a5029f8dbca072716138250
SHA1 d43be955d0d7dc0fdcc2fc24b5764b5a9eb7eb0e
SHA256 fcb319f1e12b5082950402efc159ccaba132b32135294ae3883dfd0326cb2e9f
SHA512 90b65f57e8b1af5f1cf239a83ecca6f6e3f024ea7b9e75b2b42dd2bb0b36ab93546c43fa5bc1331919e26128b6b0693f178041ab45a63feadf2a95e92d3be507

C:\Program Files (x86)\TotalAV\System.Web.HttpUtility.dll

MD5 5452b0c5e2a0e6fd12f30e9db446a67a
SHA1 4fd804bc62445073a3493b2d4afce8b39dcf69b8
SHA256 0e78eb3300d85ca6619670c01a7331403fac62b009eb1bb23e1df557602b24bf
SHA512 06553acd0e0055600d1b4a02e357fb5d5dbc58dff5d821b1f128b2f2d02fcdbd4377a3f46b3fff0ebc748b2b96f3fe92d7bf002b8bfc767cb4f5134b48923c3e

C:\Program Files (x86)\TotalAV\System.Web.dll

MD5 ee3c4a983ef4ee5e709458bbfe276823
SHA1 cfcdc2d90c5f6591d404a869120468ebb59ef97d
SHA256 609e02ad9d44a40a448b886acae4b593bd6e8ab34ba308e9da80e377a7401ef2
SHA512 5fd35478021ead442e595ae95a35225e10952c909af461d250e03558d37c2e18fa7082d8fd18f3ff91b7748b6973460e86283115cf92cd8511f9d8db861cda5d

C:\Program Files (x86)\TotalAV\System.ValueTuple.dll

MD5 b1c7225340b294d227ed9ac1f6e6415e
SHA1 06f19581321691f11ceb47cf68d1ecf26ac615d1
SHA256 38d2f423a1aa49679bb8ca8dd29efda20573fb43d387373e96dbfe173cfdf7a7
SHA512 a079999aeb6ef1e29915e4fcfd0a86af14cef90b03cf6dbb5508c59b89732cb4cb97d98afcaaf4cb64d24c2b2aaf113aaa8bd30602e3f55df815f314563979d3

C:\Program Files (x86)\TotalAV\System.Transactions.Local.dll

MD5 e658b1851e7774c15a7069dd044bbed9
SHA1 53124d5141719c688986d2a5aed0843f5e983b05
SHA256 abe8f895ad18cfd50fa1705f50855ca563a92d8bba6ad649f2bd39aab3930625
SHA512 a67bf210a901b3b17fed576bf9ffae11faf9d66e2c102abb52225b257c392baefc31955bf98dde175308fd727c056e8c7567e71d409404a6c10df0145c14ee52

memory/5796-25017-0x0000000070740000-0x0000000070B6F000-memory.dmp

C:\Program Files (x86)\TotalAV\System.Transactions.dll

MD5 26bc0a5c83fbaa630d58e4c37b30c200
SHA1 bfefb3fe6b366377b20806f24b1bf1d486e03d85
SHA256 b0b1767ee54ff87659839a260f1553d4cadc0ec402b121328c0918757ff5787f
SHA512 5903a91ee5f6308677c3f39afae26ddec90caa1a8b5fbf261097b3530a8733a78ef80bcb2b61ffb372ec740995197bd84be5cd458efce880c066f55d8a6f08b2

C:\Program Files (x86)\TotalAV\System.Threading.Timer.dll

MD5 daf144d20e5066d5c95dccb158c88a97
SHA1 366151dc10a7bb7a789d2eefbafa0df567e515ec
SHA256 e3ccf9d37b3e20427067285f8588e28613ff705310da9eef67fa36e9da6ec8a2
SHA512 87e3f313be23e54f7821ac054cb1cf09ec0f01665d533406477abcca6e5ee50e70e6095d72c3ee405e0ff078f8ad98cf5fd355f2f46d78b01b20c332b199b517

C:\Program Files (x86)\TotalAV\System.Threading.ThreadPool.dll

MD5 fa937c62a0c52445b021bdd6ede175f7
SHA1 b91c8d10f971bfc9e12f846bd1be7cf29ae6c89a
SHA256 3358e61263af81d99e8995441d012a8f75ca8d5d35e8c7c3aa6685c89f52a691
SHA512 9e1fc7726447611182ecddca0f578b657cfe2e9cc8f4685050f3edada8b4b28e619f81fcc343e1be4da4ba98aa8f6a823e3f82bd1ef5c0e6d0010479d7fa8d22

C:\Program Files (x86)\TotalAV\System.Threading.Tasks.Parallel.dll

MD5 6dcbc3f77f425b548c5a9e7b2a47c38e
SHA1 1f094ab1a99ca6a0743771429e8fea52cd60d9f8
SHA256 af07e133114232ef98bb98348916ae7eec8c46ef2a1b12e572d2b728c76bb19f
SHA512 19ec425392790c3f3eba4042e23afe0e019368df0b3206861bcf1a38023358d1ae6a685f99710983042d2fe6ffc6320053f8117ba8a34515c1e9335d7d64298e

C:\Program Files (x86)\TotalAV\System.Threading.Tasks.Extensions.dll

MD5 8755ebd05994248ed598bf950c089d58
SHA1 382e2679a2db822d814742f6a67c1d655823b09b
SHA256 abd6518b314792fac1c281e61ebd9d0ffc654a7b9204cecd3fc5927641c5bbe4
SHA512 69653bfd8687f82384ed24b21a64541be1e1165e1832a817d48b6da0c35b6d2a3559cd669cea4ea1482e707e5e62fd8d0b77707784ed99d7282f1cbea5480267

C:\Program Files (x86)\TotalAV\System.Threading.Tasks.dll

MD5 0dc41a0a77de30d1838cf6f183133089
SHA1 dc0db3350fce11c3e742117816db053e72a61a23
SHA256 8d2942e975aaf6cf8217f65611b4f64b0dfa15e06fad1eb621d368f3e77fd1b4
SHA512 3ff9968ca53c8e011d2c9a8ddb73d1457923961d16665ec72ebbc725c5aa456605727a74af7716b7ec22cebb06346b765ef0722525d6d66f99c6e7c9f84a8c0e

C:\Program Files (x86)\TotalAV\System.Threading.Tasks.Dataflow.dll

MD5 e7d3f3d33047878beefcac595ee8b1c6
SHA1 c2fcfcf09b18aec9b9e4d77f57894720339befed
SHA256 07b35ebd9a0581ab44d458c53f13268e8aacb98763148f90b77f267400c6bbf4
SHA512 8da9059d3937e857682a766d9ae9cfcc9f7ea0638ba30e683226b5582fbcb333381f8f3e7f10c8d7b27944fba2166fc30b80ac72c349e589486c0b12fa10112a

C:\Program Files (x86)\TotalAV\System.Threading.Overlapped.dll

MD5 69302840464fd65d319287c61c6a3cc3
SHA1 3b880344c5e371f3cdfd266686854d94a580ce7a
SHA256 f9c7b710fc12daab8851a6b7dac3a44283269283765a991e7d740b8309c49104
SHA512 827f4921d08137f3f165ccb14a18e2b7c197977009b65ddef6473d8e47859d6d6b914c43ad6e6d2b158c8a31635554f43dfa1f416051739cc0f9303a444a78c7

C:\Program Files (x86)\TotalAV\System.Threading.dll

MD5 14407fd6873558448a79d6937dda51da
SHA1 94f506b0d0109c62fd218b904d9366bbe50d8751
SHA256 7bce0d29f5456cd7455afbd97d71089c1802ed423ff9c9299cebef30978f3c62
SHA512 e0c56f4c35a8500f4515b2250cdab445697ab3f15fc59e33c991b962422569a0bd1bfa563b785d705f4554fdb0f8f32b12733321ee8046f65b95d00b326cc642

C:\Program Files (x86)\TotalAV\System.Threading.Channels.dll

MD5 4681fd45a6a89eb8440962b37bd343f9
SHA1 dfe9f5e674bfba072e4f5b469f55773093457e7f
SHA256 0772931ecddc0f337c8702ddab477e37f72d779a225a4cc147067d23a5542f14
SHA512 fdf2ac6a72d2e8c7a6777a7ab08349877b876694af90af79db344558d2d9c2b86bbd0537cb1ae6ebf3035624428881760d9fc3d852b59644a8d5fb817487c0aa

C:\Program Files (x86)\TotalAV\System.Threading.AccessControl.dll

MD5 6d46a78535c08c1cc0b2bb1743f2e978
SHA1 2b6dcec3e8f8db4a61ea6c388853220ad5ebb445
SHA256 3dbc176f20cb9dcd3a66c4d45d7b473d7ddf5945fecc5b3a824e511f4296563d
SHA512 3a08b5cf784d9b1e927d68096a8e961744b3d48d845ed757e4c5c786f6e932d124470d8f56c62ba75b74cceae77f4239f0d302d0c0bf9f89bf17298d9e96cc6a

C:\Program Files (x86)\TotalAV\System.Text.RegularExpressions.dll

MD5 1a822027278537f978cf44375324f409
SHA1 38db67968997a1dbe8ee62bc57d75e05cff915b5
SHA256 68c3d90e812ba3f85abaf3115b16a836eaff05938665ad08fcec8dcbe4ebb025
SHA512 88196e22869dd5d159befc3d4615e7ea576fc8e85c1c3c50be6a0b9e36d17881d1fd5f371b85d27d5075e1a0c2da3f48bf758e7d8b672a5da33d58223eaafac7

C:\Program Files (x86)\TotalAV\System.ServiceModel.Duplex.dll

MD5 118ee20f1160428ec506f9fe57c80225
SHA1 69649b52167fadf1c94005fa8f6d9ae9f0a84962
SHA256 78ac27f0813479dca9092c1160e699a22d3e4a322448d0efcf68ca1762a37730
SHA512 8efbe1fd607236bc9d9e4ba05cde426e6b49c5fe73267b018a439db7824bf24077fbb2f68b9f1a03386f0e7b2f1f4031c52e95f7ee9d2587b95254ac5fed2648

C:\Program Files (x86)\TotalAV\System.ServiceModel.dll

MD5 faabbb1dded66aac765f0e75e816e1a7
SHA1 25641af23c12c660853315a0244f2186e92cd1c3
SHA256 2ddfc838ba2ff3f30118a557f47a9fa8483a36e0f639e016715bda0474008712
SHA512 3a71ce89c17a5cdaa41d761f179eaef8ad62cc3dd74e07a1eff21a64fd4929c9e02c511de046397c02d91449e4ef35edea8da571d4c91d1834ad8d0e5d1e6a5e

C:\Program Files (x86)\TotalAV\System.Security.SecureString.dll

MD5 f5c40794c808da71de1c4e1ab4faf16c
SHA1 fc614bdc2bd9a4cbc91a3bbf92346fc0fea4b499
SHA256 762dd98815885030474f9d327c34f9f35978de4918ad51d0ff167f64947910b0
SHA512 c628480c5c1935b44d03a6532d1881dd8a800fc1f9ae6b53c858cf3b9fb0f945e24f3a65e1b1a0b1a5e1ab1ca9077ef790a912b67f1644c5b01a6d92f88ff222

C:\Program Files (x86)\TotalAV\System.Security.Principal.Windows.dll

MD5 3a25b04b46da74e0af05b71574d0ac97
SHA1 992104a3aa3bbd94a22cb16e9e86fdfd51e686c3
SHA256 fe964cd7d8778f39f72a5cde81e80052770fd9633c9cafc53c5253832386f545
SHA512 21d27296d1de1596f36bf9f810ba00dcf7bd4f4deb5511b7ac6aaf98ff1cd11550c52ae14b93e65e39c591a25491eb5f33e464512831fccc8b3aad8d482f660a

C:\Program Files (x86)\TotalAV\System.Security.Principal.dll

MD5 ce0388e8f0d85d7c601e246e5985966e
SHA1 bfbc0e729b85ca27e4de3f0903022a1716201689
SHA256 3b6b0520402df1a0543118c78c82435b61bf9111b2824fd31e59a3fe67e69e03
SHA512 730ed920fced564e28404d2733b963b29b9210806fcfde0b73accd06cd4225ece06f9dca2d06d2fe9b8f350db85ec30249964d82c49cddd4e8f3e54451403473

C:\Program Files (x86)\TotalAV\System.Security.Permissions.dll

MD5 8777398255b941a954d48ecf8b78e2ee
SHA1 8378428d9979aab355c91e768a66cf927a60b51a
SHA256 78835b8707b4cd259036c433412b1686acfdd858e39f003cc7f881bdf213f952
SHA512 c75be5d2b0918eded3b83c6d0de1f9fb6cfc80b9048426e87baf381133a782c7cc2526c3cef1d26c5ce28cb4395519906de558f60ad3363078125cb8e411f75e

C:\Program Files (x86)\TotalAV\System.Security.dll

MD5 ca27405a8a1dd64467867dd9e703d039
SHA1 0f6d2a2a6daf160182afa73140321200069fb68b
SHA256 b623c4a5e0d96b3ff3945db3e5bb8d235b3b0c2f6d23b8636bd68bb72fdc9e2a
SHA512 019962fdf434d7bcaadb739ff35b300dd3c125ee9b31f4f60e475c80fc2b02a0b0b9012fbb6da0a0aad9dd5f65be07cddf0c4b965b0d7a8da1c915a77134a9bc

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Xml.dll

MD5 372e7871a9928b27522252ba7b286a52
SHA1 f8e88da036bff12203ba5e13a138d9645b72dd65
SHA256 8f51e84959e39b24e71e5439fc4daf57b31ab1f09d80e6782a9766668ad77ce4
SHA512 e008de243bec5597eaa50cf120f95c9a28dd5c354cd72693a537e1c0cceb25fa4985c100d7b9fcc022ef3ca7408d6222c004b5be9d7ed2099d37a86242ba2274

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.X509Certificates.dll

MD5 0618942ca628d87a2f5acdef59d5f63f
SHA1 8d3087cdd271aab64cdbb44db7d9a24ea0fb26a3
SHA256 edaf16ab027878bfc46a236017ec02aa2a5d107458b5f0243742aba82aa06959
SHA512 8618c6f0f8c215112f406cab110e5bef1649a34e1dfb53e4943fd4920b929af1df9510db5dcbd6d23fb4c2e36438f3864ac3e9c206573e288efdf957f6c18640

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.ProtectedData.dll

MD5 5468e9d3b7e8fa1b6dd4f089f5d3b995
SHA1 6ed6314272b6d423d3ebad99beabe6268bdc7588
SHA256 a1768b5b1b181aa32dea75961f6e101ad53d7f955e79ad4527d0f4cb2ee5b16a
SHA512 9d0466e8ede0dfabb5ebd49d2d4f250f653329eadc6b7792a62a5e46568cf3c85252f8ca57ca3f5f4007317fb292e6e04e90adadde1a7b88a1b7febf65c58f87

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Primitives.dll

MD5 99d88e5e28b5bfe0df8c35eefa90c06b
SHA1 879eb9a9e56b7f1df35539a580a6baa82368c17c
SHA256 3b22a67cd325e1f4a4e1b59519a23e0852c0a8d1e05ed0caaf0b378a09403dcf
SHA512 0adec8daa8e7e72539c324bf33efa7cf120daeb23905dac4ff2429528ad3ed561b181eb7e7daf70d6f832bfb335d3bd22839fc3b28277b4b2f6391f81d25c094

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Pkcs.dll

MD5 2751a3e9dcb2d59ec23b3399144e384f
SHA1 d0f4ed9de306f0343fa826ac00d1c63537c7be0d
SHA256 48250c7249b9dfeffc6d87450dc086586d986af22728a7902e91340f747266a9
SHA512 b77cb8de7bf3ad96bd2a5aafe16898ebbe3d66b587e3e15bd5b9c2d941e7f9aa4de0ca6f4ee61b095a0921e51ba12c1253d6c95018f810d00c37e66ce9adf1d9

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.OpenSsl.dll

MD5 37beec6e6ee2e9d4128e855578bc8c22
SHA1 8a6b7fe922f32846ccf353a328a2b61cadc95894
SHA256 497e1c7d7f02b4d534be4084873ba80b051b935212d36aefec83c6cd6a40e2b3
SHA512 79127813b66d282a8f5417cd1d4823d53be8dce711d9017905ca6881376eecd200fd76be5454d89965452dfe8c50c3609ee2a02cd7875508d8f2ef8c3396bf88

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Encoding.dll

MD5 c44b46d68b9360efccd51360c5efba29
SHA1 7149dcc6ae7c34cc52699cae1cade7dd36d5f9f5
SHA256 4092f04906e3ad585fb8defb60dbbd2e1ea6574ac885948370600d0d4d558748
SHA512 f8c37f51bbb0141ba409d816c79f1807b6235ab658c3f74c0ef2ddfa550504ac66207b84dc62c1fb9c327e4aeaf6a518d6fb6b85c44ce5cf8bdd6d2eb95816d9

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Csp.dll

MD5 40d546a58e8392bcedf356ddf917b1d6
SHA1 f018a1c76e1c4fa5c7eafbca6f47c1e6eb6fdabc
SHA256 5a9ae1a4c697236fb6a9e46b66e1a14a7b60110a83ee80ea641b5808c5c9ba9f
SHA512 68e77532768a21d39e0dd7083dbb2c1251e3e397d819ee3f95a72da0d22b88cc37021888ad15ae10db82583513497efd889506223056e3716c84d75add141cde

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Cng.dll

MD5 6597bbf8e129be4e2352297bfb245ff6
SHA1 398dcb8a9108c2ae946581f6349c5b6a6549b639
SHA256 643e1cb8fc16d1267926f66a6bd89c899044d84468a250f6fa56c6d92eb2f207
SHA512 f73a919dadf9ef23d5731865a6d007d41d5db9acb73f631317146cbad4953e1e8d0f9a5df0455cec1c0217efbe6edd8888f32a7196b5e73e3165ba24ce023f41

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Algorithms.dll

MD5 a38502388b46281d03cbc7d0be0df0e4
SHA1 54a114a0339f9a77ff6f948ea0af1b488c455172
SHA256 d7e3cd19c9c38982fdb7d345eec2951b47a12b80491b152580c4016aaf2ebd83
SHA512 a9ac4fcb06a1c75ba8a4e9294c5e858f33eeb161292508fce2cc38366755b3f376637cfd7920955b757d9a13dd2db18c71fc7a9f4719422f2bb5846cb930cdf0

C:\Program Files (x86)\TotalAV\System.Security.Claims.dll

MD5 0e5656d6538cf7f0286836ad02e5c22e
SHA1 da92d7516015fbc7b9e2756b86ef9329ac7acf9a
SHA256 a89235d45ec5c580d55c38be3b77f7fc73213e566d63dbc036d5f6a6e7e7b6de
SHA512 188aeba2cf98c0d03e8a32bd325f02ffad92c259875a9b83513c75dc42a73f84e380282f08a4c1525f8b1a2ea7a3ba7d3fb0a4253a3228dd6bb8bc7a3265cd2b

C:\Program Files (x86)\TotalAV\System.Security.AccessControl.dll

MD5 c868b7b695fd2bee34bc2795827a7b46
SHA1 928c996e6074f4e5e457048a98a7251f76a6d004
SHA256 7ce09376a9b66e23f1566a77a3f6327f08365fe10f887d349754b427a5f48f57
SHA512 410c5d404390743de89a8934fc1d65d3eafde2f4b72e774cc02511859e219b6f2c5cabe6260d067b93f699858bba0e77444de652a72fa263898d2c16522d9227

C:\Program Files (x86)\TotalAV\System.Runtime.WindowsRuntime.UI.Xaml.dll

MD5 d309bd3de14a64e331408b0be88d098a
SHA1 98b40667de331481624b3d964738b012c9f21e00
SHA256 d7ba2132369c971fd9e5aa47be4f378f6030b42bcd73669bd7d09e7a0aec6347
SHA512 b25abb1cd779ec823e71511360dee34b27765480e1982eb1e37ab727c0bb59b97323d5524e76244c8e2e27f8fb6e1893b006ea2c1e25ccd7133a12a0c7a80f0b

C:\Program Files (x86)\TotalAV\System.Runtime.WindowsRuntime.dll

MD5 56edd7e41e06bea54a9259aaff12168b
SHA1 4f6439904a1ce70d806ad1016a2c6bce72718a62
SHA256 1eab2a5ea074dec1a6ead80d1361a9fd4317e1cd334672c9d877cf49ccfe5730
SHA512 e21f42d166fb5a62b2ea1dcf92eb60b910c5a3ccc2426c2d0d47491805371206ba04032de661277cdc479ea9064fff8a0e61835a69388b976a2724a8a831b339

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Xml.dll

MD5 da0ce89fbe65aad22491dfcda27b3932
SHA1 1044b5ae24cae2e5024e85ee23c0352b258995bf
SHA256 be6577e9a5c0b5912fff18e6980f091baba819c07489244ff6e71af818f5dba0
SHA512 73805aaa93e103c0ae23462737a40e64653708f5a0265f273da1ba363f0d26e2594420ef0da97919e94a3f0f27fc0e17b540e4594f566597814ad9317e9f9042

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Primitives.dll

MD5 b1ac878b1603bc42deb8f1202f4ce38e
SHA1 9e565041902fee54b889cfed6ea6459e92fdc9c6
SHA256 40055cbf3662422998e9052106562383c634c1c7be21b2e7ea5c10c1a4b74522
SHA512 ad6698ef7818b7f6ac4d34ebf1035819b4d61cb8f3c2fa6b8b12e8fbe4daacfef05e2e383f1b00900c8ee34bf57a5d9c587ef70ed5de9e5b596c53c796edfe61

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Json.dll

MD5 f0e4bf6c66891eb5255a95d251f23e00
SHA1 f05c447926d29f8a7dfcfdbc9aa22592205d1761
SHA256 03cffd90eb6c909adfb24eb1b017aaa6e752765aa232d154e7668f4f0fcf5b00
SHA512 ae8f4ab4d104c122ad7a29a476237cbb08ee3f7a7119788a7e3589c5b3a714ad5c9a0266f56b6e375aa89bef0acf84b15a2d8771b5a8550c1565d9fd9a8f4dca

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Formatters.dll

MD5 e593f58dea6a2a5ea87c4a05178e3306
SHA1 a718d75bd070227daf4611c684ed0a4dae60c372
SHA256 cab5210a66f89d054e31a4204467c3f384c1fa2d308dade5344577c7369f9828
SHA512 ac1b4adc0c793b1ca5bfd47d68ee92d77be0c53eade54e25b845846458b376c25b66fc23342e065d019aafc303b388f7bbb7fedfa73645b93ac49477d2331850

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.dll

MD5 b932a7eff5de419f286a7325cc0befa6
SHA1 e3aa45ebb2ffec8c1681134f54d0f533d541c899
SHA256 33485af8118d494ca489a89f8f2e21c3759ea0317ea6c8a5fe541338f5c3d1f8
SHA512 6708fa3eec64a927145dd5bd174902f5c612700f0fdf782e577a7a7dcfb07256d3a43098aa9415cf038baac840194fa43ba0865fd451c49520e45efc4f6f64dd

C:\Program Files (x86)\TotalAV\System.Runtime.Numerics.dll

MD5 197c856f8ff7cab7036fbda26fda048b
SHA1 585e7aecedad5e9832a006a26a8ba05d834ed2a3
SHA256 aadc9d0970fe22d1cb9b8b3356b569398ad035ceb8c766170eaab776f7c03a4d
SHA512 c979c5a758e8e1d18aa897a6924786a592c4293f1cc25adc509251f6ea205c6bd5c28c2e6cb958a51e187d6789ded1936f16691b089309e6ff9a5434d02c50cb

C:\Program Files (x86)\TotalAV\System.Runtime.Loader.dll

MD5 0fe7d237ca3d177478dc6ea208452639
SHA1 d675e3c84b15848b9181a5fc2777e8ae09c81ec8
SHA256 488e674e338ee83eceb170e8eed9dcc642107497525a93899a45e7b7361a7212
SHA512 59c8ce0e7b4cc8ffccc613983360d1896ee70354ee3e9a5c26d9842e85e9afae542fe0f44b630376e12f6cc4fa6ca2357107cb68e7b84ff89490678d731c32d3

C:\Program Files (x86)\TotalAV\System.Runtime.Intrinsics.dll

MD5 a4e941e6c7db06ce5bf1681ac107c1f4
SHA1 33abf5f6c201adc05f404ba7f50107762a8c2b35
SHA256 6ce5ead1e4819e5ad89096c854b771a4871889bc99d30390622e76d6f76e99db
SHA512 9db864a06c48885a4f21776cfe42d47b20edc5a6d6dbed38407e3c6c3bfade2b9670ce5ef59275d12275c0b9816750520482c4c884c152350276499ff4b44935

C:\Program Files (x86)\TotalAV\System.Runtime.InteropServices.WindowsRuntime.dll

MD5 339e490c340e20e9b763cb2e3ce44fff
SHA1 0cd8d1aaaa95a1b1fe942e41177f1988c3245168
SHA256 5cb4242180d7f0e6e5f2148fbfe8e1f5e0e796ea0151648f6990bd2ba3ddc9b9
SHA512 a28e7837cbadf3b9dd0b7efd67d4b18156aaa59f76488c0c8016882701ce73e4e60e0cdea41254ac1c3be3baf00828385969cc97cee9be908e8dc5fdf347fb56

C:\Program Files (x86)\TotalAV\System.Runtime.InteropServices.RuntimeInformation.dll

MD5 c199b752c2fd8153b1f3bb3ae1d0dbdb
SHA1 8be64ddf412ed4ef3988562c0e2a5903febe2ea7
SHA256 8c95905d412d406cbb9ef03536cd6b83a474b1d630187ae0b85d483df6aec38b
SHA512 7116db56f6da057c6b9e5462c3b06331c96b52659de7df7bf09297822ae7f1d9eca4ba76456ec7e5d01e28183a2a80f173ad62e9eb653782a281bc2accc420da

C:\Program Files (x86)\TotalAV\System.Runtime.InteropServices.dll

MD5 b57f607811243f83f754a6bf8908ea69
SHA1 f1d7286352ae7c3d69aa30ff190a5fde8ffd8b96
SHA256 458fd4466f84acbfa5a84cf9a403ec8ed2dda111fe985523a3d51081a3e63b24
SHA512 cd3b375174940b4e8a13aa7184911789d4d6c67f01f02f7f085c0a27c94309bf7231515784e06bfea21e84c903cf318f42c542c9eb8cbccf3f67f451d47081be

C:\Program Files (x86)\TotalAV\System.Runtime.Handles.dll

MD5 f5d7e2631a4d8005681c499790e78c57
SHA1 66604e689fe487539a95e9967fb9906f28a492c2
SHA256 220235cf56edb06973c7c234b03a242f0dd3aa01032222ef295c798d589c68b8
SHA512 6de423361c8a7a034d7d6878a3415e163a2c1c71abc09bb39076e71a9ff7d0ea4f1c36a342d1d99083ea2e8636ebfe968742428977fb5e4ff9db0a21e33d02ac

C:\Program Files (x86)\TotalAV\System.Runtime.Extensions.dll

MD5 4ebe62c159d77fe4f61e33f9770d5934
SHA1 74ceb072d4db9160e8e02bbee0a9540a47dd791f
SHA256 f52450c3184f1657de8110428f92930f0ee4acba19c030573bf72fe2f30b8499
SHA512 13404234a035523ca3867681a5cb926b8df3db3030e49d170db816a4fc4919e13d7f42d288d7b6c791c850bea0f562edcf5aebd6be0f8e779fc3f9e966e43e93

C:\Program Files (x86)\TotalAV\System.Runtime.dll

MD5 64b6db4e5edc35b1f0f4f8661b1bb5e8
SHA1 816f75651ce029b26284796f1436e229e06da9f3
SHA256 9e1b4b18ea91fee6a83957212e2c33ca1b332d56726e45482e00dc28d82e4444
SHA512 219d8163df984415d580737dc23720f1b2d64b4ebb03ee40a5aef94b50e5b6b2ce206cf307d58dd9690ef021ca9df1cdb35380256bfce637212f4695b57032e3

C:\Program Files (x86)\TotalAV\System.Runtime.CompilerServices.VisualC.dll

MD5 9a8eaa5b280e82638af452ebd25f78c2
SHA1 984d46c36fc3f65266930fffffc5634eb04ebba8
SHA256 5dab8eee6f0a678e2ac77070dfdc69f6e69710097411b636106b3dd43e636305
SHA512 190e66d9187031a7d059367e99f1b719b411a8bc03798ec06a75459284fdd4f234f28fe87330500ad42caa272f9b50a28b27ab41e6989a31283a1788e452e40f

C:\Program Files (x86)\TotalAV\System.Runtime.CompilerServices.Unsafe.dll

MD5 b37ee0006a7af7ea6019953bc6a61b78
SHA1 ea2cb754391e2708065dd4cfcd87188de4015aa5
SHA256 2ca3f57881e415d61a43100a8ea77e69d983f9d1de14971381d240a1e21b3370
SHA512 005bd3670bcb0f848bbdbdf673980a2f086c2844b0f7db72c400487d67cabfd80922d0ba09b93623ad942ea057132146e4869844d7fa2c9086b5b0b4b7c408e1

C:\Program Files (x86)\TotalAV\System.Runtime.Caching.dll

MD5 ba1e94ef700f2aa38291e841394f139b
SHA1 422f5514e43624f9d4292898a0d95166dcaf2889
SHA256 53827519463567379b65ac781b0c3088910eb62d4519069a0b138209ab840463
SHA512 1c32be97b2b407ddad30b2f8c7d91518d77b28572e52313f72e4d3239383f12cb94759c23e3fa357eb4d1c7f242a47b67635f9f7d53ddc80a5d7cbeb98a1a23f

C:\Program Files (x86)\TotalAV\System.Resources.Writer.dll

MD5 b5182580bed8747fce8e6da01b48a711
SHA1 6bca497bc286bef465b7a213b99d32543960fe1a
SHA256 b8642692a063153c1259ed3bd3da86f29e97a36e79464f89d5e41c75f1d2297a
SHA512 1bb4c94ab69aff6f20449cd3ac2dfbef6ae4645f032180aabd4df87a2a4ec9e2e2b58c61e6c4802af708a2bd88254a271da5a520982b57d3528a9234259b308e

C:\Program Files (x86)\TotalAV\System.Resources.ResourceManager.dll

MD5 4a6103f73c8d1d09f2cb9e3cdc36e8d3
SHA1 10f1254be423afb56b69e9de283aa580440d5ed6
SHA256 794aeb7db6dc66a2bcc6f4f008fd36fa85b845ee34a17608ae50866e2d8ec475
SHA512 508f0a592b50a2cc95ee2c7a5ee2927dc0eecd1e7366b321ebfca27c428118266e191165ec1c2398e68316f24acc8d7fced69172ea676a5551e28dfd4b0e0402

C:\Program Files (x86)\TotalAV\System.Resources.Reader.dll

MD5 db9be5a675c27c3372c3a4fe6e9d8ab0
SHA1 3aea5e6da260603a0bc1fd7c5d88d11fab90309b
SHA256 97bbd447452e22a0f6efaa7ae954e12972862d5f145f5ac5e6bd89a724004315
SHA512 49867ce81552d45e8b8cd783ec40f5eee7d5ad41cafb964c518fa4df41ff9ce8330a58fe23e35df89ee13f37822a3bd87172588d6c92d6f22485db833fa4c98b

C:\Program Files (x86)\TotalAV\System.Resources.Extensions.dll

MD5 32c8ed263f97917cad7006a047366338
SHA1 1479c22419fe7665cc4190eca2fdd7b01b19faf6
SHA256 62616f161c44c7ebf81096a1a988a03382390ebc584188ed850a86ae9132da0e
SHA512 959b600000a43dd1448940afae67a31f0922dc1186a1f881914dd11f25b6de46924aa406788ce79bdd2970c5706c6e0a3eb170bfd600f5405d2eb6a7d2aa4e49

C:\Program Files (x86)\TotalAV\System.Reflection.TypeExtensions.dll

MD5 3e8f4b0637df5aecc3c5f3657670e57b
SHA1 a8cab6969397ef22d62ba58c13af23ce8c735838
SHA256 5fc95a1f86ff697dc5014b63a5a83e1caa14e32c5f8338fda4d44f800ab6300e
SHA512 7214812d6eae65bf3112aa1b37df80688644bed47506435eb81c09ba1ea91a6953b277cdebb3f50ed4bccdc198414c3b1afcc8360d77d260e8899e1425fd2b28

C:\Program Files (x86)\TotalAV\System.Reflection.Primitives.dll

MD5 f06e221e71bee1cd85a4bab2204edd8b
SHA1 993e991da4b157737570ef35804a21df698ddfed
SHA256 a40b9c13765d8d472b8efc72e7c3c096c4891d6a401d86bc2ae572d5c935ca86
SHA512 6ac740b1e824a87454c0ea2bf9a705f03cefc083a61378671a7b2fb52c87eb36a113a97a214b762d16f09be048d839b737a558246993daf590075a8b50740f0b

C:\Program Files (x86)\TotalAV\System.Reflection.Metadata.dll

MD5 6af1e722cc4a9d95182aa2a424f2dac3
SHA1 3643e6962fce9e22432ea7ae1ec2bc487c603c33
SHA256 0f245089855c80a8721cdf9a27bfa3bdb05a0189dc3f02965223a8aedf86f282
SHA512 d0f425e157ee66c610d37f1c1945df4e79ca333ae421fb2e575327e8327944ce8a401a4a6d0107335d2a931e60fcdcb8e17c79c98795ec87f661336651a61de9

C:\Program Files (x86)\TotalAV\System.Reflection.Extensions.dll

MD5 e7dc57b5b650fb11b3045b1332228802
SHA1 9c311afa635b0a20e7fde6254b727b5d029bd499
SHA256 2d55789e85194ab4fec5de696b9bdc329505ad37e231ed84e81df7d449bb74cf
SHA512 ba5f2503db4224883370a08d89925210c2d33b7b514f0698e1852e63215b11e09cbfa3522f9d851d29078102eadc5dcb52616b677ebb5d89d5d997f11364e4a4

C:\Program Files (x86)\TotalAV\System.Reflection.Emit.Lightweight.dll

MD5 447a3f7a38834f4605828b22f7fbac52
SHA1 c724b1dcb513fdf4f8dd91aa1b2967ab05988ee1
SHA256 143b6dd989b9b8b1166a941538d8bebc5404b9af8961791060ce1fe68a01bde5
SHA512 ec276b1ce26dbbd013b1572249d8f803829eedb8e9418e9ae1c5a2e141a350d20f9a34f0125c02c3821fcb4f2d6f18c2621e2312df4d49d45db713182b50291e

C:\Program Files (x86)\TotalAV\System.Reflection.Emit.ILGeneration.dll

MD5 628bd7e0e3efb7172ccd55b66f615aab
SHA1 9a312cd8062ed4f0c3ec21646c2fefc18c6aba3a
SHA256 fea02e9917a29f1caef5387506583ed8d2c9f2d7c01eb5f7ad7fcd0da01a3804
SHA512 de3c370585ee4e66d1d9ccb77d80d12194d9224fdbc782251e087ad68df66a6f2906da9abfff381fb39d590cc42a288ec6d0dd4224064376f6e64624a9a1b04e

C:\Program Files (x86)\TotalAV\System.Reflection.Emit.dll

MD5 17408c5a752130433d3d6af8d2807e5c
SHA1 a9d49188e8410741de610e795d0a64b73f0c2f31
SHA256 cf4013d5dcd32b6c39f964775e98a5513146b30da2317d4636fa4af4e151131a
SHA512 c306f5f86f0ffc7e223a16f3fece29e97453e6bbcf732b09f027599437748c2e3c95f9757a45d2900733cd58261ed0cc8196fe632d7f7bb896583af3f2d7fa98

C:\Program Files (x86)\TotalAV\System.Reflection.dll

MD5 f47c4db395043d3067eeaaa9a1363b0f
SHA1 af1680d600a7f297d072f822cd57e393e7cfa293
SHA256 f942b4322db97ef98d5793f6065a749fafbd6ddceedc36293329529e0b0d48c9
SHA512 5f7ef9a1e92906a9028f3c120004211a5b6cf9892040f44cde5abf98545d3cd1d939dd2a0d2fd161e492c1a108f35f51a1bcde19e108e866c87eead590cc4f6a

C:\Program Files (x86)\TotalAV\System.Reflection.DispatchProxy.dll

MD5 54fb3aeda26fe053ed3b0e5131d1ff97
SHA1 9e4df1aec361f6c842d4eb942e93618a45452fa9
SHA256 bbfe484ea179575c0815c8303e7ca6b07d3b91f11bda053b01ff2268681150d2
SHA512 139468ecc83c37d30fee8ccc78b53255463b6ee59dc8cee9989b679df2d1fcec3831bb8a660ee816704a70ff9dc8cffd3a8d5a8f9b3cde56ecc767144dcb29e0

C:\Program Files (x86)\TotalAV\System.Reflection.Context.dll

MD5 bee24da2f0c8eecba68a7cc8db032064
SHA1 8f372aaf605c12b5d366d5165514db1cf746b8d2
SHA256 b6b05773621a83cca542e4f38e2d2d44c5325e88b75ea43a0eed7df38521f4b9
SHA512 0f6942b2b3d8bb3f104b5f95131142658571364c121173593741e2fbb3ccb602998e0cb6042cf4d2dbc09392d89cfd04889b32d5eec36d94abc4c1a1b152826f

C:\Program Files (x86)\TotalAV\System.Private.Xml.Linq.dll

MD5 08a50ffc3b27f22f7ff624d56a6cea26
SHA1 ba77cba86e6eb375c0f4c1ab5784a96f9e912a49
SHA256 052da987d586b6aacd43052c7fe7bba4a2f5a6a826c0f9b7408b4c55147425d0
SHA512 ce612f7292397ed37eb620c51f1c80d49cd70a92beb90ff0c5feca9ec486b40a274b2d158850e1c64e51ed10e5e27baaf242cad2ff586bd7df5a591100662a6a

C:\Program Files (x86)\TotalAV\System.Private.Xml.dll

MD5 77e1c05c3ba6cbc88053296beb5c7c9b
SHA1 578ec73ae90456858975d57b7aea1796917db4eb
SHA256 dbfe6d65aa70e30c0cc6a06b485ae9de48e362ee60d249a52820274fdb260f63
SHA512 34f46753640c6dfd5eafd4a286887d34421449bc09c0c456239dac50cca2668076e993e438b9ad07423e8536f603304425187d67e4cca9565d3d9ec0e021e0af

C:\Program Files (x86)\TotalAV\System.Private.Uri.dll

MD5 933b4b3ff0a4ebc4bfd3965dbb14c04b
SHA1 c9d81317e4ecfedba340c4e30a94f5fe3b7e4b15
SHA256 14c68463ab43820e1c3948c47ec18ddaa43d7b92dac676559252e7d4ba820aa2
SHA512 02da3cec351a6c4ad2d45fc3baa1e335c5fdeb3ae36af071e45e410e24c66f23c55a50c4c833cd0d1ab23f35f5b09d56e30a852cd49fe0cb8059fe345c03c7c7

C:\Program Files (x86)\TotalAV\System.Private.ServiceModel.dll

MD5 494ed53a8d6211fdd5320ed8b525e1f1
SHA1 d2397e0b1c5ede5bac7a8bb63a5f6d65ed009108
SHA256 83fd67d7d2e8e044a26d6135b95956e9aea8f4d075430cb05bd6bd8a84d3f0ad
SHA512 a13e10fa36580de442d9cab85c16f1f3969becb50a024b8f31c75d6b5953c5a1719771cc7a676df92095ca087b5c4650391043958a0539674c1522477e1d2570

C:\Program Files (x86)\TotalAV\System.Private.DataContractSerialization.dll

MD5 b42c8007542aac0fef1855253d220b9d
SHA1 415701bd5ca1e6c2b56775513505b302e6226526
SHA256 09b69203bb0daac0c4ac93c2f893d23e4d6094ec66135543509524f5631d3571
SHA512 98ff9f7c795081c32b7d1dd4f8dc5abf040ebd412afca7a977f50e38ec7d7ba3b6be46fc121b202a17fcd618d75ada6f06466a24bb790b203886b6dd3bbc0919

C:\Program Files (x86)\TotalAV\System.Private.CoreLib.dll

MD5 d7cf959f116b764db8a0d8d556b50925
SHA1 dff30b342248adae4801d17e0310648dba4ea63d
SHA256 9ce4d015b9350831a05fc43ca0230148efac40ad0f3f2e7483c5bf131cc458ce
SHA512 d145561ea7d7312c81d59a56ee4f884fa8fe6ac82b6a2eff76c8ed09021fb16ab73722d800bab9318467798693c926b9a8c05c68e1441fa5c3bae2e1ae60a86c

C:\Program Files (x86)\TotalAV\System.Printing.dll

MD5 2f6247bf408a36601aeac1d9c61f2650
SHA1 ead05e4ae65a2265867a1ea7f9dae90df1d05199
SHA256 ceaeb79be44b248b44bb9c65cb775f39dd4438f4f19ab2b1d65ddc20870f02b8
SHA512 60b124a3f8ad4797bef1b0431293b593f4d1835db7f12aa3779c29e844d9a8206bd13af659fdaab1e7e16fc6ba37f7f8e9eaee38789f2f5f6a9fec0ab935bc62

C:\Program Files (x86)\TotalAV\System.ObjectModel.dll

MD5 dc462d00352c359a0d975c786193ab82
SHA1 f4a64dc0c845e8f1fa88e789da532b5c7ea93eca
SHA256 c035a4384cdf0c6b7f5c086f0c7c55158f1a216365ea775e6805152440c73513
SHA512 1afc5c23e8a6386ccdf4167d722937b9a29d5975be9d3faf2dac3922024bfab608802f6731902e5ce9ca5edb3a2ba5a38301c97af68eb09aad3bc1546cd95386

C:\Program Files (x86)\TotalAV\System.Numerics.Vectors.dll

MD5 6e03d9590582406ea0566f40a5d3c37e
SHA1 c533c0c100089dc318b7bb51ef419d18b5b6dd02
SHA256 daf899631e7d2b6e5a8676bf4ca454ea3a59feac100a8bb1b207ea23f7628284
SHA512 20163b500d14d10b44394692c98f43ef2036c6f9067d5b8fec00d69aaa45226be32042060daddd3cf2c778c242eff7d49f75c636f626f0d21c9f79f657728f43

C:\Program Files (x86)\TotalAV\System.Numerics.dll

MD5 99134c6ce77dbd04a8b90475d7eccb1d
SHA1 2bc6d296ac0e9ef48bb3b74c000f0e4d1d123db9
SHA256 12eba928f088dec978f00b1347454afd6e417b338e54e4aee56d92bf328cde5b
SHA512 1ee73622dc0194fff68d91054843742364f8fcd1f934a0e742d3c7820c805f4cc519f1cc06d9533b432c13cf74d13ad944b7e40dd5d01b70c4d68fb58f6267ee

C:\Program Files (x86)\TotalAV\System.Net.WebSockets.dll

MD5 0ad34522f168f866d09b43ba0c3869de
SHA1 6e2b3665e1cea39a75cf697d460a0f7214fdbd90
SHA256 343e8f7d9bdbae163147781ee3d18e621d36358e512e1cce5b7733b9edefc3a8
SHA512 a55c73a0f8b232695df97e6d6123c96652fc63490e84368b7de9bf75888fc8d3eba4a4b1b6588322c717a5a9af5e356dee8570b8339d6f464ce03de007beb583

C:\Program Files (x86)\TotalAV\System.Net.WebSockets.Client.dll

MD5 309109fbe4c44fa5c71af3e9fd266e2a
SHA1 05453b93560911bdbcc6782750faf3d3f1156657
SHA256 4f8384d0a3cefe42ddc09030c281c14f7204ad2b82ce89a1f3efb80f63801f7c
SHA512 8f695b2796c3d3eea56ae4969053857f1368fcd9e7d6f9f436efcf6c56d2cdc0ea7f21264a014ac5277647cfcea63a6b0b2e8acdb551a1345c7c5383d49f760f

C:\Program Files (x86)\TotalAV\System.Net.WebProxy.dll

MD5 3f7ad35c9e024c0d7e97425a047e0b6c
SHA1 ae0efa232c8f53bd478fad1247f897271ca7600c
SHA256 0c254228fda9d6c4869a39040ba95ae9a51265d5a7990083168b07251302ea04
SHA512 de5875b4c5a62b482c4413bb706f7a1ec63c5efac0b049197d2d79d2cea271ebf882d53bc01c3c1c24defc142126c90eee56b6671aa86dacd63b625499d238aa

C:\Users\Admin\AppData\Local\Temp\nsk100.tmp\nsDialogs.dll

MD5 1c8b2b40c642e8b5a5b3ff102796fb37
SHA1 3245f55afac50f775eb53fd6d14abb7fe523393d
SHA256 8780095aa2f49725388cddf00d79a74e85c9c4863b366f55c39c606a5fb8440c
SHA512 4ff2dc83f640933162ec8818bb1bf3b3be1183264750946a3d949d2e7068ee606277b6c840193ef2b4663952387f07f6ab12c84c4a11cae9a8de7bd4e7971c57

C:\Program Files (x86)\TotalAV\System.Net.WebHeaderCollection.dll

MD5 8fb46a733e9cc705a7e8a20574bd04f9
SHA1 c09491ffff7cfdc9957464289e52088eb5cef540
SHA256 c39b4e8ed6085f4598276241006b336de0a7f1b4656c58ddcf618404afe0e7ea
SHA512 16ebd096e0970c573596d115b9d78a4f493585163a6c8ea1a516dc55d9db60494c86ad7e6891a632cd0d33540d464cb84ea5f3bc5998bf9653c278d430df4aff

C:\Program Files (x86)\TotalAV\System.Net.WebClient.dll

MD5 39721fd5f62a5f1c9c0dd8139ab740ab
SHA1 6705bce547f5528abac8c1b2f528d321e1395e11
SHA256 134a691633398fa66c598cec9e1e70685b23f3414878de0e109d7d24e1431644
SHA512 8cef3c30ede35357c479d44821974f8f751359b4c22263d56d5439653c951f7cfd0c6c741bb7a44f38c90430c9f2bd76455f9acf7a5e762e3dd8e7fcfdb5da07

C:\Program Files (x86)\TotalAV\System.Net.Sockets.dll

MD5 aa46a416dd7901c5afbff4f7cf6cd802
SHA1 a3207f79dc4543c5ce2104d9ba193a2b947a3ad2
SHA256 5bd1ecb6641d1fa55cc88071ea455b6df5f8df89df2b1c5497ab65c581dad310
SHA512 0956c1c46b6285a4e6206f5471afa9b845942f353b9ce8328be8c7cbae0b3605c6f8aca389011b62f568e7b59d6bc7be6a14c2234266a1d31727c31066daee11

C:\Program Files (x86)\TotalAV\System.Net.ServicePoint.dll

MD5 b11cfca2012430a64ef3b6399da33d28
SHA1 835233232866588eaca8a9205db40ee1b579dced
SHA256 22c805e2477e4e7a6e34924ba5201d6305eaaaaed70b62017c45c362f7d9f8f6
SHA512 a17fc736509a186c79e96cb00bb914f56f51cc36d08761d944afd9f1cd51a35b7adb2bf3dfe46d4279eae4bea709faf8e1d00b7c908746ccdf28d325b1f75603

C:\Users\Admin\AppData\Local\Temp\nsk100.tmp\System.dll

MD5 fccff8cb7a1067e23fd2e2b63971a8e1
SHA1 30e2a9e137c1223a78a0f7b0bf96a1c361976d91
SHA256 6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e
SHA512 f4335e84e6f8d70e462a22f1c93d2998673a7616c868177cac3e8784a3be1d7d0bb96f2583fa0ed82f4f2b6b8f5d9b33521c279a42e055d80a94b4f3f1791e0c

C:\Users\Admin\AppData\Local\Temp\nsk100.tmp\SysRestore.dll

MD5 da046184a8d7269a0e138b0b0b9b2eb5
SHA1 d9bc5ea397857e17a86f80df1e50615eb6859044
SHA256 c5e335bd19fa798f120287fe3ed920296f899223942fd6b987585a765f0adec2
SHA512 9ee6965ac931839a5d61b4ed64bb3bbf434dfd10ff086c38a998ec6714018b5491da7e5c29e4f7dd7fd4a93b2f285869b20f88b4b0194c9ba7824ff7c9f03c80

C:\Program Files (x86)\TotalAV\System.Net.Security.dll

MD5 19d3a216bd7a232725f2988680a84911
SHA1 d0c2d5298db79ea8566b8a4574a45d5f75a55c37
SHA256 8e9406714192fc391a99579298017066ec899b71954869a475ff345dff366285
SHA512 53e6646481d71e362985273a47f33a7c7689f288667a4e349d6763d4e2169eb8b8487e737e4e4d92979116c589b1dd7094bc057028d704282c1bb1c13b34243e

C:\Program Files (x86)\TotalAV\System.Net.Requests.dll

MD5 e886c545c1c55e59685ebc0c9c297d81
SHA1 434032be177fddaf02995e22f41d2755a084cfe8
SHA256 5ff7ef1283526ed727a3cc02e07687caddee28afce6e13441f0756ce1280cbdf
SHA512 77a7bee18916875883b04e606207ca6ef5558fd90f4407ef86374278a05247aa198f5e991720e818c93733bdf2fa410e12c13933aeeedcd1f3f683209406aa87

C:\Program Files (x86)\TotalAV\System.Net.Primitives.dll

MD5 6690c7c1b22e54dd29edb93f716e2ae2
SHA1 92784ad46f4a9810b6e1c433e73110fc39509877
SHA256 6e0a6ae20b1739644a6123d1dc4ed63918eeb64b8058c6b66d9acbd08bfa9663
SHA512 1439435c61c06496fe72be63fb246f48665106b57f0d81f80985062f939494bdec2ca2fd6fd1ea5bd2d5ab156cd0a677865b2f0a4292b13651f1672f453a57ee

C:\Program Files (x86)\TotalAV\System.Net.Ping.dll

MD5 897b496363f5180dbf97125fc6f0cba6
SHA1 220b3976ca77ac937f76f3639a8c97e6e4ff64c8
SHA256 ec784bfc140fba12eeb1b8f5a70b39e24a91762aab174c7248893a3b6e466c71
SHA512 ff545fed040d1b6d8f105d126ca0d138e4bf272c7df763b4e737f4c11b96ff5b05b133c302426001e4eb411cd46b91801949427b25102d972f5796b9d4f80c59

C:\Program Files (x86)\TotalAV\System.Net.NetworkInformation.dll

MD5 4b5b4e112e427db047d580e8284c6188
SHA1 d3ff9e666d3899726a6db6f5bdc66596c595be56
SHA256 99d66492ac869d82aa7055bd1f6d6daa063db9241cfb9382765b1eba0ee38927
SHA512 7cd1d7e6fda0056401654970a8423c359698d9e0c1e6e0750e7676b998e04d7edd334ccf8db648f22e43afa9b3950ce96bdb76c26508d6dbd4af9ce51c4090cc

C:\Program Files (x86)\TotalAV\System.Net.NameResolution.dll

MD5 b732780107b427015693069d38817b11
SHA1 6e1ee51b77d74108adf22018ba362dfdc5fdd9cc
SHA256 70ee5550a3c3c9ada5f408ba13b87afc01ade4635bc275df0710015e312df513
SHA512 10ee6adae638170b87650afcc8759b0be747343743b9f3f6a3899cb136f13cab0c118e151e954580d651c87f9349c0f50d15b579b38c74ed9fdd6a30ba8b18fe

C:\Program Files (x86)\TotalAV\System.Net.Mail.dll

MD5 af0cd503056c24b2b3d3b0e035633d14
SHA1 7dd22a1050aa226cdfb287b78e313447cb51228d
SHA256 e9e18d6028b22b4d31ee0190769cbcccede665cce4b1be8420d93e03c82bdd29
SHA512 6f7a99a36c36cbaee77544d1871844810c049351836ea5110db41b72f6df54126b77421054645568db2c810b735ff01df9f119160453d402f311eaa8d3ee12b0

C:\Program Files (x86)\TotalAV\System.Net.HttpListener.dll

MD5 13209cbac19f5c803ad3332c5da0238f
SHA1 3f7451603be3adea6052565276d0e6cadbcad7e9
SHA256 e48e82ea2942a1d81c43485ee482c9d84ad8d766e485578d7907122c4c4ec22f
SHA512 9ad5c922788be6f6e0f2b34a27c0df54e248e022f29344b11ed8c72ce1c2d8f66a8937b0b79a4ad704cf9f28c71bae4331a21a2c086d4ac056c856383f8adf96

C:\Program Files (x86)\TotalAV\System.Net.Http.dll

MD5 8f8b534f8dd6d2cdcd17ec87698746ec
SHA1 d50165971f90818ce86f816c15c31744ee8b18b1
SHA256 7e9cf29860d5887e1a17f071354def3ada4778bb1bf1806133375318058d7e67
SHA512 577545e89c757e9a5221f527dc7f96c15afb14c8050667e115b9eaa4ebe02e19d63f3ce112557b7a1913e2e6ac0a4d43b61533f2c9e5845dcc3a5f54de5d091d

C:\Program Files (x86)\TotalAV\System.Net.dll

MD5 c487a49ad997c54bdd1966260b54b545
SHA1 029e74af432792b4d95817ede916d420bcc20d1b
SHA256 2d76431b8c1836c217eb6fe840289b5bec6ae98f72e80ab657bd487be573c7e5
SHA512 fbd37e62e2f6e49c3d6058a34af817984eca0bdee0920abaf7af2b943748ddd8ead24f3fd16a8ff97d2ec4f6de7167dcf6c8d6919f4b9d7a378b5a6fb7e18f71

C:\Program Files (x86)\TotalAV\System.Memory.dll

MD5 6e439844aab932d1ff439b8c929e3f22
SHA1 a9a3b6f2ab33b0003ece721e02a10acce32ab516
SHA256 dbb7584e06a35b6045eeb156dedb5469ae5056dbb45bd689790355d60ec37eff
SHA512 fd2dded613d2d394eb01c4197fb7fb0a0cb5e5289872f111fabaf3e665aa02c23fa19187a0371d5bc2743826b560e1fbfcf9ecef171ba61c75de2fc12429a49d

C:\Program Files (x86)\TotalAV\System.Management.dll

MD5 285ffb3fe6bc4eccefb054d3df9fc624
SHA1 5edcbd41f0410efcbfb9a73063b34659f83f145c
SHA256 342015b3457ead575893f97ccb882e7cc2af932b582223d30771cce65d5308ab
SHA512 dadc0f7f61521517f55a38c777887be42fef119445c043a6004262258260f170373de5cefe4a809602a5c1839137bf5599e187a92b761852891cc80537bc39e0

C:\Program Files (x86)\TotalAV\System.Linq.Queryable.dll

MD5 ce101c7e9dc1d626d9ff91afc09046eb
SHA1 c299217787421fd36f1db43e5bbfc361e9ab888d
SHA256 71e59c2e83cbb97ade8ccd4a7fd019b6185b3ed6c257a0757cbd8adef55f240e
SHA512 649b2c8e55564b66be2038552d2c3bdefb3d28c6fc25ee0be53560c14b1639d77f97d798c0707a7621b3d5ab9ea1b898e258b5cbcbf4e1898bc26b692adae974

C:\Program Files (x86)\TotalAV\System.Linq.Parallel.dll

MD5 91b9077d6aa53899b3a0068063081e36
SHA1 ebee4b820159e69b88a068c2860dd6089d09a112
SHA256 25cc15aef9c67413a2d551c8426c110f73e04845cfef2d27cca6cad5224a4adb
SHA512 b9eaf3d88f06a03c876c429ac337df96626b5c7685fdd7384810a653ec5db29b75d9d4d9b3bc0ceea084377e7940b62232685e9e5b51f0ca3184b1cdb9a20f63

C:\Program Files (x86)\TotalAV\System.Linq.Expressions.dll

MD5 70b144811fe4f21067f9c7b3d20f605c
SHA1 1dd8bc5c194a8efca892b8add2ff777ae79f9745
SHA256 258b767748e2691ff3e82c6b89ce7dbdf3b035891a0e41766cbe91f179bb0eb9
SHA512 8f10ce2e9d8b9e7c3a1d6e840e3d4af4dde8dfe751018f56cf165d5901f66bc2e5aa975dcab5d4f7e407ae6adc74e74966e2ed966961ed34012940229f533a42

C:\Program Files (x86)\TotalAV\System.Linq.dll

MD5 dcfc8caf03a43639952445f7c4442ef1
SHA1 a72e39cae0705b714f3b99d1f7864d7c89648045
SHA256 29b2f7958f6c7ce20a658f375af34bf2bdaada624757afd3fe2559e2e9b37aba
SHA512 3c0ef19e4ac2aca96f5fbc312fdff0a1a20f9a3c60c524cf827eae99f8a72fbb5fb5a1479c36a4a3e0c201cb1f60bdc965bdd9f40e0e262b947a9c39b888fd75

C:\Program Files (x86)\TotalAV\System.IO.UnmanagedMemoryStream.dll

MD5 cd4e2781a48b1ee742aafdd4a3d72a08
SHA1 731afcacf8231c3a8310c4dabea05c596eb17ef4
SHA256 422998cf85d8d8e1b298f444bb2803ed842080b50bbf190fd72426bff9e6ba9b
SHA512 92f0b6cff18debc4f0e87b3234764f3a1ce9da443b0aeac04c878bd9846cc0f1449c713f11ec8de75ee3e4da93ec74e0c054726c8d97f3a723f5b5d89b793302

memory/10124-25048-0x0000000070180000-0x00000000705AF000-memory.dmp

C:\Program Files (x86)\TotalAV\System.IO.Ports.dll

MD5 cf8254f4b70ff0ef644554c5322003ef
SHA1 f1db876c3803f8d03eafbd7e56e215bba05d7dc3
SHA256 8b4697b44efbacc69dea47d1b7321fb8ca230157df46ed235a0f40aa60f3294a
SHA512 8b9beba9f022a3773629be717f34b106d784287c699291c00e827d1ac130fb5e2c586abd4711fd41131f9b6bb4a07d476f53fe7a7768acecc7beae5792b676f8

C:\Program Files (x86)\TotalAV\System.IO.Pipes.dll

MD5 215b7d58dc533a4c300181fefb629be1
SHA1 0cbf9c6647fcfc1f34056873125b1a18e5dcfd53
SHA256 f2cb16dbf131b595ac2daaea6abd5f39609c9b37e772f4f177771788545e3528
SHA512 54cb54b70235298bf71dd9dc4b2c923b00d5ff3742211509f525899b090a0fe491a3b72643567a91f44c8fec28bba96d57d17406fe6ebd64a66d5d43eb10c8a6

C:\Program Files (x86)\TotalAV\System.IO.Pipes.AccessControl.dll

MD5 9173e9bed16968efe8f7c4a886049f02
SHA1 5c20f947aed3336349967f609c78738babe28a26
SHA256 ac6e45f9daedafd4c0fc8cf2e9efa3fd9222c74939678140d08288692ebe92e3
SHA512 6fb3912486df8e50da163ff13549de5bdf049e220dbe01d582c7339f6fdc0707704c38d8a5acde1beffdd8310d68c2d39c897b8ddcadc3bd451ce8baea91a232

C:\Program Files (x86)\TotalAV\System.IO.Packaging.dll

MD5 941e3abc504d50131bc31e6bc58f22c5
SHA1 8fd7b3df32037cad841c22ad85ae86cab7e6a0f7
SHA256 64e1c57c8d441c2b3b98bb662742099165889644da55f281e2cc24888d2be8fa
SHA512 b4680552ec4fd12d9302b549e2460b2f1499217af489ca4efffe67797d5a5c7b223ce688fdc1e19b087dd4b9a88b037db915ca9f7e7567f2010fa1deb7cf4ee3

C:\Program Files (x86)\TotalAV\System.IO.MemoryMappedFiles.dll

MD5 744fee1c3e2cf893150fc14428642991
SHA1 eda7d8fbeb06452bb80bf8ddfbe8cd85a67e15e3
SHA256 2df35c86f91788c9829f8f75502a5f2c7f014a93d3ff6f36cec510bcac5b8234
SHA512 8a2ae3d9d535d80cfa5b24599a348f5200097eb2f17a6fc9c7d5231936e10630271a6ef8dac6fca932084343e736325e0cb0effaa866556104233f3e2f2cc0f0

C:\Program Files (x86)\TotalAV\System.IO.IsolatedStorage.dll

MD5 53160f475a0b060b0129385c1bc813ac
SHA1 e636b9ee8cecd8413a6ff47bc6c8b777e4ed81cc
SHA256 0a66211216f3d68a6efeaf0263f2f24c553e901dd5d9313aba680de28048baf0
SHA512 c7894bad5bf669683dd1a533af8abb4a6b6e4f7e26bf0b09685b863b4fa26d58f45b93f3b245b8abb6a7353e086acf68411c3746e0516bc5169887c2d9227943

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.Watcher.dll

MD5 801a9b0c3b35e89f7ff62ad5923f131d
SHA1 4f499b81efd19cb5f3be001776651126a8d8dcc5
SHA256 e32173739da64884e502d3ecc24de44913ee19ed438b6cb82c8cf7e8ae9e1ac2
SHA512 c7781a432003af0b77b6fc8349062e0ef09f276a7723f78519844ce24557224f4ed2b51498e82d5aeb7a201c1f01fcf1be860259ea333121fdf42f01a0b78fa7

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.Primitives.dll

MD5 104033f493d5e199b3bfd82180b277f1
SHA1 f0e05b304cb65a377f71a0ae68dbc9172685e05f
SHA256 008d12100f44bd8322a0253bd9791a9df3ac5b3924d704e7db98e3e8749489e5
SHA512 bb8f7d37d005a59bdc47eee727404a5d818f605e5045b8552ee0adb07b87f577aaca6ed61b0eb1141971f051f435ac4101c506c7d55ac4bf35bc67510363a406

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.DriveInfo.dll

MD5 895c7d821f04ae51a07cb5fb0dd4f42b
SHA1 4b24d8f1f9019cd753f490650f95482f3144620f
SHA256 7a65c92649a9ed0944c455a33507f0f7fc177a9f52d10aa9a5adc4c56433bf1f
SHA512 e9df8d55deee4b0b4b31ec9e4b174bda88f7672592f0b943f40513722ed102bf9f590083829414ca63d9596edaf630f76b68b4b8a8016d8144f30b06b165f13e

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.dll

MD5 6033fb3a387e6214cb1fbd9b137cbb42
SHA1 25ef3aaa32dec1b5c1d55bede164048642a22981
SHA256 99beba5759b0c7af236fe633cdbe377f736586ae703c2ef29c6735e8d78f9710
SHA512 6eebf4eb5ec2f3421bd1adb2ba5dac45d0a294c5384fefbba8333b3f692d691cd99d996b9ed71f05c0112a2f20e68d6b8da664fe198d9676946fb7921fb8a36b

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.AccessControl.dll

MD5 3a7a81d6e9b39b18fb00fa9a958ced06
SHA1 f09026d6d6b2c616ac0bc48a9fe2f3c8cc15f444
SHA256 53de97b178a02fbad05d27658fbbd38146b4938b41075933dddf1b27248cd410
SHA512 9f67c566009cc5276107e752d8b80c6dd2593db3c0a73676d47cba140b32f3ae441d0e3d7f7cb333b3288a1be34b530bbc31fa6c44ed159e1486a70e4d8b7894

C:\Program Files (x86)\TotalAV\System.IO.dll

MD5 8ace2d6fd91112ac6dca9914bc4afffb
SHA1 3ff6b44edf62c9164b243e3c585a47ba4b5663f9
SHA256 5bc93b530f357667a2f2b8b13b47e80320d8782f642ebb747137910674125b35
SHA512 b89e8fc4d5ca8628e6e4235a0390ccadeb19e1321379805a4d3e2802d00b19c827fde26c35dcdc65e6d3b04509d71654d9769892fcbb08da3d6e78500c1c2b69

C:\Program Files (x86)\TotalAV\System.IO.Compression.ZipFile.dll

MD5 6258cea236def9f37ce76d19cb8b045b
SHA1 969302144f452946ee6a9eb70a4a53b7f9866e99
SHA256 146171b2d8ba7c6cfc1327e26e4017b08693af5514263203db60d9c43e13914a
SHA512 cbe8c0e73f567ed250d0db936e325fa1a66576e30ce765f027c2c87f32cacad4c51f5a9bbb4bfc1ea3b3cdeec97ba3dc5b300dd7df084f03aaa0016c9aab5b96

C:\Program Files (x86)\TotalAV\System.IO.Compression.FileSystem.dll

MD5 ddbb9f0ce12046992cd06dec451e03a4
SHA1 e0702efc5e7ee7afd7d6dfba92962bece91ee808
SHA256 6b3632355c4ec32e4edc8fd6b6e655d47b8547876660557675153f3e50b54b21
SHA512 28b71a65207359eef8b3294e0396103803e4f27cd589222e5f3889ce17478615391498991a22d3d631695a02c4c863dd3ae0b2bc7e9d4c9747b290dd0afff35e

C:\Program Files (x86)\TotalAV\System.IO.Compression.dll

MD5 e839f0aa073273aa6a75889f19ec1623
SHA1 ff171b601e43e5c249331519fefa5bd527ed95fd
SHA256 e273d82c08d82bc194535807a505cb2a6c08c95df8913f8210a407c8738c75d3
SHA512 9a7b22102b81f03b503729beeec7a8d29f0ab22bf37a7dca43b4fc0ffe01c7d0738e14b5589f5f95fb98228266c8597aa8454820f52830aebb443e6ad17c991b

C:\Program Files (x86)\TotalAV\System.IO.Compression.Brotli.dll

MD5 ad0ff61576e77443c96aed460f540d5f
SHA1 f42abb6f6524404b25d6454efe15289f26285482
SHA256 09362f89d15733cb65f3306b3fd280aa95694d1dfccf16b6c31ade1163f36ad0
SHA512 b12726e120daa1d6292a14ae2228952d2ca9b800dd94cb6e9b0d37280980a348bbb680fee04c3aee29c35a342c28df7d877dce2d480b68e1d84fef931cb322ba

C:\Program Files (x86)\TotalAV\System.Globalization.Extensions.dll

MD5 2b51e34e537d25bf22e0a865d37ba277
SHA1 56bfbb6a8f6b065a24876c9a469163c832e8772a
SHA256 bd41ec1b117416b3abce7867c9aa3927f7b52114bbd3a979c6fa60d0fa3f49b1
SHA512 cb553dfab531eb766fe470f753d758acc13baaac77d52f49f052debc2d549c080d608da1b1afda55966c9c864dc187f1a75acafe0dfb8dbdf28e6a112cd28f43

C:\Program Files (x86)\TotalAV\System.Globalization.dll

MD5 4a00c73a2b8f7bd5bd2349bf189306f9
SHA1 f86d3eeb69fe26974f5156cc35e5209300702b18
SHA256 ea40b3d97d8f582e4b1dfb4425adb0f0682e3cbba03e6d27ba6afacfa7408c13
SHA512 84a3f7027e93200324d60b4d854b09a3a374e802d99ffb7fe9ae8cf797c90e155597b5d17f2dd2c64c69096f64bc6ecd25ec502dee170b00ec47f00be24fa8b4

C:\Program Files (x86)\TotalAV\System.Globalization.Calendars.dll

MD5 053d592bb5251b2f15a3391223c9e167
SHA1 db768f758582f9c43c00ac4e66612bad76a4b539
SHA256 973d89ac235160df9128d10f5a5bee2d131ad7debb148f5774c2579d97b3c4e0
SHA512 5ac7ef2bfa825dddeb085a8ae17c936b71240d69d36a8395db856ee436da1b4e751a7750a81e8707a269cbcb7b1b26e57bb24db6daa06db28965c77636400473

C:\Program Files (x86)\TotalAV\System.Dynamic.Runtime.dll

MD5 e42b0abbe713da1f9d5ff21883c760cb
SHA1 3370c376fb512dbe39cbed36d13cd11dca826d02
SHA256 02691fbf19e669f9f15fb6c57f8c8fe565952345bd23f8eb79acf3489c7aa6c6
SHA512 8eb130cfec7381f36b408108b3bb9bea27c8c786b3fdd1a0e8ef997616e1f33a9da63b2643f4af95d6dfa3978cd8968035ed0e7b41ac88b2e814150a482431cf

C:\Program Files (x86)\TotalAV\System.Drawing.Primitives.dll

MD5 7f9c4333e71b39c53c460ee3b0f91bda
SHA1 3d98ca7ea66103d86c45557a139bb50d46ad503c
SHA256 0ba7867b6531edc491d6c7fac8b2e15645769cc74d05414a41e46b71da9336ca
SHA512 b00ea3eb03e83c1e6b7a3cfa518cc870270a422cdc07b28e4d37870e1fe4b1837e6efa92285f28781de05855ad2c533773ff1c311fa7f9903ac446b70ecfcab6

C:\Program Files (x86)\TotalAV\System.Drawing.dll

MD5 9148b038a5d96921b2c18184720c1fc8
SHA1 436edd5ef5a7f521f779fe84913488337aec0193
SHA256 22f2d62131936595ca34d0606add4b0a8539baece15fd13413f008fb4ee0b0ee
SHA512 b2353594720cbf00baccdd1f5ce0f7440b7bbeadbf1e464f1195ff73422dbd4af4f64eb3e64b35d4b68d71efef1e7970aa7d8a7b837e765fd04bb0f21d1944ca

C:\Program Files (x86)\TotalAV\System.Drawing.Design.dll

MD5 16a050bc879bbf76a0d551b33d2a65b0
SHA1 c838d9fd10cfb8a92f0e9a34eb8f391abc100d11
SHA256 04a476dd96439238ed5dc55ed9f20c398a1137d78a2114eeb9c8c9de0e827b64
SHA512 d09b542f398261c18a34ad5591a510522d8dba00d0ac810e0ddc6384acd3938e8921fd00605d7dc5f4dc6fccccf8d2eabab7f52a42d855ab39b2b97d266b67be

C:\Program Files (x86)\TotalAV\System.Drawing.Common.dll

MD5 2ef2f0ce051aa32bb7b6c2a7c2368b2a
SHA1 a52555856df1d36b042480fca79769c8ec9b10cb
SHA256 b676ff6768017fbf330587af4af00f08202dd0fe6d8b42ee91a833a320d81270
SHA512 05b7119233e9441684462227ba6a3ff4f6794dbfa8e4242510c886e08e54ff89cec2bfa78f6fe845fe9b150ae68ce6479aadd3e10ea7959dd04756bd591f5eca

C:\Program Files (x86)\TotalAV\System.dll

MD5 693e8bd37b77003f5be42ae1bbe8ee16
SHA1 7e8e04c3419e2f73f686b21c8380eb8cd0f560c8
SHA256 f0336b00407efd004cc5f7a8d47ceb16bbb89d1edadc951ef090f5c97e4f3f26
SHA512 03948a81c406d3c800ab1580e78aa698e8aa61f49e1a147a6bfaa3b2bf688f7dc472e2f80cba497acc2dbc866a3291c709373239dd2579c0a94f0aa21ef440f8

C:\Program Files (x86)\TotalAV\System.DirectoryServices.Protocols.dll

MD5 3e30539f7b5718887d8886433cdedf6b
SHA1 5b84bdeb9f807d150ead048bba680fc511693b3e
SHA256 5705a01705fcd05fab4fa91d3fe35338898cf6bda8375dd6e172dc8d84969648
SHA512 74269c9e22705c0fe14b3f6994b63a3f1404d66980ee5721ace10c0a4b301cdf615be8e537a4cf03702a1e03951f10264562aadac0891ff31e477d62fc781657

C:\Program Files (x86)\TotalAV\System.DirectoryServices.dll

MD5 e61418e77cf4b0b77ab3d808efb73548
SHA1 94e6bdea7f1c4317f721b611169d9ccf6c239699
SHA256 d176f4579c03fdf4660353153b20e2063f348b6becb9b073449cc5c1ec5ae745
SHA512 76c02a5efbd26d63e049e5d1cd077de74dbc06eb19d39d997089dbc3c0478e00a13548f1e38121b9e4aaa55ee987bbc27607f8f8042ef7b0b04cadb0caca1d89

C:\Program Files (x86)\TotalAV\System.DirectoryServices.AccountManagement.dll

MD5 cbd45c5b94ff14408bc443e7b95181eb
SHA1 6e06d9ee36f29adb10a6b12f1425454a48956f96
SHA256 3492d44d9fb05b07c0c7302b85dab9dffbe522085ded93ff8868ed6bf5e162f6
SHA512 0f9edd0436adfb3ed3b4f4a835751395dc76cd1f220b415d76e99255f40c2ae053c07e3e90b330a46ca7e3161b101a9d6bb92b85efac8782e2a334b4ca9ae2af

C:\Program Files (x86)\TotalAV\System.Diagnostics.Tracing.dll

MD5 3a0a716a5f848904872914343df34f16
SHA1 e0970e5720442204acfddb2ea0b24de59b4241da
SHA256 2d4d885ae11d80c2499dc83c4e884a749cb64f95b297ad9ba0b5389f29fb79bc
SHA512 3d854b60438adda193d50529b091b1b4d0441bb5aba48a6402fa2c3a8cb36d455c48326db4634c52df2a902986e36b7da1d06d32732cd488d3b5ef1bf7160739

C:\Program Files (x86)\TotalAV\System.Diagnostics.TraceSource.dll

MD5 c88cd34a9ec7d7bfe34133e1cd5a4801
SHA1 3391e707bd482a7caf85ed8a546c1e88d543640c
SHA256 3911650b7663fa60e4f2d4710fded59030bc35834d7c6e70db1d36c12cf71927
SHA512 d21db07f9f0cf2be2d39cef58348f03f5214cb82903d0c96bfa3a8cd7f1eaca04442ad14b5fd1347b9bb80ec9d2462a96553d344124796f31c70d2118daf5934

C:\Program Files (x86)\TotalAV\System.Diagnostics.Tools.dll

MD5 630b7d2500dd8107264d2c9253fa2956
SHA1 45fb7c9334f9e1c1a196a860945ad0e631ddbf82
SHA256 3fa65d869a931e705cbe1e2b9b12ae6b15520db0719129311dbe4376fbfb7fa5
SHA512 2a27e56bad0577f681c078e82f99b6daab988b349fdd9e90356f5e0436b7ac0ba54894139befd9eb93d7390a1b2f3df7204599975e59de862817bc649390d063

C:\Program Files (x86)\TotalAV\System.Diagnostics.TextWriterTraceListener.dll

MD5 d638a282b89c495d9c2b896287a6bfcd
SHA1 e5c92ba20dcb1101db432a5ceb29a3cb51af257d
SHA256 b4dc72c1254a16af4ff47ebea502d03b28d03c72302ceacf5993c05a0bc3ac6e
SHA512 2452a1b4263bc4235c4a2e076cb8c279ded0ed4ed6bacdf8c0d6175cba68414effb2aaa947cf941da1ed42858d209ad33382df3b8136f85e89670fe87b0cc8bf

C:\Program Files (x86)\TotalAV\System.Diagnostics.StackTrace.dll

MD5 0290c1b9f1a55e5a1692d0e1271e960f
SHA1 0c91a85b97d8144f04271d21022a514766630e74
SHA256 669e9c108229b377ad55e11d5cf9cc6d033446ed197b55d6182ea8b513b86905
SHA512 3c9fa67bb229cd318e030024de4e391643579e2c0413da9e8af30326bcdc5a17094f0966d68bda33725609c02d5d668c0538780a12e72052996ed691d3ce1655

C:\Program Files (x86)\TotalAV\System.Diagnostics.Process.dll

MD5 1e5c97d7b9b2db167fb2e6175bdfd281
SHA1 bedea0137eea277691216b1c7901eb9e43bbb451
SHA256 e935a1a089e4ef56fbba1bf4ba4745790555cd83db8cce1110850211db11bbef
SHA512 a60adcf02c9a5b690c4081c11692382b55082c8caf5cdcca666e6fe0dd4a3a31d6ed4de0ecc129bf8693df1df0c4bfa86ea89f84566181508224aee6bd7cd566

C:\Program Files (x86)\TotalAV\System.Diagnostics.PerformanceCounter.dll

MD5 093e29a3ad69fa2e61eb0909cb300289
SHA1 e6401e509da0247a2c3d56f78fea9b76c2e33404
SHA256 ad428d16cdae6b76e9802b1dbd9d8f16df55d782477410675db1d847e5d3fe95
SHA512 f6bafbffc7fc0e0d1890a061f0e06798706a4cd48d7ac569d875cc31bef1ac2ddf60eb32dea69c9829decd23f5ed11ede24fe50ba5884937907497dd3bc3b056

C:\Program Files (x86)\TotalAV\System.Diagnostics.FileVersionInfo.dll

MD5 53c1b501125cde723c149a981275466f
SHA1 e08cc61e4dd50ab6c274df4dbfbe5031167be391
SHA256 d53a32399ddc0a04e9b7d48864c5fd0df340747504827d65a863eba3169cb160
SHA512 0ca14eda2fb53a5bc7aea7f57cee07dcfb3db09b13c721dbbe743a83d596ee9e1be458736a62381da9cffa46f2d0da93ffdead1ce6ce7984a5aed38d650bb1af

C:\Program Files (x86)\TotalAV\System.Diagnostics.EventLog.dll

MD5 d975f4a3de1da0f9f44e44fefddcef83
SHA1 f2f9d4bc23c7d49832f49b5d080e6758a2bcd0bb
SHA256 3e585a43846e5817c72a48778759232e2e9328af4bc6ad7f04804a11f3918a19
SHA512 819596d1438a7ce211470555f36e254e9752864170aed6535605afe148511527f339b9f900962f98a70219ca71e130e48cd9c743a9c0dc20a8b0e26a602986da

C:\Program Files (x86)\TotalAV\System.Diagnostics.DiagnosticSource.dll

MD5 bcfa0edc100106536e6104f183307c63
SHA1 3052823d30795cb08147eff4686bc58325ca4fe4
SHA256 c6befd0c09a36dcaeb688a5ef89e991187167e2153f930bf09e6acbc9c59f897
SHA512 46a16abed798d67071212ce011a9c251c6d715978c715f140679873176d33df4b8daa090a7a9c99a40ac086ca951df1de744d2fc1ee3d4f0d74d495e253cc01a

C:\Program Files (x86)\TotalAV\System.Diagnostics.Debug.dll

MD5 5c4209fc9564a5aedfd35682fbd99ca1
SHA1 27f028d41cf905d0371c71e7e0b09fbf939264d7
SHA256 ff3ce0f75423aae99fe0783ce99ae67508a3ab257ade509a8cdc0770bb97c0fc
SHA512 1f6099afe1d03f0761381d5597120036dae4794789ea60f1cef232cb161d70f73c5614b48205983040b0166e5a05c09447a1c17c893828fe7db5c04974fc98c9

C:\Program Files (x86)\TotalAV\System.Diagnostics.Contracts.dll

MD5 ca01cc510c6eeb820119263487a0f31a
SHA1 a260cbad4557c5ed85b8d9fe44910d2eb27c67b7
SHA256 9c292b4d80503530430658410cf41fcc73ca598510522a985a0af0dfd5553aef
SHA512 9c272c57de1f62f7e9c43714b893f08887e86f6ef6c5f048571ca342dcc097254902f901a6fe4d83485f46d1319a4c0ed89d6973fc68e1387453827cc54d8c3e

C:\Program Files (x86)\TotalAV\System.Design.dll

MD5 c5f8f18779df6ba0854b7673cf7d08cf
SHA1 2db5a071cdbbb08966d64f2e5b6aefb48914f5b7
SHA256 94cbe7ce7868e6f134c193017992091ce4d2b3e976272e4f55f74b4d34e31dd6
SHA512 ff0357685c6ed1b6ded84f5fae5db99d6672567c67ea4ccb598094dbfba565e4348fb3274fd3bec350fe81a3ae36bc358a82dd50b3dcd5be5693189e0409f1ea

C:\Program Files (x86)\TotalAV\System.Data.SQLite.EF6.dll

MD5 4f428be996d234e1e66b4651d5850f8b
SHA1 4444f6b6e5fc3b117abfbc097358932a72986532
SHA256 6d76c1b7aaa70c319d5802505214ec734ecbaed9f8e9776168e25ff0808c4185
SHA512 302ef1ebc733d716150470a37c21fc8037b0ce2404a98d73b94c84f0c015e69a1c3249d887605ce577671c20d6c5011be6e3d5510a774dc46f2e214115fa5491

C:\Program Files (x86)\TotalAV\System.Data.SQLite.dll

MD5 3a3dc6f0ff7b9d8311b62243f45119f1
SHA1 13ad0df5d3914bf4529cbe424275cfdefcf16aec
SHA256 27869ae8706d91d81e29b669e8140abd8b6bcd0c8df18e70fcc7d6ecec9469e6
SHA512 031c7ec34f07499f94cea63b09dc53cb3515a139cc60c0544c76be8fd6f9211f53a7daf927b5d1487abbdf945ac51ecd8e8d82b48a706c6a21173276d6b45c0a

C:\Program Files (x86)\TotalAV\System.Data.SqlClient.dll

MD5 f40298c4e892964b837b3d8b61a5c103
SHA1 e0eafd79653a53eeb3498087a4bcedeef7f11046
SHA256 fa4c1ff23369da57b5629fcac7ab9a9dc1729d57d709c4f8773dd78dcc35c2b2
SHA512 eab8793ed77e0f87a7236e30946275b53d383f291a49582cb795fbd774e042d31dd241ab4fbd8e7cec0ef62197a9c86775d3b76a126c9f85a1a4a8bb43a70bfb

C:\Program Files (x86)\TotalAV\System.Data.OleDb.dll

MD5 696b0771a3e4563dba4f2dfe142f3a61
SHA1 5d110f65b56140d1a4f71f18162bedd02e04ad46
SHA256 2ec6f1fa47ea95e42820119bdea16416dbc99ccf9993e8c572b65e2cf13eb71c
SHA512 953adfd1aa41477f07cdd821d5c9de6afcefad7062a1bfd41dfc5054f37048511b3db2dd17cd21576065287fa44f59c7f3dcb437f426d77c7a28d61a71485a26

C:\Program Files (x86)\TotalAV\System.Data.Odbc.dll

MD5 17219622e80e5992fd7f44efc3fc0ef2
SHA1 3902c70670f0bbdb6fc58c7dc84cf92d9ea47e31
SHA256 e4ed82f8cff2b194c223b7cae7dd67a54f433fa27e895ec216c57576659ca7cc
SHA512 62defd5445bb88705bb8af9b5ca3e920af0472b075f1f5cc05b564e2010e3d185b54528cf16f5f3b198a5b712cdcb969314915be032ed0040c3424cc3a0cb294

C:\Program Files (x86)\TotalAV\System.Data.dll

MD5 ea3dc441ae295b4f6fdd6aa01fee2411
SHA1 23475b7bf62c9f222f6c2c1c420593ea45f77c9f
SHA256 4c080437275d09e0d0ccbeaaaf6bb6e9098444b47297fab1ccd1a1ca4c85292a
SHA512 11914e4f87c40416509ff6c1eaa91f5eaf57c1b36ad7622b989985389f2d406da2a27e7965998edbca02e635dcc0a6d3e8b2e8f2686d9c7b6775443ffdd2a57f

C:\Program Files (x86)\TotalAV\System.Data.DataSetExtensions.dll

MD5 cf0fdfd68fd31c3cd54c095b968a3b83
SHA1 7d65f542a217df807f75766c5bbef2137aa2ef60
SHA256 ebf0cb220bec0ebdafb2b3aadd2feaa0b315903b66f438e10022e97cdf40b122
SHA512 55ea61cef71c30302aa9c7b0943ae99b3ffc2c8cdcf4d428a96c646557081568048c5519627c42b2c9f2cf8d59dfbc3844885e56b698162d6e9a81b7d3e5f986

C:\Program Files (x86)\TotalAV\System.Data.Common.dll

MD5 949867e3df037992b6f6df7b91aaabaf
SHA1 104622ae7b3abdd5d79bf7cbeae9001f00403aea
SHA256 cc63f1a6bf5eb643facc49a9741cbbb881ce13ebc1672c25feb5017516d9f12d
SHA512 2f16ef2fbdc62f59b576003b6118d66aa9e8ee471a1140eca2a5893a1f70bfee5f22141147060e49c02e101e17371c99b0a49b0fa5e61904044b998991b21081

C:\Program Files (x86)\TotalAV\System.Core.dll

MD5 347aa3e63d9daf15be3f5fde2cd2c971
SHA1 51d76c9d8d94ae8b329080217e91a8ab90033342
SHA256 66bd8ef96f1ca8c3578e3b8e6ee2a7564b79c08c893d0639c9e3d79f29779f3d
SHA512 966b231192e2b04e8e56153c037dcf17c01878bbd5b92b3e5dc141d09025f613b2ccc7bac9a7ac5309d04a6ca3d2593e851a479246381a500cc1d8948e62a7ae

C:\Program Files (x86)\TotalAV\System.Console.dll

MD5 c2efc291f336ded197a1957c0478bb8e
SHA1 b088d2f3a130e71438a307276727c9c295c5792c
SHA256 9e5dc9c6ea31e667413ebcfde4ea5ef6e1e1e6296b1698e717924becdc3d7064
SHA512 fd3c75964bb960ae234abef12f14fe0ee0ff342ff9d96396e25be1176e47f90a4bdec994f1f438c404caaabf3497c327363f062e4b875e4b9e80d54e3b64dc87

C:\Program Files (x86)\TotalAV\System.Configuration.dll

MD5 b3d9f7e6c869474cac528fb820c2bcd6
SHA1 bc9a6d99e6a9e193665c386392798372202f09ee
SHA256 329ebd13feaa6a484a272ff7da93a00557afa61847799485d9cf101a77a35366
SHA512 9a758f942a49da19433e697787d1cb98e438779c37d8f5791342d19ec004aeb34a13d07aac692e05ccf27060a55864808daee10e1d31303a6a63da8b5683f9fc

C:\Program Files (x86)\TotalAV\System.Configuration.ConfigurationManager.dll

MD5 5294941977402f5a9f85d3075feb5870
SHA1 84a98acbfe206f02e04035bd2df17cbcb629af20
SHA256 d9629ced6b319b38524a7058e66a0f190452d1a24dc615fd66f8c4317c9ad894
SHA512 4721307125dd61cdcd6a56b490596d2ee0a0f117abf477be6926a0124544d3d5147fc6c10d9ccb33bb41a3676374fd3ecb3b0b4098359715c2dacb59f2cc1f8b

C:\Program Files (x86)\TotalAV\System.ComponentModel.TypeConverter.dll

MD5 b8283cbf4a540b91b92ee5cd218c2630
SHA1 0c3efa24fa62d4e0aa3835e1cd4d4009b3b292c4
SHA256 f43a2bb016e6876ff787cee39884471b500fa0a5261735e9e16e85542af8cfeb
SHA512 3f3fed446cc85845d6d73fa38ceea14c50b749a8b2339f0a8bc8777db2b643ef9f3b5821594bb68093428e38bac0e14fdfd535d1691823b9d6dcf334016a9731

C:\Program Files (x86)\TotalAV\System.ComponentModel.Primitives.dll

MD5 387448bf92f46e5677c8d2d714680326
SHA1 a9c69ec20d71a053f1a4bb420941b3e4c2806a4c
SHA256 6101264a84dcdaaa463ae65876495d7ad10d7f03161b4d1244cb880441ab178e
SHA512 d2185de7191013ab47f843bffd8fb4b6c1a1633e73b09da145bbc74c55fc9e63a241a23d7b4f8957603489fceb7f67537dc2594bbf4061f0dfc3006695919dcf

C:\Program Files (x86)\TotalAV\System.ComponentModel.EventBasedAsync.dll

MD5 d8de0d9fcda718426d3072f4052c6485
SHA1 fab9768c697a6c4e6f9428f851b33e8203b57b99
SHA256 89a2d921f2c2203e3eb295acee96b3215e6306e30d0ee1a39150daf868b507f2
SHA512 4707755be9fcee8615a3feba2012a098fad609fc838f3a6296d04f60830ca9ca8f6cc82e39f3f80219749707ce819110a86bf752106e1bd7122bc2ead456b8fc

C:\Program Files (x86)\TotalAV\System.ComponentModel.dll

MD5 0b18c6343b9cac4158936fe51c0ee660
SHA1 404bd6c558e9b8abb3692a3071d2b38c2e50e45c
SHA256 a15a39aa1df6a921085bf47cf85183cbff7b6e94cfc7d1ab478195167782babd
SHA512 6097c234fa0fe44285d15bf3e3d38f7ad1079626c3c73578aca6a0d84c550259556a69a2185dc210046ba0b63086c4c22e035b67ce15a6d81a206bef0e5f75c7

C:\Program Files (x86)\TotalAV\System.ComponentModel.DataAnnotations.dll

MD5 ac924580d865d2df33df0f6b74652e3e
SHA1 e12e1c03479c1daeaf10b4536db2f3dea3be87a0
SHA256 b9a9a982e1b48977cd6ec751e818bb10f21547eed609c0614a6da3997417928a
SHA512 c41dc2d0cf942dfa748cefd99b5d204a5952a91aad5134024348a8602c21bbe7198e32e1bcb58974f0ac6a467d1d2245ad0744cc70f093d56b02bf9335e80456

C:\Program Files (x86)\TotalAV\System.ComponentModel.Composition.Registration.dll

MD5 aff4faf177f73d0e257b544538bddcca
SHA1 268bffd8f5da2603dba26733a9611bb5befd0cc5
SHA256 2d9424f2fefcf665694aea12e2cb7ff7fbc7196049af90caa0e43cbd1563f436
SHA512 c70e8144915e39ce020fb47aed98a471178f5639e43cd9075973e520116403af6f6e56bc5ee52646eed879dddc206a6a8faec1a4ae5e39da22c18abcd4e695fd

C:\Program Files (x86)\TotalAV\System.ComponentModel.Composition.dll

MD5 f84d96a9698df9c7e48813376c2fc81f
SHA1 7eb3c012e2c53520dfd2086a8a7915ad919c28a8
SHA256 c3d47555080c369692813fcf34e70b01642e4960d3b8048c448ca939a9e1ab30
SHA512 3d73af67e314729ff3d57070fa0af5e7045847aa912d2173a0b156da590358e6b52154c6b7d32f10d1cba56fa8bcdfa68e69d89e15d1b6f25bba16b102c5b8b9

C:\Program Files (x86)\TotalAV\System.ComponentModel.Annotations.dll

MD5 30b1666571a3852105649cba73c55121
SHA1 9fce126661b79cf304ab3990751f45bb11c2b3bc
SHA256 1c9ca64fdf263d84d52fa4b2b1594a400b57a873139439c065625ff8e2a21a5e
SHA512 cd82b3674d85587ea2fe0ab82af0a57bcbec55455ca87ad364164b491d9b8cd94cb1526d14997d5a53592f30c7aa22365a024ff83820fe6f0f3e3a8e4137ee1d

C:\Program Files (x86)\TotalAV\System.Collections.Specialized.dll

MD5 f765dcc06acb0405773428bdf129f8dd
SHA1 a8ab97da616c4a6b029751be3707c8fd5b062ea2
SHA256 dfce971806b56567a816b8364fa0880679dbd81c1024c135eeccff3c9ccfecb6
SHA512 0176e3112796f04ac8865aa62047e50d243917282860d057c1bc4ce8a7c58ca24f1286629358b66dd0a67fe1c0c2aa5319735d1dbe60d8c6e75ac04e1e8df01d

C:\Program Files (x86)\TotalAV\System.Collections.NonGeneric.dll

MD5 e5149c5a1b021247b8eb3102dd12c37e
SHA1 d3ff95fee15ef11276f04228079df0aa6bb36ce3
SHA256 f7f125366baea508eba4f5c58db2b796bca77f1ddb7ef58d9cbb41f48552817c
SHA512 972926f98a286776faa228bcc0f4348ce10b027a93aba942c70950dbf81d1bb97f82c00e773a24b008429e801eb3d78c4dcd8b7144c40c3585b741cd23cc5eb3

C:\Program Files (x86)\TotalAV\System.Collections.Immutable.dll

MD5 5f7aca1f4c6723b9a616d58523183c7b
SHA1 d19ad439d779be30c2d8efef93fb4e30bb506bfe
SHA256 3c73145b2a78a6a37abbf428f2ec82fbd92840d207f0c03a66252a22b632bd01
SHA512 54623d1b5d6e555fb284d082bdd0e8be6b6101a0fd329c8d5b9eb15055ff9c69ecb66bc41a89ea91460f4d28a0bf6eabad22638ffd618811a43134c21a6cdf01

C:\Program Files (x86)\TotalAV\System.Collections.dll

MD5 9b63ce723dfda91347901c0475e65430
SHA1 6074f7e122ee6ad2f236600e70bccf2997e798d2
SHA256 f1bf608e71fd2b229b7f2f43aca213858b5fadc79a388fbce3dd125bf003a205
SHA512 6597c9a7e25b6ba77950fe01db912a1d270d4b34c3245397265c7edd4eacfa0094b499cc167132253b271e5badb6f0376222dfff6446ba84219559f51ea24410

C:\Program Files (x86)\TotalAV\System.Collections.Concurrent.dll

MD5 34c497eda61e2f73726dc57562e96b7b
SHA1 0e1d04c8d1609a3d9a8d3aa18fb46779f1806a64
SHA256 86bd69a2f0fc3736d94deb5aa3e695a2b99d692c743f7f2b43e8ddf199ae6eb6
SHA512 dddceb67b4fce4a1b59aa6187d63b80c44587d7a60ebcfd3a08220e7c1ccf98c3a1006b6d42fb2c2f2219020a1c675ddff69e4e5b2fe86abcb1935c4880b6116

C:\Program Files (x86)\TotalAV\System.CodeDom.dll

MD5 f92060a47c375aa93f21dbc0aa18f908
SHA1 34642be2d85691828482d6b7b78b1f0cb2b387a9
SHA256 d3910d8782594fed0a1542362ac0af0189ccbbe78bb084a75759245b0fbb77bd
SHA512 fb73612565bb43981a11e12dd89477e5cc70c1392c3948a6d5a44e4d9b3d59fe5ee9723cf21cb7cd121cd7933c347201ba3adf42317c77b3c2dd652f4130350b

C:\Program Files (x86)\TotalAV\System.Buffers.dll

MD5 ee51a763ea8cd7a3115ecb3c99a5544c
SHA1 a8b0bf1ba791f0ad38b92d8893a8d3f6f9656b8e
SHA256 8e4f4a2a7e7a389f86004ee0b0dcff9e99f0375cd4ae8b1e3f751626fc633973
SHA512 f6b6232a453242d4856b420556f5567ed71ce85c8d23f9ad3f4a2cf0d3534721d124caa07d7de6f2efc192aa3b4dcbd7b03cbc23702e5fb823cb59301c8af520

C:\Program Files (x86)\TotalAV\System.AppContext.dll

MD5 97057f8b94f3ef7bfdf76bda971d69ed
SHA1 b4d80b317b7ca2d32879305faabf7d49af4fb7ec
SHA256 76b3757d6a5da7d268a412f342ce0997b2649978504f25daeb9190266a4686ce
SHA512 6fff3c4bdb29e7a82f9868bf0d5120ff26a1a7ab8bfd9ab5c2231315d4444ee2aaac2d484326dedf78e384e1ebd4f5985dc41afe1509a0c11e44cf8774f273ed

C:\Program Files (x86)\TotalAV\SSCore.dll

MD5 22e6f53e4ee30b78b0746e4b5672f2e3
SHA1 073cfca6b4d9324777fc07228e04c74c23dc0ef0
SHA256 38ef895e3910c6e19ef0255093587840ce630bd614a060feb44150eff45dfbbd
SHA512 33436eb0afc55f0a4445b979d6285f8bd332def68aebb474993a3273f608ae83eef551ad82b7e5428e50a6293df7e7eb4600f4a13ebb484b309ecd8aa5d07c30

C:\Program Files (x86)\TotalAV\SQLitePCLRaw.provider.dynamic_cdecl.dll

MD5 ddefd87d06e352815663d1be0dd33d72
SHA1 d058fc451aa076dd39e32303e78ac9dbc3334cca
SHA256 d7f066394f6754b1a06dee90ec6f076d9bfcd07033cf6bc19a2af8baf746e8b2
SHA512 9e8df90322986a252247b0ce9f2faa8532f92fa52d821fc1cb46b2d63d89b67cf48d65d31a99998f5c5c75357bf168fc301894884243cab96f44266abba4fad4

C:\Program Files (x86)\TotalAV\SQLitePCLRaw.nativelibrary.dll

MD5 f7bd7cf71c917b7f05667945775b40e3
SHA1 8140e79d3aee95ad338d292407e5c0acca99d494
SHA256 3210fe35503c5cee094f9c1b86710850dab15deb36ea53c266a9665e4ecb793a
SHA512 6dcac6e463264c74370f5b3f2ded397cc3fe198e9a739fd7aae04348e149e205628d1496a71bcf65f6e843a7ff61f7cf60b6c4616e062c4e81c2c5b5c921261d

C:\Program Files (x86)\TotalAV\SQLitePCLRaw.core.dll

MD5 879b403dd3ec1d71623920b0ee2d1069
SHA1 51d4ce115b2a57d58dbe42df31402934eb34463f
SHA256 cd9862b8fbfd400e8526aacd7bad012a7788f00ed13a3a9458ba3f20a6512257
SHA512 ec89881e811ff07dc89328019369711a80ead72a86ff9a9d3e55858dae89897d28dc847195128e2b15bd6402efcd4a7b62b986fc599bc9b00488fff086757fa3

C:\Program Files (x86)\TotalAV\SQLitePCLRaw.batteries_v2.dll

MD5 0c9ba51b96a446e0fdce3810bf76fa45
SHA1 6defb626766f10eeedae8dcf67c3f9b13be7534e
SHA256 aebb3dbeda2b2eb0605a20acc126b50aca3795b066155292dad3666f730603e0
SHA512 d74fe14562b39f74c4b3d1e1c0db95a77796e209d21006e5af4d82840febbeaf7ce6c2b15cb0622a4250890bb005ece3488190e00344ae2d569917c94e462bca

C:\Program Files (x86)\TotalAV\SQLite.Interop.dll

MD5 5810639d1477c0c33ddd1efe75256dbd
SHA1 6a6149730e40fecd9c30534e8f806e310d03e1cd
SHA256 0dcdfbad2b4fd598ee78682b3920e1a268b03bb47b5dc26fbb9050089368a043
SHA512 f22368fcf5fe5495d0e318b692f163e8e6438735601132fe0d66158c8ae26e99453e8931388884ecfd998e42de3f98bbc9b10e89ff081609006b9805c1a40d9c

C:\Program Files (x86)\TotalAV\SOS_README.md

MD5 afdf90f86dd5c98ccee0be65cbb99f0a
SHA1 dd66bbff9bcc51522b0985d0f42b34277fa3ae6d
SHA256 72bab8ad57ae20824c84aaf9fe2e0e305b2108286e066545e6bac14ac7af1450
SHA512 bc06ebe3b83956aa78190b543134d89112bbf33dac89faad71830cf24a872aa1982ded9d03cb38b969727502d26b7b9154781940f0682d5a7c7d330531a137f7

C:\Program Files (x86)\TotalAV\sni.dll

MD5 c62a83f20bc23aeface70ec13003c4c5
SHA1 35553cfcdcbeccdc49710e68aec495c16880f0bd
SHA256 1446d6b26da49a5a9f366972f89f4e236f916955f31ddc38ebb96217c1cace9c
SHA512 4dda44fd5b538f5da9e8cb46a3ab1bdc14b43425b9a61249eccc925d986af7b8b3548db9490238f14807909ecf479415117141ddb344119438a59f97e894ea37

C:\Program Files (x86)\TotalAV\SharedDesktop.dll

MD5 f5dc0973ee6141bb59abe4608b8c1392
SHA1 ab32a70cb5d8ae0b4ec4377e70491721253c6d37
SHA256 e68e4eb5823a32b73fb0eb592d4b9f337fcb4047d13f563516d913f482bebbff
SHA512 5c4e3849d9aee870d5584d35d20ef4fce7512ee1d1b8949727e31a72ff43f335e5fe448f382c49a354b91ce7fc75b823180ebcf37fae9282144c171cc0195bbb

C:\Program Files (x86)\TotalAV\SecurityService.exe

MD5 290fb31b70589b9f2f2dd115c1d0438a
SHA1 99689b00694074083d90afbd38709e7fb8739a41
SHA256 393a4cf8bf0709d5ba956af454a5fff5dd89fa6541a3ce7138d4a7e7454120d2
SHA512 f341c0ca42ebc302cac5a4c3202b5171f6be0c5847ba061bc5689bfd520428b8748d47f34efa633ecb9508fb59bfa2672d9b5a5b64a40c27c9313699c620c22c

C:\Program Files (x86)\TotalAV\SecurityService.dll

MD5 cac3e97b3fd12cef84a41263016559b1
SHA1 390d11c3ad94b61aad04a04f00d0da977fbb121f
SHA256 ddbd34135d6d4356887a7f996013d7e7a5ad63a4f5aa7990d160c2668d93ae7d
SHA512 614e5decbac6aa7976daded1635752b3eedf2402d074999068fbb0428330dde7d86661ae3b7355e13e9a685b0f5a1684cf43c7dc898c3105bf80b8d2a5d3c9d3

C:\Program Files (x86)\TotalAV\SecurityService.deps.json

MD5 d3da7acc157cb704aaa29c814100e142
SHA1 bda1ce953f6e3f0f4c4bcef2d5905b5679b6e2d8
SHA256 0e3511d21b5ae8e724322a16188558c78814558c1a20950c66e1e7fff5810ede
SHA512 c5737b7cbcc7cf1208dce95ea0b66e43802bbb2dfb6e60787854431cc4f413c63e22769564057bf3d72ba391b68a0c2c30d3e9296d16546a86d52074d52124b9

C:\Program Files (x86)\TotalAV\securityservice.cat

MD5 f7d1d228beafd2473fe5d039b0b5a8c2
SHA1 e9855109124b96c781c68e4fadfc4a658db7c305
SHA256 17da88c29be86ba54c810ec0afdcfe9584a648e24745fdd3c049791959c47cdd
SHA512 2a7c81444c9a80670674a8d22e8aca5e516241168fde9653977f3d9dbbda48c3cb4165b94cbccdf6012c9c28d00abb47d523b785fee35b9f98fbbf4fe18aba29

C:\Program Files (x86)\TotalAV\Savapi.Net.dll

MD5 75b793d4c364c082c55625ffb5db69f8
SHA1 f21de5183c531c50ed2627440d6b4aff97c10d0a
SHA256 d40df6a43346e5ebb7e6d52bc0bbc65354d8d2d8c5d4acc09d0cfcfba74437d3
SHA512 7b2fd2d95cf4cb918ce1c73a201b2f5ea8e23003f1c7678026e1a23d8ff4fb683b707b33f0e7e3b4cd5d53c1085e1645968da808f6b78181558d5b9e9ada6bee

C:\Program Files (x86)\TotalAV\pwm.dll

MD5 885a2706ad5cd98c637a9d02a6712d56
SHA1 7bbe52a527efc084516c512372c8102749bd3746
SHA256 58ea66beb9fd07738a6a05622e04cc14bdea6e2d7628c3ef52e9960ff254ceba
SHA512 f966d711ffca055354ee68116032d818ce857237c7c27d92ddbb5f5a6a4b8dc3d17637e22532e524dcc72a428aeb60ca534150f41648e59c842a804b89790d63

C:\Program Files (x86)\TotalAV\ProtocolFilters.dll

MD5 a9ac0cc5fe79a8e772cbb731ad4c7bd1
SHA1 bd138692843d2dcea3adc7df5df94eb7603d1ed0
SHA256 e02b3bd979db2a64d13dd6e8df2dc805531ac2f960e08755054ba6e0e4b03e80
SHA512 768cf34962d91032a0fd2defec4512f49b8fd1e5f2350be652b43deb45898b6ab106f9ac0284beed94ff19a733d60982cabf8a5811583018a884693609081cc8

C:\Program Files (x86)\TotalAV\protected_elam\x86\protected_elam.sys

MD5 cf833a28b40ab93655f342a9d760d224
SHA1 d03ec91202f85970e4a24124bca36d7b4e262a16
SHA256 0b0d0898257846c320f7ddf30771126bbdf9edc7f9afbe1fb3d4f0925680215b
SHA512 3332f2eb60a422124628c749ba43a140ae6bc8c753019ba78edbbf0a390efcccefa15f3eaa192e7bb5b2d3195cf58def64bae42a844f5fbbde741d3c465a5e3a

C:\Program Files (x86)\TotalAV\protected_elam\amd64\protected_elam.sys

MD5 e9806e894443f95671064755f9663a18
SHA1 ee77dcdeda8f1c8f81dee89ae3924c1ef5d6c69b
SHA256 119bb976356fac1cc0b81e2cdc8d1135c1f57c1d06b631a1814796e1601c2bbc
SHA512 7a52c467cbcf80ec10e8e4656bf57198a9ee4b28971120ac4d47de3f3b20a5acd4199366d7ebe6920c9b4232768c000a9bae66905313016037f46a64f62f0cbb

C:\Program Files (x86)\TotalAV\ProtectedAPC.dll

MD5 ec918ed1f2f603ba94a2507227d39f26
SHA1 ecad966014ff84d553203ae02a84b8e23e225550
SHA256 c7f836ca5ba7b282712c7e5972855cca616d53956b144be1576f83ea44be9743
SHA512 f2fe12e9f7c81aa25122b0c28e90366a8d23170e476f644d111b602417ba5d531a6c6de5a7e0c9b37fc68f86154f9ae82bcd3a69aa1454e25f24a86526815524

C:\Program Files (x86)\TotalAV\PropertyChanged.dll

MD5 4826da1d501c41bf5869823d4540cbab
SHA1 311cabfeb0aeeeda3495af1f529e5427b0241a14
SHA256 52ec64563ea08f61ef3f568699fd8a66eb5e532d5f7fc342ad46a69ccdf81ae3
SHA512 ba7475503aabb5b602ab1d748cf5ff4e55fb3a6d0ea3b67dc3c1d6142c9f87f88e814b9cd819f66cdcf2c387b3e79cddd1314a6c32906e9e71c0ce0d93ca202f

C:\Program Files (x86)\TotalAV\PresentationUI.dll

MD5 4af1178bebfd8b52ff646b10130d7057
SHA1 91685be41b4e616c6b0cb480b52b9eaa951b65f5
SHA256 b77e0b332b763360827c9d76371015cb50b46ce1a611e5ececfa0601c6ff94e9
SHA512 b62bb3aac73ae66c8d8e632d4d02384ae2281d68ec259f54cb71dee784bab4f11fa4d548bc6ba44e3e2d964be427c36d6d58585e8fb97b2fc68b356ba2090dd8

C:\Program Files (x86)\TotalAV\PresentationNative_cor3.dll

MD5 80df7c9c106dcbb1d7ee2cacfca143cd
SHA1 997c002394d0c7e818bd3068a26afa2dbf6beb58
SHA256 5a71ba70796a1d679ba83f28cfe0cdd44eaa1778e2084cc6bf2785682e6d9447
SHA512 81911a29b4e21302414ea632a2ce6ba58fd6b889ca202f5a73f582a5e8dbe9f473a593ad19230b97fc2c37e5654d7026b7915183c357f302dd75a388a7b205f3

C:\Program Files (x86)\TotalAV\PresentationFramework.Royale.dll

MD5 b576e7f9cebd41b158174153d91fe0db
SHA1 84d7c508b3ad1646bbf5b5fb6e2f249db5723188
SHA256 105a980b2fcbd8fbc3262b87a5d97890f8612158f95f9cbffa23b238e0acc729
SHA512 99a14743bafb174b85fc4062ae21fef86a689dc5ff0cc7435784abcf6d5245430b7634e8141695c4dee5600a3e086633c1ae363fe4296a81d05c76dfdd44a31e

C:\Program Files (x86)\TotalAV\PresentationFramework.Luna.dll

MD5 28c01af7048caa566bc544843e666b14
SHA1 362be72687fb1e98e5669a17230efdf5c6e393ab
SHA256 737477e6150f9f5fb6b63456883df87b5cc0ec59ddc75de8c8cf69749ef41229
SHA512 78a910c1e616e5d9a5e9d8aa9307ddd00879efe452adbc0b69c541ab0adcec9c9a8825e1cdaba4d7b0deef6f127f20cae589cdb771583ad84c5f13df2a788dd4

C:\Program Files (x86)\TotalAV\PresentationFramework.dll

MD5 03c9a4de00b3f8835146b5a364ecd065
SHA1 d390564ace7f72818f69c9b0d9eb58c1ab8fd182
SHA256 73e08d9f4afc20be63c3309c6aec1b840df189f9c22018a7b44665184004d1da
SHA512 2e5217b52a61b966acc233091f44cecf97b8703a5ec77fcab10f9467505d5da209199b47959f1383ad4f6d8c6aefbcf2ce8e7fa33fda04f2cb9f428a58e0c611

C:\Program Files (x86)\TotalAV\PresentationFramework.Classic.dll

MD5 7bf91a2c218036feb7f66c043d12bfb0
SHA1 ab29704c24f7b394ddc716f17d9bbcf97ba151a9
SHA256 e061162ee7263fdfc72db682b71e220e8108f1c523dbf634ef630a2393522535
SHA512 61cc8a77cf28daf38f9b782f8fa1e914f310f9ad16adc7d6af8ac49708a12b97164304ecaa370cb5b3c4a73677584059ca77a636d3ded9c672cb91f6181ff53f

C:\Program Files (x86)\TotalAV\PresentationFramework.AeroLite.dll

MD5 2a37a62d650f02344025a450e343bd1f
SHA1 c65d91b21db6823ae36273712e01d4bee1a019a6
SHA256 82c55e4e8d7c81cbacea3b7042a3bd6ceb7064b66bfa3d63477784b01e02a609
SHA512 5460b87607ea14f5652b468e4b2d61fb8960f8d31d6b9cbf275cf9fe9b99e3d59396ba3c3c2baf1111d574fff92ed3328ffc1404933b505c8f5e34d473600d0d

C:\Program Files (x86)\TotalAV\PresentationFramework.Aero2.dll

MD5 59fff35603af5369086a2dcc69517236
SHA1 b03b644518e87b234bdc488daa7567d380e74c6c
SHA256 24e62ac897f6af99631940184a2d26e1f18d6949dc2a1b00fef5a5fe9d98b37c
SHA512 f7484b2aa9acbc2934723077e46a77f6930918ef8bd5f4c93e75f2322fc135089464d56504c29a769c393174e6e03d8323e1319d632626417e2949cd50af377f

C:\Program Files (x86)\TotalAV\PresentationFramework.Aero.dll

MD5 74026ffe0933b4afe3fe8810e950763d
SHA1 b8813272fd54b2f67e65715f4b7374568dca163a
SHA256 54411e1de691917d2ff59be6551af95fa3a20556e5f8058bcf49b0cc1bcf68f6
SHA512 8887dd784d071b6b28f0e54ef0dba9488a741f2c109d46aa5d074121aa5c7d1f1ca2e79aefab8b53f7de9a7369352853c6f5ec6aadcb5b068c94da69017a7e78

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemXmlLinq.dll

MD5 a0a471e2ca1ab5cdb84165223aa1ac93
SHA1 9190b6b20445bb109aea2bd135d11103c8f71306
SHA256 1d9bb8146142744b5514ac1ad82306961cf594b6f0b75adcbdb61241d2e02d76
SHA512 5b4a5892ab3323138bd455b626d2ec540c73eae89c2aa4b3b639ba1e6d9946c50d557f5059483c71b6def344a9d31c4ade9026f049358c5ebfcd43b487f178bc

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemXml.dll

MD5 f9ab7399b269797a093d268b1a71bac5
SHA1 6263304ea5c307c54ef35479aeb6d1564036b928
SHA256 7e63047da788d63ba9967157fab4a441bc83bab628e00abf6dd044e5d1969688
SHA512 3442a2a8b8af5960a2aa4a4db1771ccd4f5cf48da4eb7364b1c8ce9bd465ea20defdb1ba5aedd59dcdc7efd60db92f3ffc417ffd6d837b8e6db4c71ed3f8270f

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemDrawing.dll

MD5 9dd4e7e817c6c220f7abe2db522a9578
SHA1 0671ebba04cf1a4b003f821cb43dd159b3373b2e
SHA256 6a167a15ce94ebdf4c627fb651e05c694fadeb6bb00e5814db13b2e7dd33cbeb
SHA512 33a5fd207225c54710c027ce966f7abbf3a3c91622c68cdc4f8efa99a5e6f5ae6f3eaa98edeb894779ca3d383e08de804c5da6ebaaece17ad47e2cf515decd36

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemData.dll

MD5 dff4cee2431337eeea633854d81fc38d
SHA1 eb138c089ea3da756c847cfaaac595586734a098
SHA256 92abd19ddce03e86f9c884325f615976d7578a5b4d9607d9871290a588c9e809
SHA512 adfb1077cad4308a4547e8cce9d489c3c4822595feeefe1cd54ea716d77ad5952101c51807fd4a2413a7938f6268c8aea12e129e05731d69006fba2a68cef8ec

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemCore.dll

MD5 3d59b212dff3c0fa45214c6291a9a330
SHA1 87311de58423e64b75a91b6319e2a4ae666e011c
SHA256 4ec952a95cb5f7102bd63c59dfdd0491b7948287f2c64d75a57cbb3ea5ffc89c
SHA512 bcbda26622427ecf3a6906821c8d74a97d180adcae6ca168bca73774a898e65f80b10824a1cdd1a578b533d1f3e4a9c2f64417f7e68d7727e70ab315e8b6e1ee

C:\Program Files (x86)\TotalAV\PresentationCore.dll

MD5 00bd4ac73d8c20b14e9887f45454e381
SHA1 a24ac293000375ca862376b5d397a0c3b2911067
SHA256 9a711c29f615b2f292851650cb12cd64b6074913c29125ffc399ed760c853ad3
SHA512 db32923fec19ec450b21e8b2380d06bcf9d562ee05559c53ba47c208d91d89ebe1fb0492329ba6ef072c47ce4c65fe8e7673dbd16307fc74e2c4a7e67d25ad9e

C:\Program Files (x86)\TotalAV\PenImc_cor3.dll

MD5 7560e528fcc8df6c4d4bbd86e0749c0d
SHA1 df3fee25640fb715b7ec590aba394e0457a612de
SHA256 3002b51d51172b402fdb20cb6f87a6c9c0abe8a4a8feab3d2bc4b82f1216e5e9
SHA512 c1871aa76e7ab34ab0e0a7ad9540b306ee45bded1e0e5cb0c9f031da6f69f057d34e0b4a386a0d1e31aab8ba17bd2e0d564e327b828e33dc4eb828eaf00b0a81

C:\Program Files (x86)\TotalAV\PasswordExtension.Win.exe

MD5 30a037962d22c88a6c8a1c1221097fd0
SHA1 8b7f1064a80e42f0de3af2e11d9b76b48a0f5dd5
SHA256 6df0c68d62a6aaeb997e78cb65b572a005b7a3f72d5ffdcdcadd1711d23f5773
SHA512 1da9e0ec0a7bfd2f6e0a2d9214f715d1be9a7e00b96f6277ad9a0f3dc0685963db154b7034a8aff3171338bcc5575a2a3ccadfe537216eeaeb1fcc2ea80837b5

C:\Program Files (x86)\TotalAV\PasswordExtension.Win.dll

MD5 4d4dc71f2e8ed5301fe1ade1ae8a6489
SHA1 c1f5fe2e247b3d9ec5f4d7da2b94409967109fb1
SHA256 8971085fe9cb1bb47d0f757e01a504babd51c624c140c19251c63956745d163d
SHA512 d98be09cedfd786b132efae325dfeb98afd9d2541aa415168ac5a4839c1353ac9daafa204f891ff9d0a7cca2a482988c453d0ab2886459f196f4e7d5434d943c

C:\Program Files (x86)\TotalAV\PasswordExtension.Win.deps.json

MD5 cb9268125c592ca792954257032bd7ec
SHA1 6b2f1f5b425639aabc73dd0c0b119a1a51fe5549
SHA256 7b34d7ea90a9664a8f6370c3b0e98ac3114eb96f0ee9edab6c669d86c2c3cdc1
SHA512 0ed3ac6039d742768ad3eeede207d96abb393780a431330cca8c27561a8dc79777ed11174890513ba7ef71cefe79cb1e3e54e7dab11b9208cedfb754b2ef389b

C:\Program Files (x86)\TotalAV\ovpn\openvpn_up.bat

MD5 cd4d223acddbd08101a159b17022324b
SHA1 510979a24584898281d7190c9981a1f7aa5b09ca
SHA256 6ed4c6d1ba69e5aad84434e40f97c39432be10b903652860f8f16d7861ea79d6
SHA512 8516ff62ecf818db7f794d66a2c479ea549444ed718f519b297a0723d78e191466d8f889f4f544a3e3324d6ce9002ceaa3d119b2a5fb63dcb8a2fd324110e1c7

C:\Program Files (x86)\TotalAV\ovpn\openvpn_down.bat

MD5 08bae2de82fa4fb579f707376d440056
SHA1 33eaaac6f01f017affb58b68636cffa6ce30b157
SHA256 6cab17fee12d3a2c43eb4d7c3a790cdbd7fc9afc6b0c6d60dbbb61594f6cec74
SHA512 67bfb8a995eb12b5f995860472a0817279ff2acdbdc19e7ee38a0a91eaec67a870dfc56ce39cf4bb5d29c227809cb35b16635d1fe1c0bbc64429079e5aada6f0

C:\Program Files (x86)\TotalAV\ovpn\openvpn.exe

MD5 d62e7bd8fcfc550f4c664eb7f6933186
SHA1 0c1434e0afc5abb50e4fc266a83b7d412a23c280
SHA256 1c704ce36e37384692d4e9d111be69665fb2bfd3edc614ed6117ed6b934b736e
SHA512 36f8d5c714108140134d0e1d6852e2ef78da186d75fe6d6134ae7cbe43b79e451762f9e070004b13c0ccbb60e2c5ac12d34664381b7ed2187be57228861c815c

C:\Program Files (x86)\TotalAV\ovpn\openvpn-license.txt

MD5 a5aa9694cc581daf09c7f75d1bc64c30
SHA1 484b11367024a690fbd459fb4f45fd044f42d63a
SHA256 a45afcd949cb0e29a3ca81801c7b72666e585ac039a0e1eac63546bcb7273d4c
SHA512 5dd967d247732aa4d718e25347224ea93a15c597c47507deeea30be84c87283e984daf39798492167a422acdc5af174eebd7f7220162f0907ad89d3730c7b306

C:\Program Files (x86)\TotalAV\ovpn\openssl-license .txt

MD5 4c359b890e7eeb474a96075f6df68597
SHA1 eb7d89454cd1f62d8ad37d61fe52117be5b38a12
SHA256 b9f6a4d26b1c7118c3b0ac41f0777a2b82de0ea25f48a9ca6a0e5550dba2382a
SHA512 d3578180c52d0daebd7b1792a261140bb49a11ff592efcb0c9d520a06ff6dc11ec3b1fcede1c95594deeffbd46d8703d1c5aabcd1677ab685774dadebb1af9bf

C:\Program Files (x86)\TotalAV\ovpn\libssl-1_1.dll

MD5 d6d65e0a4a7706a90e328578251f43ae
SHA1 5a34a15fd21f345b3f6c1876df3503e0050e7428
SHA256 89d49df485a5c33f0ebef4a78f6ceb63e60c08113fe21a911cd2c196bf9393fd
SHA512 2f524f1f9281a643ca3dd657e8136828fbb4c58b259c717bd05ea964379ad814fabd9e47d129ff1866dd92e8d5cadbce38b66c8daf2aba944c57368e7c1d8273

C:\Program Files (x86)\TotalAV\ovpn\libpkcs11-helper-1.dll

MD5 5e12d4d264ba957604e80ebbb436c61b
SHA1 50ad9a622518989a80355d226b77c5c57aecba64
SHA256 6f0e5fbeec6474e0cc2bd0536aed3ff47fef4588fe28625ce2b3eaacb5f0dead
SHA512 e4dbb5e094b48bb47a30dc5782b9a5b58dd039c626922cc7884c00f2bc24ae4c457b11e2889ff373cc592c47daf1511ca4ab10a6f26f7f2f745efd9e64a5f002

C:\Program Files (x86)\TotalAV\ovpn\liblzo2-2.dll

MD5 bd9eab80f953d1674d71c315e050292b
SHA1 7f0d391e1d7b4dd455359ca1381bc5b90a23c84d
SHA256 22c1a7a44308ff6aafd80caa6fd53c93df7696c99feadf9ae700f26365c0986f
SHA512 baedfe72d58711ce95ad5ab2010f99d1f42825b825eae48c72add6c2cb8c8f756eb8d1f8c13b78d4cd6cc2a3cfeb920f4188ca47dc6f59aa1c66b0d83b0ebf4e

C:\Program Files (x86)\TotalAV\ovpn\libcrypto-1_1.dll

MD5 b9eb6a8ac15e8eee936d994bc87f9d5e
SHA1 b432473b753f371bb2415eb63d178e560455d4c8
SHA256 548c59044738554e6fd8aee9e1cd0e6cb13ee7b6f4f71532aff868e771eb8a7d
SHA512 83688bdee057964072215de15039e27f0e3188fc32856183f9de3484f11d6cbd633f36c0f0abe7ec6f3eb17dd467c59e8cc8517a371091279270c6c2bb5c631c

C:\Program Files (x86)\TotalAV\Nito.Disposables.dll

MD5 e4f25b163ce2b0cfdd30e22d2fed7e07
SHA1 16ca226a1380d219ba511a872eaea47c51818d76
SHA256 36be2376633d785adec9031ea49b2f578f50d5d2c74babf86f44566b903b4197
SHA512 5afb2c7b8aaf67eb40964bb0fecd50a9522aeedbe18fcaa3fa02c7305ac3815f49a1e17732fa6a3f08f79507b0f2e19e1bb3cd0246ec3c95a247f7c789c3deec

C:\Program Files (x86)\TotalAV\Nito.Collections.Deque.dll

MD5 f37027e4b63b3f6468fd37332684d105
SHA1 68c3e376ba053990875dabf222fbb320b2495a8d
SHA256 570f6df8ea487a9977c23cca5ce9ae582f645f057015ef779bb1c75afc208052
SHA512 ca8c0eb8a5b884d015131de216d97045a5b7e7ab457901db231b28a289d829803adfe18f58ccd26b153ebff64bb542cc8a7cf0c5f628e7108aa02196933461d5

C:\Program Files (x86)\TotalAV\Nito.Cancellation.dll

MD5 df073384d167ac9baf66b991ecd6df79
SHA1 1278cb3cb7fbca5736fc386ff5e72053c6eb0f28
SHA256 f905ec7901dd2b3e59ec23142518996769b3c6916075776319a1c960fbddef08
SHA512 5d06ca462cdcfbf4223c1b354c3578a8074e15ce850b91861f642c1d9cb29ad31fff9c16144dd2e34c289788b678296a7fc3a664c4b27e655d39415923432330

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Tasks.dll

MD5 17f57e0d9b7c5cc602553301cd7b1607
SHA1 cd7567d67967684e72ba10d24c47e3d5c0eaedbd
SHA256 edef045c965f1dc14805cd66e2a0b2cae2bb34aa2c8e80468f34c34446906d0d
SHA512 759fcc7914add3c80080c6ed9da94e9fa5e2af91752f5d7846b8cf01cc261b1eb76ba59188b1391d04a61f7ffffab7b68e0d8ce3f4b5b81fc4ff53c4aed78bef

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Oop.dll

MD5 73c77e64e8e1f0f010fc4158a1a7060f
SHA1 ed7a2e982f5475d4479467aa248e1e6cc4adb455
SHA256 75a30af7c9e46e45e6c2b11a8284d5eaf681b8d71e531200d4b480fc66b0f65e
SHA512 0fbfa1d573da283c5898e9222349c523cb9c8b22f650af24b6980ab9202249020ee74e079acb6ed9ea3c1a74debef2aa70d33448d1012fc66868fe2f8db32c77

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Interop.WaitHandles.dll

MD5 a4a934cb7cda9fe457e751f43946b47d
SHA1 4cce8c0d38247450b158de3abd320003da9a4844
SHA256 9f6c3af2124d0a7385ec595093062ae203573167332473c0dd6af323a8010190
SHA512 15862a759007cf6211e0062e5257468e86f99868901c6565c08e6c401f9035ee86e2e639ceb8843ed4162adff35b3048c222948565a46e1df25b604254d9aa2f

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Coordination.dll

MD5 805c7a0a6c838cd2e96b402417638ee9
SHA1 843ae9a6129c73f17df1a91ec09c4ac2a06099c6
SHA256 fe34dfb558d65d8b072f466021a0d15de8d202513b1f13a7b45ffc3e9125b588
SHA512 ccd6383841af4188b448d1ba153672b5861814ea8570d29ced77cffc10346c403a6f37bbf2d003b705f7a50a9c008e3a5e45a6bc30f617d9a34f64e0bc103e55

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Context.dll

MD5 49add3e0dae1181cffc0d4dcde4e9502
SHA1 d2941dd7672b7e1d20ffe3d70dad84a71fb33852
SHA256 14e949e8c2eff5bc7afda30804bdab15e293fde2c9f573c8d52ece54bb21c2a0
SHA512 daa90a6db7cc28f4759deb2ffd3dd8c8f981839a8cca1299ebd558b41488ab0d9c56bda336396e7c6f46af192ca0fb02afb5851b66c65c47e3e39604fcdbf8d4

C:\Program Files (x86)\TotalAV\nfregdrv.exe

MD5 01b5780505301ada6dc102fb77b2298c
SHA1 328c3931a54af2d7adb88ba4c4c18ce1af8d5a72
SHA256 aad2d85472448abe8250cf3180c3d0373540f46e8a8e76d8ef2f78db62be0812
SHA512 bc5bd91c46f452a76ae0595287622256e8c79e90158171bedf6b68d4439dfefceb06948bd49deb0aeb1344ce89a312bb87b01e2daf3880729fff642951c33947

C:\Program Files (x86)\TotalAV\nfapi.dll

MD5 9da4b43b921e4a28d8d440166e0e9d38
SHA1 b063280d258b14f48e4061b2b24ba9ab1dcf145b
SHA256 268142cc83918e1a04a7f9ac1f9f827e15ffbc65bd80dac85a8b7d99cd8721d9
SHA512 6b5c52aa001e0d77e4ec49088c8bdf5460dd0b323ea0f6a7aa651a5dcf3d66c9b93ea5885e8edaa393da85285b912a65d00b83ec08c05d2fe46cd33206d033b0

C:\Program Files (x86)\TotalAV\Newtonsoft.Json.dll

MD5 3c88cafb11eb9ee403dc2980edfaed36
SHA1 b9664b423200e28882a8e543cfdb8bca5ebe25de
SHA256 74deaa342747cf77f6efac6bee1cb6da2e7fa31988b3f1304eb1d01d621ba4ee
SHA512 c5044bcc98bbb639c40cac5b5333c890feb4afb2d54b55d5d702ee7f83d86d3aa329303f88c70683f89658d7fca279104bd2c94ef3641a6fde522716c8365dd6

C:\Program Files (x86)\TotalAV\netstandard.dll

MD5 671ed9d6e873ad29ccff10bcfaea6021
SHA1 49507f0040c27249e209be9ff92ea4c143575873
SHA256 de0ef6c3af1c9b8199ba4e16c1392d3127a4a30dcc4cfbf96bcc463fe0a5d27d
SHA512 15649a0a37d1e26bf3e670ee1986a6f6d991a6821868f2e90c1a1986122c4cfa78854f5f02c7d5ec1354837126f3226da09f8c89823496045644b48fc4e80f6e

C:\Program Files (x86)\TotalAV\Netlib.dll

MD5 822cc56add5d97691b993f64b11f9847
SHA1 42b92efd9348f2306315274e34827953b8b26814
SHA256 9b33915254ff7c566937b73c0c98e579547fd50b65e4483277159d5c7eb44549
SHA512 a3c2e95bddeec26ae516e3b0cfa69a44ccd22f3930a692dd6e90fd4869676f5213781bc5523c15534eaaf3be5a949be07c0f5da4d6b2edf762b457363528f97e

C:\Program Files (x86)\TotalAV\NamedPipeServerStream.NetFrameworkVersion.dll

MD5 f8d4f30967bf2a130721f2ebc084cc7a
SHA1 14d81ae3e20c321636262cfca5c2fd6caa59fb9c
SHA256 463e1a53996e8de4d2ff2a7b3919e24358c1895da120060d32c1bf4f9462bc83
SHA512 a9cdf2ae64e408349e321a69fe609f7b9e7d14505468c9d986bf46fd9ac77d5c79bb14eefe67f6b977705150a2787a41b74e685545240d7d60c524b3bfbbcbca

C:\Program Files (x86)\TotalAV\mscorrc.dll

MD5 30041ff905e8057be55fff732f8de1bf
SHA1 b783bff2e6b2fc182d6a4345c6a33323b8eb7a53
SHA256 ac84b2497a3875aa104e2a18e0dd49a43ea38dc505c57d836f368d8443280e78
SHA512 3daf4b0a481b93c3ad2d078cccd2e185506f3607309c1b11799b15e958137d51528638263281f7d0152751fd4ab301d0dce8705166f05820cd9eaab50beec829

C:\Program Files (x86)\TotalAV\mscorrc.debug.dll

MD5 6552055346ddd6cfa8fb05bef8f26cfc
SHA1 4b6b93bdaa00fe2c3a8a8f313cac140ce04c785e
SHA256 4681c02858164bb8cb210238fde27c7099dfd34d6150e9706da8845a3706b8e6
SHA512 fdcc771b0d7f43c8a808da1280890c721b47d6412a28c53acadd7bc3ddff9c4eae1d3a141f99f1b183bacbcc501fce795d9199581a597ff748792914872ec9f9

C:\Program Files (x86)\TotalAV\mscorlib.dll

MD5 c53ff6de7a243279034e8ddbab23325d
SHA1 f846e0a35c768188769e9fd08ed0b69ab7fffa73
SHA256 3e7f86acfe925900814e0f57828a9b437b108e50315a2d4e87654ac7dc39852f
SHA512 2baa9be32ab750e91ef174fc1d6db764bde37b9400040fa80b702b0989b5053afd9645a2242861548f092a6dee6c76d47f63ee5597cddc5035a07e14e5e9ca38

C:\Program Files (x86)\TotalAV\mscordbi.dll

MD5 0f5287ccf46af868d472a16dfada82f8
SHA1 96f9943dbdf240205de2a17c1c413ca3e0ac9b45
SHA256 776150b3c8008d9ef5d931ec871fc00638d81e3f5f37fe6cd4988353d6eaef25
SHA512 d0e993348577b7fa526d046bb684e449d82a40c0a1964f1714474d9711660eb9f83ef34e01c5fcf1089ab7c8400afce6d0e7946b5f278a08226cb46ad0afd2fa

C:\Program Files (x86)\TotalAV\Mindscape.Raygun4Net.NetCore.dll

MD5 94b6fa3995eb2ba34afa532b9fab39a9
SHA1 42480243477d813498bd83839cd16f6b7b828e96
SHA256 839a8f2b052dadd685a7222f69c42c11edf9f1e06964dfddec61320e9f359a98
SHA512 3bc4eeead6053cbf09d48297b75e270117b52562ba21a71d8163e7dc932f02c837fed47a813d6dd3efd43812faf1c9cd934e43bd482d8664fbc5191437bb6d90

C:\Program Files (x86)\TotalAV\Mindscape.Raygun4Net.NetCore.Common.dll

MD5 2520a5a2506531cf6f8b4f2a733957bb
SHA1 202e824c042d89400c856a64624db4bd98e51f52
SHA256 9ea613cfa8e489c15d44bc1360e11be1d321de2d0327386df657425db4ebd847
SHA512 8a95c483023177a8a88a1ebcdf8e00577f14a7b8603b722896ba1c714b2cc10477a74a0ff0bf7ffb70aba7e51327e54d07ee5dff6bfaffbb0ef51f08fe9adfac

C:\Program Files (x86)\TotalAV\Microsoft.Win32.SystemEvents.dll

MD5 fa51d1d280c2114a1de24feb9be14a32
SHA1 aa0916a3b709e2a19b7d3a55d2fdcb9cac333f88
SHA256 5f05110e122fa7c73ac3571b82a0bfd5a8462a4b42b0b945c4f901928a29f3fc
SHA512 25c35857c79e03538825ccd6b87cee1d4a569d871889fd256fa413d69585a8e50340a0ececcf1824cac4ea976e15a3eff6ab367b0c4846f66593e0f67d233921

C:\Program Files (x86)\TotalAV\Microsoft.Win32.Registry.dll

MD5 90ce1c7910d0f504b2e3787e1ba199f1
SHA1 3acb3b6dec3b9c51e887f6a750035357bea5ee5e
SHA256 d72bbe2fe0fbc2177dd211308ae7331504ba0317aae60761e94817dc8856580a
SHA512 da7f23717e9341565d36bfaa90ec1e37d7d1ec59df91e495c607d404b00324d7e1c8d216e7adb64ba4bf7973888342098debbb8b8a4a95019200e1735b5204d5

C:\Program Files (x86)\TotalAV\Microsoft.Win32.Registry.AccessControl.dll

MD5 47c158136040881155f35b4877460849
SHA1 a60ab328c456cdcb7f71e14358a0ac202287a534
SHA256 1af18aa247c88bdfa1dbee361b6b901e541c0f7a0c1c31336d65ed5176b13e39
SHA512 14ff78a7029229c046117afc1292c3a4712dc3a4e3c4ce735781deab842b41a9bbb5fb516f19eb614299199074bc1da583d903bc08dacda6b8eb969f1bb78525

C:\Program Files (x86)\TotalAV\Microsoft.Win32.Primitives.dll

MD5 8607bdfc638e4fa1d8e716486a9c6475
SHA1 9e246a9f462097de2b3b2472950eb6273e874efc
SHA256 85c9a4fac07761d259bd91c669e4e1c10cf79d0939e64ee96e32abdcce51c86c
SHA512 91314554e0937194f74c802c695090582e9a6b857da72026ccf5432f5ad960547b4f4e2235f0a56108a63cbb40d60fb7d7bbb30b39f1851606a09bcf34371c5a

C:\Program Files (x86)\TotalAV\Microsoft.VisualBasic.dll

MD5 54427033e0d65a39722a76e07e430eb8
SHA1 7b83a4fe9997310c77aeaa5868b01b2b5a7b7c84
SHA256 89896b1dfdac9c395ef24e7e032f9b746ccc331bc0c9d791de3e5d2b357f1185
SHA512 b6304ec9042eee9d4c9e5f866fe9fa92582fe24dd3ba8f82374a17a7b87cc84e5f9608149269cc4c8e64cdc2c7b5ad7ac228070fe5cdd66da5b3bb9f00dfcb19

C:\Program Files (x86)\TotalAV\Microsoft.VisualBasic.Core.dll

MD5 4ca0c139b698ff4b1a4fbaf653d8b607
SHA1 4881028e15d3fe3e52a6e0e8a10a3d926f3400d3
SHA256 e0864f46e0f0ca66143b43c12a4b37dbe2fbe8fd138d5da59326fd632d6a3571
SHA512 db0e1eea47f75bde5427234888d88829fb184e31be0aefcf687e2dd4e351d9daa7cd5fdc5457ac445f17c5f784f4602f48fa8f49faa2c22c511729c5f550b93f

C:\Program Files (x86)\TotalAV\Microsoft.Toolkit.Uwp.Notifications.dll

MD5 71829de02b099241bad4ef0efba785cf
SHA1 625aca08f1b7020456303794543cc669853003a3
SHA256 b14999bfdbb2a55f335ed3e9da022a73e9ff6e96ba341ffef22637a6f1826188
SHA512 dc5248ec12ff04db6722d6640ce2eab8dbf154ceaecbcb5f473e4ca869f60ada4bd136d849db82524743c652f2bb27d08870d28e2d54977c717b73fc853d6557

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Primitives.dll

MD5 79dec1364dfc994ba0e0af665cfe1379
SHA1 67080f49ee9ed691253ffc4475d912cd2385ec44
SHA256 16ff7d5019e361cfe19de448166383f9a915fe9ea1e08a475a59abe1ec8aa9c0
SHA512 88f1cc84d919ae86d141c0dc95aec3eb20961a81a50c2bb30a85439cb980d9933bb5667eaddd3eea94378d11d632fb2bd1c1b6737e6a9ccda513eb33cc79bb40

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Options.dll

MD5 e80731180d3f61c207d1e759b5e422fd
SHA1 c9a8989cdb44ae95f6f6404a6618bd001ddf95fe
SHA256 1332dfbef2bb538faed7c85ae6f6c26d64333eed95486e3f81c9f2c1af5b9f33
SHA512 da74e650dbe60705e02882e7877cf0f5e7f08c1a17b3da5cd892b9a66fc06dfc7be8e324c13d8df17f7bc9898f22b399e0e81808c76e1274f70b6b1f58564a82

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Logging.dll

MD5 1649856f9ae8ea8aa53b5aaa04da894d
SHA1 03574a2e9baf4edab20375bbf968228ca717ce8b
SHA256 30f4630b82b19f77abf33c8287cf4a00e8285aa71df1bb3fc05b7abf9026841b
SHA512 20dda82a3c9501c7de052c86c09dafe4251042011305a7224bdd7bbf99f7b705cf6f5992f9fc27fdd5526dcbb3fd6caf6fe2128631c769c59fbbd5c639dbfc17

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Logging.Abstractions.dll

MD5 613442a0e2cd90d79c3401554b8fba9e
SHA1 380df211e2bada028536a6c55bc8f33495bce1a2
SHA256 971a367da28ccca459fe2f7d755f0cea978310fdd064f6368fb8c8af814d74fd
SHA512 ef9a5696774f111a7ec99a6cc96d976e761faee4e128510f278a6f606de3f898413808f4c53cd19d27e83a46a1adef945c60d4bdc41f2aef70f710027c6bac87

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.DependencyInjection.dll

MD5 692c5f999645b4e9babc2e830a2534e5
SHA1 da1ce989d55ef32809a4c0471be5ae9e5614e483
SHA256 21d64f47e3d226854b93ec5b1f94d3b8ecabb0000a5b759decd96507789c307c
SHA512 ee6da0eeb5617b6b0ddb754cdced46a68a4aa95e5127ed94090f3640d4d0df3f003135ca84e5b4870679b0972e3c4f6b8059bd8a9c870ce8c5237cb0930235d7

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.DependencyInjection.Abstractions.dll

MD5 1cca6bb1ef856aed16e29b17b92ea225
SHA1 59bcdfef44880db1daf87951619cbc776a22746d
SHA256 1663be664cb7a7afa5786dc9f071fca8aeac3737fe8e29153f29223c8ab1608f
SHA512 6daea2c19e873594e8486ee09ab0cb9d30e4f76a1ba51fd3c2a40ac5c27c870e1e7b533247c17b8386c9016103d1423cd886efbf1256e89ca2a8b99f0d2d57fd

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Configuration.dll

MD5 d29ef3e603946cdd964ded903c205d62
SHA1 959896475fe1dd758adf857b72bea25cdcd405cd
SHA256 91be5d8e169d4e809d077108827c041988018f37924c312dcf3c3c77264eaa7c
SHA512 3f82b58932bbe771fd102065399e36822f061c769a211b85661d4b0575cbca90cd18ae92d76101e2219f22bc247a163ba95718a4303a6d43784723437f7b88cc

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Configuration.Binder.dll

MD5 99ed54569b703e903f674ea4eda6c662
SHA1 5c59e3c564b4c057ebc1455cf7bc219b825aa11c
SHA256 4950a8400717903c28cd5b9562cff761afe5ac3470ab699855a898b29fe8a2e3
SHA512 fe4937471fee583ee73411eac6e256a622c2f8a10d885e2096546bbc93e393435fbc20d40b3f885f48f48767bfdde906209890e9088318505b10d84a7d4ae7e7

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Configuration.Abstractions.dll

MD5 542b6ef0d8d600f43cecdaa5fe6a99a5
SHA1 3e5626ab326b8e0a08d48f1347c09eb3a8b1b882
SHA256 e9e4bf73dfed3d5aa9ff25780e87109a985cb6e2feab30bea42689cf7d1d4ed1
SHA512 4ba7499c2b5cab18d185f63f857f8e94785642b5d0909d2c978b039d8920aadc0401f57ab7603f2ddae396c4c8edff5f56b31de36d24620733c9847f5b3152cd

C:\Program Files (x86)\TotalAV\Microsoft.DiaSymReader.Native.x86.dll

MD5 4ff7094e3edfda47ced912012044296b
SHA1 c6f3c9d81713687dc3820d8cabf14c2a32208d27
SHA256 f21da9fb831ac943736135b6ee109a4b352511b8d6c07cb03c66b61996d1ddc9
SHA512 372867bbae96c51ee11b413f552a67a53992b16dbfa44105381db3813e3c2f9a3dc9d16fc6bd6366514d4e1b4bf1eeccce5261bc3df837bf3e3eb5a04446c551

C:\Program Files (x86)\TotalAV\Microsoft.CSharp.dll

MD5 550c3defa28f7da52cfeb896254d5446
SHA1 9769ad55aee4cfbc94053e885d229ca98d953254
SHA256 d5ce9323fc09281f1f8d86d741a594e29f7a9797de0284e1b168b1043c6c9a02
SHA512 264181da5f80966f2b0a76912d496ad55b403f99d31097b258c9ab87d39b41435015b8e702bfceed5f333fac9367f542dd397778504c8ed2a4b4ff4bb3a82370

C:\Program Files (x86)\TotalAV\Microsoft.AppCenter.dll

MD5 395ca70f6def000f67ae3334682c3a73
SHA1 5b32bb4f106e490044f8cb95b1da24605e66ffd0
SHA256 c7ddc86b6500a27783071abb2a0769a1f47a7cb78d039642c2126ad1b879cefe
SHA512 a47cde27ec3af919d68f6bba485b24c31b681b3572cc9af9c8df8e46af6d1441d4c5836303c4901f531fdc6e2092c6ecbd28a17b42616e42a0f9a2a9dd46dbec

C:\Program Files (x86)\TotalAV\Microsoft.AppCenter.Crashes.dll

MD5 389e880efe79f750488feed7fa52b1d2
SHA1 b0a58209ddd87d4ec1240bc1b556889850965148
SHA256 1ac20df009a8879ff946388741b781b37f8209ac93260ff8a00573376def08be
SHA512 ce378858dd67c8ff7972036db1b558603c0c7bf74b82c0c965fcd039138be3eee08fb729b879a1c66b41d8fab7c70c0a9ad1c8e5c9490c4967cec87b2f62b436

C:\Program Files (x86)\TotalAV\Microsoft.AppCenter.Analytics.dll

MD5 d4041b4e6cef641e52922aae24358e67
SHA1 03cd00c2094e6747b0bc489f1927d29dae39b5ea
SHA256 ac8b2f3785163b38c4473f1aa25616a4616e2fbb29332fe3dd8da9574fc3c4cf
SHA512 728dcee4a9e3909f760edbd6a6e582c6c40162f37cf0c5e61bb092679ef91e47e8e5bdba468c40f24010ae795f6e277ff1c60b9e46bee2dbc94b3d9c6491570a

C:\Program Files (x86)\TotalAV\Manifest\firefox-manifest.json

MD5 cd6fbf69675912c8fb36a977e189514a
SHA1 6dc5f321251160ad77f415f5f3ac6ceef0e2044a
SHA256 17e6cc438c28f43b3935d1747b767a4a0e518adba95a56aa7918dcb92d8af4be
SHA512 0ead4652e686e8985ab8ea52a2958cdd59078807cbba2b6e27f1b10dfd9a2e7c05eee3a3b64d11b16b03e8fbe22e7c0f32fdc0b99a057d6f0dc5c5e94757bc55

C:\Program Files (x86)\TotalAV\Manifest\edge-manifest.json

MD5 71a0a11da12e252bd32dd5b467295ece
SHA1 d58458ee3a4612cb72804961e981176242394dd7
SHA256 8a96c6c31ed88f6c7b28a28dc965b3776edb3e7c5ba857aa203b33e39efb853b
SHA512 a1c0238cb9c5c2c95a0f92c8bc40c9f6f61046a381d9391245fca3cfa11eed1d6f7b2176b2d52ef1dc9f6b6fed72618b363f11096c9cdc811f1bebc30e778416

C:\Program Files (x86)\TotalAV\Manifest\chrome-manifest.json

MD5 21b2a99408f622ba3de5751c6042f794
SHA1 b661b1de6aac5992d47d9119c5bc30327466660a
SHA256 542db227dad2ca52cbfb3bbd15a56a319870e0f86a819dda8c3d2931644a8120
SHA512 7590e9f4fd15acd234598d17eb60a79804c22db4e393240d164757dd68606e29f11e030c5df4824fef04e7677f91a92c8bceb8e4ac73184f239dd845f44ccce4

C:\Program Files (x86)\TotalAV\LICENSE.txt

MD5 6b1c894157e404adfa2c9168cc1feaf0
SHA1 de643d125afb3f3fbc698c87f125d5a0f64cd73b
SHA256 f9524cf8d591c32dc21902590e3182d0d0bef0cb0ba431f91bf6c9d71bd38cfa
SHA512 46ba913816ea8156aa1b676c415b98966ebaad608ce2b2b098d784a8f1b28323a12e47852a9c4f9aea8235854fa922ce3deaa75db790d955fb3c36a728691156

C:\Program Files (x86)\TotalAV\lib_SCAPISharp.dll

MD5 9dd1c2259075e1b604c2efc50f2a7db9
SHA1 765d2bab983ebb74ff9f956faed22c99211795b2
SHA256 4f3694e8b0960a7b1e6cb6ffdd6b143e7f9c6dbe0275eff9197059a60d4ee877
SHA512 5605cce8a54ffc4067e09a06420e33146eddc4ccee81bf02c56bff8943d7e6daf47fe92f329de9d03804dcafa5a319d038900dbbab674163951a489c9ce760a8

C:\Program Files (x86)\TotalAV\lib_SCAPI.dll

MD5 b52d13d0b5d62993e2dc9aab06c0b2d0
SHA1 160ccd201b856f14971a0b33c10a0bff13092da0
SHA256 c9c36cdff0af9c858c5633adc89730fd7172becbdaf86e4acb0fadfdb872ffab
SHA512 e98e2340fcc216dacad07766a59db43f73c634ab8b36dd4330835d847164b24bd999bb2a3b74f40dd8099304680c06e54fc4d8d50113e77848d6800599efad5d

C:\Program Files (x86)\TotalAV\libssl-1_1.dll

MD5 723c79630b1971f327fb7bff5ff38eda
SHA1 77844078bfea3b45e7fc4a42e5b7261fc5c6ad3a
SHA256 797ba3a838a6d0bc7b9b39efec86473ffe4255f782bb54066e81856eb0adf0a9
SHA512 8329b8755104ad17889e1f4b1ead597a38bec8f07cebc246c5b0e8a0b88e1046d31cd3724e8fb8ed903e52e1e4808324e63ba4d4927a7fae3233ae37da8d31c2

C:\Program Files (x86)\TotalAV\libcrypto-1_1.dll

MD5 f77ebf3bb87a6b7e6fc52071609cd88e
SHA1 d41ce9a2f1dc351ac0adcb45030a86043dc79128
SHA256 34f14e8ac45755105a464dc4e93014c1e9778cd88e57463df8cf83f0db820411
SHA512 e043669989e28c4b7179e765bd65ae25a16d71bb76467faf812ff7078b228b676e16d64b6dfebb480f78e2a131b6cbbc8715a7cafa2bed5c7863ec5835c9ddf2

C:\Program Files (x86)\TotalAV\installoptions.jdat

MD5 dd3ae3168a12ad7f0dc03648dc46eb7a
SHA1 86d9b32fbd9b77a7b9c80f9d53be88799aaf0bfc
SHA256 dd723d37ef9d85b28d2183484b7fc1acef76e7113719ecb9b74c0791e57de6be
SHA512 833a10f34cbb5fa2209b4dd55c72fe46c8d82ad6652bfd3574dff4f00ade746f172aaa0ecf8c6e5926785d240c1bd50882521a4e4ea973d50dab6b1a5072840f

C:\Program Files (x86)\TotalAV\installer.log

MD5 46b80930c603a18ed7e611839e3cbd34
SHA1 364bbdacd1dbf8314e0a872bc0bffbbfe1b76285
SHA256 39b0cd2c015c3ce3d166c4303b20824c5695c8ce08da811b9a51866b48d8c901
SHA512 867a46fe2bbfed5193c7aa4b50b3ab58844d726da08eebdd5e714433f0bb649603f87438a046a9eb62a8795488d73b66a7f920abadd3afda1b04c0c715b6b502

C:\Program Files (x86)\TotalAV\install.name

MD5 80f7ce65c0bb6ad6ced4e8249b7e0de1
SHA1 0462c9f4b58d4237473a42e94eb8c9af616a322b
SHA256 d832a854ba32f08cfd6abf0808116bbc9c6f3094bcf468761a7cacb025a1448f
SHA512 39579af056eb617408e317d20bb6dd12fa652c356b64521b3a58237e89d07e643ee0cc5bc17fb28f9ff386690586b83a8bdb126f087de6b224b98b6bf18f7eef

C:\Program Files (x86)\TotalAV\HtmlAgilityPack.dll

MD5 2ccdd5e34604c7b55df78be8d1977135
SHA1 785dfda116c774afa7270713b1308ad1d8c2d200
SHA256 f35cffed9992cf7af5710d8f48dd1ba55b9c16211746e16fa474277ec5e5e1a7
SHA512 89947874a3c167b6e1202f338ef084baca5c7f954205f65ecaa0b284e74618058b3b1db0fa8d45fd558746eb278feeedd98320c8b79cd67049af244f511e7049

C:\Program Files (x86)\TotalAV\hostpolicy.dll

MD5 862514252dc75f2275445ca4798eea1f
SHA1 6241c1ef41b521a7766a87732382e0c940c96dee
SHA256 1f81009336fed33b50bf187d70a16929f4d1b4f78b4d1e16bbbf7f6a87ec5bb1
SHA512 b070c5a4d4d649da59df88ef0030f74a7e1096da21f27fccb72d3027e7b9cc87193fde695b32419982249b8e7fce7d5fea679a6c085a4605a09bfdd976a26a7d

C:\Program Files (x86)\TotalAV\hostfxr.dll

MD5 36e668a570def150bc37c64bcc824af5
SHA1 c475d9bbfbf8e71197c06d86515cb84d06be0ff8
SHA256 26ed6778f4d368df211d035b548fa9b3d22976def5055d33c0f2a2d7086ed54a
SHA512 cf728f060688cc2a19186f029ecbe2f11c68dc56ed12e2759af0b21a74ef69d1a6f40d777efed4eb32b581acdee5bd5c668339c928556987dbf1cdb2533143db

C:\Program Files (x86)\TotalAV\GUI.Win.dll

MD5 0c1b42213f71d7768598f1e526d42565
SHA1 82ccf92240e48252d006183b1bfff1d1dc45436c
SHA256 34457195be0bf8ba64bf7c81ab9e882cb53dda3cb9f6b96874dfeedc8d08f775
SHA512 a2fd84f2c619031739962f256fdd85fa0d3aa977db1f2f2d6e6adfe1e73e0be2a56866a915cfbf1b396e3a7c5fd3e8fe6c6b0515d786a2e0bfd284495d1c91b4

C:\Program Files (x86)\TotalAV\GUI.Win.deps.json

MD5 9ad72fd35adefee97e45c7d3f4aca4d2
SHA1 36f507f2cdeb0fa168e231a12f16a6182a465887
SHA256 31057e87e93969845fa1e9d9585e7f28859f69a301d3b03c0091aab62c62413a
SHA512 8a3467cf8b05efe30c43da72801729c43592a6279166430e332d2cbd9f20a5de5586c6c046486f64930049e9e544e5e9f0a68b5a2bc7ea08560f2ba8e4ecd505

C:\Program Files (x86)\TotalAV\e_sqlite3.dll

MD5 1aa2fb5e420379a7a50cd650232c6a08
SHA1 e9bb12599f60032a160a00a04203bd73680940cd
SHA256 9877f703ce3fb9669d656d24726159b616b2df25522225bf41bfafe89954c58a
SHA512 f908c146cc7299815424debe4d40643864ce442eb30adf148ce05dc2f48e8a9db0697943af55b1c5260f5341ebce57cd804a7b19e71b66510bac085a3f800a59

C:\Program Files (x86)\TotalAV\EntityFramework.SqlServer.dll

MD5 4010a41e4730439275c00c358550393f
SHA1 572a2fb0526523e3669a53264fc51adac70c4ad8
SHA256 b4c39d8f0fb669e6e337c5f3138f6171b0905cf875a92b0e3253f33955b87b55
SHA512 5a554c85ea0222c9d96ebe24b2b0730c3974c59389e2fd0672ccd2c99f78b937bc4529151a24cc68357a308d3e9990f09eb854b05466538c422847d9849f84a9

C:\Program Files (x86)\TotalAV\EntityFramework.dll

MD5 ab3c40670c848ac52f32221a7976cedb
SHA1 20a05ff58f34ae9c6b046169e42db3b68b805fb2
SHA256 a7f8427f0d039ba33d7b414604baec4b62d6dfef9e1f5c078d403e7a04e8dd9b
SHA512 8e97b78a6ae9590e84b0d06f5a37586893c4c099a99aad2c50a6ea49ea1aae2acd07501d4e6af905a2263cd2a14f743746e18059204d8dff9b19439000cba705

C:\Program Files (x86)\TotalAV\Engine.Win.dll

MD5 c905cf67539797d58a75b238201a1383
SHA1 500351c4c7151596c0c782a4e6de8495f5a3edca
SHA256 f5aea1bc55e102a2c3d0db554411531260ee04ca2eac6c256050fb2dfdd6b366
SHA512 49ac338b68dbafbbaf63a4994d093195a69f12b74dd4b0ba554f3ad9453d7e998b5328004b49be92f44b7f0aad2cda9bb4bd368ae60e7948d6c6ad2ac6cf093d

C:\Program Files (x86)\TotalAV\driver\i386\tap0901.sys

MD5 a23d03a5eb0b221bcd33d98ff30e4dbf
SHA1 9da49918647cf25bcae9538ebf60833d0a3488ea
SHA256 c43a60e16a011622a963cb93264c7e1365a10fce8c43d5c4fad895880af4dd91
SHA512 77e9c8e1cd4d7670a9439d006f45ddebb62a33ab4aa7999cf9a0536bd9ae860a0d1a2c7ff50f5e0e50345b7c64619761fa545d10657b6f8fcc31db6d593aea41

C:\Program Files (x86)\TotalAV\driver\i386\tap0901.cat

MD5 7f49202c5a71e1dd7c85923a5dd45764
SHA1 7e8c115faad3ab2cc53ecfc05cf09e8eabfbffa6
SHA256 825cc3efc86cd13fa1bda7d0413d5ca8b208c3a18834ef02637834352ef386fc
SHA512 62497068c4ed428772ac6236c1383540cf7c48a7ee20b06e0b0e873c51fe69718969ab218f953001403d2e2170e7f29cd84947722e15f55985863a2e79d66d63

C:\Program Files (x86)\TotalAV\driver\i386\OemWin2k.inf

MD5 35589b966c65a52a1c95791bbcd80543
SHA1 d65994dd38de0e1971f8c99a048c46acc284e8bf
SHA256 8892d224ae879cc35ffe216691fc6ba3266d88b6239838f7d38b3a4ff4ad74b6
SHA512 ece01e898527ae2ce3039457ea1823bda6351871900c1a7a20057ff3250e33ed8ed216af3318edaa1c3825c17d348dee06078e946d10332e87af8ec45795fd5f

C:\Program Files (x86)\TotalAV\driver\i386\devcon.exe

MD5 d0006c3ec1f8b894e41667355b088448
SHA1 8c478cd72bd52bec1283fed9186a9d07a58a084c
SHA256 f228844f92969a6c88ec6b9168815c259881f436f3188f9b038eb0b1dce08bbf
SHA512 85424d30cd0607cae58ec1b9053ba6b2f087e148ad6ba029ddcabc4ff33fc97d3a6dddb0f49e5a39cfbe011ae2f9b165ba0490ed9365f081afdf4ab0c15b3c4d

C:\Program Files (x86)\TotalAV\driver\amd64\tap0901.sys

MD5 54cb62322b7b1210cb317c4462691b10
SHA1 728cccf1e337641cfe06df85aaa667270c2f540f
SHA256 89cb62e73fbd0500a8b811a632602c504753777313d7e424cca68f1619b55211
SHA512 b9dec2e015659ccd9683ef504f6a912f55e41e87d0d9c698670b1b2db358a1f4997fcc112cf04e850d7b226582a3d234b57ad68b4afd9cff9c9df63b5f2c08fd

C:\Program Files (x86)\TotalAV\driver\amd64\tap0901.cat

MD5 e0762d9f662614cdc930e211884e9443
SHA1 8016a500b268f2263aa26996f92cad4a9bfe153d
SHA256 b8913d43b03ecf24f466b7bd5046b0c35ec9c43620d10ce3d5dd6538356a85a8
SHA512 618fbf5488f2eeba35b46e4eeabb901b40be20bd9447d49920ad22a9adb23d6dd366556430e24005543bd2ee501848ff7b24bcebf7b15b8ee8543091b73bb449

C:\Program Files (x86)\TotalAV\driver\amd64\OemWin2k.inf

MD5 b6aada0cbed06889053a05b66f146979
SHA1 823025f02b355b37df7d7657b0f2b4d3584891a5
SHA256 a6e72b88e42d2b478615c5a16bbedb3fd02b0dd3def3a79840fc6a5df8312707
SHA512 9f8a6b0ad5ae4ea4c14043d663fd5aca2f1884ece0975b13c0533eb93103eb89120c1884121d71c8f9d09f5d210926fdba3b29fc6cf87f601bbc0f359c31d4ad

C:\Program Files (x86)\TotalAV\driver\amd64\devcon.exe

MD5 9ab7634bb81f326d489e453c358ae8ea
SHA1 5ea9dfa805f1ae952cb3b66712126ac9c3c985c0
SHA256 118e04049f21d272c8005e1e746248a4654b305a41b29e5c735231d2b83bbaa6
SHA512 c90ab0182709cbf9ea2ba58565fcc6c72b52bc500b5f16a7eba1f107350550725f0ba40bf64102e9e0c8fdc347e0833f67a8bfe4779b3654d0e7d42f7b8bb74d

C:\Program Files (x86)\TotalAV\DotNetZip.dll

MD5 6a8c8771bd399dd468595bab186c3e88
SHA1 df56e2573396ad8da5998c6aaf89c508f2060a85
SHA256 28d76d7ac169c5b71cca4e3073226f885a2f06720413a11e8db9b7fc08359462
SHA512 3e7a0e3b0b182e97e44504c4aa511065ea910a88e88ea849a5977f64dfd64aca6008815a6307e1d82a706b66811ddc5a1234b37c95a80e1a01feaa8b8fdc3d74

C:\Program Files (x86)\TotalAV\DirectWriteForwarder.dll

MD5 a36d73301123334adc95e034b327daad
SHA1 cb4bd930cbe2c930d665dd4467e8b88815de8c1d
SHA256 440c95dcdbe402d843095649773d1fc6da5d035802dd540ce29c71bc915d433b
SHA512 438abf9aa1c00bf1f3e9ec7e9ac6bf5d89c492d68301044ba7fb205d3c5d34aae4940893eff721b91696de4c782a8a3558cdb39955943e350361639893ef3393

C:\Program Files (x86)\TotalAV\dbgshim.dll

MD5 25527d0dc8c76052d6af0062809b19db
SHA1 9743537cf72993b29cc01e98c535b01e3448707d
SHA256 23d45e43b4e54b12dc7f8029ae785e6a2a666e94b0b749c878502cd89ce4b50d
SHA512 b8e596d004b40122eafbc0425383fda061b5c27c892260631bb77aeb79b25316b86ca57c443d3c0494484ce3ed0329882588a418e0773559a06a2a2566a7041a

C:\Program Files (x86)\TotalAV\D3DCompiler_47_cor3.dll

MD5 5e717c95808bcb5f654bb312d289b837
SHA1 c69448eafa40e35424744c28e68cf69ce11a3d97
SHA256 e745872db4dd114a65ee1504f401ea26d879edb6614e369a07a80ce7ad1950ca
SHA512 dc5e6ee0c8fe22897009060821b18bf2f7d0317d30682f7fa84a4c1889358c152d84d22ebe57d0ec8ccc1be8714bce6b1257d30671b8d0fea88309bbd137b8f0

C:\Program Files (x86)\TotalAV\coreclr.dll

MD5 fdb0d51a8c7ad31a75001ec87efc2039
SHA1 264a5dd57656841987f6f73d2b15290340049ad5
SHA256 d8877ba978e5ffb733026d15fc6e7b60862c8c43ad04ca3e5b663b6dcc7dd6bc
SHA512 590d8d45c59cd42ba0d0be068baf5d339228f6ff38f7282909679f3a2ea3f25f5110c072276888c986f020bbddeef48b69917900e7c94bcaa22bc3d0d6c978c1

C:\Program Files (x86)\TotalAV\clrjit.dll

MD5 a873ebf8b135192456bb47edffa641c9
SHA1 533375c44d5f0ed5a194975817972ca5e2e646ab
SHA256 520ef22ad5cdc40025f8964d0cefb39b0c88cec4e0f7d49863f004887adecc95
SHA512 c8a46a050530287451101ebe89b2ee4149d3d3402127c78be5b201d8a66c1b2c3adbdf33f7fc866008e8d4920a24635719baa1c172c84089afeb8019c76c8f17

C:\Program Files (x86)\TotalAV\clretwrc.dll

MD5 3a0d7de8c93cb55a2b694066d52908db
SHA1 9b54438352427d94fad53a0a8310a415d8b8d70b
SHA256 03a286bfc61bb4e6cef1cad40043bb9f161e5810b5ac56f81e6d0a7533f3d3e6
SHA512 7f6b68347a445b114b2a358629c58c35e83c661733376e779d1453d481ebb0ffac6d697e7d2083b38182d67d48a1662cd2bd31480ab0dda350bd1cba5709f5eb

C:\Program Files (x86)\TotalAV\clrcompression.dll

MD5 6cd5a2b4d0a555bbb94858e64659111c
SHA1 b5ddcbd91bbe232cf7e7ba5dcf0b75e80dea41ef
SHA256 bac1f0fd328051c956b95714b5498acd1be6707130be500a9188829a740a186f
SHA512 4a47fab547e185f022d90eaf6d587ad1bf78f248e5cd467081c957cfe2ae3ab1e451b2fa94cc076cb66e2753dba577f2489a1fca14f2075afa9dca371b623f61

C:\Program Files (x86)\TotalAV\cachey-bashi.netcore.dll

MD5 4882fa6dc7bdb4591967d65dd08e0437
SHA1 4c9ea0e2b4c03bfc62d35adc3003d41c5c33839a
SHA256 9be51e9fbffff4fcc7b6e50d214809f27dde875ad3c3b94961ce46c67cf253f1
SHA512 eddeadd43369d5b03ebd4b6b98063f28e09f0895d4b42d4ab9e81e3adf3f098402449a6b95469bce9ffc228f74216bac066f90805510eb40fca44abdb6c6569a

C:\Program Files (x86)\TotalAV\Branding.Desktop.dll

MD5 0a55314b9ff6edf2616e5a1e136886a6
SHA1 64f5fdfcc14962c1b9750b289afb3b94fc7bffbe
SHA256 c9131d33f63f660abd1025812fc20cd8a545feaf72eb288ca797e9f1e4bc348a
SHA512 a2181bd8fd97261666be02100aa0de24a298c90d61970e60bfa382b4b84fae85c79e1708b65ece3e2b9a66f77c0323d9e844d0ed4341d2d22d8ab984014e5fdb

C:\Program Files (x86)\TotalAV\BouncyCastle.Crypto.dll

MD5 9d34c40df4c87e378bdb0a3ebd36bfc2
SHA1 5c110a3a90e792270b44e3e3f6cf31bdd9020295
SHA256 e7c9e901e6d927778938d3ee5d183dce495d6b6eb2a89242a700afe25d921cf6
SHA512 51eea2113ac5acfd553b3e0b35390c38323218de55fd5b8abc8cf44bd0445df84eaf9349b52491737aa826ce76cfc2fe5eb5aaa60413cf376b4479ff21a19339

C:\Program Files (x86)\TotalAV\bins\subinacl.exe

MD5 7bd591f56af173edc8ca01bd62df6eac
SHA1 43e88cd5cee3b9c66de428c84501d8660ea0586b
SHA256 371cd9c35282843d572a3186975cc749e425fd4eeae1bb93a9b0cf20c22a9dc8
SHA512 b88d0c26a6f17d7b2d5483fc9a54002ea9fe26eabf10e5385ce4a13d81db5d7e8421d09bb5eaff453a6f5a210d547cf625fef74d209b2b5f0031621e9796366a

C:\Program Files (x86)\TotalAV\AviraLib.dll.config

MD5 7b6547aba2712929a012d362eb8adf74
SHA1 e7dde0f13bb8289f6b63aef2650d04ce6a8b1056
SHA256 f9c12d9f6a4625c20e1f3bda1a076b50587be63ca2207376b085bd8b9d6bae86
SHA512 9ed2348d075db48da699cc0f1131c17770ab2ab2b45298b003641201ac2b4639bdf2028cc2a0492b317de9d951a0cad2ce6dcd259e2f0421055a04ac43620985

C:\Program Files (x86)\TotalAV\AviraLib.dll

MD5 d6d0cc37647a75064f98df7be2f90fd3
SHA1 bee54ae9b3fd3686a8b672e341bda18ec6123b32
SHA256 1cf8f0fad70f9adda6b54ea13622c440d624ddd31c801f1c3493e1cef7d84747
SHA512 23b805ab3cf0d0da5f6a7d792ed3e7a854f8d23055a4686b9b37d792756a971edf877433a6c4ac6c1f328b04e9e9130802aecc8ffe3ec27b63fe955424d7c6d6

C:\Program Files (x86)\TotalAV\avira.managed.update.dll

MD5 4e509553baec78324665c02e52632f0f
SHA1 460baa72abce39d6bf6341f410af02d0aef2c9fc
SHA256 56f9b75353fdfc424eb57e438e49c247dfc111f1494319e2336086588ce47330
SHA512 5b8f5b94d158770eb39091d9d1a688b117431c092e7e22bdce5f8f5d54290d8b600a4c720fce673c8789bb68cf9a9bf2a430d8e75b3efe6d20022d511143f917

C:\Program Files (x86)\TotalAV\avira.managed.sdk.dll

MD5 6ecd66884c2033bea3db38a866538776
SHA1 23d1d5795e4f06c249527677f51a25084ad1da68
SHA256 8f875895c08f07bcb4816e5b5b52d1004ef0f26ffc81dc6a0f6dc43c5a77aaf7
SHA512 ef95e273d70f08ebb6727ad027d0c890ac6f8f07aaf550b6efe04a11219e8c9bfbbf2fbf292545638d86051d7bd0545e4d5dcaa8b33c1e162aea0c13eb1ca160

C:\Program Files (x86)\TotalAV\avira.managed.remediation.dll

MD5 cbfe8189d00825dc1ffbb123cd0d235a
SHA1 f1fcf30f996ad41fbf1564065437e2e45456e179
SHA256 aa29dbc7d98ed50bcc56b057f877b9e0dc1c38af62a87993576295da65a68967
SHA512 5efd02f7770d611d12372096727b2d7839d1e101482fb1e7dd6dbc088b1aa3773d09613c8331e2d2c8e824c803130ba03f801065edb1950f93dc04af6b6a086c

C:\Program Files (x86)\TotalAV\api-ms-win-crt-utility-l1-1-0.dll

MD5 70e9104e743069b573ca12a3cd87ec33
SHA1 4290755b6a49212b2e969200e7a088d1713b84a2
SHA256 7e6b33a4c0c84f18f2be294ec63212245af4fd8354636804ffe5ee9a0d526d95
SHA512 e979f28451d271f405b780fc2025707c8a29dcb4c28980ca42e33d4033666de0e4a4644defec6c1d5d4bdd3c73d405fafcffe3320c60134681f62805c965bfd9

C:\Program Files (x86)\TotalAV\api-ms-win-crt-time-l1-1-0.dll

MD5 9b79fda359a269c63dcac69b2c81caa4
SHA1 a38c81b7a2ec158dfcfeb72cb7c04b3eb3ccc0fb
SHA256 4d0f0ea6e8478132892f9e674e27e2bc346622fc8989c704e5b2299a18c1d138
SHA512 e69d275c5ec5eae5c95b0596f0cc681b7d287b3e2f9c78a9b5e658949e6244f754f96ad7d40214d22ed28d64e4e8bd507363cdf99999fea93cfe319078c1f541

C:\Program Files (x86)\TotalAV\api-ms-win-crt-string-l1-1-0.dll

MD5 ad99c2362f64cde7756b16f9a016a60f
SHA1 07c9a78ee658bfa81db61dab039cffc9145cc6cb
SHA256 73ab2161a7700835b2a15b7487045a695706cc18bcee283b114042570bb9c0aa
SHA512 9c72f239adda1de11b4ad7028f3c897c93859ef277658aeaa141f09b7ddfe788d657b9cb1e2648971ecd5d27b99166283110ccba437d461003dbb9f6885451f7

C:\Program Files (x86)\TotalAV\api-ms-win-crt-stdio-l1-1-0.dll

MD5 d5166ab3034f0e1aa679bfa1907e5844
SHA1 851dd640cb34177c43b5f47b218a686c09fa6b4c
SHA256 7bcab4ca00fb1f85fea29dd3375f709317b984a6f3b9ba12b8cf1952f97beee5
SHA512 8f2d7442191de22457c1b8402faad594af2fe0c38280aaafc876c797ca79f7f4b6860e557e37c3dbe084fe7262a85c358e3eeaf91e16855a91b7535cb0ac832e

C:\Program Files (x86)\TotalAV\api-ms-win-crt-runtime-l1-1-0.dll

MD5 fb0ca6cbfff46be87ad729a1c4fde138
SHA1 2c302d1c535d5c40f31c3a75393118b40e1b2af9
SHA256 1ee8e99190cc31b104fb75e66928b8c73138902fefedbcfb54c409df50a364df
SHA512 99144c67c33e89b8283c5b39b8bf68d55638daa6acc2715a2ac8c5dba4170dd12299d3a2dffb39ae38ef0872c2c68a64d7cdc6ceba5e660a53942761cb9eca83

C:\Program Files (x86)\TotalAV\api-ms-win-crt-process-l1-1-0.dll

MD5 9d3d6f938c8672a12aea03f85d5330de
SHA1 6a7d6e84527eaf54d6f78dd1a5f20503e766a66c
SHA256 707c9a384440d0b2d067fc0335273f8851b02c3114842e17df9c54127910d7fb
SHA512 0e1681b16cd9af116bcc5c6b4284c1203b33febb197d1d4ab8a649962c0e807af9258bde91c86727910624196948e976741411843dd841616337ea93a27de7cb

C:\Program Files (x86)\TotalAV\api-ms-win-crt-private-l1-1-0.dll

MD5 3d139f57ed79d2c788e422ca26950446
SHA1 788e4fb5d1f46b0f1802761d0ae3addb8611c238
SHA256 dc25a882ac454a0071e4815b0e939dc161ba73b5c207b84afd96203c343b99c7
SHA512 12ed9216f44aa5f245c707fe39aed08dc18ea675f5a707098f1a1da42b348a649846bc919fd318de7954ea9097c01f22be76a5d85d664ef030381e7759840765

C:\Program Files (x86)\TotalAV\api-ms-win-crt-multibyte-l1-1-0.dll

MD5 19d7f2d6424c98c45702489a375d9e17
SHA1 310bc4ed49492383e7c669ac9145bda2956c7564
SHA256 a6b83b764555d517216e0e34c4945f7a7501c1b7a25308d8f85551fe353f9c15
SHA512 01c09edef90c60c9e6cdabff918f15afc9b728d6671947898ce8848e3d102f300f3fb4246af0ac9c6f57b3b85b24832d7b40452358636125b61eb89567d3b17e

C:\Program Files (x86)\TotalAV\api-ms-win-crt-math-l1-1-0.dll

MD5 8da414c3524a869e5679c0678d1640c1
SHA1 60cf28792c68e9894878c31b323e68feb4676865
SHA256 39723e61c98703034b264b97ee0fe12e696c6560483d799020f9847d8a952672
SHA512 6ef3f81206e7d4dca5b3c1fafc9aa2328b717e61ee0acce30dfb15ad0fe3cb59b2bd61f92bf6046c0aae01445896dcb1485ad8be86629d22c3301a1b5f4f2cfa

C:\Program Files (x86)\TotalAV\api-ms-win-crt-locale-l1-1-0.dll

MD5 034379bcea45eb99db8cdfeacbc5e281
SHA1 bbf93d82e7e306e827efeb9612e8eab2b760e2b7
SHA256 8b543b1bb241f5b773eb76f652dad7b12e3e4a09230f2e804cd6b0622e8baf65
SHA512 7ea6efb75b0c59d3120d5b13da139042726a06d105c924095ed252f39ac19e11e8a5c6bb1c45fa7519c0163716745d03fb9daaaca50139a115235ab2815cc256

C:\Program Files (x86)\TotalAV\api-ms-win-crt-heap-l1-1-0.dll

MD5 1776a2b85378b27825cf5e5a3a132d9a
SHA1 626f0e7f2f18f31ec304fe7a7af1a87cbbebb1df
SHA256 675b1b82dd485cc8c8a099272db9241d0d2a7f45424901f35231b79186ec47ee
SHA512 541a5dd997fc5fec31c17b4f95f03c3a52e106d6fb590cb46bdf5adad23ed4a895853768229f3fbb9049f614d9bae031e6c43cec43fb38c89f13163721bb8348

C:\Program Files (x86)\TotalAV\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 228c6bbe1bce84315e4927392a3baee5
SHA1 ba274aa567ad1ec663a2f9284af2e3cb232698fb
SHA256 ac0cec8644340125507dd0bc9a90b1853a2d194eb60a049237fb5e752d349065
SHA512 37a60cce69e81f68ef62c58bba8f2843e99e8ba1b87df9a5b561d358309e672ae5e3434a10a3dde01ae624d1638da226d42c64316f72f3d63b08015b43c56cab

C:\Program Files (x86)\TotalAV\api-ms-win-crt-environment-l1-1-0.dll

MD5 39325e5f023eb564c87d30f7e06dff23
SHA1 03dd79a7fbe3de1a29359b94ba2d554776bdd3fe
SHA256 56d8b7ee7619579a3c648eb130c9354ba1ba5b33a07a4f350370ee7b3653749a
SHA512 087b9dcb744ad7d330bacb9bda9c1a1df28ebb9327de0c5dc618e79929fd33d1b1ff0e1ef4c08f8b3ea8118b968a89f44fe651c66cba4ecbb3216cd4bcce3085

C:\Program Files (x86)\TotalAV\api-ms-win-crt-convert-l1-1-0.dll

MD5 9ddea3cc96e0fdd3443cc60d649931b3
SHA1 af3cb7036318a8427f20b8561079e279119dca0e
SHA256 b7c3ebc36c84630a52d23d1c0e79d61012dfa44cdebdf039af31ec9e322845a5
SHA512 1427193b31b64715f5712db9c431593bdc56ef512fe353147ddb7544c1c39ded4371cd72055d82818e965aff0441b7cbe0b811d828efb0ece28471716659e162

C:\Program Files (x86)\TotalAV\api-ms-win-crt-conio-l1-1-0.dll

MD5 a668c5ee307457729203ae00edebb6b3
SHA1 2114d84cf3ec576785ebbe6b2184b0d634b86d71
SHA256 a95b1af74623d6d5d892760166b9bfac8926929571301921f1e62458e6d1a503
SHA512 73dc1a1c2ceb98ca6d9ddc7611fc44753184be00cfba07c4947d675f0b154a09e6013e1ef54ac7576e661fc51b4bc54fdd96a0c046ab4ee58282e711b1854730

C:\Program Files (x86)\TotalAV\API-MS-Win-core-xstate-l2-1-0.dll

MD5 5f11b9bb427753bdae6d312a02c516f9
SHA1 6fb327e5a64a94c2489f3a82999b7d60babb228a
SHA256 4879fe3ea58d853f21658aefc5e8b92b7e6333d77c0af31a6bf9ff769475f6fd
SHA512 09a317ecb7d83f1aa2d06e65371513ae770c9df4691b5ad3d50918e4bfacf1635fafaa43ada4efd5d23c448a7eb80675baecccb3ca9dbbfba4e829248a5bf466

C:\Program Files (x86)\TotalAV\api-ms-win-core-util-l1-1-0.dll

MD5 29e1922b32e5312a948e6d8b1b34e2d9
SHA1 912f54be8438f45e1562a47294091d522cd89356
SHA256 34c5dee6d566252c0ceb7d9a21e24d5f297af2b26c32e0c7808bbd088aa9a6a9
SHA512 837cd03ee0195dc94bab0662ff3b8cd1be2dedd8a3254318d25dfea6e88d07211186fa367f41ab864560e10a22220deb3ed05ccf82d60ac80c71dfed08afbea3

C:\Program Files (x86)\TotalAV\api-ms-win-core-timezone-l1-1-0.dll

MD5 c9a55de62e53d747c5a7fddedef874f9
SHA1 c5c5a7a873a4d686bfe8e3da6dc70f724ce41bad
SHA256 b5c725bbb475b5c06cc6cb2a2c3c70008f229659f88fba25ccd5d5c698d06a4b
SHA512 adca0360a1297e80a8d3c2e07f5fbc06d2848f572f551342ad4c9884e4ab4bd1d3b3d9919b4f2b929e2848c1a88a4e844dd38c86067cace9685f9640db100efb

C:\Program Files (x86)\TotalAV\api-ms-win-core-sysinfo-l1-1-0.dll

MD5 887995a73bc7dde7b764afabce57efe7
SHA1 363fd4e7ad4a57224e8410154697df5e8629f526
SHA256 f94210b39cdc812beb7342a47e68673ea2116d0ad9266fcf8d7cedaa9561fc38
SHA512 d088eb1c6958774e20f0e2884136b4e2b978efd16f557dbc55e64011abbce0768054f7e6d881c110182824143a39101fdae273ed614738aa7ba5c727b27f6677

C:\Program Files (x86)\TotalAV\api-ms-win-core-synch-l1-2-0.dll

MD5 6e704280d632c2f8f2cadefcae25ad85
SHA1 699c5a1c553d64d7ff3cf4fe57da72bb151caede
SHA256 758a2f9ef6908b51745db50d89610fe1de921d93b2dbea919bfdba813d5d8893
SHA512 ade85a6cd05128536996705fd60c73f04bab808dafb5d8a93c45b2ee6237b6b4ddb087f1a009a9d289c868c98e61be49259157f5161feccf9f572fd306b460e6

C:\Program Files (x86)\TotalAV\api-ms-win-core-synch-l1-1-0.dll

MD5 c1dcdb0fabc8ae671a7c7a94f42fb79a
SHA1 99355912d7a7d622753b2a855cae4f5a4e50146f
SHA256 cc76a4e82e0e0cd08df3bb8f5ad57142305e0f666cc32599d76e363d0b43efcb
SHA512 6d92e7520aeebfe60aab43d6616b76a2dd385edcaa217db60003a0c0cbcb0e367063d240e38a19d0b8bee2f2e7d4b982c4f08c8e9ccf34c7f670cb49f6561fff

C:\Program Files (x86)\TotalAV\api-ms-win-core-string-l1-1-0.dll

MD5 e7a266dd3a2a1e03d8716f92bede582d
SHA1 d4b97ce87c96de1f39fea97cca3992d292b2c14e
SHA256 339966ae75675a03f628c4ddd5d3218abb36cbcf6ddce83b88c07336d732b8ae
SHA512 31168663fd71b901b1b9152ff288d4e1567003e5fcd1f1c9dfe36d26d2eb16b0932ec8cd34833dab25531f768a01de45c2483f92d4e79f92a89389c02bc05156

C:\Program Files (x86)\TotalAV\api-ms-win-core-rtlsupport-l1-1-0.dll

MD5 65fc0b6c2ceff31336983e33b84a9313
SHA1 980de034cc3a36021fd8bafff3846b0731b7068e
SHA256 966a38ed7034f8d355e1e8772dfc92f23fb3c8a669780ed4ac3b075625d09744
SHA512 f4ebc7a6d12ae6afa5b96c06413a3438e1678b276b1517da07d33912818fc863b4d35cb46280f12cf90e37bc93e3ab5e44ea6f75767a314c59222b7d397e5b6a

C:\Program Files (x86)\TotalAV\api-ms-win-core-profile-l1-1-0.dll

MD5 cedefd460bc1e36ae111668f3b658052
SHA1 9bd529fe189e0b214b9e0e51717bdf62f1da44ea
SHA256 f941c232964d01e4680e54ab04955ec6264058011b03889fe29db86509511eba
SHA512 2c845642b054bc12c2911bfe2b850f06fecafef022180c22f6ffd670f821e84fcad041c4d81ddadb781ddb36cb3e98dfe4eb75ec02b88306ef1d410cbb021454

C:\Program Files (x86)\TotalAV\api-ms-win-core-processthreads-l1-1-1.dll

MD5 95c5b49af7f2c7d3cd0bc14b1e9efacb
SHA1 c400205c81140e60dffa8811c1906ce87c58971e
SHA256 ff9b51aff7fbec8d7fe5cc478b12492a59b38b068dc2b518324173bb3179a0e1
SHA512 f320937b90068877c46d30a15440dc9ace652c3319f5d75e0c8bb83f37e78be0efb7767b2bd713be6d38943c8db3d3d4c3da44849271605324e599e1242309c3

C:\Program Files (x86)\TotalAV\api-ms-win-core-processthreads-l1-1-0.dll

MD5 1dda9cb13449ce2c6bb670598fc09dc8
SHA1 0a91fe11b9a8321ca369f665a623270e5ac23176
SHA256 4f187f1b4b14763360c325df6b04d3ec3cc6d2cecc9b796bc52a6c7196b0b2cc
SHA512 4e106c8a52033352c91b65cf65ec459de764c125136333a2f4ba026efdde65f3f71b1f6f11e4c580150ac8a9779825ba5e2af0e14df999a198cfe244e522c28d

C:\Program Files (x86)\TotalAV\api-ms-win-core-processenvironment-l1-1-0.dll

MD5 0c700b07c3497df4863c3f2fe37cd526
SHA1 f835118244d02304de9eb3a355420ba9d0bd9c13
SHA256 9f1f26794fd664e0a8b6fbd53bfca33dcf7b0dc37faf3eb7782bc38dff62cd8c
SHA512 8042dbd9e80e33e41993887b0289e143e967544389500ada9296b89bda37bb26918e4f370f8a1bdab8faacc4e0a6980794d6a3b5320e170ad4ef751384c9f0a8

C:\Program Files (x86)\TotalAV\api-ms-win-core-namedpipe-l1-1-0.dll

MD5 990ac84ae2d83eeb532a28fe29602827
SHA1 0916f85cc6cc1f01dc08bdf71517a1dc1b8eaf78
SHA256 dbd788b1c5694d65fa6f6e2202bfabb30adf77eb1973ceb9a737efb16e9edae2
SHA512 f0e4705a6890b4f81b7d46f66ca6b8ee82f647e163bce9ecad11d0bbd69caf4ff3c4f15e0d3f829c048b6849b99a7641861e6caf319904d4d61a6084f10da353

C:\Program Files (x86)\TotalAV\api-ms-win-core-memory-l1-1-0.dll

MD5 3940167ffb4383992e73f9a10e4b8b1e
SHA1 53541c824003b0f90b236eda83b06bec5e1acbf5
SHA256 ec573431338371504b7b9e57b2d91382b856aabf25d2b4ad96486efb794c198e
SHA512 9732acaa4db773f4f99f423d9feaebb35c197bbd468922348e0ad086f7131d83f6d9714dc7d375183e7cb8920cfe37f3da19b0041a9063cc60abe183375b1929

C:\Program Files (x86)\TotalAV\api-ms-win-core-localization-l1-2-0.dll

MD5 23bd405a6cfd1e38c74c5150eec28d0a
SHA1 1d3be98e7dfe565e297e837a7085731ecd368c7b
SHA256 a7fa48de6c06666b80184afee7e544c258e0fb11399ab3fe47d4e74667779f41
SHA512 c52d487727a34fbb601b01031300a80eca7c4a08af87567da32cb5b60f7a41eb2cae06697cd11095322f2fc8307219111ee02b60045904b5c9b1f37e48a06a21

C:\Program Files (x86)\TotalAV\api-ms-win-core-libraryloader-l1-1-0.dll

MD5 0c48220a4485f36feed84ef5dd0a5e9c
SHA1 1e7d4038c2765cffa6d4255737a2a8aa86b5551c
SHA256 2dd4ebaa12cbba142b5d61a0ebf84a14d0d1bb8826ba42b63e303fe6721408df
SHA512 e09951785b09f535340e1e6c256df1919485b4dad302b30d90126411cc49a13807b580fa2fcd0d6f7b64aac4f5b5ea3e250b66035a0e2f664d865408c9b43d48

C:\Program Files (x86)\TotalAV\api-ms-win-core-interlocked-l1-1-0.dll

MD5 cfe87d58f973daeda4ee7d2cf4ae521d
SHA1 fd0aa97b7cb6e50c6d5d2bf2d21d757040b5204a
SHA256 4997fda5d0e90b8a0ab7da314cb56f25d1450b366701c45c294d8dd3254de483
SHA512 40eb68deb940bbe1b835954183eea711994c434de0abbdea0b1a51db6233a12e07827ad4a8639ae0baf46dd26c168a775ffe606c82cbe47bae655c7f28ab730b

C:\Program Files (x86)\TotalAV\api-ms-win-core-heap-l1-1-0.dll

MD5 ff8026dab5d3dabca8f72b6fa7d258fa
SHA1 075c8719e226a34d7b883fd62b2d7f8823d70f1a
SHA256 535e9d20f00a2f1a62f843a4a26cfb763138d5dfe358b0126d33996fba9ca4d1
SHA512 9c56ff11d5843ba09cd29e3bc6c6b9396926c6a588194193ba220cfa784b770ab6756076f16f18cfea75b51a8184a1063ef47f63804839530382f8d39d5cf006

C:\Program Files (x86)\TotalAV\api-ms-win-core-handle-l1-1-0.dll

MD5 18fd51821d0a6f3e94e3fa71db6de3af
SHA1 7d9700e98ef2d93fdbf8f27592678194b740f4e0
SHA256 dba84e704ffe5fcd42548856258109dc77c6a46fd0b784119a3548ec47e5644b
SHA512 4009b4d50e3cb17197009ac7e41a2351de980b2c5b79c0b440c7fe4c1c3c4e18f1089c6f43216eaa262062c395423f3ad92ca494f664636ff7592c540c5ef89d

C:\Program Files (x86)\TotalAV\api-ms-win-core-file-l2-1-0.dll

MD5 3f224766fe9b090333fdb43d5a22f9ea
SHA1 548d1bb707ae7a3dfccc0c2d99908561a305f57b
SHA256 ae5e73416eb64bc18249ace99f6847024eceea7ce9c343696c84196460f3a357
SHA512 c12ea6758071b332368d7ef0857479d2b43a4b27ceeab86cbb542bd6f1515f605ea526dfa3480717f8f452989c25d0ee92bf3335550b15ecec79e9b25e66a2ca

C:\Program Files (x86)\TotalAV\api-ms-win-core-file-l1-2-0.dll

MD5 79ee4a2fcbe24e9a65106de834ccda4a
SHA1 fd1ba674371af7116ea06ad42886185f98ba137b
SHA256 9f7bda59faafc8a455f98397a63a7f7d114efc4e8a41808c791256ebf33c7613
SHA512 6ef7857d856a1d23333669184a231ad402dc62c8f457a6305fe53ed5e792176ca6f9e561375a707da0d7dd27e6ea95f8c4355c5dc217e847e807000b310aa05c

C:\Program Files (x86)\TotalAV\api-ms-win-core-file-l1-1-0.dll

MD5 eefe86b5a3ab256beed8621a05210df2
SHA1 90c1623a85c519adbc5ef67b63354f881507b8a7
SHA256 1d1c11fc1ad1febf9308225c4ccf0431606a4ab08680ba04494d276cb310bf15
SHA512 c326a2ca190db24e8e96c43d1df58a4859a32eb64b0363f9778a8902f1ac0307dca585be04f831a66bc32df54499681ad952ce654d607f5fdb93e9b4504d653f

C:\Program Files (x86)\TotalAV\api-ms-win-core-errorhandling-l1-1-0.dll

MD5 d91bf81cf5178d47d1a588b0df98eb24
SHA1 75f9f2da06aa2735906b1c572dd556a3c30e7717
SHA256 f8e3b45fd3e22866006f16a9e73e28b5e357f31f3c275b517692a5f16918b492
SHA512 93d1b0d226e94235f1b32d42f6c1b95fadfaf103b8c1782423d2c5a4836102084fb53f871e3c434b85f0288e47f44345138de54ea5f982ca3e8bbf2d2bea0706

C:\Program Files (x86)\TotalAV\api-ms-win-core-debug-l1-1-0.dll

MD5 879920c7fa905036856bcb10875121d9
SHA1 a82787ea553eefa0e7c3bb3aedb2f2c60e39459a
SHA256 7e4cba620b87189278b5631536cdad9bfda6e12abd8e4eb647cb85369a204fe8
SHA512 06650248ddbc68529ef51c8b3bc3185a22cf1685c5fa9904aee766a24e12d8a2a359b1efd7f49cc2f91471015e7c1516c71ba9d6961850553d424fa400b7ea91

C:\Program Files (x86)\TotalAV\api-ms-win-core-datetime-l1-1-0.dll

MD5 8894176af3ea65a09ae5cf4c0e6ff50f
SHA1 46858ea9029d7fc57318d27ca14e011327502910
SHA256 c64b7c6400e9bacc1a4f1baed6374bfbce9a3f8cf20c2d03f81ef18262f89c60
SHA512 64b31f9b180c2e4e692643d0ccd08c3499cae87211da6b2b737f67b5719f018ebcacc2476d487a0aeb91fea1666e6dbbf4ca7b08bb4ab5a031655bf9e02cea9a

C:\Program Files (x86)\TotalAV\api-ms-win-core-console-l1-1-0.dll

MD5 aabbb38c4110cc0bf7203a567734a7e7
SHA1 5df8d0cdd3e1977ffacca08faf8b1c92c13c6d48
SHA256 24b07028c1e38b9ca2f197750654a0dfb7d33c2e52c9dd67100609499e8028db
SHA512 c66c98d2669d7a180510c57bab707d1e224c12ab7e2b08994eb5fd5be2f3dee3dbdb934bcb9db168845e4d726114bce317045027215419d3f13dcfa0f143d713

C:\Program Files (x86)\TotalAV\Accessibility.dll

MD5 1b4cc6782e295675217cd17df70057f3
SHA1 f468087e7fbaa5aeed1fc41062b198570ae017e3
SHA256 f08bdbf797dfdbbde37000fb29141caec4beb4dc0f552ab2cfe0887e1e6c5f60
SHA512 05289e9514d173694a1e15dc5228976c963572353c78412bc79bdc933ae89df08e889736232c6240e4fa1e8f26689cb4eeae4a83aa9e333a6d1882b8b857a8fb

C:\Program Files (x86)\TotalAV\SAVAPI\xvdfmerge.dll

MD5 af329640a44f6dc93e395e167a0c80f9
SHA1 9f3c6e132c874ec689c2ab5ad21282f326d93694
SHA256 d20f7ad78d1d548ebea41f6b496cb2399f8186493564c777f192c9a0eed23f18
SHA512 988ce1e03736fbb4369bd5e0ffc52dae9c70811c65d11066d99a76e372fb72108d80c727fe4dd4e4e1125c927a68caf97af18009fb362048f408dbe36caba440

C:\Program Files (x86)\TotalAV\SAVAPI\update.bat

MD5 b862a1baac142bcacd391414d665a0a1
SHA1 79aa0c97010707640bfa3082b29fd61b1373dbce
SHA256 924f07591863b3e6d43371593a3c4d57bba93cdbf59fdf102ba72abd55e92879
SHA512 788f4e959fdf91f2c3a2a46ff9d1ed51f96c73238f3e9aaab9e2b2bd45759645085082aa831220c9ce023a7a741213538d852658b9cbe4b12bbee5705e1f2d7b

C:\Program Files (x86)\TotalAV\SAVAPI\scew.dll

MD5 4a144eb1f737dc00689659b36aff0384
SHA1 4ce0c8afbd153473d6a03fb2743e209b5ddd1c0e
SHA256 10f3a985da345376502bb8e4fce9c59aa15633b78347bf9080fb61bdd2e3cd5d
SHA512 68e5044ed77ebdcef9b0b3fec7174ef5faf56b38aebf5df64ec925c817021453e97a3a02a348996cfb3976b995e59439b3128930ba176600ab4b10c12ff40726

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_stub.exe

MD5 3899d956a9c88d0519e188d067de5d19
SHA1 241b01e86a121694a48722ce4dc6c08bd0bf5cfd
SHA256 91265685308da5d2a1cc5f478b83e43a4656fd075d7cfee3923380905fd8dfaf
SHA512 7f6e4d7b279f3c08022af6290e4015f12d4e8ba54ef65681d162bb421f08a81b57b4b2e7004861638c227da746127f5e9d4ee7932f3e2067b990f6b2951cb633

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_restart.exe

MD5 9919de22bf888ab8d7122a04646aa313
SHA1 35af4b2757b6d96e345ba43af1d126ccfbbeb23d
SHA256 4b75f1e230aa0195e8da68e481eeb90b9d85194f15e2d458bd8ebee6d9d69ccc
SHA512 deb7c4af295ed1c90205bd4c1299c62dbed70711ae16e3eceb64b386ca5e78537f801c1641d13617a6ee448cb187bb0399990a8161abc6685f0ee941a110224e

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_pretest.bat

MD5 55d563f40e716ab251760a52f49a0e68
SHA1 fc8a086681368388dbf77199cabac654765b133b
SHA256 767637bffb932cad48218f8d128f2908e57c4a42326db29dfeaa1c5509018186
SHA512 b218b11f9d66812a76c99b5a9a8cc73f9c83c626cef17049425855d5242e9c2e4355557c94d8a9f4d8f0fa6edc99a4658849f5edbb0320f7342dae4bda18e34b

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_pre.bat

MD5 912510dd6dd41ca900d10834879601c7
SHA1 4dcaa7061636cf05ad5fe72ecb20ca29f2c003fe
SHA256 ec07adec51dc57f42077b2757421012c49fc771fb8cf664c36505d664e996c36
SHA512 63f0e1b37d83d208d1d9fab44b74d5f0def82caeb4f2289d7ffb6bacb28013f6a24ae61d9a83e6684c80b5221675d76bc75a94c9fb2ebe31819465135753ea6c

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_post.bat

MD5 0dc718c8c4ccc13e58f9224f1af1125d
SHA1 51cca0861c564b973dc5017f6a9c86d47b2dad31
SHA256 4682c0f3dcbafa32e3dae743268a0babf67fe2970b4b0dd3f91cc7ed54627545
SHA512 b6e4b9b9b50669198d35a06c15bf8334eb3e68801946a96be66aee00361faceed6eefd84303979c5fceb87588a21d4fc1c94ca2a9dea5fb062d2a9da8c4cf27f

C:\Program Files (x86)\TotalAV\SAVAPI\savapiclient.dll

MD5 eb905e77afda1a6e65342a83ac5fba75
SHA1 93434d20f75db97bf1947043982d33d282db96a0
SHA256 8f5aedf1f8e8dd027aabb3420ed7e0e38219a7d8d3b880f3a46671d32270fc69
SHA512 4fdb07e66639fe5efeea5f45a57db932be99e7ce81aac392f7fd52dc0b333a219da5af9df980ca3caf256f899640a4bcebdbdb8aa4bb2269160f692a72b880a2

C:\Program Files (x86)\TotalAV\SAVAPI\savapi.exe

MD5 ae60aaf104b487577024715df996309e
SHA1 ca80a770fd21bf51a4f1a3c05b1d4dc974780804
SHA256 212b3d2c8f570375b95fb2de9f681a9f85796220b4bcb5abb6a2d248ffd9e1ea
SHA512 108efd4b3e463a1ce658d497de80fcdcb9c6b7ab08abd8fddd639e8de4383b6a4f793cb3dc249d9c5e6d157db897d10b65d1e919487e65b480305fa61be3c98f

C:\Program Files (x86)\TotalAV\SAVAPI\savapi.dll

MD5 85815e63269ec76386fd2a4d418f75be
SHA1 34b6ae807c5ab324e3e5a624b4bfa325ad86d890
SHA256 5617fc94cdd8b0c7a14df62cfc77f64ffe157d5fe96cc02c9ff209db97274e0e
SHA512 08401d39a1d8cd2b047b66c14236aaf04fc79d2a21c57e38198a6c2ccfca5e2959628a4674eb5609f7bb8d49eb87ea9033562bbdb058dc03beab81478b95e7d6

C:\Program Files (x86)\TotalAV\SAVAPI\savapi.conf

MD5 c1f0cfade5c32a37b223f5f7b0ec3510
SHA1 8fb0afd1a53feb25652937d09865e3cc8cf3f02e
SHA256 b30e328a864f6c4bd5544f6a7c3dbdc2cb97e668e2e583de0590506c881a16b9
SHA512 9dc05c25f907ce29ebccca1c34fbf926ea7a4d803e2d2fb6106192176681fd151b82605bc066e7e55e03b14aae3ac81008dadc70889dbae887de5f67ec11aa40

C:\Program Files (x86)\TotalAV\SAVAPI\productname.dat

MD5 53ce39cd5a411bb30c5b1d413e641ec8
SHA1 0b7c31237c9b0a436ace5274938d420f8c7d6385
SHA256 84cc36c119381af58ccaead1ad8995b92317ca4ae8c38a38dc37071d712bb4d8
SHA512 3524dea3bfd8cc9539d70102ab3f49da50a1b0c1a68b7073869b7f193a30562d716526a6de13a40f07480763e3841bcc3743b91f46f9f87630707e63e7d76f26

C:\Program Files (x86)\TotalAV\SAVAPI\plg_fops_dummy.dll

MD5 e31669de92895bb6b150e3f319267458
SHA1 83a6ffc6da2421d28e4f8a068a0950726078673c
SHA256 18f14d6ef36885b58dbe598cee1ff20c83afd5f9cf0c739394f74251f51bbf2f
SHA512 2d5f7f682e88fe83223efa7763e1dd46f50462eb8f164c90bf34c41c40ba06b98720b2acc04238809fa646b708a2c4a640ddb0e1ec0a8ae244cc29737e4fec6d

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avkmgr.sys

MD5 40786e1ac650f9f7e8b67a672b5eb69e
SHA1 f529c7b666b029e19a301a30463abcadd59f4b0b
SHA256 c754dd80f8f3e19144ffb01a17aace2176cb5a8dd404a38ce6ec4ed88b6af759
SHA512 da8453b4d97dc4994a6db2fbdb741119513bd007078bc352b664f77790a7c7de876f038943cf826dbab81962bc5551f506dc04e7d69945bf324f3a23a5e9e6ba

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avkmgr.inf

MD5 fabaac0d5c0ef083150dec8615a8b2bb
SHA1 23b864f150922bd020b679e018b1b0ee59a7353f
SHA256 bf526004b80b6698f782082cd3da58abf4e52a5f390d2f8d0d131b80f19775d2
SHA512 51cac3b029a5ec11ba36e8b7ad86b720da7e6546cb4ba8cad319200892ff143e9664e4a29d915a79f4a302b15078e44f0bc934715b8fcf8deaef4d7e3dde5801

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avkmgr.cat

MD5 88ae7b9879c9ac3a65ef73424600ba65
SHA1 67f74e5f569aed30bda54b5a6467d86d0110e448
SHA256 71e8546ba1c9716ffc8072f97feb945cc466d832ddbf53b090af179094d473bf
SHA512 5b87166c206dee390e81a3ad334578a9b1ca7274b677af3cfeb2c6cfe46b756a59df78b0ea5ab7c1e11d3465f5955e58bac8dd45daeda61ac683ae53388c3dc8

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avipbb.sys

MD5 c8d33c5b49a4760f2d81710eba839ba2
SHA1 8f41e4333dabe52bfd988a68785d0687599f1154
SHA256 80d9d7444623175794a51b6710f99e911943bb58a7a9621bc53d0d4bde304daa
SHA512 451dca816d38538e082c7388aac0997eb04f5e8fc288fe44aeb661ece1e717060d73f24d60c7576403a68a5fbda3f931161602a2a8b98f506b56ff64c095cd78

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avipbb.cat

MD5 209bedcc941da626c2db370a80e3513e
SHA1 c88910bf5a4b35893e60d92828568d20420a9caf
SHA256 f456a7783dfe46bb46547464579498f7b4801258424b4caa264d8c6f57c1150f
SHA512 ddef0175e3e2919c4504f99d054b314e48f4ed0ac5c1b3153e1581b3614f304fe3850a8d465163cb4c502d4b026986121d6e4e30fc421d2c583b689ec933a10f

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avgntflt.cat

MD5 3ece229fca8ecdf8e4889e062abbf95a
SHA1 47aa2952646097710297f5bded9b115e418bac00
SHA256 099e028f17154e5dafdf66a9963dbccb25442b0c570c29aeaae1e9d02539a8be
SHA512 985d4005541e25f39bc7abf80c05b97fe57220bf02bcbb7ff41f792283af5aba87d7db433217ffcea002d35dd113913bbb6e980fbf99778126f129a799b58573

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avkmgr.sys

MD5 eb5c2402e2f402a19504bf6ca9c3e06a
SHA1 63aa9690c36d743951558422d841276c25cde77d
SHA256 f8d33bbf769786163105c0fa794970054bad34cc5985416af553df1d9a64039b
SHA512 9b6b7c06e904cf36aefc17e14a108e9636c3a8920a34960dcb26fa520326c7ff47f03c24bacaec6ba91440237fb16afde0df01c299cdd7a89c40cc489a3f0151

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avkmgr.inf

MD5 176af3c43b608af665f48a35f497bae1
SHA1 e992df632b9758b3df7b4ea69c632f12a03daaf6
SHA256 f79a54cfa9f0901ff965e577cea1139583d1c73de9568170f895ac2b46c9b305
SHA512 03cec71f9ca56d99304b6dff1b90a2ca5d04bf5cf7cd0e41e1134cdb1cac50540d6e3bec18313f970420af4bf29d76653e9c5a9fa1351d1747989dfafc208493

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avkmgr.cat

MD5 f3324c2c121d360f8ce3553e221c3ce6
SHA1 85939054d39067cc7e1089de71138b4b4283f800
SHA256 901c32f032fcb4782217c4d2f3f570e932107dda74a173f1f3d8cdb993bd1007
SHA512 045db8fab56ab1c4ff0cea326cd44624c3bbab2d042b3065541707bec0021b669e6a49fcb2adf502fbea38dd4823e85fe0f2c588f93efeae4108239ae1271c78

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avipbb.sys

MD5 b49a44df6fe77ccb861985f5a5dd7ba5
SHA1 6e5163e191dd789f8cc33a531ce9ddd9bed2a842
SHA256 e442e66d3e24d54696c8687d1bd1a9ab41ed34b723d2b25af195589d11c4fcde
SHA512 d53f56966c8750edc513c86c8e9b47fa1f0445a86a1d92621f1aa5fc9b9400a4a7f65b9ae0d2e537c9dde1b23b16fbd56af8ab74d62a8a777106e9b16e58be89

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avipbb.cat

MD5 351a7acf84d15a92dc75d3fc2f504f0e
SHA1 1d316b5d3a8729c0f03a140ac55066399fbc808f
SHA256 3ad3712e2d8e420fa4ea033110e202da3b70288b4f42b4f676e12a0b72f4a632
SHA512 f705ee3bb4aa9328e808d0a8793692e1b525c0413e2005bd5f1d442be4da23e05b9549d85ccc8c1ae1f9c818a4ccc19207f0feffcd11d7b2b3039ed4e20c3b23

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avgntflt.sys

MD5 d9f90202659f8ce4d5db6e83d24b46dd
SHA1 29a7b1068a5090ee59db422364b42d2c8f072a46
SHA256 31a3f5c4b19040eb20bc15b4609068128fb6028e137e98f2b2c6c679d0311c4d
SHA512 b0a9a0c0f18446e6a2b9ad3200dbd2cb94acae5df553beb971b41220304941219d12d3e94ed91dec254e6b907dac6fcb1aa72a822a09a8e523cc76071b221c31

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avgntflt.inf

MD5 0d87b337d3a44a6b7de7bf6c4bbbabd6
SHA1 692a736647a575278c65dcde5996410071df09ba
SHA256 2d220946e718fbd41e68d9324caf2458a95beb1446e8447edaa2b99c8eb265da
SHA512 6910581b8f3b88596a5e8da43beac9ea68f6aa3644b8e634eefa8f12c3be1c243ad31eff0122904d8c61462f040667569a47c9f19950e5dac7e1a6c8f89aede2

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avgntflt.cat

MD5 f3018b52949cdcbf666ffaf6c17f985d
SHA1 9b4692f754d090cd8b2afb9c4ddce60a05aefc9e
SHA256 7f49d676b342ab08d809cac3326e8101c21fb9776d51853a9ce2fb5e8b92c245
SHA512 69b1b5c607e37d6cb0e7049fb0ce1ee79b720992a354aee73b67e9b87dc1e2c16548ae55786dbb65ec4e8bcfffd39586edc660d5b41d58d69746b8c25b627af0

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avkmgr.sys

MD5 e3ab0eeb7613ddbacc0388b96048ff5d
SHA1 f6e382597081451d6546339948edd3e854b7dfae
SHA256 5fdde96d05b4284fa7ee985a7777739c46040ad89b3b8217a729da9695e3e542
SHA512 40c0c7ac884297350a40d58a6a870796381ccb82ade22d69ca3cb9be0c3251b8768f95ab4b0f28f209ed65aed23894a7e77529316250ace7e5da8a99d0bb81a1

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avkmgr.inf

MD5 dddb1f6ae43397a15af280de3ebc3c83
SHA1 2651935088949e2dff211a7c1126a02836a9b781
SHA256 431367c384e680b0f4feafaf7529319ab2cc3cd37bccd291b46c711fa49204ff
SHA512 6b5d7715d691d18647d1cdf5e3d3bcaae84fa9614378770d544e0263261b99539977922632acbed76a520aebe045396635e45dec9defa9527500f5889d9e8069

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avkmgr.cat

MD5 a63897b79888e60e29431eb1b28844de
SHA1 86feb4a8ff0beda3b6c349fbf17c7b6a37e771db
SHA256 4f7410877d36f20a802c5db603149a33beed2d10e3e83f6c5372e52be42fdae0
SHA512 b176be196dd4967b28305a4f59325034b8ec4e7b544a2011f8b8f908a8154db8d86a3183e25b22232597024d04bc536d42556df89fea3169f0c21251da27ef9c

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avipbb.inf

MD5 34c3d7f3bd04501338c421cd9c62b993
SHA1 7feda197634072bc48e214800a3d4550cd1fa32a
SHA256 a68faf360ca9d5da989a1b6e7ff69f7aabf7b52be7819ec862a6688b841125ff
SHA512 166b4ba8653b3f932ff806e39d92a48e2e2ef7c87f82fc0560add528bf5dab34e0937253c8c5778dcd31f9a925448414066c623d976fbce21893bed08c7ead70

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avipbb.cat

MD5 8e59d322b492d531124a0a51a5eeaae9
SHA1 c58672a169f96336e12c0367bd5afa5906bda93f
SHA256 4efdc56d06e5a17315784d3e700e359fd3ce701edceb6d3370de64d1617d42be
SHA512 2ff077f6115c6c4b87b11c78b7fb48ecc0f800f2b8a89ce16d709b802ced671f175c80746aa89f745de6f33d1f894991335de39214909ac0a084e709529a2548

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avgntflt.sys

MD5 f16335a9102ffc99a8c8e07e1b2d57d4
SHA1 32ddb4251591e40db352661be4721c5c6402b90a
SHA256 33c6b1d49ab13d6ae9f22e05d77b70123de63c802363da0daf1be958b7d3d532
SHA512 57746307cab7e82e9e7ef5f033628810997954a40cf57f34650cbc9ac77fc2fa3465f1206f87e0082edc4121114dd71f2f816a628872fde26136012766a5cc52

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avgntflt.cat

MD5 49500efd1756f4b3934e8df70bf12d97
SHA1 7ee81eb8aa3e448fd7d9cd4559b9077d55b2afb1
SHA256 853c6ba3a145bdd47656b525985632ad46e1d2e8ad127449d59e2bf62bfd5d8f
SHA512 58b72baaffca047306915e09e9903b7fe6a6d9943e1d44644ad8ed2b3a31b371dd1ba2730789b75649bcc38df0782e8e6aad04f8f8b88eb800c333624aeea1a5

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avkmgr.sys

MD5 20894c53c0b9db8f86993d9ecb78f9d5
SHA1 7c18c5b571c906535d393a5165379f6316143107
SHA256 d5e35a021e2a8e676b9034a2c712907f170d3f5b7315d516f317f51cd03ddd06
SHA512 7fbd637c64a3ed5ce202864197ee26e0d97f84be8bb0bfd5bdbfcf500f370764545489de8d83c347e5f15a414bf5d614377a60983803924935453266f8af5d24

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avkmgr.inf

MD5 e92853f21048c93a182a140e667983e9
SHA1 4265adb15d2f6ed70b7521d3887bd2304528ebef
SHA256 9fedd6e956b7cd59180920ba7a6c94d0c0fa1dee867ed6087ba753ca47d21a37
SHA512 11617cc1fd33066ba4e54be9a174b7b4a610de66712299dbcd379d0f5b2cc4bcb1590c1719867129cac962619d0e04b25a177139a4c6f5b041c9c8711fc1b419

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avkmgr.cat

MD5 8dbe5877f742d7d8fb652c84f76fab5b
SHA1 126f9190ef1822764e8d7d16bc14c4f03d0fffa9
SHA256 40b23a7d83bd3595a714918778249b6f999c8b016aee814207c893c8aa791e9f
SHA512 70fc63d4a4b101829a0e32135562cceb9ddebb36f907c96f01639b29248d4417af98dfa5ec8143e55db4e19c159c4a08a176bbcf2ff17a3ffe4627e7550fccf1

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avipbb.sys

MD5 a17862525867081a577923e210604a64
SHA1 9b6f498bbda86fc464d6e5094bc8529ecd3e7579
SHA256 2bf4e12f41f8d78737592b7f29b55206b2df15411cc2943e678f52096289d06f
SHA512 e33c701cad149844913e5853187e4bbf43f6bc230fccaec21c847b373da7299849f2f3d93e6a07dc2c3c774f5119a31f0f44ed77821cc1e8dda93661e620b2ca

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avipbb.inf

MD5 1b439a706d228a6dc534a3a8731c1afd
SHA1 49e34aee2faa0cbaa9bfd004eefe3150e64451b0
SHA256 4ae6e2a7c2e11bf797ba3b4877fb4ddf2ca75c6f774d4dfd4b002a307b7f938a
SHA512 d2cf3f4c289434654d7103f0517dc99bcf98f8db01e34af25c07015fe90ca88866bc0de8d6a1983406bb2f2ad85c179a47bc9095ce650a1ee0cedf23d2a8c3f0

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avipbb.cat

MD5 116668cc50e8f234ba729a8d8895b1e3
SHA1 cb987ae4def6e022dc5e62cbf8a76e374bf9404c
SHA256 d50ffe995b3ad0b44dcc30976cb047ef690646872fa9dbc3c48950cd8593e918
SHA512 3c5d04ddfb87c0fc611f6eb7b281d7a67584f9b2a4713f3f14aa1f709cceace3898fc00e4a90bc9caf59cd11e006f917536e602f21b2ac610a0245af4f3bbf5b

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avgntflt.sys

MD5 6b60c0a7fdbabe955a183ae3b524d543
SHA1 be68e043fb0f6e0ca745b8361924ad0869bf2bb9
SHA256 33d6cc050cefb737b70431c7e493a0d7b7f5ae7546d36fd24a5d4b1ebf29d307
SHA512 040ecbb33bbba5bba6206cee7717cff01fc8d3436762a4f2af6647cd9f02b31d48538ebc0d91b627fd0f9324375544905c2e09e4040c55b3642480e683f73df9

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avgntflt.inf

MD5 139c7c318ef6d64fc6c7ecdf1f7422da
SHA1 7fc18f8244ee8c795f0da452fbb1f9bb628f9e2c
SHA256 88f7e8d81340ab33fc71702c2817427e7b26ee31a76d59f167a00f2af2c783f0
SHA512 504b7e7917f15e93bcdcdbd7189c8b29bc27487d2c61bf3d78f9edc4f361dc0136621b55f0e1b0bf7a69c8cee668f520b72d6f45197ab58f62b5b36371c7fd27

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avgntflt.cat

MD5 622330091b3d75e6e562c37582ac8b2b
SHA1 6915486dbaf7cbd2846e63a6d1e12bff67c56922
SHA256 736c72051ea40058e98362f29a7a9a5ad73032bbbf8bda53ea897f64c5bc7de8
SHA512 5f93f6a59d798bd25aab1fe9a75f6cb13210f07bb49b340861993deaea4206fec9fadbfad6cba0c000fa6709a2e6ec6de48cbb014232f7352d272586a414ce28

C:\Program Files (x86)\TotalAV\SAVAPI\cacert.crt

MD5 9956b172b62aeb41ca988999947a488e
SHA1 199e3607abeafd168b02b062697656a847fe4de7
SHA256 c38123acd05cd0cfe4375417f766a9a465327117f5025b16e4403cfd2e07f045
SHA512 5d365e0b88a15b43bf84650f0e98bb05fd6e0257cbd73b2227bc27b94cad3086df2a65fa227ddfdf484447d91297c48800a1ed111a6bc880da53195b8657f189

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate_msg.avr

MD5 7ff9f5f6a65afe7c10b5de77f4986042
SHA1 d19c140cade5ddf6d1f588f453fccad44525030b
SHA256 056ec25ad90c88a86b85a9c72246b0d4003be39ef954a6bcb1baa92e63ed6101
SHA512 3271017bbf7afa11cb6804c5578d8fbc4410f01fb544074302cc491f357dbf1e52f8ab9d58648443f5e5f3fb64adb8dda96fe08d94ca2525465844864cf2ca98

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate.exe

MD5 e0947f2084e589a4d7f1c0f541b54321
SHA1 3ca9be3bc2678b85e36b9823a617376a268ab889
SHA256 afb45b8ae7d78085d95122ae01f6bac1515a89e7e2c87c55596670e2b5e922e1
SHA512 316a214436031a498de8b2b6ca33cb9f73cacc3ee19f22f86d90583f817e35f0b93bd44e3af8e47baf1c7e44fc66b9c2031995cc4ce69a1bdbe980de93e5938f

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-xvdfmerge-product.conf

MD5 c7e74ddde5788f5e9510034b66ff0fbd
SHA1 8b821abbe25c98877836a4a76446bb98871a9aa0
SHA256 1ccfc728f83e1709ae01936e369610e6f9bf7d83e9b406af995cab5fa1863d4e
SHA512 7657ee00f0e8b5365b02d12393aa64e5862dc87e5ef5390824d536d72845b2e9e46a25ca0676f49e6d4cfcd7ee164e80832696a369e82d464d938139e8d745a4

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapilib-product.conf

MD5 d8e715e99b1709e69303f9d9dfd0ba88
SHA1 68964f716482230d2b3d28677257f8742235e6ea
SHA256 f6c89a441e41a381ccb1785d97d9aeac95d6d01f13227431baa6a4c06b4f78e8
SHA512 3fce72763e81318f31bfb684fea8f189dc85fe3798d14978a3d589a649107e9a7ad61c0ea1f4f0ff2c50b8663fad3ec6870d9c595d7e66f8c0c11e3de42e5264

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapilib-engine.conf

MD5 c0b5b102ad8dcb4190e4acd1e4c78d99
SHA1 6364654bbe47f784d84eb8387fe14d0a7c267a78
SHA256 ea5ade6e1bc0df9e2773dcaf5cf9bb087965dba3c74a12eeb9727747cffbb614
SHA512 76264a03d43d507574582aa6954d50ab3e0954153489abb4c311989226e9e951bb4de188cff8d92c4d48c96470d58d4d7bfc094a6a74c050ee8ef25a61395250

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapi-product.conf

MD5 c94d4130ad378ddbc7e341937cf10692
SHA1 81a7fc4c1ebaf2c19a590c43d60d4b9f3650edbc
SHA256 30ef0c181ee31e52efe06d44f5d33e5a868160e6f93f573f38aac4b05f681af0
SHA512 59ac58e5ee40213cdbe8de93baa96db946fbd1e1c7b946ba31a61e4550e4bab29286811310fb966bb9725ffdd5f4b750b09a188193bd3bd5111eef5c882e2e49

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapi-engine.conf

MD5 01a844c7204488b536c48a72090f8a39
SHA1 417b1670c72d9c0c70953e88fcf2ba8bc82c245e
SHA256 cfd50eeea0c80b8dde883951aa6149410ccbb6a08fb001cee109c276648feb1f
SHA512 2aa341bbd42ad658bc4db5d5521dd1c5a882796b3bc745be89607ccbadc084bd790f92197e0881f4d45a13cee74fdd8c73b47e7cb86c2bf81598251c40591acf

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-on-access-savapilib-product.conf

MD5 c0d7ca0f42b0eb707f0ff09a1144d837
SHA1 1c5d84bcf2bfd97a51b156b04fde285a8fddd35f
SHA256 e5e0ae1892dcae23e6b2b914234cc2111efd1ad746887c61266618ce5ec5852c
SHA512 a4582b9ad7ae3bd795c271201850aa2ef5163b605f227fa4da06d6fd9d23144d811d16904257188832a2eeddb63692a12ed649ae4244eb3138b0a972e7686b19

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-apchash-product.conf

MD5 4257d3de2badf1811f90e8312bc74aee
SHA1 85a5ddcd2282e8049bc5432932baf418bc02ebca
SHA256 e2cbcd600dce59af50b624e2079f4b92186dd0536f5ffbc2b859c5c440657e05
SHA512 962cc45ff9aa7fe1bb8902bc195318408a7dc2728c7e89c5ceba3eaa7385d19eba52090a2f4e69bd25bb2a0a9f4500988f190e71fff84b9c9df6c8bb2052c4aa

C:\Program Files (x86)\TotalAV\SAVAPI\apc_random_id_generator.exe

MD5 be6f0a323777bc43bce01fdc5ad58120
SHA1 a6c1742269fb7879dcb54dfd25af57dba66ab732
SHA256 1239ea35953b0fe8677bee09dedb7c3eea987e977c73e73ef8862c4a3774b659
SHA512 921b11869d1ec2b5a19ef41b75504ac099429339a143cfa677fc54eb520a2b79b173e2e326afcaeceeab4f6b942098dd9a660b7c9dc3addc8b9ea53a3cac4548

C:\Program Files (x86)\TotalAV\SAVAPI\apchash.dll

MD5 a0c5e8f7cd6c02a8719ade39c1955135
SHA1 52153097ff4d14c89374ed9d144178ec104795ae
SHA256 fb74e48074ba4d26049250bc68281751f9fb9a6c41c401e19f6870ebcfdf6a7a
SHA512 30901a8332e09311bee3c244226d533840f277f47170fa85a7f2e06e3c1bae18a95db82b45ab1f31062be6f7c5dc6918bfe088f3088cfdce8ecb52df863da3b9

C:\Program Files (x86)\TotalAV\SAVAPI\apcfile.dll

MD5 ecf74de0b990c96fcf961e89cf73768c
SHA1 5ba320e5e1e4364cec95b130bebff52f3591c039
SHA256 7f6c31ea445c7b871a0ea2b73705776435b00f3e37223b53b5da9b4ad4d19c0c
SHA512 8ab9b876db9edaee8862fe3cd0cde688158a487cf00f12ac85983c8fbe93a6f116f5d4ce96bf717ce64f4a231aee618b8b023c735ac1783249beaae95a3030bf

C:\Program Files (x86)\TotalAV\SAVAPI\ams_setup.exe

MD5 30ad65d8805ff9356ac7e75e67585f01
SHA1 7711885c3bcebe0bae7c5d33979eb52cbecb8f26
SHA256 168c506b14418d3c64435d1e165e2b686b8c2273023d9f45848cee5a1355d27b
SHA512 d45eee2a5ab487d4d614da497b4ebcbe34f93828a294dcee9db5f0e4eadebcfe3408f30956b15a5352c465c956adf68d89c97a2a6609b15c7c5c43408949aa15

C:\Program Files (x86)\TotalAV\SAVAPI\aevdf.dll

MD5 1f2846f66f454dcd075690914c58d97c
SHA1 f6e6c89c11aaffaffaf98791c1faafd00e5d8aec
SHA256 3acf87d057b627745f588315c528ca19699bc6e5999fb785160a432c7d42b182
SHA512 20f555510d45aa62b0256f8898a360ef47f58a37faecfd014e34a0fdfe9f59178ad23532fd37c04edcad63b725571fdbd765ea5f30202b0525f6979d509e28ea

C:\Program Files (x86)\TotalAV\SAVAPI\aevdf.dat

MD5 7ad1fc9922e67652c346113289a557f3
SHA1 9b7dcf5873d40fb45e2016051329cff4d628c336
SHA256 1fa5d91c9a58fa3f9d3761ace1a8f3bd97fe6e903eaa6540cee0c75f89c681d1
SHA512 c042d79fa0fffc8a173868f411242868b3a1b5d495dbaa0c70beca65f03b6a988d1dffa1e823ad3c126a5dde2592770e73029a184797fb7ab627e0564b34b5fa

C:\Program Files (x86)\TotalAV\SAVAPI\aeset.dat

MD5 b78db48c5ff9494327032a27d5aa33cc
SHA1 43ffc51ef1da90ec791a95ab6d20e3cae7a66482
SHA256 1d06844d6c0aae9b0a5f6f7f61b4c7c6284fb085b7f878d596ee8407c67b7357
SHA512 855622613a0310cceb1b885f11d22876b1b6092fbdfa7ec19618d8ae71b2ad70ca75bfc44ea0e4069b38d9785c400025a8f6a4bedca539546eb10cbce078a051

C:\Program Files (x86)\TotalAV\SAVAPI\aescript.dll

MD5 11197cd2373a7b8364d9bb97406fa2b0
SHA1 05b81929d797330803febd8231907b54462706f1
SHA256 8371b7ea7e0e0650a4aca997d270b68543d61ef873190d02db37d7c3349b5942
SHA512 dff359f3330cceb1bbae2cb26748244509870f9f6f1307b4010e4a449cb50b87d4395fbc38e7b1a0fedfe16eb7b01b4cacac7631f606ec1467555ca5099138c9

C:\Program Files (x86)\TotalAV\SAVAPI\aescn.dll

MD5 045180fa8eaf0c2409e101542014b5b8
SHA1 70656f926020e02e7c67fd2d145ca90b5952a9d5
SHA256 b816a2810fc9c1a5294a59b0232a1725519a2a7472f509c336b9fd1b189d0f3d
SHA512 5659f42a6fe5cf259ad9528777ab5883f0185437b60710727c097cad2ceb60ac09eae4af59857c0021fc573343704ec6318cfc6d78ee2a1d7facc7321f4ae767

C:\Program Files (x86)\TotalAV\SAVAPI\aesbx.dll

MD5 63159174de5eff0c3ed33f887c00e1b4
SHA1 aa787a058920e7010269d1286f32bda62206949a
SHA256 a03aa3e017606dce6f2cd19536db9306a6ebf2eaefb224be735569599a39330d
SHA512 398831b8cfebe1a7878658087594dcdd74f6be8d380bcacd415acd5bbed85e6bd939c1562b3cee4e8ecbe64b0704be1cdab2dcc9c7ae6a0dfa0e8b8d0317f884

C:\Program Files (x86)\TotalAV\SAVAPI\aerdl.dll

MD5 62f7467baebb56a8beea7fffa6c4ee7c
SHA1 c13eb821d2675f110b1a38f8c0842b91edcab9b4
SHA256 d049ab67daae27ab3840730cadc5a82dfbd269b58896b9f8289324816e1680eb
SHA512 d31498bdee77fd498226d6c971dff65eeecec66811109f1a729858fee6aa92f6d1601256740417ba5abb72b4c7109eb3e69ecc7446093bebee62c559d4e7a61a

C:\Program Files (x86)\TotalAV\SAVAPI\aepack.dll

MD5 26ab6a0a9b1c59a01f9b45bbc0bbc65d
SHA1 ef282c4322c361aaac6d70d0e27d4b2292de4999
SHA256 fff47393adf070bc04d044c0a939c620234881e1ad69d3776146e32d25e1f36d
SHA512 f17aca43e9f66ae21d295af5fbca5de0770ef77eb602f74ac6696aa9cf9af9884df21f9c9a98a6aa5d9ba5bbb3f9951c952d608dc3863e6a8a6a6c053639f26a

C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice_mv.dat

MD5 e346fe238be4b645e20e1bd77e9167bf
SHA1 252c2614387aef2304f85cebabcb89b7e5f04c96
SHA256 adac5f741e5ee6f669b76bca87a26bdafa9be60d8ac7e7c5059af9ccce919608
SHA512 29965365aa6a5dae7bdcda0f437202d5a2874d60d3d59895871d05b4ca3bbea539fd04ae1895a0f6c77992ae2b7a39dd74837a1a6a72f15e92129517ff6375c9

C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice_gwf.dat

MD5 0c95def0894c5e5716cf7a3ecc7545a6
SHA1 51ce428514d454e7a428d57e3e050c1edad93a20
SHA256 96e2488023689abf71cf9b951548420ff3ad9d6ff37116d4279a43b5b736968b
SHA512 2884dfc79a869b3e2db3f62340dccd3cee7746852006f67a26a26a4716ec719ba196627b18ddd775655b7baf954f668e9b5229297a4b87685f087e693184b369

C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice.dll

MD5 3dbd9c8da952507d0df2b46308fe83a2
SHA1 0d38ee68466f818e880680b73f5f74ca300ae629
SHA256 4a3c2f29b2ab5e78e5a1558d2ddbc564cbd4474ce4115001ba6662c143b6482a
SHA512 1e6b65fa80d95d1cb1da72b7905105f4b4fa6ee7c1fd63fdd7728a030ff42b9177e2eb0fbca1e64f44a11a253defd7bd179bc8c596fc565f3972ad89cf5c9616

C:\Program Files (x86)\TotalAV\SAVAPI\aemobile.dll

MD5 b132b36c0b53839ee1c0fc8198170157
SHA1 3e7394ee8d3c4c0f36e00466fe0191ede592c01b
SHA256 3137d3d95d1caa59d349645ab8087d6b0c7cc3321873789c738553d4471143c6
SHA512 1bba22a77ceaa59c00cf0d10a7afced2161985d8baae94c9cfe0cd5171464f49c53113b4ba8a027cb727aa242a23f79c1cf19a4df821ef6ac00f7a7c2ecd155e

C:\Program Files (x86)\TotalAV\SAVAPI\aeml.dll

MD5 0de0cb670e3046e388829fdab6910a9c
SHA1 2b9daea0200fd1c442c9a3a967bf51d68f7ab80d
SHA256 537b3ea2ce48dc0cc343c1c6ce79ae5ba527b2fcddea24cadef1fc1eca8c42cc
SHA512 7e7ab02d20c3a1b8f76ce8c951570be1e719e0533ffc14970c958240a6adbe1c8ab88c826ef21083db0c74c6f83a1c9262ec6b2371b72d357bf6d5a298ba6f33

C:\Program Files (x86)\TotalAV\SAVAPI\aelidb.dat

MD5 e12b4507919ef2d5b5f2b5332f7c2bb1
SHA1 4dd0c1870754a4052f9de5f09f69df3f7bae4b3d
SHA256 ca5bb2f6c93eccc1ef5a2b2aae25b4976a2ce320a52d13d74f12b65205678e53
SHA512 74a2e05077726ab00a810325d6be729c001f290977c9e4e3d81d3f4fe4398317698510a0bf5d5014625e5c740f11dc10cf004cac343cd1e4d8ab82908a0376ad

C:\Program Files (x86)\TotalAV\SAVAPI\aelibinf_db.dat

MD5 ddc132992273330ec506e63fae4985b4
SHA1 7bf3018217f136662c159994f6530edf4c976a10
SHA256 0544403357dbff7551fc17f348a446d556a094d6c42e1121eb337de3ff88ca5c
SHA512 fd1233c02cfd72116b92833810db084c1caa08530cdc0626a1e2fe035236b29348fdb4d89192aa473dec5ece5694017f3a3a46eda7f87c20a89cd07132f4d122

C:\Program Files (x86)\TotalAV\SAVAPI\aelibinf.dll

MD5 21432626c63068ee47107da801c05ffc
SHA1 1b011f00a0a01bf217c41a0f5cb7d8c0f6b7046b
SHA256 812442ad5cdaeb6dd5dff76ddc3941fb9a1a56f999aa836f8fcbf4bb9e1b488f
SHA512 1c6e973be37fbcfd2b945fbbde57afd37525aafd475b4229db8296ce48cbcffb2a092fb1d226b6f655a491535f7f2bff5139522daff92bf002304545fbeb596c

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_mv.dat

MD5 9c93a76d871b55028d607207a90b39ff
SHA1 c3b33d3622dbc1d02d0ae0beaf2cef9db56962aa
SHA256 9ddc8bd72905ab30861d3ae37af5292b6162f63e6446c15a1ccee3f8aeb67910
SHA512 7f9529bc2ae489a1a2bf92f54055543c933dd39359bc7a77ec19c9bf30272947e10d785c4f3baa3deee2654d5c23cd1154856b8e54031bc8c4ee985f4ee88a4a

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_gwf.dat

MD5 27dbb4a716dc8d87eac34a14f814dbc8
SHA1 2f3c673d444a0b996d609136d8741f6dfc47ba6a
SHA256 b90baa70bd07bc5b3573909b37a6cf4fcccc3d7c9702806c94bd843988d0ed5d
SHA512 dcfba0317f02771d40fa190e78c19fa2e178d0ffadd6b8d22da4be7f66a3e7983da2a0c14741ab9df0d9f034754c4ea758d758ec7a65c53f77f922d13648e9a5

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_agen.dat

MD5 159a422ec89a6699396140a500ddbfb8
SHA1 8bcc5d5ae855bb7e36412a6b2d9a8bbfa37f56a3
SHA256 ee8a06d4af03049c6699a37a24233f37eb08dd2720f57848e665ed6d1cc7eb78
SHA512 db67a5792624b632c8cb3ab4bef963817faaa62dfa29f2da71b034a90e766c5d569b4c6ca2c04d85368674373fc72e60d4fc53711438923690a1ca0dfb4bb404

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur.dll

MD5 d3f86394440e679a8be729c2af168169
SHA1 3c50ae00ca1c65b71f6f01c18a1507c03207df5a
SHA256 23bfdb21548d8b0da6b1d63167c44207a3fe7f613bf36406168c667bb7d0a4f5
SHA512 40abd780623276742f4ff5e89135e1223e3f7226cfb8af66f87646bcbb46c46e23eebe1a4bf3e4e0603622fb803d91d4c7f25c31283cddacc9037335a436c936

C:\Program Files (x86)\TotalAV\SAVAPI\aehelp.dll

MD5 c56e6711d0c6dbb6bd7bafbde06e9c90
SHA1 872c3d8d2a54ac10c22861052498c2ef954f8004
SHA256 2c0b8af1ed85fa5ff16f87f3c58beee9fc0230594dd062913ec5ce87abacba4a
SHA512 611892b7b5a4a51fca74ee0d4d2dfa6a02ec22eda0fb9c24ff51a7f33a695a2aef3bb222763cd7ac5d0d6d5529634493fd2abd0a2c38fbbef34358700d65cb8b

C:\Program Files (x86)\TotalAV\SAVAPI\aegen.dll

MD5 163ea96ca0a9b9f7469dd128fe5bce04
SHA1 60f4a01001fe4ad3b2aea24ce0b535a7d863f333
SHA256 519de6c5006127a5f4174c6f6a13d87cf30a2e866bc1eb95545d67a2ec0292f2
SHA512 b088619bcb30e2f91c5ab4c6a2777a0b163e60f33ec6475a2b00d1c711f6fa86f621f8475026adf71adf3ca863911686e03cf98bf913412ac5f8e4b269fffbc1

C:\Program Files (x86)\TotalAV\SAVAPI\aeexp_gwf.dat

MD5 d68dbed2d9e81bb670e94b0b550cccdf
SHA1 edebaf42b7b772274ffbdf070d965aa585cb14f4
SHA256 2d7925f16b1b835b7265d1c04c38c599f2b25c5087a0005dec60dcd22e9f3dd7
SHA512 162c6078492870fb1712968e5cf81e99b0e16dc2c737eb56f5dac1e17a66457382d555faf2ae9096b5e0103cf79e79c629007ca2ccb80d422e424fefe3a6c734

C:\Program Files (x86)\TotalAV\SAVAPI\aeexp.dll

MD5 faee506a935d68524834d090cb0fc16e
SHA1 f3927c0170f15c1ad895f57aab48167781c51eff
SHA256 911d01f963ab2236e7bc977f96e84f292bef07f48f40f8927115e2b056992aa8
SHA512 5b15442e84e828425832659124398cb867a3cd70f48e85c2ae6eb2261d9f83101e148264349f05b86fc8b034af6ab5dce0579c106e0bed95a8aa656839903a53

C:\Program Files (x86)\TotalAV\SAVAPI\aeemu.dll

MD5 02940a21ab69d26893bc00c064be569e
SHA1 e6eb2ba77bfa72fda91ba46924a18b8ad726f7b5
SHA256 9c9e782ac4490372119a95cac641970d805679a8aeef2ad59ee28c1a942cf5ac
SHA512 fac2069467c574b856fdb4597fb973b9a4f3fef5288b0ed0bda72136f48ffce58063ea5b251ae01216f744ec17d2c824f07593f8de885bdad123f5867510b21b

C:\Program Files (x86)\TotalAV\SAVAPI\aedroid_gwf.dat

MD5 961a1c1e0dfb8b54019c9ccec510b3ad
SHA1 ced9c7e98809bb7506a17644144efcbf50bfd10a
SHA256 50a9af9ac743d6a7f2741a3ab39717c8c7e618630b7688dab60b57b97f840b9d
SHA512 fca12aea31d0cb3b71b73456606b91d97f6bd3366591b65191ce6edda8b6ca8d53e07da4a5a95d9242a43b2c20842dfc1f9b39bb4ddc47058afd86530bb2afe4

C:\Program Files (x86)\TotalAV\SAVAPI\aedroid.dll

MD5 8facd0e1b34b24d3b7adb3b9be3375dd
SHA1 f7ac09b72c91a8c54e266b7f6b68b2e40366d026
SHA256 12bfedbe10041d39020e9a15c4cc3d4b557a7d4fffe40cf2d75caecf5f1ed1ab
SHA512 55fba8645835c69fe6e93da395de726bbcc0b3dd0049b5e4673f811cb92bc911a8bf1f6706a0922548635aa81d8aef95c3779cf827e52e70f851fa0be6a0c502

C:\Program Files (x86)\TotalAV\SAVAPI\aecrypto.dll

MD5 e824d826c0ebb30047aaa308fe03b6c9
SHA1 1778f29052920ddc7ef192761123013cb7f648d2
SHA256 8cb77f5fccdae7f9661b81454437928fa697a8d2c2cef8f61a3772cc766d6d10
SHA512 774111704c1d7680bce109e7fe5b2f91f415e5ff62432f8e52ba6c2a2b8986aa17c8487e0f0562818fe8d0f12af76d29965fc24a1f612eb71f149ecf60f0537a

C:\Program Files (x86)\TotalAV\SAVAPI\aecore.dll

MD5 2a4261a7dde3fdfd43793ca431890f84
SHA1 8be893f9fd941dc0971498587f52228e2e9d69b0
SHA256 1eff4b5bafa7a567f756a85297733802215bd9135e627e0cc6255c65dc87ca22
SHA512 e0e584174d61387e88adb6e5a618461a71039de773666f557fd19ad4c6300d8b9bfce505b032efcfdf443ded1e97678c2e504b4e893209ffb246add683b26abf

C:\Program Files (x86)\TotalAV\SAVAPI\aebb.dll

MD5 2af40e6f90240525f8cd27961b53f2db
SHA1 5eab9dc2edef6140df6842811da9e8ae9a27cbd9
SHA256 cd6fcce8f0a2e4f832894abe41f2c4e7c0ab97b4a46eb478d085ffbb9ca36b5b
SHA512 ba80cf1f33e14d5dd3a3f96196e265d33920ac4fcc23dd3da61e192233401aad522fceea4a295628f03345ec3e43ae16542b0adcf8adcf0ee93a3f2114c2bccf

memory/10124-25055-0x0000000009E50000-0x0000000009E60000-memory.dmp

C:\Program Files\Avast Software\Cleanup\Setup\config.def

MD5 dd6b352b6affe3e8437c6844d101d37d
SHA1 75d7976dbff69a1840be9996d4d2823172042c5e
SHA256 0c315e5e923b59017fcd1763dd67a9dc3ee52bb122ff90862c0a38c9b10df4bf
SHA512 f69e43627aa5ddd68fd482ac5c2f108c8f6092916951b7361f5c9afc459cb74eeb1cd49383bcea8ba4b6ce52f714b893ffbf7001947964ec9d61d2571b995d7e

C:\Program Files\Avast Software\Cleanup\Setup\config.ini

MD5 59021c29614d1c1c4f4f79d2d0b8dae2
SHA1 00928c52bfc44b86dedcaa3df1a4d4f6160df679
SHA256 67ae0ded8522689db9b81236bdd201aaaf5e12d33f15fa39b20578bf9cf16d13
SHA512 eb2f3cbbaf741b4149d26f301b8dc29682d2d6c98be4fd2165faf22c100a30aa56da5cc165aadc9c3aa1d1faa03d8ceb6311f3144e2533e2db03462d6dde9f58

C:\Program Files\Avast Software\Cleanup\Setup\setup.ini

MD5 5803d70b5405846ac8a7ed49c77a42c0
SHA1 95ede9e729ff290dee613a396157cf5947925f8b
SHA256 fadd1ce29ceaef849b57d7ceaa46fc588734fdae4eaf4899b60734b907b96797
SHA512 0f1f29623c577710ead11ba5d578c0dd9995647757cdf1b1d40e0142f2cbc8b5063a226275b8d4adb3914a5fc2e2027216e9fedb106f00f0ccadc3187dc38243

C:\Program Files\Avast Software\Cleanup\Setup\config.ini

MD5 44661647901d26b1893ee6d84c8bb012
SHA1 20c2b2b3ed9b2491de2866924b48b9b3568fd9bd
SHA256 fd0dd8ebae74e6b1ac3eea2e1e465c6c2994cfc6d8eb871dc2a086a0d5cf0b75
SHA512 85ea1dc3a228baf726065d377da1281959b6e4e280c0d67dc380c636ad66d9d09ac8bec496d191577ec9316b062244317c68ec48bd2afe450958665f98d9552f

C:\Program Files\Avast Software\Driver Updater\Setup\config.def

MD5 4c2fbe0172fe5d60f135ae22bbe89aee
SHA1 809e5c5799153c267daeedcd743af0396532b963
SHA256 87a6382d604e7f414f5a8b2815922a3ff283b0ce0190241ef08bc0b82daed278
SHA512 a0e7f8d44412220c3cd247355b4fe55f7930d72859f83ee037e2663c03918a32e5f67248d65796da21e98783d7fb4cf9fe933273a1f41a5b26822f6dbbc7c5cf

C:\Program Files\Avast Software\Driver Updater\Setup\config.ini

MD5 6beabb92b7dc75e708f4e46ff3886163
SHA1 21b5525c3369208176c21b1c9e6eab9e1321f68c
SHA256 cec195eafde53ff01bb09b6f1b9249aa8cd1013263a62390176fc9fff2a19236
SHA512 ff46fdbf2b1cab54ce1f0dc6c73e81251afba6ee2012ffac709ce5219ff608f9440ec2fa6e834155dd667d873d0ec26b24613c8abcea887751b1ae03dc74fc88

C:\Program Files\Avast Software\Driver Updater\Setup\config.ini

MD5 4b944c87b4260b080a620d358f02380f
SHA1 69be391fe54d57f928be5a3f6a95e5921898b030
SHA256 59c404f106d436e83a58e5dc1bb82fc0fff1eb21de76d7b9dce9155657b87f19
SHA512 7110b3071c8ee51f26c688ddf226372a7c8d194e545fe0c8403f71689c04815e9bf130f03321d7f7e0acfb3b96bece58b57e2301cc104caf509b36da17f1fcaa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d116438c9c01eda050e5a46277b4506e
SHA1 3e6fa675a6cc6dd60c285406281c092dbd99bb1b
SHA256 f3bdad6d6004de7dbec85892ffe140a496744b423f4d46215fc46790176b9ac8
SHA512 ff85aa909eeb01aea40656b91335df31c6087d2abdc544c731f33bbfdf4dd9a083aa89f6c037939af736f3538421e69d9875cd9bfa69c73557b37d7d850c8763

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 14014ba31d2d5603640aa99b9d481bc5
SHA1 1add081fc7b7cdab70cff1f6073b651f4e1f999e
SHA256 6354bce50829da446dd77758f30c99365a08b556fe7f6a5952fb3e8273d1fc83
SHA512 c4be4df51ddb560a67ab1d812aa7a6a05a4a206a2d9d87820795b5691bdf50f807c666c216f36744e7cbcec245e8f021b9d46490c6151aed9a6b5a343cd638a8

C:\ProgramData\TotalAV\data\sdet.jdat

MD5 ff69990561b36e46ed84bc38a7b8d34f
SHA1 8ed13a9a731c06d7a0ccf73c74998b5379e6fb69
SHA256 c61acf118c9cbaec6fddec4ee461f580321c63ce7dab47f469e6cebf85c14eeb
SHA512 41b190bbfe067fac308a4653d5180505b8493d886c884fee71731853e7e78308aa32f62df00dea625e7ad046a56e45f459e15fcdd150b5ca8ba169d5a913b1cc

C:\ProgramData\TotalAV\data\details.jdat

MD5 72e5e8a1c9462ad67e15a78833d1c7f7
SHA1 4676853f8f99bb42d171a1d99aa8522718b771ba
SHA256 2ab298e3dadecc5a36beffede38e4885c58854ad311f2a6bc9e32261f393eaf3
SHA512 dcb11754a2280bac30fe1482e20a8d1b8c9d0afd1ed9f57185b21f77442c9acd6c2167fceb02bb0b48d084993112472381699ed71021873ab7dac2e7ca2aec9c

C:\ProgramData\TotalAV\data\account.jdat

MD5 387c1f37f3acd462dc189d3fb5c04a5f
SHA1 2671c5f1aaefa94c10f952264713ddd946e4adb8
SHA256 62d3eff71fd440a1d6007e6ced8fc66e2c4ccb46bb406ccf72060ccd3faed1fb
SHA512 2beca527673e44ac634f456e7ce32519844362b0a3c99d0f4293598654dab30de59241648168eac953a7b5a0e1be48ceb4fdbc2b36591810425719452fcb0150

C:\ProgramData\TotalAV\data\sdet.jdat

MD5 efc9f502b883a89ef623477a500cabcc
SHA1 aecd27faa4a49c72c70e3101d8a618bfdb3adc65
SHA256 72a32200d35fb56d1a74425ab9a5b7bb08a084837552b9b6d7bf9f577599bd43
SHA512 a414221a58499954e1097733515c00e15d9c6d99e2b048a7cb144c8730c90d1c0f3326fc30920c5212e7c90de443fcf7369ae053106b7c993b25f73ddb2b1173

C:\ProgramData\TotalAV\data\vpn_regions.jdat

MD5 f88ece8b24e844b64c6f86ddb9c78d02
SHA1 830e13dfdcba770f563b7b21e022459efde61975
SHA256 8468d4df42c9f3e8ec441e4c22f6b7ca9032a984a964ad83a491e9cf93671764
SHA512 7ccc703c668b76eedd1c1fd009b160c553cb625f7d7713c32a0b6f5dba7b3fbb69de621fef7d2efdcbabe133cbd27e8dd5146fa6365cffe7f069b715fa9343ea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e99c41834640931da8b6c3ebdef7e65a
SHA1 aa7fc96d8d074f3f66fc307ddcb6416ce1c19443
SHA256 471173d009a46b21455c2fe348f6aae00b645b80f4614d9ddd37b401e02561d9
SHA512 e4c1770d5501a4979ecd04768b6ca5ca7b4bfde118da17d063a8a36494226e6c2e459c6747a92785a7afb12ae9e2c32c332bd586dcde86925c4c2cfa468eb856

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d67ab8d97a3f50e816fd2e4e5122971a
SHA1 e311350d399cc2456610ad327f1ac79d7f516411
SHA256 0bdc2750d80ae89b706a4dd73e16d4d7bb067674766f1888a51a23b0d3b3ec51
SHA512 a2701648c33cfa71bf750dc642c0ea5d5468bec68284cabb2bacea3b2ed468dc2e011ddc3467a55be579ac8dc10632d7acc5855811a1defa74dc02984cfa9359

C:\Users\Admin\Downloads\Unconfirmed 514983.crdownload

MD5 fe537a3346590c04d81d357e3c4be6e8
SHA1 b1285f1d8618292e17e490857d1bdf0a79104837
SHA256 bbc572cced7c94d63a7208f4aba4ed20d1350bef153b099035a86c95c8d96d4a
SHA512 50a5c1ad99ee9f3a540cb30e87ebfdf7561f0a0ee35b3d06c394fa2bad06ca6088a04848ddcb25f449b3c98b89a91d1ba5859f1ed6737119b606968be250c8ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2ffff7cb7f02af067022604bf2946f7a
SHA1 db4881ab3e493ca0865007e743650c3a39e79272
SHA256 3efcb645847951c657239e6d2acc12b3442c3c62da77fa6c60dbd238e5aa447c
SHA512 3a4c5252a7497c93f8d402bd7623edd55ded9e0e539edac0ed624dd9ce941c266c6546fb14e3dc948824882d5704f0869d964e6e20cb239426dca7b28957e919

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 2bbd9a0cb3d955fcdd923c7e90324c87
SHA1 3bbd7f659a87a64e27d129fedc9e1b829c664ad4
SHA256 d19da9d0a94408a2bfae063b4a6e7abc263363983599df66767838a2a9cd3d9b
SHA512 6f9301604de5a543bdae738677aa4609cbd8464a782d4250338137731ea02b849015ce8947dd622117b3584c74e38c7f6da70c36680e416a731303c010074177

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 83eda35861acd04edb1ab23179111c35
SHA1 12aed36b28d95720bfbc1fc089a047816f4bf919
SHA256 2baba3b305faded3be8922e824535a8c9e9b981b706b53e8a9fff168bee56f1e
SHA512 c08200aaf1f8cdaf8cdcf45aaba51ba70815f14647d86f3d61a82a62463f56b05b090deebf976ada23588391970f84682fa3ec6404f491e28990e7dcc5c42336

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6e227df3d5774f2411ed29377f1a4b22
SHA1 b816a50c26694e48de8bd382317a6e192dce6554
SHA256 c2c297dde60f8ee9d44ec9f2ac7b5a8d53b19a90e94bc4c40b73b6aaa87c0d35
SHA512 f8ffb5969fc29074f6286e419d1b72147cba79bbf7a9a491497e484a84fc740d8fdccdaa4078e9df29647ba7d06317a40f0b36d8a1df07b0cd8f6126f88cdace

C:\Users\Admin\srvhost.exe.tmp

MD5 16abce1e015122afcc07fbcbb90606bc
SHA1 7cdbfb9a6d08143ef8a8bd3e4055a8a99ec36535
SHA256 2cbcb91516f45a8f7b7424b8c392f811033f4f571ac8426a67138c072ece5915
SHA512 9d785d171cfbe2070c60b9c5e659610fdc77bafc3d4d08bd4981c3109bf672d83e987ec1f4ea31a76807bb7a071e05e698774ba4ceb4bc5f4ee5d2a419e015db

C:\Program Files (x86)\TotalAV\SAVAPI\aevdf.dat

MD5 9bc2dd91b06513edd304ea6c9d2874d8
SHA1 408c278cd9b89b09bbb6df07da1e866629664b21
SHA256 401dbc33c68224cc295947bffe475081bedf83b78d972592b9cfcec2ec38d37a
SHA512 0306a5355d85dd8f1fc98072e75136f41f44859c1df4b4dd683bf2ee3da1f0f79a9d3db3989fba27868c61784ed264763690fda92fc2d8466b86fadaff563831

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00000.vdf

MD5 1486ff8794fd6d4e99924cc4aef98f5c
SHA1 994f8e538d09a68ee4967c6038b26c2dd33cb5f6
SHA256 ec03bf427047d531d018cc017684fa23785dd369215cd4cd0421477fa7c50f54
SHA512 442bb3143756292aaf816713f003d32ececf8d3f5e40b12888c7b100fdb4ca450f83e91708a5841e63fce2e1d37dbbffb0bba7d015ff1b91844e2b6ec81132b4

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00001.vdf

MD5 5dfb5f78b78783ef393cc5a76ee5c99c
SHA1 f52099462790da49e928eb5d77974feddae2a908
SHA256 b05f72cd80cb031906ac2d10857946c290b2d80a700eb51510bba48467d96049
SHA512 0a667db191138d7068e6210a9dfe4d0ed563e5bfe7cc9cdc550943df61809282f1aa1b90f47461985a64ac658f995ea9a54c1efba37d4a9d5f5e72ef0196ec9c

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00002.vdf

MD5 9c21aaaf7daab14146443a1a7efe60d4
SHA1 9b790f8f24b6fdb26c6d652d5ce6ba3eb845832a
SHA256 fff94e87c231b50998c8c004ead5644f1c6f8490a744bdeab5044c166cc182ba
SHA512 5c09235a9a3409f3e60d1b9bc8779bd4cdaef40650f01f4a20bbbdbe7e1157a1d77d63efe910cce7a130a9696f075eaa393e3b0a5024d101d2f303fbc9b73107

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 eb58472a154953b761db9e6163a2ee2a
SHA1 11a72629f4e9952dc9e0f878c5dc0af09cc409e1
SHA256 bc33f3a403733081c58bbd08665dda520ee6c211c700180e2d3d1bbf2209069e
SHA512 02ef5a533f45630c351cce1106dab922d380851b618dc9cd78eb081432f24c9aa3c5830be4d2405177491606fb3f0214da9795274add39fc035c479e63bd955b

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00003.vdf

MD5 752035c1165eb4b8c97349426df79d3d
SHA1 114b55ced8c0b00bb0face659445b7333902a750
SHA256 ad02d866453069b213d347e92a07cddaeca6fb6a5856f12ef4d6bb36ca148f58
SHA512 b6df910af67c9b5af5063111263677a58cdc9900fd831f46e1474056df034acf0c200565c5a2a9031a5efb8a4d08366a6ba9bb0c0c822affafdea2c86863a045

C:\Users\Admin\Downloads\7726d15a-5cb6-4a1b-8ed0-e40dfc1fd238.tmp

MD5 c7dcd585b7e8b046f209052bcd6dd84b
SHA1 604dcfae9eed4f65c80a4a39454db409291e08fa
SHA256 0e8336ed51fe4551ced7d9aa5ce2dde945df8a0cc4e7c60199c24dd1cf7ccd48
SHA512 c5ba102b12d2c685312d7dc8d58d98891b73243f56a8491ea7c41c2edaaad44ad90b8bc0748dbd8c84e92e9ae9bbd0b0157265ebe35fb9b63668c57d0e1ed5f2

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00004.vdf

MD5 ea5576d4c0c8322c5da7ff85c27ab930
SHA1 5eb0ebd6ec74deba216a195e4d966140b0fd9b88
SHA256 1911e05217caadc9fd9ef949b81c7c5861b45a59914e8e937e042fa03252daee
SHA512 a0bcc1c4dd8640b4cd60f54953805f357ede26dbdb3eacb528cedf09d96f5c630510a3044fd0ad69b86b0ed88da93751daaf833ca38baebc501c23c72ae416a6

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00005.vdf

MD5 7f739428d6fb60f6a03e67652fd632b3
SHA1 a72c60db9d495cf869c8c0edd510a5850e1c7cdf
SHA256 5b97eaf116756c5fdbf5842ae48b1a21899f04276c956ee213213e2a2e858ef5
SHA512 ca0fd74f2e2067f78741cc0840c8e0642459ddffce44c19ea25709053e8c182d9414fc584286fd0c1e1acac7be6cfa54d0c0b71304318cba0d2899427ee3d082

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00006.vdf

MD5 0d002176e72bc73fdd98cd750d17fdfb
SHA1 c614eecdb9f413f23d54f10f9558290d31cccf6a
SHA256 76c9a90906a2af32d432723863a390fa4236efb09ad74fa57285f88c25443d3b
SHA512 ebee3e3b950e68252877e6cb1aa33e77583a1d94212054606e552645efe593d069e35258c17de39c62a5190a7424969b82d62144a77fe84e74eacc71333453fa

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00008.vdf

MD5 bfa60ec8cd2aabcebaf6eb4c4152c07d
SHA1 964b93fc3498984b567718014818c7ad12482361
SHA256 1f1c660e7ae5e25dcc98a0564c0f5a54576f0404eb84d616e744419b653361b0
SHA512 8ccd10aeec3362e0664b67a2d6bcd168193b84a0adf52153e89bc434e0b7b917f4dacf7fe99c6746b2939e903f989b16a081ad3e4b2865bfc40aec45c851be5e

C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-zunq4jdl.tmp

MD5 7c924a91ff5fcce8c80d4eb3e6f4aa4b
SHA1 621198f3b4a54b5821585d7ea13203396b2ef64d
SHA256 e541d0f1824019d86b4c398b5d73c931691a89edda1231d1a5ca52e46938e376
SHA512 d7d0a1800a5463baf995c61129b52fa3f4a152251e3887b2d65c40f1e4777813f1c2b741a1de6254a4a400c54c52846d80542ce0203eb36970a4c8e55f529e01

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00009.vdf

MD5 bc735ecc78808f35bb4c24b121f9aa1a
SHA1 2c027d39b280f8ce23a39a291353a79cc1d832d8
SHA256 4f4deb6a8cbac07dcee48ddd41fae3ec3bf2218cc87a8798467fe76dc26b3844
SHA512 f2403e8e84bb832d6c5904d9a4a94a258b69c3aebf308b2bd340347d4eeec79277304f92cb42425e7c72609fda82b3f1d7cbb2de789340127d16fe0005ade3ad

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00010.vdf

MD5 b183d2a8785edc08ec2f67e454baa753
SHA1 fac3a3cb9a106de92c7dbdf07bf75c0b9f572312
SHA256 65292d2ad4c525ed779a29462194e398550398b9cfa71bfbe3faf276573948cd
SHA512 20b33215f4fd9c172218918d38aca33a99bda6b9a4fa8926e8c1c499c51f8b4e183d31a5ffb66c080b14e129f104f812dffb8cea1af6f14d3c0be6dbae2c0bdc

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00011.vdf

MD5 00194ef4a5366720b7bd81f088930339
SHA1 7851ddb71549743723126193e7ba53036c56b5a3
SHA256 3c8f8f534ea8cc12a7251a4e4af42eb6adfecbb312ee33a9c5e29af8b366af84
SHA512 c3f0106c42dc590c76f1abc1193c14455e0ce998d545813d1f3e8f05a72f3b7d41236b1de5dfef266bf2f1ea87f10cadee7db7085089b0bf99ce759339fba998

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00012.vdf

MD5 f088312d2a1aed421a9c5eed1cbcba9f
SHA1 c38707e2683465af88d5cc7a2b01649fcba92bc4
SHA256 2afd08c6845ee45394fb3a945872a4a4a84d2a115aaae13a0fb8280cfdf8cf54
SHA512 433fb3d50efd75c3ee93d6c15d1e0839d64d636658f422570b5b5b461ab80fda5476be72849065c2f2c48480b7fe2374450e98687324ef499c1467cc1d30a159

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00013.vdf

MD5 3b212784f87bb777e8b6c533a8e4ae85
SHA1 798a4f7b36eb2b5b9a0074b0ce5ace398dbeb6dd
SHA256 c1ffcd0e48863fd65ba571d1a1ebc41c8ba235d21b64814273819ad3ddef3b03
SHA512 80a7bb3840193ae75b785a781ceb4bd3f653c1c70aa0e5a1d47633c6e7c6c352ec23843286b4231d42e63bfaf7d1210d1810f7701346b20dd8c0eb8e72e46e81

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00015.vdf

MD5 20491a4c576e549d8aeb9717795e33ef
SHA1 45744c205e4495588e2c3aa892c42980a4c12a65
SHA256 b81533ea6ca6b648589f9e6014d6f3a15b451b589b136f2130332492f5e6aff8
SHA512 06456a035a51e9c41147670b5f35605a1670dd1709c00e21605c78a1219f2f5fb2e20b2c364aaf8813c6319064c38f4fd074c0f52af07dafe12248311f6781f6

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00016.vdf

MD5 75c0c5401e40f85daa072a6c1419d614
SHA1 20830d489cd4451fb104e474ce70a5f320b0f40d
SHA256 83ff7e1c617cf4314253cdad394e1bae117ca5b8938286eff5247d080045f363
SHA512 18e32609dc00c89ece65b7b52589490596f6d2fd183fa6632437ac512fdbba76fe713afd0194acee3bfbd408242e9c98897d8594965d55eacf034dda69e47867

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00017.vdf

MD5 f26551444245f7f0dd16ca9c5d0e023f
SHA1 0663d1ed9ee944129bac8d9affcd2cb4c785eebb
SHA256 cf495df57490fd7a3af932ecec060a96a546914de0d0dee95316d38d0b09da6b
SHA512 1a195f5da48dde623cde1d6953adc3a2c32728923edfd5c5bb26fd9d11f0a75fe3537565582db9125385553274e2d0d3b4d99475083b9a5b9579e4ab12f2a205

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00020.vdf

MD5 504bb79dd3a3e491cbff4797a0f86ecb
SHA1 74971bcbc601ab09bbd8c265c8bd8196a700f5d5
SHA256 80495cc6e93ea932b94a2df5f84ec87dca2ed941689510c56009103a1289b820
SHA512 763520826e233027f0bd6d1912889805af147d9d6f4a01383710c66d27743657ca204930621672b50bd877963e70420fbd2e91c411ed84469d09bea8dd7557b7

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00023.vdf

MD5 06caf82e3ec48cb8cf8a37b1e4dc1edf
SHA1 42a8c711f89ed93c219c1f32c54d581cf533f141
SHA256 1b7731b5e1313e6eafe74d790e5a59f9854b0cba685d82148c6e551dcf6bcd05
SHA512 497cf0fd4e767d349e44e0f159235f6afba9e457eb21b0ba0f69ac07723290aa1b5cd37a9f62df3f81069cdff1c96d12c5dece2af7006a146ce78f23f3726f67

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00026.vdf

MD5 b1548e7a37acdd91cfae8d9918109c6b
SHA1 2856fe2b473ff1b72fd95969ec8209891fde4909
SHA256 cc00eb67f4d0bc7c0e0037ebc94389a83a1557bc3ad00acaf621b49ae831ea48
SHA512 cccf8f2b6abfd3f2b7dc521a5369b8a5b97eaadcf894aa1fea3c416cf73fe3a27896a2f6a96059e371c46306949b2d0bff5c2333add2e40cc4e206cd7d01bb2c

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00029.vdf

MD5 cc2a7d57d4d3aec70cc3d3f77fe7084a
SHA1 0279eaa285309cb6caa55399f20e53204a159135
SHA256 c291709edbe6f16362c8da5ff86199f2e2eb704bbcb5db25f0d7adf84af6e728
SHA512 a99c1ab7a9d71f9cc4d2edfc9e7c8dd4db98fc161ac3113c293d7b43d6df40a5fa00f17bdff89984fcdf24596a84d4a40167661eec00229e98cc9edca503f3af

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00031.vdf

MD5 b65719e5752aa9a93d2b0696ca504345
SHA1 7a0f05a3ba06c70f02fd15a45739223747b36744
SHA256 6c3efcdfec4c4cf7357b36166b5238890c0045c1f86a776ed7299b8f95321b24
SHA512 2fe115fc128f26bfda54ea713fa96b7422f11a00387a3b8b692bd273b5ff3bf48bbc20bc9e664c5fc086ceafa2fbd8ad05033edd3622cb60a0402c70eb75ec70

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00035.vdf

MD5 2de5c21887949c598f0aac5b85d80df8
SHA1 f57f3eb59acc843a95519f326856eb9cb601a921
SHA256 69804aff488818b86ad93fc103e0db22f06a9e67fcaf2bde2b04a79108312b85
SHA512 72866d9fe48aa2680d1b68e188a316d2f8b040011f78b483b7a3b0e727029f6dc4c3ff939a80c587deee604898583e9d5f0c061c115979caf879ec5fb03d9f84

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00037.vdf

MD5 ed533864184f4b0bf58beddc74cbcf19
SHA1 cd090ba8ec2b5633bfcc8d604197a3b0f3a50d16
SHA256 74fbfb2b96ec92e65afdd6f41b0d6f847171bcfb951e67f4a60be71a0a215954
SHA512 4087147957fe6a99aa5ca8ee0d06b94d79ca61e56777bb7341cc581e54c74a3d8244403a1ad6513592e7a2da90e18512a7f4d7e6db96dec9dbdfca494f21086e

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00038.vdf

MD5 c9cf657a80e9f89de07d7e8d1c0243e6
SHA1 8432acd25d3b2e9a6ae05e91d035e76f24e64cbc
SHA256 83421786fb31ae5fb9c8ac0311e9fef5928a927eef1360da99a318e883de8284
SHA512 15e3bc1cbaf649a3b1accbe14d1eb7aa0bd47b158a5bd8a8f8c57b17fa097fcdb2177fc62267d3c7808ad15281ee255e60e367f4258d7223fa2a2e99bdbda62c

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00041.vdf

MD5 c3b246647cea8582d31c032d31514f7c
SHA1 1b894f36847fcfb95f7606349f52743955a2927a
SHA256 4d5e34e69934c94327cb0f9e939505ba6ccbb75935e6c1f06143aff71c786a51
SHA512 22d2bedea48b480c1d70567975fee996b48185d8ec181f13c25e19dba426f4f7a584966b3342bd4489b6d5c2e79234cf1970debb22c6f9382757281fa295ada1

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00043.vdf

MD5 74b03c20442ec760e74a92e179d67804
SHA1 6c69e1b8a55293d0ff334876a9e08af5df9b925f
SHA256 955df69b9ddca31f353d10bca732e50615086a2229b0c433f79b148dd8871419
SHA512 d20d6f39f7db2fd4d3aca9747b20b78b999c96f759dc8903d402c4d5145029a485e41e4b85d57911d99855c310427fb00b0c793e0132eb2d6b7e96893d671585

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00046.vdf

MD5 5cfc9ac23b4341b77f280b2a61efe9b1
SHA1 f385dee539ff197a6ce8bc649c0a7091d8fbb19a
SHA256 4b9ed7029e437e58181485d25dee00674a0ddc9da566bfa4e1c2aec111d5c7d0
SHA512 e5fdc35f6aeb860febda6f9b8f297aa625d652ff9d2c6141b764e306a1505b0267d558a6481b5063c51dfae30c5a6b6767e3b11938041605ceaf3347f2062ef9

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00049.vdf

MD5 d42e7eb5ea6032ff9313627127da05c0
SHA1 609bf5db3792cd8e1405cb23a7f1811265cfb472
SHA256 a834117d74c886d63096f01e42c4a5de0f4b3b44571526b0d28a26f5321155bd
SHA512 05fd0bba89295c495bd5a928fb76fae3a6e785a88fb3847ca384f31ab81ff9028a9a18226be46a8183616544aecae88b32c08f992f3e67a741f3bd0f00b24c40

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00050.vdf

MD5 46139282ce8d2fd675bc3706a33b6744
SHA1 1dda3300307c7596c524c940d65d150ab1a085a5
SHA256 3b1e085e37a97469f5e75261674c0058872c5aa993472c56ce186d15ec915fc0
SHA512 79b33c07d45996db92dbec10cb179c89241cc1adf70bc4434f0ec3fc9bb860e66ff5d200587f43173fc8a7fc394349454876d4e722d8346bacd294be8be29b4d

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00048.vdf

MD5 607ce8870a9cf184136acc4a7eca4ba1
SHA1 b77d15de6009708f65a2d0ff3d1d99270f3ff434
SHA256 4c2d8a60f1b404829719f78ed4456c71fa650c2226a4a021f3c7ab7598792751
SHA512 e619335c2ffa7a416885091d177d07bdf7c0c2bda72365cceaa9c5d4056c43c5e8d31f06eb92be6b3c6f2decd96b69cd391ce84018d948c3313b28bf1b0d85c9

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00047.vdf

MD5 86498402a79452e8e5126347e2d0b2ff
SHA1 d1c16f0df50d1d8041a1700c1612dc43f1e1e30d
SHA256 f40d781c1045b21788bfc3c8a19a294fd92ed088918f81eea3503648edba2114
SHA512 0a9db8cb99744066956c3ab3a96f08dbea661a7cc71adbd06f54e535f801964c8b56c4e381d68b8ea656af96095d41febf2e931bd33e12609a13140370224649

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00045.vdf

MD5 6b66ab08931d1b70cad3e9f1ba184984
SHA1 79ee464b07d1b10a4a71ac3663396734a89d42c7
SHA256 9cebb54bc661d48000554ca3bdcb468ac85c02b59d8b8ec19ad54838df12566c
SHA512 5b087138be1cb402cc03840537c5ee892ba71c95c7bd92667fdf821c7932ee22129b036e1858ea672bc86eef2ef66099143be4e7d18717a42479f1431068ab21

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00044.vdf

MD5 1aca0d9ff9c1d0a0b4169f3355eca41c
SHA1 dcc6213b1b6473f9e829b6f1d63188ed1107700a
SHA256 3a36f4719dcb5c7db3d4e7032cc911c33637cedb851cc8936df6d0ad19ef7b94
SHA512 512157d7bc96742f802481404ccbb9c790def7301d488b20fe66ff9b132b84a237decff300198ebf56d57e47e3a8f6b868d99fc5cf626cf41e96c78d2baeb124

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00042.vdf

MD5 ae22c250e84adea5a41eb97660885ef0
SHA1 ee95b2d02865a1bf34dc55b71ba8cb99f8f367a0
SHA256 5617d6abf8e96614a9d24ec868a0d5bbb11b3b6cae068d2665cf723c3f02f166
SHA512 939116efc00e2339158f8d1f7e7e2e0a9a023551064d54a1be37b7200c87b127794bf276b7b39b502acb06dc7b25c0456781dfb23ec14d4b7b265bad36163c7b

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00040.vdf

MD5 f38ecb20f8a8db72e7f3d5a479a5cffe
SHA1 6080a72d471a7982e4376613a61d8acc3ae8562a
SHA256 7937600547c220852933cc31b247dc5f08ec50de466f1fbb97c14df0b8cf6bfb
SHA512 d4a5cbf702a91e5a5b12378d427dd809370703ec19713b8299850b6d9a00c0990f41c89925331021537398b3b76870d5f9e34f3113f2950bf4baab183a61ad61

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00039.vdf

MD5 f24eb5b7aad76562407fd78ce4c49041
SHA1 95c0105551ff6974cfce0ab132bd3df60a133f39
SHA256 68bc2fcafdea40bcfe25fd87e305ac1dc655b2916c7f8b2e32c10ed7a5735d1e
SHA512 6c6eed760ced10aa145cb2c3f1c4373620b2e4a7426a7e53175427790658af36051f7afcfe6dd69c790882a57baaa911e5149388051dc4596b5e5d97e9624ef6

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00170.vdf

MD5 46d3f8ba00247af2ea268c36291ab27f
SHA1 d92df43d2a9fca9cabf63aafe4654964fe7be73f
SHA256 b1c1e5626297a92519fc882baeb01e7cbc6be68775c2f7fe9bb19f0f15c455cd
SHA512 7edcb8a50edc510c60ec5395208890ffde5016d3ca057e70357d1447020d0ad83512b2d5cb087a2792823bc8494a6140d9fdf5dfe3509751f61b48321401af9b

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00171.vdf

MD5 6ea8f5be2928d811d735dab9e050a299
SHA1 4b92fddc13b5761e30918443577f36220c2e2a8f
SHA256 fbcf36814df249344d1e3e05e6283f8850ec3f7df90b28be09fea348f2a59a14
SHA512 9f3c1b78d63c13cd674d4bd70c992d6980f579e284ec8d85e8155353b2e131f19bcd6ef7fcafb7f8ddc97975a9e143d7cdadf5895fb72535ac38ee610d30380c

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00172.vdf

MD5 b54ab8876e5cd7923d5df131c4c0b855
SHA1 0d4f1f286e275ac09c7de4897b6d8ee2fd69b74f
SHA256 153dcb2c828f8b57003cb0dbf5a1d0f744240798bb1df48efffc2ebc8d9ae0d5
SHA512 4590b00820f96e3e929ff668be7c5f6df1c787a61377a5307d2c1d60f6055eec33da973a5fdca53b84105642005c0cda6101a0f74b1983e88211b4d659eedac3

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00178.vdf

MD5 4c72c5cb08a98fbc0807119a5292ff9c
SHA1 2f628b38a7f1347448f87f99f6162f107f27403b
SHA256 572262fafe1e7ef8fa3c8eade5dc580e29c8bd0a9af582d4003c61371ef89277
SHA512 6a46c2479761dbadf3f1950f581b0770aef2477aaa4d56f5869d8ef4252b80dcfa7714bc691aca696fb8a155736d19a2a00ee0748146dc535a44924e726aa29a

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00188.vdf

MD5 61be908858e81416bb9c29fcc968e08a
SHA1 a893b213f637a08a1347ec3e35af9c489becf95f
SHA256 5ef76e24bda40f294165b5427ae7a0293fffc7d51ff0bc68ef0ff721a1fb58e6
SHA512 d5beececbda7e348d42a0d75c4bb570e2c7661b40cad2cfb6f2d7e149a5b0e649a55588461fd46b49fa49084031d19863d320cd1f06ab1365250c0c03e5d221f

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00193.vdf

MD5 1a06307639909d760f7a30de958a14d7
SHA1 37fbc1439bfd3980bab8c712bd3e766727dc7b93
SHA256 15ffa307263d362c45776d3ebadf78ea0582e139cf57ba1bd08804ef7636af39
SHA512 e0e9dc3c6fead2accd83c1442b88d1493d1014853f926600388d18da152de2685d63771eb7c892e472de1b5716b6db6e07abf330796399cfc30dd801519642f8

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00192.vdf

MD5 750ec02b41d22e03533b1e68aaac18b8
SHA1 646ba361cadee75a14be5ec2a4bf4d46274efe61
SHA256 06b89e66ae9c46c0a027f8122843adefdc80a18db1ecf2ca38c272f17b170aea
SHA512 fd555260683a1ee32da6b85a69676c9367ae627039c21d7baff56a505dcf882fdfda814d456f430f6e07c7e5d36ab78f924c3c21db16e575dafd8027f49b97c3

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00191.vdf

MD5 d8ae42c120e72a8575b73872065bbcb9
SHA1 eb5fe3393f8efbc2ae4d569c8866f80a681fa4e9
SHA256 17277599c309a52581f9d29b453cf58d429943f449e0bf093768a23c60a03332
SHA512 fa5c985dbd991a0cb36979a289d06e70f6cde0792dc61f8d75d90a93e5205054f9a5891552d5533c7b1be93482c131e10df7ad428605501469fb13fbf56aab65

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00190.vdf

MD5 c41df3e31aeaf2f2cfbb96fc3a1c0706
SHA1 e6e9b8196e353cadb948dda2e2a70eecd0ed2d63
SHA256 418e07afb2ec6e8138fdc217972279eaae6b737cb4dae3aa0d615e2900bffcb6
SHA512 3943a488099ebad3c8e2fe2c5a3c8129d2a1c17025a8f772975083c810490b18ce7273521037c63726bf7368fef91e222059d751ba79582b42c4b25cd9ae6df6

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00189.vdf

MD5 15d8fea4bf5e64fb0c68569624109b9b
SHA1 0b1f953e594f4b27adc00a3cc028d8a1f9ee5e8d
SHA256 828c8b1fd290dbee348ad18ea99e89a5dc74ed077fb24c75ca3964dc57bd35b6
SHA512 e7f73e03aa2482b6a88cd65c593e7fd963d05d7df63003ad8474671e1080a9ecbe10a30f81a4820fd092c7a55c485254ea1480844f7dc10304ddbf1da702c738

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00187.vdf

MD5 550e075b4bdd72bf861943e5042e9029
SHA1 73a465fcce83b9184cbb7346b75285872dee0c81
SHA256 246ed063a6c58d6eefae0d08c03634a9f0c6768a739869664581eb1360ce14eb
SHA512 30d3fa0ce06f7d75814847c26d95a8aef5e2964ea9fa710916ef04b448cb3c5016da5d11a17d2cf487a06dc835344caf48ef82f4580885d1e6605e429662a305

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00186.vdf

MD5 960cb604205364593b19f486c310d7b8
SHA1 02782d4ac1416e2d22cdf8ab9adb086311201007
SHA256 31c9a62897c65a63b773f65c3c67dc19837f7663c01b7a42ad3781f1fe48471f
SHA512 02f50ee860fbcc7bd69a837bd9c83ae5f73de7527228a2cb9c01632a93abb0fa0a1b81dd15365b1521e0e8fc934fb801cda62e0dc62de31777f9b429f7d8ecaa

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00185.vdf

MD5 d7152b10086c7debd74b779ca2d937e7
SHA1 88394233cb430d715c123865f26123f0c1ddbb6b
SHA256 3542b568a6f7dae429da9d0674c8defebba94b09f699469d03f6fb2f70528b55
SHA512 7fa79763cf2d46461a4b08f3413746825557d5a4dfe5d2cfaa7a669056f842f0ac12ada450852f5a165c6aa887c3ae027997b464c65aa24d3e2e75f7db2127e5

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00184.vdf

MD5 104cdb5ad892af71c209284a9cc483b2
SHA1 15ea58a59931aded672fabff4ad4fb172c2aa4b3
SHA256 a17d6ff1b948f5c2d4f072fda8eef9864831a730fd0cb6f94423b831c2fc3385
SHA512 c9a47daf64c94f9963f9095ba59b61b045b3d3be802da789a0f72f6767fe5c9d66258d2535b11fa1b99eeaa2aeb10bc40a80f83e4bb44e926f84c6918dde2eef

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00183.vdf

MD5 6ae72f409f2f2b403d7f6cc29091e630
SHA1 55a820aec913e9504e0f75439c68c376c10f7076
SHA256 e5000a8b35680e9b52ca57edb1d521842b9cc56e14ff261c5756cece8dd6e5ef
SHA512 23ca2f5b2fc72a3013fe17aea011db044272e0fdda6e5198f3087e5fb42336823a9e37df616652600a5f709cf2b6132c11515f704d06d67750586fc51faab964

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00182.vdf

MD5 94d6a7adfff4b5ed4e5dd552c43106d0
SHA1 f920ad496c530f02ac711a2d40bf676c09782ebb
SHA256 e86798fc24e3ce3f19c52123b65672502aa0e22c353bceb2cf787bbecc39e90a
SHA512 31f245c76afc94c5cec2ab50700e8d4c34ef138b56d1904588da864ac60ce6bb9c2a22648d6daa0388b8f5520a8d01a7c13c881c6dd7d51e0a26d0de36a3e511

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00181.vdf

MD5 618835e2872d7f8460e68e09d508973a
SHA1 ae12b02e8b3823bcb98df6abedbb88f0a407577a
SHA256 71b64d763dc0b22901d32d399ccff8f791c88fcf2ef9d38afe9902780538f543
SHA512 987fcf02082ba8120b1368e3a441b9672e894dbaee64ebe73fec390181c5a8d992c9ada7e58807751e00fa7421880c6b145fad8ba20a3f1b46d2a5ba895983d3

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00180.vdf

MD5 b33fbd72832d89116ab32238abeffe47
SHA1 a6eb31aa6177a094b2fd20e30edeaca7d737a75a
SHA256 25f337be4a8adebf0b63657a2d8a297ab3efdc1376810fa12c4171b6f06bfddb
SHA512 60f5a17fd2a8e23b1bd5ebf1367d1b58c667c36015cd22518fd44a585baf8f00a2fbe9d48518e3bf6877ce940d68981a93bea5277b64306fe78122a8514adac9

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00179.vdf

MD5 e1a2236eb343f9471ad13cc158cb38b8
SHA1 4fcea425548ddc39bf4bfb6931abcee04918fd0f
SHA256 a5c8d682f445dfe166d82300f906e0aca45dd21694a6e90b74aa09664651f8da
SHA512 552841d0c5c7e9eb9b677555eb7e9817a250bd93a9f85d3b3ba364377fb8af64d4c1f8f11bce7beee35345f45d5c53054c4bdf72375acaca3de01615b56f8d25

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00177.vdf

MD5 48d2b9ee26ee0468e11d6e9de7397af8
SHA1 31d06bdcf46b823d3509daddbea300ba27a12ff3
SHA256 c20b80fdecbeabe751f6ca15b96e6f2ad422294712102e62dea360e096411f0a
SHA512 c36c226713cbf791b4100cfd276d096525bb612d0ebf3e6d30cb5ff31481480f57de221075d81dd44e04539170fbba0f3b1486906584d44c9c56ef1649469275

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00176.vdf

MD5 71a1d375658503c24985933080c437dd
SHA1 c76f397a27b479b28ba4afdffacfe0cd10eeb9b2
SHA256 0625802db63a39091b399b0f6328e91a2dd2d7f9e6f090ff0b7c953648a434af
SHA512 e80a1b1555cc1d600b0d2a995a9d8cc210309ef287375f260f80d88c5705bb5bead07d66d24c2e3ac5a04643c0a05c9f56852ba9578884678c9713572fe5ece7

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00175.vdf

MD5 626c00e20ddc94bfe761699ca46142e4
SHA1 3591801464be67e5e8beda3576928a9f49395be0
SHA256 8a5dff127f4830caa5bf2877397c77742d00bae5350ca3209573706dd17dc132
SHA512 2037ae3e03da1a7da9890bcea251cdf0b97ac67b7e83767942498cf4e778b48da61dce654f45966916c8cac44133181716c7d1ea44a8c04636723dd96efd54a2

C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\TotalAV\vdf_1712323587.zip

MD5 15240ba4b5105f5b811b282f60511450
SHA1 f05cabad6789aed01625477d06e5c535c731928b
SHA256 1459be4d4ffefe1fceaa969bc191084c4a965332313ec1a7b1613a189385df2d
SHA512 1cbfd1dba3740a4cb2c8d6f92a54523ca28180c0882d10b404de1a6fd6147aee57e9c62989fdb8ec731e31842591a620c876fff26a7373f48fa66c5fe3ad3ceb

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00174.vdf

MD5 2a8f432b9b71b0ceb6228a261bfdaf3a
SHA1 49d327c02e41aec8dd8f385b8088c265b62f25e5
SHA256 1d09be217bed476d8c77f231cedf5ba4145eb75a0db23c258a36a6dd115621c6
SHA512 f0558e3c8863691dee3cff3bf6e2f7792a2c498da35c86b60a58cd0cf08567ea7bdc365b8ae409a79ef5238e7fefd845e3cb42c9a150e70e01f22de1d2d984ec

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00173.vdf

MD5 c973d5fc0734785ac5f4a8a289cb42fc
SHA1 3be2dd6cb7d3fda17320e545e10660f959364288
SHA256 11f3b165f6666b148678abd48117c56d40e6c710e735a8b6ca95d3f484c45814
SHA512 38c34a0c0a96a4e9d9d71894f2fe79fbe85f74d7801b5d854bbf9e4c16e5b5b9cefe44a33679b21b4c345b7c22fe908f2fa23fa34755ec575c1c2799e2fd5de3

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00036.vdf

MD5 e6c5f3fde7aac1ed039d576dfb3bb6a7
SHA1 4a054ce61c07610d8f62f3a0078236fd74aaf612
SHA256 b905f4e1f9a871cc813d5a472de6a3635e744cfe05ce4fd115a1bf9c15ae50b4
SHA512 adec63ee1efbfaded90d997b7b2976bfc3de4436ac1f81d5d83f7de58ea1ad31be4ecba03cb938506d01f291ee66aee7d9c451975e590d5dab096e18ab933db0

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00034.vdf

MD5 ca0746531ad004e591891002b32ca942
SHA1 c293502c0d2c470be6def4059d55d9d49f3bfcc1
SHA256 4501496b637c9422b04c88f8a9d0fef77bcfdc7b459510e39f295dbfb1a95fe2
SHA512 375a0cd004ef1a28eb19ecc938db255a859bffc810d69573c87ac0f4f885c858fefaba79a4a65ed80d96f38efb03c294270aaee7b85b5c59721c6a9c94d5fe61

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00033.vdf

MD5 8b78a8705ba1c6e15d25b5a5454dd62e
SHA1 7b52cec10ad72870042728db37885ef81914a385
SHA256 977ecd2649be4595095e5379c091ee12299e65cb5e8bd877b9ff762c470b5a09
SHA512 ce64bbd65ed4c3a46e086d738f6d5d5747198c0b04cba48791336b917cb30ac0fb8c27cbca3312ab4b8a829e2d497dae7ea1933bf71b98f4736ad01e5bd66923

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00032.vdf

MD5 9523fbb626cda032a95efa7197f77da8
SHA1 43ce8a379fb81e60c3dcb8edc38216a183d3ae3a
SHA256 0935be55e1664b3e96395fd35d55e95352df0abd78c5e58c1a70cd3b8a846b56
SHA512 dac62a7bd86d07117cf4626a6a46fb1b5a3201c06e22f6a2418dcf41411fe7e7b358e2f2adb06fab064953348f1f0e13f70dd186266cd46352bf119f6fb28930

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00030.vdf

MD5 7c549502d122923f741052efcb3a6553
SHA1 65df7b607a95e8a158343b744d6ce68a771de8a4
SHA256 60fd41a360cd4dff4220ef1b0e359fda98905b1bc45397e2710fd5e44f3c9a46
SHA512 98f689604a5e540857edfd3c92f31315362ab7c28bf07f5b4f24d2706f6f0fdb3db807a34168b1f8576c5539d9f022e2ee4c617522d7bc59927ad365edb8d048

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00028.vdf

MD5 c47b80bacae1aeabbef319e6f4924b46
SHA1 db560e34beac77a33328d05734a6f7fd83bf4887
SHA256 f4721e6c2619bfede0676accfc89036ec72b3bc3a617e1cff9d929aca35f4466
SHA512 41d1e1f7cc4abce1664824a8b1b6c9d51933815b4a747556a9aff55af7436f04e3a00b92f166cdc036e73fa2d8082303ba4a260161fb86e06ee5176dd80ef1c0

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00027.vdf

MD5 e894a468a5b9ca25a5dc1176cda0c567
SHA1 d834eabc5ee5d5906b44da94bb30395a937d189d
SHA256 ee85a74724d0c81415eb8d3c70fffec9168e9c17d64c32b0962d252879eca4bc
SHA512 e1e301cda80d82b24104c202fd15bae85f8ad6f17240c0be745425bdf798e45fd5273d3c3762fd521e5402919deb42e5f81a72da5621b8754ef4bfeb757af682

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00025.vdf

MD5 b85d3f4dfcb5ac1fe1658fe73e3678b6
SHA1 d5d267025ed560a137944b8d59127f6145db08c3
SHA256 966818fe2fda07e29ef03ccec6ee507f7cd49a464e40fe71622befc2f4e4d430
SHA512 8a42553ca3a23227a66501f0d9949147460d6946b853b42a361af1e8a1c0e8931bdc42ac62181989f112b4a058fa8ddf63efdc871954f9248896827af7f547ed

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00024.vdf

MD5 7f5e4fca965cc908ce5e236b1c8feaca
SHA1 82a4a9edc0bc9070dadaa4ba1a4935ac07c8737e
SHA256 ff5a99abed74090b5c099251b653ceec6ddbbbbb6e8896198d2bd1425882edad
SHA512 f6d219b15d11d4433201785dae168965d9547a40070ec238f78bb77448af682f5b123da6517d72413a79ed49d7a24b293732fdff49eb2fc8a7ec692ab5c2e25a

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00022.vdf

MD5 ba74ff88a65eba0395649dcab1124191
SHA1 3867a0365d4d11d9908591a502d8810cfeb722ff
SHA256 eec4d3255a58a0c935efe3b21d741060a04eae2d7208df9fe672b45d28e07521
SHA512 073e5203d65cec35e673b3ca9cf9180a7123be031fdecbd97065b1bed4ec912c2518860f8d2157c4f558337e3dd07e95407fa0c86b7881db37bb69c9ec51faa2

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00021.vdf

MD5 e22f4b1847460211a218f2a0282408f6
SHA1 33a31302bc360774462c45767cab409dbc7a0739
SHA256 2163e48c5177cec7174d6bd99ed33ae0f9cff8eb3fcf6c362330f9b828eb69fa
SHA512 12a163bc646f77abcd430d21c4b24272c9c7d393fed5acba8c41185130eb375bd97247115475820063ef1d6068d685881866230097d4801ff5ab76b1055c1884

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00019.vdf

MD5 b13c183fac8761066ca7420a4d290800
SHA1 d261b3eb65d11f6667a4c3f0a084f4134dea2057
SHA256 ff3169d60967f2c0cefbe7db9db97d557073775e598245e9d71b98817444b232
SHA512 6efbb48696e2bae4d0794297402d2786cd6b5fd61b2440232500c40058c505c4414558e62805c32a550d9f4befbf5a7bc7b572afedd27369a924910fbe2c2113

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00018.vdf

MD5 9493c2c01ee725788eda1f2cd7497e16
SHA1 e52ea218988dbae2d4e5a15c99e839be5351500a
SHA256 e9da8f6a7e7eea82c3c6aa6d4b0f89cebf5f5e2c1f5af5292f5d390f22ec124e
SHA512 b975160faa5c1c7b9cb0c4a8cd5accc102eef98cd566bbd0260a4100d4d593c79fcae90d28540d3e616541b4de57d8859906c8e836dcad22d7c9ad6d9b1c2502

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00014.vdf

MD5 6f0a137d05d382b23e80788a965ca56e
SHA1 87a0ac1fc278db35a68f4cb70f04e51386bed835
SHA256 06d943f031b991605aaff6f6501be55a205c696d0b446027ce6e2ae70194e9d6
SHA512 33953afccda3af545320ad35c5d0fef52c1b2cb74e456bc60dfb266c588eb716ed8f1c476043a709c49f8c4ca7551a7f4b26692b51de24204f1c81cd3bd506db

C:\Users\Admin\Downloads\Unconfirmed 944011.crdownload:SmartScreen

MD5 4047530ecbc0170039e76fe1657bdb01
SHA1 32db7d5e662ebccdd1d71de285f907e3a1c68ac5
SHA256 82254025d1b98d60044d3aeb7c56eed7c61c07c3e30534d6e05dab9d6c326750
SHA512 8f002af3f4ed2b3dfb4ed8273318d160152da50ee4842c9f5d9915f50a3e643952494699c4258e6af993dc6e1695d0dc3db6d23f4d93c26b0bc6a20f4b4f336e

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\idx\savapi4lib-win32-en.info

MD5 70ce5f7348f8d6854b7ac079ae4e98a8
SHA1 7c1fe5e14a3485d55d6dcc53525abfa403af1aee
SHA256 68e5befc342de89f302a96692ee9be3fd6348748da0ac13c5a7e7b77e3432b15
SHA512 c68ce9e4c37ec52b7c004283d8c0a091faddfc407a0317895f2291c347d9ab4f96ec80ed7c1e91863c9254a4c21f0c995f71d82e70e248b73932263b9a3267db

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\idx\xvdf.info

MD5 8e4bd3cf7131d46c0e3094ca7dd89b6d
SHA1 c376ec5915642ea187c647b38c9945c56a23e8eb
SHA256 798fb4a838db5cd4fa34b5a12b2772abf006333ba590554b20c388267aec1da4
SHA512 874962d3767cade9edce431d2751d987cb24f978539fb6bf99b3a9d5ce6fa8a5b68d7a83e827b61f6143eedb7895e137b00f1481a71d32f57d670849c6cedea9

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\idx\savapi4-ave2-win32-en.info

MD5 3d1f7af90edf967f0acfc18f13283128
SHA1 e693005d3547d847077450101e8481ec69eb3613
SHA256 0fd4bba3a0ee039b7e02612716cddcc339c3dc6f1e4b12dba4e404c2ae9642e5
SHA512 5c2092d6356b8dc799de7537566d85108d97da940222e9fb45ef4f39b483a4d71588b0c58f29f451a612db1f9b9b8b719fcf466aacdc2493ccdfc74fa72cf24a

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aehelp.dll

MD5 c14a2ef53263857daed0310e1635aebd
SHA1 c8e9f13802e82f2ea95e0591afd3cb5aa5245188
SHA256 908143689cd10f678284de67268c061d26a00bf0a96fe173dcfaafd86697d5d0
SHA512 910542dcf67976946d8b0f2ec7cb948fa50fe014e9c439a37adbeb162f7f98645d546c3d32b2624e3d97ca971fb9d854f652bf2f8842b1e6b5337517c1a3e72b

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aegen.dll

MD5 4e2848e2b6e89eef9c4bf9920e9493fa
SHA1 7aef4d2502ecd2f366b6b15d6ab249bc35ef393c
SHA256 b28405034113d2e62b688c29212234ac0ef46495d57041c76fb401ad0701aa87
SHA512 96401b3ef6d9398f760c655b6cbd89b1f9876e89eb9b4a3bc1d88575d971fddcd9a62e3ae57d523fa97835a71aa4d5a676f2b38b550f12392eac6fbe08f832fc

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aeemu.dll

MD5 8a0bc0c1754cc9520d753f66ecf9952a
SHA1 db6b825d40f2eb4d509d28ed34ec7557bcf65506
SHA256 23f6737d73370bc3915819e173ee2c0bf939d648aa172a83a238a38a9ebec465
SHA512 0ff477cff772cb5580d4a7fb6459d5de6ed6aef644c497f4e81e2cff72e6d32f55262ab02a7cbf7ba31b60b94b15f233972fa8b540f6bbdf41240acaa1dc3cad

C:\Program Files (x86)\TotalAV\SAVAPI\aeelf_gwf.dat

MD5 f2963451174e53a12fc09fa42482e2c4
SHA1 2b24d1a721420413476897f73a530cd0dd0adc18
SHA256 2e07fec266393ddb6ed716938e9459a7719da7b4e3e38c7248c8d978f0b454e1
SHA512 fe36b6f69cf50988d0224ccd2220bc3f844148f6c5cb0e33099c3ddbe765a066a51c5a4dc608141573ee22603525dfe89a6d6202cf0a56f943a958b93dfe9928

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aeelf.dll

MD5 6afe0e5e47418098eb5904fb00c2a6b8
SHA1 e4b0375acc135ec74b75cf9612e3fabcad098d2e
SHA256 1de560e945cb08cbfe64a627e2f3bcc0880679aeabb2a691265b72516c67f7e5
SHA512 beef2bf94ef6e4d1f01b8e414f5a49ff4264cd9234cbea66a8186a3a23455dcee89c647e3df653fd1066c5f0c5a1fcd59b44d729298cfd47d85a4727b594ce60

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aecore.dll

MD5 c1b4cc7ef91cd05e43afa6be3c8a8072
SHA1 b941867bb270f69c63d7d2f3184dbc11a281bac4
SHA256 3434ba621c3c555eb1e5720d3a92044add10eeda647836e20326267c8a5ef7fd
SHA512 e9e25c00c7ab285778061afb48b4fe2372612605fdcb938c94fa7c38fe05cbb65d8b8f12e63a4c2a1643d87d14b42143ac052bdf7e2f5db6ce2a3bb5a12aba0c

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aeheur.dll

MD5 e82fc4753233996e2d2b16c62180bfd3
SHA1 ad0e0c28e6941eb348f712af8a73e147e13c2cde
SHA256 1390a44f06571962a098b8751e8cb7826ec5f10a0abb8d5612a737d7d9526f58
SHA512 9062b647df93702f4917396f70b84afe215c9e5966737836ac32798900bf28f14b03de512e879d1ab31de86a55780cd0933b519981d781398c651488f6c0bcce

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aebb.dll

MD5 9b5e263884afcb8ec8da9efd26e85cf2
SHA1 a19a19758f8827782be36ad7e302b1844a4546eb
SHA256 7c5e9a7258d3148d599655146e1bb568f374039df5614c6b88829e28b0d37e83
SHA512 8567ece331a27ee7ef71113b2ca990acd243a866e76964ddfa8537b57828a7a8745e8c660d62cafc26409b5994a343a2d3f9d3cbed76eaa525a3338d23a107f8

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_agen.dat

MD5 e59cc357271a554c34970ae2e3589ab0
SHA1 4b6ed37a7a38f82b3b6129a8ab075a59447cbfc9
SHA256 6741eb33b4803260b6f13178a463d461483bb1f0d2b379b2824b29c72b081c95
SHA512 2fda551cc9f94ffc5359898a8228e08709490c25d64a455a92956a4c68258c892b48954687f9458e5b6b0313013b4add93e8b4639495b90dbb501e408c0b3e83

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_mv.dat

MD5 871516593efbb31f332cc8d04afc5fc9
SHA1 174e7c12deb1663365ac54be8f4d1a0186b547ec
SHA256 87a3d331b7514f66d0ed40cd16065a471d162e710c7f065d4a079fb18f802d0a
SHA512 16e17bcc4b6a11010dd9cf33ad178b4969f983d96f9e298795d746adeed57e856644a66ff60dc081798f933823f235755a77fd049918d1b83cd5d0462e5cda7f

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aemobile.dll

MD5 67368ccbebd67979db03d03d52ccbce4
SHA1 aec9c6bbbda22c5ca7ae57ccab3e577bcdc626a6
SHA256 7de3346b6aae85e1bc9a5a64f11177aca416f9456bed7203a49521fa3b1b1c59
SHA512 030146ea0972ebe90bb8cf0f7ac433d173ad145ec40de95d4759b815bdd52aff20b265e7e9ca2374c9f02f87a1b600a1fac34a87af425ffa2efbdfc86b407693

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aeml.dll

MD5 c292c586817f21ff2f451e70211a4618
SHA1 782f3c89b70080466159584af76314a6ef1be5ba
SHA256 2994e3e49eed991e0c455ff32af9feca93cef64d9c740008e8231a080db05b6a
SHA512 705a3fd58e0685c44a1d3c8d50bfce3c6c86b93bcaed94649e2402884205375219f8a5c1ad4bbbad351b4a414521c2bb25fcc5adf36b7f5ae88034e16389a0a8

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aelibinf.dll

MD5 3ea8b0a26cf146e50badfda0ae09b599
SHA1 558582b9b7792a161a29d9d0123a9227747a27c0
SHA256 b1c1a029e2e1d27ad1589f1e657754c00845ed288fe871629d5f11f01a4c9ec8
SHA512 c498ffd42e258f19c8ad41390fbea840a6bc660e4826de04405fc24577202c491e01a266d661f03783008837b12012fd94b8dc9fc4bad6d2486d5f8a2b9fd257

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aedroid.dll

MD5 3408f0386b67d743773e6311a6331030
SHA1 d221c2679e5eab060c6e52c6ccfaab2d9cadd6e0
SHA256 b72f8ca6f3f3dea06710675c8e6f6dadfe992fefe3a3e2012153fb6aaf685b37
SHA512 53744cd721a9fc6d3ac56a0b651a03a916e1ec8f58d46e92041d90930c7e56ccf12e3fafc5cc26d13b9cd5e431b20e0d9ec1dd85211edce2512b9d9edca7ae3b

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aecrypto.dll

MD5 ed7b2daad65db7bb7ca87a32da877c9d
SHA1 80f4a4568ac2c9d55db856cbea81f199fee0c210
SHA256 47747e2642524b38660e591f2da8574ee5fff20bbf5216f89273bb896d76daa7
SHA512 e878f4a1d6b16b2d950770d9a9452186c093d9ffe9d27f85bb090365ab21e0819e7401efa207209fc3e91d93b8723de56d45a48751b0e3e1ec6fa8a5da4f0963

C:\Program Files (x86)\TotalAV\SAVAPI\aeset.dat

MD5 c1aab50fe03fa62db7e75a693532613e
SHA1 361ece4e53f0a9ab5f6a0557d6e7c4fbf88ec3e4
SHA256 259c5f57062992b5034e4f438a4f1c490247fba31a2cac15b9060ef3474e6a4b
SHA512 d1d4e583a3d46b8972b7127ebc713b6635109ece2a84be64782684693a37fd5da84cb8ca3b399123eedad8c21d2456d141be518857b1a5b3dcaf19c276379ebb

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aeexp.dll

MD5 734ce0ca21a11e475b1f789f9f83ae07
SHA1 d694f08c96eb66deb1e435d00413dcd94d44feda
SHA256 63ec9f03ad878f47bcd0a7d2ac3bc7a0221546f067c25ed5a37b0e6d7bdd4a54
SHA512 9a9a98ae5e57304d60a71be364aa08cd8590dbf75729dbda0338708764e48249634848daff64ff530646fbf1dcdf23400f379b9740d491a15bc0061469044ecb

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aesbx.dll

MD5 5588223f927fcad2450efeb0f30b6c32
SHA1 6d7dfd44cbdcbec7dd6f9f7d5b2a182ba71ed437
SHA256 fdf11e6765b3bf134a31163c4403b0354ffae9216671f35257c2a6f0637dd1c4
SHA512 5e031ad0a3bfb8bae37e479b400ecb4c1186b313e7b754c284e9698d4f61427db17a3986404b275f97f82c54807418c87f658c503b8c0859d2c4030db4a819d4

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aevdf.dll

MD5 a5449dd7b470825331731b16bbbeb9f4
SHA1 4e593e77b2bc9594aab81191188b6b6050496c49
SHA256 5b4a04b1596506c5cfd1fb675bd9dca887c41b119525ff6ca7b628c6176e5ed0
SHA512 d55f0d66c7deaa6a0f17036d364aff42ba816cd495a079bdf98346847a710181f210a430ea710ee7a7538ccab0795fa8ce6ffcd67825d3a877a584b255cc1d22

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aescript.dll

MD5 947f8d156f0bf2920a87bfdc7573e0a5
SHA1 0c6b5be1069cc390b5b988daa5d50c5b5dd975d9
SHA256 b2a2a97439c112427b2556868a8808aaf9c9633f937e62866ac9c2ca07bb9802
SHA512 2ac744d803e8ebd0b9d9ebb5bbc17ea70e5fe6cef853ebc03eec16e00b4454c6336115f11d916cc22c8776c2769d1f6dce71a4e7b5c4d95c52a9612666964c29

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aescn.dll

MD5 b9408cb0605437b47bc47074988215af
SHA1 d756499266c3a4ba812f39bcd3d5135c83ddb728
SHA256 72f4ce9a6145c29906005aad509e6e1a5a2b24c86e7c13595bbec2969fc0ccd1
SHA512 fec35431583db738112ead06fc5841d4ea833db24720d7875c41d53261c9cb5ce7a14b8f32b99958d08916286d0d6a8e7615a8cab4775539c058247a85844f91

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aerdl.dll

MD5 3ceaf9a7ef16e39d5087445509994be9
SHA1 a731181fa1f0b22be041a68ff5f427977b030828
SHA256 1807742d7dd2cd1f8c8b6ac027dee79393f6f81fbae3a679f504656757c6055c
SHA512 69009d806906f207f7ca996093e528bf388bb038f3305561723b0a67595629ae9e539d22e2a43715647a47541c7bde94fe3235ecede8439e72cf36c39d8b4516

C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice_mv.dat

MD5 8393044228688728783aa2107fb6b5a0
SHA1 4b24c737712c20a2e588e03c2a9b05992b30481d
SHA256 7658c0cfc1234bf8f8f6d7020b2e7b7d29f8f215618d72189aa048140a4c9106
SHA512 c16f819526cec7927a0bee6fe47a55b5eb7cc7d2ddc069b81a40e57494f1d7068c00306e8e2ee1e162ae8382fb460afbcf02dcbfb870ceba5c93ac0014224990

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aeoffice.dll

MD5 91e019021cb6b30402d97c82af3d22e1
SHA1 3d964c78f9b0b3af5f03186f57b5c619d3da86e8
SHA256 6f72af791b103cd0c90a78bc34b4912ee82ed0cf60ee6466e024918914592422
SHA512 82fe8663a234ac7d0b596adafd0843e866ee55d7f0a93c3c7e7abd9782e0330a4e49087fbe73d82598dcea76f3af26dc1950db962f5c86e046a99ab8824aea74

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_dtoZUI\savapi4-ave2\win32\en\aepack.dll

MD5 e8cce3b8e48b0b3fe93782d00567bf00
SHA1 e42db28f4347fe7abad1d72fe5aa70689612dbd8
SHA256 10ec374f810572d4f52ffe800a77ebe6aa8f5efc3d8b6f86dff000e9be1dce55
SHA512 65e2cb95ecc443dbae5ccf99027b9b1b7e7e654e1115aa12c9518c905273e903ae2ab0997d7f9957e39eab8f808bb975ab5611749487758a1720fb38ce81cee8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000140

MD5 29a37b6532a7acefa7580b826f23f6dd
SHA1 a0f4f3a1c5e159b6e2dadaa6615c5e4eb762479f
SHA256 7a84dd83f4f00cf0723b76a6a56587bdce6d57bd8024cc9c55565a442806cf69
SHA512 a54e2b097ffdaa51d49339bd7d15d6e8770b02603e3c864a13e5945322e28eb2eebc32680c6ddddbad1d9a3001aa02e944b6cef86d4a260db7e4b50f67ac9818

C:\ProgramData\Avast Software\Avast\log\ashshell.log

MD5 5d8461b5059e1ed20f9a799547ed404f
SHA1 b9f5daa3d820a1ef98c1c84962b710e9dfd2aa15
SHA256 37079d8568c97942d6f249af13cd642176c6162faecf74ed8041adb0de35ec08
SHA512 e1c0bb9d31b49cd2efcc9be9a493596f0c672e74f1ecbc03ed22aace034354a9579df6fc0da3544dc8e953e4c90b465c6c143077a8ccfbbf2c1d06e5ca2fa3b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4da4ca0b68ffd4aabf1dddada10acc42
SHA1 2f4e8753905ef0211f6af41565a988185c9120ce
SHA256 04b289c818dcf46302cb145ffe65b45399f2df26c31e48b83252e216f8e00493
SHA512 e75b080f08565657dd48464495b4a17aefba05cda8a21f1b8cdd255c1e269fc68d46c850e1e5d7acdb013acd2437764c5643af3ec186c72a3d839d1519f20c38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 4bc36dd6779003689ad05a6b5fe59977
SHA1 917b3416183bfd2c0491f134cf42aca3285632fa
SHA256 4844b602614e977be81f2802ef7a6e5650e94c59870bbdbecbe5153b3e0437a7
SHA512 4ba7e33f8b1f98eb2fdc6e44e192a1be29737856cfad5b6c6e71e207613447d3a9781667f97479faf632713a13ecb2c16b457824e6532ab434947c558184a24f

C:\ProgramData\TotalAV\data\sdet.jdat

MD5 d832d55991d84269e40bd265baa8e54c
SHA1 e256c3e7966e683f4dcf6fc55e7671ceed9f42a2
SHA256 0464c15970a3559617bc084dad2eb79720c9052fdbc8d4deb674764cd973a245
SHA512 0c0aff57525cb9768b70b3601390dc27a3eb27ef0094e41fd1c504c1c9e48ee11cd7693cd8425dbd1bdaa2dba7665ecbcef500989a3b6675fc46ebe64a1af261

C:\ProgramData\TotalAV\updates\remediation\extract\blacklist\blacklist.json

MD5 fae21c42f689dc3e8303d032d6ddd990
SHA1 299ba4423b50bf6fee2106fd27f629c41efc59ad
SHA256 d700d1fa3edf495cd89e9a6d8121e3878830015d0595e61e96e771c84b9fbdf2
SHA512 b05c6abee83f103ab4d89125dc24bccfae943c75a4a1d8cfcd122aa73d0d27dde93edf5fdfe073e636659e4e69204d7079ce6f99504c659ec759c7d5f3f0597f

C:\ProgramData\TotalAV\updates\remediation\extract\blacklist\blacklistkey.pub

MD5 d15e8c55d0a8a9ac8166c908f2634590
SHA1 0e3bf8d60f1528d492192798435bcc8197026bcd
SHA256 e6dd891f31503c90d204e1534b5979743ba02d0bbc161ddefa88a3c1a9e1a994
SHA512 70a4e16e7fc17530b0455097a1b9f809ac53d0521ae43360239b983028b4f34387f0ad85448206d768f27f9a118ef717c0c1c0bb0e2d9135bc45e87dd1a6d2d1

C:\ProgramData\TotalAV\updates\remediation\extract\remediation-sdk\win32\remediation-sdk_key.pub

MD5 5e3dfe19e73d2b04a25d786b35d936d9
SHA1 a1bfae6c7d80ba6809a401d6540434b96c615514
SHA256 8d3cce758deebaa59c5149037c00e610042c416f790cd6df5c2b8a6021c783f0
SHA512 3105435cd100538b5a0d2f81e00ae5d788d4fb3e45d5529a83f89708565bd483fcd49a936ae9a22daad485dd0675aef39cc1f50512379bb52eed81e37044a3c0

C:\Program Files (x86)\TotalAV\x86\remediation.dll

MD5 f095ec2387b36879648f085257b6572a
SHA1 550b9762dc8b1ed89f01170b390b153d4c9dab0e
SHA256 1648440be5750263890872bc757b9c6cd4f2736047fb6a408ffef4f315f63a68
SHA512 049eb45c4a34d4af7d185304151383c9ad9e361edfc30b65e0aae06ee1fff3a3e580d73b245abcd06757f9bff5e1c65e21cc64fb755953f9da09df8620355dce

C:\Program Files (x86)\TotalAV\x86\remediation.rdf

MD5 b48508a6f921ec6a2ac6db852d8bcf25
SHA1 713f510b997d764e76eec9fcfbeb7de1836fd26e
SHA256 189b427e35092375d0bc953eca63cc1aa2bb3bf67ff7afe8b480cc7743c0ec2c
SHA512 476849449bb67826416daaac1998b14b09cc95ab8336c62e6d35edd9fece8c5276bf83d51fb100f125c5f66a05b3712bf1674180685b814a4b97da9844f09ec6

C:\ProgramData\TotalAV\updates\remediation\extract\remediation-sdk\win32\remediation-sdk_file.list

MD5 2c2c5df6566761d5efa474ca8b943540
SHA1 122ed376371cc16f82fa4f662d2abba79057b2a1
SHA256 aa6dec44fddd6b9b993a6b55730ec5b0d12080035244fdd48de7f0eea7150a13
SHA512 83420a2ee5bfaedaf0fc303f6991bf19becd82ed863b559050bfc2a4a88e9f58b05a68b3fe5b0c8b5fd25419e22065f365f5da7344ebfe09feaba57908001c25

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_k4Zp0P\idx\master.idx

MD5 34b57e0ce7499df600602dcda088fcf5
SHA1 3792a184d5d9e579c79ce7b884fbc6472400ddde
SHA256 ebf3b0dc7164a34587c77a8824c33b78268b216d9325eba9c79c7f0f3c1d34b5
SHA512 1ab0ec8d5ec807f4ab41a9fab9924354ce4099d21e4d36f6a38f653a51a9f13f5a39151398b0746163171ee89e8501319cbf85452ba9ba585c4271b528327982

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 523228d24aef3704a110c0e830d2ac5e
SHA1 18f39fba7b57cd1d16bf1a24b3f643d0963014bb
SHA256 4a7aad7959798ed8fcfb5be01f3731e68f1d7894b3615bc775d222ac13b8986c
SHA512 9077dece825130d3dc1a200f0a834c16bf561eacf32870fc2100f4b3bed27d6ed59d35cde1bcbabba0d13644dab37e35c41834af352ddc4cf06fc0acd256667a

C:\ProgramData\TotalAV\updates\remediation\extract\remediation-sdk\win32\decision_file.list

MD5 56e2f6b462b44bffcb41c24f2b0b0d63
SHA1 d08d187040d84d7a573ff7e22c8a42a7211eaa1c
SHA256 a4f7972f2178e2da13dd0368ccf1ab6fb4f01d5b200fc40d965dc25fb5b6291a
SHA512 b8489722f6968375f7e7333ce77c0d5ece5dbb10d39452ca5d059a0cd65a51ac9ff3832cbee2d48b29f585e428e58d006940521f28e0e1c2d4f744fb8382e770

C:\ProgramData\TotalAV\updates\remediation\extract\remediation-sdk\win32\1.0.2403.1176-1.0.2403.1176-100\decision.lua

MD5 2ddb90958ba363da8d6aee9e359303a9
SHA1 1d8befdd49190e181e0eda04ebfcb0be79286fd8
SHA256 bb98a5655592cc002e62cf80a087c48753af37fa83a97bf3e6fcbfb267ba477a
SHA512 93b29225d019b17bf60a61abf13f4ad0d9866ca536bef4937aab8a2aa6cd3a565f66c9f0b27a056adb1866eeabde7381d236d8103d37b85ba87c7a90e36fec46

C:\ProgramData\TotalAV\updates\remediation\extract\remediation-sdk\win32\1.0.2403.1176-1.0.2403.1176-100\decision.json

MD5 4cb4d10463a46914291a8fcd407771c2
SHA1 4b3838d08edfbf8cdd9e893ed448e64ce94cae50
SHA256 9eb43c9ef44ebdcb1d407b7dd9fc3b2aa4955c2663935ce2315fdbba93ce044b
SHA512 5a33336f7ee68866f4d97b25a7baccbddb4a7a1edfba790ebcf3a3d089dde5c93e452e9f437d0d4336946597dc5ddbedf2b927b2888daa4a92a9bab38bb0c822

C:\ProgramData\TotalAV\updates\remediation\download\remediation-sdk\win32\decision_key.pub.zst

MD5 756400342292cc61ea4de9f7fe79566c
SHA1 291d8af074415fee717dbd67af3a15f2ad341445
SHA256 abc99d629b37faf21441b1cecd172881176e56523fe61b032ffdeba01bb0db91
SHA512 515dc2e542a014ee6f532821acd6df7aa5d38297d104be59df6ff2df670dc10a3701b9e3dd8313b70fc1e2bc2edf0992bde93e2c896af44a2bdf86917d25389b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2d72e5bae0d2e8a177d1ac0d6d1dd886
SHA1 4d7ecae638efa8b142ca253b5b80c94352aa06f7
SHA256 344778dacdf13c428fda528bbbeac563ebe9595c7a422d470789e790d7cacaab
SHA512 df317d982c7bd29f1bbd4aa56e5798ac669cb0f3c5ad49d742452b423f254c13cf3f5431a18e4ea41703c811d7811ba71d57addca1612c2d314a7c9b48706d63

C:\Users\Admin\Downloads\adba8183-4241-402a-bcf8-93bc6a0d42d2.tmp

MD5 48d8f7bbb500af66baa765279ce58045
SHA1 2cdb5fdeee4e9c7bd2e5f744150521963487eb71
SHA256 db0d72bc7d10209f7fa354ec100d57abbb9fe2e57ce72789f5f88257c5d3ebd1
SHA512 aef8aa8e0d16aab35b5cc19487e53583691e4471064bc556a2ee13e94a0546b54a33995739f0fa3c4de6ff4c6abf02014aef3efb0d93ca6847bad2220c3302bd

C:\Program Files (x86)\TotalAV\SAVAPI\HBEDV.KEY

MD5 0b23e8997d9f7981a6303cfc6aa3baa5
SHA1 2f8eaf90e1d655900b950fc7da3556d6f7bab0b9
SHA256 3f5c7a442038cdf2d65b47b238b377a0e562ab13b78aa343815478522ce98789
SHA512 4843c16907addb511e4cdeccfdbee3d6492459fb53122e6ad5a2470d2ff15793148d97d7cac4ae2a8b56e3eed7b4f39e862d5feded0460784c3f349fa67e534e

C:\Program Files (x86)\TotalAV\SAVAPI\winrem.lkey

MD5 10365cc954a14061f175a891947c0a05
SHA1 10e57e220ffb32dd944ef4f3dbc6b58c7cec6bcf
SHA256 c04723867ded6ae5fb8bce73b78a75f26b0d8a4bca0c66aa7a88edbd805b3b40
SHA512 15135235c23cac7480823e1517c9dc91b9e832f5b583e5d4e3c606d99448a87dd341c0ffdf11d3ebde39403767d1e2a485acc2c301026b58e5303b59da75d9a8

C:\ProgramData\TotalAV\updates\remediation\download\remediation-sdk\win32\decision_file.list.zst

MD5 b872fe5c5a515b4c08d30633040cc605
SHA1 e325a77399c9a53d8f2f8e4f122c265138082acf
SHA256 b81739d49f2f875f595c48a22fa0f6ad1b3e6ce55598cdcfc699f76223b1872b
SHA512 d4fa3975e9a930ae485e423a7dd4b24c5bfdbc58758cfec786befcd4e706242634cbec8c7dc79a608f2a344c5e6ee2204191303228798d70bca24dbb06f7d5b4

C:\ProgramData\TotalAV\updates\remediation\download\remediation-sdk\win32\1.0.2403.1176-1.0.2403.1176-100\decision.lua.zst

MD5 1789dc8c571a73de1e4912baf858d8c1
SHA1 0024ca56044f929a38ed2e1eca4da335bded613c
SHA256 740978541ba84a9caae569a94cfde02d0d88f874877ae3141d1bb44c0f115721
SHA512 f1d2576f20a76de24f4e25cce6f139d9b8193d3706d17452a20fa284ad64e06c8ed89d095a588434fe198718d27007d8ffcd3a7f2e9836b5d7f701c7e489edbc

C:\ProgramData\TotalAV\updates\remediation\download\remediation-sdk\win32\1.0.2403.1176-1.0.2403.1176-100\decision.json.zst

MD5 808d75e4b53ec29b6a295e5184697a2e
SHA1 97d1786d0272d1389190470c7d6e93fc96b837f4
SHA256 afcc21ba6055bb634c408e109cccc5c696b2861c7c0f1eae9358a0574d41257d
SHA512 00bba5c3eaa99b01b60fba790a292add68e5b4879c844ec45faafe7325090870be4224fbcd8b74b67626b8dacd324f7e681e6667de6309ef357423d0a0f81db1

C:\ProgramData\TotalAV\updates\remediation\download\remediation-sdk\win32\remediation-sdk_file.list.zst

MD5 270b34fe4a5ef3879c80493f423b8db9
SHA1 29c443b5018a98afae5406a22d4cb2ea3bd1e600
SHA256 ea88e12bda290d65ab89ef12551a8ea98c3f188f0d6bc9197b32a9eca612cbc2
SHA512 d9a77442794260b955e3e8bd4e787d8c6e0afea18d3b7973ea81dd208e94d70bd24a3d2d22a253cf4df914044b8a17a54bed3139d2c664ce15f2cd34a005aeb4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 64be320c556bfd8e00e489d075712449
SHA1 75aa8f2fc07b764243ddd11db84aeb588ebf0340
SHA256 988506931d2c16c8b05c7ca819f20c8003f4d2446bbfddd2f9ad0c503716f079
SHA512 e1aa9240cc07e21d346233c13316fcd82fb1207916be514faba55a7469af913bfee4ce2df0753af1d715c4fec139960bc89457c65e1c98c04df290fb6d1ba87b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 785ce87cb1a046373dc4a2a73f0931c9
SHA1 314dc4fb84b72a16c99526feab775fa7c1327cbd
SHA256 31690c1fe9997bd672c21c210941f5b99ef098cb02e855c9ed03e0697d886c0a
SHA512 ad537b5ca7e1b0427792a935dac17c9b880dae9b0656fa034338b8df31a8177b4c9fbe1bde9ea3d83493fae1d64cd11910dfb795fd8cf86057acad04bf007451

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\225f6cd7-6420-4754-bc4a-c8bd34bd35e4.tmp

MD5 fd49b89bd7ae4e11deb866c25bf8d960
SHA1 565ed379d50353832fbe621543e9f44e3f4e6845
SHA256 0a6df14a51febbc5a51216d5ae945d0d44a74c8ccab55fd74ac00c51c20c5c8c
SHA512 be990f0d842f03c350f99d4080d22fa4af4dcf52b3a576977d5db04bd25075a2d7660ca6fd1c42190235e89256d48d555b4c755740603c48fa9ef46bf1e16f4d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d3d3380cb706cb56dbfabbfb0f356807
SHA1 c9ccbc28e78af17f0b947de8f3f03b5546d75fe4
SHA256 051d492961aee203c6693f9ada782f32f227c5797189f57b5f0bc394e57d55cc
SHA512 98398ac97eb97a7c46d48427591e5b18861b756d537850233623e165bc51b9dc6236e06f9958c5247f51bc1e940ae4f7ff62a22f749a7983fdfa182a9f3868ae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3e88947a95e97224b8b62ad4181b41a2
SHA1 38414806d0584b091b97bb8ceca1af2d2e8ac86e
SHA256 aea80550d4a5c1586d83c6771f71a71dc65a620aec4029d4e1b6fdea9e0ddc20
SHA512 9489c44a725d72fb9a6b771955c23daf26a0067db440051c6974a7eecffbaf4d94e7b29a2faf223e49f004cf4528b22554c73c6d779caa2b09bcec9792663d21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fbb790079cbd627f116f834914f7e76c
SHA1 65cc55b63ffe628f641546fb3570f490bb346804
SHA256 8bcebc62cd0de78daf83a84a3bd18366bd3127a2dc6bb11f606fdb377692f7f2
SHA512 fa437e29b97486a69dc80c7f7f5bed72dbe4fa7a1a8b73b2c6e38feacbacf24e9bea9db39d1a8c17d0333ac8b0e60d95e7b18a9eb860790d6af6d15e08002978

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\blob_storage\bb0ae91f-943a-4ec2-a15e-318315f4b51c\2

MD5 eba07a223ea44e572b5f7fc529f35cd1
SHA1 d98670883ef1443895a6c0462c5fb884b57710bb
SHA256 271e42d4efcacc5a729b85a30b96cf6153ac574875e39079a9519b4c3e1246ff
SHA512 25df6338a77ceec59f016a2365d4817a0720d68a3bd916bb9f2fa3d20fc4230a620d661f3c13e9f68cd06e2002b80674cc7f2e72a8dab44284b653fb75fd2b50

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000153

MD5 5df0cf8b8aa7e56884f71da3720fb2c6
SHA1 0610e911ade5d666a45b41f771903170af58a05a
SHA256 dd396a3f66ad728660023cb116235f3cb1c35d679a155b08ec6a9ccaf966c360
SHA512 724ce5e285c0ec68464c39292be62b80124909e98a6f1cd4a8ddee9de24b9583112012200bf10261354de478d77a5844cb843673235db3f704a307976164669a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5d8d74f4a23fccea7b25cbc96cb04d87
SHA1 5d13138fab4a959cdd17e8d129ab19a1a8c2e91e
SHA256 a1921336461c2704bc2db315afd134de760543363e9e3e1a0ec323ca3e70c335
SHA512 2894a8c1b7ba15ce82282b3c26742c15a725a9244b24e2d75d125596d6e7c0a5109bc0bfbc9404e5df5ac9d97a6b3533b4a667b05b8d6610929d72593a302f03

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 3fe534aa06eec0590e265f2bfff47eab
SHA1 dd169a64672a586840f59deb6acb115bd142a5c8
SHA256 d808819f5428b0ecf11b8f0a4cfd541f1483815f3f57cad05d5d742ec934f52c
SHA512 128aa13041235bbeada876c3700520b2d5e048788e86b7f76119a651a3063f4792ad5ec88f81d4110d4478aabc8aa592994b11cdf4af91f5432e81e4cb201c44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 699ffc89bd11f60ecb3cb19b50f7926f
SHA1 4e0e63e33c2910a78bec1cdeb0c46730fac569f0
SHA256 c7c242f7336ae8ace35f169b50aee176b60397deb804ff6565ddba0ef1e5e0c2
SHA512 97d7cd750591ca59ce66fafe30955a9a98d4f62217fef0cdfd4ba7446e2bbd2941f2fde19a6ec35a20f55c52c43f2e7c0565239c0094edeb51b97689fddc9501

C:\Users\Admin\AppData\Local\Temp\aut8A24.tmp

MD5 f9a9b17c831721033458d59bf69f45b6
SHA1 472313a8a15aca343cf669cfc61a9ae65279e06b
SHA256 9276d1bb2cd48fdf46161deaf7ad4b0dbcef9655d462584e104bd3f2a8c944ce
SHA512 653a5c77ada9c4b80b64ae5183bc43102b32db75272d84be9201150af7f80d96a96ab68042a17f68551f60a39053f529bee0ec527e20ab5c1d6c100a504feda8

C:\ProgramData\Windows\winit.exe

MD5 03a781bb33a21a742be31deb053221f3
SHA1 3951c17d7cadfc4450c40b05adeeb9df8d4fb578
SHA256 e95fc3e7ed9ec61ba7214cc3fe5d869e2ee22abbeac3052501813bb2b6dde210
SHA512 010a599491a8819be6bd6e8ba3f2198d8f8d668b6f18edda4408a890a2769e251b3515d510926a1479cc1fa011b15eba660d97deccd6e1fb4f2d277a5d062d45

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7ed1277f4d0c1a692cd7007db6957c00
SHA1 67adc2509bc5c58079cfe2b15fe8f6003dd26fc6
SHA256 cf5bd978b1279d06007e3374ede74735732b64c6d30192527b06ea6fb55435f0
SHA512 63595fb0373da85b1b758f64b4eac218453c9cce6c04e1ae7e852efd9f62be1337b76b7921e604c6e0fe4f013f57ff3a41e37f1f16da663993d50901fd3e1b6e

C:\ProgramData\Microsoft\Intel\taskhost.exe

MD5 c5ec8996fc800325262f5d066f5d61c9
SHA1 95f8e486960d1ddbec88be92ef71cb03a3643291
SHA256 892e0afefca9c88d43bdd1beea0f09faadef618af0226e7cd1acdb47e871a0db
SHA512 4721692047759aea6cb6e5c6abf72602c356ab826326779e126cda329fa3f7e4c468bdb651bb664cc7638a23fca77bc2d006a3fe0794badc09d6643d738e885a

C:\Windows\Temp\AV-2136-1-0

MD5 3cf6bf0e0a27f3665edd6362d137e4cc
SHA1 2016dd5e17331495901299eae9a5db48ccc8956f
SHA256 1985b85bb44be6c6eaf35e02ef11e23a890e809b8ec2e53210a4ad5a85b26c70
SHA512 72182dd7ce5fdaec8a79b65626e98f38eb8e74fa6129de08d54b3bb80867019b594082e2d9e583a788d81e69c12f7c6cd993d7d74a196bab72e68400c61e244f

C:\Windows\Temp\AV-2136-1-1

MD5 0188fce753516183a41c4d146e337778
SHA1 eb0f5324e8dd08a181d4bdfc1d90543077b2ee67
SHA256 ee4449bccf826cbc56c13087d54a1a69fd42464d437ce8f355ac6afb61df6829
SHA512 b3aafc9a80eec37556f4e60ab23579dd7d42c060b3ca2064d6d0c16901b54500503750868bef651a01401551551e372ac9fd459029c5d0efdd2aa385384916fc

C:\Windows\Temp\AV-2136-1-2

MD5 94e5a7efb85dcace1cb62132e0e973c6
SHA1 929a1f63d23e765eceb0650c974ef1995ed03225
SHA256 70a18d0210384320e6e907f321a829a35ecce4f3dd5db15da64e1dbf55b99353
SHA512 c7cb7765e0aea7ec0c9a7bd3763c23568c9d7e127aa132169f1c0870e0940b0df23919cac138c28f380f512686bc6d0ea4e4774d5013ba1dc391b24c7697c2fd

C:\Windows\Temp\AV-2136-1-3

MD5 c8f4c82b2cbe02d7797dd6568533ae5a
SHA1 92893bf95436d087b55ad3bc1ab6b8a349adc2d3
SHA256 5948907df4a4782d5954499b65ab011e257fc5775f81e0b8b4dea6fa10e6fcc5
SHA512 151ef56eb99cd29e02dd04b2dc19284597df2feedba1e1fbb6bbdf65f5f66fd2f9caffc48057ac1cb684270739ecddff6098b9b97b80ecfb98e277917f174c96

C:\Users\Admin\Downloads\Unconfirmed 258535.crdownload

MD5 c850f942ccf6e45230169cc4bd9eb5c8
SHA1 51c647e2b150e781bd1910cac4061a2cee1daf89
SHA256 86e0eac8c5ce70c4b839ef18af5231b5f92e292b81e440193cdbdc7ed108049f
SHA512 2b3890241b8c8690aab0aed347daa778aba20f29f76e8b79b02953b6252324317520b91ea60d3ef73e42ad403f7a6e0e3f2a057799f21ed447dae7096b2f47d9

C:\Windows\Temp\AV-2136-1-4

MD5 3fba3e1f5db1e26ac862340aa2682c0b
SHA1 335fd824cba95d96f02cb5e7914e50cfabb40c55
SHA256 4885949a4c4b1837b81ed2e4040f3420381fb57865144444c58b2a57d39152db
SHA512 87d2787b4bcdc9caa3af95c4e85d0731ed7c3a70e0c1855efc159bbdbad5c69d1b8684bbf6087631b14334ddc69c6013a56b4ce5c00756b4588da771b60455b2