Malware Analysis Report

2024-09-23 11:14

Sample ID 240615-e3pynayfrb
Target You-are-an-idiot.zip
SHA256 47dca4e070081df4b70053c858a851dbd720845d4ac579eb5e7334a44ffa16c7
Tags
bootkit discovery evasion persistence spyware stealer trojan
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

47dca4e070081df4b70053c858a851dbd720845d4ac579eb5e7334a44ffa16c7

Threat Level: Known bad

The file You-are-an-idiot.zip was found to be: Known bad.

Malicious Activity Summary

bootkit discovery evasion persistence spyware stealer trojan

Suspicious use of NtCreateProcessExOtherParentProcess

Sets service image path in registry

Downloads MZ/PE file

Drops file in Drivers directory

Loads dropped DLL

Windows security modification

Executes dropped EXE

Reads user/profile data of web browsers

Registers COM server for autorun

Writes to the Master Boot Record (MBR)

Checks for any installed AV software in registry

Adds Run key to start application

Checks installed software on the system

Drops file in System32 directory

Drops file in Program Files directory

Drops file in Windows directory

Enumerates physical storage devices

Unsigned PE

Suspicious use of FindShellTrayWindow

Suspicious behavior: GetForegroundWindowSpam

Modifies registry class

Checks processor information in registry

Modifies Internet Explorer settings

Enumerates system info in registry

Suspicious behavior: EnumeratesProcesses

NTFS ADS

Suspicious use of SendNotifyMessage

Modifies data under HKEY_USERS

Suspicious behavior: AddClipboardFormatListener

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Suspicious behavior: LoadsDriver

Suspicious use of SetWindowsHookEx

Uses Task Scheduler COM API

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Checks SCSI registry key(s)

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Reported

2024-06-15 04:28

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-15 04:28

Reported

2024-06-15 04:40

Platform

win11-20240508-en

Max time kernel

737s

Max time network

709s

Command Line

C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\You-are-an-idiot.zip

Signatures

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133628998588026690" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3360 wrote to memory of 108 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 108 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 1464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2760 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2760 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3360 wrote to memory of 2512 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Windows\Explorer.exe

C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\You-are-an-idiot.zip

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ffcc4dcab58,0x7ffcc4dcab68,0x7ffcc4dcab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1720 --field-trial-handle=1816,i,5066285089980716103,10392401078225995171,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1816,i,5066285089980716103,10392401078225995171,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2188 --field-trial-handle=1816,i,5066285089980716103,10392401078225995171,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3084 --field-trial-handle=1816,i,5066285089980716103,10392401078225995171,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3152 --field-trial-handle=1816,i,5066285089980716103,10392401078225995171,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4228 --field-trial-handle=1816,i,5066285089980716103,10392401078225995171,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4508 --field-trial-handle=1816,i,5066285089980716103,10392401078225995171,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4732 --field-trial-handle=1816,i,5066285089980716103,10392401078225995171,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4180 --field-trial-handle=1816,i,5066285089980716103,10392401078225995171,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4808 --field-trial-handle=1816,i,5066285089980716103,10392401078225995171,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3396 --field-trial-handle=1816,i,5066285089980716103,10392401078225995171,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4908 --field-trial-handle=1816,i,5066285089980716103,10392401078225995171,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3440 --field-trial-handle=1816,i,5066285089980716103,10392401078225995171,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1776 --field-trial-handle=1816,i,5066285089980716103,10392401078225995171,131072 /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 clients2.google.com udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.4.4:53 google.com udp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 8.8.8.8:53 clients2.google.com udp
US 8.8.8.8:53 clients2.google.com udp
US 8.8.8.8:53 clients2.google.com udp
US 8.8.8.8:53 clients2.google.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 beacons.gvt2.com udp
US 8.8.8.8:53 clients2.google.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp

Files

\??\pipe\crashpad_3360_BJKARTNPNTLRNKRE

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 8da98de6d5d5ef4dd830343b45632200
SHA1 a4f9064f762693108173a332ff730b55dbfa71eb
SHA256 a5ac309f31f49cf23ec2bfca81aca0a64d047bba3c34348941b34abcf494d723
SHA512 24e54f5de9d8337a5b5c6634822cd1ddaf8e5f70f5740f9870fc2451381f56080679032ae25d7917f163836ea5e1e512a42cc780511933bf6703f99101c2684f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ea98c807736aecd5c8c9f3362b3c76a6
SHA1 f8cebd94620222848034111e6bd10489bf975710
SHA256 b548310bbb7b123ab85d05ddace815c840137fbc7baa9415390c43ae556de1fe
SHA512 fb2807aab33e29e39c27ed6f2e4f8c3fe4ea563395a17eedf56443e1cd5129126dd28a8a214a1a9e910bff6aeffb1519000ca5d6339a1e97b3f36bf8eb16d900

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 46d40676455eb1e588122ad8e132dcca
SHA1 9f79a05ca8d46c10a68ae5c2d6168e7781661c7f
SHA256 3ae316a723dd7bdceab4f69818c0b619ee63669cdcd9cff10e5b2985cb1e6b74
SHA512 6b1339d6c78dc42efdb50535824b7d389aadb150e020cf4dc67be02f45a70b17a5d8c0d996de12c84a17297839f29f6b36a02d858916694d52dc26edba305acc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 b980dc617f4469757e18a75fc5e13dbe
SHA1 967d2b8bf15f9cb00d7f64285c49becc0a80fd65
SHA256 e2c461658f81d21c720785017dbf155db26963253765b50e6b9adc469e281c24
SHA512 e02a9997167d53b5331319ca4178fe331a62e358ed6b735853a3f312f09f4c1ae75a0501db3f08d0eaa8dd39413d9a8dc7fc7dadf907c1735e16d3d9f3be4fa5

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-15 04:28

Reported

2024-06-15 04:40

Platform

win11-20240611-en

Max time kernel

648s

Max time network

647s

Command Line

cmd /c C:\Users\Admin\AppData\Local\Temp\Flash.swf

Signatures

Suspicious use of NtCreateProcessExOtherParentProcess

Description Indicator Process Target
PID 1060 created 9184 N/A C:\Program Files\Avast Software\Avast\avDump.exe C:\Program Files\Avast Software\Avast\wsc_proxy.exe

Downloads MZ/PE file

Drops file in Drivers directory

Description Indicator Process Target
File created C:\Windows\system32\drivers\asw59b551ba7400517e.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswec940801839d6b8f.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswca9bedf9fcef888a.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswbidsdriver.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswArPot.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswStm.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswVmm.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswd0d5b225318f52e8.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswNetHub.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswSnx.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswec940801839d6b8f.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw8302531a32b2b086.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\asw6409908c4eee9023.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswVmm.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw7b7f554e0172b43c.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw59b551ba7400517e.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswca9bedf9fcef888a.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswElam.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\asw6b3bd85ffff00744.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswe193c4ab69812660.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswbuniv.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswa4e68db52615a7a4.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\asw8302531a32b2b086.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw6409908c4eee9023.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw2efb8bbee888ca1d.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswRdr2.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswRvrt.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswSP.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswa877f0f8f604382c.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswbidsh.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswfd3cab53dd8b5b35.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswfe81d8de74954330.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswKbd.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswbidsdriver.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswStm.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswe193c4ab69812660.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswArDisk.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswbuniv.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswa4e68db52615a7a4.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\asw2efb8bbee888ca1d.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswSnx.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswArPot.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswKbd.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswd0d5b225318f52e8.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\asw7b7f554e0172b43c.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswMonFlt.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswfe81d8de74954330.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswa877f0f8f604382c.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswNetHub.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswRvrt.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswa05601313788da95.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw6b3bd85ffff00744.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswfd3cab53dd8b5b35.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswElam.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswSP.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswMonFlt.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswbidsh.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswa05601313788da95.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswArDisk.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswRdr2.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\drivers\aswSnx.sys C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A

Sets service image path in registry

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswRdr\ImagePath = "system32\\drivers\\aswRdr2.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswElam\ImagePath = "system32\\drivers\\aswElam.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbidsh\ImagePath = "system32\\drivers\\aswbidsh.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswSnx\ImagePath = "system32\\drivers\\aswSnx.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswArDisk\ImagePath = "system32\\drivers\\aswArDisk.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswNetHub\ImagePath = "system32\\drivers\\aswNetHub.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswMonFlt\ImagePath = "system32\\drivers\\aswMonFlt.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswStm\ImagePath = "system32\\drivers\\aswStm.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbidsdriver\ImagePath = "system32\\drivers\\aswbidsdriver.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswArPot\ImagePath = "system32\\drivers\\aswArPot.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswKbd\ImagePath = "system32\\drivers\\aswKbd.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswRvrt\ImagePath = "system32\\drivers\\aswRvrt.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswSP\ImagePath = "system32\\drivers\\aswSP.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbuniv\ImagePath = "system32\\drivers\\aswbuniv.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswVmm\ImagePath = "system32\\drivers\\aswVmm.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
N/A N/A C:\Windows\Temp\asw.fbfd292fe45274b4\avast_free_antivirus_setup_online_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe N/A
N/A N/A C:\Users\Public\Documents\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe N/A
N/A N/A C:\Users\Public\Documents\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\sbr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\avDump.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe N/A
N/A N/A C:\Users\Public\Documents\aswOfferTool.exe N/A
N/A N/A C:\Users\Public\Documents\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
N/A N/A N/A N/A

Reads user/profile data of web browsers

spyware stealer

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32\ThreadingModel = "Both" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32\ = "C:\\Program Files\\Avast Software\\Avast\\aswAMSI.dll" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32\ThreadingModel = "Both" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ReleaseName = "C:\\Program Files\\Avast Software\\Avast\\ashShell.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ThreadingModel = "Apartment" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32\ = "C:\\Program Files\\Avast Software\\Avast\\aswAMSI.dll" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32 C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ = "C:\\Program Files\\Avast Software\\Avast\\ashShell.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32\ = "C:\\Program Files\\Avast Software\\Avast\\asOutExt.dll" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A

Windows security modification

evasion trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\SECURITY CENTER\PROVIDER\AV\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\AvRepair = "\"C:\\Program Files\\Avast Software\\Avast\\setup\\instup.exe\" /instop:repair /wait" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A

Checks for any installed AV software in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\PassiveMode C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\SetupFolder C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Languages C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\SelfDefense C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\LicenseFile C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Languages C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\UseRegistry C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\LicenseFile C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common\InstallTime C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\SetupFolder = "C:\\Program Files\\Avast Software\\Avast\\setup" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\MicroUpdates = 3300310037003d00310037003100380034003200360031003400340000003400330039003d00310037003100380034003200360031003400340000003400390034003d00310037003100380034003200360031003400340000003500320038003d00310037003100380034003200360031003400340000003700330034003d00310037003100380034003200360031003400340000003700360032003d00310037003100380034003200360031003400340000000000 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ChestFolder C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\MovedFolder C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\UseRegistry C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\MicroUpdates C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\SetupFolder C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Languages C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ChestFolder C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\TempFolder C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\SetupLog C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast\properties\settings C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\Version C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\Version C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\SelfDefense\SelfDefense C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast\properties C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\SetupLog C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ProgramFolder C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\ C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\TempFolder C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\EmUpdateBurgerEvents C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\CertificateFile C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\PassiveMode C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\MovedFolder C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Languages C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\SetupLog C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ReportFolder C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\FwDataFolder C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Languages\Engine = "1033" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\CrashGuard C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\FwDataFolder C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\IDP C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\CrashGuardProcessWatcherExclusions C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\Avira\Antivirus C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\ C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ReportFolder C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\LastAppliedPatchId C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\UseRegistry C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\FwDataFolder C:\Program Files\Avast Software\Avast\SetupInf.exe N/A

Checks installed software on the system

discovery

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.fbfd292fe45274b4\avast_free_antivirus_setup_online_x64.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\asw85812656caffa63d.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Windows\system32\asw85812656caffa63d.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Program Files\Avast Software\Avast\SetupInf.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Avast Software\Avast\defs\24061317\db_el.dat.sum C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-conio-l1-1-0.dll.sum C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\Licenses\aswbe4a929930491cd4.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswb5858be0dbb2ce47.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\api-ms-win-core-errorhandling-l1-1-0.dll.sum C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\x86\RegSvr.exe C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\Setup\29dc3b37-896a-41c2-b8b8-4d7dfaa39688 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswd821be5cb9cc5891.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\msvcp140_codecvt_ids.dll C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24061317\aswHds.dll C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24061317\db_tx.dat.sum C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created \??\c:\program files\avast software\avast\setup\57ee7125-ce31-4ecd-b636-02226ac9f44b\avast5.ini.171842614400004 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24061317\asw363fd24d6c0a796b.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw7502f494f9366655.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\aswdca6353532bdcd36.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw61f658469ceecd70.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24061317\ArPot.dll.sum C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24061317\db_str.nmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\event_manager.dll C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswRdr2.sys.sum C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24061317\asw44a957e029453834.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24061317\aswe6265bc21259e9a2.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswSnx.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\x86\aswbde98cec3d3655ca.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\Licenses\asw4a0a37a73ab2be9b.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24061317\aswbb0463d048c6372c.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24061317\aswe34e9ecd17565aac.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\asw2a75ecd86c209d49.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\aswidpm.dll C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswbidsh.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswd0599a009dbddfd7.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\Setup\be414a13-ae30-4ec4-8aec-d5486e6fd754\939FCC52A506AC288462DBF67B2585D4.rmt C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
File created C:\Program Files\Avast Software\Avast\RescueDisk\aswa0e0a28079cd56ca.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\x86\aswe44f90fb7998a259.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\x86\asw8b0c2f446d5c7c9c.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24061317\db_java.sig.sum C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\asw30f9fa3ea58e9bb7.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24061317\asw646baf98656babfe.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\RescueDisk\aswc1e64f8f04658e7f.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswb52a68e78f988dd0.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\aswCmnBS.dll C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\aswProperty.dll C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll.sum C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\msvcp140_atomic_wait.dll C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\asw25ad3fdc23e1045f.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\asw3211c03b22c74c4e.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\asw224ca4f277b55320.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\aswbbff5ae131313cfd.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\asw0847edefda4e8dde.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24061317\db_w6.sig C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\vcruntime140.dll C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\asw1f800e703acbe0e4.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\TuneupSmartScan.dll.sum C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\api-ms-win-core-profile-l1-1-0.dll C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswVmm.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24061317\asw6f48f96f7abf8923.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\Licenses\aswac4a6cb90afa2687.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24061317\db_dyna.map C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\Licenses\asw43fa1632b527312c.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\nos.dll.sum C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\aswf3a806d9fabd62b8.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\aswec72f3e7f17ebd93.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw95d34c9c8bf1b86c.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswbidsh.sys C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\ELAMBKUP\asw6070bf67633eda9e.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
File opened for modification C:\Windows\ELAMBKUP\asw6070bf67633eda9e.tmp C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\Temp\asw.fbfd292fe45274b4\avast_free_antivirus_setup_online_x64.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Windows\Temp\asw.fbfd292fe45274b4\avast_free_antivirus_setup_online_x64.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\Temp\asw.fbfd292fe45274b4\avast_free_antivirus_setup_online_x64.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\Bios C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BiosReleaseDate C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Validation\{3C5422B3-D1E2-449E-A736-809C934C2F80} C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Validation C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Validation\{3C5422B3-D1E2-449E-A736-809C934C2F80} C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Validation C:\Program Files\Avast Software\Avast\RegSvr.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133628995539624976" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: aswAMSI.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: mfc140.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\asOutExt64.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_UpdateSetup_Syncer = "21" C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "File downloaded: ais_gen_protobuf_x64-7d3.vpx" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: db_bank.dat" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: crts.cat" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\custody.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Installing kernel driver: aswSP" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: ais_dll_eng_x64" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: proximanova-bold.otf" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: libwaapi.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: gaming_hook.exe" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: aswLog.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: api-ms-win-core-interlocked-l1-1-0.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_UpdateSetup_Syncer = "58" C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "File downloaded: ais_dll_eng-887.vpx" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: BrowserCleanup.ini" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: firefox_pass.exe" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: aswStm.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Syncer = "24" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: RobotoCondensed-Regular.ttf" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: api-ms-win-core-localization-l1-2-0.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\avastconfigfile\shell\open\command C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Main = "45" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: aswPEShell.exe" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\setup\\Inf\\aswBoot.exe" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\x86\\aswSZB.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_UpdateSetup_Syncer = "93" C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: log.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\x86\\avast.vc140.mfc" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Installing kernel driver: aswVmm" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Avast.AsOutExt.1 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Calling named action: AcsSaveHardwareId" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: wa_3rd_party_host_32.exe" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Syncer = "2" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Syncer = "14" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: ais_gen_tools" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: dnd_helper.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: intel_asm.txt" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F64B349A-BD50-415F-9F99-72E00C161493}\TypeLib\ = "{EDDBDEA4-5C07-453F-BE8C-81D738984381}" C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F64B349A-BD50-415F-9F99-72E00C161493}\TypeLib\ = "{EDDBDEA4-5C07-453F-BE8C-81D738984381}" C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_UpdateSetup_Syncer = "60" C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: fwAux.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\setup\\Inf\\x64\\aswbdiska.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Windows\\system32\\drivers\\aswbdiskx.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\setup\\iplugins-*.vpx" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Syncer = "22" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "File downloaded: ais_cmp_rescuedisk_x64-8d4.vpx" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: db_js.nmp" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: aswpsic.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Replacing files" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\avastconfigfile\ = "avast! config file" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Syncer = "8" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: aswRunDll.exe" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Main = "33" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\AhAScr.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Avast.AsOutExt\CurVer\ = "Avast.AsOutExt.1" C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "File downloaded: ais_gen_crt_x64-834.vpx" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: ArPotEx64.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: ashBase.dll" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Windows\\system32\\drivers\\aswbidsdriverx.sys" C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Kiwi X.rar:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\Temp\asw.fbfd292fe45274b4\avast_free_antivirus_setup_online_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.fbfd292fe45274b4\avast_free_antivirus_setup_online_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\avDump.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\avDump.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
N/A N/A C:\Windows\Temp\asw.fbfd292fe45274b4\avast_free_antivirus_setup_online_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\sbr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3556 wrote to memory of 1004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 2256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 4976 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 4976 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3556 wrote to memory of 1972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Windows\system32\cmd.exe

cmd /c C:\Users\Admin\AppData\Local\Temp\Flash.swf

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ff9d662ab58,0x7ff9d662ab68,0x7ff9d662ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1600 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2184 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3064 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3220 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3516 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4408 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4352 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4488 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4456 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4936 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe" --reenable-autoupdates --system-level

C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x7ff72eadae48,0x7ff72eadae58,0x7ff72eadae68

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4800 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=2780 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5100 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=4932 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3252 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5128 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=3204 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=5304 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=5180 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=5432 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=4384 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5696 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=3300 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3372 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4516 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=5536 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=5808 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=3340 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5964 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6000 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\VideoLAN\VLC\vlc.exe

"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\Kiwi X.rar"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5688 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4956 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5852 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe

"C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6132 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=6400 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=6644 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6660 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6876 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Windows\Temp\asw.fbfd292fe45274b4\avast_free_antivirus_setup_online_x64.exe

"C:\Windows\Temp\asw.fbfd292fe45274b4\avast_free_antivirus_setup_online_x64.exe" /cookie:mmm_ava_012_999_z8f_m:dlid_FAV-PPC /ga_clientid:6222f2d6-fb4e-43dc-995e-250f0fa19559 /edat_dir:C:\Windows\Temp\asw.fbfd292fe45274b4

C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe

"C:\Windows\Temp\asw.752327387a3ce6ac\instup.exe" /sfx:lite /sfxstorage:C:\Windows\Temp\asw.752327387a3ce6ac /edition:1 /prod:ais /stub_context:feba86e6-c05a-4f88-94c0-5617ac1eee97:9897680 /guid:21dfe533-df70-44e6-9f28-74f106251ca8 /ga_clientid:6222f2d6-fb4e-43dc-995e-250f0fa19559 /cookie:mmm_ava_012_999_z8f_m:dlid_FAV-PPC /ga_clientid:6222f2d6-fb4e-43dc-995e-250f0fa19559 /edat_dir:C:\Windows\Temp\asw.fbfd292fe45274b4

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5580 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe

"C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\instup.exe" /sfx /sfxstorage:C:\Windows\Temp\asw.752327387a3ce6ac /edition:1 /prod:ais /stub_context:feba86e6-c05a-4f88-94c0-5617ac1eee97:9897680 /guid:21dfe533-df70-44e6-9f28-74f106251ca8 /ga_clientid:6222f2d6-fb4e-43dc-995e-250f0fa19559 /cookie:mmm_ava_012_999_z8f_m:dlid_FAV-PPC /edat_dir:C:\Windows\Temp\asw.fbfd292fe45274b4 /online_installer

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=4856 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe

"C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe" -checkGToolbar -elevated

C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe

"C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe" /check_secure_browser

C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe

"C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe" -checkChrome -elevated

C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe

"C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe" -checkChromeReactivation -elevated -bc=AVFC

C:\Users\Public\Documents\aswOfferTool.exe

"C:\Users\Public\Documents\aswOfferTool.exe" -checkChromeReactivation -bc=AVFC

C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe

"C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe" -checkChromeReactivation -elevated -bc=AVFC

C:\Users\Public\Documents\aswOfferTool.exe

"C:\Users\Public\Documents\aswOfferTool.exe" -checkChromeReactivation -bc=AVFC

C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe

"C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\aswOfferTool.exe" -checkChrome -elevated

C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\sbr.exe

"C:\Windows\Temp\asw.752327387a3ce6ac\New_180517e4\sbr.exe" 5088 "Avast Antivirus setup" "Avast Antivirus is being installed. Do not shut down your computer!"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=5752 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=5112 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=5772 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4932 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:8

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswRdr2.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswHwid.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswVmm.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswRvrt.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /elaminst C:\Windows\system32\drivers\aswElam.sys

C:\Program Files\Avast Software\Avast\AvEmUpdate.exe

"C:\Program Files\Avast Software\Avast\AvEmUpdate.exe" /installer /reg

C:\Program Files\Avast Software\Avast\AvEmUpdate.exe

"C:\Program Files\Avast Software\Avast\AvEmUpdate.exe" /installer1

C:\Program Files\Avast Software\Avast\x86\RegSvr.exe

"C:\Program Files\Avast Software\Avast\x86\RegSvr.exe" "C:\Program Files\Avast Software\Avast\x86\aswAMSI.dll"

C:\Program Files\Avast Software\Avast\RegSvr.exe

"C:\Program Files\Avast Software\Avast\RegSvr.exe" "C:\Program Files\Avast Software\Avast\aswAMSI.dll"

C:\Program Files\Avast Software\Avast\x86\RegSvr.exe

"C:\Program Files\Avast Software\Avast\x86\RegSvr.exe" "C:\Program Files\Avast Software\Avast\x86\asOutExt.dll"

C:\Program Files\Avast Software\Avast\RegSvr.exe

"C:\Program Files\Avast Software\Avast\RegSvr.exe" "C:\Program Files\Avast Software\Avast\asOutExt.dll"

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" /install

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /catinstall:"C:\Program Files\Avast Software\Avast\setup\crts.cat" /basename:pkg_{af98c830-4f53-4176-a7b0-ec21fc603adc}.cat /crtid:D9D1E63123760F5EE0F69B6613E0933E9CBCAB11

C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe

"C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe" /skip_uptime /skip_remediations

C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe

"C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe" /prepare_definitions_folder

C:\Program Files\Avast Software\Avast\wsc_proxy.exe

"C:\Program Files\Avast Software\Avast\wsc_proxy.exe" /svc /register /ppl_svc

C:\Program Files\Avast Software\Avast\avDump.exe

"C:\Program Files\Avast Software\Avast\avDump.exe" --pid 9184 --exception_ptr 000000AA8F7EE790 --thread_id 9188 --dump_level 0 --handle_data 1 --dump_file "C:\ProgramData\Avast Software\Avast\log\unp311129252140711694x-manual.mdmp" --comment "Cause: VectoredExceptionHandler Exception: sd is not loaded" --min_interval 60

C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe

"C:\Program Files\Avast Software\Avast\defs\24061317\engsup.exe" /get_latest_ga_client_id /get_latest_landingpageid_cookie /get_latest_pagedownloadid_cookie /get_latest_trpar

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=1452 --field-trial-handle=1820,i,2114666985254322280,3959499363340520221,131072 /prefetch:1

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /0

Network

Country Destination Domain Proto
US 52.111.227.13:443 tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
N/A 224.0.0.251:5353 udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com tcp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com udp
GB 142.250.180.3:443 id.google.com tcp
GB 142.250.180.3:443 id.google.com udp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 172.217.169.22:443 i.ytimg.com udp
GB 142.250.200.2:443 googleads.g.doubleclick.net tcp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 142.250.180.10:443 jnn-pa.googleapis.com tcp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
GB 142.250.180.10:443 jnn-pa.googleapis.com udp
GB 142.250.179.238:443 play.google.com udp
US 104.26.7.147:443 wearedevs.net tcp
US 104.26.7.147:443 wearedevs.net tcp
US 104.26.7.147:443 wearedevs.net udp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
US 216.239.32.36:443 region1.analytics.google.com tcp
BE 108.177.15.157:443 stats.g.doubleclick.net tcp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
BE 108.177.15.157:443 stats.g.doubleclick.net udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
GB 172.217.16.225:443 lh3.googleusercontent.com udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 157.15.177.108.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 240.197.17.2.in-addr.arpa udp
US 8.8.8.8:53 cdnwrd2.com udp
US 172.67.166.253:443 cdnwrd2.com tcp
US 172.67.166.253:443 cdnwrd2.com tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 253.166.67.172.in-addr.arpa udp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 www.avast.com udp
BE 104.90.25.153:443 www.avast.com tcp
US 8.8.8.8:53 6.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 static3.avast.com udp
US 104.19.178.52:443 cdn.cookielaw.org tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
BE 92.123.52.22:443 static3.avast.com tcp
BE 92.123.52.22:443 static3.avast.com tcp
BE 92.123.52.22:443 static3.avast.com tcp
BE 92.123.52.22:443 static3.avast.com tcp
BE 92.123.52.22:443 static3.avast.com tcp
BE 92.123.52.22:443 static3.avast.com tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
US 8.8.8.8:53 s.go-mpulse.net udp
US 8.8.8.8:53 assets.adobedtm.com udp
BE 104.90.24.133:443 s.go-mpulse.net tcp
SE 23.34.232.228:443 assets.adobedtm.com tcp
BE 92.123.52.22:443 static3.avast.com tcp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 172.64.155.119:443 geolocation.onetrust.com tcp
US 8.8.8.8:53 153.25.90.104.in-addr.arpa udp
US 8.8.8.8:53 52.178.19.104.in-addr.arpa udp
US 8.8.8.8:53 22.52.123.92.in-addr.arpa udp
US 8.8.8.8:53 133.24.90.104.in-addr.arpa udp
US 8.8.8.8:53 228.232.34.23.in-addr.arpa udp
US 8.8.8.8:53 119.155.64.172.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
NL 20.50.2.44:443 mstatic.avast.com tcp
DE 18.66.102.106:443 static.hotjar.com tcp
IE 52.30.36.54:443 dpm.demdex.net tcp
BE 104.90.25.237:443 www.nortonlifelock.com tcp
US 8.8.8.8:53 c.go-mpulse.net udp
BE 104.90.24.133:443 c.go-mpulse.net tcp
US 8.8.8.8:53 script.hotjar.com udp
DE 13.32.27.19:443 script.hotjar.com tcp
US 8.8.8.8:53 symantec.demdex.net udp
US 8.8.8.8:53 cm.everesttech.net udp
IE 52.19.228.126:443 symantec.demdex.net tcp
IE 54.171.207.123:443 cm.everesttech.net tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 104.17.209.240:443 znb3hblkjhhpwrz9k-gendigital.siteintercept.qualtrics.com tcp
US 8.8.8.8:53 oms.avast.com udp
US 8.8.8.8:53 106.102.66.18.in-addr.arpa udp
US 8.8.8.8:53 44.2.50.20.in-addr.arpa udp
US 8.8.8.8:53 54.36.30.52.in-addr.arpa udp
US 8.8.8.8:53 237.25.90.104.in-addr.arpa udp
US 8.8.8.8:53 19.27.32.13.in-addr.arpa udp
US 8.8.8.8:53 126.228.19.52.in-addr.arpa udp
US 8.8.8.8:53 123.207.171.54.in-addr.arpa udp
IE 66.235.152.156:443 oms.avast.com tcp
SE 2.21.97.16:443 trial-eum-clienttons-s.akamaihd.net tcp
IE 2.18.24.24:443 x5s5cjyccimbqztndg6q-pekf17-b46b6c42f-clientnsv4-s.akamaihd.net tcp
IE 2.18.24.9:443 x5s5cjyccimbqztndg6q-pekf17-b46b6c42f-clientnsv4-s.akamaihd.net tcp
SE 2.21.97.16:443 trial-eum-clienttons-s.akamaihd.net tcp
US 8.8.8.8:53 240.209.17.104.in-addr.arpa udp
US 8.8.8.8:53 156.152.235.66.in-addr.arpa udp
US 8.8.8.8:53 24.24.18.2.in-addr.arpa udp
US 8.8.8.8:53 16.97.21.2.in-addr.arpa udp
US 8.8.8.8:53 9.24.18.2.in-addr.arpa udp
US 8.8.8.8:53 privacyportal-de.onetrust.com udp
GB 87.248.114.12:443 s.yimg.com tcp
US 34.117.39.58:443 www.upsellit.com tcp
US 204.79.197.237:443 bat.bing.com tcp
GB 216.58.204.70:443 4711400.fls.doubleclick.net tcp
US 172.64.155.119:443 privacyportal-de.onetrust.com tcp
GB 163.70.147.23:443 connect.facebook.net tcp
US 34.117.223.223:443 analytics.ff.avast.com tcp
GB 216.58.212.206:443 ampcid.google.com tcp
BE 108.177.15.157:443 stats.g.doubleclick.net udp
GB 87.248.114.12:443 s.yimg.com tcp
GB 216.58.204.70:443 4711400.fls.doubleclick.net udp
GB 163.70.147.23:443 connect.facebook.net udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 70.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 23.147.70.163.in-addr.arpa udp
US 8.8.8.8:53 223.223.117.34.in-addr.arpa udp
US 8.8.8.8:53 206.212.58.216.in-addr.arpa udp
GB 163.70.147.35:443 www.facebook.com tcp
GB 163.70.147.35:443 www.facebook.com tcp
US 34.117.223.223:443 analytics.ff.avast.com udp
GB 163.70.147.35:443 www.facebook.com udp
GB 23.49.162.37:443 bits.avcdn.net tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 iavs9x.u.avcdn.net udp
US 34.117.223.223:80 v7event.stats.avast.com tcp
SE 184.31.15.81:443 iavs9x.u.avcdn.net tcp
GB 216.58.213.14:80 www.google-analytics.com tcp
SE 184.31.15.81:443 iavs9x.u.avcdn.net tcp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
GB 142.250.178.14:443 google.com tcp
SE 184.31.15.81:443 iavs9x.u.avcdn.net tcp
SE 184.31.15.81:443 iavs9x.u.avcdn.net tcp
SE 184.31.15.81:443 iavs9x.u.avcdn.net tcp
SE 184.31.15.81:80 iavs9x.u.avcdn.net tcp
GB 142.250.187.196:443 www.google.com udp
BE 104.90.24.133:443 684dd327.akstat.io udp
GB 216.58.213.14:80 www.google-analytics.com tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
GB 142.250.179.238:443 play.google.com udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 shepherd.ff.avast.com udp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 8.8.8.8:53 h4305360.iavs9x.u.avast.com udp
US 8.8.8.8:53 h4305360.iavs9x.u.avast.com udp
US 8.8.8.8:53 l2983942.iavs9x.u.avast.com udp
US 8.8.8.8:53 l4691727.iavs9x.u.avast.com udp
US 8.8.8.8:53 p1043812.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 y9830512.iavs9x.u.avast.com udp
US 8.8.8.8:53 h4305360.iavs9x.u.avast.com udp
US 8.8.8.8:53 h4305360.iavs9x.u.avast.com udp
US 8.8.8.8:53 l2983942.iavs9x.u.avast.com udp
US 8.8.8.8:53 l4691727.iavs9x.u.avast.com udp
US 8.8.8.8:53 p1043812.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 y9830512.iavs9x.u.avast.com udp
SE 184.31.15.81:80 y9830512.iavs9x.u.avast.com tcp
SE 184.31.15.81:80 y9830512.iavs9x.u.avast.com tcp
SE 184.31.15.81:80 y9830512.iavs9x.u.avast.com tcp
SE 184.31.15.81:80 y9830512.iavs9x.u.avast.com tcp
SE 184.31.15.81:80 y9830512.iavs9x.u.avast.com tcp
SE 184.31.15.81:80 y9830512.iavs9x.u.avast.com tcp
SE 184.31.15.81:80 y9830512.iavs9x.u.avast.com tcp
SE 184.31.15.81:80 y9830512.iavs9x.u.avast.com tcp
SE 184.31.15.81:80 y9830512.iavs9x.u.avast.com tcp
SE 184.31.15.81:80 y9830512.iavs9x.u.avast.com tcp
US 8.8.8.8:53 c3978047.iavs9x.u.avast.com udp
US 8.8.8.8:53 c3978047.iavs9x.u.avast.com udp
US 8.8.8.8:53 l4691727.iavs9x.u.avast.com udp
US 8.8.8.8:53 p9854759.iavs9x.u.avast.com udp
US 8.8.8.8:53 r3802239.iavs9x.u.avast.com udp
US 8.8.8.8:53 r9319236.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 c3978047.iavs9x.u.avast.com udp
US 8.8.8.8:53 c3978047.iavs9x.u.avast.com udp
US 8.8.8.8:53 l4691727.iavs9x.u.avast.com udp
US 8.8.8.8:53 p9854759.iavs9x.u.avast.com udp
US 8.8.8.8:53 r3802239.iavs9x.u.avast.com udp
US 8.8.8.8:53 r9319236.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
US 8.8.8.8:53 b7210692.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 b7210692.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 c3978047.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 p9854759.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 r3802239.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 r9319236.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 s-vps18tiny.avcdn.net udp
US 8.8.8.8:53 b7210692.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 b7210692.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 c3978047.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 p9854759.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 r3802239.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 r9319236.vps18tiny.u.avcdn.net udp
US 8.8.8.8:53 s-vps18tiny.avcdn.net udp
US 8.8.8.8:53 51.15.31.184.in-addr.arpa udp
SE 184.31.15.48:80 r9319236.vps18tiny.u.avcdn.net tcp
SE 184.31.15.48:80 r9319236.vps18tiny.u.avcdn.net tcp
SE 184.31.15.48:80 r9319236.vps18tiny.u.avcdn.net tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 8.8.8.8:53 48.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 34.117.223.223:443 v7event.stats.avast.com tcp
US 34.117.223.223:443 v7event.stats.avast.com tcp
US 8.8.8.8:53 ssl.google-analytics.com udp
GB 172.217.169.72:443 ssl.google-analytics.com tcp
US 8.8.8.8:53 ipm.avcdn.net udp
US 8.8.8.8:53 ipm.avcdn.net udp
US 34.111.24.1:443 ipm.avcdn.net tcp
US 8.8.8.8:53 ipmcdn.avast.com udp
US 8.8.8.8:53 ssl.google-analytics.com udp
US 8.8.8.8:53 analytics.ff.avast.com udp
US 34.117.223.223:443 analytics.ff.avast.com tcp
US 8.8.8.8:53 ipmcdn.avast.com udp
GB 172.217.169.72:443 ssl.google-analytics.com tcp
GB 2.22.15.85:443 ipmcdn.avast.com tcp
US 8.8.8.8:53 1.24.111.34.in-addr.arpa udp
US 8.8.8.8:53 72.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 85.15.22.2.in-addr.arpa udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 34.117.223.223:443 v7event.stats.avast.com tcp
SE 184.31.15.48:80 r9319236.vps18tiny.u.avcdn.net tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
FR 195.35.49.171:443 pixelprowesy.online tcp
FR 195.35.49.171:443 pixelprowesy.online udp
US 8.8.8.8:53 171.49.35.195.in-addr.arpa udp
US 8.8.8.8:53 gametryn.online udp
GB 142.250.178.10:443 content-autofill.googleapis.com udp
FR 195.35.49.171:443 gametryn.online tcp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
US 104.21.49.187:443 arly.sendytrao.online tcp
US 104.21.49.187:443 arly.sendytrao.online tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
US 8.8.8.8:53 187.49.21.104.in-addr.arpa udp
US 8.8.8.8:53 use.fontawesome.com udp
US 8.8.8.8:53 d266key948fg17.cloudfront.net udp
US 172.67.142.245:443 use.fontawesome.com tcp
US 151.101.194.217:443 browser.sentry-cdn.com tcp
US 13.224.194.4:443 d266key948fg17.cloudfront.net tcp
US 13.224.194.4:443 d266key948fg17.cloudfront.net tcp
US 8.8.8.8:53 ajax.googleapis.com udp
US 13.224.194.4:443 d266key948fg17.cloudfront.net tcp
US 8.8.8.8:53 d9cshxmf0qazr.cloudfront.net udp
US 8.8.8.8:53 i.ibb.co udp
GB 172.217.169.42:443 ajax.googleapis.com tcp
US 18.244.20.24:443 d9cshxmf0qazr.cloudfront.net tcp
FR 162.19.58.156:443 i.ibb.co tcp
FR 162.19.58.156:443 i.ibb.co tcp
US 8.8.8.8:53 217.194.101.151.in-addr.arpa udp
US 8.8.8.8:53 245.142.67.172.in-addr.arpa udp
US 8.8.8.8:53 4.194.224.13.in-addr.arpa udp
US 8.8.8.8:53 42.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 24.20.244.18.in-addr.arpa udp
US 8.8.8.8:53 156.58.19.162.in-addr.arpa udp
US 172.67.142.245:443 use.fontawesome.com udp
DE 18.245.62.164:443 dst36t2kjn7gi.cloudfront.net tcp
DE 18.245.62.164:443 dst36t2kjn7gi.cloudfront.net tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
US 162.0.235.66:443 allfile.club tcp
US 162.0.235.66:443 allfile.club tcp
US 162.0.235.66:443 allfile.club tcp
US 162.0.235.66:443 allfile.club tcp
US 162.0.235.66:443 allfile.club tcp
US 104.21.49.187:443 arly.sendytrao.online udp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
US 34.120.195.249:443 o425163.ingest.sentry.io tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r9319236.iavs9x.u.avast.com tcp
SE 184.31.15.48:80 r9319236.vps18tiny.u.avcdn.net tcp
SE 184.31.15.48:80 r9319236.vps18tiny.u.avcdn.net tcp
SE 184.31.15.48:80 r9319236.vps18tiny.u.avcdn.net tcp
SE 184.31.15.48:80 r9319236.vps18tiny.u.avcdn.net tcp
US 8.8.8.8:53 beacons2.gvt2.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
GB 216.58.213.3:443 beacons3.gvt2.com tcp
MX 142.251.34.35:443 beacons2.gvt2.com tcp
GB 216.58.213.3:443 beacons3.gvt2.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
MX 142.251.34.35:443 beacons2.gvt2.com udp
US 8.8.8.8:53 3.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 35.34.251.142.in-addr.arpa udp
GB 142.250.178.14:443 google.com udp
US 8.8.8.8:53 ip-info.ff.avast.com udp
US 34.149.149.62:443 ip-info.ff.avast.com tcp
US 8.8.8.8:53 emupdate.avcdn.net udp
US 8.8.8.8:53 emupdate.avcdn.net udp
SE 184.31.15.40:80 emupdate.avcdn.net tcp
US 34.117.223.223:443 v7event.stats.avast.com tcp
SE 184.31.15.40:443 emupdate.avcdn.net tcp
US 8.8.8.8:53 62.149.149.34.in-addr.arpa udp
US 8.8.8.8:53 40.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 uupdate.avast.com udp
SE 184.31.15.98:80 uupdate.avast.com tcp
US 8.8.8.8:53 yesno.ff.avast.com udp
US 8.8.8.8:53 98.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
SE 23.34.233.8:80 honzik.avcdn.net tcp
US 8.8.8.8:53 8.233.34.23.in-addr.arpa udp
US 8.8.8.8:53 s-overseer.avcdn.net udp
SE 184.31.15.56:443 s-overseer.avcdn.net tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 google-analytics.com udp
GB 216.58.213.4:443 google-analytics.com tcp
US 8.8.8.8:53 4.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 34.117.223.223:443 v7.stats.avast.com tcp
US 34.117.223.223:80 v7.stats.avast.com tcp
GB 216.58.213.14:80 www.google-analytics.com tcp
GB 172.217.169.42:443 ajax.googleapis.com udp
US 8.8.8.8:53 d2lmlpk6xgu7kg.cloudfront.net udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
DE 13.32.23.180:443 d2lmlpk6xgu7kg.cloudfront.net tcp
DE 13.32.23.180:443 d2lmlpk6xgu7kg.cloudfront.net tcp
DE 13.32.23.180:443 d2lmlpk6xgu7kg.cloudfront.net tcp
DE 13.32.23.180:443 d2lmlpk6xgu7kg.cloudfront.net tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
DE 13.32.23.180:443 d2lmlpk6xgu7kg.cloudfront.net tcp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 8.8.8.8:53 180.23.32.13.in-addr.arpa udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
GB 2.18.66.72:443 tcp
US 8.8.8.8:53 browser.pipe.aria.microsoft.com udp
US 20.189.173.26:443 browser.pipe.aria.microsoft.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
US 8.8.8.8:53 26.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 222.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 67.31.126.40.in-addr.arpa udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
MX 142.251.34.35:443 beacons2.gvt2.com udp
US 8.8.8.8:53 beacons2.gvt2.com udp
US 216.239.36.117:443 beacons2.gvt2.com udp
US 8.8.8.8:53 117.36.239.216.in-addr.arpa udp

Files

\??\pipe\crashpad_3556_VXFXDVJUBSDBJHHI

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 b032f4cde0bd4ce97cf8d3b6e476741a
SHA1 dbee60064c95b84cda73a05fb44a83803d20137b
SHA256 e5f101481c6758a95a4a7064c9d279ccba2ef73932ca7e2c0a6aadf601a62b01
SHA512 d02ad6bbf0b2329d2c617a1c365b2bc28f6df27296bf54be1727382fbac6a8997896cb33d1c7141aab427202816c388fe2638749ad6005307340e47719591234

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fade1e094bf743d63eff53a7373d6495
SHA1 890c892ba2a8d98078d7f8044e6c5f39651a1ded
SHA256 7a2d3f2011e05db07fbaea716dd8c250ad98c346ebb38553543053f1c52d726d
SHA512 b1af1e4e26183618a54228bd2283683b4e81953978761cbb65b895c1b50ab1c5e8738581212a4a78f81d2da27aad079fd44c5002f206673a6e67c284e26761c4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1a4da351a161e4fd3cea70c7ad75e278
SHA1 8beaaa5c2f463c1852bfb5e0e38904e158f010fd
SHA256 3280d7fb0ad9ffe292e294735aab91d303d1726f0d689f249457a905d093daeb
SHA512 511bb7549721d3d3b22836a93115bc879f36cfa6c0b071249fc91c60287dfd3ca4d6ae2f1e35245b7aa6e8f4041c8ccc8857214c5c8b0eb53eb27b9bba209ac8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 f69fda10d985a713492e204f031f7540
SHA1 4f8c89cc2dc3b1b7e6c199fab7d4cd6cfe10d8f3
SHA256 9d7b20d00d74b2d35e61ed678babe76d225927bbb5f27d4612ef741088f7f5a0
SHA512 304f1cc158261b2c84de3a2342a84b840ad783a7c03ce1f13369c55d7e9c09f2ceb2ed8ba513cdded7e83ec245ab1f33715df26f2aec5317f810f441ccaf2068

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c58c7a18726b4fa3d7c24d9b33031ab1
SHA1 e923d8498a4ac30ec7e5356934385dd997e3a49e
SHA256 5fd831e1345a26b935cb349090c9d5bf98da806fcb161b85cf790cf1b440c4f3
SHA512 977140923df23cd837a932da5668e6aacc2d81a549c7b4151ac711aa66d3686e8dc26aad734907b06b45d832337fea6e80e406762413e0dff623a304b0b336e4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f2cdc4e7eb07c6971b88dd87dbee8d71
SHA1 0d8a5836bb13c6cc41c6bf99dcf9cbc7a42cf6df
SHA256 db11215d3cf87e54e9451e7f24f6e9b44abd808e591356b1b8bc89aee4e47803
SHA512 85d7d29e8e8fa54ad310e05d9561fb952e50295fe0b2fcc712223c5654bad37dc3eb805a3d3a1feba93be44a170a947c67d6fcd9442f6fd9fcb37e6a23e80d2d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

MD5 f0c27286e196d0cb18681b58dfda5b37
SHA1 9539ba7e5e8f9cc453327ca251fe59be35edc20b
SHA256 7a6878398886e4c70cf3e9cec688dc852a1f1465feb9f461ff1f238b608d0127
SHA512 336333d29cd4f885e7758de9094b2defb8c9e1eb917cb55ff8c4627b903efb6a0b31dcda6005939ef2a604d014fe6c2acda7c8c802907e219739cf6dab96475b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

MD5 dd242f4737b2737ecad98bc2028b544a
SHA1 065a4e6f50f16e5986df7f582d4839e59c4338a4
SHA256 cc8950f8d690094464d97041d919cab9ec3af790437c6e3febb754e245171cd6
SHA512 b393c7f0da53d9ae875743cb564b223b2031767844db1de296b6e652492bc29f8e19bae002b66e987c00b11009ac7df0bff7a36d661f7846e8bd8c9a0957a272

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a

MD5 1e259d0493dff83f2a292a696ad45ad6
SHA1 02d45e6367ca25d645ef905f82b44ade26d0baa9
SHA256 07a0546e9e850348df152a5d94c30c3c27453b52ab6b8d14b582e669c42bb2f0
SHA512 750118a4c88fa708c0fc9aec78cbd5db2e08bdd8ee7e40c0e32cf92628a39eb374a23ddc112319e974c8510f869e46cbcb0b4cdaa68e6e074b8b7f71b0348b8c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 46e399a5b18c7ba8f2d2e296f65ac7c3
SHA1 34656f8989a0cb33721e0dca6a9fb43c12a183b6
SHA256 59aa3d2225b8b5ddf14472b70bff43c29948386aada70c9d5d15a9a7ce092f05
SHA512 b75c48a788055dc5a2e16b5ab568a377bcf6feb8cc7828b63ba58f12a9fd3f7dcde81b015f70fd83926447c4623346bc3aeef64dce7359cb46460d94024c98d5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5a1a40.TMP

MD5 4a9ff33067ceda8c16fc576b958b8fc4
SHA1 6d462809f0db3dee26ac803b236e5783c2aa3a24
SHA256 96168e955fbae2f515527d1d8f8c29aec99a42e2a56bc91eb35f8cb73f6d8982
SHA512 bfe5f70959ed70ba70cf0a24769cdf57140468bbaf024cb6266bec40925a53cba74d1005e024e06d581946cadae873850714dc3d921edb1aa24a843489d340d1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 94275bde03760c160b707ba8806ef545
SHA1 aad8d87b0796de7baca00ab000b2b12a26427859
SHA256 c58cb79fa4a9ade48ed821dd9f98957b0adfda7c2d267e3d07951c2d371aa968
SHA512 2aabd49bc9f0ed3a5c690773f48a92dbbbd60264090a0db2fe0f166f8c20c767a74d1e1d7cc6a46c34cfbd1587ddb565e791d494cd0d2ca375ab8cc11cd8f930

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 eb4e2ba571ec0db7fb9b109682e707ef
SHA1 db98fb4e74330231c9dc7cd9ccea8575d38d7784
SHA256 89badcaf7bc993861bceafc46049893888302a631f6903bbdc17fd8de98ad6fe
SHA512 fa29f28fa6e692b7b01fd91a7e576ff22f391270c860427aca74de8c442782367f11fd67a965dd95b71d011793b88f55bd80facf266ca23b5f755f1be82ef696

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 24979cfd3d52f17f9ac4573d13759613
SHA1 c063d542ed944161d74e77c5cdeaa7c36d45ef8f
SHA256 01c679507d430bc550b65dd41faa4b4d10ab8f0c11d4f387a9c44078706cde6c
SHA512 2a13aff740502853de73520c42acea8413eab3f6597e62b0419013f0d6486687b606b64b98d6ba7b5afc63644b6c351e69f52aa72917a683a5138160ff6c8540

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7c11718b0c96775d679c8bf364a29f19
SHA1 6bc345e850a68b6c1a4f9174eaf7ea891a885846
SHA256 b027f6102d005f8a875fd744b77d8e26be942ab32cd9c1fdc0e1125adaaa6dda
SHA512 5c8587648a11a7a98f1032041f8b5cc5eca98402630a1a8ee22aab47dfa0ec7c7eac905b0e2a0a539fad584b9d339ce812c1e3f926bfe5da68f03cdd1a0b6017

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 98d7af85f36e150b1e1680c888e48274
SHA1 d8295907baa1ea1b8a8baba889fa929f2e6d0a97
SHA256 59f3047d6cb13f56ffc02fa0501edefb000d7a69557636318e9adba21320bc8f
SHA512 26e718514cad216a25d818e6badc74ef77998c99c63651fbe77bb92c2e59561c0e25f463f6cef73b24cf24c81072ff288c2e5f07429720ad8645ba97c3712a06

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c

MD5 be676a6820a16101eed8dfe9bc39211d
SHA1 84a68584fffc1863f604984161abefe9ddd727c0
SHA256 49e7c48f632a33abfebbf881e504a833abc8b5cf87d7be4dfa9b5b3cc86749ae
SHA512 3ef3fa135bd1ea25660d9b3e3cd0995d1f542d608302e99bacc22640cc7045700391f001f5ba43c4bf89597b8058d533282e92f934b6bfb746c9f2940b96af32

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 53329718ad736b4441b2b8889de89c9f
SHA1 34b80f97dd0e2acd56ffb6ce78a6fcb8a66d9a1b
SHA256 9060e049fdfff4d517389c842b89c03b04032d96c4cc6e0d090707599cc6c981
SHA512 bc5b1475be90b26bac77e9f6b040cf3375b49253077160ac58db85ffff9d345feca7ade63f69142f72b1bf4f222c78ae6b1900f6e1ee25e44a7b297bf51ba31f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 9166185da8431096358b23eaa92ccea9
SHA1 b4b5c59d37af5578b990f939fcf38a6a156f30dd
SHA256 86e9bed4d621496af046fb32ce43aa2c6a18c441954ac56ad6dde5945eb2909e
SHA512 a467bf1f2fdae4a3aa060119b8e1fd3c16312657f7657295d9ffe84e42e7ad23d3e573a3c925e86b997f768f57ee1ac0208d00e9991b1eaf45c4579a24155a6d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 b5a71b9b3f443c439a414ad350bd2b46
SHA1 af8a5038e910a2093e26d48d1c894fc2d81e40e1
SHA256 3df864596c88f1f56db142114ddfaf862f2aa6efb603354442a663da814697e1
SHA512 1ca67fb8c618c13b8dc9ca32c19634360829d3dfcceba10cc5986509a0431a6d3277334e85c29b8f41e6f7f36f3821fdbbc5ade39772512f6df3d0cc3d187df7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5a7e3a.TMP

MD5 e299a77b63f7833d7c3e58b4d5d7cf54
SHA1 f741fe29966e51edc8b2110d4d164582f0f21f08
SHA256 5d463d79ce87e26e85f4e6a2a544af4924a2b73a744295280523e1c7b0f5302a
SHA512 e0fe9342f661e974b4aba09238b2e39a1d49357358dc21478d0692733f5d0cb213d5b56ae7a5e56834a72927c545a439f03d57028a5a2d881679b65d2c4feac0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 98e3e641a601f73c0a769cfdeee55fd2
SHA1 7db7688ef130a7f5ef99d80b5f58518896eb9b74
SHA256 5900b8d8c61ac82b35547f722ef87e7caa5650df289018582cd2bd9a76a53df2
SHA512 30f68b54bda17854ac98283985556b92fcf829e9170fb8de729ff856f7f63cb43f078e330f6c9242ccc2e2976a2fa2e820281c089d6af7bc44b22e6f81a15d3b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 05f0ff9348cfa8e3cc3823e2f306bc1a
SHA1 4f00f5adb066a3f9d550ec508baadadc1692e0f7
SHA256 a7f1f428d2d36f3d9dd9663de9394aea9de3057d2d58afded6bee7d5217d4cb2
SHA512 eb8a634898df40ffd66ac5d70db66a9a8dd22c32d5074b0429ee60c1dd88d92af2cdccb32d4f1c06820825a6c4f81ae66288c9e584ce7c51b5923089a095b03b

C:\Users\Admin\Downloads\Kiwi X.rar:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 40fa7bdf235daa2926e1da99a59c80db
SHA1 d356d6f0df2e8351584d80e310464d0c52dd9878
SHA256 5e4f3d229b1e93a96cf28f56e90903b81f4a5fb7851a5d4328704fcc3446c505
SHA512 0aef404a88114cd3baa803cf44d420188e0b69bea6ac3e1e487ee6d03b86c9a3a0971d23c894d25e531dbc8a1c319a4eb972c826506be0a063040615b7def6f3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 f5bc387f0aa780a744b61dbfc5f01ed0
SHA1 df041321a38575395db32ec5ef1f9b7e772f5516
SHA256 8236c33910ff004584e0504ff5b973f3b1299de55620ee1ba556c5aac58f12de
SHA512 c65fafc2649e151bacd3d361f83a04e69126ce27bdbbf40a0fe35e938a650bff7b927f8308f1f9d33ac4925fbc27576c588a98c9adc830398ba0731366a4242d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 87e8378170e54bed37ffa341a225eaf5
SHA1 bd2add3824b37d0f9c6a4777be0df711173592fc
SHA256 abc6df86335e42dd663f6fa3f80d6744f91c1ac13e27640bf54f51e7ed94fc4a
SHA512 4a43e64ef1581ec7b93c347e2a1225059b3036b2fc241384bbdf74c04b1f0eec5165a838aec40514cc5c7f8c8a47e41531866e1d9f0df17097cfa7d85fc24c66

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 8abdfd24565016b61136bd43f056c428
SHA1 af9ebb38f524fd235d8f707de2cc4e6fa5775413
SHA256 d82e71da6ed64afdaf88e29799dae7d05c4c8e7717e3afda7275fd1ab2e2cdde
SHA512 a576f3bdf018f90390efd1a895ac33e3cad7bedcce67d3528090c918c028972552b695ec7499e9b28ff1e7c0df14b06599ddee6eec77d3874bcf02a847431152

C:\Users\Admin\Downloads\Kiwi X.rar

MD5 0aa7defe6f32e1e2e024f62f72178af6
SHA1 d8d318688cbc73faac2adfd8609e110997ee2c68
SHA256 a693fff41c4e738cfa6b7f0e9bcf51ae341b276b81189fa698f0c0ede4a8a54e
SHA512 c8e0760d60495a2a9e8e7762132cdeba8ba535effbb58fdfc26fa3fb9b13404f92b7af85b54a185157b43bd5411d2d626048983f02b50cbf9610ce8aad570802

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f90be479dace021d3f43d64dc8ec6a0e
SHA1 30327525a58c9a19579d535a6dc6dcb23422ab06
SHA256 272d5ebdaddc586e30be09bf2d49c8d0bb2ae22c207da700e0742903d5d5e296
SHA512 56b893a65ed7db978dbf121c2f107a04bef3c19a590eb11613cf87abb2d7ce51f85cc2954bb68d09f89bbb712229ae3eb3ac5eece183f6566a44be8fae124e2c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 ad2a2e228207a355ba5bc5e7a123b7a4
SHA1 e39999284a2dbf6d730227e50e2062d38f3ba6fc
SHA256 31aca9485fd74ffa4f194fdaf85e4590fc52a2aa019b41835e9743c5f8758d80
SHA512 a64a7e87ff4f69ee7da450084fe80ad1c0e4a7cfb4690bfe50feaa960d700134c268406a364f1f6931c65706cf23b679203d78dd80428766d8c6e175f10239a2

memory/3452-719-0x00007FF9DE6E0000-0x00007FF9DE714000-memory.dmp

memory/3452-718-0x00007FF724300000-0x00007FF7243F8000-memory.dmp

memory/3452-720-0x00007FF9C2B40000-0x00007FF9C2DF6000-memory.dmp

memory/3452-721-0x000001D3312E0000-0x000001D332390000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 5734494f30a207e6fb429032e33f5ca6
SHA1 dabda31eeb014066c547d31bca454d0ba27d2d45
SHA256 5ae09f735a808499bf433a65d3a59f47aaf090cc2a82ed3efa2b64cf5b38f145
SHA512 ba92fad664407aa50b2f9a73b9f546f7aa1a06ba333a1d45e5fa7af01defc8164e384cc87aaea62fd4200d41c1b716442e2429adc7a57a30ded57372bbb178cd

C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe:Zone.Identifier

MD5 2a203b11597a0756226d52ea2fc67abd
SHA1 3abcb8ba8503cd7feac5e24152e76a2c706a3dc8
SHA256 304678c4557a8c528b9ce5fe4f1e53c7e00f12a39ca054368b64a31f4b7f3e99
SHA512 c18af29491c07302917e87a656df460b52ab72c2bd79c54369e007f8d0cd62a525fb63f2012caa16ffbbfe962a4dd13c04d364f4bec23a7e0027ec9840588dec

C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe

MD5 c6b5eaf62d5212918186dfad294f20d5
SHA1 a0bf4364ebe948bdd3f1bce37309dc06a97ba8ef
SHA256 7847afe6b8477970d9aefeafd840cf3a0a230611ffda04fb21f39f76a42ee005
SHA512 2838b274ef2e7bf6b4cbd9c5ea071b513934681169e12b7fe2b98619f499a22d25d550a3311e97e62faa26fa6be9adb4aa3884c99dbf6e15e6ae68322a6c594d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a3d977997defc2c87247978ad5d6a4e7
SHA1 b0469bf7961929bb1afc65d0199a0e394284517c
SHA256 04c068048d9e9b6ab6d7211740b51b91937184770643e84b9440513a33899bde
SHA512 fd1d73d064a1abd03facb69be4939338d9371c9d207acaff5a9cca2456025edcb5b08c173d127773463c9f141000b51bd8cc800b9bdf1c38a16685f755b06be3

C:\Windows\Temp\asw.fbfd292fe45274b4\avast_free_antivirus_setup_online_x64.exe

MD5 54aaadc43b9a0a026a86db8d350a2cd3
SHA1 d1b767200495717f9abbd808c3b38079c64be877
SHA256 de1fa4badf89ecf4beedfd8f00f79e145e3f492be540e0964ef7468213a20844
SHA512 1d75da2ad226d1a6e744854a49b05416db10d4ef68ddf0d7d2d93f01b30a28cb84ae2b1a9c9ddc1817781a98409ed9556c02822f57965ab6f8865e3c55c36f3a

C:\Windows\Temp\asw.fbfd292fe45274b4\ecoo.edat

MD5 3f094cf3df1f5a653b1d628560f4e671
SHA1 2e13585105e8ec37fe6a697b3a54b7e454af6164
SHA256 8cce2707781a43c46c49347f2123dd6e28762f58498278070c7c854d66b4d3a5
SHA512 6422b93a6eb32988ad6dc53411b3d5c58496a54f41dc8aaf5d0d5626a28d040f638bf61bc619cc40bc636585f7f62cff6576228b78131b31c9ce9c16cefcab45

C:\Windows\Temp\asw.fbfd292fe45274b4\eref.edat

MD5 de1207ac8ddd43d64a8782678cc6cd94
SHA1 466593275d5dea52a954d2eabb72372ff25f8287
SHA256 e08e51ee637db0cf3c0d49a488677cc010cb5f2915e0d118e7db972a2fed636c
SHA512 5fb2ed3148e7719562c317d8a5bc2ffc0740d2913fdacf0ec755cc9bb71d5e31177f200d8010788d0ec95febd5c24d35d5860bfc51fe4058ee53a5158759cc97

C:\Windows\Temp\asw.752327387a3ce6ac\servers.def

MD5 e76e81467cf59e07920fa8350f262269
SHA1 e0ab1867d50c7d6cf2f35ca00aa94564cde1ef94
SHA256 cd4ca129df4cda34752225d61dc5b810e768bdeb60b0b8fb3fba3826820761c8
SHA512 5b29f1f97e6ef1acc567beb1340d13a07c52d94cc6ae6284650c3e717f137af3db43b84a2904f26e772e524dc8e69cdb86eb8e98e9ec65323769171e0ee35070

C:\Windows\Temp\asw.752327387a3ce6ac\Instup.exe

MD5 4aed041ad383def5407e438fd5597675
SHA1 6a5d6ddeb83b4e6425cc77190b0539b6e5dffbc4
SHA256 1cb887579ece5a1d11832d0543f0b02c338ac8581d54909bc641abe13e294abf
SHA512 4b2c07668565f4a01f4e7f124e1050bd12228dc2547a00add12921b2300a71588387d8c2d3c0de4303222c5ea2e65bfafe2ab342417d2c5ab8ac300c40d5c171

C:\Windows\Temp\asw.752327387a3ce6ac\Instup.dll

MD5 3b6abc970f7227284d87acd2d95c7c5a
SHA1 02b1248aa23cb8aee91b06a9b8b044fa93b469b1
SHA256 ecf706e38e489c6840b68db5b6fdb4687a175ec6c325c8673f27f7cbf01234fa
SHA512 bd06e9599fee8ac872ad6cb5e539a78137daf8b831eb7be3df8bc773d91f9eb4883d01404b7c6724997e6ec1526af213ed1988780c9e40ba98227649ee91a2b1

C:\Windows\Temp\asw.752327387a3ce6ac\config.def

MD5 da59c9092a31f572c882d563c600a34f
SHA1 0ec1cb7f7c16252d637d71e08e9363bfe96a5842
SHA256 563c4f5827c6f7a2a52d4dfe22f03e296751b1667566fe9a5ec4a7981c0f1766
SHA512 ee9ad7259df259dd6d444b6b8b933f2c6d928a3ed1f0de42598d09fdcdb0af2ae3f64dab888d3d5f4443a8b918e596f0ee28ee874fc9dfeeac422c3a9e107924

C:\ProgramData\Avast Software\Persistent Data\Avast\Logs\Setup.log

MD5 0c80cd1a035460c02a2def763ec23bc5
SHA1 85ee1108b5db633288d039531111c945b38454e0
SHA256 35f9240c318f83d2a126c200b868b505011eaf4ede094e5a2fd848e409ddde9b
SHA512 c3ed5549d9981d8a2fcc59ed37355b7e913623e67927441ac67976e5c0ddd30ab61fec82973f5bab03246426469c778605841caf9c1bda441951cf474fe79c97

C:\Windows\Temp\asw.752327387a3ce6ac\config.def

MD5 050e79adbc9adbd975850113c3185680
SHA1 8529eca71c0f7e98ebdafec97aee682c4cdffa46
SHA256 72f910057c25956b7acce8042aee015ec37b960da1b464c186c8a9f44a6e59d7
SHA512 26d1e5c0bfbd4971e02838ba703f6d1131a750366f577fef3f74b2c04b170e8c5f1987060e0b2f6d88b309f722da9a6424cdf44e92baa1cc37185d4829360370

C:\Windows\Temp\asw.752327387a3ce6ac\HTMLayout.dll

MD5 39a20f9d67d6d4bac0ff081c62b13996
SHA1 b5b6b70e943a96a8697f07759245702e026be7e7
SHA256 825288012e4c15035b3d7fdfda396912b83992bf0683f9d2a5d55dfa1306b5a1
SHA512 798f6616b4f07bc75c5833a906735c1cc44d2ac044ceed4119005601e6f0266327ffb4819a44bac49bc0cde8b2ac7a021d098a12da586689de1119914e2032b0

C:\Windows\Temp\asw.752327387a3ce6ac\config.ini

MD5 66520f7d0a3a3384c3337516afbfc196
SHA1 1e5538eacdcf41a019fb34defd9df48c36da189d
SHA256 b6028ec5e7859e488d7b86bfc8247019abd50ce44275348cf443ce108d59fa5b
SHA512 533316f0bbf6ad0999609cb87fce9a24e1257e05a33932c87a9c489b4c19082df28189473bdb7f6995e57b86a402061634cdde3ddb22959112a05b5077019a1a

C:\Windows\Temp\asw.752327387a3ce6ac\servers.def.vpx

MD5 dc5709c442df025a33cb2ca0d22133af
SHA1 5007da1e31f4705932c1f272dd4975b14bef268d
SHA256 6530f71b39a09fec9fdf8f258a488640a2094dba5e4a32cf4aa4670fce805744
SHA512 c6938f9569e943bbc04fe39acdf8e7302b77124b7f1e2ccbb20ec01242238e81b6ab83730393fe61ce716cb1c4e7df064c65bc5ce84540371fcf6a50a615cb6b

C:\Windows\Temp\asw.752327387a3ce6ac\uat64.vpx

MD5 11bb373887fe44e1edea08b70c638095
SHA1 e887149cb489a3aec8092636379ac4c64e389089
SHA256 a2f66db4a802a3aeb977d40a22e399382d8b82da216645defa5b5009602fa358
SHA512 d9933cb1b8258f13b21d3bf6a648ed81de1608663e1166a8eaf1baea60f4bc5017ac218f277beb4e65e6719ca57d2910cd6c268ee8a5f8766c13680e86fba879

C:\Windows\Temp\asw.752327387a3ce6ac\prod-pgm.vpx

MD5 d4f72d1329501105ec7111178ac7c98f
SHA1 17bfc1e8299b43c46b18442b7e74f84953dc6193
SHA256 e2919168247b931b6f7c3274c10e4b68ea9b3a67eeab74347b2ac49bea9b0aa7
SHA512 570ee9fb319cb6a291e57abe5cde166d74b82090f818d145d763ec05810184f4548275f2cc294c4bcf395da1cbe1d138b190292b71ea1ae836004eb391353329

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 79a5683bc4e9eacb52e847b84dc9cb01
SHA1 ade8d65122b0d890ac0d38e8120538fa21d6fe2e
SHA256 1a4aee793d3b0b5449bc82818f288ed5f7712a3072176adf24945573e8ee7250
SHA512 84922cbe9238bbb9584d2127428c2129fce0c0a99abce5b6fc8d0f3c9b2e417990b2ff5647614adc28703d850d9408b4d42f337a89bc6cc0f43402fe03783bb5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4d0ec649c3025887a4cc0d7e1df9c801
SHA1 f7d2cb8e5c954065c66e6005f8223bbb43da381a
SHA256 7e7d935e7866b134db0361b3f6ca4e1fa18dbe38f47e1494b80e33a024141669
SHA512 163a75caa2f2e09fd04ffc0fe049c53096845c64cd8a4e29fe7a468b771f1ae2f14af53f9e3d993578f0c1c86122055ec4000478c94c644d760a03ee7f90a1d9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 91dc838fc413c9b225fedb0d997912b4
SHA1 aa21a7ff8590ad2ef8f9b1ece070e8bbacad80df
SHA256 f2341ef0aa739b595ac301baa9dcb21ac276fc901aee7589b14b077a3630184d
SHA512 3d5d0b356dffe183b1a917b462294d7ec8b5d9dd36cf03152f38c2571c588c52fba599737384e656cb680df00d66ad9fd4198a5d53c679493909de4ac0e57c61

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 694bddba63a6a7801c2bad87b4797745
SHA1 3d8b74ee9fd52a86f05c26324b92e16d548934b1
SHA256 bdef8943d8d188d44be0fabacd9d533e59c8706846ac77864fb8d7f30efa799e
SHA512 10bb3460c9ac87adf34f93a9e16d44385cea55673be2d5afe794eac3eff4a8238d2dfa0450d2555a52eba00dc340abc50a201943f3850ab680e5968dd3d774b8

C:\Windows\Temp\asw.752327387a3ce6ac\avbugreport_x64_ais-a3d.vpx

MD5 dd9112cf8378dd2dcd7da7652ab7ef4f
SHA1 edba0ad6afe5f7d5fef1a68fe6e298285302a205
SHA256 01a5da7bd76821e598dd0c145e402f01968a486ec0289304ecbc01e8e3e3545f
SHA512 a792118766c8aefdda2f3158e3f20235b3d45e2504a8aa131189034a4c1dce36ef304253794bd73eefa9de1b58666422cba7311e93588b6b05340c23c9b24502

C:\Windows\Temp\asw.752327387a3ce6ac\avdump_x64_ais-a3d.vpx

MD5 4dae0714e69b6d570b458d2d464ace66
SHA1 7b87175b6810ba49fff360affcd27b0b1c163899
SHA256 009a8b3c599329995ec197d1c9e5a13ad8bcf0888d6ef434d295b4a7e76ca3e7
SHA512 9c5cb5a9893276cc5bfb5baddcfe6584b78bd0387fc731f0e21f963d8515a42fc77b3b8a25291ab0b09910d72193a191cd3f72a2b0dd92f27c89f5a62251a02e

C:\Windows\Temp\asw.752327387a3ce6ac\offertool_x64_ais-a3d.vpx

MD5 83a59fb227b8146aec13b3e5183da115
SHA1 c0edcf17207414387cbd193503dec8fc3d88bf4c
SHA256 240f009ab1ce95fb23cb1c76f0c944e3acc8567b4198dd6d4de7d8bbf2979919
SHA512 317ac6ea8ea54f32614a3623bff1c0193c072c6ee8d845ab1b23575170fe1e1048f71847a23f4a6ef42e33466bd4c4d8a1fe10a2c7c48410c032287de3992560

C:\Windows\Temp\asw.752327387a3ce6ac\sbr_x64_ais-a3d.vpx

MD5 c137e649a83c0d6e99b40b7244015812
SHA1 6aaa485bec43f485b3863d525a8653d19949e005
SHA256 d54383d72f4ef21f157867ea9164ccdc3d6dd9c8de32a691a86c1f0c5a008f8f
SHA512 c38621980bb82a5fdf509d92167027c67db56c3b3d17c621ef732a98595d50788a4ea934fd19a93787f7d7defadb537036eb0e1464aec8ec1cf8dc6073cae88f

C:\Windows\Temp\asw.752327387a3ce6ac\uat64.dll

MD5 c0719ef096798494a616f84f587282d7
SHA1 ee38158f887bc2189234330c4891f12f9d902d7a
SHA256 ba4d8d0ba809d934004da646ec31a72650dc16e4288404badd761e4bed6a982a
SHA512 7b22ac9c0c2c881674333d325363aa1d378d3b3c75700a7713a7f33b6ee144c43cd209d9fe9ff31a93b329881dc14c873cb2338af4695d44724afd5ddda5d298

C:\Windows\Temp\asw.752327387a3ce6ac\prod-vps.vpx

MD5 febd30cf901c8fe640b98cfaadd1a633
SHA1 aa419a6d759ef6b133d67109047728b98cb31270
SHA256 485c2d46a6b2f6d3401307455f64b30cb8758749dbf5d5fe836b6a738b68a3ef
SHA512 350a675fcfc0f3a6ead858c5feae0b7a81494bf4a6f7181405627b2c580b5ecefb8f926778a65423a76165f0a2677a5535fccaf5374e0beafb9669d66af0f138

C:\Windows\Temp\asw.752327387a3ce6ac\part-jrog2-93.vpx

MD5 12d90335062c671ad47ea706deac815c
SHA1 23eb16bc513813f0cd2ae023863d27d813afded2
SHA256 1f3f4b1e26ab968c05bcb51ecfe48b4b501a32e33301a36ecef26fe2daf0ea8a
SHA512 368ac634f6310ee1f3fdcc3170bd34ac6330219e8c3231ecf09102da0dd4a60add7f9e283874336c49435c2746145ace92503faa75cfdfe89ad3db1202c5040f

C:\Windows\Temp\asw.752327387a3ce6ac\part-vps_windows-24061317.vpx

MD5 c0e5dfce82300127835aba8db5feeba1
SHA1 1fd558a4e3055aadfbc0b871661b4821e7e11659
SHA256 97eb2d0d06f82ac4414549ad2dbc01789fdeb624f773a57d1cf20cd94131bc05
SHA512 3ea70565ea6c6932a2b694cc61ed7da75f40e798075cab4b077573c098bab842f55b2a3b6b9b3972c7bd36eb6dff7a935fe0b48efc52e33f14d057d8eb97323f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 b45d0645ab36ee84799b2e3a7b2d0b33
SHA1 91da2258c14fc819c47d8f743aa7cedfc8563bf5
SHA256 56fd6a6ac8424eab089ba0cf445fa6c8ff7cd49e6eeb6ce0629f55430deba689
SHA512 12eb76cdfa20fdcf64323eaa388d8c39754e6b69fda172822ae4a5d660e1a25fe02a90826cf7e1fdc76e114b401caf6f175d9ab514edbae25dc869a2564d0f09

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

MD5 87c2b09a983584b04a63f3ff44064d64
SHA1 8796d5ef1ad1196309ef582cecef3ab95db27043
SHA256 d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0
SHA512 df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

C:\Windows\Temp\asw.752327387a3ce6ac\config.def

MD5 f283fcedb40cf0cddb1da981a3bf0c4d
SHA1 4cb36841372348fe92e8e5b141eb1f2394a23e1b
SHA256 1b4aae4f9beec6fde3fdda3777d31fae44e8efad0eb5bf9f4c739aaafa6461fc
SHA512 a59c2460f5a4c44af5a7401c775074246a3cb7c653c1b94a39ec2064a6ba43b58a427aef13fd7da6803f6388dfa31c724d97b22c442563ba3faa0958aef55cd8

C:\Users\Public\Documents\gcapi.dll

MD5 3ead47f44293e18d66fb32259904197a
SHA1 e61e88bd81c05d4678aeb2d62c75dee35a25d16b
SHA256 e0d08b9da7e502ad8c75f8be52e9a08a6bcd0c5f98d360704173be33777e4905
SHA512 927a134bdaec1c7c13d11e4044b30f7c45bbb23d5caf1756c2beada6507a69df0a2e6252ec28a913861e4924d1c766704f1036d7fc39c6ddb22e5eb81f3007f0

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 3aa910e9ce02f25625bf0ddba876779e
SHA1 f27cdf2691e1974813855462b829cf1f2ddd50d5
SHA256 50b18d79aac4e0674cbb80b3dc482fb53f4203077fe62c0e53942e68362cf6b1
SHA512 31de84580023e27d95d75d5c336aa5c0283772c8cc24ef1e9ebe255e2eb8562b3c84db5cd1961854187920fd4be6648e369113815f60ff5a59f15abe4b2841ec

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 be6792ce84a9f0c03974152adf624576
SHA1 b6ac302b362f8c7ca65d6bbd87cad6e9fd660f44
SHA256 0bf1c34e5a1fe86d5f957e74ce72f4d3b7a20c96d5b6245fbcee4ff3a99bf6d0
SHA512 37a61d24a288f2c75da060602a0c0d94a1377a2d758df6d60988474ef78c9a600eeeafae370d0559f1509f597636038bfb2ffba3e7cdd2fb7418258e18c83094

C:\Program Files\Avast Software\Avast\setup\ais_cmp_bpc-7e7.vpx

MD5 6a1910c51f39d1d89946615ad7c532f7
SHA1 584530581f5f30d09859d3031595441cf9ddfb04
SHA256 8d5a3de2b259d2c0fb35ad6d424ffa1dc00f890ace85b7c37932aeadb6482359
SHA512 04fb819b28281d28ad0fc97ed3790223232c79de19ae9826254db144ba6f944c811a37c5f9e5ecc0c6e4dd6c283053c59360aa4d9a1023d17ceac94a2a3f5112

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 bf6bea8210d2be5526d19d1957da4590
SHA1 29bc2c56f92e264029341c69754a8967192bd455
SHA256 185ab026507193f863d0e15f64d14ff3eb2e531d9731990faa00500716af68be
SHA512 403b333b01325c307fe8321b608840a39b1045f7343d5352c703a04a0f123fb269f271de8be4eb0ed0ce9a0f1d2a44d6668744b1100419b67c5a515e01170897

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 46e4c99ffb30c75b47d7b626b7f7323a
SHA1 45ef0087e11b9c0b3b6d81bbdcc71baf8e63a241
SHA256 32551a244c249a391b5a10cf192cfa414df6e886ed15ea2882bfa19c3ccab7f6
SHA512 35b1816fe5e0d9854899f0f6782d5c85bb18f180ab32997039644a996546cdfb141390c643a1870a3928292fb240703297e729b3e9fd2123e068c7f72f364fb5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000054

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Program Files\Avast Software\Avast\setup\ais_cmp_swhealth_x64-8d4.vpx

MD5 63713e127d1db078cd9c69045db065f7
SHA1 e9a96cb8c66fb2ef15d577ee7c2d7bab08a1d8cf
SHA256 772bb40198db4b836386b8344e2dfc226b4faa3ad3b942a0796a4e018fb61ea1
SHA512 0993ad0b8c878b888e077d7fdf38932b733d273dd4762b0375e8685574698f91cdaeca9e62d358a7bb9eb1c9a5a70e9b8f42b17343beba96c3f804109d822f26

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 684824ae2d19d8544db43bbc842ea89b
SHA1 9b10e10533a3c22b6009869e59f95a122fbebd66
SHA256 0c3cd1bdf4612f24d5cb2b5ee54227e0f2edb646d526835d68dda913ee0b48a6
SHA512 9ecd29f3261e71c86d8af6d413d60a3d051943ef55c9854ff15c68006f4d3255df9cf0027dc6be8ed9955f95bbabfa0e132fe4bff49639172f7476b1f6bbaf41

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 60ae7b557bbe284964d71c0410751796
SHA1 88689236914d9e00f02b79e2df464b67baafeb0a
SHA256 9a9e836ce58cbf2fa6fcb029c001170cdb000ee7f921c0c3ceca1f94c77fb523
SHA512 47dce39b5df9d49fc67f75d6f91bf4e14c118cf76d8bc0d8248a6c7f97fb0ef8397dd178b50aad7822833428e881f1657f69a0dd45a05486a98500586c4f0c39

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 0247b5c3f197f3bbf9621fdc22a5127e
SHA1 44b14b1dfcacc030389388de6f940c055bd8613e
SHA256 98a6321a5bc3e4bcb20cc472a4c9247ad3912a083656e4648fea1ecb2b48ee6c
SHA512 9e1e187d088944cf43541a4f6d40042fc2afc8bbc9d4978735d0b611ca99c583b56b37b60823d6c87e5032424ed5403a60c0b6b8d5e2c9da372400cfae234b70

C:\Program Files\Avast Software\Avast\setup\part-setup_ais-180517e4.vpx

MD5 67a540fcde81f108f7568628590ee342
SHA1 bd454d4203eb18115264fed792b4d5e41a2e2fb5
SHA256 328f4780c3389e61ea00604b5d5085e734adee7f162796f1130d5f36d0cf2924
SHA512 20586f6f537b18f7e3d0945e0dbf69e6bd62457a06c739268c9867b407e9071c0b82ba8adf166ac19c78e9f36f4d8ccceb85ce1dddc1d5c6b5b49c11fb602199

C:\Program Files\Avast Software\Avast\setup\part-prg_ais-180517e4.vpx

MD5 2c670a43751b0f2adb2bbb0f5dd646bb
SHA1 74ad4b2eeb00c337bb4902def41353c44aef6e3a
SHA256 876f56bdbd1314c4f97757bbb341c908bc1de6acb5fbe8fdbbfdd2e3b1c55bdf
SHA512 bd5b7b4996f1c70adb77fb3b590a96cbe673253e05a10c94c2d38ee12d63995fc385c541eaacfd653ffd7e3629673fc539830943d9202ed2c9a04f2c42f8b4d7

C:\Program Files\Avast Software\Avast\setup\vps_binaries-93.vpx

MD5 fd455968bf0675c651e0dd56f826f2b7
SHA1 78bf2a770277aed1638da6b52a3c261abe3107ac
SHA256 7889b5c09ffb70dfd234d482dafcc41cea04c84d59b68dac3c5ee0f5da061b5a
SHA512 828b4d496aa15e8aa1d4fb762da0776f5882b228ce1411464ef1f84ea0ea74f2ee3693a627164a20ef1a95ab6a4603a5c52db50e2b01226014fdf03136724443

C:\Program Files\Avast Software\Avast\defs\24061317\aswb0b6a630eae23511.tmp

MD5 b6e0c612dcfe027378b909aeffdfe426
SHA1 1f1bd71f21220f0dc471d450af6f36727799f31b
SHA256 18639b27d62be8ad791bddc5f351f12acd0f7a46242be5d39c18708f7e8b5777
SHA512 9097ca9526f73f2954ad1eb8b6ee188068523056f21bb03f3759e6b399f215d3ccf2daeef90f6b52efb33e043b35ad301a0d35308fed609f1bbc3389f5d10ea3

C:\Program Files\Avast Software\Avast\defs\24061317\aswe616e3bf4379a35f.tmp

MD5 959aee5aefe9c49d86c3bc3948f15be6
SHA1 38de98f370c6919fcb428de1192f6bfd07de33dc
SHA256 66a5106496a177c99931d8ca62163f3fb7b7dbda309f121c2e19076df7905af2
SHA512 d60cd70459b224f54e7480d99aa3513b0bb3161e3d23d3cd74b9cf3470f142ac1cfff1609750d32505dc5e699d5e36e4c191fac9f62cd49acd7eab521f13513b

C:\Program Files\Avast Software\Avast\setup\vps_binaries_64-93.vpx

MD5 38d19703b36905b21e8f7503a5b11c58
SHA1 5c880a2853ca709653cc67d2a20ae5b95c7bbb30
SHA256 72e613294f9fb22d7d7ff9e62b8d5d016f81e38d9015276fba302bb0c249d399
SHA512 f704e4aef81882bb2024599d542994adbbec3661faad73f36040c1e7fbc74d90ef8d2bbdaa33df677f3f0e257ae8335a9d270e67300b2cae5ca8471ae5869ca9

C:\Program Files\Avast Software\Avast\defs\24061317\aswb70651bfaa36a11c.tmp

MD5 1ea664810a7aea607570d0779ae66c31
SHA1 15f3b1d725a7dbdf43de6365ff829a2dcb9e0364
SHA256 332263ad1e6c24e4378c2ce5ae989cd4ed556dee8d260ffbf968c4e3666eef89
SHA512 e806fee1a6f3ea289a8796ead601827bb4ea7f8582977e7d39a16f6da0dc9b08e45a2afe3a44239fd592bf249172deeff027a2deaa5cbbab0e2e86c27915a181

C:\Program Files\Avast Software\Avast\defs\24061317\aswf8d21f9beddc7529.tmp

MD5 c1fe762bef6010b8ddf2a9940fa89e63
SHA1 8623089e403ae4228c04a4577fabea22f6204c94
SHA256 047d3eea5a18281ff3323636b0f8bc6d74b7d0799dd88ce88dd2aa1512773773
SHA512 3b84990c44d57ff2cda8b5779ee26e7835f995b12900edcffbed506f5f84636cffffe0b8259139fd5693363c7ccb3fa7a25cba0e8df076d85e34f8ccf1b8d1bc

C:\Program Files\Avast Software\Avast\defs\24061317\aswa42815d7243dd350.tmp

MD5 53c6c1ac4810ee85568872ee31a6af9f
SHA1 0c875e721d197370e8a726d1feed7bd7c7d6f33b
SHA256 6222fd80f8810ac2db2feea7586f48eb4a772886d4db01ea4db4ac3420c7684e
SHA512 807efaa401eb48289ab48965deb814052854ecb853bc41eafaa800c9b5167c8eea8078df892c302d81852bebcc6697e9072ab064f69da94575050ecd9acc57cd

C:\Program Files\Avast Software\Avast\defs\24061317\aswdb8e364f037185ea.tmp

MD5 ca327980bdc7ba6fb5557a1b262d6150
SHA1 0df12bdb6b4a8e6120657abfd3cbd29c369a966b
SHA256 86fd85c6a9d246324d5f36676b6f44452ecd2443f27dcaf1a826875e2cc7cb82
SHA512 7da49515d4f6609f0671792c01623004843dfa571b6ba1edea1a7c6938701d9706eba54e19da18e63a21f58cbf5cbdb34c351c9e4768b02ae0d74efb78fdefc3

C:\Program Files\Avast Software\Avast\defs\24061317\asw12a9696301ddb969.tmp

MD5 a450a7605b7e5d2637557212d07f4d1f
SHA1 04b0d58c1b3fc9777449bc96dab29ce98b0d2296
SHA256 6cf3f33010690ba8e4e02c93ab8e1522eaedd23e4beec6ce9bdfdf579dd6c91d
SHA512 988287a5c0d75b2fd6ce6ed0616c6660a03f4587150e9ef6f729505683029b1e471e6d14cc8217ced84dc52920d0f640e13b15c599cdb5e175e9bea2153b850b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6810d752f3c36d65a2b41554267422ba
SHA1 defb0986b6e2a41be754044993110c584a7d4f14
SHA256 fe84bcd61628b9dd9c7068e3b937bc83422b8ae919e18d7b1ba67c1ea334dd41
SHA512 b38a95bb03dda85de3a01ff9994bbe0077e11ff995c85ef1290fb42e3d51765142c731a6883b72059a771f5f80e95bffbeff34f1eb294df623d385429f5a476d

C:\Program Files\Avast Software\Avast\defs\24061317\aswbb0463d048c6372c.tmp

MD5 08bd786539f39f88eaf47ac784e2eb1e
SHA1 41d87bcc435a238b665ad9ed662356b5b50d6605
SHA256 aad0a3a72859ee54f01917ae5600b95c61e3760189980f4f3a9b2bf569e0ece4
SHA512 3d9c4ce43c00777118618349bdfaa5a33f7a6b3693df0321031390a1aa77b803aed9a534a0f7594122419e09dacd113d332929b4ab7b27e8dc389bef1c08e6c5

C:\Program Files\Avast Software\Avast\defs\24061317\aswaf89e562f84367dc.tmp

MD5 ec4dfaac8c5580e4b67f0a42a9849bff
SHA1 9b9d5d29e889eb647a9d51ccdf25eb31a4ffe84c
SHA256 cc3f835bb3860bbe2ded2de85a155e09dd34010473c1cde3518f7d5166558415
SHA512 3f26320c026811d1a83874806f89ee195eb78317cc9d9b5d885d57079255f81586f29f39805437cd5519fc69f4c3cda8b61ca04dbb198b6932402d33ac19c27d

C:\Program Files\Avast Software\Avast\defs\24061317\asw81cc9f748def46bb.tmp

MD5 d78b51bb01d4868a2250c36ab11b5688
SHA1 f4b4bbe5c80b1e3bc3927d670d6af1025fe22da3
SHA256 f1cd3bea77724f8e3be7c87171840c32c2c739b2b0f3709f11328715cfdcb7bc
SHA512 429af0ae072d83b9a510f0d5204dd9f2b4b08f9d876206fdff996a681223ac42031ad5c4adc831978c620ef7c998c07cce1eda5a2fadeda29e795c7d4a16f77e

C:\Program Files\Avast Software\Avast\defs\24061317\aswcdb41754b816b403.tmp

MD5 216425d116d829ea8f601e27d6ef855e
SHA1 40a462420ffe50f2b4398b95ee4c91dcb756cf9e
SHA256 63689f80b7b430e6daaf9eeb84c0f8fec7f10ec4f4f0d5afc52584738c760db9
SHA512 cb4d03229861a5e7c76fe53dddd5935fa8cc87fedb56e3a279008220abe2db99ede004205e96f0b0d4a1055afbc9eeaad449c0aa5a427b423339bf85da748c3b

C:\Program Files\Avast Software\Avast\defs\24061317\asw2769243efc80117d.tmp

MD5 ad8380fd29e07d0e4b56490440d2bde3
SHA1 571ce19c0503c1d5e0692d5666f6f9a7448aee08
SHA256 ee35b2a23bf0c4c1bd1555decfbaa6a14ed25942e1ce16516fd0ada45400238b
SHA512 e9084ce38d461205094e3ab700618b411399c616b492f3f0e4f09cec1d0f43ebf450b6f12763bcdbde98ab6f15c761d0f7c101e602dd1ff99df0d87263e58ab3

C:\Program Files\Avast Software\Avast\defs\24061317\aswcd83cf9c4331d575.tmp

MD5 287e1d1b16d99e242e029034b10c7515
SHA1 874ea1777a11ae01aefac71f5c904e9340c21217
SHA256 3a9be222c12a2a4d25d9b46514ce2dfae28b91c575b203c6fc6a5b4e101aa821
SHA512 2796fe39c775078cd6741467bc970d4b90700856e699dbcc76b2dfcfc9bbe7b56bca6af0c6a555e02053fe1a34a67c39af7f2d9140ec9b3168aa59b9d15c257d

C:\Program Files\Avast Software\Avast\defs\24061317\asw077a5c97a72bbfa0.tmp

MD5 1e2c83e74f0af283dcf390be3e82420c
SHA1 f36f96b2f9d5368f505b556ec51581b718418d28
SHA256 c7074743d0a3c555722d6bf4d08c8396853a269cffaabd29fbf17fa4cd3e68a1
SHA512 ff87c0914e8e78e88da955ee1d1a81a9ff20a6926ed5a4799a447d4da46124218aeca086ea3767b06726713e011f71a36fe26f3a41b7429f8f98d8c1f39686de

C:\Program Files\Avast Software\Avast\defs\24061317\aswb5e9b66883c9de08.tmp

MD5 d3c119a3eca1b629c67d41d6dd081091
SHA1 1393c7206f2d0970bff574a0cbf7e7c5072511a6
SHA256 7ca43c6029641416a35396e0545500388b37d60ff7d8da1befb0cce92cf4c525
SHA512 e1a63264d6f9316f1949a5bbb94b5ca77a70086e0b08fe9686030b1278028b7c126be70a884c10a630734efc26a7534079f7cca5d88f3690f2bf49144bce2a71

C:\Program Files\Avast Software\Avast\defs\24061317\asw6ba4a7b16a49e441.tmp

MD5 687c2c723f4ad3752f573629d2e0ee43
SHA1 e2d6e73322caed09a3e0cb8ef8c7c2df1935dd59
SHA256 c2af49c55c339db6d53be03207b4f63d27d18216ff10c01a1fcba6cb46927f8c
SHA512 608f0123fb058508f91d67dfcb6af35f28253375564cd134c304cd00d1e75ef7e36a980f731d730595b4e5a35e1a34372d51286e996b93ee00e06a7bf0db9cb2

C:\Program Files\Avast Software\Avast\defs\24061317\asw646baf98656babfe.tmp

MD5 0e0746434daabec0369d836c91bede00
SHA1 9b5d62438d89cea5da29dad927c094576d5c9f09
SHA256 3a8591a9f874b4d6ce81b60c32db34644553cc249cde244a199f68776303eb6c
SHA512 031acc4f08ea93875d59aff1ac44a016dcf293706baf1daf6d455f6fe01f7696b3861e019ebb230be6d3f0d4e4a4f216b23eb154398e3649dbc791ad4fe2769d

C:\Program Files\Avast Software\Avast\defs\24061317\asw2d3584c0cb83ff5b.tmp

MD5 6c87f6fde9041bda0f49cce4c114df08
SHA1 71f8c36187e257e9c8cf2f76b3b76dd452513ec3
SHA256 35c03e28c12bdf8779d511ac33336da49ae68bb5d5840a8bc4e49775a1319555
SHA512 0ee782e91b4678023b41f6337ae091eb799bbc8f802c77628b554caf4f47d5bb67405e8d38524a3884b8f134de49210eea8d82fb1ec819fad02b17f438b7a2a9

C:\Program Files\Avast Software\Avast\defs\24061317\asw306fc5fd9dd0204c.tmp

MD5 83c2e461f06e1d790a30a8c407c3a624
SHA1 afe5da12d716ccc06acc695ded4af73c3454dfb9
SHA256 fb17a1d3821e17ba60977d16d7420e1d7b5958ffafa259cdd95e96cff93f4faa
SHA512 002e1f68450c6e83472234075473fa36cb72c484b348146770f01a66a0fc3cc59f5b546c236c741c5e6e574ca6c31b99af896b39d1d24c4895177971ce1caf2d

C:\Program Files\Avast Software\Avast\defs\24061317\aswd1dd90cb2c3f8301.tmp

MD5 357e26d1d145a83e1fb1db292b90526c
SHA1 c46f42eb3abfe1c87df67c492b2df9d3ec1e67b1
SHA256 a134950463a23bbae5577de691c836ea7957ef8a04c39cccd712749bd3d493e6
SHA512 adf5e99e5ae5a7ecfacb04df9f9d3e2796b56b5a4741ee3c0821f791c28b758b21a00cf50271a388d620b8dbe451e9932a058f21ad50c6ee97ff3099dd23360a

C:\Program Files\Avast Software\Avast\defs\24061317\aswf0896d3f32a6a5f8.tmp

MD5 497ada7af8378505a254d736c69424f5
SHA1 701da0b6b716be6ffad5c2f3b5711d6875af5b40
SHA256 2dd9539ef48d39acbe690e54735d4dccf5d2187a0e1b1884431d651761a24bf2
SHA512 f147a14613b026ef622c54d5ac1cc7554127e60b23c4add10a19d1cb8fa94d95af2291ffd0d9990cc2d58ea84d185449c5b1cdb3d62bcca8f2c8729b0cad3464

C:\Program Files\Avast Software\Avast\defs\24061317\asw0e897d7d6cc20314.tmp

MD5 dbc3253bb5fb4a370fed59f442598310
SHA1 e9f86c9d05ac16175783c92ce6e2bcafbb4a3b98
SHA256 ac87b6846ebe397a15988c4a07d413f58cb7cc47cc24e26805629d0985abeb61
SHA512 76b61f3eef9eec751426558c3fe8cf2de2ea88986d3de84bc55081bc3d62a1ff1daa4232125d4e9ab5092bd64c2075ba1cd4cd0ac8105936fd203114416dcb24

C:\Program Files\Avast Software\Avast\defs\24061317\asw363fd24d6c0a796b.tmp

MD5 e51c801368b9b6a198f3b5662c31b890
SHA1 1b5bbe13226de67eb4e5a0fc7fb823781bb27c20
SHA256 7988fd524f0751c3bc809674ee1847051a0af2358c9a563d969e93d0861df6f3
SHA512 5632a3053ca2efb4e3ead891dda938d3288516e8911438fa3816ff256a3bf3a7e9f456e94608f366a6e5be03928de0f2d083e32931bdf07c2ab582647bc4319c

C:\Program Files\Avast Software\Avast\defs\24061317\aswa7043cbd2403fdad.tmp

MD5 aba89d42eb86d9c63ae60874e45c19af
SHA1 e73f1e64436c9cb402966f9296360b17b08458bd
SHA256 dba7d2c152e7181a2c72cc2028ffdbfd4c7e56880b0507fedc1ff93918cd628c
SHA512 2e8f871ff3e2947782d91643f4522bd78b8dda709ffaf0ac57a4c1778587b21c0ee91ef103bd7db823409687b38344b5834e606c6a6cf88edeb59ccb1650a843

C:\Program Files\Avast Software\Avast\defs\24061317\asw3fce53dfc045bea0.tmp

MD5 9834daea0ee7c7fc72623b3f3b332d5c
SHA1 4fa5845c277568cfd9f18b051657704b1262eceb
SHA256 0b7daff786bbdb58a65bfd5bf3cec3decf42ef20d6453468238725ce70e8f9df
SHA512 c242a68eea977cc5274e8f50497c2db141842adb084aee50da2453e9f3de391b6f7b6deab5636764d3ec7149ae0a1ad76d440663b41584166be3b3ac2839c277

C:\Program Files\Avast Software\Avast\setup\vps_defs_common-93.vpx

MD5 3b99f6c1f284439e78b66f0d9d16ef9c
SHA1 f230c33bcbee2224572b988efbba54469df7a9db
SHA256 9a1be861fc676967032a95529680352472388cf4ae8986902b32f62981b88fa2
SHA512 a568d4aa078d3f1555fc50478415fa822406a8e3dbf1b4cc632fa99b42df4cc4c5dcb04b36cea0989671cac41efb56e4d67019727e9ee360fbe1df8380d7ca7e

C:\Program Files\Avast Software\Avast\defs\24061317\asw6ec4d7630a3ee861.tmp

MD5 0c11c493b955a61b35506bad9f6ac857
SHA1 2104533e3b3914d57e4525d2ccbfb79514755755
SHA256 c2cca1e16c37779a75bc94b7c5876c6b3fabc8bb2304f440d1e49e2750eb4ff0
SHA512 f39a96a6eec4a61a8cd882d28b210a5d59b971e0ac3923913d33909f475d3fdf5b6ac11e2c48d5c9ca6a45c94198a3fae2cbb8b6311f5ab4be97d53afbf2d506

C:\Program Files\Avast Software\Avast\defs\24061317\asw88fbe2fa78834954.tmp

MD5 bcac7e3c4f462039f1db5144752e2dd7
SHA1 c0d10efc98d188c126252887576789223af3b650
SHA256 fce1750b67a7b5d172a3f2380ae0e5bc4d38b2b9d73cafeb247c1f76055a7696
SHA512 b40285c051d6ff9b1fc3bef489df120be3c83142c96fdbc8068f1ce1daf2a92f89c24778fe9f9b87066f26efcd639d3143f404d9d7d864ec3f6fb71039bfd0d1

C:\Program Files\Avast Software\Avast\defs\24061317\aswbc65db00ab700c51.tmp

MD5 29f9b605dce1f6e1d0ace7c3ca89aa8b
SHA1 5b00b6dba34e90254369fca547c12abc415091a0
SHA256 90971f5a09e220ebefad248d59e5feb6bb6e1b806a1599e1bae1e2f18c986b3b
SHA512 8f111e838855a3bee58faecd6683104fbd68bbe937e88ff1df72fdcc8ae7f050d806aecad9a29032dfe9d2cbb8a3f52c37d0a5cb8d9b011aa5c510048edb89b6

C:\Program Files\Avast Software\Avast\defs\24061317\aswf37e3216e3460cb8.tmp

MD5 11f98d550722fa37a3cd33b2552ef4c9
SHA1 cc0cc377f96f19f0c438378dd1b8d0839ebebcc0
SHA256 21552f5086b2f9e37846ad974afa40f89ad87fa716aeadb27b29a698daf4743c
SHA512 e7b661b492bb3e58352b1e8a346000a420f8bd868e82a1a341243e7c8ec43bb1e29569463d1fca05b44993128e340eea699623a2934c773760f97cbe5e268f16

C:\Program Files\Avast Software\Avast\defs\24061317\asw3f17808988774fb3.tmp

MD5 ced1bced491069f3b1fe35cbfb91bb6b
SHA1 836bf0342531aedcd6866c8a19d3e2599c576916
SHA256 be36bd28ccf235743e6a8dd8a8b944956c520d56ad7503f31a157e6876694fc5
SHA512 e882ef19b90843cd483bf44826f4b8df22e1a44df2ec83ea529902280ed532d287ff132701c3acf1b207492c9a8e55f738aa88902c936829d3e8b30d6ba85d72

C:\Program Files\Avast Software\Avast\defs\24061317\asw612564431621a9f4.tmp

MD5 a65d7854311248d74f6b873a8f83716f
SHA1 d091d528b2e0e9264a0d377487880607ac870155
SHA256 68484e75c86aed8c948d83a9c55ca4d0b557987063f5e47493142d8e09837e4a
SHA512 fe87aacc0be8e6cc9c05725f7be3392ba850171e028f157ce786eb1ab6b5f06dac99b21394967253b6a7d0148b0013a2fd91d6d55afaa7ace52b066c60d4a79c

C:\Program Files\Avast Software\Avast\defs\24061317\aswd865c1c41754d920.tmp

MD5 6eddcb84b3aa0b3ac9d17cbb5c4ab6d6
SHA1 35712dfe5b26b42391dfe47ab762d4061ad91005
SHA256 fb57e50c623f7fbeb3edb0319b58c6a1b49a9dc639ab9455b2e4a2e35ed57e95
SHA512 02c06421dbbf82c91805c7442cc4406a49e30a736f54bd8924ac75b6c1b84ef66952184e27831f919542c390300987220f897cb425bdbd651fcfde5f53081497

C:\Program Files\Avast Software\Avast\defs\24061317\asw5bb848c5f3b449ff.tmp

MD5 4f06af36780edbcf1563d1596fb20763
SHA1 7afedbae13637fff4d6aa0ce87f78d9706f18049
SHA256 a9aaa58909feecc169fb3f06564a9c67901129ab29f90e5792838f930c9c9049
SHA512 e4fde321d4d1d61b7792c9f36c9d3e60daa0566a853bab857c8e1e50be3717bd7203e67abef9d26624ca9ee6a0fc5026e56d84d9a29505eac690e38116ece605

C:\Program Files\Avast Software\Avast\defs\24061317\aswaf9a378194e61e9d.tmp

MD5 a9f38e8d1d70a23458672ece3a7fc7dd
SHA1 522655cba95ded2c1260d77d18e390311de6399e
SHA256 5d639b0c21da7e7ae3337fe8ca6a429db43091e60aa349c355265ad35fd5cf03
SHA512 2b880a9e0fef9e1f9eaec169db5ebb65441d584ce406f94e571dee4198dd72c381cb4c8bc0d6b9ed9fa5d864f1de3c8e027f8b0d441cb2aeeb59df0d7472b35b

C:\Program Files\Avast Software\Avast\defs\24061317\aswe967955d6548301a.tmp

MD5 72610141d5a8da549efb60b2061bf577
SHA1 ca86c49e4242f9e98a2f853757091b8bebfbda6b
SHA256 4a3ccc607113e6655843f6842a2d59007b8f5658dffb7b2e2fd8f5c684c70de9
SHA512 7f530387fde637d52dafbcd35832fafd5ea2d7329549c878301d88b0e7e52214f164137a87c8922c6f1a30934c2c6cb8f7100fb9d22258ed3f19e3f18ea2dedc

C:\Program Files\Avast Software\Avast\defs\24061317\asw72a29cea4ac9fb0c.tmp

MD5 af8ec4de316d1021a4e13c1bf77d91a0
SHA1 7369ec871fac4c6ce58dbe7c678556af25bfd8ed
SHA256 0c686534168834228d37e7f544ed2b2f39c3c06f8e246fcc67336a607aba112d
SHA512 05c7f5cdc1130886b4746fdf43c9e6466b5cfe3ec1a98df3c2ae601c77b2f9221c70a702db0b5814424191b3979ba5bf9f2caea5bc75b63dd03ef20383ad0eb0

C:\Program Files\Avast Software\Avast\defs\24061317\asw412e59781c6aa3d6.tmp

MD5 0f266372a0015c4a05670d06840dd1b1
SHA1 741cd9d7dfc3f5b1c511579b4ac44ad53152bc91
SHA256 029654357c153e85c5edade8c7dbd8d7607cf7f20228df046760b699397c159c
SHA512 5c57eb0fa45ef405a989fb24d50cce5a9c9322983c2cb9839f5dc04d7b6a36f16c76eba5ab03546f908f5ef9308c512bc41f5aa7b110fb4050b171b172da4f51

C:\Program Files\Avast Software\Avast\defs\24061317\asw5ee90820f4c5a3e5.tmp

MD5 26e35ed9fac74e540e52983213ca2d73
SHA1 c371b9ae41f0483eaa529af7c8ff76250b6590aa
SHA256 0c20737290a1e32211a4851e5f80dd84c49708aa43b1020ded5f36a0aa270f69
SHA512 60b37a36b83cf2d06e01454de1e5c72e9ed330d67ab18c949e63bd6e29c62c324a3f35ad8c842cab9c780176884b0bc33bb5996aaf9f0d6a9869b2544c174842

C:\Program Files\Avast Software\Avast\defs\24061317\aswaab0977e35e9048e.tmp

MD5 932b35c1258990c16c5abd16e8aef4f8
SHA1 bc4a0c2e26b6a004f8c116d78151b3bd95c00a34
SHA256 54e7d5be13c1d5457def015cc89912d328f11122a37c2a3afb8ec0f3b8366875
SHA512 0cfe081650d74e22f832b73d1dcd7e8fe3f14628c46b1ba5a439dc41fcab44ec75e467a55dfa27bd3310e3da5c1ff42adb33813c405c0473e75461cc955f159c

C:\Program Files\Avast Software\Avast\defs\24061317\asw451b23877b201ae5.tmp

MD5 e271d8180e601124d63ba55d0748b624
SHA1 9615496c70d217c8fdf33ed4e27bb123545bc501
SHA256 376f85d01efb5739c1fcad981d371bfd225b19396d426dab33afd9b16ea6bb50
SHA512 745f7323bd2306eabf37ae17fee46aeefd1e6a5194a85ea828792f6fecf9b0b7f9288ddca476076194e775cfe5cd0c31feecf15a5b36c1ae4032978bb0e83cdd

C:\Program Files\Avast Software\Avast\defs\24061317\asw49f985a74a7a4df2.tmp

MD5 9d4b3990d789479b0c7c1358c6242d5e
SHA1 5329fc581868a578f16c8345ed91ad838d6cafee
SHA256 0f8a07797a340bc32d98c33048952c5ede05d3e6f89a580fe1854cbef6684ebb
SHA512 ad132dc46412ee7f68e803120411ed884b5b3b4b8e799b48de31618d85b8c47205ce74bbb4ce21168f2ce17de18ac90bc587b6df4a3f8519419a9019f11db2e4

C:\Program Files\Avast Software\Avast\defs\24061317\aswf22d02a8695210f6.tmp

MD5 5aadc3e31806537f0a4bb2b285afb291
SHA1 b56ded31df2e4cb29f1abacb52492e2dc8955472
SHA256 ec2d0aea821100cd30600fa6e553a20fbf61d3cf5837c2182f7d21754df00d56
SHA512 a756dff11bf80d974232e761767b3c425bef2c5ef140c8e5d36aab4896ce8f15b5fadffb520e16adba7c45a62b03503454e6381f1fa886b024415128aa19b1c4

C:\Program Files\Avast Software\Avast\defs\24061317\aswf4bd9540c7bd8428.tmp

MD5 bd9e1187c5b08646b6cef6a9ebc865a6
SHA1 dcb12e9c544e61f6c9d6d48bd499c4363f5a7e9f
SHA256 61373232e08dc98bed2aa1652fbc6fa5ed9c3a9c4f340a19e5f94c571ed939d5
SHA512 a6885f479ed4d4cf521a8aaa414574caaa6a20db35b578f7389e9658341b1d862a22f7e96f4743b953921ab7c163c90050ab2586146c1a446450a8ef832becc6

C:\Program Files\Avast Software\Avast\defs\24061317\aswcd9fb4b2e7685cf8.tmp

MD5 de83372613b2c66a22b01aa77deaa1d6
SHA1 241c279371ad77e6c9a1795305d4e2aa70c6a709
SHA256 96656ca514b11096deecb895fb7926f0bedae5fe32e5330dea881a5277dcf477
SHA512 fdfc9011ad7d111e9c955162f34fbcf59ca552139d69279fc44f19215a3b281d2cf4b2c30bf3cdff3739d3a7efe80dfe93f7e6b2e65cb7d76bd8f1fab0a7ac75

C:\Program Files\Avast Software\Avast\defs\24061317\asw1943289b674a99e3.tmp

MD5 215da3f1e3589fb89fee63ce70c32bf8
SHA1 73b51175331fd1e521ae0fe334b32e51f7258a68
SHA256 266d04e2866e57d78e00ad7dbb4d32c6a022c6bb79c612708b3d36c40e181883
SHA512 92b038d1c59df92ef2d20ea7830a96ab293bd03c3936a5ebded08189e561ad2efd652aee8f29b79fdfa4219b6c4dd0b3c103803b5311f24c10adad9fb711d7f7

C:\Program Files\Avast Software\Avast\defs\24061317\asw1c5110d3e3e488e1.tmp

MD5 c9844445b3b7eee2b45655aae413b5eb
SHA1 003d93dbf93d49c87948f0024fc53e62fe9acdfe
SHA256 4b78bdbaddc9cd75b06843ff415477ff7e0acae26857fc5217bf1f6a5f443df4
SHA512 3cd3b56efe9f59a592489ba0056ab89cac0f1cc7cc5a827b4203bf68640b0a3f34591e115ae2f09f125c5f3e94666f810d8d159aa8b74a2d0d08d799e5a7b5ac

C:\Program Files\Avast Software\Avast\defs\24061317\asw631f85aaf60867a8.tmp

MD5 5ad6260dba269dfc5208221e6c95f369
SHA1 105761309d643432e334d641d4bacec54d1dc35f
SHA256 0eb012a4cbf7e04009ab2dc08f3e7a81a2680906b7fe1c952ec145311de98062
SHA512 e294b733fc8b56d328abcf544f8f327689f70517ab9ceda6fb9b4c4aed76bc0a8a6b6e8be222165b0835936e6a5636668eba6116dfc0b1420393840f1691743d

C:\Program Files\Avast Software\Avast\defs\24061317\aswe34e9ecd17565aac.tmp

MD5 35a76cf7ffdefd9316cd49fdc9575d0b
SHA1 75df7e545b6f6b78d5641382309a50918a24cca4
SHA256 8c1961e0ca74439a7d26684eff130d16561d9eeb33b0bc426625359f64aba98a
SHA512 9b2ed0c84de57581771e896c48b424dd6ef198bf3f87791f31964460937ebd12873c00392921b5caeb482e98960dddc4843b8463f553441deabbea096c286678

C:\Program Files\Avast Software\Avast\defs\24061317\asw5b55d2a02f6ea06c.tmp

MD5 4281d93b49b84ea47a0cc8d29d501bc4
SHA1 3c6da52d23b7d7d04c3f07b30257e500c064d00c
SHA256 3a0e072cdd5d3148e4ae3fd27720fe7af88b95fa78bd2aa3d3c1e0a3d25ad4e5
SHA512 ce2fac28824fcde94f1f13cc3240ef0d24cb5c5368993cbce9e833c5c398cf55dfc0b1dfe98b8a4041a0a085c31f7bdc13af9364654751646babffc2f824ab45

C:\Program Files\Avast Software\Avast\defs\24061317\asw05bf89838566d393.tmp

MD5 aaa60471cff371a0dc320354d78ea4c9
SHA1 257671cb411fa8064d9762c9d6b2361090d5d8a8
SHA256 eff860cf2df768b6633ca9e81c30fa2d2a748762e7e1ef0bc51b3453fa079866
SHA512 f61557661d764f5f6402312b7ac69d643e99a4a910e76e1cbfa48414561b8d7bd446caf5f4b71d9cd5fbe9c7c840bd788e4a0d02146c2536b3fcae7d3d6cdbe7

C:\Program Files\Avast Software\Avast\defs\24061317\asw0a424e8a2feb8c27.tmp

MD5 09e5ddfc788457f54e952c9ee9fdba4f
SHA1 77f0f8580d86480e00f014f799de36e7f29ac320
SHA256 6c005771be2e88c447fe935d00d94262733c5e081bf82f03f6b79c3a40e89659
SHA512 c6ce41b43a275326e3ca044c531e5837b14d9325e7e2662e2e90072fb851e1c0df75f0f77e87f0eb89101ee106d5c776be6f736dfddece2de3c55ca19370839d

C:\Program Files\Avast Software\Avast\defs\24061317\aswa278818b47d21f5d.tmp

MD5 cd36d08ab2b73d8f8c5019092ddaf01a
SHA1 87484c7672d9a0d1b09aeacbf414af240449e6ff
SHA256 cb814f13366e46936d03555245864576c2d1f2f6ba7bf3bda82231abd7411d51
SHA512 68532ee6db30164a5e3832c51067074e3cf5c06018e1ba65f9fa0f3c75e760bc9e72033c7fa8b40484930095d02b840184b9f24f47d210d571de990a86e0bbe3

C:\Program Files\Avast Software\Avast\defs\24061317\asw2d641289b139ac8a.tmp

MD5 5cd4e52dcfde0f8db244f97a23e71a30
SHA1 9e6b664891597c2bdc0775b8d1c87312bd8d7b81
SHA256 ca954bef6a9444a91c1a7708fc45e8333a28879c14b746954d8f09a29b4e82ab
SHA512 419d197d67d0fbe465ead633e9a2190b634f9da7b9c31c32d519ce6951eef3d71a8908e0bdb9d355855604bfdac53014e649db76113b40bee6e68739944e2b3b

C:\Program Files\Avast Software\Avast\defs\24061317\asw8d83f9bf5858bb4e.tmp

MD5 009de7b7fec051c553694b0d48d65700
SHA1 901548ca5da1be98e433b7fab7c33c4b8c34f61d
SHA256 986d90931c8952683128ae5a7d84aceed4df5cb31a9482073d35b25758eabbf4
SHA512 23c02cb0c56b27021c9fddbc469efd434dc289f0ec79bdd33b3e2559b1e74c87db408aaeb89f42c2abf54a7e75e74533f8bea7f1a949ca1c8893cd031c90914c

C:\Program Files\Avast Software\Avast\defs\24061317\aswa154b148a6079052.tmp

MD5 69be9d4eb3df7210d63fc23cb9674fba
SHA1 3e8cbeae9c3633822bedf220c233092cd84937ea
SHA256 ef702bf5c1d21dd5d3bea2502b0e85581be11055c9fefc1dcbc8de0e2df19583
SHA512 1f957bc723d7ddef2c15281401d3ec47db52eafe20ee3af8dad284ff201dce3b6b4c78a3848b61d65808f275e2adad913608b935530699e1158e9b959116d379

C:\Program Files\Avast Software\Avast\defs\24061317\aswc53369de17e49c2a.tmp

MD5 4d61dacf1a4d8e7d4e2865496541fdb6
SHA1 b4d612ca9336cdd5101fd6545c3695b8a23be798
SHA256 4b3ed28963a4126173afcd03ef75c782fa636c3f7d965511f5a635f9bd13aba9
SHA512 2b875649e5a0038e5d09123311f3d9d837434d77ac408eecdc2cc56f6937bbe5b6f3a9bf57008e5a2f000d33bd425d45fc63019ec37b28110369a93397929b88

C:\Program Files\Avast Software\Avast\defs\24061317\asw930ecab2b1e21b7a.tmp

MD5 35857b07407e32a638570e6ef880c283
SHA1 c49922215764d286e165e385894c36edf788bfe9
SHA256 d8b95fc19a23becd363c7ef0748c9b4baaa12d01089e8ddf41242235e9f09daf
SHA512 25054220cd109020370b6378f8a91e7f6856c2aa3d936c693ee8d1d720c8a8670776305c9934b3c2a541c014922db11d9097cf02acfe4b934b252e66c1678181

C:\Program Files\Avast Software\Avast\defs\24061317\asw2ab250b9bbe41c8e.tmp

MD5 385fe9c311625869a9e33ca267db4b78
SHA1 33eab130b83e9eb47b84b058e7739751f35323cb
SHA256 ad6c15749a554137efd888ef1dffc3cc90a8ad7290bac9816ea7a77839768277
SHA512 efbc573ad4925b3d48618d84281f08e7ed04b1d581fbb384867d1e3d1288cd06ca276810bed8ec280205b240c5437ea37b78e78d05795ea3eb279785d5a35cf2

C:\Program Files\Avast Software\Avast\defs\24061317\asw6f48f96f7abf8923.tmp

MD5 ff97607d3f3a19092cd719dd437cbc40
SHA1 6958f2d03eabbfbb0995e24e48d9edaebe1446a0
SHA256 740645c1e4e6ca7be799dd2909b956b657e8bc76d8b2da3d3a5112ea35f9bf64
SHA512 0de76d1eaf4fded9f32cbaf6b9785ad1ffc7a27e567dd25cd002246889f9adec65f0fdc00e0578bb4c9b8bcc1727195a4dbdb5524559325d7e0bd8a09df3b489

C:\Program Files\Avast Software\Avast\defs\24061317\asw1dc12553556facf0.tmp

MD5 cb4a7a9c9143d12d76f5367ab3c612d8
SHA1 02997965cb84d64a8146bd6e47bd79026157a826
SHA256 de92f02c0a0e4dc70196682fcb2e922a43d46958049fa4540ab1b681b2d4784f
SHA512 fdae5e9718580a6245561d9a09f72dfa63cb833cc77963e53aa7492d4d746a1f3acf40e2d263ff1417802116766330f9fad8a2992b9b376fb5374301f6e0759c

C:\Program Files\Avast Software\Avast\defs\24061317\asw32480b2ba47a7c5f.tmp

MD5 d67271bf34dcd4794ae016d824ca8b0d
SHA1 6ecc7241bacb2a75371e84a938998470d84913c7
SHA256 d5552e5e54a86305536dfcba5b0b0648acc0b270687b443d7a158c1101320612
SHA512 610fc6ae8b9b25b3bb3d64717f65531d432e8aa85e10b73fc4c46769f6aaefccab2fecc73e72b5817cc3526fe6ccd27ea3753422c197218e4ee656692e1647f1

C:\Program Files\Avast Software\Avast\defs\24061317\aswba5e613117511204.tmp

MD5 e363186fd2ec913c09b52a6096441735
SHA1 7a4710fd2f29e42dd168f1fdea124b2e8d091245
SHA256 d21da4a8fc9b38942e213017028ab23d496bb7e1b67a30c3415ed3a3908707fc
SHA512 c36c4ac2028c9d2863201ada420035350860931304364cd133629b44ec9a3b6f220a0991087ab48e77871238f95e11367a0c40e222f2db8438ee1cd92c91128c

C:\Program Files\Avast Software\Avast\defs\24061317\aswd80c2ac7770f0242.tmp

MD5 653d0ed1b7443bd190f8dcd521bdc55f
SHA1 f72a16788e776215e4791181ecc8d8e285a93daf
SHA256 0fd89050027fb5952cebaccc7dfd5ea7d4fa45aba206ac11563fcf0afd3a2747
SHA512 adee4ede55a177541bafce1e3656c3e49a0fe860cb839e77c8fca3ca5ccbc424eb3382b7e7df7c7b0592a515b537f135d5cd1aa8fbd0917d4b9d464cc18d2237

C:\Program Files\Avast Software\Avast\defs\24061317\asw1cd9c229dddd8ada.tmp

MD5 6b4ab38fa5acda4160d1b2df760706cd
SHA1 c8eba3f8a7d3f197a49361da29afd7e59feaea99
SHA256 6ff9d0d6fe7e41c9e2f3fef82587accebf8b015526e2d95e83a0e5eff92fdfc6
SHA512 d89a9b09e6b65d574eef4bf064ae2f3d1f886bf4390d97267abc6157e5ce54123986d738c5c62c652d537f33a67c13b2794aa3a481c604b0e8291c311e8fa9a3

C:\Program Files\Avast Software\Avast\defs\24061317\asw740598a15bec37f0.tmp

MD5 cb8231767e26a32418a03d7323708fa2
SHA1 a7dfcadc71231f4044f1759a6f3ca6a69dc7f48c
SHA256 a3df99d26fa44719f22de3dc47685544fa4195d12601b8bbe53720b3a483742f
SHA512 6790151fdc7491ea904b1612d59b42f2b67b4b4ac7db4552b5cb4f62e4129100a0f0a08684e0a4ece1dfa88d13125bed4ed6df1fa8fb39cd7e762892bf95269b

C:\Program Files\Avast Software\Avast\defs\24061317\asw265f532310910e0f.tmp

MD5 534fe68a98dd9a38b72506bbda9a9daf
SHA1 8b33da97ba8a55c28745536ec46cc3fa22876c96
SHA256 847756a48e1371ae2a6008772ec5e7993db907c2cef716740e67c71aebd89bf2
SHA512 8495e8c23b463d84513b25d472e31cf8b0be902d9a4f24bea11e4f39f8745d6b6a7f5d26b5e211dfaf9570ca9f16174217a6ef4365c846b1650b0fda0ccdf6b0

C:\Program Files\Avast Software\Avast\defs\24061317\asw9267735266fdf991.tmp

MD5 1231a851242972c8388732b649cfc869
SHA1 39cd18181d777f82438ef10fd053b9a24c52dc3c
SHA256 2aad99822cc3a1f68e476b08f49dd54b3baf644721a467a7ae229e99b2fb6974
SHA512 1df093fc3ddada639dd0c5be883c321b7b2a02a4d4e08e42a7b3e1605b10f72eacd86daf01c6efedf4dfe8bd13868e99a92ade7040dc70b0879ab1f5fb2484f0

C:\Program Files\Avast Software\Avast\defs\24061317\aswd3ec11937ae8da93.tmp

MD5 e4e6715828015fd648404170d66f6c1d
SHA1 eadf496ff767ba77ffd7de828dd410e09332f7b6
SHA256 80d4a87de1f57de1737a791ef3af28ef947f37d594290cea5c760cf2bf468ce4
SHA512 ec8a5e86ca05924a2ec802c6efb524ea6f24f05db06da3e4c949f8668c2896fe35de80e23bebc2acae61e284a1146b7771b3bd456421b82e0fbaf9b16b8ffe9c

C:\Program Files\Avast Software\Avast\defs\24061317\asw44a957e029453834.tmp

MD5 4e56ad611353c61404fe249767b65130
SHA1 1072c9e59d05cd7450e21004dd893875ecbe5963
SHA256 cb74ef52c9414f6137b65227e6121b84aab5c37a8cf16c690ca5d97985433738
SHA512 b96eebcb47abb375d6825fa51845f76546d32c563122bda7420e9130d5aeed174530e942cf2b4a43fbc29d14dc1e9c143579e832f047277ee020e2b84e10384c

C:\Program Files\Avast Software\Avast\defs\24061317\aswe6265bc21259e9a2.tmp

MD5 2c46894fa606cbbf1acf903ee19df89c
SHA1 a4198ed27315b091c036385cbe7505eb46c4cde4
SHA256 afa3b09078a55f2e689dc8b97486d9e4bb2a3cd5c5f5061af7f8547dc06caef2
SHA512 37b5b1599f57849c80c17dffa5242bd1e69626eff8fb64a4db97cd8b2a8cbee14509ca38f357c335713d2fb90e4fdaf0d20496e42ae915a9419b8eba9405079a

C:\Program Files\Avast Software\Avast\defs\24061317\asw0ec7341dec937ba8.tmp

MD5 30182c8fe2f3e1693ebd9023b53aa51b
SHA1 a1978bc174447aaf1ceab68e28476fd0e96d7398
SHA256 69298d35164f216e2151dfa692637d698032319731eca333ea827ea9e2985d48
SHA512 906204679cefd5c34438fe70e54e9975275b693e9435a2387a5eca52531d2f255f21c5278d8994d8c313eafa4a74144949d1a5b6fcb44534300fd130ca94e070

C:\Program Files\Avast Software\Avast\defs\24061317\asw7bb99eca6f3aec2e.tmp

MD5 8638688482115566e6e1fb6a0d4b2d5a
SHA1 d3ad3153f3f30c316f863e178d75cd6d1b735257
SHA256 7dce60d097210055f523577b22019d4a86f8a55167086216921fc74a2fd36d49
SHA512 9f91e791cca6d1aa5506b6f4532ded9765b52e93ba3095a0fe612db7d1264f1f5b058a49c4c3758917743b984d76f9d67a7297e202feda607f35fb2c1438f020

C:\Program Files\Avast Software\Avast\defs\24061317\asw879821a79fdaaf2b.tmp

MD5 525f4fe527ca7c09d4ee3cf687547757
SHA1 8332ab48a2ef07033b97d2178442d8c6ccf6649d
SHA256 aad3b0a87587ea79ceb4cfda51ac5c93c565357f1c62b21b653ad5ce916244d3
SHA512 6763281d8aa1a985e767d4d7b8c22ce361ceec646022bfe33c66452548cc519aec23e9afab61c12f5c3e6bc7ff191554f226f3b8e94edc2458b8190056a38fed

C:\Program Files\Avast Software\Avast\defs\24061317\asw3d050c1bd397cace.tmp

MD5 ea74de7ed002cefc43364ff7f6dcc588
SHA1 19b5fec30bd1e2979d86b6f824da4a8e1b6e1d7a
SHA256 3fb18a7e489c3e312d4c6367e575c2268d38577ead550baf3252b8532d003086
SHA512 7dd36502fc9da5c8354c6f7e1ef198b7e7fdcbac9c85508fd830f78bba800094ce822d0b028e44bf8e66fa4efaf41d5f980efb0b31be412dbc939ca4974fea0f

C:\Program Files\Avast Software\Avast\defs\24061317\aswdbfab87e3e45c231.tmp

MD5 a1d5004c2a39044191571c9ce754c7d9
SHA1 4854130b5315b4273b00d459f43854b731fe751a
SHA256 974dedcca26bc77712511f56a633e1d335c0ee4bc9336ff241a1c3c5dfde7e8d
SHA512 5c22673b68ff5c663773c17c2de452322325f04a9c637aa8f7be3c0f0c46e17b933df142f03abb72f7a2cb03d94fcea64a623e681c83956e546b070b326eb1e2

C:\Program Files\Avast Software\Avast\defs\24061317\asw6b8f3d4be25043f5.tmp

MD5 fede58c5e447d2fa7d39b9340d72ef0d
SHA1 4f258d23692d795e2a78d73ff299063a0abfc33a
SHA256 cf52174b647373762150cd11a50eb0ebf1383caf6f641e3f79cbc713959d2a2d
SHA512 d51a55e7475d2d78cc7f79915729e05075b4c24484f60ce89149d1a5a4c598fb260a766b9b5e255d414d8adc3f3d19da1cbbb89a18601ca313f1cefd226d10cd

C:\Program Files\Avast Software\Avast\defs\24061317\aswc9249a4bf7819542.tmp

MD5 be4ffe4e9e7156cf41639e0136928d0a
SHA1 c17d70403725fc1e9d32226aecccfe90a0f4b57a
SHA256 7a723b3fa74b2cc030ed950513e32169ee65d53b17a501c4e5e7edae44b903e7
SHA512 d6fd45abb2da31c38f6b1385e83f7c1af4c789092fbb558ec8f1cf3a817bd1d5cd6ebac0beb1aea963eacf5139494d13a4c63ca16823f32aa33163857f9e435b

C:\Program Files\Avast Software\Avast\setup\vps_tools_64-93.vpx

MD5 19ccddc6032c7041cb3e7e1fa2ae5f22
SHA1 b1efd6844ab4a416f49cf9f23ec7abc84bb36685
SHA256 a736a188d88c5e1823fd28f5eb629d0c00cc007492abd32bcb2121b453761cc7
SHA512 9cb9be189cc5f85e53bbb0826fd367360579f5e789762d3d7709400cda18edda526952afefea2dc31373844c85d8026e3dd1ec8bc916ddb16d25d1aa4c730a63

C:\Program Files\Avast Software\Avast\setup\ais_cmp_cleanup_x64-83d.vpx

MD5 ee2a2c590c03da4943d0bf5f7580b294
SHA1 2aa9ebcb454875985c74bd83c30cb23d36597134
SHA256 415f11c1856af9196d1ec8a58920046352cd90d20a9d216d02dbc477a057e2ba
SHA512 86d20a8f50eab4d46ee3c422c6213ff3346e5a5a13653b7dc5d4a720eaba3c4810322c6c2ebdb7250312be5343d09c1c25d01639e945a55c2e3716d0bb03863a

C:\Program Files\Avast Software\Avast\defs\24061317\asw23bb50e49a97c0b8.tmp

MD5 a6b9c446608623728de020578476692f
SHA1 58a600e36b6dafd98ce5b3bb39e615d086c3dd37
SHA256 ba21bcb36d55bfcd5bf3ae7b2dc4f117f91591213dfa53dc8b01968c4fa2d5ee
SHA512 5e8d705dc86cfca3c1a9992c641006b275d7c1564a7d862dc9cfd228315d81cc45364b6a3aa4db5fe3fe98c01f409173e5392416d1dbba8ebde99c8670eb76bf

C:\Program Files\Avast Software\Avast\aswe55ff3c6812359f8.tmp

MD5 4957ed73d5e5e303e351c8f8b7b53e1c
SHA1 e61238f49e44237c56d4d5b41aeb150160880b74
SHA256 59727f7a256b7a70971f2e62b43b0a923937f85689fc3aa4ae50e4fbfbf83499
SHA512 db4854667285bb1cd8d07ab189607ec5bc489afb2d0a5b5a3388f91cefd012feca689787452901e0eb1de6e8792e69c0097c38b89bba0d977d0b29e5e5ef2feb

C:\Program Files\Avast Software\Avast\defs\24061317\asw91ef5a33c779e04d.tmp

MD5 9aa0791a2b1d9d333b2841277064714b
SHA1 f82e6bf363473ec2e67118ecb5d441e179a102d1
SHA256 c148232a0ee298a5f5cef3bf3a02b78dd5f9ed720c150b3a335a971895551e0c
SHA512 def4887e13ee35890d26eeebeae2d6d0f1190c4241a1fcfc431f64fedb77e44853f0afe9337ed7f58c001cbba75c5a77ee715756bf03485394852a2c69f6d491

C:\Program Files\Avast Software\Avast\defs\24061317\aswce885b7ba8540063.tmp

MD5 d50f2a1db548af0f091e7d442ab5b9ec
SHA1 598635cca4a6542d58df765d3e87df6c9fb07d5d
SHA256 e9c539ee914711fe2d6aaa6f738a427497834b0a6659b6a4e6a665f5d3f0399c
SHA512 20fc7039508568fe90dcc07a19344fa7bc6033288813305bea58a34c014b6ebf20b83306beec3123146e8928d0945ad736449bc581448a0219f5e8fdf196a0b1

C:\Program Files\Avast Software\Avast\defs\24061317\asw14d3ae02b3203980.tmp

MD5 0d1446cc8caa306c7de7c1eb0fbacb8b
SHA1 7be6f264b2a1f4462ad232e30877dd255dc22ec4
SHA256 32e27048b59d4300e4349eba6c3d738bf663c902172bbce1036dca407b92a5b8
SHA512 10e87560da0489ace162b1ba1e6bfe99a5c2cd501764b357bb8ab68d26e0d5b524e46a72acd67c03eb611e1cc1ebfe053812497f357872145621054f7eb8a906

C:\Program Files\Avast Software\Avast\defs\24061317\asw4075c20e7ec88485.tmp

MD5 0f46bf12ca6b128f7c9a9f251e5db411
SHA1 8f4a288f0334bac27c7580278f554958f6ef7664
SHA256 0665c4a33e3ec785cd75732bfe73b8ce985da91366867c896eddbe0be53e0cc7
SHA512 74383481fffc37fa303602e7372d251d7e189ccbd18ef7eb2c1078eb95a5e453ba559a318a7ce736e4b523e42ee32d39d3be64bee862e8f923d5a356f3f2d665

C:\Program Files\Avast Software\Avast\defs\24061317\aswdcd2bd42b7f70112.tmp

MD5 cc171805495180ae75c0240feccde4d5
SHA1 d5362f46283b9348c44ee4e7e4f137772326d1c0
SHA256 2e9358abee34addc7dc250c646224ffd1234f31867a8c98c45620c253226d193
SHA512 8a25446b365e3fe4cc2d85803919986daa2b47bfc5741d5794233907eaa0fc9850ee0815f1f04efcc16866169ee3554bf61c7b13580c0df83ce2021ed3058e08

C:\Program Files\Avast Software\Avast\asw8d8942f216416024.tmp

MD5 7ec734ec71c24a3c1320b6bd4f7fffd7
SHA1 15d291b8338caee0d486435a06899dd2f0ea4226
SHA256 5cda805ad668eb23f1222cfd8b05606d05343e008b52639b8e4570974654f78c
SHA512 392d3f64b92f6049091978f1b2ec5c2f2dea02d0b1e536389ac932c3fd73cb9f04ae7fa72172e759d7899b8161c360d49d9776a113d30c06ba42b123bffb4a91

C:\Program Files\Avast Software\Avast\asw23f16486a285edde.tmp

MD5 0b6b80205995e3fc66565e185ff95c6c
SHA1 8324e0e5eeaf72584aff8304280e4a87707ad8b3
SHA256 b7c3b601acf2786556b8b59be309264ea9f188347b64b4d9a14cb859d85ab882
SHA512 2c7d28eb8123f66e0534da17082c7441eb733a5545e35d7b5caae2004af07f6fab3f293edd25e942cced05f0d2d6bfeedad4fbb1902498b469da127bc49fd1c6

C:\Program Files\Avast Software\Avast\asw108f4ddbaa8880e6.tmp

MD5 0d63986cb214f9f78951943978b9bb49
SHA1 c3506074a3447c59bcc3ff12377a5822164d7653
SHA256 501e933ae8f9145cdc7bec18cfa3d6003da03a396ddd89056a1d515336951bab
SHA512 1a62c40f51b0716072e46436b60029f17d5100a497bfe8154456a56ff080dc19c7d4d1c2e1589e22478c0c79f70f515fa59892d58c355549a260814ca29dbd45

C:\Program Files\Avast Software\Avast\asw830ef2ac3035954a.tmp

MD5 998786fe78664098754eefe0203ea661
SHA1 a33140aa6b00f545e65a7ba970cb061544e92199
SHA256 7a796318905ac2db623f3666f59ec8479cae7968fe35f92a856cd4960cbb031a
SHA512 d56c0fc4f0ea8bbb8f840a90355cb47cfcf64491986ed594c6128d03f9307b29879bad02453b7ba6296551c0139f2002da2ba380fc6bb237dcfa5048ff67e39a

C:\Program Files\Avast Software\Avast\aswd97ce142c02a7a5e.tmp

MD5 730d58a19a0231e705d7d63419d03051
SHA1 4202e59cf8f0fadf89260504d1a237fd1fc3d440
SHA256 595eee82ea795de27da52e2e57e9f1d41614485a0c3c9988017cb4c3d8b2c081
SHA512 8f59fcac4f01b1dab22e08f58f8a80f8988f59b85d31fc0ac711d616d359e4fb0a0d0c219d4a524007802c143ba9e4e22129580f54aacdb720482c1ebd2d7547

C:\Program Files\Avast Software\Avast\asw4a527523b164e98e.tmp

MD5 78678d949d8855917c55a117f8087eae
SHA1 6c87c3047ff5e2a285a0e13112d4631f3b6392d1
SHA256 6f84673ce9ddb6344913888f39fc586cb4977d51286154d3303acf7f1cef4511
SHA512 32546da0790fb6da798459cef0fa88a9443f764c2aec2025ea71c143e253e374307f50f0a4ee9a3cd363c801a6ee62238e6c5fb02790ef0f3599e69052d23e3c

C:\Program Files\Avast Software\Avast\asw6bf257786a555e02.tmp

MD5 489ef097414bca18c70d2d264d08517c
SHA1 85ef7e63faf5b920cc26c2690dd019cf4d901822
SHA256 fb821f4fc17e2d1033e6f3a214239ea3557abe6469c6f82c5f96fcf2a141e32a
SHA512 9326fb896979fe93e04c8cd1be4baa7f9a7a43e034498801c2a1b67df0bc7d34d54d29d1fb471d05cb17e9464684dddc09ec37cb3ef91ce021ec6ce3919313ee

C:\Program Files\Avast Software\Avast\aswe300f2b232659db0.tmp

MD5 1478ec3def46f603bf5ad09fb0fc367e
SHA1 31c1ea0c5bc318a330abc1b80ae69a8d62615af1
SHA256 10132ecbc42737d62b4047ef62ddc722bb145844f139d9629be9d70e30a77426
SHA512 ae9014d4cab35fdeded714408333b00b29614efff1e82274231e727a698787fd524ae3657aa3f6b09358182946d2957993c2bd7deb184ecb3e1744ae086e1d3f

C:\Program Files\Avast Software\Avast\aswa9a5d14aa946037a.tmp

MD5 5bc94e57b55d52b236abcdbff8974151
SHA1 bfe427f8b8a2608085b11a355f4e0796d5cd90ea
SHA256 eb8f14bbf550d159c88475f2978003ec3b66c3070bd6bb88a639dac872625e9a
SHA512 3265d5422089358121160fa9408568a34be0899f818e7243502cfe0dc018822701410e7a8af2bde31643d5d3dbdca9e859f53583270d7c0f20a79b9597a2157d

C:\Program Files\Avast Software\Avast\asw7a7fce15ce531d53.tmp

MD5 4a8ecea3777d0767f88f93503a368f4d
SHA1 6ab55b8733cbde4f836126f54688c7290ebb6d60
SHA256 d9131dbafbab877c82f1da1bb8970db6f82f6ee40e3fa957cc25a03385437af0
SHA512 447faba2d15af7d1a3beb83ab4125a43dc95ea66c65096c382a0b6a718cbc3f487f9ab4ac5779c735639c8c956bd8cb1ece14ac22700f1aa2ba9c0012fba2ed4

C:\Program Files\Avast Software\Avast\asw987d8c8fe8024a19.tmp

MD5 abdc8729a6754f67d63e7924335ebf2c
SHA1 7b9eb286002c7475905643656f96396f6edcfa11
SHA256 de74f4237ce4186e1e12dda887f3e5f1ffb4376e1e4e7fa85512c70f9e215501
SHA512 161972bb93f207518bb44bd165d9ce351934cc204984e43eb6d5f446dae5f1bcea8af4b5ffd3fd0976ae7e2718db740e7e6b3d00a4b7257e93b1dd9ab4fb8907

C:\Program Files\Avast Software\Avast\asw3211c03b22c74c4e.tmp

MD5 dfe443f3abef2ce3b2fe1d3c309ce50a
SHA1 cc4041eb8d66549df21314f50834659f0e23bdbe
SHA256 04675e23275a9ad0305e8c5b53e2edd5bd20cf170cb2a1a0e25c4b71ccec7461
SHA512 a232a683b5ccc3eca4b7f380d48673c7a342d9263bf1afe000f54108516989801a5bec81dadd14e9e6495d1c59f1419d8fd916a3b3445ffd52de3b415d1e1f42

C:\Program Files\Avast Software\Avast\x86\aswbde98cec3d3655ca.tmp

MD5 659dd7fbe0dc9f1e6fb8e25f8f4d690b
SHA1 c898d27a0f00f0edeb58681ba3a508c2d6783eae
SHA256 d0dfb9beb4b3d1cc985c95092406d25dff1db33885193de13a66b395e77bd2a9
SHA512 f7d014e43719247bc0db4e5421c510ef32bb17a3fc1924824501f2dcdf1fd843e94616ff4ee4b235644aa2e669f736a503cb763f374cb6cb76a1336a1924c973

C:\Program Files\Avast Software\Avast\asw69009d4d7132b047.tmp

MD5 096b890632e722c7f72602172cdadc73
SHA1 1199e7a3d64b7d875f34e507ae5a8897e4557068
SHA256 9f13d3b3550c14ff624ef30bfab794daeafcdbc80c6c823c540bcbd4d3406076
SHA512 39cd7fd04a459bb3e231de68062728c6cd71f85ddfe9f66bd589cb4a279c7a02f4c5b7409f52541c58e8940c586966ef5440d53ad547eda7f05745fd22710850

C:\Program Files\Avast Software\Avast\setup\ais_cmp_idp_x64-91f.vpx

MD5 698778b4f38b248bac0174ac0b57b592
SHA1 62ed497f564331b6bd5a84c77e75145f2d8e8c4f
SHA256 e40cd7a6186409c4fb0bcdce168300e37959a400922475c86bae35118ceaec06
SHA512 984ea4929d7a05bea56c369700ddb25f2dce9c878b997a3e5b725183de1d5f2951f694b4d888f24a0ce7ac88f4e69f96cd9b168387cbb27940653e259f8e0fde

C:\Program Files\Avast Software\Avast\setup\ais_res-989.vpx

MD5 3a6452a2d55f40a52823185e851045b0
SHA1 9c69b6985e451f551a9f20432e8371f456b43b1f
SHA256 7a57cf03a62688e3ce267095ff2cc51ff2a65ba2c11d35e442a3dc801487d885
SHA512 475d51517815bc41687686874275d0f32babb72cf68b55ca81826ba54c47cd41f9ec10d3c89a09467fcdb727a353172583a297cf1c1bb8010e2bf5c0f18b869c

C:\Program Files\Avast Software\Avast\aswc3cdaf45574b1079.tmp

MD5 dcc99ccf9ef3680c0d387b44490be21c
SHA1 5a21ca37c0d244a093922acbabf18d3cd801fbd5
SHA256 beb398ebc5f791c754d1a71ffcc9554e669136d7346f7ed9f79d819f1eaea45e
SHA512 9f7d0f2ee65c92a586790112b59a627dd34983b27d31cabd0901a0eb0339a7ba46cc0f47f880a06818780c513480d8390a40a9d51f7986032bebf2971e2045e5

C:\Program Files\Avast Software\Avast\asw7f65057f1371b76d.tmp

MD5 d075632486a16f90a1d82af14a110cec
SHA1 42a6aef35476550e39ea78366f557847d37ec200
SHA256 4b819ff9ca02ec22fd4319dbed1eae3f5d8c6831790024403c5c62934e8f6e04
SHA512 1112fe56087d14eae485d8c3a1463823a01320a2c721e69670b548c2ead65a6dc62caf98bd3441eda7adad631ea1b6f6044f4d7c64c2f59f2e1258a6b0a75588

C:\Program Files\Avast Software\Avast\asw38a617541388e8d1.tmp

MD5 fbfbe6eff0ae50567001616a83854e0b
SHA1 f7d6112aa3177fa7d48837363457772923a08b7d
SHA256 a9283c0b88eb364b13ff41ddfb73a3467ff5020cc88b2b484198931c5c4f8271
SHA512 93e37c83346f9246758fb67cc447ac3f5122eb0fae6a77bd8eca369e8277f6885c15d19b423bb25d1e3b776f9bf84f80ca3958a1b2dde3766c459edd64c5e61b

C:\Program Files\Avast Software\Avast\setup\ais_x64-989.vpx

MD5 c6e18bbfe80e0adf796d6333f24d56d2
SHA1 c345d4c3434e2ab4f644d8079a1530a05bba8de4
SHA256 e3d29c95fb4b7cabfb4e3045d4e240199a051c692e69e786d929a81d8a3b6a3d
SHA512 a2b1c0c800ddd60e4b5db588ee75552ca72e19bf05f9f34af64a00b13b2ec662b27a690c6678321958c1fa29efd9866255c0456daf7f7072772ee907c2747d9d

C:\ProgramData\Avast Software\Avast\gaming_mode\asw6bb4a1bba1b52663.tmp

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

C:\ProgramData\Avast Software\Avast\gaming_mode\asw3995a28f345d1923.tmp

MD5 1527c1fd5da898c3bdb68b8a105937a4
SHA1 d0f9fd4a698f91f54f78dd2043c1349a7e4ae7f3
SHA256 c269c9e66b2acdace62e8ab631f39c24801c4644193bb3934a8dea3c43f669df
SHA512 d574498392a55b47dc81276d63a33e9870232e77f60ac0d78c9bd29e3d419d015a19241e86a7963191643f6c0d0fd2db613ca5290d559c3801358a60fd5cd27b

C:\ProgramData\Avast Software\Avast\gaming_mode\asw2192ac1be7740935.tmp

MD5 9bf31c7ff062936a96d3c8bd1f8f2ff3
SHA1 f1abd670358e036c31296e66b3b66c382ac00812
SHA256 e629fa6598d732768f7c726b4b621285f9c3b85303900aa912017db7617d8bdb
SHA512 9a6398cffc55ade35b39f1e41cf46c7c491744961853ff9571d09abb55a78976f72c34cd7a8787674efa1c226eaa2494dbd0a133169c9e4e2369a7d2d02de31a

C:\ProgramData\Avast Software\Avast\gaming_mode\asw15642c1289fd0498.tmp

MD5 0bd42763975dc54ad5efdcd321c750cb
SHA1 24202455a58c7ced31240a90603c6489728bbfce
SHA256 4845a0d7b287399933536c12ad5549fa4f4d49f42500c7311dc2c3c108480a7c
SHA512 9204678ddef894657c0f6bd5451294e104ffdea90dae12fc3f642547debb80435b0cc9d08680f50482bc1236daf5ae1cd79c322eadcde7765e9e251231753e79

C:\Program Files\Avast Software\Avast\x86\asw126f5ef0835f9a16.tmp

MD5 94c6b07358b03a4aae94fcf5cd8b0743
SHA1 f7a4ffb5d0dbf2ed3e62fac9a97f96e6ae496ce9
SHA256 a4e14c179ec8e6cf0d619e8a357439a0cf6a7e9d1ac855d0e4c7ee742f757ee8
SHA512 1a1943bbbdfb4b313c70451b3bdeea173537c91b403eaaee554c55f00de54a433261491c074ee4a63fb4063c17bec8a6f54aec34068f2e0c33eb6e14b7aca01b

C:\Program Files\Avast Software\Avast\x86\asw088597e9b47d295b.tmp

MD5 ad369d0e15acdeb43a7fc49f7928d502
SHA1 ba37c11fa4f2536dc4a5bdfe0987fe65f24a37c9
SHA256 667d71be19c08deeac0ef1b6b8018c2a2e92f60d87fcbda511dc903bb85f0cfe
SHA512 1053a0404f7f03a6b9d21a62c709b7442531d0805687a64c1bcd39107638c84e17496418973791d2b9661c23067808f6e88d014591734eb3e1da4ae6770b855d

C:\Program Files\Avast Software\Avast\setup\ais_cmp_gamingmode-920.vpx

MD5 77389427bdbf1740ebe81448df4b3250
SHA1 7f6b606a28e814eb4bdd67ca82cdb3f603046dfb
SHA256 d136e791c377f7fcdaccf39f6abe9df1aa2a52365c0269f976ca433a3adb62b0
SHA512 b4494ab14e86ba497a9b55fb783ecef46eeed300d80c01a76e4f9a976067b525970c5ff957e188cce7857e1ff5d76dff0239f1436fb5de680fb9debba21e5d40

C:\Program Files\Avast Software\Avast\asw46a523d018b9bf69.tmp

MD5 63ee667043f221eadce0dba7d8b24035
SHA1 a972c5c86b848e821224695d728188fb04fc12f8
SHA256 f016a1ffa6e4fec707cf75bfa170e0458c08d8ed13cc3603714f21ab5226b636
SHA512 c7dd965ebe7fb04bb301b876d0f9e5f678cbc7015f5e5faec2f9fa4e2925dd4e94668d88b069e658a39e90219b1f98e1902d454a904fb589004b61fa73e986fb

C:\Program Files\Avast Software\Avast\asw82c7c6330befdd56.tmp

MD5 8021f3b53627383b7cfb51ba6f2cd79c
SHA1 0d3123f4c18753f9030c52f67096ce37c13929d2
SHA256 a772c02e4c2b1045116c224bc5b0d8fb5f825113207c597a7fa9e154f05b3412
SHA512 2934fde99be6174b31a9b0942cef326e8edf90da86d37378c875e127e7344c1c66b740c2376d68d37266f7eed9e2bb937119b981a9fd672e519e80a962fcc285

C:\Program Files\Avast Software\Avast\asw271e577b74ca2e09.tmp

MD5 807cc59acacc8f8c1b340511469b553a
SHA1 0f1e8dc38af478d110534cfe7e16c3ac770e82e9
SHA256 19f88884886704df6e83c7775cf2589a893d0c644bab7b8d4cbd8631f7049fa4
SHA512 c7a0ea949e07679f3e80e8afe262d88f12ae420ebb8424d350329d460b2e09a1e39ae5ccadc8b752b7528eb14a7549328c7fa9f29f750c9785f1d7e88b61759d

C:\Program Files\Avast Software\Avast\setup\ais_cmp_rescuedisk_x64-8d4.vpx

MD5 27a4acd4ef7da30257f24205359f8397
SHA1 6f00b73d9b41809d76d1661db30b63915af4e272
SHA256 5f95a353a2a4da759ebeef42dbe22bb91a89c171a7eefd6c9872d5d4c36bd9f2
SHA512 7f09af93f58e17ad54dc4b32dc09d3bf28c0481baaff200f60e241bf65ab3565e4bf1b41fac05b09510fca6b6c589a3326bc3f4263bdd54192d56aa0da5a3e8c

C:\Program Files\Avast Software\Avast\RescueDisk\aswf7c078856ebd9d85.tmp

MD5 51aba93b65204620176963b8437ced3b
SHA1 5e52b7d58aca658da053f7cb6a4d982dc04ecbfe
SHA256 875204eb16b067619ee9ef540cfd822391685e16ce9119c74dfc7c9b5b940206
SHA512 abe37d442508fb8fd749b694e900d30d70fbaded4f5c798214ab2ac7d9a3ed55d853a5c1b59b24bc26e9c58ec079cf1f32a611a447f95d057e3e4d06323d6de1

C:\Program Files\Avast Software\Avast\RescueDisk\aswdc856204b68a3a81.tmp

MD5 1fb0fddf13d90f785de23a4ef7e2989d
SHA1 61580f779bfe15a27a7702e5910f8e0c4e063c5d
SHA256 c40f472b580205331a0e68542997a0334c33ccf60d96ba644ccc2489f75afe0e
SHA512 a17f4ef91b671996e14e2fa32cbe42eac44661bab96b5903745a0e76a1e5eaea543c07fc3a66bb7c9689ffe0ed0abdaba6dd2f40b3c4e7e68d705e5c30535833

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswb29cd5faaf48ac8d.tmp

MD5 bdb8a2aef076abe300d6fa477a7f8264
SHA1 175a1099996fb76db6a5c2b367d2e5a387c31476
SHA256 5f429286d7e21c3d14f4194b3282c4836de0dc0e63575aa2b33bc1e19ab971ee
SHA512 e1bde0d6db3c1a1c3063f6c73a52a0a28e778a4ba59718fa1c7fce1ef2f035fd7bbe7b07ec807b161e08ebfeec589f6cb724749951600cb37f46768bb788b203

C:\Program Files\Avast Software\Avast\RescueDisk\aswa0e0a28079cd56ca.tmp

MD5 533a48a353976a0600db9a40b5ccd569
SHA1 5a64c175349006900d99821cabb9f9e6dbc945cd
SHA256 086fc5cde5c97c5043c3eece33114e2f4f5cb9b057f14747926c8ea6f4cbdd9a
SHA512 23d246b36fba6b30236b11f6fd6f061a18d918fb9a1f99f6d1d24fb5cce3f71aa55362e7c2e2e994f9bc15b41f71d432ecf98396a290591215a1ba76707fa0aa

C:\Program Files\Avast Software\Avast\RescueDisk\aswf3af3f1ef8565bfb.tmp

MD5 50e7db6342aa487838614a6d23e8b9bd
SHA1 0ab6c74d364286ac3a7e965c3ea828465a850027
SHA256 9c97a91831aa24bb7d6418ecd4bd2cfe71821fc41ccb419cb2c4318ec8136275
SHA512 b9466a318a555022ecfa229a06e1d887e969c7e5121fb89c937edfea4ac3eb02eaf09289b8c048e02b3455370a6afe611129506c599a9b43a1394555e4cc795f

C:\Program Files\Avast Software\Avast\RescueDisk\asw4f51951050e58507.tmp

MD5 dff7d2582932cfcfb561c98d4bc97372
SHA1 006be407c9bddb29e569445aeea53a5ce4f57b89
SHA256 3c9358c274544e11caf67867e4bad71d87fcde4d12a9865ab3d985858a97b3ac
SHA512 5261f1582ef6736abefeec0cd36d0647ad3cc1a91960592b9a7c65b3b5a667c005adb20265551bb61d4a9fa7e4197b9944a8e1b6fabcd85ed4cc30ce404dd17f

C:\Program Files\Avast Software\Avast\RescueDisk\asw57250a950fb58d83.tmp

MD5 ec82d1081d31554e75d7e72b30d31d78
SHA1 ff5615640cda8cec9fb0ad3fb8a4e441bcc8e398
SHA256 0823905ce46355fe514ed547d5c639af39b2b3d28a5bcabd1846997c7a4208b7
SHA512 2f36323db92f1c1d4e3b8f18f8258830a6200bc7061eaaeadcd0a655e30276592376fa4c4f706f497d5fcd00a1e5c5649e20407d3860910a184ccbe4b36547b9

C:\Program Files\Avast Software\Avast\RescueDisk\asw99733919b0544867.tmp

MD5 bbd60a023299b63864fbfaaf9699cf34
SHA1 514838176e634bf2249f730895cb7919c16c5463
SHA256 3b7e420a3207016d2d80aecad0664b4d9bd518b6bac72e4784fa0e85bb0c7a39
SHA512 e5b2740d314ce766d3a5e2c818badd876967a050be0a6ebd5909582be111a178745881e23aaf944ef3a3c8094719cf480b6d808f4bdd2f360f131f723b5cb02e

C:\Program Files\Avast Software\Avast\RescueDisk\aswc1e64f8f04658e7f.tmp

MD5 99100ca590fb410f68e3fae1ed489cf4
SHA1 2d96be7c0051d2defb473b026164a11c2c51b52c
SHA256 b77e455ebfc46871e16e30739e7b89743191a59ac4ed6c19c086fc2a881fbc7b
SHA512 d849707474938073cea2e2c5b7c1db59c02b0caabb520bff7129b0faff93a2ebce43a09ee243f06accf29c1008f8316324fceecd834174da3e7c94e64246d924

C:\ProgramData\Avast Software\Avast\aswa60afd207691e527.tmp

MD5 db89473157a2109d2cc065b9c62acd27
SHA1 d903a0ed7c5aa5a686c883a597894657a8c0beb9
SHA256 2b8d115e38b1ac4ea4fe0ea24006e4e2d7e6429f469b4ff0f1ea45fee4e7e8d6
SHA512 41486f90632e52127358b7a6046b347d47ffbdd62970ed67980b56c247f68ece4d7d0250e19c28c7045ab3d4c9d7db40e1aeaf2a4ab33d6ae4b591f05ebe3d3b

C:\Program Files\Avast Software\Avast\setup\ais_dll_eng-887.vpx

MD5 24c1ba1221544007db08b39196b08a35
SHA1 e6ed33311c7a9b8001429a5a63847bd3808fd0df
SHA256 bf4a8700a6335d4e322ccce957735a080dd1a18b93bb69a2bfa353b6cef38943
SHA512 02981130c8bebba5001cb277bbc14fe0c916b7f39ff4c94fc294655fff5a63409eab697078249623a5411a4fb285e08766de7e04177dfc5377042c3d55f9420a

C:\Program Files\Avast Software\Avast\1033\aswe452e91563da8b16.tmp

MD5 fc2186907b7d62590c5d9e01bb6f8c61
SHA1 4ec17115ed4d2b50424cf1aa2a05ed048d857f27
SHA256 2f730252b05339390b9502a6bd7b76057bb191e9771f8f625e319a2c6ffa163d
SHA512 c27cb2cc026cad80604ebd585fd09c7e0cd6f94e249ad0e46d65ce1c708c07eb1ef46e8a6e238b3e2420f1939f5ac93b9ae26f3c93b0adf67f88600b6967deb4

C:\Program Files\Avast Software\Avast\BrandingData\aswb66dd80ee5ee0b84.tmp

MD5 0d5e303798b74c90f5aa20dde60cc285
SHA1 c745d52ee327e8a990d8e34209ad7de1630d4940
SHA256 3097fec3faae594780371bdd7fee94238cdf20db47051f078a9aa2396eebe831
SHA512 77e17089684683e106a400bae093e414b4dd4881ae5166f456f2f757d3817cbede009fab6d75c2ec58d8fa59f45d67c6fae6e927259295ac33c048d238d56c0c

C:\Program Files\Avast Software\Avast\Licenses\aswc3f51bb9354a3b31.tmp

MD5 a2a0baea9713f129f7d433dcfc635167
SHA1 349e31d4f425c71d5c63e2dcf4a19f5e0edcb57b
SHA256 f155f8f66833bdc8e0479656256bfac1d66a9ec9df4aa56292308f522b4e3fa7
SHA512 87dd90b17aed6c5aaca53baaa3d149c07028f730ca34681842aa9c855817413345af27a0bd27dfc64677ed6d9b2e9013b585bda06130315cbdccf0a27103a809

C:\Program Files\Avast Software\Avast\Licenses\aswea3d22a9a5868b1d.tmp

MD5 a5f132cdee178b77dcac80346cc12b62
SHA1 d44350c4d2332a9a30f154f896e88a3e89016825
SHA256 331b34c5d939627eb370fe4250beaec0d0fb5edbf687b0c3631930385026cf7c
SHA512 d3e45ff903524667e40fd06870c957eff349e44eef22a2d9e9e01db9ff806dcfb3082ad5bf974b864944a6c4b2d7d9910d67e440a5bdb50be23600115537588f

C:\Program Files\Avast Software\Avast\Licenses\asw54773282ed687831.tmp

MD5 928ffcbe179ca1faa2d4a2747ccab1b7
SHA1 0978fa6a4bb455f6237eca37956d179b7512fc1f
SHA256 c8d3b9240b998223daf58ea16bf2856caa5cdbcb75e93d4fd20c548033d885e2
SHA512 627af0d12924e508694e977823fd6d705700eec590e9edd432605078b007143cee5c70391143ae259cff9287db89fc3e613198c4c586236d71e2de70cbc6d0cc

C:\Program Files\Avast Software\Avast\Licenses\asw332c9fa87d62bbbc.tmp

MD5 c58efea00b9a80527a4eb1edf3b48d42
SHA1 7a9460def676dec00affda16aba1e93f0fb26f74
SHA256 a9c42b959825bce9b7c72a7b0797a41580cb21f407b73e08168fb1ed1db438c4
SHA512 6cbcc440792e05c8b73755acb329e2961a1991b730fc468d7483b1c005bdc664271237de634c3a1969967f8feea03b36ee8d2dd58e94dc61f553c4d728ff9d2e

C:\Program Files\Avast Software\Avast\Licenses\aswcd40a8fee049d7e5.tmp

MD5 a3e6629906286395714e96dc4ac8edf4
SHA1 e1faf4917a367e29be497afc8ca14bb7b4493efe
SHA256 bdd96967d9b60683a91e086651ec03eed0d4ba142b37993111a0b1a608f8a05d
SHA512 c9be16142c2d45b9e81b2e33840b58837eabf94b3659cbce65e18d1501ac85cfa35fa087a467cbd55d633f1dfe370e61abeda2ed1e6db4e8b65826b7c41a4ccb

C:\Program Files\Avast Software\Avast\x86\asw8ebbfd8fabc73ee8.tmp

MD5 812e6cc70c94511c43e34b174c400414
SHA1 934c11a1e913eb5f326ddf769ebe7b19a2931786
SHA256 5e6dba1e390c6efd835b0d71d39de3249e2d6367f526c1df20bd309866bedeb1
SHA512 f462c15c5cb4d4ea57ecf8f18684bbea5b3a9c9caac410a9d05f3d43f93d21b80a813722c3b7a6df6c4c91d7f2703cab0ae8528f3fcb595f178a52f202e3a137

C:\ProgramData\Avast Software\Avast\Fonts\asw04390574ca56e301.tmp

MD5 52f9b35f9f7cfa1be2644bcbac61a983
SHA1 c348d9f1b95e103ac2d14d56682867368f385b1a
SHA256 28a1d37668b4cf94fff5256e9639f175baf4dd654ec84ba910485d38beefa6bd
SHA512 de48b5e6751134c7fcaa8ee4c734e0f458e86fc59249ef19d9c45b7098eb7273c4119d5944332465080154a3d9c8acdb1aa84ccce011bbe5c7f32251acde6cad

C:\Program Files\Avast Software\Avast\asw2c25553d62553179.tmp

MD5 1b231b5c4d36de4750a587f08338dede
SHA1 80305bed318b3124f3c3f5c5a1e577bd0a1ac498
SHA256 79e53d36a40951ab328e153bac9c1e3adf3330b45899345e645889b9046f06e0
SHA512 e46ef05924aad05ee9fb8592babd53c9fc4bbd136ebd2032acf28682ded9e78ada3de1276c2eef63cc9630a8e8cbd618013e1562b1af550178d84e0f0c11fcc2

C:\Program Files\Avast Software\Avast\aswb87b79127ca5b322.tmp

MD5 c4dbf833ee952dcaa9f677d733143a4e
SHA1 0f0cfa8af3cbdc3d1d9f69a6459386e5717c894c
SHA256 02b805d062e6cb08060b94afb21df1366ec128c59309549c367cd1032aedb8e9
SHA512 88869268e5594acc8720d79ecfef784fbd5142930cf964c0d891f91fa0a5271d7cbb841eec25dd14df4eecd1a1e9c1cc6f054cbebb91174e19ebc49d8a1d4481

C:\Program Files\Avast Software\Avast\asw33ac2881ef8786a9.tmp

MD5 e4bc30ab34c000d6bd913c5ab82f7c5c
SHA1 9768473c7acc9cdf8d203a247b6322601f6cbd67
SHA256 4ff894b1e005d52bb765fcb9d234c9536797e069005447f9e4e823cabc195f59
SHA512 a6143774b878fa48e14dca7c7a1690279f91687077e2404522be412a355ef3b1b903d3f4954141c36605fee415f69ca8afdbc17b3a64b126bf55fc26abc1d6d1

C:\Program Files\Avast Software\Avast\aswdadd1d69c4aeacec.tmp

MD5 ad85cb9f323803b611b4102c54a3b1c7
SHA1 e4dae439a859ebf9722d34512c907ccbfbef7a97
SHA256 3ff4ef4325908abb694112ee03220d187277f0dbabc752904b51cbaa15a2d847
SHA512 30af780dea90eb2c43878495c53bf212538b5a955a7cf6866769bde5e3c2c270ef9bfae8441136d8fa6a1362e5754de688893535246a461b94c6affb29e74550

C:\Program Files\Avast Software\Avast\aswbb8e08ab4e4fe717.tmp

MD5 c5744adb693e20f3fdbea460fb7b2f90
SHA1 2de36351a7da12ec923b9f6c86c40bdd760d48bf
SHA256 a542198a444ef71d3ec2be8f3720b0edc911857ab29fdf2139a415bfd22c8220
SHA512 26a02f59f3eda2a1504d7c60b9378b4af0e642d8ebef6af50d0325247871021e3915c676d11eeb74e3eaf597c49d7b57dcdbbecc2a2387b0bb317e8020e47ac6

C:\Program Files\Avast Software\Avast\asw40657e4919e15176.tmp

MD5 30b03631a8fb495e2e304de47bbc0066
SHA1 1a0fdea595fafee4869946648506ebd8f1c88cd5
SHA256 a535aea17769bfafcda1dee12c7ee0d6d90e69bc4abfad027d614afc0bd9b2d8
SHA512 c01feec6943b6219f5546fb03dfa131897c446ec47beaeb74c4d5d8a690b8d82d8cd46c2fb52429cd00dc3f4f7ab13ca505b9f6216f579630a336eda047f3745

C:\Program Files\Avast Software\Avast\aswfdb6a932cbe3d642.tmp

MD5 35e4b1081581d67721e7f7116b880365
SHA1 58520395c21c5691472b4f60844027c1049db0d9
SHA256 286510cab2d24a12277a31bb1222eefc64e0083d181fe413f2b51c8b820a7c43
SHA512 a3a77169860881789506c672515c3d4859d07967275a58e488334bdd2097583b4bd0e7d85b4e935fa9bd12084117f3b3b52a5bebee0d0535c81012933e3f8b45

C:\Program Files\Avast Software\Avast\aswdca6353532bdcd36.tmp

MD5 ca08c1be07f41a9598b636553c05d9f6
SHA1 5a68a2ebceb414f7895d2b7c313da3b42a848463
SHA256 df2e08f999dd3e81222ad4f497869037bd728a84b96b5bf7fb841b3244c64522
SHA512 c2f54dd00adca4c9fc79255416e6fdb884011e2b87373dec3b6aa45da5986891e1948d4be33bd83dbbcd26290a171bf867f07d6465f6c15ac00a7acbd1e567e3

C:\Program Files\Avast Software\Avast\asw825807e781b01fda.tmp

MD5 fca724d5dd72f68f40c5d93096d53e5a
SHA1 5c47257066d9669964e88cebae2c5a956446f00a
SHA256 24ade6dfb8a0d187bcdbe1581fe733c11613607ebc653ff6b8d302a47f73649c
SHA512 b41f01287ad77f2a8a18a2309df701045dfc2e83db9fcfc38c19a13b4b3c74142225ccb87691956bac29c733118713e0f9d77303c87d5782424655d40ea541b1

C:\Program Files\Avast Software\Avast\asw429ea56328b3a5b3.tmp

MD5 d6012809d7d0bf6ffebd2ad20500d46d
SHA1 501ec4d2029ffd64e43a8ff2ef90bfb8e608e721
SHA256 1718d7ec503e410d14c19370c3fd85cbf42b674df3e10032762622644dc9df2c
SHA512 ae3f7b368ad34c8e06c78f2d211b06c0199d3c5f5d837657082f78091f072f48c77ec39ddef33da3fe571c543a0919fd35a7ab59a2e729f09430d3399e8b5468

C:\Program Files\Avast Software\Avast\asw63a324a2f518deb3.tmp

MD5 6b3f95a901eb2c74c33d2e375b63a225
SHA1 d65cceae5d243e1e6fb36a976d0594aaedaa772a
SHA256 0607c0f8ba77f54532fe59ddb6269f15edef373738ec1c01ba12add0110453d9
SHA512 8ef750657068103a4dcdafc7947d67e23b76a33f4611485824c6f60b8a10dab4364e4fb1c3d3fb952b14fdd73643d2ec56b7536b7c33143ce97fa53a4913e5b1

C:\Program Files\Avast Software\Avast\asw0ad79f9d3d9964ba.tmp

MD5 6a960fd60333f65fb6c9d0f746435a5b
SHA1 3c60ac2de63f8daef6145183d98e749a4a98d6c2
SHA256 ee387622219dadeef672cc76233270daeb54276bf084964d06f0f86eff003723
SHA512 44a20a6b9f19d233a605989fb42361fd187050d2836e7072717ea1a4806e32d74cfc97317a3d950852c478c6436781b9d07cb42a6fcd33e17a49b54eaf839024

C:\Program Files\Avast Software\Avast\asw5e541b39b96f459a.tmp

MD5 6fee2c983a5ce0c55fb9c6edb3b581d8
SHA1 55e87fb232df1e8d980239ec6fa8f474ba7ae6c5
SHA256 e3d1849609c45fa4d8cb2a315f86790e2463780c791b6271a86a2f39e67da9b3
SHA512 cf6810d57fa94266ecd5a0ad8526235bfe2d396cfdd988bcd894890e4d10193e197afb5b2500a617254941484846310512963d867a44b20d554aa65b95d65322

C:\Program Files\Avast Software\Avast\asw14d6a1ab7521a8b5.tmp

MD5 433cfe6a80aadbf17d24c0ec04b305f7
SHA1 4a541247eb13638aa4b7f926e4470cdf1099edbf
SHA256 1057b4b29dd4fa688a58dab9bc36b3d6cd5c2a2cef0ba0f8c5457de3ba455cb3
SHA512 03d36a510f70aa6153dc5801d124277659e6ab7593378b832c107bbc433a9bca55a3915902f7cce26ba1cd9fc96c4d4dc7d29822ed001f2066f09ba60e5a8e6a

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw07a8bc598d6214b9.tmp

MD5 6b33e6f1d77cec0901ea8e91473bc18b
SHA1 a397d2c6aead0b3e57d413a8d4af7f28e67f4166
SHA256 449631a3f5fadef72acc2c2f84765208d0ca014ec1fe93fb9ad805eec1d40eae
SHA512 8f5214e38202719f6a7549b2b97ad24288974cfb6cf0da1e9eec5b3b2092220f2330a260b17e28afa90b90226666a765a4e64fe91107e2063cde8e285f64773b

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw87fc4c10375ab82a.tmp

MD5 31f60bf9a22a86cb8879fce5c1022254
SHA1 23cdaa4d6ae0e953d083b968558a2af49bf95a4f
SHA256 53afac76a7124a132a7c11261f3b6ba8d6a5466e7e8f683c8d12ac370b7d6b62
SHA512 c41ebb39cc0939b38d788b692e75c10c78a806cc8844d8526ff25869777eefd086518cfd817ebb700e20b3937401d6c0f7f506bcd479fafe1b801507376f4ba6

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw08ef78d81f288f61.tmp

MD5 0f4e5f6c68c514e63c4cdae9eb9e40f5
SHA1 b755c91cb14e9f22c690209d0b4c3661ab20770d
SHA256 945225e01a65e5199aa7372b893da3b42dbd99f315c345f0e7c136af88e897ef
SHA512 8962e7f92446c535151b38a7e34bacbfb9f0f48ab57d4c2c8f2162dc2f1cd9f15be70742032192b41aa368c97a149e1e6fa6991e29077b7b7d7c1708f1a54f9b

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw9127a5413d96270d.tmp

MD5 38646cd15ac25a8d71bab09d5b077338
SHA1 4c153622a3f069480a194bf98add276f9138e168
SHA256 cb9f01af9ba4b50c604633073e4003652f1e99faff93daacd4502d4c08177688
SHA512 43844f5e82c7bf6a485a5411ce19aad3bb0f418852b86bb479f41170d85e04d02eaa76092b84ac7a1abf14b285d66fa2ff891cc9c97bbc18633af14ec44cebb5

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswd6edb1d53bdc8449.tmp

MD5 d1f28f796bacea3d58eca271fd128758
SHA1 934efde030a54a441c342af18ab5275e5facd0e8
SHA256 b8d3d45141ad57d917b25d2491a07f20c77b1dfd047e203e26dad591c40b225a
SHA512 4b6ada7f10a4a660c3b6ac0fd81a41c680bd6752eb1a70da08510feb10fbf2b7d5ee177a94d5093239914eea79114097329a64067a72068a8baea8a9963e3901

C:\Program Files\Avast Software\Avast\setup\ais_gen_openssl_x64-7ee.vpx

MD5 11a1b27732a2310037bf5bae3bc3dd67
SHA1 d8a397edfa3a374aff5350e184c0050da436a4e9
SHA256 866ec863b2d8f196bb0f19a23b719acd5538a0d643611567143a82d992ae4246
SHA512 66a10704bce4457f8851c5b5602538609cc4ab28803a9ac0bf4ddb5a85d5cfa12d768624790481809d3a6b7356b9a50859067d2d00be4bfb05459bc16c67ccb7

C:\Program Files\Avast Software\Avast\aswc2271b575aa18834.tmp

MD5 40fef9c70a9973085b81fb328805b812
SHA1 cbfaa0e0d2b1f37a14473b290ba70efdda54d1c1
SHA256 363a20b01a75e9aa0400d5bcdf2c1e020d413133d3fc05122c485ebbb79cd908
SHA512 1a2571e7bff681003db7efe6f74ed88e7e4a173b539f4be3fa28022ac36c110ded2f2671299db7d577b0009066a06f6553e43395a869ae6e5b48b6100c47283b

C:\Program Files\Avast Software\Avast\asw94f3eea150b1d63e.tmp

MD5 9a7bb87a179c2970b5ec4069f79b04f0
SHA1 e41ec4c12715e5c083214f52f03220d131523564
SHA256 3fc65776066535eca6fd4f8c72c89b20b0ea4de42c6398bcde17cd6b5cea07cc
SHA512 f5130d5bfcc8efd3ee72d9a3fb24d0d7b6f1fa61dfbf06c764f439ae6091b0d855b713916e0382a7c232df6b412fc9727869cca5dba9e576570d832bc3dce20e

C:\ProgramData\Avast Software\Avast\HtmlData\aswd4216d047c3ce0a2.tmp

MD5 c69e876c8bc4f3bca56ba333eaae7a71
SHA1 d00ac516dadf10b6a9fbaa8b6fd7f7800511d36e
SHA256 d1e88cc6880e3667b06b2d006f5fb8516f28467dd1153453c1bf954571fc4f00
SHA512 3453ec35e83ed63f2e88326c1a3f4ee23a6b979d272243131c37bb06ce8d2467585e311a3c01198f3384d852ee9fe525434f8a6eb58b7698c0c8c56b7a8f3b40

C:\ProgramData\Avast Software\Avast\HtmlData\asw103a9faa2407a930.tmp

MD5 94aa8569ec9b33e05f3088b136dda05a
SHA1 2e7779731351517e2e6df18b313e5df28079160b
SHA256 179fcd4c70b0e5958c56387c7849e4b49e695a284b75471a15a8e6c8637eeefd
SHA512 52cc30da7dc6e6ae7266bf171e4e9c9e16c0d8bf72abda793a0f03e2889eda6171044ed65960fd2c40251b135015a0fa62132c76cf16065ef6fa47476b6d8ff2

C:\Program Files\Avast Software\Avast\asw3a2ba4af16273c1f.tmp

MD5 a00498043a756e4bbc0fe84fa57bf774
SHA1 8206b9207f48d189de1bbf50fdd0bb81493dd6bb
SHA256 36f73d9f89e2582324e2db9010c29dcc5c5cada97db8b58b9742c0fca60ac06a
SHA512 fa1d903d667fe6375844c91b930c92f504fcf966e814e3a1935a2a54e204d3a348fa42a5759d8ca8e5cf1359f03740f1fecd14efb40eb60535ea0a9a75dbd1c2

C:\Program Files\Avast Software\Avast\setup\ais_shl_mai_x64-8d4.vpx

MD5 800611a3aa93560f1417e276a7bc2942
SHA1 103dc43ccdae5785ee124e2917a20f60807a82e2
SHA256 f423ca19d0ac9eadf4b12fa865beb4f18cff76a3233b7cac4378b1df16f989d2
SHA512 6532b68b723ba745a78b346478d39fcc379854e4f15bd94d11385c943ad4d395519c4449e5cf460f235e57ac4c1b72a1cbb2e5187309d193c983ed9475339dd2

C:\Program Files\Avast Software\Avast\x86\aswe6752e8bfecb4b10.tmp

MD5 3d2633b6d925d82296e4c452876c30c9
SHA1 3b4e12fda5a66c259ef26961d7fb672a4c9635e6
SHA256 2eee6592d85a5bb1a8981404c030652b6a80c8b284298a87269b23aa8236e64a
SHA512 848a36c997bcbecf6c6d6d0c9fb10a0a8540946ee397532a9684e38374c32b25fb9c0af3707c359d4751295cf7969e368e6d0dea103bfced125db155b846617c

C:\Program Files\Avast Software\Avast\setup\setup.ini

MD5 fe6a7f97d8c4dfb44d90eed62cc09f13
SHA1 5290e7d8d3743a6b5815b48f8b3e277fc5102f2c
SHA256 24d1f5b12617fb7bee356b551ca49b05f3313890b8d9d539139c828c868c23d3
SHA512 dd58918dcfa439dac0fe214502ac8b9375545543d687787e7344dad7f0c934359c9af0e9e38018535e85cb06ebf747d57368d031636f1c51c803f7cd3b3bb097

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 deccb1a74b113c681c07c7c69c97ca21
SHA1 0c4f1e7cdec1b8399721dbb1bb229030ae494b10
SHA256 6dc81d532fbf4a5210523d5456f774b54daead0fb06949daffec66f7f5701d94
SHA512 3dbb41f6a295cf10082a9e828f6f23f49155c67b61403ad303c06d856d9c1124c1fbd1578666dbb31ee2b495c9f71e5acac87f5c1730ad5e476fa8942a203627

C:\ProgramData\Avast Software\Avast\SecurityProductInformation.ini

MD5 98ce0c88b24c69cd84df34e9e936d12e
SHA1 53f3b70132a5d49d581ec26c1d51e011665e73fc
SHA256 b31caf886f480d45a15927d05192e9fb25598f5821a725906e1605f825043a23
SHA512 153ad81d3e956008c57ab8ca6f97b9ec73cbf4d10ced6a93cb4a0fac7f051d14f7209d3433c89471265e1b2e107e14fed4e6fb169b8688f0e5b65b144f0b3cd1

C:\Program Files\Avast Software\Avast\setup\jrog2-93.vpx

MD5 c71ec71548be7fad770030762b12f3ec
SHA1 d49bb1aae04918b5676a394343537cb1bc052a6c
SHA256 6cb5dd9eb28faf3b3206211167f613ad3d899eb757bf337b8cf11020507eff0f
SHA512 639ce7090a5d04f623ad03b4b670cddffad0d30391eea2a66bd344f96af9eb48fa7f199f1d539666183aa431e9d30ace41985b6561cb0130457a3bd713c0e9bc

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw4702a564990eb985.tmp

MD5 caf6777bdda1739c3f2819a25cbf19e5
SHA1 9b218d4ca356b70523ccfd68aef10832c77ffc3c
SHA256 f61265cbd93088140f7e3081e6dec0de5fa4a60d097ae20f4f5dcd6e79422c27
SHA512 c892ff147d2602081ebca1e1578880d249bca5a4d1b90d1cef56a59fba8530ea48decd315b598ed947a22247132e57cba3ae93639df8274a304679187af64a6c

C:\Program Files\Avast Software\Avast\asw22291f5c166c23f4.tmp

MD5 9e5b7ea87938b46362d50dfe2d33bb24
SHA1 7053ad265b97dc445b559e65d8181b3e694c5641
SHA256 5fe0e23cf6c5d4600ce16fa6ab3cd0775fb5c047c9d64a484609a96f6f9db3e5
SHA512 5ec9a63132c27d393a028569444ccc0771b7d02bd780a7539a5d35e13f79dd71684db583e5964a106d475e2c41c80d66c1e753ad91a250d59be08bb19ea9e14d

C:\Program Files\Avast Software\Avast\aswf4e14ef092e4621f.tmp

MD5 b652b6641d8a862393d283f336faadc7
SHA1 e30e87801958a7302b2a9c1f3da850dbf8115a98
SHA256 dd4a094f2b760815fc984cfe8d3fe3f43a155dfa55e16249dbe096d3784be8c7
SHA512 71e9874290102103171754c72b5004a0da33152962b00da1061be4d48f884c831034b8fcabc7e36816608e02f93a4315feeadda48d48a973a3415b358f60e1eb

C:\Program Files\Avast Software\Avast\setup\aswb400849bc9174ef3.tmp

MD5 1770e768e99254927e6ebed43639a9ab
SHA1 55375ab40477fe6b56f6eeb4d6d05fd659b5dead
SHA256 c63a8e890489ad01766bfbf31b9af03d3be8fa4b97233be0c94ee5a5895c6c65
SHA512 834dad84ce9d6a13d979582e47c5850e6a8055707cdfb5328297845735c24c5cf22cc74582b4fa81e43afb4a87de2d526f0de52d985df97c6d32209a116083d3

C:\Program Files\Avast Software\Avast\asw38bdd8aea588b6a9.tmp

MD5 651ee499ca082a8bf297193df2f5c10e
SHA1 e9f178ae70ecf3ba61864bbf338e9797f3e48397
SHA256 0be8c9d30d1a8bc84ea5a2dd18b8c17e3df435d299a04c11e42600cf3dfb83bc
SHA512 355be7d2de24487ad7fcfc8fea04089cbb0dd30a578263be5774573f57706a6f4351810cb0d48b86c249a26c3220df7806fdb5928c708036c5aa587c34ed2427

C:\Program Files\Avast Software\Avast\asw0511c2592d498567.tmp

MD5 68070d06f9369af37c172380311f178f
SHA1 4bf9c8609a980f198fe71072d769051195dd6d5b
SHA256 da7e682abbec81d675d902366781a1619659370fd8b2d28dd8e2a6d1e724da0c
SHA512 6186699446e597978ff20f742f62106be9c19e0b46fce5cf88ebd35c500587893609970f959c4180bcb8bf4be3c39eb4ae4e35e82d8c21e2aa3efc7133ef55bd

C:\Program Files\Avast Software\Avast\setup\ais_gen_tools_x64-976.vpx

MD5 65f5acc61c18fb49765ce3f6da7257fb
SHA1 b3ca934506a5447dc364bcfdb57d68d3d6a3db8f
SHA256 304d88f92036c07991af2fb83b44a9e0ad25b704902915f816b4872eead8d3f1
SHA512 03ee1bde3b333af7f25ad38860140ca0a61fc366bfbd69477eb599c6598e60bcf12e76a3d0d8a9d4406fe8c918ada4403c1f95d10321a006f8b32479077bf98d

C:\Program Files\Avast Software\Avast\x86\aswe2df0bc7a0df4f65.tmp

MD5 2ffedbe5a3355ad992555b26652123ab
SHA1 4a82a31f6f9b8ffdb053e865084967b25de6d662
SHA256 9f9846a652c10d6b820753c5742b7e15c073bd4ebefea1a2f1ea5723c853eaaa
SHA512 52c8c883a8f228e4586dae3dd2567ab94454ca5955011b2d40023843236a2bacb3b90ad114a0b0a344e145aebb251b902a0368388622ea851e03329cf0a258eb

C:\Program Files\Avast Software\Avast\x86\asw564bea9eb7334030.tmp

MD5 df85e7681de3ed4ecddf5345a6c9ac38
SHA1 13416ae941bfca611bab7eeae23dad4f44377f21
SHA256 5351dd78d6f42ca19bd746d68d5c252bebb10c56d2941e4039d0c22655eec4cb
SHA512 16a141fd62f4e9a9c7230edab16c4d16e2763c91d55e2737254ad0f6a4b8459831beb1b3d1436bde1d7fd7ca94e142620cd96c031daee5767891f157378641d8

C:\Program Files\Avast Software\Avast\setup\ais_gen_tools-976.vpx

MD5 1b61dac265d239816225f2c3395fb664
SHA1 8409153565e39c920e1789dda2a2f5dc245f214f
SHA256 e3482508947118a21ccdc3f3d2d4d6e80757356430dd47906a4ab58bfb1c1dac
SHA512 97a63c15b2d3a7170c9d41eee886fb07f37b6fa30ac287ed0de4fefb8b77981ba287dfc98d1e101c70dd2aa8cc038691baa732cf5270d37da31075f2d05b2939

C:\Program Files\Avast Software\Avast\x86\asw20f7be36b9587660.tmp

MD5 9e97fac4df82b9fa42133fc5789059fe
SHA1 dfb8fd3ca57843c5b08dae446e3a430646a4da57
SHA256 4ad0b25616826d037c343812085a652b03cddfe4bdf9cd126db9e542e6b1c9bb
SHA512 1ed20ad6932b34cf99cadd4f9bd3827321d9ca75ce2e49455abbdcef0a0d59fd0ad92f345542cfd59bb43e7cb8e0101e7bf73384632d8ade8d43e4fe640afb98

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswdf794a1d8919f5b5.tmp

MD5 ca5a5dd1d01edc877487417805db804f
SHA1 7f4634c19f484aa8258e0293e3f5dc52fa2e278d
SHA256 e15eb989067a0681ce3a17d8aaadbd0971da387dd4e97f2b602ca680ac966d61
SHA512 d723039b258fecc7b842068e5d03c935e6ee07b098e98edb6cc5f77f5c5717c15d63aa7e4591db05b547a2e98204ef824ce214da20964e0ce0d368f222ad5ed8

C:\Program Files\Avast Software\Avast\setup\ais_gen_streamfilter_x64-953.vpx

MD5 8e5e465a47997eacb68fd59c6e8552b2
SHA1 b2de32da7681c35ec37afdce470d7598c30c5ad3
SHA256 bfbc65fa694e6e85a71ed04dd3c9b847141569365bd2f480179b75d7a2096e6b
SHA512 c88c523c1e16f1a5b6233b8d96099e3158e2b578829fc9e83bc20415a83b208bb8c7979201b6cba5b2a49b54e2acb967cd11953438d286651428a19dbe1c4d4e

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswb659aed3ef4dfaa0.tmp

MD5 ff01ee1203b0823f5ec766f57b953378
SHA1 a814a88082e288f3edc9ba599835aa0cdb4cec00
SHA256 4cae8c4ce03869284690760788f14131abad2bd2cb531a57fd84514d5f6842e5
SHA512 a76ff5d769f40e1caec4400d7a863938b545e861eeb93a8b777a6d398ef3666ff50a0ca7c43585dc2224239a79fc5352415d0d4cfe20efdc3eb15bc351f4650c

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswf0e9e0409c094e85.tmp

MD5 1411a4b7830c87ed52c531d4c234f3e2
SHA1 fa377f0afde9bd46a77979ca4070dce07576bd4c
SHA256 45dfdb0524dde9359f79f1b5c3992be2099b675d01c4e5dad92109f78d4f3fda
SHA512 704f2cefdc4074c76b7fe9b9d0a14a0d2c4faf85d3638bd3f4b4b0199885e5e2076258a2963481ae9f881eb5b41864410a7d0a291562e55944b65db67d767e0b

C:\Program Files\Avast Software\Avast\asw08ff7d5b39c0f2b5.tmp

MD5 8c8033959052c8cb307a403298326992
SHA1 f16f7f0478cba7290b53a4c629a934747bf1c638
SHA256 edb954a72cceb3b7f62f49cdc882d5df2193f475f242e41d5e2af167142b8faf
SHA512 d4189f83b4cc6f660b1d9df7fb12e40692ad4bac4ba7a04748885c0bc1fe13c93b58df6c84812390cb0454e67644adb3c906caf658753f5282ff0de5a8106ae4

C:\Program Files\Avast Software\Avast\aswe871853e05e21504.tmp

MD5 98e3635995f50d20ca2ef616d0d34720
SHA1 5140a2efb3d879dfce5ba98c3852a258ff51c1e8
SHA256 72e3c39e01e347896174d7ac1f2530fbeb348fd1e08ce6c305dd99739571d107
SHA512 5099a3f0e485f311efac05ced7e25ee8a9e4fcf78a4e37fb53399f7282aad2ee0d997420c9a799b3f530b4cbdc4807886b7837cf1bdb43a1cb271c0563ea91a9

C:\Program Files\Avast Software\Avast\asw54f7ba867e0ebfd5.tmp

MD5 1bbfe82eff50a505e7d5aa84d3137593
SHA1 e0fa2858fbf581fab0411e12479729f0892c7e8c
SHA256 e1a227c32173c60ce70810d23329a8f44d16c0eee794c5cfb6cdf4ab696cc44c
SHA512 0a192d0d464b61f179452a48dc057789ceda6431d75a859a1caaab8af02a2bb8568b1a1411cf6dd5b9f0fddf67b2fcd0210c1c50fac7aa70e95f5987a7476e9b

C:\Program Files\Avast Software\Avast\asw40487c974a0262b6.tmp

MD5 979490f6f409e68e3c2a7f143035c993
SHA1 6243571dec417f1694a98029c0124fefb02beaac
SHA256 03f7d27b488093cd077acd9723e13158e14687f14dcbc703ad99bd83e80ef506
SHA512 96e2b24a6c8d9d6778d34d630e23b5a4c72894b8f0ce1a028bae99f14da502b9888f5af4c962da7bd5dd53eb8216b0ddde384738bac35f77e08d35d33a5524c6

C:\Program Files\Avast Software\Avast\asw6408ee24ad44e582.tmp

MD5 c8b60751beab7f26157376896dccbb17
SHA1 46d117e5c7ae4b34256e995c185c160b8cd73b6d
SHA256 ace29f615053983a6ee1a0679435db389be8efc626b476249535e54e6dbf76db
SHA512 3694da41784c000489618904278d19c70f9fe52efb477417b6bd4859026adf67af5de8e7ea2c4b4cf609970b4ec5ee298f8cbc22079e84e679c8b30482fab697

C:\Program Files\Avast Software\Avast\asw467603a49693df65.tmp

MD5 528b87d438c2e4eb78a764f40ff23cd8
SHA1 8a6f143e12602c8f037817df1d171f08524d2e36
SHA256 951a887514c42d53fcff58ec566b4c83f3713da7dd515dc4c459bd369957f66f
SHA512 6b734588c22ea1b61f94ef223b27ffcebf074d705aca407098777b4c8efdfd70411a568d4d3e4b7b1d7cec0b6fa917ecf343f1134eb668b6de12e0fec05e0708

C:\Program Files\Avast Software\Avast\asw2f4b1907af165b90.tmp

MD5 792221f9989b63cd34f1e9f353e0739e
SHA1 5b6d1c1ebbe8e7be0bf30a190148ee72dc537edc
SHA256 701fe4493798b3e225b8a42c991183deb061e7823b931aaab897f9fb4750ae22
SHA512 5d8c92b5df42442d8c6d995f059fcfeefe380e076fc82cf2f0b825b16b39974c7622f36ff43df4e160816d8e03f36b35e4fd9069392473180939630c5e10b0b4

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw3bec7bbb0da3140b.tmp

MD5 155e4c5a0761531efd4b2138c2f2fd86
SHA1 8876a3991e1c4bc4662dc2e22756c1a508112a0b
SHA256 f5dd58be0dbbaa7d7457c31822bab676394120f7a93bc110b6d8317cdadff760
SHA512 548f9f9518a251cd29505e20aa393346bbb539a1cfd6860037b3262b63f2cd9331313139f1d992a478a78fa42c9167c85b277e9751a424d3cff52a518975b72f

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw5ef760a36c41c4a5.tmp

MD5 35ea3d733825095b2f73af4df6aac40c
SHA1 f297684485bf51d551159ed487c258ba52b21d8b
SHA256 56c9e949369fb9c9aeea27e9ca933f67c7a5a21cb1f3be9812a524a060de5b59
SHA512 78c8c946ab842f3bcac0313b90f9949a0077a5f83d644dc4c847eaa3cc902e223d7b4357cc7025e79fb3306b9cf298281d16dd83e24e63b2bed148f6e392103d

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswcfea3c646f8992cd.tmp

MD5 01123a7cd409c1440080639d72f3fbf8
SHA1 483216876890e9a0f4c91e870366bfb12aac9129
SHA256 d87d9a6c22b17ecb508d03169a7f5dc2406bc0b60eb176816d400ea23457cab6
SHA512 0ef58d9d0b5f78298d2043adbf3158fc63c95da199f917963386297306357255fb2a3805677624edd92c282653859b42d16f63eae4667c93f08de1dc053bfcc5

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw64e986b1f90f4e7c.tmp

MD5 4aeeb33bad81fced46fa7f90a17d60d3
SHA1 f3d6e8bbd96fb42f5c52b5ae4cebd933420102eb
SHA256 5cabd407ae502f3ea4bbec56460bdf6fcf5bf39284dbbc6d10db90665da4be62
SHA512 8dc259e22a3b14e8d6688c7b9a1113cfba8105ec7942518019a944a9ff1eb87c896ef149cc2f913429733654f6211bd6da944d3aba113cb513c0123f8848beb9

C:\ProgramData\Avast Software\Avast\asw57ff72b65f5d464d.tmp

MD5 1a90bc8644262cd79e806a222f38e95e
SHA1 0b9dc24a50654a32e0d5974f9f4370bac30a90f1
SHA256 1210aec78a7a836e56e94accf4eea74d5c0f26c2dbb25ae4d6023886ed3c9d64
SHA512 4f67699dc93ee7df09c4657a9fffbeb1f34ac615eea55d169ac03f7f58c50640c968f4215ede9dc59b5660166a9e2392fe10b8f2f68f6b067e9631c94c805941

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswe4fde1c8eb16eb50.tmp

MD5 93915de0b79fd0cd0a57988f2b5168ba
SHA1 e6ad7763d4f92c41d4e7924d79c01e5519c9d255
SHA256 058402ddf85a5dadc48147e9a877418ce12a4c6ff8cbd55b8c240ad9c380c157
SHA512 a0d2ba6d27147b1fed570090763cea04f28d3bdc45dc4d5ca7fec8e497927022bae2f98ebef83660bd9f5e0e9705730b254caac12931f306c91c42e477ca0b7a

C:\Program Files\Avast Software\Avast\aswe0807b518d1f3ee0.tmp

MD5 c1a76d4eefeb28afbbce6ae590ef52fe
SHA1 790794021a71ddabc421e30855153457c462b1d3
SHA256 1e9ee30c2d147bd8d6ec98dfac74a6869f5b8f870fc2a89087d75c54e1af1bd0
SHA512 10b631d3a68e543f00d6d549c06d0ca9bdf65c4a4aa9ad6b5f80e28631288a431cc046d77690b28835a963f4d6339a8c96592d2aa615ca66447eac2ff2e89ec6

C:\Program Files\Avast Software\Avast\setup\ais_gen_protobuf_x64-7d3.vpx

MD5 71f2ccbe8b33caa436bd4af3988c46ba
SHA1 722f356ff23e54c751daca2603be3d89fd15c40b
SHA256 aae3db9261468b3dcd85b72e7fb7277ec7e115472b017a38962b394bc2884c62
SHA512 82e1e10080614d52633f4827d7575174fb5b05f3662ce16440d575a8166736166ed4c853bc9bc7d66db2a62933220d7e9ca200fefa97cf2393bd6d2701024a38

C:\Program Files\Avast Software\Avast\asw7340bbb0b1cdcedd.tmp

MD5 e6f78e15231b84a4c95e67d9cafb1efb
SHA1 d41de69a78076b387951c7040b920e90bf8a395b
SHA256 e0dee46ce47ce07f08e10a783f80cf9e7faf96e76d7b7694cbe2b78f4960267f
SHA512 381c03813763fb047cee4de3ba17d560234207f3709ebef1a9fb31a24c9a60335f111513f4a57ba700377ebfbf6e75f1ba570a2df3dac067dc25676c06c936b8

C:\Program Files\Avast Software\Avast\asw8651acb8d6bb5a20.tmp

MD5 1a4813deffdd74758f4b9ad9913f0e1a
SHA1 8d6166798720684b0530627ff27bb9eb771a598f
SHA256 af34f46fc2bde3e9f3248a4bac241266bb8c6881bce2b2d2479a4ddbb8477077
SHA512 e69dba30a65289915f33ec1886b5a7073aacbff8adc1f45dd3dddccec63953af997b40937e09f9c55ffe8c0f9c8267d55daa92012e58acf1def4ac8e20bf9f36

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswdba3a9e7072a3fa2.tmp

MD5 d320f1c752c7ef46ed0661113d6dc4bd
SHA1 4dd6328230d0f0f7fc8666704655e6080429b087
SHA256 83752b95ba166d70ac23451ecbe5c23c6e8ad416a63d0fd38be961cca9386e1a
SHA512 655bbd63c2514575249a3201607c5f6e782e2ed2004b40651f1ba9b73699e4ace001d8a97e9c68f60497a8f5fbb759673bd336c2111cf9ae6838be9a9922f5a5

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw5d8e1432da386cb3.tmp

MD5 b951291319a357aedea88118913e978d
SHA1 55fe58d568fd06e070e71af4b4584d051a54fb73
SHA256 fc55fe7c67558c24142a7cef255a028ad93d7062afc291e5df49ceac601c5888
SHA512 1e2938ba6a78edfd9cc52c2ac663ad4603c90d441f31e98be5a342e66cf508c231569d3f682fd3309d75466f79ed70dc2fdb04386ee6d40ef8cf3df1cddb2ee5

C:\Program Files\Avast Software\Avast\x86\asw9eaf2443cf0f3100.tmp

MD5 b055a63315e55167b95d5ce14858ccf8
SHA1 63517c5e87288077455c2f2c8e2031f337a7111d
SHA256 9f68ccc3498ef91598b09581f94c984e56599c6b8451c13acd80701d06d61833
SHA512 5271792f8f219a03f2460c4a5a5e587655942b98a4cd7e53eb6624de8283d28f6fead3926d2263f2a5f39bea38e87fe3a8e2224e9a49159f9c453f47589e2f07

C:\Program Files\Avast Software\Avast\x86\aswdf160f1a6f3cac95.tmp

MD5 974a97c77ee560690162e72f0feb9e3b
SHA1 b960d627eddef7f2b5775a074f0761c9514cc397
SHA256 535f3343c4ccc7f620c937b8f1f7d7b9b16f375a86ceb4baa0695ca13039f8d6
SHA512 d776df8a8183550c9ab38efc851ca3129e6aa154ee312e942bc3ff20f5edc7205b8703fb1570892144dc40d26f339c01e18766d75685f35f659604b3385fdec8

C:\Program Files\Avast Software\Avast\x86\aswc299cbfb94a9e021.tmp

MD5 8afc93334d73886adc9843bf3a99bca3
SHA1 c66cc5a139d9c62e59843b355743da4478578399
SHA256 8ab6cad2990558b0afd0b96a639601dd5d1d1a9ef1dd1d1e5851ad98bbe6e2ec
SHA512 28f8d9957224cacb6cce3cfd17509560db8996078738cbb8c7dce3c1b8e0b11bbee84133365994f15ecf7f6b0145c6c5298a85af98308afbc532ce1dde5272d9

C:\Program Files\Avast Software\Avast\x86\asw7d9428c17e3c6c9e.tmp

MD5 fde1f7ba80c6bfaee005e055bdcb3db9
SHA1 2f47d5dbe62762bcabdd135ee993bcc4f5b0ce9d
SHA256 097036c630b4c2a854a2a16685e341e631d1f9a169bfce4c35cc99690201e9c5
SHA512 d7ca13bc4defe5d6a4107ecc3ce53675a27db9ec04351581e623297e0b1d024e47a126a3118c0b44b5e2afbb4c58137efc60b00ba5232607ab788deed484354f

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw38097fc1395b457f.tmp

MD5 7f9531927e58fe32981d195625a17e2e
SHA1 c2831c6c980e9ffd05f450302cf81af11050c300
SHA256 88241636a8d3b8ab2af9d3b3b9e40cad4a17896f87c468ce5f177724656b7340
SHA512 92bab7dd259a9509ca2cb7ed82dee4de77a95780b9acbf36f657666630e9790dcfae51b3efe8a10563edd0ca8a29ba9c9c8138a740240ea106cbdebf61a10bed

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw80257e6b4490af49.tmp

MD5 8a090e342a1cfc590b468b61e0c6e23a
SHA1 2ce5c404d0e926d3829565a819142657374271c7
SHA256 c432d3c6a02d636c4e66cb97bb738655efb1786a89d2ef446cd0aaedc7f6fb7b
SHA512 50ea6a9241dbbc52f93703cf29d2024ad49efd8f69f8552e493039640f2d0e625bd5c038e942079c0e291784674d531ea256c2556c637ce292ec6de8c417292a

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw22b192245ffd4152.tmp

MD5 8ff7f31d203d158ca42f0bb4fa077587
SHA1 721443995a06600be6db636dbbd44767f2d2a349
SHA256 a5aad3483ab030cce01bf33f5a72da627755f13596bf3fe72db766463d9acc57
SHA512 a65478de5e6fa74723f66af35c3c24762e0ebddfd575e4bd7e868233a846e7813454d0542670159b91c74978a1db667d23229d4605080cbf6e96c3227ca2d7e3

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswb5858be0dbb2ce47.tmp

MD5 b65aa2646529e9c1de570d28c2e37c2b
SHA1 0c0516631b589a6d87ae53442a7ecb8b277127ee
SHA256 783aad71c976972def8a34579123439cfebff071901d97bc91033a05d9c2068f
SHA512 4cc7496c2c0e18e10c0d3783892b0ba15c1241fabb2ffd168e981f60e3993fcc4cda07f2ae9afec4869f7d06928fa606be53544a109a3d78067cfeef033ba009

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw1d9e9ccf2ee030fb.tmp

MD5 0c94dee60cf90c0950680ab6aa2c2b91
SHA1 d7051e98366d14a440111ffcd5b28379f8c67806
SHA256 ed53b64f64fc8371f8ef39b4366449aa764eaae971de628aa2b09b3a6847216b
SHA512 0cc66c7f194ddc4c0bdc9cff0709c75455a35b6c5ba78ab5d3e7093ab9388336755850f3567a93c96cc66d7376126a45ec8e0cce370518346647d1b18dbe67d9

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswe02f3fbecfd2e102.tmp

MD5 cc556ffc1ee06111ba305967b089779b
SHA1 9b515a2f8e7dcf570f040b19a64b36166e17d93f
SHA256 be242784fa947e505ab9d79a23d7ae96e5979af03bc51297ae840517942f8675
SHA512 51fdf6c92ac6cc06b04092a0b1f9d391ed36d8ce0b2b123fff9d228875bd91b55dc218615f757f06f34c11d2527344f21c7db48a7b0502685bf6f77650d240a2

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw579cef5901812d8f.tmp

MD5 1b73cbc1a51c5c2e61072729535e3148
SHA1 52f3494af0555caeaae477173dbd7a8c171997ee
SHA256 4279fe19e9d88988a93f5d334518b204a8956543f84467168d5c63d490337593
SHA512 9898d2952dc3cadfafdacd6d281d8e1614f6a8ca88448e52d393fc540e543f810d434e8eb74a640232f83c4ee2a07e8b37184f59adcfc9c8551cd0e061cb4460

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswb56b647822235dbd.tmp

MD5 8ecd8aea1af9dcb3bff28b1d4e0795d4
SHA1 acd125327614726c4069fcc4cde256d276f57ef4
SHA256 ec4743a6044224132ffc5f20c25bd7e36dea25f7ea9baecec7db40b0904dd7de
SHA512 33ba68e27fc769f0166e72da458244981622ffbfad33ae1015ec73ff83751eae9aebf1aff991247ddc31f0223888f8f03fa9b2b1d6069112ad8e1689e519057c

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswe0c48c47f8d2e689.tmp

MD5 0d3e750f8b8882470a74db90de94f814
SHA1 cb07462263379d3f5dd89e2b62ac31a2f7538821
SHA256 5b858fe4a054adb9461cfd12a5f3b8a9622a2eae88bca8dbd7d84a9f972a20b3
SHA512 b5ac0039428d844db36327ce6637d207ab02ad4cd89e0eac361d61393d396d6e2fff76d1007985889ec88d20e9c62ad29363b984b77d791feba588c1ec64f084

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw804f86d712415060.tmp

MD5 2126db527717014c6695f9745a480c2e
SHA1 3d564a111a7f5a2a3e9b06ace066931fbecdaf68
SHA256 50c864c13306921277e9c43f0133c754938e96cfa6982879d106b32b4551d984
SHA512 a47423d6ce322d297b0ec222ab8fb7cc46a31f840f412f6da0bd4ee9c40080ce4dcd2b00267de53721e61ba8ea02ee99d366a1047e41805f7feab8c43e4babbf

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw4ff487e8b424ad23.tmp

MD5 d942c1700059ae77f3c06918cf79d7f9
SHA1 09b1431e2c3ca7479ce6f185d2e6ea3c9052cf0d
SHA256 500acf4c502f9bc7c7ff43252b9a3f6245ff4cd7a609dfd24a1c3b5fa19f2950
SHA512 fcd75cec93463404cd588abe1b5d25f6e0f5e41fd01591d51eb8dbd49b973187181b722875d72afe7002c27309819f37f88165a5e6af81b9d2f708da4ecbe219

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswaaf348a6d3ec6b12.tmp

MD5 b52238936bdf50ab985435a176281f68
SHA1 7bd2be0808c538b6f15f20a9a1228cf4a20adbdd
SHA256 3a23171aac49453f931d69cd55f6ec742243f5835386d9e6b18efad96c2be450
SHA512 36999e6cd50e26b1620fe24ba2dc11a40b25d1d77cc7a0337c7a3f65b16383fdb224e179392a215e6dae846e8bda6acb3e027445fd334e26e34278a397452f6e

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw5729481eba1dfdd0.tmp

MD5 0713775484e95e5bebcbe807d53488f8
SHA1 222dcab5f38d72971fad641201ba3ff9a2a0ecdc
SHA256 e63a096b1ae68a774b1f1afc51b5dbef1a5ac2d79dccc1104112c22841e3e378
SHA512 f19d30d37718de3edba15358888b13afd9f9dfe4bdf37bdeb3204fb6cdeec3f249e388d06a89b21dd4a0da9d1cd70bc4f5244f287a4d907dc0a786df7ee97097

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw095b5c17ab35c0ed.tmp

MD5 841e4ff9bb531b52218392db1d7cfbe4
SHA1 5607c2a987436195f1e241a0b29e8fb1f734102f
SHA256 4da31e582dc47d46132cc73ad34d5b87dddd2338495ceb2772f7e103a9a32ebc
SHA512 93232073d95870043994c752318f9b319db508fff452e4aa0b8e42e66d13623803be4537e1798dd05177b7427175d989c8e49a379fd932297e161d461bae268b

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswc797c765972f471a.tmp

MD5 85444893a6553a4dd26150a68fd373d8
SHA1 ad9b46da45366f13a22173b06e22a45a211e99ec
SHA256 65f2a93490c845833541de1376d5bb65e6e864a1a9232f58f86a7a84408508c9
SHA512 ad56f71d0dc6d2dc5dd46eaa00247bd209403014648fb9c8f98937fc8e36fc85c0107365d2f6ba4f6d530f340278e0205d94bafebc78d10201e71dbb5d4c36d6

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw01259b601b90aef1.tmp

MD5 90340ac74d22b9a67237ea52a4dc1c75
SHA1 75d44b240afd4198b0f3b7256a4a9533ad1ba73f
SHA256 fd48da616f2d17054bcab961239431d99c247586f96bac69aac5b704ea694352
SHA512 6f52ae85b4d9ab8516d72bb1662ac9cf602092fc61ea78bd85af05047c70a0adc5edb67266032f12a86601c983015276f15a457935f5b6143dc80d335351e5ec

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw7d858b8308c383ca.tmp

MD5 0444624f30e8030d84bb169fc2410444
SHA1 05c1cd844368ae2c113585b477f91507430d72a0
SHA256 0b87358da7882fed313facee92bb8f4e45299c63ca557fdfba1478b364575fc5
SHA512 648a79fd30a73582907c7ca008be5ef78e6e72aa22478448721c4c5bad45a45bf76570d24e061dfae5e535666e79154f5f9f66a08746313620a17582e3998304

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw6de06b1010389b27.tmp

MD5 3b07abbe272e9b9e2989e2d6a400fa53
SHA1 f925e5e58377dcdc13b6d80ff22c775e2334e372
SHA256 a170d9851a1427066d1fd61c32a9ae4b9545aa926be55da7e7d94275be281dc8
SHA512 14762c984aa6736b1330b1f0b296622fc1ce3ac79108c0bfee793a51131deacd09b494e8c851c6e437a84871a864dd65389657df8b2256f931e3c60a61fade8b

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw6b15b7ac5d60304e.tmp

MD5 7442e7059f712705d4b97699bf56de35
SHA1 f924088428eda3b76030091cf59ad38afb590118
SHA256 f822289ea5a9b0ccf9777a72bc8b73ce68b596fcca811e0cff0adc4031056b20
SHA512 dec6228063bbab561ae0c02cbcbab3d08c15f261758405d8a709707a180a09af9c462b0b382b700177f285a1ce3bf7e71e093f9031d15f932120fbfd396aa851

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw7910312c268419fc.tmp

MD5 46aaecdb8d337980c82cb2714a985986
SHA1 22104d2272b592a344df5b575fcff83ca0e4b161
SHA256 34457a002e90a590b516bbf58530cdddbb618a46bb3e764e18167c44934917dc
SHA512 33c91058a693b82f1457d49bba2e209a90b825927be89e38523671ac16f4fef208b98efa980a3e11185baa4df6d7639d447bf30e19dc91b76f04ee61b6169bee

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswffbf49770e525b21.tmp

MD5 592a65b922d4cd052bae1957be801a4f
SHA1 8371486ce1b38e692c0abc4a2a9e0c3e1945bb89
SHA256 d78e74087d151454365adf6239967c8ecebe85b1c6c6d3f59e70f0980028b1e7
SHA512 0837209e518d5db76ceb8128dd49cf03b8f0d11526630ad20c716ade1e02df1b39a8440d20ee20b488c6d6180c155d00a9cbbd311fc50f4803a8b95d4a545726

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw4efa7c4b6a1473dc.tmp

MD5 0651bcd9acadac1d50653be35378a82c
SHA1 5d1b2233c7acb3915d33f7b29cc2f0cbf34ea1ad
SHA256 fcf66176b6f7ab86f98f38d5662f61fa61ad3f1e59740d8a1df0e1072248cf6d
SHA512 1ce05989181faa8d291bb0df34bb4e93f2f576187cf2d0c5110988ce17e6a682d815297fcc9fd174bc1791713fb07b616ed952729923abf8c06b8b8f6d71d82e

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw8f7a00298307347a.tmp

MD5 490c63e6b1aba9a525404067ce3c20b6
SHA1 04997f8a146284f8369c7db6204949658d6d7180
SHA256 c5131d1abd188d009e72b8c6474c74a262b7b8ec504470385f7f69428e7ae0e7
SHA512 245c4e2545e7eb5462e20e12d8092cdaba24d48e6c53d02f3eec586de17eb9cb6c15cea204a18deeea3cc8668c8afbe9f35b0fc1e751d2f515edd18ae149d275

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswc21f249e1a621b74.tmp

MD5 03c2c3d48cba89a77a8c06158056aaa8
SHA1 3cf294991250721c2100288d4dbcb0343cc04bf2
SHA256 43e0c37da7bc6b2786f95765f14177651bea534ca4d1d966c79fc301a55ad5df
SHA512 bd9787ec2cf87f8c790db18724a5cc10d1a6de005fa8cc6a74733521bb11251bd0d026af9468e98b616a6d8212cb41c3da102248e105a4b312d7b068e9c407d0

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswefdadfb426585f0e.tmp

MD5 410fb7adfc54094b95609747a5376472
SHA1 e2e79f589a2e71009d9947bb02f05b877e208266
SHA256 77f2e7e09fe542ea78f4f6f23440014461074b993e50bf75d02b2c6571f5d696
SHA512 57fc04e4c770766ee9c2cdf7ec166792fb4164d7657fbbb6a6ec74a5073de953860b7c1d5754b28b61a83b7bb1cc0a1417a2f13c246aa06044045687b207bddc

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw55a86f01e928b582.tmp

MD5 b179b9f02a2a42a92c8eee8722d03745
SHA1 86021ffb09e59a781e96158c8f5fd7b63ef950e2
SHA256 9c57a5fbaa0a57530b988a4aada32e378b1cbd1fe368b90e147f12069c8ae7bc
SHA512 4fa0ba86b83d4d3ee041772cc59c17407d02eef04385ad9c6d63547fd9e039a90d5a161b9acee7af9defce761ff47e288207f60b2b81a28cebe73ee1d68f0482

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw26e3dbc9b17ba280.tmp

MD5 2a21692ef3a54e5f4a016a3a1767a7d9
SHA1 9890261f7cc42d660371c1b9d3a96c09b1e48783
SHA256 01f6b2760031ed0d521e8d972a6e7b4aa05393934a37266c3f9374042cc97b3b
SHA512 7ee03077c29867a717245bbcc1f4c7afc425c5e248c7c70f884e3ad0bc0267f95b94ea2f47e3554b2d189160d56ba4a6924399bc80201fde24cbc943894e60af

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw8a9e98d9f284b30c.tmp

MD5 7ebb75a1000e52570ca55c35dfc7bd6c
SHA1 764dc860173990e451f6aeb6fd9b0164a86e447e
SHA256 2b151cce07a4d9c8507a1c547fdcb6ad904f9ebeeee71439d6151eeee287984f
SHA512 6d9c127cb35c122cb028eb9e8e7cdb466dc7b429ae8a13ec818df96917120f5e1f47902ecb3ecce9ddb1379029c63db3b6504d83dac8b6342484124902672c09

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw5f75f742c23cc3e3.tmp

MD5 364d65fe7f976fd00702f5bd63eea9b3
SHA1 e40359ed2e2deb198caefedc27acf8c7715fc80e
SHA256 85fd25863a60e7c627494dcf14b169480023c0b8e4682a0e495f4f7389407149
SHA512 dfbc7b8660a7b96135ce0b35c8f2f576e536e8f8bfb53ee268611fabb4ddc4c53fe06a1a9e81ff26a8e10dafc40eee5d579a2bd1e19d7517bf6f089c605ece6c

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswd39d9856c222237c.tmp

MD5 c748312b0f6dfa5440bfecbd094f9180
SHA1 d991110deb52177634630ab6165e195ea62ab1bd
SHA256 7966a70a6113a131c563914f8cc7acfd8b8922d8ef1ddb2a18caede076f1eca5
SHA512 c5554ea1436d27ff336d7e25f6f68d485c65d916389213cb9c33df2622cf08314411ce941482c03a251e214e2faa72abd266e2ccd444c95c65f12f78eda5a830

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswb0b2a6f92c15c666.tmp

MD5 796e70f25faf0353eba92c001569c976
SHA1 2b427d0ad6e6ada06c012860a532da24e3f1a8c0
SHA256 9e153dbf1c157a910dfc62d1f1ae6c728ae3d5f2b767c5659a6881cecd35d8f7
SHA512 e0a2b6716add6542de78d409a4986a57a7d2e7d10672a57bc5a44fce3e65e365727cc64e9fb34deceeeec96b544d22b0901605985f5cce7f11341a00f898b56b

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswc726924f9f48dd30.tmp

MD5 f04d8cd1c228b2a9321429bc9d72599e
SHA1 6695fc5cbee5c73077c59ef514353a4e2d6485f8
SHA256 498d2f02f5fe0a73cdaa1617be6bf7b2b550ada0537f8b1673c590ea99429c30
SHA512 afa2baa1a7344e795e325cf3b757371978d5e1c2288c31354095f4c30a4d308f2d405fd00b4efa86fef5830930a247dced395f11cab49e6a620df2241abbd069

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw9d22b3d43c091f17.tmp

MD5 5e50911343631e123b2de2d19ad5e2ef
SHA1 48f0330e58e1a17a72bfc9b1283c8eadc96e1ccf
SHA256 b3caf7155167f5d1d4ada4df4764bc78b85032bb769e5ef586fcab27fd681cb5
SHA512 eb6e19b6b51a4422a861615d1f1d0742473e49eb4ff4a2a25c84bc485b9db336f14e3ee83afe8d221d91466ec7ae436b1210288ee3328a2ee0f66addae3be953

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswf2a80d755d0c3999.tmp

MD5 51b851eb7b58ca2c3280def9722a9602
SHA1 75aa3331eb7da58868f700158df56fb49e3c4507
SHA256 9f0d6efb48c7f8c0f001ec30d45558c5d8675c06573eca7c8125a7d5a1db2634
SHA512 e9b0c683b58ecdba5d5132f6808ea2dd85a3db3b0d9690efb54aeee92c29b8b2b4535437d861d2fa2a8033e623aeb4ee0661dd01e17527a74d6002c9926e8783

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw6f7662058adaf10e.tmp

MD5 fc776a56634728a146211939d14187b5
SHA1 f8372701ba9ee1a51ecf4649c74e27d1e996a45a
SHA256 ca2b5493a6699756b3bf63d9bd807b0204419ec3087d02f4bb5c7b01e8fffd4e
SHA512 dd468a46c62e8a5a2ee64332522d5ca5f8093b13722e13cfd996b32b6efc74cc2a8502b44cada19ec0c30027dab400c8567c84937f08ccd989d8a0b75b470a75

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw4361b08268183e38.tmp

MD5 9c46e030383d0f85a113a1f3b7477a77
SHA1 7f762360a7cb9881fa9c153f42f3a39be89db946
SHA256 d08d50eff27e71af2e72655edf22dbdea85346cc14be53c48988a3c039fdf17f
SHA512 6ab0490d9eb82f010dc4bdea8e54b9b760a417a44bb88a7bc74ce7d61833e355cef54712f3340b37fbdf07dbcd83e17295ab546d864ac06e84e0bbb7d8dd8649

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw64ef25f0a7bc7b4b.tmp

MD5 4ee09ce90a33fc4f885539370d3ab11f
SHA1 023fb903cb6ddd95e25f18fd72e1b57b4a5ccff2
SHA256 4b00d5be82d9eae3445b559f4eb1c62eb192f5554b9edad50b09f98fbc65c126
SHA512 afdd5f50fecb5ada09a4d8217f1db396a2501b4ea14db90267ce51e964536a9e7c32cc55b5a8239c357f9146a7f4fa601181b7b8222670550667fae95d55bcf4

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswd0daa078fa038b63.tmp

MD5 2b3eae5e560be8c87a246d0e8fe3f593
SHA1 8f9563bb72fbea30d37a27c353daceb552279603
SHA256 b858256aa6a926f89714f21790d25e90b7dea5096bd9935454a8b4c7abea736c
SHA512 e33e50380d37f075b8d7fa283d5b4005ccbd7c35af1d11dc6ea4f4529c39571f50114d2c678061daa47f6b36bda9c948ca724acb9aaf9595ed7caaef2b0c0359

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswd2785d1011c26f93.tmp

MD5 c542c43d910dd6ae2f4a7cffebccf613
SHA1 02086fd8e53fcb3ac20cd4aabd730d46458d698f
SHA256 230da452a8068ff5be158d84618c9d291bf9b8bc878ed5d56318558d52e4966a
SHA512 364aa5a59c10d95c6a93024a443972a06dfaa1693c942bca517700bcddb9372aae1c76bdf35453a5ea256179fa61586922cae7d22f4623135fe7168b5bf04153

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw536decf783a104bd.tmp

MD5 ae1eb2e7a5de49e2950cd2f7892d5513
SHA1 ab7ea36f3c4232f0b3f6036edecffdd4e8603936
SHA256 23fbe7263ca595af627fc37e774fc6fd5f66daecb54e38d48486c9df09e438f4
SHA512 ef919e89dbfe93ea2f45e01913c9b7d1695520f3d0073f2b578ef814e3dd6443bb506e5766d09d41e802f9c2cb4d35778c87f86faa89baf7dce66da787b85418

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswe0b4a8fdcc337750.tmp

MD5 f6f0270f98f5cf857d1e0667819fc9d6
SHA1 959209e5e068aa2564f4f777e1c8616a9d4cb6a0
SHA256 616ac120e3b9abb6f245a09fc17398bef10c5e6aa617849fe68a89efdcddb7fe
SHA512 1ef69bcf037e2ead4b4c3518a8e8e3c2dd3065049649a6973aaed9300ff6fef4bc2bc25f7d0b92dc4ab5f6a576850537ce9d6e00090af86512d080417eda42c1

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswe6c1631d7424677b.tmp

MD5 e36e88531f284b1135617b91f73e5ec7
SHA1 dac7d7984c7f906f66a2eadec395207a4fd9a599
SHA256 0c25f2284aec3aa7dcf6432ba9416e2fb289e08bbd996bcddadaabe42e361b46
SHA512 7e2f7095bba85a3d6aa21cd7371b73d9aea6b07d89a82c448a65f3188d9365a0070cf8b5312a3ef0eac1e4a2d79eb3d34dfbd7a16a7d9da19545ea216c195c4d

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswb968a2f0c6466f5e.tmp

MD5 0e37f414237e14f395f8914ac2532581
SHA1 2b06c81103d7c94075dd63a8df33b72ffda75d2b
SHA256 3ab7f3707a380352c5aff32c0761c5ff86f358f3683b1dd273da8be18f6521a1
SHA512 3e226dd4a8c2aba7fc81132840e8087bc2fbc11096098345051d6eb1dc724f3960789f7f958d362c6cbf7d58904bf5ec7ac84945730256a50583c41dd2135bda

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw0b7323d34eb3bad4.tmp

MD5 320629a907048b64a99ef484417df721
SHA1 0de1886eae33bb5f16de27d647048a92586259d4
SHA256 b5823ce2d6e600eaf4e2b1353600dca0351c46d014f97ac525c3ee9dafb2bf4c
SHA512 6567cd36297cb05ed301e5f7eec87a5f796aeb9fb63ba30cbe73087bbe9539e2dc47a11947c8461cd79ead01052999913143d32ecf4cbdf5833a970e61d5bfc4

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw762da418f03dd000.tmp

MD5 918b087149a2571d9db1eb04878c3603
SHA1 aa1d2c7550df6eddd2e99b44ac9de925888281ad
SHA256 b2546e21336714858d2b03d2532b6955dcd7ff46b30435f6d309d8c39d0dc957
SHA512 07c0d13e505c69985d6354c450887260345dc59468eb82b9b0534d1bd13f5f960d2d56932b204b300ac7e5f0ff7234c5e459de06d0e466fbc3f710fb9551793d

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw52750603ab6b122e.tmp

MD5 4d0399f0050b13586b8b04f62e95b16b
SHA1 407ca079a3bbe2837203beabf41516fdba776a16
SHA256 420395ac9ab87accb00fa478be0b73b583a42d406d1341d98a77f6189b556998
SHA512 8908cbf7cb7b87fc78a2baa1eb2aef52303e733987891361db07098fb70d776fe936d48221a846787d67adcfbaf30ad93b867d5578b7dd566fe8addc480cda18

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw19e5b2321dd230fd.tmp

MD5 b2eac5c213cc442820167617d568e179
SHA1 9e61baac12e1a536be5e553530db8957ac606d37
SHA256 8b4a9ba2855247adddb4ee1e7f503dad5674ea7bb45015bd69cc83a3332f696b
SHA512 af7a8e6e16b86d4e2aa3141fd41a8c897957486b4d87d8ed14210590e86577e030b4b7c419ed988d22851c5fdf75236c23560fd855ada97a76459c9c93802c83

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw37e981b3ae4b952c.tmp

MD5 1c76698d36fce20d2919e67e3f08bfbd
SHA1 eb85df5d35cad00ee7eda50e8a4eceb2490f9245
SHA256 d95f01fc571294b128d0cfde5e68472b8f6a0b3dd5f0c18b676e3a077df80cc7
SHA512 7b0a9de7a2fab1b969b469f7e7edde93b9ede530080f4090ca0066642ce6bba28023bdb8ac5bd85eae38d918549be7066981a08263a3fe2a657a5cec15c62487

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw488fd2aebefa258d.tmp

MD5 bb66dd4c715754bfa99abbcbee3a4449
SHA1 21a9bef9112c1a614bf3d5f6eb2d2f0f17b58531
SHA256 55804126146c7c575add104eec386f161672cb740e765eaaf7ec8707a7cd2af6
SHA512 aa3b8ec6c34ce2d162783595ff3902cc1e8812ead15f2e723feb82fb0202f654d7e1138e4b3f83c7cc0204e15c41a34ad0b1d07fd3bfa609e97c01241271d136

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswc928761b5e8a3f8c.tmp

MD5 4228b8901e130b70052da8562dc7b5b9
SHA1 5007d4da77465c38d66689312418acbef9c7aace
SHA256 67f4d89f85a61b18ac1f5d6d04f625d64bedb252c219ff9785cd1508876bc718
SHA512 cb42b5a184fe08df207ac391c3e87d44dba15008efe2caaa0774439e8f7df2ec35f63e981d080fdb8fe2f46e8a43ff58a332d6cd241313ce419fa2ea0ac2f40e

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw74e289ed7c194894.tmp

MD5 cd3ab89fadee9d9ab307f55390798102
SHA1 7f5646953d2a90c1033cfee8d2e6d394b05d0a5b
SHA256 915c296fabf88b9e3b43b5a570a6e8e642071678ac443c555f6e95bee7925bc5
SHA512 5b68fbe6456897695fdbc683dd703c286531e831fa3039ba19bc376ac5f363cd0588a815156b18139b82e64ae5c9d87bee025805658005e46d3fce915a9f332e

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw9ef396723fdce859.tmp

MD5 b685358b3d0f37b68a24a6862f2ab63c
SHA1 b98d6706b7c922a2c93a75280e599361502697d1
SHA256 7cf73e4f69b3dfd89f3b24167f2f421b17537f3a4e707c63c675457b4fbf850b
SHA512 965580bfab334a217625e64dc5ab8622dcd18e5377453252b0c40c8e171040411a8916145f98e1bbe7476ad140562ea52ba148bf584d3389a07c2654d122e9b4

C:\Program Files\Avast Software\Avast\setup\ais_gen_crt_x86-833.vpx

MD5 20785b3f71eabf85fcb7ca07031fbea3
SHA1 ea4a6ac7d945b5b8b6c8c01a8261d15d540fcc77
SHA256 aa973a07daa5af629d42a130c6fb5092839a742479cfd683bc2c849dc1464795
SHA512 3c70b93417f2e7bd8862f7acf732e3a1335ef8e51cf2fd4da3f6227c76a9b1ea76ea5d8a38af6302aad3eff533e48f0bc64bd55d64375313f67fc4846d36fa64

C:\Program Files\Avast Software\Avast\asw89f348b21433cbf9.tmp

MD5 cd97b86463a7755aa6902a18625993b4
SHA1 3cc6675550719994b237635a62d0874d4f3d604d
SHA256 05f3d04060880d09a4c4f03fa8a17cf15b04e9f7f764fa346e11ce4e98d2b777
SHA512 c454dccc466e10a10ffb7161398eec473b70336527063a18e353ab25a5d7a2576176c2af2a7096c47cb98acd826fadc0bf6c1e0e6b7cf7421528c8be07d00a35

C:\Program Files\Avast Software\Avast\aswd6e85e179972368f.tmp

MD5 e0f0d9c1ea05cac4bfbbe7c2247aa61f
SHA1 ac73392983afb5a55c245c79b55d5506db6fe8c8
SHA256 f0e82a2f1290346217138b3d892cd916d8ca69855f63977d9561f5278d350332
SHA512 bbf3d0db25821381ece3cfa161447513f28c2ffbf107ff6c8752cf61cbe2c497d7e5c154533a35da95505472dc475ce83ac89baff5762ef9cae7d83c89b14ce3

C:\Program Files\Avast Software\Avast\asw22776694a76c2de6.tmp

MD5 575634e4b6719eb8600605a31c32750f
SHA1 f327886d113db53d209d9896f0cc8df1f0295efb
SHA256 9e6d05d9b6d8bbe66c647a1f07b3be2234f070c9938a10724dca1ce3fc05ec12
SHA512 0da85512e6ac5673e51ef32e4e95a60416c80f76c4612194878f64b6a70ff3c026717c0708480d6141f4ffd8c881157e67ce703936ac5529d2bc225909f00e5a

C:\Program Files\Avast Software\Avast\asw01ed745247fc3f2d.tmp

MD5 cad16fe5795c362b05905bed436b5e1f
SHA1 20b845f469e94e533b545bfe05fe5ede0a3fe32a
SHA256 706583f44a797afc17d2c394eb792a33f2aab0829a1f5867cc36fd94f00dcb74
SHA512 b2b1ebda861ee710700bca22c38ae33043717036c3cc07a236670b6c9c2f006a20b28c2eb98c4151259bbb670ce159e3d346a0854f73fe37ac1124487c29aced

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswec7b8ca61e98990f.tmp

MD5 268036dfa28320d2186b9b21631d443d
SHA1 96fa44f2214af9ede1160e043c7cd31b890b437a
SHA256 edb3ff7cef28496d535e40769625e542dd3e13110c38ce2e3dc1caa8687b892a
SHA512 99ce4bc5798320dd7f736725eb85a98553e277ab93353e1675fb7842bd258bb408a5df7bc530a161d91c1eccfcb510138f98085a80e892c3f54e2e8a723bb841

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw3314ff6bbe52bf43.tmp

MD5 9410ee0771ff1c2007d9087a8c316a4b
SHA1 3f31b301b5a99a13486ddec08d25646d5ad510db
SHA256 e4e85eea1106d361923995e53a0b961a28d4fb58555f40945003f35e5bf2c273
SHA512 434a32ca6c4fdd8ffeb45d1bdb4d9f3c1b1259a1260ae66eb241f8bd63524cd1a3ec29d5eefa2d2f266dd740273e69b6bb8a7771badb77e781dc789dc18de2c9

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw8ca6340b58400cab.tmp

MD5 699dd61122d91e80abdfcc396ce0ec10
SHA1 7b23a6562e78e1d4be2a16fc7044bdcea724855e
SHA256 f843cd00d9aff9a902dd7c98d6137639a10bd84904d81a085c28a3b29f8223c1
SHA512 2517e52f7f03580afd8f928c767d264033a191e831a78eed454ea35c9514c0f0df127f49a306088d766908af7880f713f5009c31ce6b0b1e4d0b67e49447bfff

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswee56a1164e9c7bb0.tmp

MD5 22a66d8309244779b8a7f275a3ff5cbb
SHA1 195e58fec7a5d39fe7a6275dac37295777da1352
SHA256 aca79a9c1f6d664d99691fd0d3d84a8819993f784b2ff6d7baf8e8ab2e15e7b0
SHA512 b39eacf78b9b97d968e96e357725bd6cbad7592beef5e0e5b301189cc76847be49f8a5299a16d68bd5c1c2d0e86d5263f865b29b66df8360cb1d4725b7b00ac2

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw48c5e70976e15740.tmp

MD5 932dcb8d7d06f4b89fc3915726c418b7
SHA1 33a1fdbfc3dfa0a1b7d2fa3b2e8bad8e8c71e961
SHA256 a73bd7d75f368ab2fe949dcddbb25cd5d5975ff9091761a01b98f5e26de543ee
SHA512 fa24b5f9a4192fbfe737506899dc052c51f48980992cbdda878deef01ed0280ca455bed0c813089503da3ccac92a0289dd8fdfe64cbf6babdf70d7bab531540d

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw7502f494f9366655.tmp

MD5 f9c7a19dfc5fa60b1405c81208bd959b
SHA1 4eb70df0a412d79fbd8011fa17ef815e10189c0d
SHA256 2f9cdd965650440cebaf2349140a7dde9b587829b7753de8cd051933a777f499
SHA512 2ea1e4d7d63af427a0c764b4a9a646421dac1f1eba15c1d43bd040b284fc611c8059d889c48edfca56e745abb996939d8f430ff3e249a5c6455e81b520307a55

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw39c01d8dac280ac7.tmp

MD5 718e5c4a63d2f941eeb1b4e9d6d85a8c
SHA1 deca5196d35d43c7abb35d9ad4b0ac0756585fd9
SHA256 f3117e3445945a872a35e91371e2a6c9f7b3fa5e74e5985f6ab12ac101b280fe
SHA512 61694ff307bcf3869dc14dac45e74b0cdd5a661d40e8483cfe96debe4727ec45ceef867d18e972d25a6b294c43ba0569562392b6752e068f2ba7c15407fad975

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswc12b7145ee92f969.tmp

MD5 11d5d26552c1730ccc440f13a1fce188
SHA1 4c534eb613cb05455809b6471d38e1e0976aa919
SHA256 edfbcb2ced712f23842525cb076ee2c09cc7b811a389cf37922d04ef1985e10f
SHA512 2428c4257ac8349035ebb286dec236a25acdbf23178aaa80fd5461b2ed3101c0a67574bf7db8728d0c101d92f45dc72e7bc578049d5b18fac367bdfb44ecfbf2

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw9d82ac1b05048f99.tmp

MD5 ebf8072a3c5c586979313f76e503aabf
SHA1 2fd9609f099a8f42b1b7ae40ad35be1569c0390e
SHA256 a030dc2dfd2eca28a9375c92989adf4daf161f988db5e16b9e10678eb0dff4c7
SHA512 438c2db953606818b843e42c04240d510b5e398617e8e5539498264f93cf1893ae9a6b6b02ee35b169ae60b0e3b5621d7d9f7e2945d0f1e7c2e7e0c1e9e3c1de

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw6e928a250a5f121a.tmp

MD5 e6d7ff1c7c1311a9011f1039639adc3d
SHA1 d47faf7b6f8af8ed67546e75693200d022ebeccd
SHA256 993af3de5e1fe2e3d0954cf06254fabb91a5a3aa513183fe0841b897eafdaeee
SHA512 35eae324dc30a6bf652cf571daefa8d34d12c09361b248d8931ce721940347ed50a2d51222adaa655abbf9c5a0ab58d57cd91cb1cb26dabd487ed721790378eb

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswee74ddf3299b837b.tmp

MD5 0307284d59b87eb2a10219270ebb2f4f
SHA1 a0c911ad793223f3274097afaea112081246853b
SHA256 1621c35f57a6202245b8b06468fc1cb2ef20de75cc2ae110819eb753607146b5
SHA512 b33ed63d6d928a2345310f9d2aeac50d3d2a55179c8cd79bc7dcd2a7c5ae9a1425af354654f613715bc2aba836108986daff83651208b437345071e2bedb7bcf

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswb52a68e78f988dd0.tmp

MD5 7b7f4484966036ff86a7e4cd303d3871
SHA1 18a789e9d1e9df0fdf22e94d71a18c483cdeb611
SHA256 7d3d88332d4744c9b6be81e2ba8d42ced7657ce7879a26f5b8a8d3bb2331ada0
SHA512 39e986994a99361fadcccbf5bd861ce9c4c6de65ce5e3da4d390b234fff34d7c561637ec012ccdb2757794adc222bc80de19a60a8917fe65fc221fdb3054149c

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswfef3f8e4d622968d.tmp

MD5 6aa7b1323c5d8e314f2fb42f855e9b12
SHA1 044cd0167de5e9c1b014e07287c90473c96944a5
SHA256 9c5880c395b4e7db4b8d6de49c75909abdaeeef0b041c1703c7339b05d7d2866
SHA512 e99a14c8772662dbabcaa504bc61ef616590bb6f7384adf8ae0637e0a365f94c67fe4222b978605b7a2eeeaa62505e57c32857b17b51f4b2e9a0d8a033f0a204

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswd821be5cb9cc5891.tmp

MD5 d7164ae82b7332432bf2eb7fc7774e72
SHA1 221d79c77a8a80068621a0eb8688ddb86224408c
SHA256 08d811ff57efe50d9f365c76ec29e095474e0679e06bb4d0d4d0134b0120b40d
SHA512 d1a4cfc0a21509382606f4650a67556b0616283231e71bb1870ccaa5deba42fd77583c3130d60d632e98f5acc4763f57a2ed932aa2eeef49601618761acd9429

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw491090de160229f2.tmp

MD5 58a8c2d2404ad7bf6fca8bdfbb8a5b3b
SHA1 6e834364437bfd23b48e66d8d891966860528d08
SHA256 eb7851e182a4675bb34633869938ff3579779a92a6c094194efbc970f3765dcc
SHA512 d44e3b47dabd29621a3fadaed16074a46b646e1190ffcfffb7ec835b8cd6eefac88570812e41a490daae485a1d71fb2d035c91e73b65c2fbde649fda8733ceb9

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw4fd6d0abd0c1a030.tmp

MD5 80e80532239aa8929ec0fddedb7aa8af
SHA1 312e743535e66735d782cbaffacf94c6c791edab
SHA256 d3641bbaeaa5a7e7d4ee0ee0ec64ccee0327cfba3d10b89094144eb70a0867a9
SHA512 87e7a5496bb2dfb9bed4e9b9913db2656b335b916eb1277ebebc33ac9d6622bed50a22293dcc02193f846be5e0b4b0f032dfbcc673955aa90f04cf81b47a9305

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswd0599a009dbddfd7.tmp

MD5 dc3fe259a9b778480c2405fdd7405c9c
SHA1 d28a588217738af932fc43b809add215eb932856
SHA256 b33a762f0eb072033044e7ee89505b695f357c958d4107ce6f1c4d68f88d3277
SHA512 54f58f5a0d1aecfb9a6c8f12b5aac30e26ec427dccc097f8015d690a0a2244603e80810c19fb8eb2ee7ae9122d14829b3aaa81c69c77b6b4c5751d040c3849f7

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswc729fb0f65cc05d2.tmp

MD5 533b418afd2ef8e423f42d414cdaf5ef
SHA1 09d3a595bad8f0e7ab5604fc02ef832d11a26b88
SHA256 66f910721f4477ea238603e5c14c858d1e26fc2ceaab3b48294cac069790202c
SHA512 eb73c82a91ce67f8d0265ac4f0739849e5696ec0069ab6508660368b8d382a230dc88eeb89aacf8bc9fc6b7e31c009521fdeeb979f4ebe6e80cfec083129ccf1

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswaf7934718cad9c0c.tmp

MD5 4847091828ad3b0734418343c712cffe
SHA1 24e69b32dba65631b92493b7aabd68d141cf21e3
SHA256 d9388848ebfe27138998518332bb507e5dbeb1d8851e9ed0300f15e14b6958c2
SHA512 5e8061cc226f3471e3964c04cdc5fbd3a607c9abd22a11a1e818eaec42b20ae873fa80cfce7f47b8f8844f3127ce98282c737f25666d20ded47704e0db6f29e3

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw6cf48b90595f2397.tmp

MD5 bf69d049653e504a7a1f8b55a6dde7bc
SHA1 737a1cbf1fddc0ae93a0a99d2feddd474f4b85bf
SHA256 e6e839c6d205f91adaa3d980f843bab3131b8a25e06d152d0f70a6e98fbe0fb0
SHA512 a8d834d46fcaf03aa53bd48b4cec816e0fd599b06b16a14006e402bfaa5a470f47dc6a55c1a94314d635af55ff2322eb242b0c535a02fc830dac83e375adc6a2

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw46fd4df4ac927e41.tmp

MD5 152925be0e3a0ff77b0979bcae7a7583
SHA1 4ac4bb649b42893a8d5ba345a1c92ab2ddd1ddde
SHA256 2e23b53441ba6b0779b222c120d44eb9a156d55cc3648f76216017ef06f9a16f
SHA512 17b41057b82b1eb037a59715970496d402ac00a59fcbe67245203f117fc38f1b7e7f5b78872850ac4fd7a5dcf4a3ec561dfdb3fb0e827ec7043978b535e9ee26

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw193ace71860b8324.tmp

MD5 374d505ced3719d875ac316ce365b1d5
SHA1 24da4d65eb7a9116c626bf16c3bc95b563f10176
SHA256 1edf013e890072987b8957b77baecc37140bc01581e5de6b020ae454bb57f8bf
SHA512 d9b82d1679afd85c660ea985d6f57cc13fd35b4d7b8104c6d9ce1f182789b615a573b68d5f1da6c25682cb35068ae0aad3c1c9b4509f339fa1a83a9eeb7f74ca

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw47217a6e85900cf7.tmp

MD5 e4fcbf91666504c1eb70644dc4c5f479
SHA1 bf96622c082eec928920a052bff477cb0c9e0573
SHA256 58d9a9b2442c10140db98ba705e8c7b7b9ac5a2c030d3286a66debf63b615c1b
SHA512 9dd34f36144010b3c1400ed1b1db8ac8e97997a0d2c803858abeaca75e26d19dc56512714b566edee581ca20c813c3cafd47a3f774a1596b31e23208b1eee4f5

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw5fc57b4c6a814987.tmp

MD5 6e245fdd89bb6f88f56784adbdca0b0a
SHA1 9ac5d68ff969f984f74e6a8cded8e683b98ffa36
SHA256 0e195a8d013a329a06df877a4569a3ec772f112ad29295f086c6d3e53f322fb5
SHA512 601248c38540dcbddd61fd26203df39ef5d450827570f01cdf0e415873e098913d82ca6e3c7b21a9bcae267b4cb67e970237cbd1c6320b8ffab58c9fb675a3cd

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswcd00a218b0ecb64e.tmp

MD5 b9d80efa3f5b0b75c523d4ced4da1fd2
SHA1 f493358454a273d0ddc6467c9ad82bf460dcebc2
SHA256 44ebde7f2681c0b8518e55ca242261b24f326994f089a4ef6c060f8dda04d62d
SHA512 d597c0e7c5309b9631966b01fff7e166c0dd0fc9d63534d588d47f9deee593cb2cf79cd490145aefd472b9493dd65144e875d5870742c8d09fa4c7d459259feb

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswd946b4daaf37bcf1.tmp

MD5 a1bee0af7bd944fae7f14174d9dfdffc
SHA1 ea699130cd63857569bf34826b9cbcb5ecfa1a21
SHA256 2c557f6a21db6c99af6184637b5efb57e44b40fae892230a43e96ab05ab27d40
SHA512 c6e9473ec6cdfc0bdd1b8f9f42bdcf3d31855b6e106b811ca52d2eca895328889451726fe12ecaf0af9a238d74c10e79bcf0870f056e7e85ccdb9be49f4515a8

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswb1fedc77ac8641d6.tmp

MD5 d91e6c55a2304aa59d24e76f34884535
SHA1 04ebc0bc4932c09c3dc7d9259fe7c9a6166b7233
SHA256 8875816a3809753c04acd961244608e9a47127523c1d5e50cddbd83a4627821c
SHA512 19c1e2458c5475de2b41013fb18dcf3d149c88c0b3816596b67c90f7bdced3d5214fea97dc3782f56f8a276f93fd28cf519018257bf432c00435ef6bae60a8b9

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw36e78b05952cdf3d.tmp

MD5 70f8acde94e2c3952b7ba7f56a4ebfb4
SHA1 955064391f0c9b41362cddbff7a070ab3888ad3e
SHA256 91decddc6e80d742755a1f65261d10c3c0d059aaea6389bb2da6fd3aa7ec5289
SHA512 71087a283d560f08e43b1a183258f1153ab5091d5d318cf4ee0fc8385285592c377d8e68a0f06d3f0be84202aad6dc7376b56057e23b6b3753a445323580f287

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswa0803a04c4c6ff04.tmp

MD5 177009944ea3860b58c09da1871db999
SHA1 01cf9cab3aec3a1ea89111269f8cb036e73916d6
SHA256 f353bfe02e30f4fd5cdc89bd7f44703257f229a09f0d815d7794df902f67d1a1
SHA512 279d1e663ecc151dd2dd15462191ef41e668c7a2bfcb7930b8d568facf7695a030948c3af7f9907226b00dede255a7f30169083ae2ce544f2381548db31c9981

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswc20b8ab1b83f94e3.tmp

MD5 5dedf9f86ba1366d9e920f33eb03721c
SHA1 605312ce6d623889a1d404354ee653414a7e4920
SHA256 0ced53f1ac2adc9525047d2c2a7592300dc48a5f52ad8b740ce22e3f3aad85ff
SHA512 bed8c7a74e57f4cd44bd0edbc1bbb1f528ce261d7ad6a5545c33974c223ba910d648f0cbea8bf0736deb5aedd3b257f373cbbc4f9765d12c56a78e823d05d4b0

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw2494b4befaa3f32e.tmp

MD5 afc4db1ae7eb74d1b43eda3d7ea5b43c
SHA1 f31b2c1161024ec2f89c72631631e11fd5ceac60
SHA256 fb4b382e2dfa80b3427a98c51d3270b1e80b5c2a10fdae1a72b7c464e57fc6a7
SHA512 a014e4bbe207fd707a87aaa0228241fa7c414062af8922f51e46210b958284096357b21f89e59141fef28039a999dc6ac832ec7fc38bc4895e88fbed6b9a45a0

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw61f658469ceecd70.tmp

MD5 1862f49d5c2ba7c2bbc78bc517cb0b38
SHA1 dbdca39d6d9d166f9cb5b8855d456653419136c2
SHA256 90ba9da43d6705d76905e630505bd1fd097d1899c9bca3241ad0de5ab08ee366
SHA512 c9c85ec2851f5b793de07e672365e6db28f1150ed6b6057d15be828a36029f4ba9e0d4cce12c7d424da4c94713c18ae256d9ecba9e59ab88af639adf56ed6a3b

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw95d34c9c8bf1b86c.tmp

MD5 57745a06849d90cd5c79ccbec559e7b5
SHA1 71d3d3c0998e648ef6b061f7c65850c6a2a8593e
SHA256 890dbb72c4c35266bd658c663c1242cfa3b50cf51e2873e986b7ab2e055af4a4
SHA512 ca28053575e40eb805f366a7363257b3d40a6fa8ef46ffb5b58ff17cfb0ea2668f5cdf2661355e94866b73b914950c09940f5c32fef5f9a22439932e35391dca

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw8a4e64a6504ddb6e.tmp

MD5 948e3c479e87ad905a3689bc94cbf86b
SHA1 c9b2dcc45feb9b0bcd52122b51adf98d7fa5b0e5
SHA256 982fcc32d7614cb921cc5203970e3997a33b31aa1d91f14db5db25a582dcc3af
SHA512 6f15478ba5e7b403580b4b52924866e52adcd112d82900dd17a2ce67efa10306a5a86e1ba5cab76bbe3577e2497b83adafd6cf6c39a81c35b53b528e8bf6b440

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswf49c893384031692.tmp

MD5 9ac788a87032640e046f305413585503
SHA1 41b74cecf0f78134204dd3d8aaddfae34d6aacbb
SHA256 363825adb27d5a5bd249fe58460a977077f823e50dac7509e124fcbac1512128
SHA512 cc725796af3f7793ce6e6faa96a201ebf5e77ed00dfac3211a66a95ee071e559c9efb8e47ae0287d9cc1feded559000a582a2138736ab8c628325428c78e648c

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswd4d1def1de6a391a.tmp

MD5 772d6c07e47e77a4479c7a9eccfeac4d
SHA1 b88db71fc80eb57182db6dc6ac00b022e1e47cb3
SHA256 2c9a8f8d47b49d04a82e8e689ae9f6552482b1861eb8398f3733e97327191c2a
SHA512 f87bb803e818372f57319af97227834673cce9988c81ffd4a3d1c6d7038c6f7398e06a7133a17f063cae152ad27666a6d18f87ed77bb46dbe141c1272bc3ac84

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswc71b90819ff1c758.tmp

MD5 9ad2e67f2b1f04b760deb00b889fab53
SHA1 465314c9bdd359840f7da11a619ad0b409c271d8
SHA256 5662035361e37f6c5e4a5a19de134df2ec20bd4c0f1be803203b37c95ee61265
SHA512 cdb358848d48cd3913e7249eaa45470bee4ba9f9d92d975215018477a57db930c16b349541da2d82a2f9131220ec3b3cf9ff471ca411c2f705bfe916e8736be5

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswb7fd484277e9c236.tmp

MD5 714e850aa29e808568933c5ed8c7df5a
SHA1 ad84833bcac69b5217705e1c4d33d54c856525e1
SHA256 4a244eea4596ebde0f9094cc6dfeeb5abb3c4385225bb0630ef55a431fe1c4f2
SHA512 3a220ad4e2fd49f40f7fe5fdfc53608b114661f31993c0329e993c5d733b6d6f3a366eb46f93aaa9d5cad90766b21d85e5ccd09cb9c5ab905118d70702a3ed11

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw79aba13e6c4215e8.tmp

MD5 d4bad006e413ace7d729b1249c49b92f
SHA1 cf0dff1b371316c8517619fdeff81c583268bad3
SHA256 245d48bfce5cf6e9c5093e995d6ab5988e2401d32530fd6863bd5f8fd688d780
SHA512 d1a5001633f1cce60db2687da28706f66644613672fa8487b065e3aa8d77ddcc96d9272c665d894b243e222e1c104be10be1dff8e5d007490e50f2bd2a708d0f

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw68cee099c2625c43.tmp

MD5 6337654372aa9adf6a8fc97d9676a33d
SHA1 b790f4828e7aa18cd0eae77e78c67ddd66f3ec5e
SHA256 6fc551cfbcaa0f90ed24dd09fa117e9fb3b6755a3fc0251d33ca64862a9a3414
SHA512 4a888d71747c64cb4a964d8df956c5ed9e3de9e8cf30d804e3ba76e8c35502e1802423ce527a419935b0d8c8e4c0f6168657b2734ab79d01afc946521a88d528

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw5a51234caa396d7e.tmp

MD5 d8999e328af5ee1eb23c216336637cb7
SHA1 a7bde6c833e4d6ddefcc4050997b1583ff1ffa42
SHA256 4ea02b683513a157e21824b1c1e9ebb782d22f14209b67961f97b1f79673d3ed
SHA512 4f041ed2daf781b7f86b4459e74330650b2687ee46dfb961ed7a0716ac7ad2082a631cb619cc6d3c7d19f550bc030553b9656aeba14f969dd52df0b40a0e418f

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswa7828d4601b0d101.tmp

MD5 892e47390f34aac7d20afe63ffa92f20
SHA1 4a78a77ae1d5bdba55534167f781a3c8675c7ed3
SHA256 6070ffb5e20ed032d460d323df981d369fa68045fab130fd100803a00ab88c23
SHA512 8b37866ebdca5047673d984bd779b1df052e3d44e3fabc3a4ce2e747489baa2bd86add629d95c76cf08150f74281d89d46372ef64266b90304cf7dd581af3a93

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw7f90e1e18d06f083.tmp

MD5 1902b85a588178857e9637902e5a1b85
SHA1 31ae4cf76a34ccbd92fdbe60bee080998741ef4d
SHA256 5e48c99dd6318b017686bde507cdcb9d6ecf25f4f78f345845b865e443f1ee66
SHA512 0755e9c0adc9e374060c851d4f7fa62633ec07dde0bbfd56ffc9bc8ecff5b9efd6fa8418c43e838770eed43a54a48fd61a41226d9ea84834275a4a36c7796472

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw7d5c60e803da8d36.tmp

MD5 7f0ef1cf592d04b082b65f75584652cd
SHA1 f7b9a2851a66a6a8eb509f2541b6ccc3b551f2fa
SHA256 9f496e181b1c862c7a7d03c09d9b0a5361535c98acbb1a9d50a27bcfb0a2bcc5
SHA512 30d2d695773e7bfd67de8691c40e571b3b91858e72eab3d78c84902b359108e9988247bf81689ab15fef6ed0a9ef62031f1937c6e7ce4ce8e1a34970ba23e727

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asweed50f64a21e7261.tmp

MD5 e334f2fe1e0e6d5d6966f139ed328d97
SHA1 68b2cd826f3dfa59531397ebb3f382dec9af5fe5
SHA256 d56eae93c55abdc8eb77d132777049634e28a9b59fd4b2101d51351546b984d1
SHA512 fb6ee02f06447c906a4353d93ce247e14a9a1ea4255819a88e395afe2e3775fe3aeb622b7a97d86086d88c739ba4d2e2fba9e8fd6467e167fc75d595c9182327

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswb7bdc96b75003dc1.tmp

MD5 817f9a76b7eadc1226b006ccbdd38a11
SHA1 8b81897cdd4d48befa389c1df2d0b887ffeb58cb
SHA256 99ed148ffbb35829480412dc64da6ad24dfabe2f9a0eff9ba1493455d7127677
SHA512 53d8b2561862c6b2465665d761612aaa8b7adc887058260fbf970aac0fb006317283ada01468b1e042fd9dd44def90451793afee297ed787086645cebce45cd2

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw88b5e9a4c7e96114.tmp

MD5 9fa3992f5dac5ea5dfa15b9669c68154
SHA1 a453fb6c4064da8c01ad03a4ea3c0434efe82635
SHA256 9057131f628e547c14754d545140ad6544e64606358104da50841e9a1b03f442
SHA512 ad73f3952dda55cfaa6a0d6a0233df785650f5965caa4859b6c1577e3fbd6020e60b4b26338387690cc48b16a186d2b530708a71d2671ab17ee8904399de292f

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw84a4aae7d9060a8f.tmp

MD5 059129bae1776f03c59d3ba66a6f6dee
SHA1 33b1dbcaba1d16eaf5413f1378119cecc1298724
SHA256 a83af0f79abb5e5c818c6f38a38da80e531081f3255cb006ed4c29635cc0b9ce
SHA512 6a7da7e58620bc1ce4b6d3cab1e0b746fc9fcf05a84d85931f845412301880786fbc63b31611d9442b5a1cfa72558966375ef14edc749473e2b7c988dd20b675

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswad3d71a5d76b17ab.tmp

MD5 607703b245d9b4fc69a8b5363ff626fa
SHA1 dcf4626787ea220b19e08cc5bf9e55553a3a2aef
SHA256 f65b1b3ea2767f98f0c29118e85b06f4e61654bec34b60b3abb593b24ec29af4
SHA512 92d761f733f2c678946894ca72459b0e6dc62cd3abe1073653104689ab48c19603e6e1109c07b2f110822b424430f22d112f87c629b99d0b3ccc16e179549628

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw7cc884481e9ebd88.tmp

MD5 2b4a3a51e075ab9819c6d6bc40efb4b5
SHA1 bc52c10ded8b087c73229dc2f98714b5a368f521
SHA256 d718e1b6c352112c2f8e36b4ba5ed28e6179257fd2fe944c4a0d404b5c15b5ae
SHA512 13b07dc2247d51dad1ab9bc7df93e0d3e1bd6cc4fd16f9aff87ceffd40a56933d569a5fb82177dea7b6ea04ebf9f909f95451d123126155a13de6a85f747c592

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswffc3922b7dae19ec.tmp

MD5 0909e61c8c9c717976828f65c987e5f9
SHA1 b5affabb8afda55ebb1f404edab69c6c239affe6
SHA256 03ffdb036329a25beacf905d62611a13e3dfdda6cbd2d13af830258e8cf40ec0
SHA512 7f78746e40da64631c08d0e173fbdeb40beed180932b42382d9f3ac0cdb4348d2a5b1c29770bb98f5d4823cfd66ecac2285afbcaf109f82c8b75c7711f10c49d

C:\Program Files\Avast Software\Avast\setup\ais_gen_crt_x64-834.vpx

MD5 cbab7dc59df765813881abba6f8b9780
SHA1 65f87c9daed5d61ab1a0dc783727677a33484e83
SHA256 b3f909a53f081590a5c847e581de93520ef76e33ddd5117bdf924be3937d5030
SHA512 f3f1305799065dae8de65703b66a162e07f3572967637fb82231281242e265c31145b88e8f7e7bca537d7e58d01781d81e13e80adc24c39f80eeb532d97fd52f

C:\Program Files\Avast Software\Avast\setup\aswc50a5033b427ebb0.tmp

MD5 da251273f6b395c3643553d138013014
SHA1 6aa71a8e73ce5fe1a06ea5da769f37df1543d0ce
SHA256 ccf508b092e866ecb3c4487c832390ba8fd257d45e5b8ba8fad688c59ecac3a2
SHA512 1ce7ab315049c37f1d7a3e361f464bc2453a4c5892b4ddee209e633d0c9114703deafc90493abffdb42534343da08231886d7411e5878a6ebd37d602b3a5de2d

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw4a016c6539f6a8d1.tmp

MD5 2d648e647782d0b07077319c88f41e28
SHA1 1b4b15bd6a4a366bdf5f3fae9f3b0a75bf8bf393
SHA256 997fefa7592546cb7f797aa2826d16f5c0860cfa6a5e6930891ef47642e3d0ec
SHA512 e91cf2b81288c04e022da3ba45e5bae447d631f17621af4410d6895f6eba30e0144cdfe574d480ab56eba7f9ced3662b07ca03267d4a9b193e74b8f10c06d868

C:\Program Files\Avast Software\Avast\aswe78e0dad21e5017b.tmp

MD5 7cefa19bb1eaa218e139641afe5f7ebb
SHA1 a7e9779e8638eb304f6ed251c598bd49d050bc2c
SHA256 1e7fef380e3b0a873ec4f19e089af82d40e1999163f4018c316e93efd725a8cd
SHA512 0336c0984f01fc432442a12a5d3084dfb05c9b1e44a253d1073288cfd5ce0da4a0841ca6989047697107d553d7a04f354a6898f1d00f2f7efd6469dd50a49f1c

C:\Program Files\Avast Software\Avast\aswb0ac7cb9e7add180.tmp

MD5 88a1fa7b63da756b8080e0017f6cbf92
SHA1 c5b15e255135655a1ae106adaa5504ce49364eac
SHA256 49008925c956fce39dd982c2204fe7e2e8e8b8cec6bd63adff663bcef53f1448
SHA512 fb6f8df5d185f2be503718b9707cabfd812b6cab8ae42f93c9f2f34eb2f5df1bc63aa3541545a143060a9bb39c901cdd0179eccac21d4b975000149221883b44

C:\Program Files\Avast Software\Avast\asw21a51bb7ba69b964.tmp

MD5 104274376226a126ac98a35f3846cec0
SHA1 9c3194d82cfc0b02026b424bde986dc4f6453e71
SHA256 86aa90dde15e02064a5cea6468e0ba27e981f264aefb685501aff1e609a60e97
SHA512 c1620cdc2437eacf324580892f2799c24fc875227537ac9a9428a8b422f27819ccc5ba9da6cd7f6319f9e7b36d2ce48b85d1224691ea6d525b6c237b526964b1

C:\Program Files\Avast Software\Avast\asw0166de0a48a5a78e.tmp

MD5 bb81a7aec002b4211f54a2b6a3ef874c
SHA1 63b8cccc802f856c3edd28c6843a004d036c6a74
SHA256 2ca644383e6681f8432d1f7629c59080aad2c75deef036e1cdf2846f1a543755
SHA512 cc0443b25a995510241798ccef5304d3ce7afa48d557602d2b811452dbdf87a03a9a05666dd11c2a5f1b102ddde45b674f6fee8b0ed43fde07cdfee02779b09a

C:\Program Files\Avast Software\Avast\aswd560472c2065ccfa.tmp

MD5 8e243cc4631f0454c7a089d2b8002dd0
SHA1 83beff00cb7faff7bd3f1b89c33420be8c7cc265
SHA256 db61a49aa5d2a16236902d32a605f51a2996cbb3d7ab690b365db486b2a9a8b1
SHA512 dffaf278f52bfd660df97803828a90217fed6ea974473b720cda0bf495f8b1d949e520505ac6bae9013975eee53c3d46c769ac3dfacabbcd122d44c4a8ddb175

C:\Program Files\Avast Software\Avast\aswce5504df413b7baf.tmp

MD5 afb399858ccd7e913f51dc76383f2edf
SHA1 2f4f323a9c0155cda74386ca506edc492b5b5ce5
SHA256 fd175017ba22147a5c9c9a4f197923c09452f718590ab445fcbea316bee1fde9
SHA512 4f6f56eb6092275a08ee9e821a4ae40c2bfbb57fea410e5083422edd147b79bfeeef4df2b8f9a2ca95c7352f8cf14fce7acd3483349464b34f6bf59a52859f9a

C:\Program Files\Avast Software\Avast\asw1f800e703acbe0e4.tmp

MD5 043eb8768c2fafc21fd912ae01f739a0
SHA1 c47234d2c32bfcf44b73a92ce29565e3b8160ea5
SHA256 92182c837cec45ee9fd651185e527f060a1c618d2bd1a60043fac141cf7cbbaf
SHA512 3ce9334f010f5ba01ca963aa3a36d1bcc1b8b23eed85a76de3913ecc33399a8e11df024ded272adaa1b58450b9339a9b89a4975535cb9c2ab27a677afc5b53db

C:\Program Files\Avast Software\Avast\asw9e9a7fb88347bca5.tmp

MD5 e62fc8f4b5c9c47627801c06328adcc2
SHA1 7e586067af56c7aa2011cbce08a5212380b53ae7
SHA256 7457222d7441c9cd30b3adae4f780a728b4b4767723332ab2735e8f35237dc03
SHA512 5b0c152b9cb8230fc2da3a8952b09385d6cd88a7d02cdd5c3edcd4594934b9c9f974b8fcb48e69af5489319e455c4358220812376796b916d738e9e444700f4f

C:\Program Files\Avast Software\Avast\asw896a2ae3502a5962.tmp

MD5 e9a2f29e0206563e64631508f044031b
SHA1 180bd23cdacb152abc22106803afaeafc8d6b84e
SHA256 78157924e51a60573edf3758d90bd68a4d5d084cb2fc3418764ca4142d44c707
SHA512 bc306bc10afeb1d8691c3ff7e30f93b7bd8476f116e3f20b606dbf219c80caad74a974012740216405fe7138c3a7eaf93444b95e21311b131eccb9ce0ed14e9e

C:\Program Files\Avast Software\Avast\asw97a8ad866ec5545b.tmp

MD5 d91d5a3415d381b3cc7c31e7b3a629f9
SHA1 61889f2571b5b0080f89cca5a20b162dea6bae96
SHA256 5b34234636172ba2a16086e3ebeef6737a89aac3b2023093757595dd4a73e9cb
SHA512 06a65d111fceedeae6b663de612676f06d73af4e5642e92a56b3760e6e730cefb45e63faa1bcb5a0bc33886931e37eb45c4ed25b3a90199faef138190a7faaf2

C:\Program Files\Avast Software\Avast\asw1938da386afdc915.tmp

MD5 d5ae497a336468e689e8793964fadce9
SHA1 ad2b17f4c35f07b2af4d8d5a8521b5bbc5232bf4
SHA256 4d6fd7939ee09f9c0683c858cc29984813964a15aca0835c3f16bf7bc6a12b26
SHA512 e020ff464bea40afa51ad36c6a55f9a2e69d6c40bf6296e6614ffa21e64e4ae59eba3d698411f9de5796af502e7b3a78df1f3a94f3db7e26c8fa6cad7abe18f3

C:\Program Files\Avast Software\Avast\asw156dce4d2df2a76e.tmp

MD5 4e3a95a09031d39b502e94ca8e70f9dd
SHA1 1df162e6458f1ea7a788913c0c92df3dd5caf311
SHA256 18315a0ae91119bfc2f1655a549f008c060e08588419250512b849221c7b877d
SHA512 63bc61474ca63e1ca2acf0af7804b5215fdd767fd0a8f16aaaf24ba1b38fea5050dbed56876dea468a32d6e33cc4397f90d1dafd8474626e541262ee178c7aca

C:\Program Files\Avast Software\Avast\asw61b968fab1e119fc.tmp

MD5 1ba513133cdb995e6924709df27c8822
SHA1 4b6baea788e255e4dfa9865b42b79687a0451590
SHA256 facd5dc9dfacb52aac26ac93c971864258798177b8e88e92df1b4dfc5fcdd51c
SHA512 38294bfea76cce3ef30c06b06b24b4a76577fc2ea7e4f45f32a90aa92001bbef42720bbd6e689a448759929639ce097bbfeced02fb83ae7f3470713ca552173e

C:\Program Files\Avast Software\Avast\asw53a19f9478937812.tmp

MD5 93a8363367658edb1585184f53e9cd42
SHA1 df3adac08812e976433438813f31ba60837db0d8
SHA256 1f65c74fb576dd986b505f143d5c6f93ca227d7c94d2a6b2d876c16d07a492ad
SHA512 68dd174e7c2d8ec392e4d41f8afc663ca3f4df0891737a1b9ab050d525d7d2afbbc5926c5afdc93bad71bfb7f5aead1dfd298e0a1f230d15185244d7ff83f2fd

C:\Program Files\Avast Software\Avast\asw76f5171aad8270f3.tmp

MD5 069cd251530f174ab404f6d5ce28f4ee
SHA1 b015807e95a1bb9eb5ba934f5ccb68c5788f2110
SHA256 f75ad30c5ace5770b5690a14e31d44723222c872408702761f49775d9b1bf7e5
SHA512 6a13c3d773fb97d76f5ca97cd54b988276ea363fbe3c0aef436f57c4754fd1ac8f55e6cc0f2bd7fbc2efdd5f32280aea019b9e5c61475cbfe6df61a50d55ed9f

C:\Program Files\Avast Software\Avast\asw224ca4f277b55320.tmp

MD5 d129255fe628bfa694ffd97f6786a5d3
SHA1 eb80cffa407c62e188e482b89c9aa968c1068572
SHA256 6be57093c7a33cf72002b6bd3a2a2be5f3cea19b8c8d62095945975e960f6c3b
SHA512 4bd693602270932b6c89de557b6e4a5bb68ce6c728e14906800e1838a7dadf443fcaf4f0216708f497150247b3b3c959187182327f1d1fd034d9afa53fef0f84

C:\Program Files\Avast Software\Avast\aswe25e973acb5e74b9.tmp

MD5 c92bd8632762ff4eb82ee625eada992e
SHA1 c67e3a26ec4557c2d9659a081bcc7fa823cb658f
SHA256 cc8648e14e662839f39eaa4bea2403fd1f248f1f7391544e8614541bbc8b40db
SHA512 25acb02c8708b45dcea48082b989f3dcd62e60ad42cd451f36af7efd36552f10d5454986efaf8a9b24dc2fbf1ca948b7bc1d70c952d74c2a62fecd9f5474cd8a

C:\Program Files\Avast Software\Avast\asw0c95022c1ac8dd71.tmp

MD5 367a5ee9f5a23da358285ac36b0f8539
SHA1 c9ee5b0b99955607930737c3c773cf86ec97a030
SHA256 38d74e883ccfb7dd8bfbacb53ab9cac1414ee855959b05e7b1fdc13fb4e8d5d1
SHA512 c87b74aee91e58123b6d352f2ee36949b91d1202244b858efc9062b94caa77e2de9a9e80443a534ab4f646361f1969bc9ac6baea80f4cd2150073b14d658ec80

C:\Program Files\Avast Software\Avast\asw5cb01d19c3b06d16.tmp

MD5 28eb0f9093b601175667447b042e145b
SHA1 64d53e7da9785e09792f0da7c42d3856703cc0ff
SHA256 4b8e9b5e4351d8603a45562f61ea3a172dd040eb5a14e07ba0c1577cce715945
SHA512 bf81689ffa9f869379cd25c6528e77a855a3f0db7ac5b039fb3ffef1d290553804a43ae4516a97a8a982f84a51794507b7d6a0257e63adcd3fd9048bef6c5da8

C:\Program Files\Avast Software\Avast\asw9fa675c56fc52564.tmp

MD5 d07fa34e3e7ba96a971c15e81282ca62
SHA1 a0765f292abd4a34c0596730aafdae307209409a
SHA256 d783ccd49c542170171e706a3a426969febd56f76d33c58623ead104eefc73c7
SHA512 5e39fb3a4dfc9fdfb899537a8b507409360edc680bae3c05e2108f575b89024aabf222ef112ae3a5e8d8b347893c91cde808a33e72e343cfa63dd159200d57e7

C:\Program Files\Avast Software\Avast\aswefd47ce532000070.tmp

MD5 a4255b8c9e4155644980c922c71ad643
SHA1 f1341400351c984429e207ca3178f80e847048ed
SHA256 5bd1803e53731910e3ca83bcbb77a0c8e91206cb6434625faf14c46d7fd3ebe9
SHA512 ed6785ee073426f7ac046e9491f006c58c993fd669921ebd8b9d592c895fb28da7618f10d2c2d0f05343eabb79a155cebb173572b8799e81a85234bc1294e4de

C:\Program Files\Avast Software\Avast\asw5b72fc8e96c18a47.tmp

MD5 f7d35316444f873c18e596ea6ff78433
SHA1 15b822066f99b6f0a0ba0b2ab364f73a729cc7cb
SHA256 2a1e8dbcf90256652ec113ab4aad6bd476368d98b5ca5d1beb27ba38d6e6a9f6
SHA512 4836093fa53baf8eb9205b31f66b51910a12d038ed03169ef3c0fe010ca89b0aad8a3a250b68c346486b1ea836282f73649669fd6f58ee128f9b129b2356d7d7

C:\Program Files\Avast Software\Avast\asw5404f84920b2c528.tmp

MD5 d241291495915755201768f2f1f2aa02
SHA1 c1c4274748f3fa1acff568612b98738e8a337e12
SHA256 f5b818d3799bf20fa474790d36c62aac950aea39021fb81d9587fd35f0426cbc
SHA512 21362b24fe087d282d0cb424136060479cfebd247fff79ad0fc5dec6e1bb71737e4c59817be3b95393a5f21a3ab6f5daeeba605bd65a48caf9590d58d68fe286

C:\Program Files\Avast Software\Avast\asw5d2a4d3f47f07a7b.tmp

MD5 23d60db6b31ea7f00732168f588feff1
SHA1 84637e85b957df3c6642ff5882896400572f2c43
SHA256 a8a5c69075d23879556fcf9365af10d784485672bb3f429c508f3e5f2ac8a249
SHA512 0c5cbae7a4ba03a499b509519e10a53fb193243a1f41f8bfb5a590ae53e824efc68ed161fa804f0fbc3063bf788a6ed0bf044a760e2d86d18fc32c00715a945a

C:\Program Files\Avast Software\Avast\asw25f45ce505239c33.tmp

MD5 f041af79dc739bbb5696d9ade7fac6ff
SHA1 beddfc158442aff94f5ba71d62e989e44a1cc249
SHA256 8244e711f4000f91286c084b8ce88ebe78be70a7553727a2914233907c7d65e2
SHA512 573ca6e557cec519722af7d530c818c12f25a0ec4f1679cec1e3d4f0e255787d37dcc374d8c2543ef6926e54194dd47bc990e5164aa98b2207041a3e3945c223

C:\Program Files\Avast Software\Avast\aswed998f901d1b76fa.tmp

MD5 36a7d60afc78de6aa8a67360e91241fc
SHA1 3f5da4e8e00eb50a32e17de62d8f3b9f9afb442b
SHA256 72d8cc523eb4fb307f18e981d1b75b3910b1e0d156172d4186d94fe969a8d5fc
SHA512 affdbaba2a693189bdc4f9dbe83cf88ac0990bfc1038c1867960cb2948bbbf32663a3df42f98a2cedae5b15e0742b0ab9fa29b428d14e052feab180cb185c50e

C:\Program Files\Avast Software\Avast\aswf3a806d9fabd62b8.tmp

MD5 fe0271fa93c24297f9d14d9c0548780b
SHA1 be77320a54e8a3774be80d0d95320f976e3a906b
SHA256 f3c0113acdb42ae20983fc1da2a8d8d978711256f564392628e0ae07b9738400
SHA512 d1b48a1be692156cd436dd4447d2a4b44a1a958022fc748eab6889721b0294be10c27a32506cebd908ff69f1d2befbfa4d123a56996af97ec391d700d6291bf4

C:\Program Files\Avast Software\Avast\asw42c41291aea04e09.tmp

MD5 154dc11922103fcb9d0301511860d5e0
SHA1 6cda32f4a9978672bf9ce842d5727c90aeb9cf85
SHA256 331a3a31bffd8d5f59a1799b1e1b384397c9f10d395f47cfde03942e6a7318c8
SHA512 65f804a262371c1eb096b4c5b658f4a1966f88171acbce165c332a6e7540d453862a20d44d8f8881df4a57e4db6fa069f4d7426622012ebeca30e6588e35a5d8

C:\Program Files\Avast Software\Avast\aswfe66d99b497167bf.tmp

MD5 ac797f486b25f5faa4a0807151faee43
SHA1 f794942fb246778a20b3913a298f69beecd1cccd
SHA256 39f34b3e2024b16a7382a447e4a5bbf1882ce7e068a0461209b945daae2daf24
SHA512 b535ee0e4e17c65763db9fbfe18f03cf4a0d4bf46d9ce1665ab3b107f069a7d596ad4e5647eb9e842f87f759674da109a66cd2b6d5dbeb0d1fa8206c77d60d77

C:\Program Files\Avast Software\Avast\asw302ba06e037bb4d7.tmp

MD5 e4bc2ff2c11a672223acabaff1a494e0
SHA1 1ddb48e464bd8f7cf2f00d57cff01f75447f3aac
SHA256 b82f9c3ed9f3250f34ffa6c7702103ce2640c9c440267fb39562b203784c8ca5
SHA512 ffc9e12909f76834bbfa06feb961fdc94f7f6f49fe634023a9e8e1d2c37d5f7258d71246c9b3ce616eb76c0de20fefeb18b9786a2b1b59139a71d8c448af066c

C:\Program Files\Avast Software\Avast\aswcdcde588984b3f80.tmp

MD5 37ee5055e186be36f3e2b0d806dbbdce
SHA1 77452ced8cc9fed80408b941f9b5b682b3016aff
SHA256 13e7eaddc7fc6831577f4419a8fef690b1204e1203b7610a295d2943554b8a1e
SHA512 559f502d49628788b870f2739dc4fb3de47f7dee4195dbd6bd66c4d0c785453b7716aedff69bf060f4c41b972eee58ce2b6213fe824ea0989f4f2e541dc75702

C:\Program Files\Avast Software\Avast\aswafdd3aacd42e1f48.tmp

MD5 d3ab5b87383003a6487de2203c8f6a35
SHA1 7463397b948319656619fec29d186c3a5953b73e
SHA256 3630b87a075e22016d3c80e863582a19f832cd6bd70786f849f6e49f3105e27b
SHA512 b0a91f79c38a152865ed56259c16402f2212e3174b534cb53dfa2c2b995847c3eb2e647e1e1d59d1c967cce52106c742c110d8b4cc899ff17c8d74c1ec8317af

C:\Program Files\Avast Software\Avast\aswf730bd0457d7d9b0.tmp

MD5 3d3ac3d1c20267a35a75540d334ed3e7
SHA1 a9391c9a4fc38c0e5611d036ba9abc393f40e4b3
SHA256 3c44d25755cb8992d9ab289764ed0efb3ac581bbd5d7f984fc5704060abb5078
SHA512 b343547141170f85de7e1e49a65419cfb2650de2d888f250d4dba7d07dd5411a01133bd49dd36220c70811baf5d954284a00622e68586272edd0d9f5e6b2c59c

C:\Program Files\Avast Software\Avast\aswd3718389ecf4d5f0.tmp

MD5 005364799fd667a3f1d435f8b08be04f
SHA1 cff30a6b0633da9c1af5cbeb706e536155efaf5f
SHA256 86805560c172f79411980539024a8bcb7c5b784ff200562df3a07f41350bf0da
SHA512 3c045595bd6932aef7c0199b4dd36a4a0d73071c1496ddf2788acee6dcae0a943a0614053848c2bfd6379063d3e987801ede206a68ac28d97f30ff8faed18043

C:\Program Files\Avast Software\Avast\asw718b792453063338.tmp

MD5 89690c2f8b1f21f9cbb56b2cff4070d3
SHA1 fc7f88baaaf68c385202cb17a20c8fe3d43841bf
SHA256 c8f02f9402a65f02c1f5b8fc122f9c1881cafbadcef0680e6b536d3f13693013
SHA512 d09c920ede1d576d7e24458deb62223b0c0c3a6b3f94c0d52d625e40f8ebf6582488802b6b7f8970517d49d782a1fc4524c1370088ecfc984f9e197e6eea5268

C:\Program Files\Avast Software\Avast\asw9e3be691aa2d220b.tmp

MD5 50b7182e017a7a1eb2abee5f14c894b7
SHA1 ef05efda33544f0235ab307b89419a1c9d608dba
SHA256 3786b0378076e965fdf0bd4577182bc87e673369f073525ea0afdf8f15034420
SHA512 20f489f8600b078bba33a7fe826c8835e793876e95b9513676a4a843d715a47fdcef75806c124c7298fbc632a7fb23ec7ff92f83082f354626f51ceb07b15aa4

C:\Program Files\Avast Software\Avast\asw00e88111fbb3d158.tmp

MD5 76777e3da86dfdbfb7915d0fa1fc87a9
SHA1 e23ff7f059dccd392c24536737dd6f713161e382
SHA256 3f07d6377a9a535e2bb8aab102840ae33d734f708946761f57f244b4c202d024
SHA512 46d56a542f5a196add4dceebd962715c436c32937adac2258fe670d785c818d2ad05d6b09e67a9ca59dd165784f78028209eba944bf7f76851573345a1b0d94f

C:\Program Files\Avast Software\Avast\asw9b6e0b3f48b1bc12.tmp

MD5 f42334150c7213c04dcccd47b999be81
SHA1 828471da30417952ff86a206a15bbdca7067c884
SHA256 3c25f55545774bf18a8209487bd8a2d35895110d6102511fc03851ca86c96c81
SHA512 44fb7b00a481e5503c11b4948895c790d10ca18f8a95eeb9ba2e53e1bfc73c1955e12b8c278d8d5efec1ccf6894cad43ddaa882a920a5ae88c203c38e7426395

C:\Program Files\Avast Software\Avast\aswec72f3e7f17ebd93.tmp

MD5 0185c07a95ff03740cdcc97559962a6b
SHA1 f75cc1aa969f9a70bcaa3c7eefd58bc8f8f4822b
SHA256 b8971a3d1604b1bbbffc915edb5c6fc6ba6038eceaf03c3c7c24d6b4ffa19237
SHA512 aad9e473348f383325af7af7307132254387aac517ed0bd546f290a077d21bdad73080f0beb37cd97e2216e09bbf36836ba7b063e9f7c7ea52058b20528ef84c

C:\Program Files\Avast Software\Avast\aswda57cd19681b0a06.tmp

MD5 228946a08fbe12877d53965bde29256f
SHA1 b62453069535c52e7274beef2478ea86e7c794d1
SHA256 badff74b8888eac38253b89578bef998e5ecbc8211f0d83864de898214d4002f
SHA512 54533de6b039fead0f3fd858532db618e4bacea0bd2f4c9ed4b6203c8c9e70f3d917ccc2b81e1c442dba8749eac825f71510b2db7bf48e20cb6fe4daab56bdc4

C:\Program Files\Avast Software\Avast\asw046d88e264b512c1.tmp

MD5 2d8be663a1ad56520f6b504d6e40a7cb
SHA1 f718f81da991b930982b773316e7fc1eaac6b994
SHA256 9640735b19d3c4680b634c1e08234e120492216d1a1e8d09abf934157408716d
SHA512 79c192b567d2b5a1fbda5cdf629e3ae5e1b38868509cf0f6dfcb21afababd912e364a9d78eb660cd5ab1fd4014b3725e94d9b56acd7161018d42f6c5a09f04e9

C:\Program Files\Avast Software\Avast\asw4fa6dcbf6f2287fd.tmp

MD5 7efac398406307b7e221591dec146fc9
SHA1 a8fcd7dc2ada6ed4745cb6e8aa7258b84cc7eed2
SHA256 eba964a845e7bb0c51fefd76414852c2a3a49f50b4ae5a586bd79dfe15f80a25
SHA512 7940c5d76a720f00d72f3b00dfe3473ae726584439f81b5cb34ded7b23d6c791ebbb45fd675681161236a238f6ca3728d89e747892c103a326057ac642f89524

C:\Program Files\Avast Software\Avast\asw78c0e8a44a6e49de.tmp

MD5 7a4afff7cee9dd20c55fb715873bae67
SHA1 7af8955c3b5dd9f04942b4f5e819b8a5b6bd833b
SHA256 e0a45e160040c15f1bd492c119152d13ad3e270e1c7b57aa45fca7ec53b0d3e2
SHA512 0b9c9f9b6149475e3ed8a11a23127abea5df3b1ae17e2d9da57650f4ad43c9332ab8482259aa2c33df3c40692c2f08b54c43dd6d96f4e80d8f77d5483ede7c97

C:\Program Files\Avast Software\Avast\asw1e3a223f54e3bf75.tmp

MD5 52845bebce9a26979f1b3e6f64fd660e
SHA1 e38ab2748e02f2c82c2ba71058c3f2345190034b
SHA256 5e35db76c4130c59d2e1656e845f2c8b7e686c8f2389438f8bf663ff46b1c65d
SHA512 55e6131cef335000693b3e5c4780c9e4b55295d68899014c33354e50fd805b04d2b6fad860e1ac074f01f8923da304079c2a23cc017ca6ddd4270b6ade28ac0c

C:\Program Files\Avast Software\Avast\aswc419b7dd02e42372.tmp

MD5 5eb37e022a22895332e89cccd8f98da3
SHA1 2211137cb28a2c5f09b3e6fc78d0e8d0ebe8ee2f
SHA256 52b74ccb5d5c5a7101a78375389b7018ec62736874c0fce52016eaee0303c196
SHA512 e863d4a3b8c216b0824452d6e74716123fd80754905887c1bd75d37ccd4b9e97797b92296b426cb94332235d12bcaaf70ce65a3e2411cc2ef7ffc16003a2f2c1

C:\Program Files\Avast Software\Avast\aswd7d8cc60d10cd1d3.tmp

MD5 65ff9a26052ffbc67c9c744217f9cbc0
SHA1 5758be543469d0bbb29e00753a76edf3077765c1
SHA256 ecfc11290961f524586f5ee51aab8cbad927803b1a4f466551b235ee6824d4fe
SHA512 6a6176d055a29c8ccec37242e2c6418b6b1addb8ed5ad2108e14934764f68ffb747669d31a6b5920b5115b6b3b65e94d347ba21341da8496c97d8b3a05051f10

C:\Program Files\Avast Software\Avast\aswdabf88f2922d85d7.tmp

MD5 6043656fa70c1099fa1a6497aeefe984
SHA1 3148f4f10df0dbbc4bf86a683d1d3df9d50d765f
SHA256 775b26f0df89beb37a4c6de0be53637de6898301b4bfc1d2625c2d5a1a4a3e67
SHA512 ec6dae6957ce82b7830108e80844bf44824c72c6bd2ad196447d861093f9e6cb3aa4469f11b2740aac6d9c05de671b02fce59d7c50496285e82cb2fbb2b4eb1b

C:\Program Files\Avast Software\Avast\asw5438532bce3a44be.tmp

MD5 c81f9bf251e35381211554517cf05766
SHA1 ccf55e29d5d1cf588c49aafddf97e1c979270238
SHA256 3786cc496a37e5c0a54e25485be8acbc15fe4ba4d9a027e972bb31bf80ceef1f
SHA512 d04f5be4c8c83c10ecbbe274587c25fc0f1abd1217f7b8452d99abf7f3ef37b4830e5627702cb4dd5332a793cb3d86b19542e48001d930dd3206f335c23658ce

C:\ProgramData\Avast Software\Avast\aswe18bbaaee238edae.tmp

MD5 ad6bb231d6ca341d585caa0881bbc680
SHA1 249d7ed96bd7368985770fc91243ffc27a6787e8
SHA256 362c8627a8cde159dc2b52d1c3315c4499dafc8a5a6781acb373307453584785
SHA512 70c0943d74381c9b00b59cf28297211905a983c3c5b0203d71d9f28a1367c01d821f329aee1fef6d2b04f2ad6552e32d5c7f7eb8ec053691d2d1f6b21940694e

C:\ProgramData\Avast Software\Avast\asw5c9185e93d7e6a1e.tmp

MD5 9224a48b87ecc5fb3801b7a50d6671d9
SHA1 3a72a356ed0d83070638deab19affa1768650a1f
SHA256 94a96219634a3de20dfb98371730cf938ba65d35338a02ccc298fda587c638e6
SHA512 1b78613b2a30daa344534f720b227c5eda50d50de42ba3a7cf699f0c05ceee7a495daafcfcb55302717861e7cfd9a4ff61979aed229c5200901ec8a1bbfed040

C:\ProgramData\Avast Software\Avast\Fonts\asw6e4ae59ede81904b.tmp

MD5 9372d1cc640df70d36b24914adf57110
SHA1 374508b24ea24906f25655de27e854e69cda2935
SHA256 31daba103891abf8b4d0537661117a8689c9ee5d91ee264f74e64ef1bb37a61c
SHA512 8100e80e7c7a6283a348fb0c2f9339600dca96f8db21e49c3c875ca6c0129d87452ca0d678904e40f65404f5c78b37a82718def85efc085d5f2c9d0ff94182d4

C:\ProgramData\Avast Software\Avast\Fonts\asw1fae4c520cd99804.tmp

MD5 b7913e898d3cddf10a49ad0dc3f615b8
SHA1 560917b699fe57632d13cf8ef2778f3833748343
SHA256 1e90e49b182c8b5876ee6805ff3cd2e39a23fda79df33d2e8b57020d6f208334
SHA512 baee3e6114fb8b4f946cd85fac7bae19e1cc681820c6c5824092ad955e70ce7253ae471aaa28ad97412e67d4a9c741137bf3ff27233bd94b6d3a654f72adee16

C:\ProgramData\Avast Software\Avast\Fonts\asw6f81ee464d871dec.tmp

MD5 0018751ac22541e269f7c8e0df8385f6
SHA1 541e47f0b29737b74c2758b1f040783485de2a6d
SHA256 9f4d35bd7ca167c7659a872bdae6fde11c306b07eb5c758bae762f7258b39071
SHA512 6b6465848cdc0fb24ff2b1953e71b17c19e5e4224857df761222224778b4659443e8ce21bea15c76abfbcd9e371e607a0c1a94addbe761c2f07c1648971406c8

C:\ProgramData\Avast Software\Avast\Fonts\asw058d3596b6bca440.tmp

MD5 0e1821fdf320fddc0e1c2b272c422068
SHA1 c722696501a8663d64208d754e4db8165d3936f6
SHA256 4a7c36df4318fee50a8159c3a0ebde4572abab65447ae4a651c2fe87212302b5
SHA512 948adb943bfae5807e0e88a23364d8e706a8bdfe8c4d00592a95cdd34081a64a8d44c4ba6e33a65874ac8a7117927c3de2b995fdc57c2746aedd7161df727293

C:\ProgramData\Avast Software\Avast\Fonts\asw7f94c339f18b1322.tmp

MD5 629a55a7e793da068dc580d184cc0e31
SHA1 3564ed0b5363df5cf277c16e0c6bedc5a682217f
SHA256 e64e508b2aa2880f907e470c4550980ec4c0694d103a43f36150ac3f93189bee
SHA512 6c24c71bee7370939df8085fa70f1298cfa9be6d1b9567e2a12b9bb92872a45547cbabcf14a5d93a6d86cd77165eb262ba8530b988bf2c989fadb255c943df9b

C:\ProgramData\Avast Software\Avast\Fonts\asw67a89810e28426ce.tmp

MD5 1bf71be111189e76987a4bb9b3115cb7
SHA1 40442c189568184b6e6c27a25d69f14d91b65039
SHA256 cf5f5184c1441a1660aa52526328e9d5c2793e77b6d8d3a3ad654bdb07ab8424
SHA512 cb18b69e98a194af5e3e3d982a75254f3a20bd94c68816a15f38870b9be616cef0c32033f253219cca9146b2b419dd6df28cc4ceeff80d01f400aa0ed101e061

C:\ProgramData\Avast Software\Avast\Fonts\asw03fb09c39cc072da.tmp

MD5 c7dcce084c445260a266f92db56f5517
SHA1 f1692eac564e95023e4da341a1b89baae7a65155
SHA256 a54dc8488f8193bf30c3820cf6f261f911f9d328d699e1a1b8042641554cec70
SHA512 0fe7ec4c8eceafe87fbbdb9780519faffb646a23579ce5a4f5170808284c1ed85b9aafdab18cc4ddcaa9a7e6e2559fa6ed984d986ba93d1bbf4bc0551d5661d0

C:\ProgramData\Avast Software\Avast\Fonts\aswa1be5513f94b9da2.tmp

MD5 50145685042b4df07a1fd19957275b81
SHA1 c1691e8168b2596af8a00162bac60dbe605e9e36
SHA256 5894a3649b213cf5b2d673b6e7a871815fd1d120fa68a463592f27db14eae323
SHA512 9c995725aade5f126c727faf1c4453344e37b590a14152d31d44dca3c9328a54207bbc7c840695cb55bc1b559097b457888655e11199192cd5197c85aab8b1b6

C:\Program Files\Avast Software\Avast\x86\asw782ff7c559494720.tmp

MD5 4fb4bd62759cf3efee8329a14c3f0c06
SHA1 0fa7c3681ace5bd1a55fa3b916dde92eecf95983
SHA256 1b37acdd0ddcff080cc68048e1aacd701b363053bd3741669f0620ac2c76f7c0
SHA512 b3ec2c5ac548644ca820c0f0966b80dbdb0ed918d90df41a9c79ef5dcd1ad56581eb87189f44b5eee35f9f7e9dd86b86fd3ee75a4387e2a12ef0c791e000f0d8

C:\Program Files\Avast Software\Avast\x86\asw8b0c2f446d5c7c9c.tmp

MD5 e5e7cd0f511ff8140a0180fc344d3bb8
SHA1 83bbca3a9bffa62476371bad663c79dc59417ecf
SHA256 4e45908e7b8994c9c484cde71e82eed9e1636b300c61470aef92950db1663be4
SHA512 a28447a8918e8ed3ad2777fb81b1d4705e94deef29186f7c142a92fe3f8fa2038c3be2568eef4a5bf11f1fdc348d299e4ee2f5b1e298773d189769f97b26059b

C:\Program Files\Avast Software\Avast\x86\aswa36bb8e84715c432.tmp

MD5 4c449b97b9a03e03196d93bb41b20291
SHA1 255522dc391f6bc96ecefe6795fe3b5a115fae99
SHA256 7a9a2777135bd3490c3840aefa17efcf1347562352f0a07f828e33f408913691
SHA512 f596db9ec0e0f7047b677c80e130521cd8e116740dfe0836ac732536c0c9ed1c782ec7f6f040f5e3c34d608770d79ad6c39b2d21995cd0e0caf46b651f0d4b16

C:\Program Files\Avast Software\Avast\x86\aswb76bd432e8b2c8b4.tmp

MD5 d0506cef6131f35dad33dc3c46b70874
SHA1 1a5e2e7f9a13904f5c18315dce33b2ffaea65839
SHA256 0f6b4c010a74b8e7861305d74d69ade994cecbf4521d52878ab1309ce262fd94
SHA512 91895c1ccb296f1d4f44f38a6997c3bf02e975d8b32e7652b31eaf4f48a829a60fac047222aa22f2948f50c19dfa740cef21eb8058079a4bef5b92585743310a

C:\Program Files\Avast Software\Avast\x86\asw7451befd44bae4a8.tmp

MD5 d3e611c1f8e160b67fee98926dd765c5
SHA1 074f75e9e8738d15270a8827c615f607f3672231
SHA256 98f7136b0253fb54fdc1c789e2658835d048bb06aabc0d7f785ae4b42fed5bd0
SHA512 b6823f8025fa373b32047c38018d5878d096fee6f032eff8a75c47e3f630ea32c3ae744724dd6a1c3be0c26f719d30f9a6307f6fc808fab40e7ec2452c2f86a4

C:\Program Files\Avast Software\Avast\x86\aswa74cdf5d328b9d4e.tmp

MD5 5a94e3ecd6fdc2f7547eb03e86ed7f19
SHA1 a97cb0df0ba367625a2f194eb668bc45a6a49e9f
SHA256 03ad487ac6a36b161bd61d0379f5dc6ef304384825d6a86491b6eda2da27ce19
SHA512 277c49f74ca52a3aaf3b65c58fc9f6bc966bc06eb45238ade20b45c6ba05af07ac0a44f1177259437b5c4f6011859210720bfa0fdca821e5d954acd771ec2e44

C:\Program Files\Avast Software\Avast\x86\asw3a0ac694d5dc6b7a.tmp

MD5 aa470c6caf83525865fd0649e9910a7c
SHA1 fc061897422973433ac135faa7dd4788b04afd1b
SHA256 80b5c283323dc8aaf05956e995854f50a762c147904cfd25584879030a0d8807
SHA512 86f71d0624196276de1df3232d1787a9e00ee96a3380d975e833818ed68558689ffdff358eba97d2d4272b6183ff0fb555b2b8ee8a50ff66704cf54f6a166477

C:\Program Files\Avast Software\Avast\x86\aswe44f90fb7998a259.tmp

MD5 48bbbf9a093cef7d52c627e08db26542
SHA1 131f4d56de202714c8f06a3ee284d5d474e90b87
SHA256 d2c4337d2335ad111072979cb1929d89317547275cf2bf57bd82066b780d0ccd
SHA512 976fb4fd3ec620e7f543204fd8cb9d7642c8bb7c90fa04240bacfc8f1c9232cdf3bb4b78070f330e9cebfea797c79c180e90405a84eee52717c0033ef155915f

C:\Program Files\Avast Software\Avast\x86\aswb95b0604b7b32be4.tmp

MD5 4572cf28dfea4776f0ffa9690f4fa3b3
SHA1 56e69f5e4911843dbc7d248adaf411158fd82acc
SHA256 97fe4435b59af1fe170f6804df9fa10445d57842855ef4df7b14d717f4b80fb6
SHA512 be58ee372a4517e4bf9772f7fa142702e45c4c57187d56ed014b3c655e8b8cfec5ada485b69d1efb07f730911c8300f86aafed8b9f64af8fdd7db1988499ca95

C:\Program Files\Avast Software\Avast\x86\aswf377f9ee73f9dc0f.tmp

MD5 798d9435ff9045a735e85bf08a0ba02c
SHA1 35ba5334a56940a0bdecf1c489167f9a667324d4
SHA256 88bb4801d5b90335fd7ed85a888d9530e97d3f773f06360f0a6c60d94f0e18fc
SHA512 64c897693687505ac84923f85e43b19cf503cc1cf33d43e815b8689a3e335451f20e41d074b9813a00cf39da0178d0866c50795de455f14c5cb69eb24a82f151

C:\Program Files\Avast Software\Avast\Licenses\aswcc471c4fc71a216f.tmp

MD5 8041053262bc492837749777c930a791
SHA1 e8cbe20136c6d1627d40932dc4398d2053be5228
SHA256 d988d5362ea432d8c8ad9f05af876ba9409eb1ebad8c34b899fc9cc8c7ea5311
SHA512 0f321a821b1ab36a5e60a5d5e94dc26564a2cb03347b54279b5530f7b50ab3105d537637f338553dfc4ef800d28be103ab0ca50f77da3b4627fb6d7c558bd3ea

C:\Program Files\Avast Software\Avast\Licenses\aswc3281455a2316684.tmp

MD5 4bf27a810f9a1f9e7c76b029b3b457cc
SHA1 8edff1174e110de6aec218a8d9ac56dbea27a1e9
SHA256 1e5a5eae04b378d12f93a3acf56dfdcac7005bdd67fe22d71c855f4e994e9928
SHA512 d818fe6f1905f46445fdbed9ea63751441fdd69651ac532aae946181fc28da8d2aac98146fb507d3df9720b24dcd2f05a20735f32e113503253fd85defa2870e

C:\Program Files\Avast Software\Avast\Licenses\asw086f2bcc0d17bdd8.tmp

MD5 06cdee91812ddfaf4cf3916f7a5309c4
SHA1 00397115d379f863279d13e823d33ed9c8b51be4
SHA256 7a9555c822ed30fcbf6832004edac893ba10bbcdb8e12d9a3662ddf1b52bd6e7
SHA512 cf22a889618b15fd40dd82809c2c8f5003fd40236798d8738fd3c56cf0f27b52e4157f834e5339bf12388dedb96eab1dc3e9d01968e1a4aa155e60cea9c96694

C:\Program Files\Avast Software\Avast\Licenses\asw148d4367b9d999fa.tmp

MD5 7c3860ffbb2e3df660f4762e02a28a4e
SHA1 9a689135294896040420ead4e5a05038d0ce8cbc
SHA256 803b8b5aa4151030221b3c3f71a645da6241938421e49901444a79e5cca75fa8
SHA512 393e4077221420b1a1d73cb1d89ad264b65e36dde03271959699260e8305ff8715ab1a7535c356f2bf961f316ccb1ef1ff6e13da1708e7b53a9b6e12ad7066d0

C:\Program Files\Avast Software\Avast\Licenses\asw37552a4e0a441710.tmp

MD5 7cf65040f98baf1ba15f488d76f31e6a
SHA1 c9e9e12d8d124bdc38b63a1c832bf36890ddf046
SHA256 64578d53633622b31d19024184265f01d045b637da98fbd15ca81e39acfba63f
SHA512 4ffb42ad75204da6a288aa2d748754eab2a94386c33c9981ab1edb6f848e02fbe4590baafd81f5349a4c09bb913aedd7f57d49c43d96b8ad6e63c0e44d0a8ca1

C:\Program Files\Avast Software\Avast\Licenses\asw43fa1632b527312c.tmp

MD5 bdc36270610932ff0c405f7dbec4f1aa
SHA1 36ef609b122ccde100fa096a4703f3433af6e2d1
SHA256 8c109e1d8394fd4557d916d75ef61fb406319106cbeab77736d7c666befd1ab6
SHA512 83f1346cbc0d4e49b0e4cc338fa12813661eafb00acba39d350e28c54c86d6d19317545dddae562763e6794e5268731cf4d1d8f24db42a0cf8d9ab9165970beb

C:\Program Files\Avast Software\Avast\Licenses\aswb6523cc1a8140fed.tmp

MD5 cff54e417a17b4b77465198254970cd2
SHA1 a2922ac9caf1914313d4117dd30f4f1de71c5e14
SHA256 60ab263d1868282cb8262199edf648c21e45b729a78c6768bc9c27214a673da0
SHA512 a8cbf26c8babcf722623a709d5810baff798448a969000c36bfb7570d6ad388220066973783d7e162c1968fc42d0418a1c7ae15f51eea2ef2a2e843fdd9cddfb

C:\Program Files\Avast Software\Avast\Licenses\aswce0b6c90b1d21484.tmp

MD5 ae1fcfd0aa84b946bb9fc04ba39dafcf
SHA1 e1391ab3bcdbdd0fb6e9169ffa1d72c1650f839e
SHA256 e9c108afa89f5f9ef50484bb1c64a8d07d0c0bfce171df01840702ceeaec1e34
SHA512 bb9635487def64130a10ec3cd4106e5018ce17d9b979124d9f6674ab1fc7fa549c32c0602aead88cfa78f6900ada5a1776995fe4b864b466d6dfbf1cb53d942e

C:\Program Files\Avast Software\Avast\Licenses\asw4a90b924eea2bc3a.tmp

MD5 ce79a5e699943b3a132c0deba1777ac6
SHA1 57919d5bf210193d05ba496a870832582f475559
SHA256 f4df8b2457697851385d9ebb93267832c1dfa24e0e61881952f6b0c452663dc9
SHA512 82cda6f61e3dff94228d3eefe4e1f65dc483aca9c8597e482c1d6584d2f70ab7327af6461080447649dc4986b9932025dbcae5c078a2dbcca82c3a985d118f4c

C:\Program Files\Avast Software\Avast\Licenses\aswdeeffecce6a0f765.tmp

MD5 ae3f3d4fd356269cb456df973156650f
SHA1 4f58ec889575f422dfe25fe14f22eeb5d009a4c9
SHA256 d0a9c5d1e40d1179f0669bd93e079a518b3067fad240410804170f05d1ba04b6
SHA512 ac1c0e7d7020f7ae091bb53e4b5d1afa8e9a669bbed4f7a418b8cb9975eace1c8c6eaa840f1248ea4f607f87ba8765d61ea0f05fc0e586ee21275633c8f1c3c8

C:\Program Files\Avast Software\Avast\Licenses\asw718fc880fb4c9f0a.tmp

MD5 d273d63619c9aeaf15cdaf76422c4f87
SHA1 47b573e3824cd5e02a1a3ae99e2735b49e0256e4
SHA256 3ddf9be5c28fe27dad143a5dc76eea25222ad1dd68934a047064e56ed2fa40c5
SHA512 4cc5a12bfe984c0a50bf7943e2d70a948d520ef423677c77629707aace3a95aa378d205de929105d644680679e70ef2449479b360ad44896b75bafed66613272

C:\Program Files\Avast Software\Avast\Licenses\asw6b53b74bf6b4fb37.tmp

MD5 d229da563da18fe5d58cd95a6467d584
SHA1 b314c7ebb7d599944981908b7f3ed33a30e78f3a
SHA256 1eb85fc97224598dad1852b5d6483bbcf0aa8608790dcc657a5a2a761ae9c8c6
SHA512 e2f81cb44129e1bc58941e7b3db1ffba40357889bace4fd65fd254d0be1bb757625bdf36bf46d555eb3ca4b130dcd1c05225caec28d8472dccf52a63dbd6e185

C:\Program Files\Avast Software\Avast\Licenses\asw6ad5090716111fbc.tmp

MD5 fe680362852389fe7a16c47aae27bc92
SHA1 377ea1b96cabe859af78bb561ca4171544ab0152
SHA256 e89251cdaaf385d93f74b819412217e47a7a06cd65115a1f87eedda0dffb2947
SHA512 8bb0e1ae7fc66e12581b43c0823e82011ec88d714eb244a840a46272d9c04163893217b6ae6c42d07ef72c88ea154950282ef09f0aef2dd44a3e42de709135ef

C:\Program Files\Avast Software\Avast\Licenses\asw4e844bdce611ebe5.tmp

MD5 dcd04d4748467021571f4a01f797ddae
SHA1 c59d498fa113b09406389f8828dde6407f5a651d
SHA256 7b8c5dbc64e5ce65c94d31b5690a0e30ff83222bbbbb859df2a56b9dfef14326
SHA512 7ae6a19fdda606f467c15e97ba08620838961bf64d9c5b6843cd877a23f0697bde8874842b12e3c317e18b4f8609531bb05414d5ed4ec68337ce8e1c73aae64e

C:\Program Files\Avast Software\Avast\Licenses\asw7f22cee7a01eaa93.tmp

MD5 d6913685a013829414179d17903310af
SHA1 d665df4878ae79173751d5a8a4346c1e2567f232
SHA256 8dd48e57572d33854a835ba6bb045d9a01321bae43377934fc08ce642992206b
SHA512 228fa37c918f781f3151b7cebfaa2575c70e515193adcae66a25c5de0035199ba935e677c1df1b2acf6951b43ad4e253a5277ccd72aff9bc60cf6f1bbf444eaa

C:\Program Files\Avast Software\Avast\Licenses\asw7f22cf2fda9e985f.tmp

MD5 9c08c5872a3314661e37289d53a846e4
SHA1 ddad81444c937f22e749ab9518058682953b1cdb
SHA256 0ad3bfee8be10e5519949e7af492e36bc349376b75fbeb412229a5967e3e9434
SHA512 dda85f29349e7222a6487f91e42e798c6d93a091fb01ed08d7caff5b906a2732788fea763d3e8fd10084361af8531ba2059e2410e845390c937aff659cd0fa36

C:\Program Files\Avast Software\Avast\Licenses\aswb8e792def3bb6e7e.tmp

MD5 4cddb654fe704264c203b4d9c7c832c0
SHA1 9d236e8f305b4bc8c486de24549a706a3957c210
SHA256 634788199f33637e3cc36c61e5272f72ccbdab87be0c07eaaaf487c5f4f1ce82
SHA512 1933696744c8a95bc6c82ef0d19e99f1d4291f6e0aaf8570e45bd74065ec076ea9b3e4b030ebc8df52903f4f98aef6a9727d3370834efb9187e4ce24ab9a0180

C:\Program Files\Avast Software\Avast\Licenses\aswf78857509a6b960f.tmp

MD5 7eee1933e27bfd222f8ecd48d463c30b
SHA1 506dd04ac3db8729abffd4132294d017b8b1fba6
SHA256 e9bfbf4cd2bb60ea2982dc50dee92466a81a42de9b40e65c4ee17298646c7bce
SHA512 279d059dfa2c81c371000b865fe49389fa911bebf4c4f7e83379598e3e109852b14a185f1bd970dc94ad53a804d7554a4547dbe7bd7902781daa8da1898f7885

C:\Program Files\Avast Software\Avast\Licenses\aswe1aba1c77a6a8126.tmp

MD5 4434d135a9d9631e1741ce7254375a0f
SHA1 e2d2dd3fa7a0f0f7814118af8c03094fc325d333
SHA256 2e69c36a7eaa4fa153426eab635c607ea0356cbc7a68a70f42a49e8ab8eb8106
SHA512 9c59379e08895138e88b588f0ee3c4ab0938e8fd6906ab041484c6ed90da38c7ef9df7843002abe5249b359dac56c9c064f9119e58eeb1fd34bb2b7a35194450

C:\Program Files\Avast Software\Avast\Licenses\asw5c095a15e3d4cb3c.tmp

MD5 8915cda79ecb12328ccb33113dc85ecc
SHA1 127e0111a102fb3f6af9ad82d0620f4c4ac2c164
SHA256 7c3794f6aa18b133dc86045d00f3d5894682084692a959ce521982eed4554f37
SHA512 30acf8eb04e4063478c8ce0879c838dd9f9083efb6e239393f4727cea279a171ac4c597f3f1bf855210eed3091acfb50d9d31851cf6a147774f3bf246d6f4d59

C:\Program Files\Avast Software\Avast\Licenses\aswf3fce785f5be40a8.tmp

MD5 128b02ba4177d31ef91600882bb0baba
SHA1 6b98f098fa3f1cab58b9610b0af9c9545d5010e2
SHA256 b87ac954a37f855f6f7199a3154e2e84623558df980e8afccb94c5c93bd4cba3
SHA512 77b2fb5862bd1d999cd9549319ffe492ed20aa63659003bfb48c2426242984f97b6666ba9afbb0cb7d71a46f4f5f7e883e31c248f9b9eec339e3d4d7ffa66a0c

C:\Program Files\Avast Software\Avast\Licenses\aswac4a6cb90afa2687.tmp

MD5 9087d9182e280d5a124e844fcf52af82
SHA1 058d1d953744a7ace99b86c97238a3083dde120b
SHA256 5eca2c8028dee3a4728012bc60a763f69205325d0eb75b344cb7e10a788faa96
SHA512 18758d28733aa9db4257db7a18176a8459265021f6cc60e48ee6bbca422411d798bc597a683afefce0045c2b025e65577f6ed085fa8c9acb10b3e23464da6dfb

C:\Program Files\Avast Software\Avast\Licenses\aswaebf130fdfa6f0d7.tmp

MD5 7df5cd81700618ef9926feb32290d2af
SHA1 4763ba7dfa7730d98b190dd8a4a2c6818d301fcb
SHA256 60ae0f13e76cc2eaaa108677eefa4ce16b647f6bbe8cf0a1ac9429d82eca7248
SHA512 92c0bbdc5155d6e218682840dde38697327973b8f45e0c6d100705601449a6f1f8eba74cef8bcadf09ea945602b378bc64e81885f40965fa038d7974a71e5641

C:\Program Files\Avast Software\Avast\Licenses\asw981d6db2b378633d.tmp

MD5 b2feaa6a26c0149af9c4fbe2d6b692b1
SHA1 23df548394b0b16e6d5c733b427307288e1b359b
SHA256 d7e3eaf9a5ec61dd5f4065d252a2b0130c0e300ac3ac9cb307469e2a86ebbca7
SHA512 156e4cb2a1ae146cee9cd25258b299fdfab716866eabbab3e01f23a0e063e4469537c0a1e497d36f829e710211fca7db58608ae6bce87cacb75c66c8a57483b3

C:\Program Files\Avast Software\Avast\Licenses\aswaaa45abb62fd16df.tmp

MD5 347dfef587108750fa72297199fcc986
SHA1 0e34d7cd8afeb7e3a17bb25f371262a1ddc564df
SHA256 08bebda80b178f4b558faed4e52930f66e855614e4dfae15a436733b4712e041
SHA512 defa096320296c640a94a6abead06698a7682bf522dc1f216bd6a3fb70519d789b83ac061a518672987f6cf2d5fe5f7e60d1f9dccfec5b74c9b387ed591339ea

C:\Program Files\Avast Software\Avast\Licenses\asw4a0a37a73ab2be9b.tmp

MD5 97aa3aafa51953d4ad591398b916595e
SHA1 a849084b5239438f44c43b52576171f660576e2f
SHA256 ed72ce2b51ee58f117e5a021e2e04af158857f40269fbc03491f0b2a99dbcc96
SHA512 0b54f6b692ee9c92e0a867361b1601459cf6bcbd653b902e1dafacf3ec445af11023e8a5f7485e4513d351ec662ba39dfd52a9e84858128e512e68ace970c18b

C:\Program Files\Avast Software\Avast\Licenses\asw774d3cb4b36c8184.tmp

MD5 d774c7a88d7b41d7c73490067b54e3a4
SHA1 661206b3d45d9f6836915cb266f8536ef8ed39d9
SHA256 6182268f7c8c37fef81e83f722d1ac9bd1ea4307f16005a6900bc1aa473828e0
SHA512 7f9bc6a96e2cd7a1b8522edbcb72be141a5136dda654e0e8ab5ccf39a216b23478c64bb4fc68a71ee303237e6e9e063adb84873bb786e235e9a039d914e7b762

C:\Program Files\Avast Software\Avast\Licenses\asw542b9969c94d6477.tmp

MD5 513ea4bce55c427e58b1b6d40d087d24
SHA1 d2f6cc5490d34da9fd15e6edee4995d6eeb42892
SHA256 7732fa42ebc8652ee3300a086a068f6aa5008cfa0d14948b144e4b06c82efda7
SHA512 0c9f8d90f4ca229b5f175384d0cf348cdb8bccc062ba5b2f97d5aba0b9d823b0ebc2a0634041ec70e62715250a238b41b0c31ccd76ac24b8e864508d93251931

C:\Program Files\Avast Software\Avast\Licenses\aswaa78d8eb070d8e42.tmp

MD5 51d2728ac2976fdf6eeb3a02cd58982e
SHA1 3d4af58a6b52ee70064abf68a2412aac2cddd42e
SHA256 c3aed6a54154090685df3bbcd72e7a84943a4f3d5e5491bc6446a0b2d538c493
SHA512 734dae65afc8b551ecbf6665dd0a48de8eff2cb815a079a2bd7e37e19388253e39441a779403cb553d091449ae1eb858ba560726b86b2486220bc694f85cb6b3

C:\Program Files\Avast Software\Avast\Licenses\aswbe4a929930491cd4.tmp

MD5 598fd6266b820d382b6f1134f56351f2
SHA1 91d5e0457d0b8a0b9c0a2f557e0e2dc4d7f3805f
SHA256 656e11ea18f7fb862f6625469b822583f3c08e986b3a24962d74737ebf6927e6
SHA512 a1de7199ffc3adf0a4679b47ce77ccdd6ebe7ece123d286c58236a08b64c13c707e590fb5a12ad0a72e6a5907356f4d5754151eb7fb45a99d71caa50912c16e5

C:\Program Files\Avast Software\Avast\Licenses\asw44b2c39021f33be5.tmp

MD5 c26b34f5996c7ed7f7bce6aaf6c8a98b
SHA1 553e3a3efec9a07d9b08fcaadbcd88f2099aada8
SHA256 f854ae8aabc0404652b48a2b3bf7f21ec174c69d73f5596934c20884eb0639ef
SHA512 e3c82bfe3bacb07e3a8327a01b2c9772e44bfa1a8012c0f0b363d6e3b2ee2371bc66f9c207611cd6f73d6f1ff1ceb9b2bf2c7d0864ade256d41d533b598a804f

C:\Program Files\Avast Software\Avast\Licenses\aswfbf1ff454c68a674.tmp

MD5 15f12037d9859d059c3a557798163450
SHA1 b3609a3d6832159913cc9b8fb128df1383087b24
SHA256 e668af8c73a38a66a1e8951d14ec24e7582fee5254dd6c3dae488a416d105d5f
SHA512 a976ecbe99ab8f29c8290f26df5906326e820eb3f212928cd2b74783716bb6b7b6e75104140b2816408af15a1db30f4f5ab05133baa2c2d3a6e48c6d915fa915

C:\Program Files\Avast Software\Avast\Licenses\aswa4d0096078a2634b.tmp

MD5 b51058fead1aa71840b79527f5bffd3d
SHA1 bc3c4d41d4cc7753bea8e7a77fdb7cd384adbb59
SHA256 beb8e42e9d6b4284e03304d05a81a0755200a965fc8d0a5e0aea1e84cf805d6e
SHA512 f1a8d21ccbb6436d289ecfae65b9019278e40552a2383aaf6c1dfed98affe6e7bbf364d67597a131642b62446a0c40495e66a7efca7e6dff72727c6fd3776407

C:\Program Files\Avast Software\Avast\BrandingData\licensing\asw262488fa6c81a519.tmp

MD5 176d0d77a0ee1c8cc866fa1c8dc2d4e6
SHA1 a9fbac7a9ac1997d0b5fb709e468f2db60de311d
SHA256 cbd1e58667b88a9eb1b852895dcb8234ecef878b9e29fd773d79cc7563eba0a2
SHA512 77cbccbb6717443ecf45ae2348c31b8de6a30644871ed477459cdc8f418c0508c613aeb6de4eefc849f36f67af2a1e7fe48b9aec6470aadad7ad82166daf2b5e

C:\Program Files\Avast Software\Avast\BrandingData\licensing\asw11de842c1e92f6c4.tmp

MD5 82cc8690ca1106945e7498b46adbe6b5
SHA1 886f56a93925439aebf31bc636ba648bbf84fb8b
SHA256 b2621cabe4f088f386d1b5cfb2dc36e4e23b343ffdc71f4e790fd98d1c7d7cf0
SHA512 9a5fdbe5b47acaebc36e97b34b500f532c5836862066947dea959caad7284ef2cd0c702ac56a510b30d534b230e0b7ec9da00d21e704320215c8b3ab97f379fb

C:\Program Files\Avast Software\Avast\setup\ais_core-989.vpx

MD5 3566c0c29a0d9c3d95079e4ec5695754
SHA1 cdec3d6e7c05df27b2ae0788a80a33de5d8127f2
SHA256 b9fc845dbf2f0d3b55081c4bd8ddc89e97dcf000a5f3ae1261e1855e5fd821bf
SHA512 6005535c02acbcd4c2f45e7ae722fed23828b5c57827c8ad98c49aee7f0c9e0689156d50c206ef3da5504b0aa607e0b1ed070c95111847f5ad443fea3ee75119

C:\Program Files\Avast Software\Avast\asw6b2ed90f5cd91121.tmp

MD5 88705ece4de7b921b25a8b967d3b1eec
SHA1 8c01ace20cad95d210ca6026eeaf45e61c2fef40
SHA256 a0c5d53ea41eeb43f36b4f196d06980e0671139ba969014344d567b7006471b7
SHA512 182314b90b8f0211bbca765a87706ceed736210280f0d357ef434d5159cb6cf1eecab29ea6d4e7cbd6dbf181aaa1231e76e22b144ca7746519299c2f2bda2724

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw84ae117d5e52830d.tmp

MD5 51f2ddde0bb5cc0a4961748a732f65a0
SHA1 94a2527e5573f2eb68c9a5e1fe0f41146d05b4f1
SHA256 19bbb46b61be8e3d6fe013fe53d95d5282cb6e00ad6d53043aa7442c881c4c0e
SHA512 3f30822eb3fa2489021b3c44d72161c766f3619cdd635b7c33b2c6dd6c5725473632fc1e9376025949d637aad970a507baac7138e736aeb028b7060484131087

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw8b03a1dd771e5686.tmp

MD5 f51a2c2b1c44531717f2143dcaa817fd
SHA1 4de6fb5441db7cb4c6a9cf744fc72e1f79ba02d3
SHA256 81c2fff4664385eb5bd2d6abee645cc527989a88712cbebde8c8f231620b9f7f
SHA512 269d9f11c792283e9a810cf466d314ce439751e4c0795c16bc109a0dc84e80c6fc39d14b9fe54d7520901f7df2db6484e12540251adaefead65b8f6c6d918be8

C:\Program Files\Avast Software\Avast\1033\asw002dd3e1157b0420.tmp

MD5 74889ffc0f81546ae4d2824d9fce608b
SHA1 e5881a28bb9ef76cbcb26055f60358df2d0eee30
SHA256 4e5eaa2d4c42a0ca29631b13bf18450f031fb53f916e281d3ea74e0c228adf25
SHA512 9fb84b6d154146a44c4efd27cf3d5841add270320070507fc6b10007869b76e7bac0117a5bcc1700be8a1812ce7a0d8186c0e4992ae8a279ea1983b00187221b

C:\Program Files\Avast Software\Avast\1033\asw99d079861c96dcae.tmp

MD5 8d1e947dd7766a4822d2c265e72f4470
SHA1 8e6e2808cfe8175c5fecd87f70fbf282ca8ad7a6
SHA256 7280e262d48d1603233785b63003d1d272437d6860c6f27d3509a0af7e30889d
SHA512 985a61b0b7ec5804299b2ede73b884342c495718a7ababc62b19fe33730fcd32ac0c3778ae24b4c10451c9ec994a19d7ca6a95ad7c1d8612bd36295785e59c73

C:\Program Files\Avast Software\Avast\setup\ais_dll_eng_x64-8d4.vpx

MD5 2d7beb10f148b22d73a0bc71148134a3
SHA1 3624e8ac03ec19b5cfad726d55767216e66554fe
SHA256 afd55bd639cf7f5fbae45766046f857803012c4ec7d9ae1c0ad29044289e501b
SHA512 811a7f70acde88a4e7a6215890b9d7d27561c4b1f5a59384b48cafc930f1d4c49c075528a0a47f3422af16b31723cd479239ae3340a3589fb58fb82392dfb932

C:\Program Files\Avast Software\Avast\1033\asw0da6a7be824e4cbb.tmp

MD5 218fa59d7554e0b100b924e4caaebd7a
SHA1 e3b4cc7dcf0055476b5a44aeb3f9942bd32d8476
SHA256 d437eb23d17bf8852581c78dfc535112fbe6f9fa74a087bdec624c964599c562
SHA512 72b11bb35837c67f379fe9069fd434482be4d5abe7ee87402db49094fed7b9257374c05e1bffcce2c695adde87c1f58085f31c57c843ff23c2dba45c5ed68e12

C:\Program Files\Avast Software\Avast\1033\asw9a5bb811bcd0478d.tmp

MD5 305126d7183f01ec6f1acf7bfcaea7e1
SHA1 7af9472f353a84b3478a7f9d2ebc0144a2328b9f
SHA256 f38dae99b094acd30990cbd13be8c1985ad72caadc912f6ea0a9a6d71a8648b8
SHA512 ab6b7ad952907ed1dc7f2acdbb56633b63065e5c095f5b9781a3a3da2f75032755673266d122ce4a6900bb67ccb503f4b4bb71ed8113e4b2d9683366c6c70159

C:\Program Files\Avast Software\Avast\1033\asw05c7eb776217e7c6.tmp

MD5 c90a9845728310113b416c15467973dd
SHA1 abf27753addbe931bebdb760f5af207100a6d565
SHA256 8383741771116816cdf40de2a5d453ed74c669bb5ce7a626e63e0c62f2ebbb39
SHA512 a1725f9b4f35f613b51e021460a15dd76b2d1b9deff0d6528aa3551c58a0f0ae0b037e2ff7dabd87f6307c3694aa27cc875fc7fb45a9034806c890cab6e15c00

C:\Program Files\Avast Software\Avast\1033\aswaf52cf46974a08e7.tmp

MD5 9cc0f27acfd3c4da4b9daac4b362f3bc
SHA1 c56f5f8ea53d73bdd13aa160a775cd3b89cbfc43
SHA256 d576d18b4bab7e4f74e03bdca0d0853d2740ef95a2e20060867897d63ac0e088
SHA512 99dfbab3a9c324fce78afb42906a921f3d6a418df263143a6144703ebe85c8acf0624eb8b385170093772fc4ff1faf0c45364eefcb4ba54c8c63f5d5f0f23e8f

C:\Program Files\Avast Software\Avast\asw4f358a7193853533.tmp

MD5 76510d8f69965d0591d9e5d003934520
SHA1 5617fa6a665ad387924b3982a04d9a5fe41580c3
SHA256 0b29f3109ea7fead85b9a3bdb6e0ebaec9aa9c5c45c4dd35f1f67c2d5b967ec2
SHA512 6fb7d33203720a0ce2432b07bf5e54365293415d7138a8ce75e0e418883c3d90d3dc3528bf4e654c8bd9b53b7b79ad64845c00450fcd1dfb83b8d992d15b119b

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw377e213c85a2c28f.tmp

MD5 6e690999591455ae98fa465f9f52c0de
SHA1 836aed24df0b5434129a0d6a2e89a5c1ce6c7292
SHA256 2630c10ce49c6989f3d0b7f82f257ea9f4681f44ae71366e9c201b5a96e08528
SHA512 17a7fbbc5228763e3cfb9b095dd5356febfefb57642ecfcf1fc5f6396b6dcff96061c5f7283c757f286081f11a3dfab09d96ae7115f50122bab3a24b3c21a5af

C:\Program Files\Avast Software\Avast\asw0e8283e7a5866d53.tmp

MD5 b3d6f8e109e6137903e80fd72d5a3f23
SHA1 d4e3859404841e6a1fffe97b5de70a3a2f6bd917
SHA256 404686d885931dedb27cee1ce816140f45178dcf6f7ad65875efffea13c213a6
SHA512 ed471b7bce4cb7b450a4a2fd7ff7ae1f1b6ef219398ff87a2e5db175bd35264e5ff2ae6ce8098978b1650b0f2220543227e2ed65ae17ff99b0364eeda2771a5d

C:\Program Files\Avast Software\Avast\x86\asw2b954b7c7d4f8717.tmp

MD5 9b143f12872f0da898e7f888a73aa1af
SHA1 fde088c30c56c339444d4bf81ace2d18a38ce14c
SHA256 d1113811aa4866834f4d1ea417c83e86d4c029c96e4f040b868e6a8c9bad07cf
SHA512 3cc1cbefd8cb227e06df467f1a0935381d6e60315e25240f31097bb0d70972ffe34756164aea14c485a3a1c9be9bb32b0489cde53cc259af2c88e322f5587bab

C:\Program Files\Avast Software\Avast\RescueDisk\asw5b581ed6f773dced.tmp

MD5 82dc347deb8b9c8e196a19223566a212
SHA1 fce43a71dfedeab1a79f01e1abb9537185afecf7
SHA256 fa14c8b264fa60fed54daa93403c007f8dd4e272bc47684b069ca125f9916b0e
SHA512 6bd1eb8abf1e2067acbced14a9587d74fd001dceb2120c261c74366f88a67dc03d5f629a026ec971ea727d0636e12b864ed41819270f30af7641e7d1889745ea

C:\Program Files\Avast Software\Avast\RescueDisk\aswb9270d6427ba68bb.tmp

MD5 5895f0edb3ddddeeccf318b6efedc7f2
SHA1 fe5553d38bb0e57bffbef47ed8873b140fff5fc8
SHA256 bab3eea7df69c6d5e0fa57e3c9041fb85a6e9819a2f2ca8855ca10ac917bc2ac
SHA512 708885181de3988f3ad20434dfcda42b4b24d01df608f876d94a819419512d23f1c4fef8dcaab49e729ab57c2ac893f9f9e4962d54dd11a2e602d4bf3932fc1b

C:\Program Files\Avast Software\Avast\RescueDisk\asw6878b46d6ad20f67.tmp

MD5 67a358aed3cc00b1f84b9a3aa07dea0a
SHA1 5561f7e0bc5d5903ef38b03fd9ebc72bb8dbd3b0
SHA256 457795b40b63d8cc01100dc0790f3b2f65329d7a208af78743961b35aa770938
SHA512 8bb2d409ff206da663426e28c73f054988736c5cc8a346b39bb1990bdd54ea55aab7a21116d0b9507a61458a940ef14291a501f49eab37c275c4e7252bbf20b7

C:\ProgramData\Avast Software\Persistent Data\Avast\Logs\Setup.log

MD5 c44af9e7a1955306da130e2468be70ef
SHA1 e6f0a335ca861a5a40f182a26990db14a779f794
SHA256 709368b088ef1700ce2239497f51e3cb13927bd39764908e960780a7476afaf8
SHA512 ead19742bd416b50ad03fc4f1a40dd137f97066a9dcb7bfb3e0a8ae830692772bf35927a78fdb31174f13afee9f029403257992d48a763e3c953fae27380f814

C:\ProgramData\Avast Software\Persistent Data\Avast\Logs\AvEmUpdate.log

MD5 04d30322622ad3f8c6285dfd12aac82b
SHA1 74081391b0cfe4d1cda6f74249d55ee5d6736db7
SHA256 9ccc22c1322f5bb1b88db85d1e9cfbf54431ac8e14df08f63c0e4033aa6ac3ed
SHA512 2a069e76da89919657f7f1aac051ee76a001e132dd3f70ed6ac282b76d9c6e087246811040db92a9c1759d2fcc6e4166b44bad563c72cd3e2ed9dce986e28070

C:\ProgramData\Avast Software\Persistent Data\Avast\Logs\AvEmUpdate.log

MD5 efed8d772df70c17130189f3a4c5d340
SHA1 65bf7852a7b2a0f05f81e21dbbbe5dc9eecceb6a
SHA256 190714390c510918d29513861d0b6774584eb8afd9c513e1f67bb2f604c07b93
SHA512 8ce98d08a5465ed178d5a9cd16b30a1d1f8a212e049d1666e38769b63ec969d72393041bf1d1d474cf294c0e28675419e9ebceb47350abfbbb7e6b1789589ee3

C:\ProgramData\Avast Software\Persistent Data\Avast\Logs\AvEmUpdate.log

MD5 8510f926254152298de7506e1a83af65
SHA1 7bf5f765154bd8d818e2d55bf52a820699e6214f
SHA256 8d13e9426d80fdc4ff84532a28890a4c94ec17a8b3871b331a3426dc038f34ff
SHA512 726fe0ccf8cac47acb30914a7b605c85ecb51664e5a6a53a42f5a67a22aa867eca91efb59cb0168c676aa32f56e4fed809d7f059eb3e34942974be2598f6609a

C:\Program Files\Avast Software\Avast\setup\4246775d-0bff-438a-8aca-3bf9ba64b151.ini

MD5 81051bcc2cf1bedf378224b0a93e2877
SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d

C:\Program Files\Avast Software\Avast\setup\e5718796-1461-4281-99c2-d90d825ceef8.ini

MD5 25bac562e5bf3d9fe40f43a7644dc072
SHA1 b5be000668278e6c1ba2c29993e3c7c88e11b483
SHA256 6c2e37cfd957aa51531649ddc0428ceac72e2ebad067d46288a7526543db4b34
SHA512 db8c12d369f064298ea337e508fa05e593b4ed75aeb9084267093b561183ec25d3ac4a6fa467067dda9ec4eb5865c22e79b0049671a4ab434641b2716a01998e

C:\Program Files\Avast Software\Avast\setup\fa8fe58f-8cfe-49e3-b831-e63e6c53df1b.xml

MD5 8b9228770200c3da82f77b3b3823cb70
SHA1 02e566a49ffbd0e79973f3415fcaa4012b66e630
SHA256 5635fb9d990ee2a38e89c7ba203baf5359517bc8372f9f44f56c87a1bf464558
SHA512 425d008b265f1650871eed9e45dd1c90e67ba843b7fc54439e9807bfa3894eacb8ab11356f3e8fc864e657bc55a418f7f61392771a2c4adc9838df11e40ac8db

C:\Program Files\Avast Software\Avast\setup\60114b1b-c233-418e-ba35-dd7c0c0a5aae.cab

MD5 d9023d73bb27513d251a6abf5d6b12dc
SHA1 c96941903231185b0f43f159c650aca348d48057
SHA256 855f420e9f4b5f26051fe7669db8d016dfeb9c8926854205c4d2d9e9407570d1
SHA512 5bf99c826e73e9e9e8232bb48fbfe264ad674584d37cdb71de671f885a123b466b91bb40d7efc013819a92fcd54768639eed629665307e257f5ea033e9b7e43c

C:\Program Files\Avast Software\Avast\setup\e77fd0e4-1984-40eb-8a5e-0b85e08210f4.cab

MD5 d1ef32c42378f0b7a34f7f7936f03d6e
SHA1 230649ef7320df5939a24e3668aacec46509b693
SHA256 e8f5636f5f2e6717caf2fa5caf9a7f8518d499ec42604ede23687be8ab2a43d1
SHA512 12a1a2d63935bbe10923bf81bf2bfb112d6f550f2533fd778cbe3a67e1eb77947c016773d56212ee3beda67d2f1ab8a67b14bc88a95fe4193fd8772236d6a671

C:\Program Files\Avast Software\Avast\setup\d439f59c-2485-4989-9ec8-dc70f9201b62.cab

MD5 64ae0041df10366b9dcd791181fbe2e2
SHA1 b0a8a9b4913b784290b5a1bfff7579dedfaba6dc
SHA256 f2d3072a159b79d49dfb43b01b63601ff7f2b628e24f0a1ee397ae3e34a0617d
SHA512 9dea64a78099e191319c2734d2cf00ccd3c4dfa1f6fd73f5d0c5d20b9d916dda489cc359a0a380f6112fffd27c678f5143e2fe8867cfdb7089a70bcb68cdfca2

C:\Program Files\Avast Software\Avast\setup\04fc5246-121f-442e-bc58-e30ecfa2e8c3.cab

MD5 138dfe6b167cdfe9fccb3695a399d305
SHA1 03c92db2378e43aac40916cc2ff46d9a4bf374a7
SHA256 b60c3b77b80d34d1ffd30fe29199dbc8db7d6e5129a27677dcb414761efba323
SHA512 4d5bb00cd759395869052886c223d34b11c000b8a9ac0b421e9b47feafa1e2ff6195d4327a49004a8ef6fda60ed52cc9d858b437bf38ef822631365750d2011a

C:\Program Files\Avast Software\Avast\setup\57ee7125-ce31-4ecd-b636-02226ac9f44b\avast5.ini.171842614400004

MD5 3a3c9efb77053e8ff775a51e77fec5b8
SHA1 20bd7474934bec52dc34b96533cebd1010b20e11
SHA256 caf028e8ec822d3de835e554e2e98676915597be1c14d74d367f52b815edfc02
SHA512 e83dd33949d88ae9b08e408d138d1cc8a23b65aadeddbb13a71f8152a2cf816429c293a132b79289cde7dae84470e79282b2a02fb4fd769260d77730d5ed3bb2

C:\Program Files\Avast Software\Avast\setup\1eceab5f-c1c8-4c2c-b54e-0fc804e6e9ab\update.xml

MD5 a3613e997feb8adc35f80b03a30b2b0a
SHA1 584c5c04ae5cb5113725aed4b1e35b2ae732d85b
SHA256 ac2b45e3664db47a9b30f45c508355562de21e15af2b3d34f2d4fe2da993fbab
SHA512 59b7dffc80502397098650ed50d3009c8a547b2c7e6b845e45c3eb1495e7290a66d39b70ebfe4c911ed079b771a75b47d698b00f1f80f80fc375d25fd58839ba

C:\Program Files\Avast Software\Avast\setup\ca45ed58-640d-4eff-8cbc-1e4d7c5ccfd2\update.xml

MD5 f73f5401e824b4805fbe673c8b93dff1
SHA1 f5c34316e2d10aa039f2fb99204ed4c879eb06c7
SHA256 41fa82253a09e17699692d1787d2e25640c96a812bbff0094a721bc34682eb9c
SHA512 8aedf35b7e932427d02b1f731a49d3eaa1fa9a283cf3f02e11c2ab8b5e07e33c6ef51830dcffd576190d17b33272f38e4b35c4770c6279b2da306dd261b09fe7

C:\Program Files\Avast Software\Avast\setup\a58ce932-a684-4a9d-be42-00b1be9753b8\update.xml

MD5 0dd8731e2651df8b3d8ecd09b041df2b
SHA1 cb5a939711317b23081f69824cf6362f133bf4a4
SHA256 02dcbde661d1da38a561afe97d33a3a7e253fe08ee9a08d5a7f0a901900a23df
SHA512 a1dce85ddb7ede195b8189bbb753816b9d097736e08609b87168c7eab557c5ce146612831df7fd81bc48415772718f4d9bdb8029077653f5067854d788a89a3d

C:\Program Files\Avast Software\Avast\setup\a58ce932-a684-4a9d-be42-00b1be9753b8\21C2EC8A7F38D38D8E67944D6E7217CA.rmt

MD5 41d8feab2b73512193149246df8de3e9
SHA1 1d72803022f78618599cc4c5fe7274aca31c4450
SHA256 58844aa95b9a0bdcf7d27a58dd434fde1c0686d897af041ed2c2da208e7fe420
SHA512 f965ee632b5d45131274637890c2ac1d5de4d0b5bfdb33bf3a992ed9f1e70cdf656ea6df7f34d8e6a903df342a874445355db4b94cafdabc661f2829790fac5d

C:\Program Files\Avast Software\Avast\ashServ.dll

MD5 7d03b455e847610ecb3987f79a990e31
SHA1 744a70ca9a4b885f732eb2c1372c801bd7e7729d
SHA256 6ed1f2d566f9c205dad12a17acff076490b5cf3ccb116d70d4c07dadd18df15f
SHA512 77ffb370b8dafc8797816734276acd19409d5c743f44676751d56180694fd33d5a52a8af09b21ae22b8c1d2d11175252a27cfaa35ac9471f07bca6316861b790

C:\Program Files\Avast Software\Avast\setup\be414a13-ae30-4ec4-8aec-d5486e6fd754\update.xml

MD5 257110b2ff9b99f6574561cd7f60058f
SHA1 c9d4542fa4abbfcb091603ea51792d1a01a3fc4b
SHA256 8eae258d47b7f61d1bab44e3ac8206a2f7a042eaa34f08106b6a6462cf00cb64
SHA512 aa8235aaa262524a9d7bd12ffe7c50c002e4683f2ad2e1d46f5a25949578d2b0fd98d693d30d76f3ff78b62d56c5b91d87c82fb18d2076a766f941fde13312aa

C:\Program Files\Avast Software\Avast\setup\be414a13-ae30-4ec4-8aec-d5486e6fd754\939FCC52A506AC288462DBF67B2585D4.rmt

MD5 0fd7a1fc6e0d8d4a032182d52ff07fff
SHA1 04de1aac03cc03223af5eb8b026503ee2f2dbb17
SHA256 75be3982a1a7ea26c08c5a76fa42823ae9bc1126c1d4068a276f8cea16b55209
SHA512 7874c7616d2e0cf768628f3a667b7e2868be7d0c71c94ede392850001a6dbbc18e03b55e5091a33e3a109de3496e49ae18c2ed974b3189c2b49bbc4b97020b00

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswSnx.sys

MD5 454bcca16b27174487ffd2882dff3eb4
SHA1 b9bcc36ebe96c27b62ad9112949e46586593209b
SHA256 06180d675241d866c9cc2b47ba24f5d50ee059e94a5a09f5a8963f3ac9a2ea5e
SHA512 7294da099404cff5eb2dfc37facdf85165bcc2b704226e7a4cbc739f5a4e87e564ac12165a9c5c6387240aa58f8f21446f2310a8cd926434022abfc78bc77dbe

C:\Program Files\Avast Software\Avast\setup\00650158-f710-402e-8715-46d9b715ce1f\update.xml

MD5 7cf81966fa4420e00137fd69cf6939f8
SHA1 0fb0fc8e39b3268a8e915ea3ddb59a0e9f7f206d
SHA256 706a023ebf1275d588418582c0d1416c6f79f87c813f930d84b1da3aa10a382e
SHA512 f788327ac4f45f65bbb0221a89ecf6ad46896bf36d3771fe9992a1bc76b73e7952dc608f90dbb148f926b8c696ad1c23d71ccbec8ecf508fbf2ddf9352fedba2

C:\Program Files\Avast Software\Avast\setup\9d97a67a-907c-4bf4-96de-896dcf887180\update.xml

MD5 772f17b0a02f2ad5191c5280a3fc2268
SHA1 1c1d4e716e9e19c1819c347da9636ccf71727c5b
SHA256 676a5422f01ba9fb1e382afe1cf8e7baa7b719b6b684be950e42d22729e1b6ab
SHA512 2c26166f57d101cca5e7ca572778c6855ef82ba959e276abb2f9d0ceaaaba1c4a5537467b4c9f3ff8631a492d46dfd9625f40d17c4e9823ecfe8757767304c59

C:\Program Files\Avast Software\Avast\setup\9d97a67a-907c-4bf4-96de-896dcf887180\638FF599D229C5AD5B5AC61BE2B97C98.rmt

MD5 305d916e80b389351cf3a752fbd83168
SHA1 e8393979390e948434cfa12e02ee888cd874555d
SHA256 41aed78c6d76143c9f3ef8d6b24700aaf1e75018cf2e549a9e0b9d68f611b030
SHA512 fbb734417c54a6a4b15940f4ff8d26558f036bca27657f70a15d631b38f4f2cf6d6f369572e82e43fefe4951262e52b063038535c2f8a37caa125abb510c2500

C:\Program Files\Avast Software\Avast\setup\9d97a67a-907c-4bf4-96de-896dcf887180\A8E53D031F05B390D1C7C436CC2517A5.rmt

MD5 27af42cd505df58fb9057efb5ce74fe5
SHA1 9f20f721fa067dbd51d54c9334cae21296f862bc
SHA256 9a69dab16e6d6c6becd369afed7d0d9cda3d7dbda7f6f8020612fd606f09e3f1
SHA512 65f5d8da33dace1c5623e147ef4db1bee6a50af72254fc35323ad5f16094a90be0eece8a71f5414d3e7d391f5f5a65f803f48fb2e45dc88030a8db9655e540b2

C:\Program Files\Avast Software\Avast\snxhk.dll

MD5 7dc9a062a6c0e64b15d862a0694cd661
SHA1 11ef3e8a3e30fee5fe5fbe84cc9534a1fc688787
SHA256 3f507e021c514c62d145dbb174ac2a1439110f03e881f6b568f0ab1ac8619dca
SHA512 1d12e87d69e37564231156863734f6aaeabff492243f9a940ad8b526cdf152b5ad0ced202a72971598b281ad2270cbfb95a4943304d4f2dd3643258ff2e42a5d

C:\Program Files\Avast Software\Avast\x86\snxhk.dll

MD5 38b647d1682222051b9e799c64d914de
SHA1 386cf6c08876243896c900b939b4401dd520e85d
SHA256 1d0b085ff9027e1b69e458dd8a5c6941c57129857e88f27065f489a6b42be0e5
SHA512 11a8e067541b46af73a947319e5c797259d713de8084cb689350ed86a5673651513a8271a20e4165431379687ab70a569ec75cebcac4ba71f9416d23b1b84a65

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 6490d7585d3b9f803902d04fec0d03a3
SHA1 bc22738421e339316bad849e10b3ad34a9e03228
SHA256 a80dd630226d0694d57d649fbaa465fd71394a1171f462490c94603270725754
SHA512 dc44b28b800e49c019884896e2bedfdc6ab2be8ae5bb2d9b3e92e05ba3c4ade1ceca488a918fadcb230010260a5d9266e61a082b2cb6ffa894c4c7f2be0ffbad

C:\Users\Admin\AppData\Local\Temp\app519414ad8064d9a0.tmp

MD5 f48f66577dfd5bfc58bacdcd3a45256b
SHA1 f9c33c257fcef5c9fcfec94c36eaaeaff36f9e31
SHA256 a13c8ca1220693be4c3e1ff5476d8c068ec59cc5794a0af8af1527aa138c3942
SHA512 063b65fe0fe9778ad46e81fd17f83369771155c822485385df72e65ea7c2e0bf53b4c94791e0dbbc94fb4beb33dff8665287c8cb662c44a3848d1ce524cafa52

C:\Users\Admin\AppData\Local\Temp\appc28eb3993e90ee02.tmp

MD5 d367ddfda80fdcf578726bc3b0bc3e3c
SHA1 23fcd5e4e0e5e296bee7e5224a8404ecd92cf671
SHA256 0b8607fdf72f3e651a2a8b0ac7be171b4cb44909d76bb8d6c47393b8ea3d84a0
SHA512 40e9239e3f084b4b981431817ca282feb986cf49227911bf3d68845baf2ee626b564c8fabe6e13b97e6eb214da1c02ca09a62bcf5e837900160cf479c104bf77

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 69e136540ddf0e68c98e8b13dba62bec
SHA1 274dfe9fbc3073f692aa7220194ba8285f7a1b7b
SHA256 1c3575f54c736997a8d9bb96b00bce66b06e6689252a7eae42cf1f6db94bc702
SHA512 84bab7ce3f5f7f6234468b36ea2cf2ec50fa95942fa3c465c659a5a032fd9e561f0b943b1927f604f2e39c12c7eeab31c5a212f6baff0e6c9a133a093d4a6d53

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 ca72d2a38ecc0e651e492b38debc7d84
SHA1 76866f72d7a296b00e50b07de339503bc035551c
SHA256 483a7a8b6dacdf6cc665addde67e265d1bc7186f8aa82d2781b5f83034e28bb6
SHA512 6c3d9beae740da6d1b25f86c8bf504d3780d8d085f6225d8119944da50abab4de78b8b4e6092fc38aa2db46b13e0107bc33fbfebeda27e68aac4d2f2c4f6f62b

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 22615666c26bcc0c93d94529a71934d3
SHA1 edd8635a38ade5eb5c0b7f95d8ad100f421e4526
SHA256 65cdc88646937a0b91cec31112d895415d86c75bd06d1ff82b63b165c281833b
SHA512 7e4646a4cc6cc818c68075743ec5d397955b6c7938a009733f600a98466b55c2ad015981518c1c498cfab88626ec32abedc64ddcdc33e08dfcf4ff89fc2f457b

C:\Program Files\Avast Software\Avast\setup\setup.ini

MD5 316bec22207c4dc832c0d9d13042dc61
SHA1 34e16d9fa74c020d7154c4ca87302dbc6ca2d318
SHA256 484aa3b6b9dfbffa0b46497f60d1571d39d29cb5b99b314fb520f256afe147b1
SHA512 6e783019d25e881e1a3523fe4562a3f0833e4de7358202c1cc38262ec380ec2e6a214f2d6582451503cd6593226e7b9c8a311ff49ac734cb8eda2a14e81f120d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 265ad4c726367c256a985697809efc30
SHA1 21435896e7100a7e80ec54e0bdb7578011460168
SHA256 ab0e4b0c895e7506f09a18cc5833c3ba54ced21a3130d25ce0f990be19db2c2b
SHA512 5ecd83401fdcdc8bb7916e663b45fdf87b82d889058ad261de41e4433fe8fa72e0cae4c0e405d5dba834dd66705a6e3deea0529be6351e450759c5961e6e29c7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8681af7787d4116dcef1425ebbfcf73a
SHA1 9788fc2e59c467c6637af851aac96bf31bc3e488
SHA256 d1822bf3a016caa79a91dffa94f142b81eb01ae282217cef469a7aa79f089bc8
SHA512 911fcc253a1e2012073bfa4b618667ad518d0cb7309fcc22d6f5bbf9712f983150fff65375992cc4e90758acb41494196f17d33e1a89df663db90825dfffa83c

memory/10448-9296-0x00000172682A0000-0x00000172682A1000-memory.dmp

memory/10448-9298-0x00000172682A0000-0x00000172682A1000-memory.dmp

memory/10448-9297-0x00000172682A0000-0x00000172682A1000-memory.dmp

memory/10448-9308-0x00000172682A0000-0x00000172682A1000-memory.dmp

memory/10448-9307-0x00000172682A0000-0x00000172682A1000-memory.dmp

memory/10448-9306-0x00000172682A0000-0x00000172682A1000-memory.dmp

memory/10448-9305-0x00000172682A0000-0x00000172682A1000-memory.dmp

memory/10448-9304-0x00000172682A0000-0x00000172682A1000-memory.dmp

memory/10448-9303-0x00000172682A0000-0x00000172682A1000-memory.dmp

memory/10448-9302-0x00000172682A0000-0x00000172682A1000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 f02745aa806c637f87edb410b348d854
SHA1 4d337742cdf09933dee9a666a9fc17dc5acacf41
SHA256 ac1e9831e495f2cc6e4d8a1ce46e35df8e5e02255db94b012b5232256f76991f
SHA512 782f3b56f2af26155a72f0f8e390838d3db9dfd6f971bccce23a3f3f12adf032b3a555863aaa4fad0841dcfe30ede7cc0d255bdf6383811bb4a4838012dec111

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-15 04:28

Reported

2024-06-15 04:40

Platform

win11-20240611-en

Max time kernel

638s

Max time network

458s

Command Line

"C:\Users\Admin\AppData\Local\Temp\Google Chrome.exe"

Signatures

Enumerates physical storage devices

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133628994259649328" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\Google Chrome.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Google Chrome.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2404 wrote to memory of 3440 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3440 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 3004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 4836 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 4836 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2404 wrote to memory of 1484 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Users\Admin\AppData\Local\Temp\Google Chrome.exe

"C:\Users\Admin\AppData\Local\Temp\Google Chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe2567ab58,0x7ffe2567ab68,0x7ffe2567ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1516 --field-trial-handle=1840,i,12282038206625048111,11779349531199007023,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1840,i,12282038206625048111,11779349531199007023,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2216 --field-trial-handle=1840,i,12282038206625048111,11779349531199007023,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3060 --field-trial-handle=1840,i,12282038206625048111,11779349531199007023,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3144 --field-trial-handle=1840,i,12282038206625048111,11779349531199007023,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4324 --field-trial-handle=1840,i,12282038206625048111,11779349531199007023,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4496 --field-trial-handle=1840,i,12282038206625048111,11779349531199007023,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4540 --field-trial-handle=1840,i,12282038206625048111,11779349531199007023,131072 /prefetch:8

C:\Windows\SysWOW64\werfault.exe

werfault.exe /h /shared Global\a5adfb2cdf69445b87180c8365a03079 /t 3736 /p 540

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4576 --field-trial-handle=1840,i,12282038206625048111,11779349531199007023,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4448 --field-trial-handle=1840,i,12282038206625048111,11779349531199007023,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4868 --field-trial-handle=1840,i,12282038206625048111,11779349531199007023,131072 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\VideoLAN\VLC\vlc.exe

"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\ExitClear.avi"

Network

Country Destination Domain Proto
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
GB 142.250.187.238:443 clients2.google.com udp
N/A 224.0.0.251:5353 udp
GB 142.250.187.238:443 clients2.google.com tcp
IE 52.111.236.22:443 tcp

Files

memory/540-0-0x00007FFE390E0000-0x00007FFE392E9000-memory.dmp

memory/540-1-0x0000000000060000-0x000000000006C000-memory.dmp

memory/540-2-0x00000000051E0000-0x0000000005786000-memory.dmp

memory/540-3-0x0000000004B00000-0x0000000004B92000-memory.dmp

memory/540-4-0x00007FFE390E0000-0x00007FFE392E9000-memory.dmp

memory/540-5-0x0000000004BC0000-0x0000000004BCA000-memory.dmp

\??\pipe\crashpad_2404_PCQSEIWKUAFRNLIK

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

memory/540-45-0x00007FFE390E0000-0x00007FFE392E9000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 8542b309aeb4d7f8ee9e78d27ab04ae3
SHA1 2a4c263d54d4b45b80742703ebb1275c6894eaee
SHA256 ae02b21d73e72a7b762b69ebc6f03f50b0114b7d74e698e1e700b2b760c964df
SHA512 adff032ecb1215afc8209be97ac8db9c2024c5a0f93121b9b69e1521e6ea1c3d328cc6145ce0bf38bd2ced85a5f3ebb727247a96f49cbabadd798057ecf7b719

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0cb74cd173f1b9abdb442a8275640ab0
SHA1 33b5fcbaee0e11f730b4136fe828459406d635f0
SHA256 4b5e171579693ef37edfbd8042d41eaf4881bd60b2fabdf071fa21ffbbaf4c92
SHA512 460a985ec0ffa84ac5b363c5d1d6e3b365cc71e0498da84393b669491a4077b60c245146d27480ba40d3163c384a4997b9352c0bf99c8e1974179ff28964eed3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 edc44412e118c22d294ac40870c6cb5f
SHA1 b2dce0ee930ff09adc7e37fc9996ceaa785a4255
SHA256 552e5033af2a2adb89403ac7e7394cf4b286245224340a1b98caa1fdbe6f38d9
SHA512 3b62e118463ccabc83afb3c6fc7c2b5bb6a22292a72bae2fb0b18f7cb06c193a66f5cba1202e0099a4a82f4f2ea60cda142710b298be842a9d0c6dc55f534e0f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 2ba64da670b788c68129761bc7424793
SHA1 7fbbc464035c07a2ef8acc6b9669f452df5867e3
SHA256 af740f3a5953401031ec4b540b410a85055e3b31ca199295af13f6aaa2d4d4e2
SHA512 85ea1960c48684f55428166aa523b3d145b91fb64d7c84587a8b73bc5796fa35d6ccf166153bf00aedc6efab445cbe3656f65ffd65e4dc639cae2b1490865a80

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 450e4645332948483aed0d9877498299
SHA1 4e354d2605d3b064cd86aca1f858972a53916029
SHA256 88ee45f24e79d6a581d524f0ef7011a1f92b62c98f9b8c23fec58b13bcf33497
SHA512 ccc045125d72b659fece31467faa467c83254e5b2c9e318744f273d7de9af28df849f3fac8fb7a845d874c2df1f8830c04fdd31c8033ce26c1375c11e3921179

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a777d1a08f97000678858ebc12b0349b
SHA1 da9178e4c7e3c1d556160a58c43b385cdf3259b6
SHA256 378eba509c9b71bf4fbf317a8b77f4c0c284403952b3bb3ea5a0ca7f6e59dbb3
SHA512 bf8dc8a9912cfcf367d7df1b934763e7dc26fe2cdc2f3e82c44f7e74f6ef8c6d8f555b6e172ae30d77842bd59480a0a52a5f45cb53b361024968192872e3e56d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

memory/540-159-0x00007FFE390E0000-0x00007FFE392E9000-memory.dmp

memory/540-160-0x00007FFE390E0000-0x00007FFE392E9000-memory.dmp

memory/540-161-0x00007FFE390E0000-0x00007FFE392E9000-memory.dmp

memory/2588-162-0x00007FF654B80000-0x00007FF654C78000-memory.dmp

memory/2588-163-0x00007FFE29A40000-0x00007FFE29A74000-memory.dmp

memory/2588-164-0x00007FFE184E0000-0x00007FFE18796000-memory.dmp

memory/2588-172-0x00007FFE178E0000-0x00007FFE17AEB000-memory.dmp

memory/2588-173-0x00007FFE25710000-0x00007FFE25751000-memory.dmp

memory/2588-171-0x00007FFE293A0000-0x00007FFE293B1000-memory.dmp

memory/2588-170-0x00007FFE298D0000-0x00007FFE298ED000-memory.dmp

memory/2588-169-0x00007FFE299C0000-0x00007FFE299D1000-memory.dmp

memory/2588-175-0x00007FFE1FC30000-0x00007FFE1FC51000-memory.dmp

memory/2588-187-0x00007FFE17800000-0x00007FFE17857000-memory.dmp

memory/2588-188-0x00007FFE173D0000-0x00007FFE1758A000-memory.dmp

memory/2588-186-0x00007FFE1E940000-0x00007FFE1E951000-memory.dmp

memory/2588-185-0x00007FFE17860000-0x00007FFE178DC000-memory.dmp

memory/2588-184-0x00007FFE1E960000-0x00007FFE1E9C7000-memory.dmp

memory/2588-183-0x00007FFE1E9D0000-0x00007FFE1EA00000-memory.dmp

memory/2588-182-0x00007FFE1EA60000-0x00007FFE1EA78000-memory.dmp

memory/2588-181-0x00007FFE1EA80000-0x00007FFE1EA91000-memory.dmp

memory/2588-180-0x00007FFE1FBF0000-0x00007FFE1FC0B000-memory.dmp

memory/2588-179-0x00007FFE1FC10000-0x00007FFE1FC21000-memory.dmp

memory/2588-178-0x00007FFE253E0000-0x00007FFE253F1000-memory.dmp

memory/2588-177-0x00007FFE256F0000-0x00007FFE25701000-memory.dmp

memory/2588-176-0x00007FFE28B40000-0x00007FFE28B58000-memory.dmp

memory/2588-166-0x00007FFE2D270000-0x00007FFE2D287000-memory.dmp

memory/2588-165-0x00007FFE2D7C0000-0x00007FFE2D7D8000-memory.dmp

memory/2588-168-0x00007FFE2A280000-0x00007FFE2A297000-memory.dmp

memory/2588-167-0x00007FFE2A5A0000-0x00007FFE2A5B1000-memory.dmp

memory/2588-174-0x000001E0B1880000-0x000001E0B2930000-memory.dmp

memory/2588-201-0x000001E0B1880000-0x000001E0B2930000-memory.dmp