Malware Analysis Report

2024-10-23 18:49

Sample ID 240627-eqz8vs1gqc
Target atube-catcher-10.8.5-installer_GQ-DpU1.exe
SHA256 c7da9264a674a297c34b9ea7a34e5314140883e0914576563ca8bee1b4ea8b15
Tags
cobaltstrike backdoor bootkit defense_evasion discovery evasion persistence privilege_escalation spyware stealer trojan
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

c7da9264a674a297c34b9ea7a34e5314140883e0914576563ca8bee1b4ea8b15

Threat Level: Known bad

The file atube-catcher-10.8.5-installer_GQ-DpU1.exe was found to be: Known bad.

Malicious Activity Summary

cobaltstrike backdoor bootkit defense_evasion discovery evasion persistence privilege_escalation spyware stealer trojan

Suspicious use of NtCreateUserProcessOtherParentProcess

Cobalt Strike reflective loader

Cobaltstrike

Suspicious use of NtCreateProcessExOtherParentProcess

Event Triggered Execution: Image File Execution Options Injection

Sets service image path in registry

Downloads MZ/PE file

Modifies RDP port number used by Windows

Boot or Logon Autostart Execution: Active Setup

Drops file in Drivers directory

Loads dropped DLL

Executes dropped EXE

Event Triggered Execution: Component Object Model Hijacking

Checks computer location settings

Reads user/profile data of web browsers

Impair Defenses: Safe Mode Boot

Checks BIOS information in registry

Windows security modification

Modifies powershell logging option

Checks whether UAC is enabled

Checks for any installed AV software in registry

Adds Run key to start application

Enumerates connected drives

Writes to the Master Boot Record (MBR)

Drops Chrome extension

Checks installed software on the system

Checks system information in the registry

AutoIT Executable

Drops file in System32 directory

Drops file in Windows directory

Drops file in Program Files directory

Embeds OpenSSL

Enumerates physical storage devices

Program crash

Checks processor information in registry

Suspicious behavior: EnumeratesProcesses

Suspicious use of SendNotifyMessage

Suspicious use of AdjustPrivilegeToken

Enumerates system info in registry

Suspicious behavior: GetForegroundWindowSpam

Uses Volume Shadow Copy service COM API

Suspicious use of SetWindowsHookEx

Modifies Internet Explorer settings

Checks SCSI registry key(s)

Modifies data under HKEY_USERS

Delays execution with timeout.exe

Suspicious use of FindShellTrayWindow

Uses Task Scheduler COM API

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious behavior: LoadsDriver

Suspicious use of WriteProcessMemory

Modifies system certificate store

Modifies registry class

Script User-Agent

Uses Volume Shadow Copy WMI provider

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-27 04:09

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-27 04:09

Reported

2024-06-27 04:12

Platform

win7-20240611-en

Max time kernel

142s

Max time network

131s

Command Line

"C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe"

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe N/A

Checks for any installed AV software in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\AVG\AV\Dir C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\AVG\AV\Dir C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avira\Browser\Installed C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Avira\Browser\Installed C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Key opened \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\SOFTWARE\Avira\Browser\Installed C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\AVAST Software\Avast C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Key opened \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\SOFTWARE\AVAST Software\Avast C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Key opened \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\SOFTWARE\AVG\AV\Dir C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6 C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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 C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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 C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 0f00000001000000140000000f6aad4c3fe04619cdc8b2bd655aa1a26042e6500b000000010000005400000053007400610072006600690065006c006400200043006c00610073007300200032002000430065007200740069006600690063006100740069006f006e00200041007500740068006f007200690074007900000053000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c009000000010000002a000000302806082b0601050507030106082b0601050507030206082b0601050507030406082b06010505070303140000000100000014000000bf5fb7d1cedd1f86f45b55acdcd710c20ea988e71d000000010000001000000090c4f4233b006b7bfaa6adcd8f577d77030000000100000014000000ad7e1c28b064ef8f6003402014c3d0e3370eb58a2000000001000000130400003082040f308202f7a003020102020100300d06092a864886f70d01010505003068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3034303632393137333931365a170d3334303632393137333931365a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f7269747930820120300d06092a864886f70d01010105000382010d00308201080282010100b732c8fee971a60485ad0c1164dfce4defc80318873fa1abfb3ca69ff0c3a1dad4d86e2b5390fb24a43e84f09ee85fece52744f528a63f7bdee02af0c8af532f9eca0501931e8f661c39a74dfa5ab673042566eb777fe759c64a99251454eb26c7f37f19d530708fafb0462affadeb29edd79faa0487a3d4f989a5345fdb43918236d9663cb1b8b982fd9c3a3e10c83bef0665667a9b19183dff71513c302e5fbe3d7773b25d066cc323569a2b8526921ca702b3e43f0daf087982b8363dea9cd335b3bc69caf5cc9de8fd648d1780336e5e4a5d99c91e87b49d1ac0d56e1335235edf9b5f3defd6f776c2ea3ebb780d1c42676b04d8f8d6da6f8bf244a001ab020103a381c53081c2301d0603551d0e04160414bf5fb7d1cedd1f86f45b55acdcd710c20ea988e73081920603551d2304818a3081878014bf5fb7d1cedd1f86f45b55acdcd710c20ea988e7a16ca46a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479820100300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100059d3f889dd1c91a55a1ac69f3f359da9b01871a4f57a9a179092adbf72fb21eccc75e6ad88387a197ef49353e7706415862bf8e58b80a673fecb3dd21661fc954fa72cc3d4c40d881af779e837abba2c7f534178ed91140f4fc2c2a4d157fa7625d2e25d3000b201a1d68f917b8f4bd8bed2859dd4d168b1783c8b265c72d7aa5aabc53866ddd57a4caf820410b68f0f4fb74be565d7a79f5f91d85e32d95bef5719043cc8d1f9a000a8729e95522580023eae31243295b4708dd8c416a6506a8e521aa41b4952195b97dd134ab13d6adbcdce23d39cdbd3e7570a1185903c922b48f9cd55e2ad7a5b6d40a6df8b74011469a1f790e62bf0f97ece02f1f1794 C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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 C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8 C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A

Script User-Agent

Description Indicator Process Target
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2176 wrote to memory of 2076 N/A C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp
PID 2176 wrote to memory of 2076 N/A C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp
PID 2176 wrote to memory of 2076 N/A C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp
PID 2176 wrote to memory of 2076 N/A C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp
PID 2176 wrote to memory of 2076 N/A C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp
PID 2176 wrote to memory of 2076 N/A C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp
PID 2176 wrote to memory of 2076 N/A C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp

Processes

C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe

"C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe"

C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp

"C:\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp" /SL5="$8001C,837551,832512,C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 d2dbdb0phbn9qb.cloudfront.net udp
GB 143.204.178.124:443 d2dbdb0phbn9qb.cloudfront.net tcp
GB 143.204.178.124:443 d2dbdb0phbn9qb.cloudfront.net tcp
US 8.8.8.8:53 images.sftcdn.net udp
US 23.219.230.135:443 images.sftcdn.net tcp

Files

memory/2176-0-0x0000000000400000-0x00000000004D8000-memory.dmp

memory/2176-1-0x0000000000401000-0x00000000004B7000-memory.dmp

\Users\Admin\AppData\Local\Temp\is-6RRL6.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp

MD5 9b3a9a19f545f32bc0d061b202f6ba5e
SHA1 ac41d0939dc69685e3dded3f7687a4b4d6e11189
SHA256 c200f9b96997a67b25c9ed9df8e17b647319313b18d83b6bbc9ab96c0b3d602a
SHA512 786c697c51a050ee5cdd802bc0db1f63c4a93197c66ba0c7195a23a44e262364f9546da426bbfde1f8244a571f908adf32f303ba24eef484aa5e2c153a78e6eb

memory/2076-8-0x0000000000400000-0x000000000071C000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Cab8A76.tmp

MD5 49aebf8cbd62d92ac215b2923fb1b9f5
SHA1 1723be06719828dda65ad804298d0431f6aff976
SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512 bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

C:\Users\Admin\AppData\Local\Temp\Tar8AC7.tmp

MD5 4ea6026cf93ec6338144661bf1202cd1
SHA1 a1dec9044f750ad887935a01430bf49322fbdcb7
SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA512 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 ff3ebf973e85018a431788a8a7d0cf95
SHA1 00df97bb8564aac6315db96a858ecb1ad3055a2e
SHA256 36e015045eed76f866ba0145e10c50e2b30581efc8bbdd38754be6e47b0de523
SHA512 573c3fe8a4c444eee2e23e36a792e0302c55ea0aef8ce890e91fd6e2a00f8701385431cb6b29c2616cbc76a89f8298dc0e31d025eb8bbc71920c574198770e55

memory/2176-120-0x0000000000400000-0x00000000004D8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-MTAFM.tmp\mainlogo.jpg

MD5 34f051f00de89fd9eafc2a5fb651b457
SHA1 5b38f6da51c87d6be9b64f42157a68d0cff27c93
SHA256 72f621bbb8e9b0c33060204ab7a39cd1ef500b05638fca43d2316138258b70fc
SHA512 0152f99b1c95c39c7370e8bc5e140ed52e9ae15e6d9f8416f25bd06b8a20a45a2f309f30ff9d71f5ab958705ecc2e76464b99df190058e93b71202a096502e26

memory/2076-132-0x0000000003390000-0x00000000034D0000-memory.dmp

memory/2076-133-0x0000000000400000-0x000000000071C000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-27 04:09

Reported

2024-06-27 04:27

Platform

win10v2004-20240611-en

Max time kernel

781s

Max time network

1049s

Command Line

"C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe"

Signatures

Cobalt Strike reflective loader

Description Indicator Process Target
N/A N/A N/A N/A

Cobaltstrike

trojan backdoor cobaltstrike

Suspicious use of NtCreateProcessExOtherParentProcess

Description Indicator Process Target
PID 8924 created 1840 N/A C:\Program Files\Avast Software\Avast\avDump.exe C:\Program Files\Avast Software\Avast\wsc_proxy.exe

Suspicious use of NtCreateUserProcessOtherParentProcess

Description Indicator Process Target
PID 5268 created 4520 N/A C:\Windows\system32\WerFaultSecure.exe C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe

Boot or Logon Autostart Execution: Active Setup

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A8504530-742B-42BC-895D-2BAD6406F698}\ = "Avast Secure Browser" C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\CR_C8EFF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A8504530-742B-42BC-895D-2BAD6406F698}\StubPath = "\"C:\\Program Files\\AVAST Software\\Browser\\Application\\126.0.25444.62\\Installer\\chrmstp.exe\" --configure-user-settings --verbose-logging --system-level" C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\CR_C8EFF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A8504530-742B-42BC-895D-2BAD6406F698}\Localized Name = "Avast Secure Browser" C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\CR_C8EFF.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A8504530-742B-42BC-895D-2BAD6406F698}\IsInstalled = "1" C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\CR_C8EFF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A8504530-742B-42BC-895D-2BAD6406F698}\Version = "43,0,0,0" C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\CR_C8EFF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\CR_C8EFF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{A8504530-742B-42BC-895D-2BAD6406F698} C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\CR_C8EFF.tmp\setup.exe N/A

Downloads MZ/PE file

Drops file in Drivers directory

Description Indicator Process Target
File created C:\Windows\system32\drivers\aswbidsh.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswVmm.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\DRIVERS\MbamElam.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened for modification C:\Windows\system32\drivers\asw2a29cc3c3e7f59b8.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswbidsh.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswRdr2.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswRvrt.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw1fc6020d89413ef5.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\asw9f78b83e1a2656b6.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\asw86e3da2dc6d224ec.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswedac8d4d45c04138.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\asw9c2a4d3917e6fc74.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswcfd87fc9e3247c12.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswArDisk.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswbuniv.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswdd6ccc24f551c5df.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw9c2a4d3917e6fc74.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswRvrt.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswKbd.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\asw2a29cc3c3e7f59b8.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswArPot.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswVmm.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswbidsdriver.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\DRIVERS\MbamElam.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File created C:\Windows\system32\drivers\asw5bcd34c06def2661.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\asw54101775f64d56ee.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswRdr2.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswElam.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswcfd87fc9e3247c12.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\asw1fc6020d89413ef5.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw5e2c68c1b76549ce.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw9f78b83e1a2656b6.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswMonFlt.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswSnx.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswSP.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswSnx.sys C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
File created C:\Windows\system32\drivers\rsCamFilter020502.sys C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
File opened for modification C:\Windows\system32\drivers\asw4d1a1c93bb937d73.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw218ec2cd9f3d4384.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswNetHub.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswArPot.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\DRIVERS\mbamswissarmy.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File created C:\Windows\system32\DRIVERS\MbamChameleon.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File created C:\Windows\system32\drivers\asw218ec2cd9f3d4384.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw86e3da2dc6d224ec.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswbidsdriver.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw54101775f64d56ee.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\rsElam.sys C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
File created C:\Windows\system32\DRIVERS\farflt.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File created C:\Windows\system32\drivers\rsElam.sys C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
File opened for modification C:\Windows\system32\drivers\aswb912cf511a0f1b05.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw5bcd34c06def2661.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw7f1ff14e826fc384.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswArDisk.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswElam.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswbuniv.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\rsKernelEngine.sys C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
File created C:\Windows\system32\drivers\mbae64.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Windows\system32\DRIVERS\mwac.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened for modification C:\Windows\system32\drivers\aswKbd.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswdd6ccc24f551c5df.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\asw4d1a1c93bb937d73.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\system32\drivers\aswedac8d4d45c04138.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\system32\drivers\aswSP.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A

Event Triggered Execution: Image File Execution Options Injection

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AvastBrowserUpdate.exe C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AvastBrowserUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe N/A

Modifies RDP port number used by Windows

Sets service image path in registry

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswElam\ImagePath = "system32\\drivers\\aswElam.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswMonFlt\ImagePath = "system32\\drivers\\aswMonFlt.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswRvrt\ImagePath = "system32\\drivers\\aswRvrt.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswSP\ImagePath = "system32\\drivers\\aswSP.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswStm\ImagePath = "system32\\drivers\\aswStm.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswSnx\ImagePath = "system32\\drivers\\aswSnx.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswArPot\ImagePath = "system32\\drivers\\aswArPot.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswKbd\ImagePath = "system32\\drivers\\aswKbd.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\MBAMSwissArmy\ImagePath = "\\SystemRoot\\System32\\Drivers\\mbamswissarmy.sys" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\mbamchameleon\ImagePath = "\\SystemRoot\\System32\\Drivers\\MbamChameleon.sys" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbuniv\ImagePath = "system32\\drivers\\aswbuniv.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswVmm\ImagePath = "system32\\drivers\\aswVmm.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbidsdriver\ImagePath = "system32\\drivers\\aswbidsdriver.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswArDisk\ImagePath = "system32\\drivers\\aswArDisk.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswNetHub\ImagePath = "system32\\drivers\\aswNetHub.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswRdr\ImagePath = "system32\\drivers\\aswRdr2.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\aswbidsh\ImagePath = "system32\\drivers\\aswbidsh.sys" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A

Checks BIOS information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\Downloads\MBSetup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosDate C:\Users\Admin\Downloads\MBSetup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosDate C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component0.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\cznj5ixj.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe N/A
N/A N/A C:\Users\Admin\Downloads\atube-catcher-10.8.5-installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\installer.exe N/A
N/A N/A C:\Program Files\McAfee\Temp1471176745\installer.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsClientSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsClientSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
N/A N/A \??\c:\program files\reasonlabs\epp\rsHelper.exe N/A
N/A N/A \??\c:\program files\reasonlabs\EPP\ui\EPP.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files (x86)\DsNET Corp\aTube Catcher\aTubeCatcher.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\program files\reasonlabs\epp\rsLitmus.A.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
N/A N/A C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
N/A N/A C:\Windows\Temp\asw.522b695bbca8d837\avast_free_antivirus_setup_online_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe N/A
N/A N/A C:\Users\Public\Documents\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe N/A
N/A N/A C:\Users\Public\Documents\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\sbr.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe N/A

Impair Defenses: Safe Mode Boot

defense_evasion
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\aswSP.sys C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\aswSP.sys\ = "Driver" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\MBAMService C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\MBAMService\ = "Service" C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files (x86)\DsNET Corp\aTube Catcher\aTubeCatcher.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files (x86)\DsNET Corp\aTube Catcher\aTubeCatcher.exe N/A
N/A N/A C:\Program Files (x86)\DsNET Corp\aTube Catcher\aTubeCatcher.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
N/A N/A C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe N/A
N/A N/A C:\Users\Public\Documents\aswOfferTool.exe N/A
N/A N/A C:\Users\Public\Documents\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe N/A
N/A N/A C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe N/A

Reads user/profile data of web browsers

spyware stealer

Windows security modification

evasion trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\SECURITY CENTER\PROVIDER\AV\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\AvRepair = "\"C:\\Program Files\\Avast Software\\Avast\\setup\\instup.exe\" /instop:repair /wait" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AvastUI.exe = "\"C:\\Program Files\\Avast Software\\Avast\\AvLaunch.exe\" /gui" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AvastBrowserAutoLaunch_1088872FC4C2207C6D62AF0E8871CAAC = "\"C:\\Program Files\\AVAST Software\\Browser\\Application\\AvastBrowser.exe\" --check-run=src=logon --auto-launch-at-startup --profile-directory=\"Default\"" C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AvastBrowserAutoLaunch_1088872FC4C2207C6D62AF0E8871CAAC = "\"C:\\Program Files\\AVAST Software\\Browser\\Application\\AvastBrowser.exe\" --check-run=src=logon --auto-launch-at-startup --profile-directory=\"Default\"" C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\GrpConv = "grpconv -o" C:\Windows\system32\rundll32.exe N/A

Checks for any installed AV software in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\SelfDefense C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Languages C:\Program Files\Avast Software\Avast\AvastUI.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\CrashGuardProcessWatcherExclusions C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common\FirstInstalledBuildNumber = "6121" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ReportFolder C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Languages C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ProgramFolder C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\DataFolder C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\MovedFolder C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\SetupVersion C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Languages C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\SelfDefense C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key opened \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\SOFTWARE\Avast Software\Avast C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\UpdateVersion = "734" C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\LicenseFile C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Languages C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Program Files\Avast Software\Avast\avDump.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\PassiveMode C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ProgramFolder C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ReportFolder C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\CertificateFile C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\MovedFolder C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\CrashGuardProcessWatcherExclusions C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\CrashGuardProcessWatcherExclusions C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\CertificateFile C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\SelfDefense C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\Backup C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ChestFolder C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast\properties\settings C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\SelfDefense C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ProgramFolder C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\LogFolder C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\Version C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\UseRegistry C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common\ShowWelcomePage C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\SelfDefense\SelfDefense = "1" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\SelfDefense C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\SetupFolder C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\UserInterface C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\SetupFolder C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ProgramFolder C:\Program Files\Avast Software\Avast\defs\24062614\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\DataFolder C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\Version C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\SelfDefense C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\PassiveMode C:\Program Files\Avast Software\Avast\AvastUI.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ProgramFolder C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\burger_client C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\FwDataFolder C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\PassiveMode C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast\properties C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\Common C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings\SelfDefense C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\UseRegistry C:\Program Files\Avast Software\Avast\AvastNM.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe N/A

Drops Chrome extension

Description Indicator Process Target
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\8.1.0.5236_0\manifest.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok\6.0.0_0\manifest.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\L: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\T: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\G: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\H: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\N: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\X: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\F: C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened (read-only) \??\F: C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened (read-only) \??\A: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\L: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\E: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\N: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\Y: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\V: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\Z: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\F: C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened (read-only) \??\A: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\U: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\G: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\K: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\S: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\M: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\Q: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\W: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\Y: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\O: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\U: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\V: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\Q: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\S: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\T: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\P: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\H: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\I: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\W: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\P: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\O: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\J: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\B: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\I: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\J: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\K: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\R: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\M: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\X: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\Z: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\R: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\B: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\E: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A

Modifies powershell logging option

evasion

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\AvastUI.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.522b695bbca8d837\avast_free_antivirus_setup_online_x64.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe N/A

AutoIT Executable

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\DriverStore\FileRepository\netxex64.inf_amd64_ede00b448bfe8099\netxex64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netwbw02.inf_amd64_1c4077fa004e73b4\netwbw02.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\e2xw10x64.inf_amd64_04c2ae40613a06ff\e2xw10x64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netvchannel.inf_amd64_ba3e73aa330c95d6\netvchannel.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\86844F70250DD8EF225D6B4178798C21_2CDE88B3CC9A35A2EA16DC0201366139 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\86844F70250DD8EF225D6B4178798C21_1FB605FD2412C4F94AD934D8134A28AC C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netmyk64.inf_amd64_1f949c30555f4111\netmyk64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5F26A2159BA21EA573A1C5E3DE2CF211_E3375A509D9058F6A8FFB74D3B4E6F77 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{658b950e-331b-414d-9634-74c8fe0782f5}\SET14C7.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07A7CCFBD28A674D95D3BF853C9007C6 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netrtwlane01.inf_amd64_b02695ef070d7a42\netrtwlane01.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netwew01.inf_amd64_153e01d761813df2\netwew01.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\30069012ED3CF5DB92F9F4FC78D55E2D_F3E20C88E7D9AC7FFC9B7F8CCE793CAD C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netnvm64.inf_amd64_35bbbe80dec15683\netnvm64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8890A77645B73478F5B1DED18ACBF795_C090A8C88B266C6FF99A97210E92B44D C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\38D10539991D1B84467F968981C3969D_C92678066E2B4B4986BC7641EEC08637 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\206932163209AD483A44477E28192474 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FC68FB72D4FBC7E0F151BC2282D75E47_367FA2447481C3DB640CE44BE2E5A181 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netl160a.inf_amd64_e4cbe375963a69e9\netl160a.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\msdri.inf_amd64_97bef65a8432edd4\msdri.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\wceisvista.inf_amd64_07ad61d07466a58a\wceisvista.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3E3E9689537B6B136ECF210088069D55_EF6C9357BB54DDB629FD2D79F1594F95 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\42B9A473B4DAF01285A36B4D3C7B1662_38924EDF39D8802D6946FB22E5DD0835 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netwtw02.inf_amd64_42e02bae858d0fbd\netwtw02.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netbc64.inf_amd64_b96cdf411c43c00c\netbc64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3E3E9689537B6B136ECF210088069D55_A925FAB5FFC3CEDB8E62B2DCCBBBB4F2 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netefe3e.inf_amd64_7830581a689ef40d\netefe3e.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\net7800-x64-n650f.inf_amd64_178f1bdb49a6e2fd\net7800-x64-n650f.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6651BA9932C96B7249550FCB98A2BDE0_26DC7DFC639B5C69308BCA3E26AABB27 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netelx.inf_amd64_7812e4e45c4a5eb1\netelx.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netl1c63x64.inf_amd64_4d6630ce07a4fb42\netl1c63x64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{658b950e-331b-414d-9634-74c8fe0782f5}\SET14C6.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_0A36A03C09DCEEA388C024E3D20B14B7 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_B5BA70C242D2647417631310AD4EA43F C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\rtwlanu_oldic.inf_amd64_1a82423cc076e882\rtwlanu_oldic.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2A7611428D62805A3E4E5BC4103D82E4_E21F67AC23F9FBAD2D2155027D507F5D C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_8280ADFA5CEF4E7A7D18EDB173D117BD C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_466BAFE78D4077069B6C3828315C7C8D C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\net819xp.inf_amd64_ff7a5dd4f9b1ceba\net819xp.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8890A77645B73478F5B1DED18ACBF795_C090A8C88B266C6FF99A97210E92B44D C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\mrvlpcie8897.inf_amd64_07fc330c5a5730ca\mrvlpcie8897.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netg664.inf_amd64_84cd7b2798e0a666\netg664.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\86844F70250DD8EF225D6B4178798C21_44AD5D0C299F1D4EE038B125B5E5863A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\38D10539991D1B84467F968981C3969D_C92678066E2B4B4986BC7641EEC08637 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_B5BA70C242D2647417631310AD4EA43F C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netvg63a.inf_amd64_9f5493180b1252cf\netvg63a.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netnvma.inf_amd64_7080f6b8ea1744fb\netnvma.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netrtwlane.inf_amd64_20caba88bd7f0bb3\netrtwlane.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\66AE3BFDF94A732B262342AD2154B86E_0D0888CE7AC1F2D5AD77780722B1FE14 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netrtwlans.inf_amd64_97cd1a72c2a7829c\netrtwlans.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\wnetvsc.inf_amd64_9a5b429abc465278\wnetvsc.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\mwlu97w8x64.inf_amd64_23bc3dc6d91eebdc\mwlu97w8x64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netjme.inf_amd64_752bf22f1598bb7e\netjme.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{658b950e-331b-414d-9634-74c8fe0782f5}\mbtun.sys C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\655B2ABBC057D891B8675F78CE059F06_93CFF8C1F7DABAC72C7E11107285398F C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netavpna.inf_amd64_f6f0831ba09dd9f5\netavpna.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netbc63a.inf_amd64_7ba6c9cea77dd549\netbc63a.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netvf63a.inf_amd64_a090e6cfaf18cb5c\netvf63a.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\bcmwdidhdpcie.inf_amd64_977dcc915465b0e9\bcmwdidhdpcie.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8890A77645B73478F5B1DED18ACBF795_E1EDEF0C21AE75D448F7327475DF4C9E C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Avast Software\Avast\defs\24062614\db_js.nmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\gui_resources\default_av\notifications.js C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\setuptools\_distutils\command\is-V55I6.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\is-EP7LM.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File opened for modification C:\Program Files\Avast Software\Avast\asw37053f748fe2e3ba.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Program Files\ReasonLabs\EPP\EDR\System.Runtime.Numerics.dll C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
File opened for modification C:\Program Files (x86)\DsNET Corp\aTube Catcher\libvlc\win-x86\plugins\access_output\libaccess_output_livehttp_plugin.dll C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\mutagen\is-T44MF.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\python38\email\is-85JIC.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\mutagen\__pycache__\is-CP8TV.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\pycparser\ply\__pycache__\is-Q8MMC.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\setuptools\config\is-6CIGL.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24062614\aswJsFlt.dll C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Program Files\ReasonLabs\EPP\System.Diagnostics.TextWriterTraceListener.dll C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\ais_res-98e.vpx C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswd0385f7832786a75.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24062614\aswec287d379b98df9a.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\asw3b440405a28222a9.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\gui_resources\default_av\napiAdapter.js C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\Cryptodome\Cipher\is-LQJAA.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\pip\_vendor\pyproject_hooks\is-1G2SI.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\requests\__pycache__\is-B212N.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\tr\PresentationUI.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\McAfee\Webadvisor\Analytics\Scripts\transport_api_endpoint.js C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\pip\_internal\distributions\is-7GNV4.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File opened for modification C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\api-ms-win-crt-environment-l1-1-0.dll.sum C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24062614\db_w6.map C:\Program Files\Avast Software\Avast\defs\24062614\engsup.exe N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\mutagen\asf\is-3TUHM.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\pip\_vendor\pkg_resources\__pycache__\is-P3PNM.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\setuptools\command\__pycache__\is-M0FVQ.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File opened for modification C:\Program Files\Avast Software\Avast\locales\aswce195d50bc1465db.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\locales\aswe53ee705e6d791c6.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24062614\db_mx4.sig C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\gui_resources\default_av\locale-fi.json C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Program Files\McAfee\Webadvisor\Analytics\preprocessors.js C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\websockets\legacy\__pycache__\is-LO07P.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw4fefe62557e65276.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\libvlc\win-x86\plugins\stream_filter\is-2L0J7.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\pip\_vendor\msgpack\is-GUG76.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\setuptools\_vendor\more_itertools\is-8IVO3.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files\McAfee\Temp1471176745\jslang\wa-res-install-ja-JP.js C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\installer.exe N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\pip\_vendor\rich\__pycache__\is-FKOFI.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File opened for modification C:\Program Files\Avast Software\Avast\1033\aswClnTg.txt C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\System.Xml.XmlSerializer.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\McAfee\Temp1471176745\jslang\wa-res-shared-ru-RU.js C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\installer.exe N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\libvlc\win-x86\plugins\stream_filter\is-KHIEP.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\setuptools\_vendor\importlib_metadata\__pycache__\is-89NI6.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\libvlc\win-x86\plugins\codec\is-JI4DS.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\avbugreport_x64_ais-a42.vpx C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\asw7359b899c25df9e9.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\locales\asw69b9b421b8538d77.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\api-ms-win-core-heap-l1-1-0.dll.sum C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Program Files\ReasonLabs\Common\Client\v1.4.2\LICENSES.chromium.html C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Profiles\MP3\is-TBMGF.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\libvlc\win-x86\lua\playlist\is-I9MJR.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File opened for modification C:\Program Files\Avast Software\Avast\gui_resources\default_av\secureBrowser.js.sum C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\pl\System.Xaml.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Avast Software\Avast\Licenses\asw1627b25afd183b6f.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswa9107fddacbdf863.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\gui_resources\default_av\search.js.sum C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-rtlsupport-l1-1-0.dll.sum C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\api-ms-win-core-memory-l1-1-0.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\jeepney-0.8.0.dist-info\is-2I9MG.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
File created C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\setuptools\is-CBA6I.tmp C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\svchost.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\inf\oem3.inf C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\inf\oem3.inf C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\ELAMBKUP\asw1efbb60dd178ca32.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File created C:\Windows\ELAMBKUP\asw1efbb60dd178ca32.tmp C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A

Embeds OpenSSL

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\UpperFilters C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\LowerFilters C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Windows\system32\DrvInst.exe N/A
Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\DeviceDesc C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\LowerFilters C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Service C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000\Control C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\DeviceDesc C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A
Key enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Service C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000\LogConf C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\UpperFilters C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000\Control C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000\LogConf C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \Registry\Machine\Hardware\Description\System\CentralProcessor C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\AvastUI.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\AvastUI.exe N/A
Key enumerated \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\system32\runonce.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\FeatureSet C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\Temp\asw.522b695bbca8d837\avast_free_antivirus_setup_online_x64.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\defs\24062614\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\defs\24062614\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\AvastUI.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\wsc_proxy.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Avast Software\Avast\AvastUI.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Avast Software\Avast\AvastNM.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A

Delays execution with timeout.exe

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\timeout.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Windows\system32\WerFaultSecure.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\Bios C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BiosReleaseDate C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\system32\WerFaultSecure.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\mbamtray.exe = "11000" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4424021B-831C-4F50-A74F-1AF30ADA650C} C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Validation C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Validation\{3C5422B3-D1E2-449E-A736-809C934C2F80} C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\mbam.exe = "11000" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4424021B-831C-4F50-A74F-1AF30ADA650C}\AppPath = "C:\\Program Files (x86)\\AVAST Software\\Browser\\Update\\1.8.1697.6" C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62593C70-ACF0-44CC-8716-990919D46A85}\AppName = "AvastBrowserUpdateBroker.exe" C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Validation\{3C5422B3-D1E2-449E-A736-809C934C2F80} C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62593C70-ACF0-44CC-8716-990919D46A85}\Policy = "3" C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4424021B-831C-4F50-A74F-1AF30ADA650C}\AppName = "AvastBrowserUpdateWebPlugin.exe" C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62593C70-ACF0-44CC-8716-990919D46A85} C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62593C70-ACF0-44CC-8716-990919D46A85}\AppPath = "C:\\Program Files (x86)\\AVAST Software\\Browser\\Update\\1.8.1697.6" C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4424021B-831C-4F50-A74F-1AF30ADA650C}\Policy = "3" C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Validation C:\Program Files\Avast Software\Avast\RegSvr.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\Malwarebytes.exe = "11000" C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133639354408776492" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\S-1-5-19\SOFTWARE\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols\All Applications\malwarebytes: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software\Policies\Microsoft\Office\15.0\Common\Security\Trusted Protocols\All Applications\malwarebytes: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\My C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-20\SOFTWARE\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:\ C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\AVAST Software\Browser\Update\ C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\My C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols\All Applications\malwarebytes: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\AVAST Software\\Avast One Essential.lnk" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4424021B-831C-4F50-A74F-1AF30ADA650C}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FA1D4FDD-C9C8-4575-A2A1-4179C3A3473D}\TypeLib\ = "{783B187E-360F-419C-B6DA-592892764A01}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F927AD37-BA5F-4B86-AE22-FE2371B12955} C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5083B4CA-BBA6-43DD-B36E-DEA787CA0CAD}\ = "IMWACControllerV8" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{D88AC9B4-2BC3-4215-9547-4F05743AE67B} C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{AFF1A83B-6C83-4342-8E68-1648DE06CB65}\1.0\FLAGS\ = "0" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{117151a5-951b-477e-91a4-699c7d9d66a2}\Implemented Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49} C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A012A499-D8A6-4F6C-9E05-B02D58E3781A}\NumMethods\ = "9" C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8C50E3A4-12A8-41FB-9941-E8EEB222E07E}\ProxyStubClsid32\ = "{D1E03992-3598-4135-8589-B27B3357CD8D}" C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{EF7DFB76-BA49-4191-8B62-0AC3571C56D7}\TypeLib\Version = "1.0" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0C30B7D9-82A1-4068-8A5B-F4C7D5EF75A3} C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{D37D106C-CDD2-4821-BC7A-F08990DDCA74}\NumMethods C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8C7E81D6-0463-485E-8DF5-2ADAD81FAF40}\ProxyStubClsid32\ = "{D1E03992-3598-4135-8589-B27B3357CD8D}" C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Avast Software\Avast\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2DEBAD4E-3BAF-44F0-9150-BCCCC3801CF9}\TypeLib C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5DA5CFCA-E804-4A2F-8B93-F5431D233D54}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C85F3EB8-B099-4598-89C3-E33BAC2CE53D}\TypeLib\ = "{5709DEEB-F05E-4D5C-8DC4-3B0D924EE08F}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BF153224-DA64-41F1-AA87-321B345870FA}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F3968E6D-3FD5-4707-A5A8-4E8C3C042062}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_UpdateSetup_Syncer = "98" C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Creating directory: C:\\Recovery\\AutoApply\\CustomizationFiles" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9D372F21-E6DA-4B82-881A-79F6CA6B6AE1}\ProgID C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5F128CCB-D86F-4998-803A-7CD58474FE2C}\TypeLib\ = "{5709DEEB-F05E-4D5C-8DC4-3B0D924EE08F}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{CC4D9C86-78F2-435F-8355-5328509E04F1}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{01222402-A8AB-4183-8843-8ADBF0B11869}\TypeLib C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{560EB17C-4365-4DFC-A855-F99B223F02AF}\TypeLib\Version = "1.0" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{49F6AC60-2104-42C6-8F71-B3916D5AA732}\1.0 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FB81F893-5D01-4DFD-98E1-3A6CB9C3E63E}\TypeLib C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0070F531-5D6B-4302-ACA0-6920E95D9A31}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Main = "65" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F128CCB-D86F-4998-803A-7CD58474FE2C}\TypeLib\ = "{5709DEEB-F05E-4D5C-8DC4-3B0D924EE08F}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{97EB7268-0D7B-43F6-9C11-337287F960DF}\TypeLib\ = "{FFB94DF8-FC15-411C-B443-E937085E2AC1}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MBAMExt.MBAMShlExt\ = "MBAMShlExt Class" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: wa_3rd_party_host_32.exe" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C0BE1521-7935-42E6-B606-058A559910BA} C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MB.LicenseController.1 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0070F531-5D6B-4302-ACA0-6920E95D9A31}\TypeLib\ = "{0E2822AB-0447-4F28-AF4C-FFDB1E8595AE}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: LUA.txt" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\avastthemefile\shell C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1097B101-1FF8-4DD8-A6C1-6C39FB2EA5D6}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{F5BCAC7E-75E7-4971-B3F3-B197A510F495}\1.0\HELPDIR\ = "C:\\Program Files\\Malwarebytes\\Anti-Malware" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C2E404A3-4E3F-4094-AE06-5E38D39B79AE} C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Main = "42" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8C50E3A4-12A8-41FB-9941-E8EEB222E07E}\NumMethods C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{D5599B6B-FA0C-45B5-8309-853B003EA412}\ProgID\ = "MB.ScanController.1" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2F14F58B-B908-4644-830F-5ACF8542D27F} C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_UpdateSetup_Syncer = "39" C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: ais_gen_gui_x64" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DC2F8F62-D471-4AD5-B346-9F214FE941A7}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A0101B90-FD0B-40CF-90E4-33650F09A80F}\ = "ICleanControllerV3" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FC34538A-37CB-44B4-9264-533E9347BB40}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\Program Files\\Avast Software\\Avast\\aswidpsdk.dll" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Deleting file: C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\AVAST Software\\Avast Internet Security.lnk" C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2A0F9375-1809-45ED-AFE0-92852B971139}\TypeLib C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AvastUpdate.OnDemandCOMClassSvc\CurVer C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{CD12DA4E-0EDF-4193-9764-C4704AB9DEEE}\1.0\ = "TypeLib for Interface {CD12DA4E-0EDF-4193-9764-C4704AB9DEEE}" C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\CR_C8EFF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4E0987E3-3699-4C92-8E76-CAEDA00FA44C}\TypeLib C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F22E03D6-F159-40A0-9476-16F3377B58C9}\TypeLib\ = "{49F6AC60-2104-42C6-8F71-B3916D5AA732}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{2446F405-83F0-460F-B837-F04540BB330C} C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E1BA0B73-14BD-4C9D-98CA-99355BD4EB24}\TypeLib\Version = "1.0" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{ECDAC35E-72BB-4856-97E1-226BA47C62C5}\TypeLib\ = "{5709DEEB-F05E-4D5C-8DC4-3B0D924EE08F}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A0101B90-FD0B-40CF-90E4-33650F09A80F}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F3B74800-4C27-4692-BC00-5AE37FA118E4}\TypeLib\Version = "1.0" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\1C58A3A8518E8759BF075B76B750D4F2DF264FCD\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\1C58A3A8518E8759BF075B76B750D4F2DF264FCD C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F6108407D6F8BB67980CC2E244C2EBAE1CEF63BE\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5A8CEF45D7A69859767A8C8B4496B578CF474B1A\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F6108407D6F8BB67980CC2E244C2EBAE1CEF63BE\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5A8CEF45D7A69859767A8C8B4496B578CF474B1A\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\1C58A3A8518E8759BF075B76B750D4F2DF264FCD\Blob = 140000000100000014000000b76ba2eaa8aa848c79eab4da0f98b2c59576b9f40300000001000000140000001c58a3a8518e8759bf075b76b750d4f2df264fcd2000000001000000c2040000308204be308203a6a003020102021006d8d904d5584346f68a2fa754227ec4300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3231303431343030303030305a170d3331303431333233353935395a304f310b300906035504061302555331153013060355040a130c446967694365727420496e633129302706035504031320446967694365727420544c53205253412053484132353620323032302043413130820122300d06092a864886f70d01010105000382010f003082010a0282010100c14bb3654770bcdd4f58dbec9cedc366e51f311354ad4a66461f2c0aec6407e52edcdcb90a20eddfe3c4d09e9aa97a1d8288e51156db1e9f58c251e72c340d2ed292e156cbf1795fb3bb87ca25037b9a52416610604f571349f0e8376783dfe7d34b674c2251a6df0e9910ed57517426e27dc7ca622e131b7f238825536fc13458008b84fff8bea75849227b96ada2889b15bca07cdfe951a8d5b0ed37e236b4824b62b5499aecc767d6e33ef5e3d6125e44f1bf71427d58840380b18101faf9ca32bbb48e278727c52b74d4a8d697dec364f9cace53a256bc78178e490329aefb494fa415b9cef25c19576d6b79a72ba2272013b5d03d40d321300793ea99f50203010001a38201823082017e30120603551d130101ff040830060101ff020100301d0603551d0e04160414b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b06010505070302307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63727430420603551d1f043b30393037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c303d0603551d2004363034300b06096086480186fd6c02013007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b050003820101008032ce5e0bdd6e5a0d0aafe1d684cbc08efa8570edda5db30cf72b7540fe850afaf33178b7704b1a8958ba80bdf36b1de97ecf0bba589c59d490d3fd6cfdd0986db771825bcf6d0b5a09d07bdec443d82aa4de9e41265fbb8f99cbddaee1a86f9f87fe74b71f1b20abb14fc6f5675d5d9b3ce9ff69f7616cd6d9f3fd36c6ab038876d24b2e7586e3fcd8557d26c21177df3e02b67cf3ab7b7a86366fb8f7d89371cf86df7330fa7babed2a59c842843b11171a52f3c90e147da25b7267ba71ed574766c5b8024a65345e8bd02a3c209c51994ce7529ef76b112b0d927e1de88aeb36164387ea2a63bf753febdec403bb0a3cf730efebaf4cfc8b3610733ef3a4 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 190000000100000010000000ffac207997bb2cfe865570179ee037b9030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e41d0000000100000010000000a86dc6a233eb339610f3ed414927c559140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac899880b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b06010505070308530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e19962000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\07E032E020B72C3F192F0628A2593A19A70F069E\Blob = 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 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8DA7F965EC5EFC37910F1C6E59FDC1CC6A6EDE16\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F6108407D6F8BB67980CC2E244C2EBAE1CEF63BE\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0D44DD8C3C8C1A1A58756481E90F2E2AFFB3D26E\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0D44DD8C3C8C1A1A58756481E90F2E2AFFB3D26E\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 1900000001000000100000009f687581f7ef744ecfc12b9cee6238f1030000000100000014000000f40042e2e5f7e8ef8189fed15519aece42c3bfa21d0000000100000010000000e78921f81cea4d4105d2b5f4afae0c78140000000100000014000000c87ed26a852a1bca1998040727cf50104f68a8a2090000000100000016000000301406082b0601050507030306082b060105050703086200000001000000200000005367f20c7ade0e2bca790915056d086b720c33c1fa2a2661acf787e3292e12700b00000001000000800000004d006900630072006f0073006f006600740020004900640065006e007400690074007900200056006500720069006600690063006100740069006f006e00200052006f006f007400200043006500720074006900660069006300610074006500200041007500740068006f0072006900740079002000320030003200300000000f000000010000003000000041ce925678dfe0ccaa8089263c242b897ca582089d14e5eb685fca967f36dbd334e97e81fd0e64815f851f914ade1a1e2000000001000000d0050000308205cc308203b4a00302010202105498d2d1d45b1995481379c811c08799300d06092a864886f70d01010c05003077310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e314830460603550403133f4d6963726f736f6674204964656e7469747920566572696669636174696f6e20526f6f7420436572746966696361746520417574686f726974792032303230301e170d3230303431363138333631365a170d3435303431363138343434305a3077310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e314830460603550403133f4d6963726f736f6674204964656e7469747920566572696669636174696f6e20526f6f7420436572746966696361746520417574686f72697479203230323030820222300d06092a864886f70d01010105000382020f003082020a0282020100b3912a07830667fd9e9de0c7c0b7a4e642047f0fa6db5ffbd55ad745a0fb770bf080f3a66d5a4d7953d8a08684574520c7a254fbc7a2bf8ac76e35f3a215c42f4ee34a8596490dffbe99d814f6bc2707ee429b2bf50b9206e4fd691365a89172f29884eb833d0ee4d771124821cb0dedf64749b79bf9c9c717b6844fffb8ac9ad773674985e386bd3740d02586d4deb5c26d626ad5a978bc2d6f49f9e56c1414fd14c7d3651637decb6ebc5e298dfd629b152cd605e6b9893233a362c7d7d6526708c42ef4562b9e0b87cceca7b4a6aaeb05cd1957a53a0b04271c91679e2d622d2f1ebedac020cb0419ca33fb89be98e272a07235be79e19c836fe46d176f90f33d008675388ed0e0499abbdbd3f830cad55788684d72d3bf6d7f71d8fdbd0dae926448b75b6f7926b5cd9b952184d1ef0f323d7b578cf345074c7ce05e180e35768b6d9ecb3674ab05f8e0735d3256946797250ac6353d9497e7c1448b80fdc1f8f47419e530f606fb21573e061c8b6b158627497b8293ca59e87547e83f38f4c75379a0b6b4e25c51efbd5f38c113e6780c955a2ec5405928cc0f24c0ecba0977239938a6b61cdac7ba20b6d737d87f37af08e33b71db6e731b7d9972b0e486335974b516007b506dc68613dafdc439823d24009a60daba94c005512c34ac50991387bbb30580b24d30025cb826835db46373efae23954f6028be37d55ba50203010001a3543052300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e04160414c87ed26a852a1bca1998040727cf50104f68a8a2301006092b06010401823715010403020100300d06092a864886f70d01010c05000382020100af6adde619e72d9443194ecbe9509564a50391028be236803b15a252c21619b66a5a5d744330f49bff607409b1211e90166dc5248f5c668863f44fcc7df2124c40108b019fdaa9c8aef2951bcf9d05eb493e74a0685be5562c651c827e53da56d94617799245c4103608522917cb2fa6f27ed469248a1e8fb0730dcc1c4aabb2aaeda79163016422a832b87e3228b367732d91b4dc31010bf7470aa6f1d74aed5660c42c08a37b40b0bc74275287d6be88dd378a896e67881df5c95da0feb6ab3a80d71a973c173622411eac4dd583e63c38bd4f30e954a9d3b604c3327661bbb018c52b18b3c080d5b795b05e514d22fcec58aae8d894b4a52eed92dee7187c2157dd5563f7bf6dcd1fd2a6772870c7e25b3a5b08d25b4ec80096b3e18336af860a655c74f6eaec7a6a74a0f04beeef94a3ac50f287edd73a3083c9fb7d57bee5e3f841cae564aeb3a3ec58ec859accefb9eaf35618b95c739aafc577178359db371a187254a541d2b62375a3439ae5777c9679b7418dbfecdc80a09fd17775585f3513e0251a670b7dce25fa070ae46121d8d41ce507c63699f496d0c615fe4ecdd7ae8b9ddb16fd04c692bdd488e6a9a3aabbf764383b5fcc0cd035be741903a6c5aa4ca26136823e1df32bbc975ddb4b783b2df53bef6023e8f5ec0b233695af9866bf53d37bb8694a2a966669c494c6f45f6eac98788880065ca2b2eda2 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5A8CEF45D7A69859767A8C8B4496B578CF474B1A\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0D44DD8C3C8C1A1A58756481E90F2E2AFFB3D26E\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0D44DD8C3C8C1A1A58756481E90F2E2AFFB3D26E C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\2AD974A775F73CBDBBD8F5AC3A49255FA8FB1F8C C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8DA7F965EC5EFC37910F1C6E59FDC1CC6A6EDE16 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\2AD974A775F73CBDBBD8F5AC3A49255FA8FB1F8C\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\2AD974A775F73CBDBBD8F5AC3A49255FA8FB1F8C\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\07E032E020B72C3F192F0628A2593A19A70F069E C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0D44DD8C3C8C1A1A58756481E90F2E2AFFB3D26E C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\2AD974A775F73CBDBBD8F5AC3A49255FA8FB1F8C C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\07E032E020B72C3F192F0628A2593A19A70F069E\Blob = 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 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F6108407D6F8BB67980CC2E244C2EBAE1CEF63BE C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F6108407D6F8BB67980CC2E244C2EBAE1CEF63BE\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0D44DD8C3C8C1A1A58756481E90F2E2AFFB3D26E\Blob = 0300000001000000140000000d44dd8c3c8c1a1a58756481e90f2e2affb3d26e2000000001000000ba010000308201b63082015ba0030201020213066c9fd5749736663f3b0b9ad9e89e7603f24a300a06082a8648ce3d0403023039310b3009060355040613025553310f300d060355040a1306416d617a6f6e3119301706035504031310416d617a6f6e20526f6f742043412033301e170d3135303532363030303030305a170d3430303532363030303030305a3039310b3009060355040613025553310f300d060355040a1306416d617a6f6e3119301706035504031310416d617a6f6e20526f6f7420434120333059301306072a8648ce3d020106082a8648ce3d030107034200042997a7c6417fc00d9be8011b56c6f252a5ba2db212e8d22ed7fac9c5d8aa6d1f73813b3b986b397c33a5c54e868e8017686245577d44581db337e56708eb66dea3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414abb6dbd7069e37ac3086079170c79cc419b178c0300a06082a8648ce3d0403020349003046022100e08592a317b78df92b06a593ac1a98686172fae1a1d0fb1c7860a64399c5b8c40221009c02eff1949cb396f9ebc62af8b62cfe3a901416d78c6324481cdf307dd5683b C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\1C58A3A8518E8759BF075B76B750D4F2DF264FCD\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5A8CEF45D7A69859767A8C8B4496B578CF474B1A\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8DA7F965EC5EFC37910F1C6E59FDC1CC6A6EDE16\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F6108407D6F8BB67980CC2E244C2EBAE1CEF63BE C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8DA7F965EC5EFC37910F1C6E59FDC1CC6A6EDE16 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5A8CEF45D7A69859767A8C8B4496B578CF474B1A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\2AD974A775F73CBDBBD8F5AC3A49255FA8FB1F8C\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\1C58A3A8518E8759BF075B76B750D4F2DF264FCD C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 0f00000001000000140000005bcaa1c2780f0bcb5a90770451d96f38963f012d090000000100000042000000304006082b06010505070302060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030106082b060105050703086200000001000000200000000687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd67707390b000000010000001e000000440053005400200052006f006f0074002000430041002000580033000000140000000100000014000000c4a7b1a47b2c71fadbe14b9075ffc415608589101d00000001000000100000004558d512eecb27464920897de7b660537f000000010000000e000000300c060a2b0601040182370a03047e000000010000000800000000c001b39667d60168000000010000000800000000409120d035d901030000000100000014000000dac9024f54d8f6df94935fb1732638ca6ad77c1320000000010000004e0300003082034a30820232a003020102021044afb080d6a327ba893039862ef8406b300d06092a864886f70d0101050500303f31243022060355040a131b4469676974616c205369676e617475726520547275737420436f2e311730150603550403130e44535420526f6f74204341205833301e170d3030303933303231313231395a170d3231303933303134303131355a303f31243022060355040a131b4469676974616c205369676e617475726520547275737420436f2e311730150603550403130e44535420526f6f7420434120583330820122300d06092a864886f70d01010105000382010f003082010a0282010100dfafe99750088357b4cc6265f69082ecc7d32c6b30ca5becd9c37dc740c118148be0e83376492ae33f214993ac4e0eaf3e48cb65eefcd3210f65d22ad9328f8ce5f777b0127bb595c089a3a9baed732e7a0c063283a27e8a1430cd11a0e12a38b9790a31fd50bd8065dfb7516383c8e28861ea4b6181ec526bb9a2e24b1a289f48a39e0cda098e3e172e1edd20df5bc62a8aab2ebd70adc50b1a25907472c57b6aab34d63089ffe568137b540bc8d6aeec5a9c921e3d64b38cc6dfbfc94170ec1672d526ec38553943d0fcfd185c40f197ebd59a9b8d1dbada25b9c6d8dfc115023aabda6ef13e2ef55c089c3cd68369e4109b192ab62957e3e53d9b9ff0025d0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020106301d0603551d0e04160414c4a7b1a47b2c71fadbe14b9075ffc41560858910300d06092a864886f70d01010505000382010100a31a2c9b17005ca91eee2866373abf83c73f4bc309a095205de3d95944d23e0d3ebd8a4ba0741fce10829c741a1d7e981addcb134bb32044e491e9ccfc7da5db6ae5fee6fde04eddb7003ab57049aff2e5eb02f1d1028b19cb943a5e48c4181e58195f1e025af00cf1b1ada9dc59868b6ee991f586cafab96633aa595bcee2a7167347cb2bcc99b03748cfe3564bf5cf0f0c723287c6f044bb53726d43f526489a5267b758abfe67767178db0da256141339243185a2a8025a3047e1dd5007bc02099000eb6463609b16bc88c912e6d27d918bf93d328d65b4e97cb15776eac5b62839bf15651cc8f677966a0a8d770bd8910b048e07db29b60aee9d82353510 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8DA7F965EC5EFC37910F1C6E59FDC1CC6A6EDE16\Blob = 0f00000001000000200000006fc4b8ac3d2b52c08baf56255e43d22c762962e4facab01ace16d48ec008be0a0300000001000000140000008da7f965ec5efc37910f1c6e59fdc1cc6a6ede162000000001000000450300003082034130820229a0030201020213066c9fcf99bf8c0a39e2f0788a43e696365bca300d06092a864886f70d01010b05003039310b3009060355040613025553310f300d060355040a1306416d617a6f6e3119301706035504031310416d617a6f6e20526f6f742043412031301e170d3135303532363030303030305a170d3338303131373030303030305a3039310b3009060355040613025553310f300d060355040a1306416d617a6f6e3119301706035504031310416d617a6f6e20526f6f74204341203130820122300d06092a864886f70d01010105000382010f003082010a0282010100b2788071ca78d5e371af478050747d6ed8d78876f49968f7582160f97484012fac022d86d3a0437a4eb2a4d036ba01be8ddb48c80717364cf4ee8823c73eeb37f5b519f84968b0ded7b976381d619ea4fe8236a5e54a56e445e1f9fdb416fa74da9c9b35392ffab02050066c7ad080b2a6f9afec47198f503807dca2873958f8bad5a9f948673096ee94785e6f89a351c0308666a14566ba54eba3c391f948dcffd1e8302d7d2d747035d78824f79ec4596ebb738717f2324628b843fab71daacab4f29f240e2d4bf7715c5e69ffea9502cb388aae50386fdbfb2d621bc5c71e54e177e067c80f9c8723d63f40207f2080c4804c3e3b24268e04ae6c9ac8aa0d0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e041604148418cc8534ecbc0c94942e08599cc7b2104e0a08300d06092a864886f70d01010b0500038201010098f2375a4190a11ac57651282036230eaee628bbaaf894ae48a4307f1bfc248d4bb4c8a197f6b6f17a70c85393cc0828e39825cf23a4f9de21d37c8509ad4e9a753ac20b6a897876444718656c8d418e3b7f9acbf4b5a750d7052c37e8034bade961a0026ef5f2f0c5b2ed5bb7dcfa945c779e13a57f52ad95f2f8933bde8b5c5bca5a525b60af14f74befa3fb9f40956d3154fc42d3c7461f23add90f48709ad9757871d1724334756e5759c2025c266029cf2319168e8843a5d4e4cb08fb231143e843297262a1a95d5e08d490aeb8d8ce14c2d055f286f6c49343776661c0b9e841d7977860036e4a72aea5d17dba109e866c1b8ab95933f8ebc490bef1b9 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A

Script User-Agent

Description Indicator Process Target
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A C:\Windows\SYSTEM32\fltmc.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component0.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\wevtutil.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\wevtutil.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\SYSTEM32\fltmc.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\wevtutil.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\wevtutil.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeBackupPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeBackupPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeDebugPrivilege N/A \??\c:\program files\reasonlabs\epp\rsHelper.exe N/A
Token: SeDebugPrivilege N/A \??\c:\program files\reasonlabs\epp\rsHelper.exe N/A
Token: SeDebugPrivilege N/A \??\c:\program files\reasonlabs\epp\rsHelper.exe N/A
Token: SeBackupPrivilege N/A \??\c:\program files\reasonlabs\epp\rsHelper.exe N/A
Token: SeRestorePrivilege N/A \??\c:\program files\reasonlabs\epp\rsHelper.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\program files\reasonlabs\epp\rsHelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\DsNET Corp\aTube Catcher\aTubeCatcher.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2864 wrote to memory of 4388 N/A C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp
PID 2864 wrote to memory of 4388 N/A C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp
PID 2864 wrote to memory of 4388 N/A C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp
PID 4388 wrote to memory of 1640 N/A C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component0.exe
PID 4388 wrote to memory of 1640 N/A C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component0.exe
PID 4388 wrote to memory of 2424 N/A C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe
PID 4388 wrote to memory of 2424 N/A C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe
PID 4388 wrote to memory of 2424 N/A C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe
PID 1640 wrote to memory of 1772 N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component0.exe C:\Users\Admin\AppData\Local\Temp\cznj5ixj.exe
PID 1640 wrote to memory of 1772 N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component0.exe C:\Users\Admin\AppData\Local\Temp\cznj5ixj.exe
PID 1640 wrote to memory of 1772 N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component0.exe C:\Users\Admin\AppData\Local\Temp\cznj5ixj.exe
PID 1772 wrote to memory of 3476 N/A C:\Users\Admin\AppData\Local\Temp\cznj5ixj.exe C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe
PID 1772 wrote to memory of 3476 N/A C:\Users\Admin\AppData\Local\Temp\cznj5ixj.exe C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe
PID 3476 wrote to memory of 2156 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe
PID 3476 wrote to memory of 2156 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe
PID 4388 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp C:\Users\Admin\Downloads\atube-catcher-10.8.5-installer.exe
PID 4388 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp C:\Users\Admin\Downloads\atube-catcher-10.8.5-installer.exe
PID 4388 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp C:\Users\Admin\Downloads\atube-catcher-10.8.5-installer.exe
PID 4812 wrote to memory of 2244 N/A C:\Users\Admin\Downloads\atube-catcher-10.8.5-installer.exe C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp
PID 4812 wrote to memory of 2244 N/A C:\Users\Admin\Downloads\atube-catcher-10.8.5-installer.exe C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp
PID 4812 wrote to memory of 2244 N/A C:\Users\Admin\Downloads\atube-catcher-10.8.5-installer.exe C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp
PID 2424 wrote to memory of 4208 N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\installer.exe
PID 2424 wrote to memory of 4208 N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\installer.exe
PID 4208 wrote to memory of 1912 N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\installer.exe C:\Program Files\McAfee\Temp1471176745\installer.exe
PID 4208 wrote to memory of 1912 N/A C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\installer.exe C:\Program Files\McAfee\Temp1471176745\installer.exe
PID 2776 wrote to memory of 4292 N/A C:\Windows\SYSTEM32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 2776 wrote to memory of 4292 N/A C:\Windows\SYSTEM32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 2776 wrote to memory of 4292 N/A C:\Windows\SYSTEM32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 3592 wrote to memory of 3756 N/A C:\Windows\SYSTEM32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 3592 wrote to memory of 3756 N/A C:\Windows\SYSTEM32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 3592 wrote to memory of 3756 N/A C:\Windows\SYSTEM32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 5032 wrote to memory of 2380 N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe C:\Program Files\McAfee\WebAdvisor\UIHost.exe
PID 5032 wrote to memory of 2380 N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe C:\Program Files\McAfee\WebAdvisor\UIHost.exe
PID 5032 wrote to memory of 5148 N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe C:\Program Files\McAfee\WebAdvisor\updater.exe
PID 5032 wrote to memory of 5148 N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe C:\Program Files\McAfee\WebAdvisor\updater.exe
PID 5032 wrote to memory of 5188 N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe C:\Windows\system32\cmd.exe
PID 5032 wrote to memory of 5188 N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe C:\Windows\system32\cmd.exe
PID 3476 wrote to memory of 6972 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Windows\system32\rundll32.exe
PID 3476 wrote to memory of 6972 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Windows\system32\rundll32.exe
PID 6972 wrote to memory of 6952 N/A C:\Windows\system32\rundll32.exe C:\Windows\system32\runonce.exe
PID 6972 wrote to memory of 6952 N/A C:\Windows\system32\rundll32.exe C:\Windows\system32\runonce.exe
PID 6952 wrote to memory of 7844 N/A C:\Windows\system32\runonce.exe C:\Windows\System32\grpconv.exe
PID 6952 wrote to memory of 7844 N/A C:\Windows\system32\runonce.exe C:\Windows\System32\grpconv.exe
PID 3476 wrote to memory of 5248 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Windows\system32\wevtutil.exe
PID 3476 wrote to memory of 5248 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Windows\system32\wevtutil.exe
PID 3476 wrote to memory of 7672 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Windows\SYSTEM32\fltmc.exe
PID 3476 wrote to memory of 7672 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Windows\SYSTEM32\fltmc.exe
PID 3476 wrote to memory of 8096 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Windows\system32\wevtutil.exe
PID 3476 wrote to memory of 8096 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Windows\system32\wevtutil.exe
PID 3476 wrote to memory of 6520 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Program Files\ReasonLabs\EPP\rsWSC.exe
PID 3476 wrote to memory of 6520 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Program Files\ReasonLabs\EPP\rsWSC.exe
PID 3476 wrote to memory of 7260 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Program Files\ReasonLabs\EPP\rsClientSvc.exe
PID 3476 wrote to memory of 7260 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Program Files\ReasonLabs\EPP\rsClientSvc.exe
PID 3476 wrote to memory of 7808 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe
PID 3476 wrote to memory of 7808 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe
PID 3476 wrote to memory of 6304 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe
PID 3476 wrote to memory of 6304 N/A C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe
PID 4520 wrote to memory of 6128 N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe \??\c:\program files\reasonlabs\epp\rsHelper.exe
PID 4520 wrote to memory of 6128 N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe \??\c:\program files\reasonlabs\epp\rsHelper.exe
PID 4520 wrote to memory of 5556 N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe \??\c:\program files\reasonlabs\EPP\ui\EPP.exe
PID 4520 wrote to memory of 5556 N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe \??\c:\program files\reasonlabs\EPP\ui\EPP.exe
PID 5556 wrote to memory of 1456 N/A \??\c:\program files\reasonlabs\EPP\ui\EPP.exe C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe
PID 5556 wrote to memory of 1456 N/A \??\c:\program files\reasonlabs\EPP\ui\EPP.exe C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe
PID 1456 wrote to memory of 7000 N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy WMI provider

ransomware

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe

"C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe"

C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp

"C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp" /SL5="$80122,837551,832512,C:\Users\Admin\AppData\Local\Temp\atube-catcher-10.8.5-installer_GQ-DpU1.exe"

C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component0.exe

"C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component0.exe" -ip:"dui=68138b08-1fe0-4204-8ec7-0d10a591e99a&dit=20240627040946&is_silent=true&oc=ZB_RAV_Cross_Solo_Soft&p=fa70&a=100&b=&se=true" -i

C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe

"C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe" /affid 91082 PaidDistribution=true CountryCode=GB

C:\Users\Admin\AppData\Local\Temp\cznj5ixj.exe

"C:\Users\Admin\AppData\Local\Temp\cznj5ixj.exe" /silent

C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe

.\UnifiedStub-installer.exe /silent

C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

"C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe" -i -bn:ReasonLabs -pn:EPP -lpn:rav_antivirus -url:https://update.reasonsecurity.com/v2/live -dt:10

C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

"C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe" -pn:EPP -lpn:rav_antivirus -url:https://update.reasonsecurity.com/v2/live -bn:ReasonLabs -dt:10

C:\Users\Admin\Downloads\atube-catcher-10.8.5-installer.exe

"C:\Users\Admin\Downloads\atube-catcher-10.8.5-installer.exe"

C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp

"C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp" /SL5="$901D8,127121737,801280,C:\Users\Admin\Downloads\atube-catcher-10.8.5-installer.exe"

C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\installer.exe

"C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 4388 -ip 4388

C:\Program Files\McAfee\Temp1471176745\installer.exe

"C:\Program Files\McAfee\Temp1471176745\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4388 -s 1068

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\win32\WSSDep.dll"

C:\Windows\SysWOW64\regsvr32.exe

/s "C:\Program Files\McAfee\WebAdvisor\win32\WSSDep.dll"

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\x64\WSSDep.dll"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4388 -ip 4388

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\win32\DownloadScan.dll"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4388 -s 1068

C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe

"C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"

C:\Windows\SysWOW64\regsvr32.exe

/s "C:\Program Files\McAfee\WebAdvisor\win32\DownloadScan.dll"

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\x64\DownloadScan.dll"

C:\Program Files\McAfee\WebAdvisor\UIHost.exe

"C:\Program Files\McAfee\WebAdvisor\UIHost.exe"

C:\Program Files\McAfee\WebAdvisor\updater.exe

"C:\Program Files\McAfee\WebAdvisor\updater.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Windows\system32\rundll32.exe

"C:\Windows\system32\rundll32.exe" setupapi.dll,InstallHinfSection DefaultInstall 128 C:\Program Files\ReasonLabs\EPP\x64\rsKernelEngine.inf

C:\Windows\system32\runonce.exe

"C:\Windows\system32\runonce.exe" -r

C:\Windows\System32\grpconv.exe

"C:\Windows\System32\grpconv.exe" -o

C:\Windows\system32\wevtutil.exe

"C:\Windows\system32\wevtutil.exe" im C:\Program Files\ReasonLabs\EPP\x64\rsKernelEngineEvents.xml

C:\Windows\SYSTEM32\fltmc.exe

"fltmc.exe" load rsKernelEngine

C:\Windows\system32\wevtutil.exe

"C:\Windows\system32\wevtutil.exe" im C:\Program Files\ReasonLabs\EPP\elam\evntdrv.xml

C:\Program Files\ReasonLabs\EPP\rsWSC.exe

"C:\Program Files\ReasonLabs\EPP\rsWSC.exe" -i -i

C:\Program Files\ReasonLabs\EPP\rsWSC.exe

"C:\Program Files\ReasonLabs\EPP\rsWSC.exe"

C:\Program Files\ReasonLabs\EPP\rsClientSvc.exe

"C:\Program Files\ReasonLabs\EPP\rsClientSvc.exe" -i -i

C:\Program Files\ReasonLabs\EPP\rsClientSvc.exe

"C:\Program Files\ReasonLabs\EPP\rsClientSvc.exe"

C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe

"C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe" -i -i

C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe

"C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe"

C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe

"C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe" -i -i

C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe

"C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe"

\??\c:\program files\reasonlabs\epp\rsHelper.exe

"c:\program files\reasonlabs\epp\rsHelper.exe"

\??\c:\program files\reasonlabs\EPP\ui\EPP.exe

"c:\program files\reasonlabs\EPP\ui\EPP.exe" --minimized --first-run

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" "c:\program files\reasonlabs\EPP\ui\app.asar" --engine-path="c:\program files\reasonlabs\EPP" --minimized --first-run

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2212 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=2644 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2860 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3764 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files (x86)\DsNET Corp\aTube Catcher\aTubeCatcher.exe

"C:\Program Files (x86)\DsNET Corp\aTube Catcher\aTubeCatcher.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.atube.me/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xe0,0x108,0x7ff9ed8646f8,0x7ff9ed864708,0x7ff9ed864718

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4232 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2168 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2952 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4656 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5088 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4680 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4680 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5368 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5332 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5456 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3428 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5884 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5988 /prefetch:8

C:\program files\reasonlabs\epp\rsLitmus.A.exe

"C:\program files\reasonlabs\epp\rsLitmus.A.exe"

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4728 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4344 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4752 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4852 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4976 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=5100 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4968 /prefetch:2

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5136 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=5296 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5484 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /4

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Windows\System32\-1hxuj.exe

"C:\Windows\System32\-1hxuj.exe"

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=4764 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=4232 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=4768 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=5368 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=4620 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=5032 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff9eb17ab58,0x7ff9eb17ab68,0x7ff9eb17ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1836 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2256 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3148 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3016 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4372 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4580 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4760 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4900 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4316 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4884 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3736 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4860 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4528 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3136 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Windows\system32\WerFaultSecure.exe

"C:\Windows\system32\WerFaultSecure.exe" -protectedcrash -p 4520 -i 4520 -h 444 -j 432 -s 440 -d 1280

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4584 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5416 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5368 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5412 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5436 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4472 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Windows\system32\WerFaultSecure.exe

C:\Windows\system32\WerFaultSecure.exe -u -p 4520 -s 6576

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=2864 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:1

C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe

"C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe"

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=3248 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=4892 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=4140 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=3560 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4560 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4344 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5668 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4460 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4248 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5648 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5732 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe

"C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe"

C:\Windows\Temp\asw.522b695bbca8d837\avast_free_antivirus_setup_online_x64.exe

"C:\Windows\Temp\asw.522b695bbca8d837\avast_free_antivirus_setup_online_x64.exe" /cookie:mmm_ava_003_999_a8f_m:dlid_FAV-ONLINE-HP-GLOWEB-8703-1 /ga_clientid:e83592bd-c4cc-42fc-b90f-2720f1b1fc88 /edat_dir:C:\Windows\Temp\asw.522b695bbca8d837

C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe

"C:\Windows\Temp\asw.63e778b01ae0e962\instup.exe" /sfx:lite /sfxstorage:C:\Windows\Temp\asw.63e778b01ae0e962 /edition:1 /prod:ais /stub_context:33d6f37e-839e-4ed9-9367-144f35a4991a:9925720 /guid:9c44929b-bc33-4fab-b3d2-50816b9d201a /ga_clientid:e83592bd-c4cc-42fc-b90f-2720f1b1fc88 /no_delayed_installation /cookie:mmm_ava_003_999_a8f_m:dlid_FAV-ONLINE-HP-GLOWEB-8703-1 /ga_clientid:e83592bd-c4cc-42fc-b90f-2720f1b1fc88 /edat_dir:C:\Windows\Temp\asw.522b695bbca8d837

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe

"C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\instup.exe" /sfx /sfxstorage:C:\Windows\Temp\asw.63e778b01ae0e962 /edition:1 /prod:ais /stub_context:33d6f37e-839e-4ed9-9367-144f35a4991a:9925720 /guid:9c44929b-bc33-4fab-b3d2-50816b9d201a /ga_clientid:e83592bd-c4cc-42fc-b90f-2720f1b1fc88 /no_delayed_installation /cookie:mmm_ava_003_999_a8f_m:dlid_FAV-ONLINE-HP-GLOWEB-8703-1 /edat_dir:C:\Windows\Temp\asw.522b695bbca8d837 /online_installer

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe

"C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe" -checkGToolbar -elevated

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe

"C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe" /check_secure_browser

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe

"C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe" -checkChrome -elevated

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe

"C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe" -checkChromeReactivation -elevated -bc=AVFC

C:\Users\Public\Documents\aswOfferTool.exe

"C:\Users\Public\Documents\aswOfferTool.exe" -checkChromeReactivation -bc=AVFC

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe

"C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe" -checkChromeReactivation -elevated -bc=AVFC

C:\Users\Public\Documents\aswOfferTool.exe

"C:\Users\Public\Documents\aswOfferTool.exe" -checkChromeReactivation -bc=AVFC

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe

"C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe" -checkChrome -elevated

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\sbr.exe

"C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\sbr.exe" 2208 "Avast Antivirus setup" "Avast Antivirus is being installed. Do not shut down your computer!"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4452 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5620 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswRdr2.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswHwid.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswVmm.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswRvrt.cat

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /elaminst C:\Windows\system32\drivers\aswElam.sys

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe

"C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswOfferTool.exe" /install_secure_browser /brandcode:102 /cmd:"/make_default /language=en-US" /config_def:C:\Windows\Temp\asw.63e778b01ae0e962\config.def

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe

"C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe" /s /run_source=av_install /make_default /language=en-US

C:\Users\Admin\AppData\Local\Temp\nsq419E.tmp\AvastBrowserUpdateSetup.exe

AvastBrowserUpdateSetup.exe /silent /install "bundlename=Avast Secure Browser&appguid={A8504530-742B-42BC-895D-2BAD6406F698}&appname=Avast Secure Browser&needsadmin=true&lang=en-US&brand=3602&installargs=--no-create-user-shortcuts --make-chrome-default --force-default-win10 --auto-import-data%3Dmsedge --import-cookies"

C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe

"C:\Program Files (x86)\GUM4DC1.tmp\AvastBrowserUpdate.exe" /silent /install "bundlename=Avast Secure Browser&appguid={A8504530-742B-42BC-895D-2BAD6406F698}&appname=Avast Secure Browser&needsadmin=true&lang=en-US&brand=3602&installargs=--no-create-user-shortcuts --make-chrome-default --force-default-win10 --auto-import-data%3Dmsedge --import-cookies"

C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /regsvc

C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /regserver

C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserUpdateComRegisterShell64.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserUpdateComRegisterShell64.exe"

C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserUpdateComRegisterShell64.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserUpdateComRegisterShell64.exe"

C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserUpdateComRegisterShell64.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserUpdateComRegisterShell64.exe"

C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /ping 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-PGh3IHBoeXNtZW1vcnk9IjgiIHNzZT0iMSIgc3NlMj0iMSIgc3NlMz0iMSIgc3NzZTM9IjEiIHNzZTQxPSIxIiBzc2U0Mj0iMSIgYXZ4PSIxIi8-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMTkwNDEuMTI4OCIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0iezZEMzdDNzYwLThGRUQtNDhBNS1BNEE0LUNFQzA5NUIyRDhERH0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuOC4xNjk3LjYiIGxhbmc9ImVuLVVTIiBicmFuZD0iMzYwMiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIGluc3RhbGxfdGltZV9tcz0iNjI1Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /handoff "bundlename=Avast Secure Browser&appguid={A8504530-742B-42BC-895D-2BAD6406F698}&appname=Avast Secure Browser&needsadmin=true&lang=en-US&brand=3602&installargs=--no-create-user-shortcuts --make-chrome-default --force-default-win10 --auto-import-data%3Dmsedge --import-cookies" /installsource otherinstallcmd /sessionid "{6EF08800-5261-4939-8150-E64ACCC8262F}" /silent

C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /svc

C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\AvastBrowserInstaller.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\AvastBrowserInstaller.exe" --chrome --do-not-launch-chrome --hide-browser-override --show-developer-mode --suppress-first-run-bubbles --default-search-id=3 --default-search=bing.com --auto-pin-to-taskbar-on-run --adblock-mode-default=0 --no-create-user-shortcuts --make-chrome-default --force-default-win10 --auto-import-data=msedge --import-cookies --system-level

C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\CR_C8EFF.tmp\setup.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\CR_C8EFF.tmp\setup.exe" --install-archive="C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\CR_C8EFF.tmp\SECURE.PACKED.7Z" --chrome --do-not-launch-chrome --hide-browser-override --show-developer-mode --suppress-first-run-bubbles --default-search-id=3 --default-search=bing.com --auto-pin-to-taskbar-on-run --adblock-mode-default=0 --no-create-user-shortcuts --make-chrome-default --force-default-win10 --auto-import-data=msedge --import-cookies --system-level

C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\CR_C8EFF.tmp\setup.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\Install\{CB8AEC6F-B0B4-4047-AFE5-2C6F02255AA5}\CR_C8EFF.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=fake_url --annotation=plat=Win64 --annotation=prod=Avast --annotation=ver=126.0.25444.62 --initial-client-data=0x260,0x264,0x268,0x23c,0x26c,0x7ff77b9c7390,0x7ff77b9c739c,0x7ff77b9c73a8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=1616 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=5508 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:1

C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserCrashHandler.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserCrashHandler.exe"

C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserCrashHandler64.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserCrashHandler64.exe"

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

AvastBrowser.exe --heartbeat --install --create-profile

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Crashpad" --url=fake_url --annotation=plat=Win64 --annotation=prod=Avast --annotation=ver=126.0.25444.62 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffa02031c80,0x7ffa02031c8c,0x7ffa02031c98

C:\Program Files\McAfee\WebAdvisor\updater.exe

"C:\Program Files\McAfee\WebAdvisor\updater.exe"

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=gpu-process --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1976,i,16885433739704517134,7375515253828329120,262144 --variations-seed-version --mojo-platform-channel-handle=1964 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --field-trial-handle=2228,i,16885433739704517134,7375515253828329120,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:3

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --field-trial-handle=2408,i,16885433739704517134,7375515253828329120,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\elevation_service.exe

"C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\elevation_service.exe"

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=2424,i,16885433739704517134,7375515253828329120,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=3548,i,16885433739704517134,7375515253828329120,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:1

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3564,i,16885433739704517134,7375515253828329120,262144 --variations-seed-version --mojo-platform-channel-handle=4020 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3584,i,16885433739704517134,7375515253828329120,262144 --variations-seed-version --mojo-platform-channel-handle=4052 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4452,i,16885433739704517134,7375515253828329120,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=3780,i,16885433739704517134,7375515253828329120,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\elevation_service.exe

"C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5044 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3460 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4456,i,16885433739704517134,7375515253828329120,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5032,i,16885433739704517134,7375515253828329120,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5004 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4212 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5260 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

AvastBrowser.exe --silent-launch

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data" --url=fake_url --annotation=plat=Win64 --annotation=prod=Avast --annotation=ver=126.0.25444.62 --initial-client-data=0xf8,0xfc,0x100,0x84,0x104,0x7ffa02031c80,0x7ffa02031c8c,0x7ffa02031c98

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=gpu-process --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2132,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --field-trial-handle=2036,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:3

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --field-trial-handle=2404,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\elevation_service.exe

"C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\elevation_service.exe"

C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\elevation_service.exe

"C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\elevation_service.exe"

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=3604,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=3372,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=3764,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=3632,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=3616,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=3640,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=3912 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=3736,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=3816,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=3900 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=3620,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4116,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=3712,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4624,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4792,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5132,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5140,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5184,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4264,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4612,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5172,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5160,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4584,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5616,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:8

C:\Users\Admin\Downloads\MBSetup.exe

"C:\Users\Admin\Downloads\MBSetup.exe"

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6496,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6632,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6328,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=6820,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=6964 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6316,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=7116 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=7256,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5904,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=7428 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=7100,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=3352,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6488,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=7832 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=7260,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=7860 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=7268,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=8124 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=8268,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=8280 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6492,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=8444 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=8580,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=8484 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6536,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=8740 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=8984,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=9012 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=8116,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=7980 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=8264,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=7848 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=8424,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=7952 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.da3991b292e8e124 > \\.\pipe\chrome.nativeMessaging.out.da3991b292e8e124

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=9460,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=9480 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=9544,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=9536 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=9816,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=9832 /prefetch:2

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=4772,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=4596,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --enable-protect

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data" --url=fake_url --annotation=plat=Win64 --annotation=prod=Avast --annotation=ver=126.0.25444.62 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffa02031c80,0x7ffa02031c8c,0x7ffa02031c98

C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe" --registration reg-task --taskintr PT10M --runonce

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=9388,i,11482379087469386468,5825386713689185020,262144 --variations-seed-version --mojo-platform-channel-handle=9312 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\Installer\setup.exe

setup.exe /silent --create-shortcuts=0 --install-level=1 --system-level

C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\Installer\setup.exe

"C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=fake_url --annotation=plat=Win64 --annotation=prod=Avast --annotation=ver=126.0.25444.62 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff753537390,0x7ff75353739c,0x7ff7535373a8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=shortcut-pin-helper /prefetch:8 startpin "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk"

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

AvastBrowser.exe --check-run=src=installer --start-minimized

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data" --url=fake_url --annotation=plat=Win64 --annotation=prod=Avast --annotation=ver=126.0.25444.62 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffa02031c80,0x7ffa02031c8c,0x7ffa02031c98

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=gpu-process --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2032,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --field-trial-handle=1928,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:3

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --field-trial-handle=2412,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\elevation_service.exe

"C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\elevation_service.exe"

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=3224,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=3300 /prefetch:1

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=3232,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=3772,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=3768,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3792,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=4252,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\elevation_service.exe

"C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\elevation_service.exe"

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=4488,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=3220 /prefetch:2

C:\Program Files\Avast Software\Avast\AvEmUpdate.exe

"C:\Program Files\Avast Software\Avast\AvEmUpdate.exe" /installer /reg

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4372,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=shortcut-pin-helper /prefetch:8 has-startpin "C:\Users\Public\Desktop\Avast Secure Browser.lnk"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.33d2c2c329a97142 > \\.\pipe\chrome.nativeMessaging.out.33d2c2c329a97142

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k wsappx -p -s AppXSvc

C:\Program Files\Avast Software\Avast\AvEmUpdate.exe

"C:\Program Files\Avast Software\Avast\AvEmUpdate.exe" /installer

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4384,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=shortcut-pin-helper /prefetch:8 startpin "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk"

C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\Installer\chrmstp.exe

"C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings

C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\Installer\chrmstp.exe

"C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=fake_url --annotation=plat=Win64 --annotation=prod=Avast --annotation=ver=126.0.25444.62 --initial-client-data=0x260,0x264,0x268,0x23c,0x26c,0x7ff7cd247390,0x7ff7cd24739c,0x7ff7cd2473a8

C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\Installer\chrmstp.exe

"C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\Installer\chrmstp.exe" --system-level --verbose-logging --installerdata="C:\Program Files\AVAST Software\Browser\Application\initial_preferences" --create-shortcuts=1 --install-level=0 --no-pin-startmenu

C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\Installer\chrmstp.exe

"C:\Program Files\AVAST Software\Browser\Application\126.0.25444.62\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=fake_url --annotation=plat=Win64 --annotation=prod=Avast --annotation=ver=126.0.25444.62 --initial-client-data=0x264,0x268,0x26c,0x240,0x270,0x7ff7cd247390,0x7ff7cd24739c,0x7ff7cd2473a8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.b10e3e04cca82d84 > \\.\pipe\chrome.nativeMessaging.out.b10e3e04cca82d84

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=5972,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --enable-protect

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data" --url=fake_url --annotation=plat=Win64 --annotation=prod=Avast --annotation=ver=126.0.25444.62 --initial-client-data=0xf8,0xfc,0x100,0xe0,0x104,0x7ffa02031c80,0x7ffa02031c8c,0x7ffa02031c98

C:\Program Files\Avast Software\Avast\x86\RegSvr.exe

"C:\Program Files\Avast Software\Avast\x86\RegSvr.exe" "C:\Program Files\Avast Software\Avast\x86\aswAMSI.dll"

C:\Program Files\Avast Software\Avast\RegSvr.exe

"C:\Program Files\Avast Software\Avast\RegSvr.exe" "C:\Program Files\Avast Software\Avast\aswAMSI.dll"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.d052421bfca20c6f > \\.\pipe\chrome.nativeMessaging.out.d052421bfca20c6f

C:\Program Files\Avast Software\Avast\x86\RegSvr.exe

"C:\Program Files\Avast Software\Avast\x86\RegSvr.exe" "C:\Program Files\Avast Software\Avast\x86\asOutExt.dll"

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0

C:\Program Files\Avast Software\Avast\RegSvr.exe

"C:\Program Files\Avast Software\Avast\RegSvr.exe" "C:\Program Files\Avast Software\Avast\asOutExt.dll"

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" /install

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /catinstall:"C:\Program Files\Avast Software\Avast\setup\crts.cat" /basename:pkg_{af98c830-4f53-4176-a7b0-ec21fc603adc}.cat /crtid:D9D1E63123760F5EE0F69B6613E0933E9CBCAB11

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.d95aa8b848f45f80 > \\.\pipe\chrome.nativeMessaging.out.d95aa8b848f45f80

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0

C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe

"C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe" /skip_uptime /skip_remediations

C:\Program Files\Avast Software\Avast\defs\24062614\engsup.exe

"C:\Program Files\Avast Software\Avast\defs\24062614\engsup.exe" /prepare_definitions_folder

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6840,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:8

C:\Program Files\Avast Software\Avast\wsc_proxy.exe

"C:\Program Files\Avast Software\Avast\wsc_proxy.exe" /svc /register /ppl_svc

C:\Program Files\Avast Software\Avast\avDump.exe

"C:\Program Files\Avast Software\Avast\avDump.exe" --pid 1840 --exception_ptr 000000B5C2CFE920 --thread_id 10384 --dump_level 0 --handle_data 1 --dump_file "C:\ProgramData\Avast Software\Avast\log\unp311153372322128002x-manual.mdmp" --comment "Cause: VectoredExceptionHandler Reason: sd is not loaded Dump contains a C++ exception, its pointer is stored as Parameter[3] of the exception record. Use .ecxr to see the line of exception instantiation." --min_interval 60

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Program Files\Avast Software\Avast\defs\24062614\engsup.exe

"C:\Program Files\Avast Software\Avast\defs\24062614\engsup.exe" /get_latest_ga_client_id /get_latest_landingpageid_cookie /get_latest_pagedownloadid_cookie /get_latest_trpar

C:\Program Files\Avast Software\Avast\AvastUI.exe

"C:\Program Files\Avast Software\Avast\AvastUI.exe" /welcome

C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe

"C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5144 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5960 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:1

C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe

"C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe" /installmbtun

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "9" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf" "9" "4ba9030c7" "0000000000000140" "Service-0x0-3e7$\Default" "0000000000000154" "208" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun"

C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

"C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected

C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

"C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5364 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6084 /prefetch:8

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2336 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6040 /prefetch:1

C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe

"C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe" nowindow

C:\Windows\SysWOW64\cmd.exe

cmd.exe /C timeout /t 1 & "C:\Program Files\Mozilla Firefox\firefox.exe" -install -extension "C:\Users\Admin\AppData\Local\Temp\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi"

C:\Windows\SysWOW64\timeout.exe

timeout /t 1

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -install -extension "C:\Users\Admin\AppData\Local\Temp\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -install -extension C:\Users\Admin\AppData\Local\Temp\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="10224.0.481426852\285109426" -parentBuildID 20230214051806 -prefsHandle 1820 -prefMapHandle 1812 -prefsLen 22076 -prefMapSize 235121 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7c0f8935-d0ae-46cd-b763-88b0edd3af8c} 10224 "\\.\pipe\gecko-crash-server-pipe.10224" 1912 1eff8609758 gpu

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4736 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5444 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5820 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="10224.1.282468176\714024066" -parentBuildID 20230214051806 -prefsHandle 2500 -prefMapHandle 2496 -prefsLen 22927 -prefMapSize 235121 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7e6768fd-d17e-472c-8cb6-f9c9da21ed8b} 10224 "\\.\pipe\gecko-crash-server-pipe.10224" 2512 1efeb789658 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="10224.2.1884537893\570991526" -childID 1 -isForBrowser -prefsHandle 2896 -prefMapHandle 2892 -prefsLen 22965 -prefMapSize 235121 -jsInitHandle 1396 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b728eacc-306e-49fe-8905-bc43c488c35e} 10224 "\\.\pipe\gecko-crash-server-pipe.10224" 3296 1effaf49358 tab

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.3706b612d1234466 > \\.\pipe\chrome.nativeMessaging.out.3706b612d1234466

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="10224.3.1801103260\1765691897" -childID 2 -isForBrowser -prefsHandle 2788 -prefMapHandle 2884 -prefsLen 27616 -prefMapSize 235121 -jsInitHandle 1396 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b1d83db0-531a-429f-8a13-f1c7b5b9de84} 10224 "\\.\pipe\gecko-crash-server-pipe.10224" 2984 1effb990258 tab

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4580 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:8

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="10224.4.746004710\1923654117" -childID 3 -isForBrowser -prefsHandle 4804 -prefMapHandle 4800 -prefsLen 27696 -prefMapSize 235121 -jsInitHandle 1396 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a30535b2-6d39-45b6-b61e-0533678d3f03} 10224 "\\.\pipe\gecko-crash-server-pipe.10224" 4816 1f000658258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="10224.5.1285989759\101056106" -childID 4 -isForBrowser -prefsHandle 4964 -prefMapHandle 4968 -prefsLen 27696 -prefMapSize 235121 -jsInitHandle 1396 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {27f876d2-dbde-40c1-8035-c506cf794884} 10224 "\\.\pipe\gecko-crash-server-pipe.10224" 4952 1f00065a058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="10224.6.735841855\831069935" -childID 5 -isForBrowser -prefsHandle 5160 -prefMapHandle 5164 -prefsLen 27696 -prefMapSize 235121 -jsInitHandle 1396 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9e77b39b-4257-4640-bfb0-521562c19c72} 10224 "\\.\pipe\gecko-crash-server-pipe.10224" 5148 1eff8d43858 tab

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5832 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:2

C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe

"C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"

C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe

"C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\Program Files\Avast Software\Avast\AvastUI.exe

"C:\Program Files\Avast Software\Avast\AvastUI.exe" --type=gpu-process --field-trial-handle=6588,10398375192039739564,7394533638184863408,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --no-sandbox --disable-gpu-driver-bug-workarounds --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --log-severity=disable --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.3.3626.1895 Safari/537.36 Avastium (0.0.0) (Windows 10.0)" --lang=en-US --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --gpu-preferences=SAAAAAAAAADgAABwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=swiftshader-webgl --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --mojo-platform-channel-handle=5884 /prefetch:2

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\Program Files\Avast Software\Avast\AvastUI.exe

"C:\Program Files\Avast Software\Avast\AvastUI.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=6588,10398375192039739564,7394533638184863408,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --lang=en-US --service-sandbox-type=utility --no-sandbox --force-wave-audio --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --log-severity=disable --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.3.3626.1895 Safari/537.36 Avastium (0.0.0) (Windows 10.0)" --lang=en-US --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --mojo-platform-channel-handle=7872 /prefetch:8

C:\Program Files\Avast Software\Avast\AvastUI.exe

"C:\Program Files\Avast Software\Avast\AvastUI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=6588,10398375192039739564,7394533638184863408,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --lang=en-US --service-sandbox-type=none --no-sandbox --force-wave-audio --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --log-severity=disable --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.3.3626.1895 Safari/537.36 Avastium (0.0.0) (Windows 10.0)" --lang=en-US --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --mojo-platform-channel-handle=9092 /prefetch:8

C:\Program Files\Avast Software\Avast\AvastUI.exe

"C:\Program Files\Avast Software\Avast\AvastUI.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --field-trial-handle=6588,10398375192039739564,7394533638184863408,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --disable-gpu-compositing --lang=en-US --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --log-severity=disable --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.3.3626.1895 Safari/537.36 Avastium (0.0.0) (Windows 10.0)" --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=9008 /prefetch:1

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=gpu-process --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4276,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=3344 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4608,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5180,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=3292 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=4820,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5300 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6004 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5904 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5016 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3960 /prefetch:1

C:\Users\Admin\Downloads\MB-SupportTool.exe

"C:\Users\Admin\Downloads\MB-SupportTool.exe"

C:\Users\Admin\AppData\Local\Temp\7zSDD84.tmp\mbstub.exe

.\mbstub.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2252 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,9420101211931719236,15396226704701197139,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1796 /prefetch:1

C:\Users\Admin\AppData\Local\Temp\mwbEDC1.tmp\mb-support.exe

C:\Users\Admin\AppData\Local\Temp\mwbEDC1.tmp\mb-support.exe

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4800,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.25bb6a6158dbb46a > \\.\pipe\chrome.nativeMessaging.out.25bb6a6158dbb46a

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.855501e66526f081 > \\.\pipe\chrome.nativeMessaging.out.855501e66526f081

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.7f3aafc8c618b8d3 > \\.\pipe\chrome.nativeMessaging.out.7f3aafc8c618b8d3

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.2880abc6903240be > \\.\pipe\chrome.nativeMessaging.out.2880abc6903240be

C:\Program Files\Avast Software\Avast\AvastNM.exe

"C:\Program Files\Avast Software\Avast\AvastNM.exe" chrome-extension://lhnnoklckomcfdlknmjaenoodlpfdclc/ --parent-window=0

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=4104 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3268,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=1212,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:8

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=5236 --field-trial-handle=2216,i,10220617797359747651,13498624188017059222,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe

"C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe" /wac 0 /status on true /updatesubstatus none /scansubstatus none /settingssubstatus none

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=7040,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=7024 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --single-argument https://links.malwarebytes.com/link/pricing-inapp?version=5.1.5.116&x-prodcode=MBAM-C&x-token_secret=0RJqCl-jr1uEbqGi4UPgLkOn_aK-qoTxOMlCdtpUaHF4snk7qRPYTZXx59A7O4f3nQ1jPfyrhVwTH3_xVrRnop1Pna1mt-kimBJcR4O4h-CSLT1RUSMdfbZc9B2PPAx0&ADDITIONAL_machineid=abee2742cffdf47d1f545418e4a7fe39d9fd6a84&days_since_install=0&varID=mb5-buy-premium-dialog

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data" --url=fake_url --annotation=plat=Win64 --annotation=prod=Avast --annotation=ver=126.0.25444.62 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffa02031c80,0x7ffa02031c8c,0x7ffa02031c98

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=7048,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=7064 /prefetch:1

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=2092,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --extension-process --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=4856,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:2

C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\updatrpkg\mbupdatrV5.exe

"C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\updatrpkg\mbupdatrV5.exe" "C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE" "C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\UpdateControllerConfig.json" "C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE" "C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\staging" /db:dbupdate /su:no

C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /c

C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /cr

C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserCrashHandler.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserCrashHandler.exe"

C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserCrashHandler64.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\AvastBrowserCrashHandler64.exe"

C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /registermsihelper

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4712,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8

C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe

"C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /svc

C:\Program Files\Avast Software\Avast\AvastUI.exe

"C:\Program Files\Avast Software\Avast\AvastUI.exe"

C:\Program Files\Avast Software\Avast\AvastUI.exe

"C:\Program Files\Avast Software\Avast\AvastUI.exe"

C:\Program Files\Avast Software\Avast\AvastUI.exe

"C:\Program Files\Avast Software\Avast\AvastUI.exe"

C:\Program Files\Avast Software\Avast\AvastUI.exe

"C:\Program Files\Avast Software\Avast\AvastUI.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=5756 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=2000 --field-trial-handle=1868,i,12035342788457105524,15830484771943112745,131072 /prefetch:1

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=7132,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:8

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4732,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=7032 /prefetch:8

C:\Program Files\Avast Software\Avast\AvastUI.exe

"C:\Program Files\Avast Software\Avast\AvastUI.exe" --type=gpu-process --field-trial-handle=9036,4815800714172240693,12805695402099382065,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --no-sandbox --disable-gpu-driver-bug-workarounds --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.3.3626.1895 Safari/537.36 Avastium (0.0.0) (Windows 10.0)" --lang=en-US --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --gpu-preferences=SAAAAAAAAADgAABwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=swiftshader-webgl --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --mojo-platform-channel-handle=9056 /prefetch:2

C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe

"C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=3296,i,6611693264346672387,3961450312456734054,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:8

C:\Program Files\Avast Software\Avast\AvastUI.exe

"C:\Program Files\Avast Software\Avast\AvastUI.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=9036,4815800714172240693,12805695402099382065,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --lang=en-US --service-sandbox-type=utility --no-sandbox --force-wave-audio --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.3.3626.1895 Safari/537.36 Avastium (0.0.0) (Windows 10.0)" --lang=en-US --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --mojo-platform-channel-handle=6444 /prefetch:8

C:\Program Files\Avast Software\Avast\AvastUI.exe

"C:\Program Files\Avast Software\Avast\AvastUI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=9036,4815800714172240693,12805695402099382065,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --lang=en-US --service-sandbox-type=none --no-sandbox --force-wave-audio --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.3.3626.1895 Safari/537.36 Avastium (0.0.0) (Windows 10.0)" --lang=en-US --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --mojo-platform-channel-handle=6020 /prefetch:8

C:\Program Files\Avast Software\Avast\AvastUI.exe

"C:\Program Files\Avast Software\Avast\AvastUI.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --field-trial-handle=9036,4815800714172240693,12805695402099382065,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --disable-gpu-compositing --lang=en-US --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Avast\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.3.3626.1895 Safari/537.36 Avastium (0.0.0) (Windows 10.0)" --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=5484 /prefetch:1

C:\Program Files\Avast Software\Avast\VisthAux.exe

"C:\Program Files\Avast Software\Avast\VisthAux.exe" /runavservice

C:\Program Files\Avast Software\Avast\VisthAux.exe

"C:\Program Files\Avast Software\Avast\VisthAux.exe" /runtoolsservice

C:\Program Files\Avast Software\Avast\VisthAux.exe

"C:\Program Files\Avast Software\Avast\VisthAux.exe" /runtoolsservice

C:\Program Files\Avast Software\Avast\VisthAux.exe

"C:\Program Files\Avast Software\Avast\VisthAux.exe" /runavservice

Network

Country Destination Domain Proto
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
NL 23.62.61.97:443 www.bing.com tcp
US 8.8.8.8:53 73.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 8.8.8.8:53 97.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 d2dbdb0phbn9qb.cloudfront.net udp
GB 143.204.178.124:443 d2dbdb0phbn9qb.cloudfront.net tcp
GB 143.204.178.124:443 d2dbdb0phbn9qb.cloudfront.net tcp
US 8.8.8.8:53 images.sftcdn.net udp
US 23.219.230.135:443 images.sftcdn.net tcp
US 8.8.8.8:53 124.178.204.143.in-addr.arpa udp
US 8.8.8.8:53 135.230.219.23.in-addr.arpa udp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 gsf-fl.softonic.com udp
US 199.232.194.133:443 gsf-fl.softonic.com tcp
US 8.8.8.8:53 133.194.232.199.in-addr.arpa udp
US 8.8.8.8:53 86.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 shield.reasonsecurity.com udp
GB 18.244.140.124:443 shield.reasonsecurity.com tcp
US 8.8.8.8:53 124.140.244.18.in-addr.arpa udp
GB 18.244.140.124:443 shield.reasonsecurity.com tcp
US 8.8.8.8:53 analytics.apis.mcafee.com udp
US 54.149.101.6:443 analytics.apis.mcafee.com tcp
US 8.8.8.8:53 6.101.149.54.in-addr.arpa udp
US 8.8.8.8:53 sadownload.mcafee.com udp
SE 184.31.15.48:443 sadownload.mcafee.com tcp
US 8.8.8.8:53 48.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 track.analytics-data.io udp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 143.152.214.3.in-addr.arpa udp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
SE 184.31.15.48:443 sadownload.mcafee.com tcp
US 8.8.8.8:53 home.mcafee.com udp
BE 104.68.84.174:443 home.mcafee.com tcp
US 54.149.101.6:443 analytics.apis.mcafee.com tcp
US 8.8.8.8:53 174.84.68.104.in-addr.arpa udp
US 8.8.8.8:53 update.reasonsecurity.com udp
GB 18.154.84.81:443 update.reasonsecurity.com tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 8.8.8.8:53 electron-shell.reasonsecurity.com udp
GB 108.156.46.124:443 electron-shell.reasonsecurity.com tcp
US 8.8.8.8:53 81.84.154.18.in-addr.arpa udp
US 8.8.8.8:53 124.46.156.108.in-addr.arpa udp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 54.149.101.6:443 analytics.apis.mcafee.com tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 8.8.8.8:53 cdn.reasonsecurity.com udp
GB 52.84.90.44:443 cdn.reasonsecurity.com tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 8.8.8.8:53 31.243.111.52.in-addr.arpa udp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 8.8.8.8:53 sadownload.mcafee.com udp
SE 184.31.15.112:443 sadownload.mcafee.com tcp
US 8.8.8.8:53 112.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
BE 23.55.97.181:80 www.microsoft.com tcp
US 8.8.8.8:53 181.97.55.23.in-addr.arpa udp
US 8.8.8.8:53 track.analytics-data.io udp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 8.8.8.8:53 65.171.206.44.in-addr.arpa udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp
US 8.8.8.8:53 crl.certum.pl udp
NL 23.62.61.194:80 crl.certum.pl tcp
US 8.8.8.8:53 ccsca2021.ocsp-certum.com udp
NL 23.62.61.137:80 ccsca2021.ocsp-certum.com tcp
US 8.8.8.8:53 137.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 194.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
BE 23.55.97.181:80 www.microsoft.com tcp
US 8.8.8.8:53 config.reasonsecurity.com udp
GB 99.86.114.64:443 config.reasonsecurity.com tcp
US 8.8.8.8:53 64.114.86.99.in-addr.arpa udp
US 44.206.171.65:443 track.analytics-data.io tcp
US 8.8.8.8:53 api.reasonsecurity.com udp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 235.0.22.104.in-addr.arpa udp
US 8.8.8.8:53 mc6.reasonsecurity.com udp
US 52.34.150.127:443 mc6.reasonsecurity.com tcp
US 8.8.8.8:53 127.150.34.52.in-addr.arpa udp
GB 52.84.90.44:443 cdn.reasonsecurity.com tcp
US 8.8.8.8:53 cdn.reasonsecurity.com udp
US 8.8.8.8:53 cdn.reasonsecurity.com udp
GB 52.84.90.44:443 cdn.reasonsecurity.com tcp
GB 52.84.90.44:443 cdn.reasonsecurity.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 www.atube.me udp
CA 15.235.64.10:80 www.atube.me tcp
CA 15.235.64.10:80 www.atube.me tcp
CA 15.235.64.10:443 www.atube.me tcp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 8.8.8.8:53 10.64.235.15.in-addr.arpa udp
US 8.8.8.8:53 secure.gravatar.com udp
US 8.8.8.8:53 v0.wordpress.com udp
US 8.8.8.8:53 js.packageguardconecpt.com udp
US 8.8.8.8:53 stats.wp.com udp
US 192.0.76.3:443 stats.wp.com tcp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 graph.facebook.com udp
US 8.8.8.8:53 pixel.wp.com udp
GB 163.70.147.22:443 graph.facebook.com tcp
US 8.8.8.8:53 www.atube.me udp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 3.76.0.192.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 22.147.70.163.in-addr.arpa udp
CA 15.235.64.10:443 www.atube.me tcp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 104.22.0.235:443 api.reasonsecurity.com tcp
N/A 224.0.0.251:5353 udp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 73.239.69.13.in-addr.arpa udp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 track.analytics-data.io udp
US 3.214.152.143:443 track.analytics-data.io tcp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 msedgeextensions.b.tlu.dl.delivery.mp.microsoft.com udp
US 152.199.19.161:80 msedgeextensions.b.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 239.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 161.19.199.152.in-addr.arpa udp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 edr-api.reasonlabsapi.com udp
GB 143.204.176.113:443 edr-api.reasonlabsapi.com tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 8.8.8.8:53 113.176.204.143.in-addr.arpa udp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 3.214.152.143:443 track.analytics-data.io tcp
US 8.8.8.8:53 www.microsoft.com udp
BE 104.90.25.175:80 www.microsoft.com tcp
US 8.8.8.8:53 175.25.90.104.in-addr.arpa udp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 74.19.199.152.in-addr.arpa udp
US 104.22.0.235:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 submit.reasonsecurity.com udp
US 104.22.0.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 8.8.8.8:53 235.1.22.104.in-addr.arpa udp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:443 dns.google tcp
GB 18.244.114.41:443 tcp
GB 18.244.114.41:443 tcp
US 76.76.21.93:443 tcp
US 8.8.8.8:53 41.114.244.18.in-addr.arpa udp
US 8.8.8.8:53 93.21.76.76.in-addr.arpa udp
GB 18.245.162.106:443 tcp
US 3.214.152.143:443 track.analytics-data.io tcp
GB 13.224.132.39:443 tcp
GB 13.224.132.39:443 tcp
GB 13.224.245.61:443 tcp
GB 163.70.147.23:443 tcp
GB 18.245.162.106:443 tcp
GB 163.70.147.23:443 udp
GB 18.245.253.79:443 tcp
IE 74.125.193.92:443 tcp
GB 157.240.214.35:443 tcp
GB 18.245.162.106:443 tcp
IE 74.125.193.92:443 udp
US 8.8.8.8:53 106.162.245.18.in-addr.arpa udp
US 8.8.8.8:53 39.132.224.13.in-addr.arpa udp
US 8.8.8.8:53 61.245.224.13.in-addr.arpa udp
US 8.8.8.8:53 23.147.70.163.in-addr.arpa udp
US 8.8.8.8:53 79.253.245.18.in-addr.arpa udp
US 8.8.8.8:53 92.193.125.74.in-addr.arpa udp
US 8.8.8.8:53 35.214.240.157.in-addr.arpa udp
US 198.137.150.141:443 tcp
US 54.186.23.98:443 tcp
US 54.186.23.98:443 tcp
GB 142.250.179.238:443 tcp
GB 142.250.179.238:443 tcp
GB 142.250.179.238:443 tcp
GB 142.250.179.238:443 tcp
GB 142.250.179.238:443 tcp
GB 142.250.179.238:443 tcp
GB 142.250.179.238:443 udp
US 151.101.64.176:443 tcp
US 8.8.8.8:53 141.150.137.198.in-addr.arpa udp
US 8.8.8.8:53 227.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 98.23.186.54.in-addr.arpa udp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 176.64.101.151.in-addr.arpa udp
US 52.25.18.186:443 tcp
US 8.8.8.8:53 186.18.25.52.in-addr.arpa udp
US 52.25.18.186:443 tcp
US 3.214.152.143:443 track.analytics-data.io tcp
GB 13.224.132.39:443 tcp
US 76.76.21.93:443 tcp
US 76.76.21.93:443 tcp
US 3.214.152.143:443 track.analytics-data.io tcp
GB 13.224.132.39:443 tcp
GB 157.240.214.35:443 udp
US 8.8.8.8:443 dns.google udp
US 151.101.65.229:443 tcp
US 151.101.65.229:443 tcp
US 151.101.65.229:443 tcp
US 151.101.65.229:443 tcp
US 151.101.65.229:443 tcp
US 151.101.65.229:443 tcp
US 151.101.65.229:443 udp
US 8.8.8.8:53 229.65.101.151.in-addr.arpa udp
GB 18.245.162.106:443 tcp
US 54.186.23.98:443 tcp
US 54.186.23.98:443 tcp
US 54.186.23.98:443 tcp
IE 74.125.193.92:443 udp
GB 18.245.162.106:443 tcp
GB 142.250.179.238:443 udp
GB 18.244.155.128:443 tcp
US 52.25.18.186:443 tcp
US 104.19.230.21:443 tcp
US 104.19.229.21:443 udp
US 8.8.8.8:53 cdn.reasonsecurity.com udp
GB 52.84.90.21:443 cdn.reasonsecurity.com tcp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:443 dns.google tcp
GB 52.84.90.21:443 cdn.reasonsecurity.com tcp
US 8.8.8.8:53 128.155.244.18.in-addr.arpa udp
US 8.8.8.8:53 21.230.19.104.in-addr.arpa udp
US 8.8.8.8:53 21.90.84.52.in-addr.arpa udp
US 8.8.8.8:53 21.229.19.104.in-addr.arpa udp
US 54.186.23.98:443 tcp
US 104.22.0.235:443 submit.reasonsecurity.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
GB 18.244.114.41:443 tcp
GB 13.224.245.61:443 tcp
US 3.214.152.143:443 track.analytics-data.io tcp
GB 163.70.147.35:443 udp
GB 13.224.132.12:443 tcp
US 8.8.8.8:53 35.147.70.163.in-addr.arpa udp
US 8.8.8.8:53 12.132.224.13.in-addr.arpa udp
US 44.239.197.158:443 tcp
IE 74.125.193.92:443 udp
US 198.202.176.81:443 tcp
GB 142.250.179.238:443 udp
US 54.187.159.182:443 tcp
US 54.187.159.182:443 tcp
US 8.8.8.8:53 81.176.202.198.in-addr.arpa udp
US 8.8.8.8:53 158.197.239.44.in-addr.arpa udp
US 8.8.8.8:53 182.159.187.54.in-addr.arpa udp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.238:80 clients2.google.com tcp
GB 142.250.187.238:443 clients2.google.com tcp
US 8.8.8.8:53 clients2.googleusercontent.com udp
US 8.8.8.8:53 www.google.com udp
GB 172.217.16.225:443 clients2.googleusercontent.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 172.217.16.225:443 clients2.googleusercontent.com tcp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.200.14:443 apis.google.com tcp
US 54.149.101.6:443 analytics.apis.mcafee.com tcp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
US 8.8.8.8:443 dns.google udp
US 76.76.21.61:443 tcp
US 8.8.8.8:53 61.21.76.76.in-addr.arpa udp
US 76.76.21.61:443 tcp
US 8.8.8.8:53 api.reasonsecurity.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 68.9.67.172.in-addr.arpa udp
US 54.187.159.182:443 tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
GB 172.217.16.225:443 clients2.googleusercontent.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 2.169.217.172.in-addr.arpa udp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com tcp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.avast.com udp
BE 104.90.25.153:443 www.avast.com tcp
BE 104.90.25.153:443 www.avast.com tcp
US 8.8.8.8:53 cdn.cookielaw.org udp
US 8.8.8.8:53 static3.avast.com udp
US 8.8.8.8:53 153.25.90.104.in-addr.arpa udp
US 104.19.178.52:443 cdn.cookielaw.org tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
US 23.219.238.176:443 static3.avast.com tcp
US 23.219.238.176:443 static3.avast.com tcp
US 23.219.238.176:443 static3.avast.com tcp
US 23.219.238.176:443 static3.avast.com tcp
US 23.219.238.176:443 static3.avast.com tcp
US 23.219.238.176:443 static3.avast.com tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 172.64.155.119:443 geolocation.onetrust.com tcp
US 8.8.8.8:53 s.go-mpulse.net udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 8.8.8.8:53 assets.adobedtm.com udp
US 8.8.8.8:53 static.avast.com udp
US 23.219.238.176:443 static.avast.com tcp
BE 104.90.24.133:443 s.go-mpulse.net tcp
SE 23.34.232.228:443 assets.adobedtm.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 52.178.19.104.in-addr.arpa udp
US 8.8.8.8:53 176.238.219.23.in-addr.arpa udp
US 8.8.8.8:53 133.24.90.104.in-addr.arpa udp
US 8.8.8.8:53 119.155.64.172.in-addr.arpa udp
US 8.8.8.8:53 228.232.34.23.in-addr.arpa udp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 8.8.8.8:53 dpm.demdex.net udp
US 8.8.8.8:53 www.nortonlifelock.com udp
IE 52.209.70.65:443 dpm.demdex.net tcp
BE 104.90.25.237:443 www.nortonlifelock.com tcp
US 8.8.8.8:53 widget.trustpilot.com udp
GB 54.192.137.125:443 widget.trustpilot.com tcp
US 8.8.8.8:53 static.hotjar.com udp
US 8.8.8.8:53 mstatic.avast.com udp
GB 13.224.245.61:443 static.hotjar.com tcp
NL 20.50.2.44:443 mstatic.avast.com tcp
US 8.8.8.8:53 cm.everesttech.net udp
US 8.8.8.8:53 symantec.demdex.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 65.70.209.52.in-addr.arpa udp
US 8.8.8.8:53 237.25.90.104.in-addr.arpa udp
US 8.8.8.8:53 125.137.192.54.in-addr.arpa udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 44.2.50.20.in-addr.arpa udp
IE 63.34.25.224:443 symantec.demdex.net tcp
IE 54.194.32.70:443 cm.everesttech.net tcp
US 8.8.8.8:53 script.hotjar.com udp
GB 142.250.200.2:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 c.go-mpulse.net udp
US 8.8.8.8:53 oms.avast.com udp
GB 18.245.253.22:443 script.hotjar.com tcp
BE 104.90.24.133:443 c.go-mpulse.net tcp
IE 66.235.152.221:443 oms.avast.com tcp
US 8.8.8.8:53 vc.hotjar.io udp
US 8.8.8.8:53 znb3hblkjhhpwrz9k-gendigital.siteintercept.qualtrics.com udp
GB 99.84.9.52:443 vc.hotjar.io tcp
US 104.17.209.240:443 znb3hblkjhhpwrz9k-gendigital.siteintercept.qualtrics.com tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 142.250.180.10:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 siteintercept.qualtrics.com udp
US 8.8.8.8:53 trial-eum-clientnsv4-s.akamaihd.net udp
US 8.8.8.8:53 trial-eum-clienttons-s.akamaihd.net udp
BE 23.14.90.98:443 trial-eum-clientnsv4-s.akamaihd.net tcp
SE 2.21.97.16:443 trial-eum-clienttons-s.akamaihd.net tcp
US 8.8.8.8:53 x5s5cjyxbzngezt4473q-pvmebd-7d1a25ab3-clientnsv4-s.akamaihd.net udp
US 8.8.8.8:53 191-101-209-39_s-2-21-97-16_ts-1719461879-clienttons-s.akamaihd.net udp
BE 23.14.90.98:443 x5s5cjyxbzngezt4473q-pvmebd-7d1a25ab3-clientnsv4-s.akamaihd.net tcp
US 8.8.8.8:53 70.32.194.54.in-addr.arpa udp
US 8.8.8.8:53 224.25.34.63.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 22.253.245.18.in-addr.arpa udp
US 8.8.8.8:53 221.152.235.66.in-addr.arpa udp
US 8.8.8.8:53 52.9.84.99.in-addr.arpa udp
US 8.8.8.8:53 240.209.17.104.in-addr.arpa udp
US 8.8.8.8:53 10.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 98.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 16.97.21.2.in-addr.arpa udp
US 8.8.8.8:53 02179918.akstat.io udp
SE 2.21.97.72:443 191-101-209-39_s-2-21-97-16_ts-1719461879-clienttons-s.akamaihd.net tcp
US 8.8.8.8:53 72.97.21.2.in-addr.arpa udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 4711400.fls.doubleclick.net udp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 s.yimg.com udp
US 8.8.8.8:53 www.upsellit.com udp
US 8.8.8.8:53 privacyportal-de.onetrust.com udp
US 204.79.197.237:443 bat.bing.com tcp
GB 87.248.114.12:443 s.yimg.com tcp
US 8.8.8.8:53 analytics.ff.avast.com udp
GB 216.58.204.70:443 4711400.fls.doubleclick.net tcp
GB 163.70.147.23:443 connect.facebook.net tcp
US 34.117.39.58:443 www.upsellit.com tcp
US 172.64.155.119:443 privacyportal-de.onetrust.com tcp
US 34.117.223.223:443 analytics.ff.avast.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
GB 87.248.114.12:443 s.yimg.com tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
GB 216.58.204.70:443 4711400.fls.doubleclick.net udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
GB 163.70.147.23:443 connect.facebook.net udp
BE 64.233.167.156:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 ampcid.google.com udp
US 8.8.8.8:53 12.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 70.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 58.39.117.34.in-addr.arpa udp
US 8.8.8.8:53 223.223.117.34.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
GB 216.58.212.238:443 ampcid.google.com tcp
US 8.8.8.8:53 www.facebook.com udp
GB 163.70.147.35:443 www.facebook.com tcp
GB 163.70.147.35:443 www.facebook.com tcp
BE 64.233.167.156:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 156.167.233.64.in-addr.arpa udp
US 8.8.8.8:53 238.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
US 216.239.32.36:443 region1.analytics.google.com udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 34.117.223.223:443 analytics.ff.avast.com udp
GB 163.70.147.35:443 www.facebook.com udp
US 8.8.8.8:53 bits.avcdn.net udp
GB 23.208.241.36:443 bits.avcdn.net tcp
US 8.8.8.8:53 36.241.208.23.in-addr.arpa udp
US 8.8.8.8:53 track.analytics-data.io udp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 54.187.159.182:443 tcp
US 54.187.159.182:443 tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 54.187.159.182:443 tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 iavs9x.u.avcdn.net udp
SE 184.31.15.81:443 iavs9x.u.avcdn.net tcp
US 34.117.223.223:80 v7event.stats.avast.com tcp
GB 216.58.213.14:80 www.google-analytics.com tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 8.8.8.8:53 81.15.31.184.in-addr.arpa udp
SE 184.31.15.81:443 iavs9x.u.avcdn.net tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
SE 184.31.15.81:443 iavs9x.u.avcdn.net tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
SE 184.31.15.81:443 iavs9x.u.avcdn.net tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
SE 184.31.15.81:443 iavs9x.u.avcdn.net tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
SE 184.31.15.81:80 iavs9x.u.avcdn.net tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 8.8.8.8:53 analytics.avcdn.net udp
GB 216.58.213.14:80 www.google-analytics.com tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 44.206.171.65:443 track.analytics-data.io tcp
US 8.8.8.8:53 shepherd.ff.avast.com udp
US 8.8.8.8:53 shepherd.ff.avast.com udp
US 8.8.8.8:53 shepherd.ff.avast.com udp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 8.8.8.8:53 28.176.160.34.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 j0294597.iavs9x.u.avast.com udp
US 8.8.8.8:53 j0294597.iavs9x.u.avast.com udp
US 8.8.8.8:53 l4691727.iavs9x.u.avast.com udp
US 8.8.8.8:53 n4291289.iavs9x.u.avast.com udp
US 8.8.8.8:53 r6726306.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 y8002308.iavs9x.u.avast.com udp
US 8.8.8.8:53 j0294597.iavs9x.u.avast.com udp
US 8.8.8.8:53 j0294597.iavs9x.u.avast.com udp
US 8.8.8.8:53 l4691727.iavs9x.u.avast.com udp
US 8.8.8.8:53 n4291289.iavs9x.u.avast.com udp
US 8.8.8.8:53 r6726306.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 y8002308.iavs9x.u.avast.com udp
SE 184.31.15.51:80 y8002308.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 y8002308.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 y8002308.iavs9x.u.avast.com tcp
US 8.8.8.8:53 51.15.31.184.in-addr.arpa udp
SE 184.31.15.51:80 y8002308.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 y8002308.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 y8002308.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 y8002308.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 y8002308.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 y8002308.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 y8002308.iavs9x.u.avast.com tcp
US 8.8.8.8:53 f3461309.iavs9x.u.avast.com udp
US 8.8.8.8:53 f3461309.iavs9x.u.avast.com udp
US 8.8.8.8:53 h4444966.iavs9x.u.avast.com udp
US 8.8.8.8:53 n4291289.iavs9x.u.avast.com udp
US 8.8.8.8:53 r3802239.iavs9x.u.avast.com udp
US 8.8.8.8:53 r6726306.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 f3461309.iavs9x.u.avast.com udp
US 8.8.8.8:53 f3461309.iavs9x.u.avast.com udp
US 8.8.8.8:53 h4444966.iavs9x.u.avast.com udp
US 8.8.8.8:53 n4291289.iavs9x.u.avast.com udp
US 8.8.8.8:53 r3802239.iavs9x.u.avast.com udp
US 8.8.8.8:53 r6726306.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
US 8.8.8.8:53 b7210692.vps18.u.avcdn.net udp
US 8.8.8.8:53 b7210692.vps18.u.avcdn.net udp
US 8.8.8.8:53 h4444966.vps18.u.avcdn.net udp
US 8.8.8.8:53 p9854759.vps18.u.avcdn.net udp
US 8.8.8.8:53 r6726306.vps18.u.avcdn.net udp
US 8.8.8.8:53 s-vps18.avcdn.net udp
US 8.8.8.8:53 y9830512.vps18.u.avcdn.net udp
US 8.8.8.8:53 b7210692.vps18.u.avcdn.net udp
US 8.8.8.8:53 b7210692.vps18.u.avcdn.net udp
US 8.8.8.8:53 h4444966.vps18.u.avcdn.net udp
US 8.8.8.8:53 p9854759.vps18.u.avcdn.net udp
US 8.8.8.8:53 r6726306.vps18.u.avcdn.net udp
US 8.8.8.8:53 s-vps18.avcdn.net udp
US 8.8.8.8:53 y9830512.vps18.u.avcdn.net udp
SE 184.31.15.41:80 y9830512.vps18.u.avcdn.net tcp
SE 184.31.15.41:80 y9830512.vps18.u.avcdn.net tcp
SE 184.31.15.41:80 y9830512.vps18.u.avcdn.net tcp
US 8.8.8.8:53 shepherd.ff.avast.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 34.117.223.223:443 v7event.stats.avast.com tcp
US 34.117.223.223:443 v7event.stats.avast.com tcp
US 8.8.8.8:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
US 8.8.8.8:53 ipm.avcdn.net udp
US 8.8.8.8:53 ipm.avcdn.net udp
US 34.111.24.1:443 ipm.avcdn.net tcp
US 8.8.8.8:53 ipmcdn.avast.com udp
US 8.8.8.8:53 ssl.google-analytics.com udp
US 8.8.8.8:53 analytics.ff.avast.com udp
US 34.117.223.223:443 analytics.ff.avast.com tcp
US 8.8.8.8:53 ipmcdn.avast.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
GB 23.214.150.81:443 ipmcdn.avast.com tcp
US 8.8.8.8:53 8.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 81.150.214.23.in-addr.arpa udp
US 8.8.8.8:53 1.24.111.34.in-addr.arpa udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 34.117.223.223:443 v7event.stats.avast.com tcp
SE 184.31.15.41:80 y9830512.vps18.u.avcdn.net tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.51:80 r6726306.iavs9x.u.avast.com tcp
SE 184.31.15.41:80 y9830512.vps18.u.avcdn.net tcp
SE 184.31.15.41:80 y9830512.vps18.u.avcdn.net tcp
SE 184.31.15.41:80 y9830512.vps18.u.avcdn.net tcp
SE 184.31.15.41:80 y9830512.vps18.u.avcdn.net tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 cdn-av-download.avastbrowser.com udp
SE 184.31.15.83:443 cdn-av-download.avastbrowser.com tcp
US 8.8.8.8:53 83.15.31.184.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 stats.securebrowser.com udp
US 104.20.87.8:443 stats.securebrowser.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 8.87.20.104.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 update.avastbrowser.com udp
US 104.22.78.87:443 update.avastbrowser.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 104.22.78.87:443 update.avastbrowser.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 browser-update.avast.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
SE 184.31.15.66:80 browser-update.avast.com tcp
US 8.8.8.8:53 87.78.22.104.in-addr.arpa udp
US 8.8.8.8:53 66.15.31.184.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
US 54.186.23.98:443 tcp
US 54.186.23.98:443 tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 analytics.apis.mcafee.com udp
US 35.80.226.215:443 analytics.apis.mcafee.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 215.226.80.35.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 02179918.akstat.io udp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
BE 104.90.24.133:443 02179918.akstat.io udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 id.google.com udp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
PL 172.217.16.3:443 id.google.com tcp
GB 142.250.180.10:443 content-autofill.googleapis.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 3.16.217.172.in-addr.arpa udp
GB 142.250.179.238:443 play.google.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
GB 142.250.187.238:443 consent.google.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 www.malwarebytes.com udp
US 192.0.66.233:443 www.malwarebytes.com tcp
US 192.0.66.233:443 www.malwarebytes.com tcp
US 8.8.8.8:53 dev.visualwebsiteoptimizer.com udp
US 8.8.8.8:53 plausible.io udp
US 34.96.102.137:443 dev.visualwebsiteoptimizer.com tcp
GB 143.244.38.136:443 plausible.io tcp
US 192.0.76.3:443 pixel.wp.com tcp
GB 143.244.38.136:443 plausible.io udp
GB 143.244.38.136:443 plausible.io tcp
US 34.96.102.137:443 dev.visualwebsiteoptimizer.com udp
US 34.96.102.137:443 dev.visualwebsiteoptimizer.com udp
US 8.8.8.8:53 genesis.malwarebytes.com udp
US 8.8.8.8:53 233.66.0.192.in-addr.arpa udp
US 8.8.8.8:53 136.38.244.143.in-addr.arpa udp
US 23.21.88.231:443 genesis.malwarebytes.com tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
US 172.64.155.119:443 privacyportal-de.onetrust.com tcp
US 8.8.8.8:53 231.88.21.23.in-addr.arpa udp
US 8.8.8.8:53 privacyportal.onetrust.com udp
US 192.0.66.233:443 www.malwarebytes.com tcp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
GB 143.244.38.136:443 plausible.io tcp
US 23.21.88.231:443 genesis.malwarebytes.com tcp
US 8.8.8.8:53 137.32.18.104.in-addr.arpa udp
US 192.0.76.3:443 pixel.wp.com udp
US 172.64.155.119:443 privacyportal.onetrust.com tcp
US 8.8.8.8:53 r1.visualwebsiteoptimizer.com udp
US 35.245.208.72:443 r1.visualwebsiteoptimizer.com tcp
US 8.8.8.8:53 update.avastbrowser.com udp
US 8.8.8.8:53 update.avastbrowser.com udp
US 172.67.15.96:443 update.avastbrowser.com tcp
US 8.8.8.8:53 72.208.245.35.in-addr.arpa udp
US 8.8.8.8:53 96.15.67.172.in-addr.arpa udp
US 8.8.8.8:53 browser-update.avast.com udp
US 8.8.8.8:53 browser-update.avast.com udp
US 8.8.8.8:53 config.avast.securebrowser.com udp
US 8.8.8.8:53 config.avast.securebrowser.com udp
US 8.8.8.8:53 stats.securebrowser.com udp
US 8.8.8.8:53 stats.securebrowser.com udp
SE 184.31.15.113:443 browser-update.avast.com tcp
US 104.20.86.8:443 stats.securebrowser.com tcp
US 104.20.87.8:443 stats.securebrowser.com tcp
US 8.8.8.8:53 113.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 8.86.20.104.in-addr.arpa udp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 sadownload.mcafee.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
SE 184.31.15.112:443 sadownload.mcafee.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 s-install.avcdn.net udp
US 8.8.8.8:53 s-install.avcdn.net udp
US 8.8.8.8:53 update.avastbrowser.com udp
US 8.8.8.8:53 update.avastbrowser.com udp
SE 23.34.233.8:443 s-install.avcdn.net tcp
US 8.8.8.8:53 stats.securebrowser.com udp
US 8.8.8.8:53 stats.securebrowser.com udp
US 104.22.79.87:443 update.avastbrowser.com tcp
US 104.20.86.8:443 stats.securebrowser.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 browser-update.avast.com udp
US 8.8.8.8:53 browser-update.avast.com udp
SE 184.31.15.66:443 browser-update.avast.com tcp
US 8.8.8.8:53 8.233.34.23.in-addr.arpa udp
US 8.8.8.8:53 87.79.22.104.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.4.4:443 dns.google udp
US 172.67.15.96:443 update.avastbrowser.com tcp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 api2.amplitude.com udp
US 44.241.189.153:443 api2.amplitude.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 20.60.153.225:443 tcp
US 8.8.8.8:53 153.189.241.44.in-addr.arpa udp
US 35.245.208.72:443 r1.visualwebsiteoptimizer.com tcp
US 151.101.129.55:443 tcp
US 8.8.8.8:53 225.153.60.20.in-addr.arpa udp
US 8.8.8.8:53 55.129.101.151.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 104.20.87.8:443 stats.securebrowser.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 ip-info.ff.avast.com udp
US 8.8.8.8:53 ip-info.ff.avast.com udp
US 34.149.149.62:443 ip-info.ff.avast.com tcp
US 8.8.8.8:53 config.avast.securebrowser.com udp
US 8.8.8.8:53 config.avast.securebrowser.com udp
US 8.8.8.8:53 update.avastbrowser.com udp
US 8.8.8.8:53 update.avastbrowser.com udp
US 8.8.8.8:53 easylist-downloads.adblockplus.org udp
US 8.8.8.8:53 easylist-downloads.adblockplus.org udp
US 172.67.15.96:443 update.avastbrowser.com tcp
US 172.67.15.96:443 update.avastbrowser.com tcp
US 172.67.15.96:443 update.avastbrowser.com tcp
GB 2.16.34.16:443 easylist-downloads.adblockplus.org tcp
US 104.20.87.8:443 config.avast.securebrowser.com tcp
US 8.8.8.8:53 config.avast.securebrowser.com udp
US 8.8.8.8:53 config.avast.securebrowser.com udp
US 8.8.8.8:53 avast_browser_tiles.tiles.ampfeed.com udp
US 8.8.8.8:53 avast_browser_tiles.tiles.ampfeed.com udp
US 8.8.8.8:53 ip-info.ff.avast.com udp
US 8.8.8.8:53 ip-info.ff.avast.com udp
US 8.8.8.8:53 shepherd.ff.avast.com udp
US 8.8.8.8:53 shepherd.ff.avast.com udp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 23.219.248.132:443 avast_browser_tiles.tiles.ampfeed.com tcp
US 34.149.149.62:443 ip-info.ff.avast.com tcp
US 104.20.86.8:443 config.avast.securebrowser.com tcp
US 8.8.8.8:53 62.149.149.34.in-addr.arpa udp
US 8.8.8.8:53 132.248.219.23.in-addr.arpa udp
US 8.8.8.8:53 engagement-content.avastbrowser.com udp
US 8.8.8.8:53 engagement-content.avastbrowser.com udp
US 8.8.8.8:53 api.accuweather.com udp
US 172.67.15.96:443 engagement-content.avastbrowser.com tcp
US 172.67.15.96:443 engagement-content.avastbrowser.com tcp
US 172.67.15.96:443 engagement-content.avastbrowser.com tcp
US 172.67.15.96:443 engagement-content.avastbrowser.com tcp
US 172.67.15.96:443 engagement-content.avastbrowser.com tcp
US 172.67.15.96:443 engagement-content.avastbrowser.com tcp
NL 23.72.252.49:443 api.accuweather.com tcp
NL 23.72.252.49:443 api.accuweather.com tcp
US 8.8.8.8:53 ip-info.ff.avast.com udp
US 8.8.8.8:53 49.252.72.23.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 ip-info.ff.avast.com udp
US 34.149.149.62:443 ip-info.ff.avast.com tcp
US 172.67.15.96:443 engagement-content.avastbrowser.com tcp
US 8.8.8.8:53 emupdate.avcdn.net udp
US 8.8.8.8:53 emupdate.avcdn.net udp
SE 184.31.15.42:80 emupdate.avcdn.net tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
SE 184.31.15.42:443 emupdate.avcdn.net tcp
US 8.8.8.8:53 42.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 uupdate.avast.com udp
US 8.8.8.8:53 uupdate.avast.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
SE 184.31.15.98:80 uupdate.avast.com tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 yesno.ff.avast.com udp
US 8.8.8.8:53 98.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
SE 23.34.233.8:80 honzik.avcdn.net tcp
US 8.8.4.4:443 dns.google udp
US 151.101.193.55:443 tcp
US 8.8.8.8:53 55.193.101.151.in-addr.arpa udp
US 35.167.152.79:443 tcp
US 35.167.152.79:443 tcp
US 104.22.79.87:443 engagement-content.avastbrowser.com tcp
US 8.8.8.8:53 79.152.167.35.in-addr.arpa udp
GB 142.250.180.10:443 content-autofill.googleapis.com udp
US 172.67.15.96:443 engagement-content.avastbrowser.com tcp
US 8.8.8.8:53 s-overseer.avcdn.net udp
SE 184.31.15.56:443 s-overseer.avcdn.net tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 google-analytics.com udp
GB 172.217.169.4:443 google-analytics.com tcp
US 8.8.8.8:53 56.15.31.184.in-addr.arpa udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 ark.mwbsys.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 8.8.8.8:53 v7.stats.avast.com udp
US 3.232.121.120:443 ark.mwbsys.com tcp
US 8.8.8.8:53 v7.stats.avast.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
US 34.117.223.223:443 v7.stats.avast.com tcp
US 8.8.8.8:53 cdn.mwbsys.com udp
GB 108.156.46.38:443 cdn.mwbsys.com tcp
US 8.8.8.8:53 4.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 120.121.232.3.in-addr.arpa udp
US 104.22.79.87:443 engagement-content.avastbrowser.com tcp
US 8.8.8.8:53 38.46.156.108.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
GB 216.58.213.14:80 www.google-analytics.com tcp
US 34.117.223.223:80 v7.stats.avast.com tcp
US 3.232.121.120:443 ark.mwbsys.com tcp
US 8.8.8.8:53 cdn.mwbsys.com udp
GB 108.156.46.87:443 cdn.mwbsys.com tcp
US 8.8.8.8:53 87.46.156.108.in-addr.arpa udp
US 3.232.121.120:443 ark.mwbsys.com tcp
US 8.8.8.8:53 cdn.mwbsys.com udp
GB 108.156.46.38:443 cdn.mwbsys.com tcp
US 3.232.121.120:443 ark.mwbsys.com tcp
US 8.8.8.8:53 cdn.mwbsys.com udp
GB 108.156.46.45:443 cdn.mwbsys.com tcp
US 104.22.79.87:443 engagement-content.avastbrowser.com tcp
US 8.8.8.8:53 45.46.156.108.in-addr.arpa udp
US 3.232.121.120:443 ark.mwbsys.com tcp
US 35.245.208.72:443 r1.visualwebsiteoptimizer.com tcp
US 8.8.8.8:53 cdn.mwbsys.com udp
GB 108.156.46.24:443 cdn.mwbsys.com tcp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 24.46.156.108.in-addr.arpa udp
US 8.8.8.8:53 beacons3.gvt2.com udp
GB 216.58.213.3:443 beacons3.gvt2.com tcp
GB 216.58.213.3:443 beacons3.gvt2.com tcp
GB 216.58.213.3:443 beacons3.gvt2.com udp
US 8.8.8.8:53 3.213.58.216.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 104.22.79.87:443 engagement-content.avastbrowser.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 104.22.79.87:443 engagement-content.avastbrowser.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 api.reasonsecurity.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:443 dns.google tcp
IE 74.125.193.92:443 udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
IE 74.125.193.92:443 tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 ipv4.am.i.mullvad.net udp
SE 45.83.223.233:443 ipv4.am.i.mullvad.net tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 holocron.mwbsys.com udp
US 3.209.127.22:443 holocron.mwbsys.com tcp
US 8.8.8.8:53 233.223.83.45.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 3.209.127.22:443 holocron.mwbsys.com tcp
US 104.22.79.87:443 engagement-content.avastbrowser.com tcp
US 8.8.8.8:53 22.127.209.3.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.238:443 clients2.google.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 13.107.21.239:443 edge.microsoft.com tcp
GB 142.250.187.238:443 clients2.google.com tcp
US 8.8.8.8:53 clients2.googleusercontent.com udp
GB 172.217.16.225:443 clients2.googleusercontent.com udp
US 8.8.8.8:53 msedgeextensions.b.tlu.dl.delivery.mp.microsoft.com udp
SE 184.31.15.42:80 msedgeextensions.b.tlu.dl.delivery.mp.microsoft.com tcp
GB 172.217.16.225:443 clients2.googleusercontent.com tcp
US 8.8.8.8:53 239.21.107.13.in-addr.arpa udp
US 35.245.208.72:443 r1.visualwebsiteoptimizer.com tcp
US 104.22.79.87:443 engagement-content.avastbrowser.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 api2.amplitude.com udp
US 44.235.10.168:443 api2.amplitude.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 168.10.235.44.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.4.4:443 dns.google udp
US 8.8.4.4:443 dns.google tcp
GB 142.250.187.195:443 tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 195.187.250.142.in-addr.arpa udp
US 104.22.79.87:443 engagement-content.avastbrowser.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 spocs.getpocket.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 34.117.188.166:443 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 getpocket.cdn.mozilla.net udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 34.120.5.221:443 getpocket.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 52.25.179.107:443 shavar.services.mozilla.com tcp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 107.179.25.52.in-addr.arpa udp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
US 8.8.8.8:53 analytics.apis.mcafee.com udp
US 52.35.147.103:443 analytics.apis.mcafee.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 103.147.35.52.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 35.245.208.72:443 r1.visualwebsiteoptimizer.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 3.219.36.92:443 holocron.mwbsys.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 92.36.219.3.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 crl.comodoca.com udp
US 172.64.149.23:80 crl.comodoca.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 ipm.avcdn.net udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 34.149.149.62:80 ip-info.ff.avast.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 123.35.104.34.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 iris.mwbsys.com udp
US 54.236.97.178:443 iris.mwbsys.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 178.97.236.54.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.4.4:443 dns.google udp
GB 2.16.34.16:443 easylist-downloads.adblockplus.org tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 35.245.208.72:443 r1.visualwebsiteoptimizer.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.4.4:443 dns.google udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
GB 142.250.187.238:443 clients2.google.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 ark.mwbsys.com udp
US 3.232.121.120:443 ark.mwbsys.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 cdn.mwbsys.com udp
US 35.245.208.72:443 r1.visualwebsiteoptimizer.com tcp
GB 108.156.46.24:443 cdn.mwbsys.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 3.232.121.120:443 ark.mwbsys.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 3.232.121.120:443 ark.mwbsys.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 mbst.mwbsys.com udp
GB 13.224.222.12:443 mbst.mwbsys.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 downloads.malwarebytes.com udp
GB 216.137.44.5:443 downloads.malwarebytes.com tcp
US 8.8.8.8:53 download.bleepingcomputer.com udp
US 8.8.8.8:53 12.222.224.13.in-addr.arpa udp
US 104.20.184.56:443 download.bleepingcomputer.com tcp
US 8.8.8.8:53 5.44.137.216.in-addr.arpa udp
US 8.8.8.8:53 56.184.20.104.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
GB 142.250.187.195:443 udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 104.18.38.233:80 crl.comodoca.com tcp
US 104.18.38.233:80 crl.comodoca.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 3.232.121.120:443 ark.mwbsys.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 ocsp.thawte.com udp
US 152.199.19.74:80 ocsp.thawte.com tcp
US 8.8.8.8:53 crl.thawte.com udp
SE 192.229.221.95:80 crl.thawte.com tcp
US 152.199.19.74:80 ocsp.thawte.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 ocsp.starfieldtech.com udp
US 192.124.249.22:80 ocsp.starfieldtech.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 22.249.124.192.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 54.187.119.242:443 tcp
US 54.187.119.242:443 tcp
US 8.8.8.8:53 242.119.187.54.in-addr.arpa udp
US 54.187.119.242:443 tcp
GB 142.250.187.195:443 udp
US 35.245.208.72:443 r1.visualwebsiteoptimizer.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
GB 142.250.187.195:443 udp
GB 142.250.187.195:443 tcp
N/A 127.0.0.1:27275 tcp
N/A 127.0.0.1:18821 tcp
N/A 127.0.0.1:7754 tcp
N/A 127.0.0.1:27275 tcp
N/A 127.0.0.1:18821 tcp
N/A 127.0.0.1:7754 tcp
US 35.245.208.72:443 r1.visualwebsiteoptimizer.com tcp
N/A 127.0.0.1:27275 tcp
N/A 127.0.0.1:18821 tcp
N/A 127.0.0.1:7754 tcp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
US 34.149.149.62:443 ip-info.ff.avast.com tcp
GB 216.137.44.5:443 downloads.malwarebytes.com tcp
GB 216.137.44.5:443 downloads.malwarebytes.com tcp
US 192.0.66.233:443 www.malwarebytes.com tcp
N/A 127.0.0.1:27275 tcp
N/A 127.0.0.1:18821 tcp
N/A 127.0.0.1:7754 tcp
US 34.96.102.137:443 dev.visualwebsiteoptimizer.com tcp
US 20.60.153.225:443 tcp
GB 143.244.38.136:443 plausible.io tcp
US 192.0.76.3:443 pixel.wp.com tcp
US 34.96.102.137:443 dev.visualwebsiteoptimizer.com udp
US 34.96.102.137:443 dev.visualwebsiteoptimizer.com udp
GB 143.244.38.136:443 plausible.io udp
GB 143.244.38.136:443 plausible.io tcp
US 23.21.88.231:443 genesis.malwarebytes.com tcp
US 34.117.39.58:443 www.upsellit.com tcp
BE 104.68.89.134:443 tcp
US 13.107.21.237:443 bat.bing.com tcp
SE 23.201.43.51:443 tcp
BE 64.233.167.156:443 stats.g.doubleclick.net tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
GB 142.250.178.2:443 udp
US 13.107.42.14:443 tcp
US 192.28.144.124:443 tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 134.89.68.104.in-addr.arpa udp
US 8.8.8.8:53 51.43.201.23.in-addr.arpa udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
US 151.101.193.55:443 tcp
US 34.117.39.58:443 www.upsellit.com udp
US 8.8.8.8:53 124.144.28.192.in-addr.arpa udp
US 8.8.8.8:53 sirius.mwbsys.com udp
US 3.210.87.158:443 sirius.mwbsys.com tcp
US 8.8.8.8:53 cdn.mwbsys.com udp
GB 108.156.46.24:443 cdn.mwbsys.com tcp
US 8.8.8.8:53 158.87.210.3.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 update.avastbrowser.com udp
US 104.22.78.87:443 update.avastbrowser.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 104.22.78.87:443 update.avastbrowser.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 104.22.78.87:443 update.avastbrowser.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
GB 142.250.187.195:443 udp
GB 142.250.187.195:443 tcp
US 8.8.8.8:53 update.reasonsecurity.com udp
GB 18.154.84.54:443 update.reasonsecurity.com tcp
US 8.8.8.8:53 54.84.154.18.in-addr.arpa udp
US 104.22.78.87:443 update.avastbrowser.com tcp
US 35.245.208.72:443 r1.visualwebsiteoptimizer.com tcp
US 35.245.208.72:443 r1.visualwebsiteoptimizer.com tcp
US 8.8.8.8:53 www.avast.com udp
US 8.8.8.8:53 cdn.cookielaw.org udp
US 8.8.8.8:53 static3.avast.com udp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 172.64.155.119:443 geolocation.onetrust.com tcp
US 8.8.8.8:53 www.nortonlifelock.com udp
BE 104.90.25.237:443 www.nortonlifelock.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 static.hotjar.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 s.yimg.com udp
US 8.8.8.8:53 c.go-mpulse.net udp
GB 13.224.245.87:443 static.hotjar.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 87.248.114.12:443 s.yimg.com tcp
BE 23.55.96.141:443 c.go-mpulse.net udp
US 34.117.223.223:443 v7.stats.avast.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 34.117.223.223:443 v7.stats.avast.com tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 widget.trustpilot.com udp
GB 54.192.137.4:443 widget.trustpilot.com tcp
US 8.8.8.8:53 bat.bing.com udp
US 13.107.21.237:443 bat.bing.com tcp
US 8.8.8.8:53 4711400.fls.doubleclick.net udp
GB 216.58.204.70:443 4711400.fls.doubleclick.net udp
US 8.8.8.8:53 oms.avast.com udp
GB 216.58.204.70:443 4711400.fls.doubleclick.net tcp
IE 66.235.152.221:443 oms.avast.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 216.239.34.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 87.245.224.13.in-addr.arpa udp
US 8.8.8.8:53 141.96.55.23.in-addr.arpa udp
US 8.8.8.8:53 4.137.192.54.in-addr.arpa udp
US 8.8.4.4:443 dns.google udp
GB 142.250.187.195:443 udp
GB 142.250.187.195:443 tcp
US 34.149.149.62:80 ip-info.ff.avast.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp

Files

memory/2864-0-0x0000000000400000-0x00000000004D8000-memory.dmp

memory/2864-2-0x0000000000401000-0x00000000004B7000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-SOSVQ.tmp\atube-catcher-10.8.5-installer_GQ-DpU1.tmp

MD5 9b3a9a19f545f32bc0d061b202f6ba5e
SHA1 ac41d0939dc69685e3dded3f7687a4b4d6e11189
SHA256 c200f9b96997a67b25c9ed9df8e17b647319313b18d83b6bbc9ab96c0b3d602a
SHA512 786c697c51a050ee5cdd802bc0db1f63c4a93197c66ba0c7195a23a44e262364f9546da426bbfde1f8244a571f908adf32f303ba24eef484aa5e2c153a78e6eb

memory/4388-6-0x0000000000400000-0x000000000071C000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\mainlogo.jpg

MD5 34f051f00de89fd9eafc2a5fb651b457
SHA1 5b38f6da51c87d6be9b64f42157a68d0cff27c93
SHA256 72f621bbb8e9b0c33060204ab7a39cd1ef500b05638fca43d2316138258b70fc
SHA512 0152f99b1c95c39c7370e8bc5e140ed52e9ae15e6d9f8416f25bd06b8a20a45a2f309f30ff9d71f5ab958705ecc2e76464b99df190058e93b71202a096502e26

memory/4388-19-0x0000000003610000-0x0000000003750000-memory.dmp

memory/2864-20-0x0000000000400000-0x00000000004D8000-memory.dmp

memory/4388-22-0x0000000000400000-0x000000000071C000-memory.dmp

memory/4388-21-0x0000000000400000-0x000000000071C000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\RAV_Cross.png

MD5 4167c79312b27c8002cbeea023fe8cb5
SHA1 fda8a34c9eba906993a336d01557801a68ac6681
SHA256 c3bf350627b842bed55e6a72ab53da15719b4f33c267a6a132cb99ff6afe3cd8
SHA512 4815746e5e30cbef626228601f957d993752a3d45130feeda335690b7d21ed3d6d6a6dc0ad68a1d5ba584b05791053a4fc7e9ac7b64abd47feaa8d3b919353bb

memory/4388-26-0x0000000003610000-0x0000000003750000-memory.dmp

memory/4388-27-0x0000000000400000-0x000000000071C000-memory.dmp

memory/4388-30-0x0000000000400000-0x000000000071C000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\WebAdvisor.png

MD5 5fd73821f3f097d177009d88dfd33605
SHA1 1bacbbfe59727fa26ffa261fb8002f4b70a7e653
SHA256 a6ecce54116936ca27d4be9797e32bf2f3cfc7e41519a23032992970fbd9d3ba
SHA512 1769a6dfaa30aac5997f8d37f1df3ed4aab5bbee2abbcb30bde4230afed02e1ea9e81720b60f093a4c7fb15e22ee15a3a71ff7b84f052f6759640734af976e02

memory/4388-34-0x0000000003610000-0x0000000003750000-memory.dmp

memory/4388-35-0x0000000000400000-0x000000000071C000-memory.dmp

memory/4388-37-0x0000000000400000-0x000000000071C000-memory.dmp

memory/4388-45-0x0000000000400000-0x000000000071C000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component0.exe

MD5 468084eb7eeef6834a4615e618428ec0
SHA1 28754065a1a681225a900b83f2175545b1ffaaca
SHA256 532332aeb08b59a53101af1b95f684d50aab1a0d70525baa664f3ccbf503d15a
SHA512 c59ed39efe9ace26962ea8e0c1495615f38874f36864adf7628628e1c32e8d9c6d136f5799e945335ff9e265f6f05d6df2eb2a94a85a76e0b969921b9b3f3765

memory/1640-62-0x000001E6602E0000-0x000001E6602E8000-memory.dmp

memory/1640-63-0x00007FF9F1383000-0x00007FF9F1385000-memory.dmp

memory/1640-64-0x000001E67AC50000-0x000001E67B178000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1.zip

MD5 f68008b70822bd28c82d13a289deb418
SHA1 06abbe109ba6dfd4153d76cd65bfffae129c41d8
SHA256 cc6f4faf4e8a9f4d2269d1d69a69ea326f789620fb98078cc98597f3cb998589
SHA512 fa482942e32e14011ae3c6762c638ccb0a0e8ec0055d2327c3acc381dddf1400de79e4e9321a39a418800d072e59c36b94b13b7eb62751d3aec990fb38ce9253

memory/1640-78-0x00007FF9F1380000-0x00007FF9F1E41000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\saBSI.exe

MD5 143255618462a577de27286a272584e1
SHA1 efc032a6822bc57bcd0c9662a6a062be45f11acb
SHA256 f5aa950381fbcea7d730aa794974ca9e3310384a95d6cf4d015fbdbd9797b3e4
SHA512 c0a084d5c0b645e6a6479b234fa73c405f56310119dd7c8b061334544c47622fdd5139db9781b339bb3d3e17ac59fddb7d7860834ecfe8aad6d2ae8c869e1cb9

C:\Users\Admin\AppData\Local\Temp\cznj5ixj.exe

MD5 74570b231adbb8eafa17ac2edf181916
SHA1 617d00ac8682e51dc3befda3e9b228946da9c492
SHA256 acbfab5f31f5bb2593f1790a5c385cdf043b7e04d1f2c695870c9aa50ff60c44
SHA512 bd2101dead8b786e9472b271525c836da0de6858d719c6b2b32e9b9b8d7acf68e632b66195ae4659b7bba7bc912619aed78ce13799ae689965e0b3310133e015

memory/4388-119-0x0000000003610000-0x0000000003750000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSCE610278\UnifiedStub-installer.exe

MD5 c7fe1eb6a82b9ffaaf8dca0d86def7ca
SHA1 3cd3d6592bbe9c06d51589e483cce814bab095ee
SHA256 61d225eefb7d7af3519a7e251217a7f803a07a6ddf42c278417c140b15d04b0b
SHA512 348a48b41c2978e48ddbeb8b46ad63ef7dde805a5998f1730594899792462762a9eee6e4fe474389923d6b995eca6518c58563f9d1765087b7ac05ce2d91c096

memory/3476-233-0x000001E7E4B40000-0x000001E7E4C50000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSCE610278\rsStubLib.dll

MD5 fa4e3d9b299da1abc5f33f1fb00bfa4f
SHA1 9919b46034b9eff849af8b34bc48aa39fb5b6386
SHA256 9631939542e366730a9284a63f1d0d5459c77ec0b3d94de41196f719fc642a96
SHA512 d21cf55d6b537ef9882eacd737e153812c0990e6bdea44f5352dfe0b1320e530f89f150662e88db63bedf7f691a11d89f432a3c32c8a14d1eb5fc99387420680

memory/3476-235-0x000001E7E5070000-0x000001E7E50B2000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSCE610278\rsLogger.dll

MD5 f55948a2538a1ab3f6edfeefba1a68ad
SHA1 a0f4827983f1bf05da9825007b922c9f4d0b2920
SHA256 de487eda80e7f3bce9cd553bc2a766985e169c3a2cae9e31730644b8a2a4ad26
SHA512 e9b52a9f90baecb922c23df9c6925b231827b8a953479e13f098d5e2c0dabd67263eeeced9a304a80b597010b863055f16196e0923922fef2a63eb000cff04c9

memory/3476-237-0x000001E7E69D0000-0x000001E7E6A00000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSCE610278\rsJSON.dll

MD5 927934736c03a05209cb3dcc575daf6a
SHA1 a95562897311122bb451791d6e4749bf49d8275f
SHA256 589c228e22dab9b848a9bd91292394e3bef327d16b4c8fdd1cc37133eb7d2da7
SHA512 12d4a116aee39eb53a6be1078d4f56f0ebd9d88b8777c7bd5c0a549ab5cff1db7f963914552ef0a68ff1096b1e1dc0f378f2d7e03ff97d2850ca6b766c4d6683

memory/3476-239-0x000001E7FF0E0000-0x000001E7FF11A000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSCE610278\rsAtom.dll

MD5 f5cf4f3e8deddc2bf3967b6bff3e4499
SHA1 0b236042602a645c5068f44f8fcbcc000c673bfe
SHA256 9d31024a76dcad5e2b39810dff530450ee5a1b3ecbc08c72523e6e7ea7365a0b
SHA512 48905a9ff4a2ec31a605030485925a8048e7b79ad3319391bc248f8f022813801d82eb2ff9900ebcb82812f16d89fdff767efa3d087303df07c6c66d2dcb2473

memory/3476-241-0x000001E7FF120000-0x000001E7FF14A000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSCE610278\uninstall-epp.exe

MD5 8157d03d4cd74d7df9f49555a04f4272
SHA1 eae3dad1a3794c884fae0d92b101f55393153f4e
SHA256 cdf775b4d83864b071dbcfeed6d5da930a9f065919d195bb801b6ffaf9645b74
SHA512 64a764068810a49a8d3191bc534cd6d7031e636ae306d2204af478b35d102012d8c7e502ed31af88280689012dc8e6afd3f7b2a1fe1e25da6142388713b67fa7

C:\Users\Admin\AppData\Local\Temp\7zSCE610278\Microsoft.Win32.TaskScheduler.dll

MD5 87d7fb0770406bc9b4dc292fa9e1e116
SHA1 6c2d9d5e290df29cf4d95a4564da541489a92511
SHA256 aaeb1eacbdaeb5425fd4b5c28ce2fd3714f065756664fa9f812afdc367fbbb46
SHA512 25f7c875899c1f0b67f1ecee82fe436b54c9a615f3e26a6bec6233eb37f27ca09ae5ce7cf3df9c3902207e1d5ddd394be21a7b20608adb0f730128be978bec9b

memory/3476-246-0x000001E7FF1C0000-0x000001E7FF218000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSCE610278\rsSyncSvc.exe

MD5 cc7167823d2d6d25e121fc437ae6a596
SHA1 559c334cd3986879947653b7b37e139e0c3c6262
SHA256 6138d9ea038014b293dac1c8fde8c0d051c0435c72cd6e7df08b2f095b27d916
SHA512 d4945c528e4687af03b40c27f29b3cbf1a8d1daf0ee7de10cd0cb19288b7bc47fae979e1462b3fa03692bf67da51ab6fa562eb0e30b73e55828f3735bbfffa48

memory/4812-275-0x0000000000400000-0x00000000004D1000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-LH7DK.tmp\atube-catcher-10.8.5-installer.tmp

MD5 69618453fc850438d4a92db0ca810dec
SHA1 f3025f20e2867052d98b03003cd2507fcc768edd
SHA256 c5255621d712d57be4b45cbf87963051013642183bcf44e77bef1166a61f7c7a
SHA512 96a4380ff3afc6421d8b567940098613bfd681d1722d6e1ca858e26a3b3bbe1a2db1969c1347e65d98c1985e4512b6ddc34f29edc059eace08eee2bd3283bf9e

memory/4388-289-0x0000000000400000-0x000000000071C000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-LC0MO.tmp\component1_extract\installer.exe

MD5 cbdc702ec44e244b2cb764ec3a82efcc
SHA1 3ac7e0652509171d905f06423c979a5c0d16ba1e
SHA256 2f97de96c50d73bcdcbff95fed75b2763207c8fc144d6367d2ec954c1e966b8b
SHA512 8ef13a28201c448215fc241cda74bb032c4a0c29a777de6aed32eeee8a5c428f3899a42ec74a408faee6535d08f7796d216c0bb1454fa2a67480c6a4e6ace9c6

C:\Program Files\McAfee\Temp1471176745\installer.exe

MD5 7cdab43bc1b360d42a143943c700bbae
SHA1 9210afd1e6616bfdd20dd71c7379d1cadfeab966
SHA256 580a2098951e804ad5cb726fbc0e78ed09464910769fa277330a3f78c0703a51
SHA512 ed28a4eec8e35aa0786f960e87079929b9fcb154b3b184f4051178a42d678eac438914f3144b9a1ff4e0c0a7a74171b594eb1ddf5d8180708677cbb7444486cb

C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt

MD5 ba45987f4ec5d7d5cd3fa5700fda2f8d
SHA1 27196db2e9295ad145270082d43d5f9fe5672c01
SHA256 ca8f81af9a5f133afcde9b2c0938776d9da4db6add09f77a039bac92e728899e
SHA512 ba6748b09c025e4460f592ced8f8377dc90722b8f8b7d94f3e4f79916138d8ae6b54f6b132a86ecf2ff46cba9719d5690838951d79169e9db8e837acfa146b66

memory/4388-484-0x0000000000400000-0x000000000071C000-memory.dmp

C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt

MD5 c64c324e68244fe06d3744de98357d3e
SHA1 257c8e015ac8ef69eb4e87665827261d1519bf82
SHA256 e036179dcdc37e54393ef282a479cef5242953f4b69e08ecf924e991e9b4e5f4
SHA512 40eb62206a9a65360e95005bffce6cce3848b3145e6d125ee107e290f04f03e550a54a5faaa21641d6aaf5d0121ae4128e958dbcbd41693c037983ebe8b3d7e9

memory/2864-492-0x0000000000400000-0x00000000004D8000-memory.dmp

memory/2380-522-0x00007FF9D58A0000-0x00007FF9D58B0000-memory.dmp

memory/2380-521-0x00007FF9D58A0000-0x00007FF9D58B0000-memory.dmp

memory/2380-515-0x00007FF9D58A0000-0x00007FF9D58B0000-memory.dmp

memory/2380-514-0x00007FF9D58A0000-0x00007FF9D58B0000-memory.dmp

memory/2380-513-0x00007FF9D58A0000-0x00007FF9D58B0000-memory.dmp

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5 10a8b17e2f5c380c662186e42a53bb47
SHA1 c2bb858a7c91ff9bb33ba43607524e52f8c36169
SHA256 4bf68fe11ea8966534e45aaff83b6d737b64d6b2cd1998a3f9cba0619fbcfaa8
SHA512 5dd8e3cba7d01b77d0986001426c1ce9115cdca727c99d5dda172e5c0b80b00d859b850799ec034608702325997022577a82e59c120452cdf73bcfcb7023849e

C:\Program Files\McAfee\WebAdvisor\Analytics\dataConfig.cab

MD5 c7ca71a7f472503fd07dd8674e70907a
SHA1 c30ba3338ccc2c5b0eec860f64064dbcb6cf698c
SHA256 70bf1ff3b3d6c8f2b0fd141253569f606aca663a21e80cd479049a7346ec600b
SHA512 11943457887df84fa6dd33e1e90ea5f88c3b938eed668bb70e7502d8017a560cdda79e9602135a3e76d276567808192c34093d07de1dc80e8262a7c931ea5a7a

memory/5032-605-0x0000014DB4E60000-0x0000014DB4E80000-memory.dmp

memory/5032-603-0x0000014DB4860000-0x0000014DB4880000-memory.dmp

memory/5032-625-0x0000014DC51D0000-0x0000014DC51F0000-memory.dmp

memory/4812-782-0x0000000000400000-0x00000000004D1000-memory.dmp

memory/2244-791-0x0000000000400000-0x000000000070B000-memory.dmp

memory/5032-804-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-807-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-816-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-815-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-817-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-822-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-814-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-823-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-825-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-832-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-831-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-830-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-837-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-836-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-835-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-834-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-833-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-829-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-828-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-827-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-826-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-824-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSCE610278\ArchiveUtilityx64.dll

MD5 c70238bd9fb1a0b38f50a30be7623eb7
SHA1 17b1452d783ed9fae8ff00f1290498c397810d45
SHA256 88fb2446d4eac42a41036354006afadfca5acd38a0811110f7337dc5ec434884
SHA512 dd77e5c5cf0bf76ba480eb4682c965d0030171a7b7a165a6d1c3ba49895bc13388d17ddbb0fe3ac5d47b3d7d8110942c0d5b40e2fe3df0a022e051696ec4feb6

memory/5032-813-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-812-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-811-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-810-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-809-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-808-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-806-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

memory/5032-805-0x00007FFA09890000-0x00007FFA098A0000-memory.dmp

C:\Program Files\ReasonLabs\EPP\ui\EPP.exe

MD5 09e2401f12f54289c04af17d90f0798f
SHA1 2f95c7a2684338f5fc66b0c20e148b2a9938b154
SHA256 3efd3ea030a60cf4c5e0c6b93fdd24f1743e56cecd3a30329375ff80ef47091d
SHA512 8337b3f7bb29f546eaefe9adb8b7674007176c0f6d429d9b51df7eacf41b09042359d028ded0c934f71ce11e308252b86846027e10e07529327a451cfe7c2206

C:\Program Files\ReasonLabs\EPP\InstallerLib.dll

MD5 5e2b4c627d4afac7b138fb229f3ba8cf
SHA1 7b8b27bfcbc2603f7e10474d3895e6dc821992c0
SHA256 b3df61de305444755aa5c79b4a88f10d5474980db8da0d674856ba158eb1c3b6
SHA512 325d151197bce5ba7a9ba76cdaaf5f9f5a3fc546542e78dc2b3b35337654a65ee2d19d20112d82b496104f148acb6b25e8c3d27a567b5eb6f0b2aa38aa4093ed

memory/3476-1313-0x000001E780EC0000-0x000001E780F16000-memory.dmp

C:\Program Files\ReasonLabs\EPP\mc.dll

MD5 5761d96590d91fa336c068269a7dbd93
SHA1 5a1b0a8b4f255680a7549b2b27c28dd65a5a3e47
SHA256 7dc02294611987dcffef0d1ce99ff316926901fc872099cbea2fb76997e29f65
SHA512 f8f5743547c96aeb579b7786fc9af64102bef3cf46a6df270cccf5d51a48467d9547732ff49f8d5258e7f28a5bf2d234d3344c2862a5a67f5054de81ec6f4ea2

C:\Program Files\ReasonLabs\EPP\rsEngine.Core.dll

MD5 b3b1147d7bcff3698ed64b9ca31dd75d
SHA1 cfcfecdfef6103e606e6559920b0164e6ddec856
SHA256 1f260a7cf65d80332a58a16b713570054e83d2d842b17ca76262dedef69922f8
SHA512 8638c0c96ed95c6ce5b00444b7287b0017b2ad1c1aab874b9caa9210fcaf4f7e7a3aac6b261e6e2686b66bbb02d6a68827541bf7a78a922d057a0c0846884614

memory/3476-2947-0x000001E7FF220000-0x000001E7FF25A000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSCE610278\792704ce-e5d8-4e30-8180-489e0e8327fe\UnifiedStub-installer.exe\assembly\dl3\e4bd5b1f\1750420b_48c8da01\rsJSON.DLL

MD5 8740daedb5e9ab8a48389ee3088a9c16
SHA1 4d821d8523ee72ebe2cd3e74e3c0cdcea7038d92
SHA256 8c0123b38ef50dc9aa0cb7c56028ae9c031425ab812ee0b56ff396c35b7af95a
SHA512 e847f7bd7c02662196b1bdbbd1073e21bb185c4a2d19c351b643de80c3efca661c126f9ebd834373d1baf56e8a67d03ce9624132d35f4a8deeec00d4a3236b26

memory/3476-2958-0x000001E7FF220000-0x000001E7FF250000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSCE610278\792704ce-e5d8-4e30-8180-489e0e8327fe\UnifiedStub-installer.exe\assembly\dl3\8f2204b5\1750420b_48c8da01\rsLogger.DLL

MD5 683e19faf979c5ab2ae5919f0b3d1485
SHA1 8453dbc5029e96e4c42cf96b327aef987b15b9e8
SHA256 60834a138a215289237b1f99c05489e7bda8e8c4357ef8e96d7914ef270e5ca8
SHA512 0b3764b1fe3b7fe10f7b78243f5a91c8563816eb19dad8d06e31dcaf6898ecfce667fe2585cff4dacc2a2650cd09428b5e4f2ff58baa54855e9749dc4f5d44f4

memory/3476-2971-0x000001E7FF220000-0x000001E7FF24A000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSCE610278\792704ce-e5d8-4e30-8180-489e0e8327fe\UnifiedStub-installer.exe\assembly\tmp\QS71O6ZD\rsAtom.DLL

MD5 f2c6d0704191203c591b7257beff2d57
SHA1 0f8e468f8c26b71c5162b33caa812fa48bac8dd6
SHA256 ea791c403f402fbe8763d1adbb3a317463562a42757aa74d96505f2a4997585e
SHA512 2637921c04e98b14085778f85716e92efb76f9a50a0a9c1793b0310043ad60413642199e49f72eccdb4d2cbdbaeccf87ed83bd49976e6409b10916ef0218be08

memory/3476-2988-0x000001E7FF300000-0x000001E7FF32E000-memory.dmp

C:\Program Files\ReasonLabs\EPP\rsEngine.config

MD5 3149ca79d09c362307bed37960f0fd04
SHA1 f5f43f511ef581dc7b88ed194bb8e86e42f45bd3
SHA256 5481ccc72cad44173cdfbf746a701bb79e2b75927ef71aee1226e07e1265d31b
SHA512 d7c519a58bdefd24bcc26ec681b27a72a0aabbf4135d8e47a493abe1e4affd7cb5740b132d445aa9ecf66247de7406d5974557ae671d5977e40d877167b94a70

C:\Users\Admin\AppData\Local\Temp\7zSCE610278\792704ce-e5d8-4e30-8180-489e0e8327fe\UnifiedStub-installer.exe\assembly\dl3\042f7065\fcb2440b_48c8da01\rsServiceController.DLL

MD5 3c11f1f4ab1b51e92af5210a25cb1a98
SHA1 f34e01f036d6279cb99ad36b7ad4f93875055ef1
SHA256 aadf52eefbc4330a9af62a2554635bc4f6d9503e0689ba86ee56c194b34d6382
SHA512 f872d8ec41c38e2c6527e4dd5285f7f877fe0714e94fde304f62b37b6f300d5bae38943df0c62dfa829886b0adbed01f6af14bdb8353ff6fdf73acedeb5ffcb4

C:\Program Files\ReasonLabs\EPP\x64\rsKernelEngine.inf

MD5 e8ef8570898c8ed883b4f9354d8207ae
SHA1 5cc645ef9926fd6a3e85dbc87d62e7d62ab8246d
SHA256 edc8579dea9faf89275f0a0babea442ed1c6dcc7b4f436424e6e495c6805d988
SHA512 971dd20773288c7d68fb19b39f9f5ed4af15868ba564814199d149c32f6e16f1fd3da05de0f3c2ada02c0f3d1ff665b1b7d13ce91d2164e01b77ce1a125de397

C:\ProgramData\McAfee\WebAdvisor\updater.exe\log_00200057003F001D0006.txt

MD5 7771f5313896cdb7cd47bca9684be57d
SHA1 84e0c594a8b98773d54ca9aa583934c1bb0d5c2c
SHA256 d6001b0e65d3c31b40d45b0c7f0003c82966361294aee49e4f211923c13d3067
SHA512 accd2b25ee2fe72ff8ba4e32f7d1d64175c41bab0802039b49d92d46ee8bfe1bc1800a83badc420b0175bceb52478099cb7f9390f7b437cc24238557c7040a0b

C:\Program Files\ReasonLabs\EPP\elam\rsElam.sys

MD5 8129c96d6ebdaebbe771ee034555bf8f
SHA1 9b41fb541a273086d3eef0ba4149f88022efbaff
SHA256 8bcc210669bc5931a3a69fc63ed288cb74013a92c84ca0aba89e3f4e56e3ae51
SHA512 ccd92987da4bda7a0f6386308611afb7951395158fc6d10a0596b0a0db4a61df202120460e2383d2d2f34cbb4d4e33e4f2e091a717d2fc1859ed7f58db3b7a18

C:\Program Files\ReasonLabs\EPP\rsWSC.exe

MD5 449a5c22e748797a6e339942d489bf9e
SHA1 7e9c0c80dd5611b5895e1f96861144b2b89b79af
SHA256 03045643cbac6d3f6b3da1000cc78115ac23f9f157b206cb9da9e7873defef9f
SHA512 dd76ace975b1a0b45f596575b3da96856b2c4da6d785a73290453a975008ea58ec3aaf8c768d10952cb95893e33d56f0a47bd2a92425347a59400a0f5b988307

memory/6520-3022-0x00000211A2A80000-0x00000211A2AAE000-memory.dmp

C:\ProgramData\McAfee\WebAdvisor\WATaskManager.dll\log_00200057003F001D0006.txt

MD5 f77c107223a76900595e8e44fcf68e3b
SHA1 6858358e243ebdbcbd05a2abce5c2726b82cf879
SHA256 7aee6c0f4ad15632f511000909bd621a01c345c5aee5506a099fd26fc26d121e
SHA512 a3a5575e391910d4593814574be6f24ceb5550b62897b52bf39729eaf302e88d74ccf86502e0cea589203df3cc9452f599a388898f570b56da3dded6ed639e76

memory/6520-3039-0x00000211A2A80000-0x00000211A2AAE000-memory.dmp

C:\Program Files\ReasonLabs\EPP\rsWSC.InstallLog

MD5 b2ec2559e28da042f6baa8d4c4822ad5
SHA1 3bda8d045c2f8a6daeb7b59bf52295d5107bf819
SHA256 115a74ccd1f7c937afe3de7fa926fe71868f435f8ab1e213e1306e8d8239eca3
SHA512 11f613205928b546cf06b5aa0702244dace554b6aca42c2a81dd026df38b360895f2895370a7f37d38f219fc0e79acf880762a3cfcb0321d1daa189dfecfbf01

memory/6520-3052-0x00000211A2E90000-0x00000211A2EA2000-memory.dmp

memory/6520-3053-0x00000211BD7B0000-0x00000211BD7EC000-memory.dmp

C:\Program Files\ReasonLabs\EPP\rsWSC.InstallLog

MD5 43fbbd79c6a85b1dfb782c199ff1f0e7
SHA1 cad46a3de56cd064e32b79c07ced5abec6bc1543
SHA256 19537ccffeb8552c0d4a8e0f22a859b4465de1723d6db139c73c885c00bd03e0
SHA512 79b4f5dccd4f45d9b42623ebc7ee58f67a8386ce69e804f8f11441a04b941da9395aa791806bbc8b6ce9a9aa04127e93f6e720823445de9740a11a52370a92ea

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\mcutil.js

MD5 17f87d4c65cbb9326ffa096ca8a4545a
SHA1 d088dd733996b6e8995d2771e4f3e4b9828b65b4
SHA256 1d57a73596de24b23c73c5a37c52748bbac1db336ba9f7390f88f0781c461bc1
SHA512 f2c4e62c3d2a4380a5716f06037cfa50ea73947af4607a2da9122085b340e6525d44e9e55ab9c165d930297b5c142c1e86a5ee5be597b37bab5991b8663a3fe9

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\transport_eng_observability.js

MD5 3c6e3d576b8eb00cf052d6f557bd5b2d
SHA1 692c1124d6dfb79dcd14281b73912d3f3b7825ea
SHA256 43f2cd1a047e00d024915e968950bc9a99d2f79cdedc2843924f9230fd26189b
SHA512 ee2a73376eef7cfff10774f06891d3bf23cbfd4875f5e91e1b58163a999c44d8597a0ebe87f312b1cf58596a1aff279cab9026e94981d108bcdaddbfc99676de

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\transport_da.js

MD5 4a4bc900f6e66cfc90b7fb6717b4e79b
SHA1 cb6ad20606d157af429b4f73beb4c0282ca58fe8
SHA256 a8149c354009237f4834073917548e1da41bd0672915082943a43ba3148cce5f
SHA512 89b742622ddd7fadae624b78c20e129f8a1b1179248f57053aa17c736ae14c9187475658101ce0a77f6735d1e657d34bf3de31958df8a1dc7c4ed7368dd49606

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\transport_aws_apigateway_v1.js

MD5 c88f9c58e47c1bca28a626095f27402b
SHA1 2dd2d2c5abafb1fbbb04678f6afcd35888826bab
SHA256 58c33281111f70050d38437ebbf3afc98fab57c7580bc7c9e9ed5834ad45465f
SHA512 b7b8c060e1b215915cff989786eb42c13c6dc81d915b9ca7587577e27af08ced7dd38f1a3771e9c055edb5cce4dd6b4267be14abbe9c3e6af5942a258ab2c695

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\transport_api_endpoint.js

MD5 807ffc8c514f81df06762c9bd9eeca9a
SHA1 81bec7dbcd8948459f83c8a60e7b6f9a58c4445b
SHA256 c0a99ad8adc9e7778762ab18113455687449c6ec019d9642dcad49836748f0e3
SHA512 eb59163b6a245d9dd6cb625ccb0cb91c71839f7b15200c3da64afce5a5b986951e2d0f204ec2426f53f470f3446c1fd76823397c1b8aaff5ae02d38daa73987c

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\transport_ai.js

MD5 e975cab444f10f75c12d2a4bab5f96e8
SHA1 d25eed107cdf37f8e2fe4436eb0d680744a2aa4e
SHA256 8992ad923c9c80eff192457e5bdfef59961f93c87a48f5640692f2f63f1229e2
SHA512 065aaaf3e161fa0cf828b079c745985b5c65d1ea80f9aaaa92a84dfabdf8858797a7cecfaf30ec9c9a805ed0770900008228ff73018c24a866f31d0004739cc2

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\transport.js

MD5 70a67c6992408292a82f82d9db993ed5
SHA1 983220be265e3189aae3fb292359e7d9a5c23771
SHA256 cfa8a8cba9a1c47773054a74b50723422e43d3f1bf555b9405e6a150afa4a097
SHA512 e60a225798ebc95c164116be70804880cedbd3b21d9415b6f0fd858b303999abfc20dabcbbeb8e8a093e9da88c520825b6e252da5778190d4b2cadce9ba60e4d

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\transmitter_template.js

MD5 8c8b2b9d4c578a1fc6d27d7be39a09ec
SHA1 03582966a7e06ae568b14d801b85cc05a76d7580
SHA256 9d2b5f9742319d9fc34951c7489d5df8fd2d9d213ab131a9346fb80edc25c42b
SHA512 9fd059c210cde9fd69b1d0fc26d4ece7f19711fb578b6a7551baa2fd9c27bacf9adf4b49625ea18e5bffc38fac60f32115a2f2fb3f9d5b35712bcadaf360655e

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\subdb.js

MD5 6b4c431c1995750174ade376eb96d4a7
SHA1 14b54e0149bdfc954e60126322a68c6714c0501a
SHA256 93b4d106ddc16176196fc20b9e2de6bcfcbddfad1d3c592d975b0748f8053f8d
SHA512 01c26730f19ce07865d58562a04c3345db30edc7da81ed85c3a34b3c30dc6e9e393abd7aceeaa045f68fed8caa04f333598b949d6f4883f3a5e9d8fd5b17a7aa

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\sha256.js

MD5 c16ea8226d85e03d9e69d9193d9690fc
SHA1 136c5708cac882595ad73fbcb2a31d4e39cfb076
SHA256 84f86ff5c88b2deee238fe3162ec1cd69d823d1256818b10407ded6321f5f7f4
SHA512 5831931d3eb0725a8f2f4370d874aba02d4b80c9c6cea6d3a1079480326eee784bf1c198cc9bf0bdc7dd9aff95576fb6e301c59d1fd79aa6418f12e9e8c2fd2e

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\rules.js

MD5 e69122c072234db04a816130b7ea0018
SHA1 67b122a119398b43e7530dccb45703f4c8f7aae5
SHA256 4e41b97fe5edd949db565fc1cc236c750fcb9adf9bab8dd10bd6929e5da758d8
SHA512 ba60bfc172c16d637126d747e96b3963a71d960ad490efed0bc0854ae9972145b0790f5cff167561bd02a4005ae8fabd3c0c635dfaadf82433b1b768a935ff91

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\rest_transport.js

MD5 f3aa34739d159e0ffec70926e6c54c4a
SHA1 89f6fab01e31eb553cdf3fab1e63b71420b20ccc
SHA256 1b98df8a8179651c5f218cf40a2e3acf3a7e6446594180f6166aa2ca2ff3d846
SHA512 a5d3aaa47381bce8c6076b49f0c11dc4936cdb073582e74c829ab773542b83315d5d4ecf3ce75818623ad6701629313753b4ea88e7d21a3ce129212d772f5e77

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\registry.js

MD5 6b2f1f9010d073edf9afff6cf55f9194
SHA1 4ec1380beb530f36797df33e3b3ade929d38bb19
SHA256 52e713d6b4695f56c3a591c713cb4c331a04590b463dc9b46e5de165c9ec0948
SHA512 9ef707d1562ed9f3f95b12726816189a25a97cd7c72387dad7c424f37b910ff07bb41299209ece901783754d9848a11521d491af6d3336a103dd4476842c392a

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\preprocessors.js

MD5 4972cd3764385b366b3d9abdeea3a464
SHA1 a856a0fe70aa484766baf7fbad8d82591d002cd5
SHA256 f0cfb1ce9ff40a80ad6a66ce6af5b96f8afa13f665080eb5af383c348f58d6cb
SHA512 7f145df3c3f69a4311092598a98e261dc3a08fb35e019c1341f118b4e9d176c2b50422c2ae2a0b66e6a5eb7e6d36d61a1ccc353bd674d0e0db6e02d79b2921fe

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\operations.js

MD5 f78b2129415e458f1af6585b402f678f
SHA1 778a989aa804a8537bac7e6161e7084d55970f30
SHA256 879c4b7b74e4487dbf2c91d87da872aa1ad8a068294f347c27c0b6f48e0454a3
SHA512 51284fe3cee3e939521881457587ce04df7383e7099443a88fa16916fa02a8c9c5a01ff0cff3e6bb8574a7eaf0385997ca8fda03b9f15eb7732e98cbce579de4

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\observation_analytics.js

MD5 17bca45efc9e493d35d388b1df4071a9
SHA1 dfe3c0ec2a672b45515ef96837add065d58c2cb2
SHA256 1c8a566c5d3417f967089a7eb7ade2080a95f79e4102580f47aedf04380628ec
SHA512 8387840f4d482599ab24c64d4e0a5278d3e1d10c07c534d141d7fdceaf0d872fe03be9b167a00bc94baf9a96deabe0f855582855b4442583aab3413d4be87bb3

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\mappings.js

MD5 24049cccfc578742abaff795df2f772b
SHA1 daa64af17b1752fdd3cce693f7b8013bb564106b
SHA256 ee60ef79285d3cbcb40778164e1ebe7adfc65a07adb603ed95adf9c775528272
SHA512 14679ca9ba7ef3f21bea7293fa8ae77be99deba40e93b42a3753d52f87778a7f2f2c6dc5458def28f3e94d21264f82a7c335fc00c36e2f439052e7515f299b8b

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\logging.js

MD5 d0047a83f2b0192701fcea17cf8e8f00
SHA1 c4e2f555db869306062087920100c8fba62c63df
SHA256 cfead828752cb4a07a8f1882213d84e4076cf44e711d240ad4ff1cbd71cfa375
SHA512 b9fe86bda121b3cee074348cbde9a6a94334a54ced1161b581fc4a3f2b0b75f00ba72ecf3c8fff240d84648427b6dbc96fb868d6e0107025c42eb2873814538f

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\json2.js

MD5 6ca16a3a86b06be24471258ebce5594e
SHA1 1959ebcbe0366e4308d66acb2d336b80b2dbed9e
SHA256 4697568a4bcc211da5a5e18f0d9661ebfb419d0ee446c739ae041d9f3cca5868
SHA512 bfd51256862ddaa0a811dfca792c63d0f5a6fbf4dbd297ac46509b9cdbfdad16245aa5b5ccbee2bf89cb46e6a7e9f33f78186a7562135023a2cd59b2adac3a3f

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\hash128.js

MD5 583d1e807d90a4dab09495d497e36e29
SHA1 08325c3e4127f6b5c2c02d112052940a0a7063b9
SHA256 432d0bab251c6380681a6e181d862afd48143199ab8476dcb51102ac49a6f5c6
SHA512 d1e1337bab4df79370886aa853b66bb2f8764f2ead01e42859857093a00c205241c9958555bc908a483e7a0877baeb2368964c358ec814728ab0acd7d2ee21ab

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\event_handler.js

MD5 fd0799c60b5818e5b5a78548493f74e7
SHA1 a4b9098b66033a468ea19f2c32e27e3b835a095a
SHA256 b032f082a7b0bd01b85d21510de7a6ed24c57c8a2d90eb38f6b9305c50768edb
SHA512 241eb18455a70c9ebe7d6e175f20117e5cc285cc714c6370a67f21b7e1346e992ed8d840da0d32cb4b820419150a73372ca20640f04b96da74114b89769acfd6

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\error_transmitter.js

MD5 bcb7c4357f56a4e5b9c65649203c6fbf
SHA1 90d407b8f1849a70a038728287d591a70a42718b
SHA256 6b6ca92809fdbf11c0abe1280594542ca6147192b1789b5a63e462ece1563f18
SHA512 4b10698c51a990f86e97820b1745cf4955a829e88c8fdd5d7361a78d564cf9ff62b254719023691795fcdf84eacc5c9c52c8d55a961d4cddecf3ad9b23354f67

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\engine.js

MD5 bbf5ff34b0590ccb9fba5cd5f46bc763
SHA1 8fa219d6edd42f3dc2748dd1be39aa9181a4d695
SHA256 03e9b1c338955be1e188a9623d86fd264d7289e5d5976c64dcbb2751f216c366
SHA512 4a8cf29f9cb6ed81dac50c4d5c5336c6c6f4059476e020c0b4efdfd7cbe5c480030873ef57c715e152006b8c25a76a1cf3a9c4dcc82a270f9a9f4e977b731b85

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\emitter.js

MD5 78af6cb44a760712e594ed4853a4850e
SHA1 fcab8f737fb883ff11517d79610faa40925ec607
SHA256 5d599294fe8fe1f1df2e3062dd849b2d4888de969feb7c0abd50590437e2ea9e
SHA512 c1f6f5f69e6561c04732a7cc9875a271c283dcd6aebb28b47672080d5a44d0fb3abfdb71ae5cc2d77e2094cc626586a48d41c8a5d9e2a391ad2ac4c874069c89

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\data_collector.js

MD5 4c671cb1a079a596b635e0c2e821c594
SHA1 a0a4f220dd543c2a6e0528534329143020510d0b
SHA256 71f050dd1da1acb13694334de520b9576ed82ae630a6d4dd647d8cbb2fb70149
SHA512 8567e79d903a16ae9abf7199e1bb0e5596dbdbaf71d1f19e668383ef47605061bee7e2284c73c0d4e49b99bac509d5f00b227894ca46789e73af7859ff1a4dde

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\dataset_da.js

MD5 3b948426bc9738ae3c66e15520c9806d
SHA1 efe1df91cf717abe03eff4aa15fd499fb2c4d088
SHA256 7df41f59e6d26b7bd63a09eff8c82852e1cbed9d122360eeef5b2ad99fcf24eb
SHA512 28dfb35566efa88e82cda8222d9721981187be1eb3767e1202a31a2479fcfd97368b1a3e573b409673ded90d8a6037413ed98e6763be1c7da6fa63afcc1a0ed0

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\dataset.js

MD5 6d4f6e431e29eac8793d84643f6cdc45
SHA1 c0879d99c94afe91664c7faf0a1cd2e7f1e063b7
SHA256 021656891b1790d6999f62414b6034bcaf29c61bfba1117359e93849f35fb1e7
SHA512 79b476539855c82907bb7e0e5eb46e590ede50a680f75d1b74e53ca96c6bdf613f02f0b30a7ae2441337b25bf441769278e99200e0a5016e5dc76fa4eba4c83f

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\csp_client.js

MD5 06bfcbb4b961b19e15fa48d3f64bcc32
SHA1 2c884c2438edd3c6465822e30ab30e0b3fae89e8
SHA256 e9e1d70c2fc26405d2412fff96e468e87480a72e1e3a0309efffbfeb9eae8570
SHA512 26d0889163e1068a7a0aed6e3d15a96714c253e4224208c559c94e37f161bd3b5a4388442b18fc5d32f9d7e319ac2eb0d2448731fa10407f35649a09fd0c52ca

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\config_manager.js

MD5 a610574777da6cb9a7f3196504569a64
SHA1 a4e3a2b1e6deae62236394a466bbc347683c5fbf
SHA256 e4025897203ac4d562fb7ae7a3c3983be1c82dd9e3ef4e3834efbc745b53e256
SHA512 060d6bcf4715113d87c9f17944296966d18581f8c77f73d7de126bf2c8c70ccf64c5e35a4221b5973937a566becc38857260d0a7d4060571df401839dc467a2a

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\common.js

MD5 13e9817e3b9a66c06894c0c5aa0ef4fd
SHA1 8a5cee853332d313fcee9f43a9e0efd8e2ebc43e
SHA256 3aedba5c5773a479a63e019a12be3faa6ea7f52717052fbe9fba855e302c4fe5
SHA512 d22c62f5eba79e668ccff11cd60593f0863ee9919f88ff92b7abe7d928fe64fcc76e2fccf4d4e246fbe9ec865449751fddd48469d2b98a1b27a22002004f3e89

C:\Program Files\McAfee\WebAdvisor\Analytics\Scripts\aviary_client.js

MD5 3b172c9c613b1bb6b83997b53e92d501
SHA1 64d276fd258bc7c5ab2c6d16e1551332600ad180
SHA256 dbe8bc92bf0b2c1c1abdc38af58f0c3723fe254711055b3bea5cf54e8b8a85f2
SHA512 a35248421fdb2dafdca74422d54bbe022b8f180d38f402e992852fcbc9be27c5aebaf811ccca446f0a2fd3e3e119c258dd9e3d68d6401c42debaddbc9a08a6e5

memory/1500-3109-0x00000247B6280000-0x00000247B65E6000-memory.dmp

memory/1500-3110-0x00000247B5F10000-0x00000247B608C000-memory.dmp

memory/1500-3112-0x000002479D680000-0x000002479D6A2000-memory.dmp

memory/1500-3111-0x000002479D620000-0x000002479D63A000-memory.dmp

C:\ProgramData\McAfee\WebAdvisor\WATaskManager.dll\log_00200057003F001D0006.txt

MD5 dfb3dad312d88cdf9cd13654df17d2c7
SHA1 6126c98761156a949fa60a53d209ee087090ef80
SHA256 03c33d57ea98411fb55d494d58bc49168ad8fd668faac030764f9d03ec79aac9
SHA512 552ba0a760a2c27186dd7566965805629237c440d42b5c817c3605ed534bf39e15f4623e155470545ac0b804d4646cff45e4a95347c126b46c6eb7f92904bfbe

memory/7808-3122-0x000001776AAE0000-0x000001776AB3C000-memory.dmp

memory/7808-3129-0x000001776CF60000-0x000001776CFBA000-memory.dmp

memory/7808-3130-0x000001776CF00000-0x000001776CF28000-memory.dmp

memory/7808-3141-0x000001776D9B0000-0x000001776D9E2000-memory.dmp

C:\Program Files\ReasonLabs\EPP\rsEngineSvc.InstallLog

MD5 2afb72ff4eb694325bc55e2b0b2d5592
SHA1 ba1d4f70eaa44ce0e1856b9b43487279286f76c9
SHA256 41fb029d215775c361d561b02c482c485cc8fd220e6b62762bff15fd5f3fb91e
SHA512 5b5179b5495195e9988e0b48767e8781812292c207f8ae0551167976c630398433e8cc04fdbf0a57ef6a256e95db8715a0b89104d3ca343173812b233f078b6e

memory/7808-3131-0x000001776AAE0000-0x000001776AB3C000-memory.dmp

memory/7808-3142-0x000001776E010000-0x000001776E628000-memory.dmp

C:\Program Files\ReasonLabs\EPP\rsEngineSvc.InstallLog

MD5 705ace5df076489bde34bd8f44c09901
SHA1 b867f35786f09405c324b6bf692e479ffecdfa9c
SHA256 f05a09811f6377d1341e9b41c63aa7b84a5c246055c43b0be09723bf29480950
SHA512 1f490f09b7d21075e8cdf2fe16f232a98428bef5c487badf4891647053ffef02987517cd41dddbdc998bef9f2b0ddd33a3f3d2850b7b99ae7a4b3c115b0eeff7

memory/7808-3170-0x000001776E630000-0x000001776E88E000-memory.dmp

C:\ProgramData\McAfee\WebAdvisor\WATaskManager.dll\log_00200057003F001D0006.txt

MD5 8af7c6b29396ea02ffb7a9beeabf404d
SHA1 a65300e2d7c4abee2bba737480dba524241aa9c5
SHA256 48670f9b2c65e2c2cac9804f58f65116c35ba63b7756b942a25fc1b94762b7b0
SHA512 43339b74937cdac02e5a731a67f6899c7be7d9700e74784d650ed17767de5d6957f87a60b9306744a70b5463002d56831a1e16f2da2bac25c3805355713cf6e2

memory/4520-3183-0x000002A8D20E0000-0x000002A8D2110000-memory.dmp

memory/4520-3184-0x000002A8D2170000-0x000002A8D21D0000-memory.dmp

memory/4520-3264-0x000002A8D2110000-0x000002A8D2136000-memory.dmp

memory/6304-3306-0x000002275EAE0000-0x000002275EB08000-memory.dmp

memory/4520-3307-0x000002A8D21D0000-0x000002A8D21F8000-memory.dmp

memory/4520-3309-0x000002A8D2240000-0x000002A8D2278000-memory.dmp

memory/6304-3308-0x0000022779200000-0x0000022779394000-memory.dmp

memory/4520-3311-0x000002A8D28E0000-0x000002A8D2966000-memory.dmp

memory/4520-3310-0x000002A8D2280000-0x000002A8D22B2000-memory.dmp

C:\Program Files\ReasonLabs\EDR\rsEDRSvc.InstallLog

MD5 1068bade1997666697dc1bd5b3481755
SHA1 4e530b9b09d01240d6800714640f45f8ec87a343
SHA256 3e9b9f8ed00c5197cb2c251eb0943013f58dca44e6219a1f9767d596b4aa2a51
SHA512 35dfd91771fd7930889ff466b45731404066c280c94494e1d51127cc60b342c638f333caa901429ad812e7ccee7530af15057e871ed5f1d3730454836337b329

memory/6304-3313-0x000002275EAE0000-0x000002275EB08000-memory.dmp

memory/4520-3326-0x000002A8D2200000-0x000002A8D2226000-memory.dmp

C:\Program Files\ReasonLabs\EDR\rsEDRSvc.InstallState

MD5 362ce475f5d1e84641bad999c16727a0
SHA1 6b613c73acb58d259c6379bd820cca6f785cc812
SHA256 1f78f1056761c6ebd8965ed2c06295bafa704b253aff56c492b93151ab642899
SHA512 7630e1629cf4abecd9d3ddea58227b232d5c775cb480967762a6a6466be872e1d57123b08a6179fe1cfbc09403117d0f81bc13724f259a1d25c1325f1eac645b

C:\Program Files\ReasonLabs\EDR\rsEDRSvc.InstallLog

MD5 6895e7ce1a11e92604b53b2f6503564e
SHA1 6a69c00679d2afdaf56fe50d50d6036ccb1e570f
SHA256 3c609771f2c736a7ce540fec633886378426f30f0ef4b51c20b57d46e201f177
SHA512 314d74972ef00635edfc82406b4514d7806e26cec36da9b617036df0e0c2448a9250b0239af33129e11a9a49455aab00407619ba56ea808b4539549fd86715a2

memory/4520-3340-0x000002A8D2320000-0x000002A8D234E000-memory.dmp

memory/4520-3341-0x000002A8D2970000-0x000002A8D29CE000-memory.dmp

memory/4520-3342-0x000002A8D2DA0000-0x000002A8D3109000-memory.dmp

memory/4520-3343-0x000002A8D2350000-0x000002A8D239F000-memory.dmp

memory/7508-3344-0x000001546CA80000-0x000001546CD70000-memory.dmp

memory/7508-3345-0x00000154535F0000-0x000001545361E000-memory.dmp

memory/4520-3352-0x000002A8D33A0000-0x000002A8D3626000-memory.dmp

memory/4520-3356-0x000002A8D2A40000-0x000002A8D2AA6000-memory.dmp

memory/7508-3355-0x0000015453A00000-0x0000015453A38000-memory.dmp

memory/4520-3367-0x000002A8D2AB0000-0x000002A8D2AEA000-memory.dmp

memory/4520-3374-0x000002A8D29D0000-0x000002A8D29F6000-memory.dmp

memory/4520-3393-0x000002A8D3110000-0x000002A8D3138000-memory.dmp

memory/4520-3394-0x000002A8D3180000-0x000002A8D31B4000-memory.dmp

memory/4520-3395-0x000002A8D31C0000-0x000002A8D31EA000-memory.dmp

memory/4520-3396-0x000002A8D3260000-0x000002A8D32C6000-memory.dmp

memory/7508-3397-0x000001546C990000-0x000001546C9EE000-memory.dmp

memory/4520-3398-0x000002A8D4D70000-0x000002A8D5314000-memory.dmp

memory/7508-3399-0x000001546C9F0000-0x000001546CA06000-memory.dmp

memory/7508-3400-0x000001546C5E0000-0x000001546C5EA000-memory.dmp

memory/7508-3457-0x000001546E420000-0x000001546E42A000-memory.dmp

memory/7508-3456-0x000001546E410000-0x000001546E418000-memory.dmp

memory/1640-3458-0x00007FF9F1380000-0x00007FF9F1E41000-memory.dmp

memory/7508-3459-0x000001546E4E0000-0x000001546E530000-memory.dmp

memory/7508-3462-0x000001546E7D0000-0x000001546E7F2000-memory.dmp

memory/7508-3485-0x000001546FAE0000-0x000001546FAE8000-memory.dmp

C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\cffi-1.16.0.dist-info\is-H14JI.tmp

MD5 365c9bfeb7d89244f2ce01c1de44cb85
SHA1 d7a03141d5d6b1e88b6b59ef08b6681df212c599
SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
SHA512 d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1

C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\charset_normalizer-3.3.2.dist-info\is-06LEP.tmp

MD5 229e7f054425249112b92310e17b8732
SHA1 04bfc90211119875876d67758eeb3a15374827b9
SHA256 cbca83186762da3cd599d84ced3143ba62e979c2920d2cd9e5c64cc8516e2054
SHA512 7290ce52a6196c35f4cd830bbac073a7aeadd65d606707e269ece7e3efe6349e7391d6c396a548b295c79681ee0bc456f63a6d0c9b5aa7ed720acbc0ef85e895

C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\cryptography\hazmat\primitives\is-BJ21O.tmp

MD5 fce95ff49e7ad344d9381226ee6f5b90
SHA1 c00c73d5fb997fc6a8e19904b909372824304c27
SHA256 b3da0a090db2705757a0445d4b58a669fb9e4a406c2fd92f6f27e085a6ae67d6
SHA512 a1e8e1788bd96057e2dbef14e48dd5ea620ae0753dbc075d1a0397fbb7a36b1beb633d274081300914a80c95922cf6eab0f5e709b709158645e17b16583233dd

memory/4520-6551-0x000002A8D32D0000-0x000002A8D3312000-memory.dmp

memory/4520-6730-0x000002A8D4A40000-0x000002A8D4CC0000-memory.dmp

C:\ProgramData\McAfee\WebAdvisor\ServiceHost.exe\log_00200057003F001D0006.txt

MD5 bb36f59ce641666d18d87ff331239111
SHA1 e61fc2742cfa0e40ff12d5b7d7d1515b69d62d8b
SHA256 c09985a4262471a52d379e738af41649b9e5d02e9d59b575e7b22519eace806b
SHA512 575155a33ad29bfef52b12d46c205e9490f54784c2472ad07182a3cca87d63c940f955d2007856fdc2437db0d17e23922e3604aab7290902b07381174b7a152f

memory/4520-7625-0x000002A8D3320000-0x000002A8D3352000-memory.dmp

memory/4520-7795-0x000002A8D3220000-0x000002A8D3246000-memory.dmp

memory/4520-7783-0x000002A8D2B30000-0x000002A8D2B38000-memory.dmp

memory/4520-8308-0x000002A8D3200000-0x000002A8D3208000-memory.dmp

memory/4520-8741-0x000002A8D55D0000-0x000002A8D5876000-memory.dmp

memory/4520-8980-0x000002A8D3940000-0x000002A8D396C000-memory.dmp

memory/4520-9220-0x000002A8D4940000-0x000002A8D49C0000-memory.dmp

memory/4520-9424-0x000002A8D48C0000-0x000002A8D4928000-memory.dmp

memory/4520-9644-0x000002A8D39A0000-0x000002A8D39CA000-memory.dmp

memory/4520-9787-0x000002A8D4CC0000-0x000002A8D4D36000-memory.dmp

C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\setuptools\_vendor\packaging\is-G8PAO.tmp

MD5 de664fedc083927d3d084f416190d876
SHA1 fe0c3747cf14e696276cb6806c6775503de002b8
SHA256 ab77953666d62461bf4b40e2b7f4b7028f2a42acffe4f6135c500a0597b9cabe
SHA512 cff19a724fac387599d98c0a365849078dbcbea65efca1ee445f158268b9241e552212a99e7e0b34394d246e3a06c999a7f1a967f64b2724ca9b623d62996c6f

C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\wheel\vendored\packaging\is-FI4V8.tmp

MD5 b0e4b78ef3c2060ddcf509ace8ca82de
SHA1 7e894dba389a70c4e5e3916705b5525788066a62
SHA256 6a50ad6f05e138502614667a050fb0093485a11009db3fb2b087fbfff31327f9
SHA512 10f6c8309a2c4261715b6e5e26becf31252e0964879287e79c62aaf93eed3a5024e5066a62d31db64d60896ae534d4e10f21b075feef548b532f4797ff506766

C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\wheel\vendored\packaging\is-CTEJ3.tmp

MD5 1ac0c32397b431699625a378f6c21ed2
SHA1 832a86edb71c6c5e128f0a4172fd063de7858e71
SHA256 5e07663f7cb1f7ec101058ceecebcc8fd46311fe49951e4714547af6fed243d1
SHA512 54397c2f88a2440999bc2ffce86daef0b5a2657b1bafb23e5a81ebb655d8930c39dfaa4306ed6796f14bbce2391eccdec993b5cd853db58f9076f125296939bd

C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\wheel\vendored\packaging\is-7S3R3.tmp

MD5 e382e00f0324ab05297d8368f1071dcf
SHA1 fdea96ee084c035525face93abe03e82d55a8f8e
SHA256 760a01795a6b3eed9813a43c9c67f038f4e30131db45afd918bc978451259fa4
SHA512 8f7c309672065ee368cb58ebfd7cb23b7b6451353232a11cf4738e57cbfd882c0bcaa837e9b3228dbc61126e20813f943dda030f76570382cd8b08c2b0e56e6d

C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\wheel\vendored\packaging\is-39UUV.tmp

MD5 33a4fc2a6b34ace3d437fb160a9100bf
SHA1 4f06dcc509cf427a7294036631b07a36af765208
SHA256 3fbb1d479ffb5c1634f4b55860f8479b274c2482303d75ac878a2593be14ba3e
SHA512 eb2859b7f8a05913b5cb5bad2e4a3f8c0174a83f5ded3e89f755bd92ae2ec13d304b70a2600776eb036f70ef4d52ff47a951624ebd9d12dc7606d2032a6e0dbe

C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\wheel\vendored\packaging\is-07NGD.tmp

MD5 8bfa9d7aa566d419f6c8a15e68935499
SHA1 34190a771dc51364fc58f05326e0fed1f37eac61
SHA256 85b98af0e0fa67b7d8ea1c229c7114703d5bcbb73390688d62eed28671449369
SHA512 b5caa4a391d731abfe8953ed83008523f031f5a693c1fff14837e2fe4e08b9c205a921c22fb076c0ec84cfea8aeb895111e54f0cde1940536ad10e4e8f30a972

memory/4520-10719-0x000002A8D5880000-0x000002A8D59F6000-memory.dmp

C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\wheel\vendored\packaging\is-HKR6U.tmp

MD5 e64627a138775b4cb86b934cdf2d628a
SHA1 9e48a008c94d48159224be4714f5f49414873153
SHA256 3c525a6190f1060cb191f6211f7490c38a9f13d202096ad39a2b6fab5e32ddbb
SHA512 5a43dd62780ee5e1197c565bb051b6e234a770883b48dbb08620a0f33a8ff0a126d66b7fe3dbb0c5c9a66debc639ce1ad6dbb5b2fa9f1ddde484af797a2312ab

C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\wheel\vendored\packaging\is-VQS8V.tmp

MD5 95cca11079345584a15997a4714c428b
SHA1 d0e8626cb65a650cf790493be9981f427eec05c7
SHA256 7de7475e2387901c4d6535e8b57bfcb973e630553d69ef93281ba38181e281c0
SHA512 ab91af577cdaf4904526776e866b284e062796e38be59b7a259d47f6fb8bf8e9856153d362be977090302f799b4a9cb03e4fc161df6b0dfa59337ee3d57c7e8d

C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Lib\site-packages\wheel\vendored\packaging\is-2NSQ7.tmp

MD5 1b9414b655544e456c5f5924ab456fa4
SHA1 dcbbddd7b97bcbeefa4e78ad4654cd4c7c2c1c1a
SHA256 2164add12acb48fef685e5a1002f142f4786bdab3b5c84078ea8958957e63ca1
SHA512 fea76c9ddb2f7ef43e107754a4ca9cc85698eb5029204edb83d59bfb7d81a8ee7384f9963c3963270c7a29ee0b42ffdbf3a842bcdae696ec96599ea04ad5aea6

memory/4520-10891-0x000002A8D4A00000-0x000002A8D4A32000-memory.dmp

memory/4520-11166-0x000002A8D5380000-0x000002A8D53D4000-memory.dmp

memory/4520-11476-0x000002A8D49C0000-0x000002A8D49E8000-memory.dmp

memory/4520-11731-0x000002A8D4D40000-0x000002A8D4D6E000-memory.dmp

C:\Program Files (x86)\DsNET Corp\aTube Catcher\Resource\python-3.8.19-embed-win32\Scripts\is-98L7T.tmp

MD5 4188c3e4ca6499b3c48c6547b6b7a026
SHA1 1bca0f3647ac7a016b3dbf7adbd0cf7663c94950
SHA256 a6d65b3dc5a84252f80dd21962f36b34a02459cf7352793acd0cf201ceaae093
SHA512 69518e425b0f6b9c7bfae2675ab4c9fae9827f9653a891d8cfcc07292f77e880dc8e424ee2aa1e6cad0b8559b3abd09b6b0be9b084fb80fa6738e6d92a9fe9fb

C:\ProgramData\ReasonLabs\EPP\SignaturesYF.dat.tmp

MD5 d13bddae18c3ee69e044ccf845e92116
SHA1 31129f1e8074a4259f38641d4f74f02ca980ec60
SHA256 1fac07374505f68520aa60852e3a3a656449fceacb7476df7414c73f394ad9e0
SHA512 70b2b752c2a61dcf52f0aadcd0ab0fdf4d06dc140aee6520a8c9d428379deb9fdcc101140c37029d2bac65a6cfcf5ed4216db45e4a162acbc7c8c8b666cd15dd

memory/4520-11903-0x000002A8D53E0000-0x000002A8D542E000-memory.dmp

C:\ProgramData\ReasonLabs\EPP\SignaturesYFS.dat.tmp

MD5 10a8f2f82452e5aaf2484d7230ec5758
SHA1 1bf814ddace7c3915547c2085f14e361bbd91959
SHA256 97bffb5fc024494f5b4ad1e50fdb8fad37559c05e5d177107895de0a1741b50b
SHA512 6df8953699e8f5ccff900074fd302d5eb7cad9a55d257ac1ef2cb3b60ba1c54afe74aee62dc4b06b3f6edf14617c2d236749357c5e80c5a13d4f9afcb4efa097

memory/4520-11910-0x000002A8D5FE0000-0x000002A8D60E0000-memory.dmp

memory/4520-11911-0x000002A8D6ED0000-0x000002A8D6FDA000-memory.dmp

memory/6128-11934-0x00000218DC280000-0x00000218DC2A6000-memory.dmp

memory/6128-11936-0x00000218F6880000-0x00000218F68DC000-memory.dmp

memory/6128-11935-0x00000218DC6B0000-0x00000218DC6DA000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Partitions\plan-picker_5.31.8\Local Storage\leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Partitions\mc\Code Cache\wasm\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Partitions\mc\GPUCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Partitions\mc\GPUCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Partitions\mc\GPUCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Partitions\mc\GPUCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Partitions\mc\Local Storage\leveldb\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 b4a74bc775caf3de7fc9cde3c30ce482
SHA1 c6ed3161390e5493f71182a6cb98d51c9063775d
SHA256 dfad4e020a946f85523604816a0a9781091ee4669c870db2cabab027f8b6f280
SHA512 55578e254444a645f455ea38480c9e02599ebf9522c32aca50ff37aad33976db30e663d35ebe31ff0ecafb4007362261716f756b3a0d67ac3937ca62ff10e25f

C:\Users\Admin\AppData\Local\DsNET_Corp\aTubeCatcher_Path_f35fd3fpusjrlmrmp2xaknh0ujuum2wl\10.8.5.0\oye2udmc.newcfg

MD5 d774beef5fc59bd251b577f640f8ac22
SHA1 b46a9d78d7fcadba98ba0be903ab2514921663d9
SHA256 67e356cb1e905d4a42f8e496e64308cf86087a767b82c3c137720dfc808ff034
SHA512 82b21c552cb66c244a187b5d5edc87d1a1db8da2e3067187b535ad4c74022842ae58a6fabc5bd58d74d03ed56833d787632ce0f558ef54f1bdc23eacec5532e1

C:\Users\Admin\AppData\Local\DsNET_Corp\aTubeCatcher_Path_f35fd3fpusjrlmrmp2xaknh0ujuum2wl\10.8.5.0\z5whdyjs.newcfg

MD5 3db61a080011dba6c6dbc53646cd15d4
SHA1 60d844a7c6abf530380583c6ff19a66e990925c1
SHA256 0b52afd735ec1a1e6317b5b856898ab65501bc48ef6eee5efe239ef2fde72e36
SHA512 75a54921ef8a43f7db7c9e32418b755ac0d539a40c1ad43e060d9b884e39bd52e2b89e66a28e73d4409e69c17e1d0265bc8cff4ccfdebde42f9ea341a98f6430

C:\Users\Admin\AppData\Local\DsNET_Corp\aTubeCatcher_Path_f35fd3fpusjrlmrmp2xaknh0ujuum2wl\10.8.5.0\l1x4vbbq.newcfg

MD5 7deeab9401b1d95911dc3f9fe7a4669b
SHA1 c06a9ff9d3038d25f0c9e8049a8ac15646762869
SHA256 4d91d0b7dc1de7c170c685ff1012b80fd46a4f7258ff0ada2f8701924cb882c9
SHA512 c203e1db5aed980b4c6e94e69dba3129e163eecb7a194baf0567407636243a3fede7be24abc3bc16ee78b2ee86efec4aad21db3ac5c87ca317cb1f0693fb7511

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 c5abc082d9d9307e797b7e89a2f755f4
SHA1 54c442690a8727f1d3453b6452198d3ec4ec13df
SHA256 a055d69c6aba59e97e632d118b7960a5fdfbe35cfdfaa0de14f194fc6f874716
SHA512 ad765cddbf89472988de5356db5e0ee254ca3475491c6034fba1897c373702ab7cfa4bd21662ab862eebb48a757c3eb86b1f8ed58629751f71863822a59cd26c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d198b1051a6812d842646431381faf2d
SHA1 b2a3f89a878c195339b5944bb27b72e384799a19
SHA256 e8840b6ecab347dd5c247848a02584df7e80ed10ec3edd9bb491f8253cb6999d
SHA512 642aba2ac922598d3c3738a9fa585f9c89b7937f6f5e28c37ee538401d14982e5eda3b9fd9a3571b5e7418db938b7fd2ebaffcec7e6bdb84cadb3457c2baca1a

C:\ProgramData\McAfee\WebAdvisor\UIManager.dll\log_00200057003F001D0006.txt

MD5 825b74b6024610708d5988a334670c35
SHA1 e680f1ddeb2e7ce8b4d7df85c09d68bbcb3778e6
SHA256 6745781734b1d14c57afa6e188f98f337c55109349dc9990ddf04cdca0e1e072
SHA512 13cd2d4b0b0ee7ffff706035c317d87468656e590588f29ba573fa531e5122545d2ca7838c48b4a427cf28bc64637f1c0518e6baf8cec7b22a14a6bb5bc5fcfa

C:\ProgramData\McAfee\WebAdvisor\UIManager.dll\log_00200057003F001D0006.txt

MD5 49cbf92015acfaa1980780f687b0ad7a
SHA1 e80cb1d90aeba6a6feb572da5ca3d5efb584f63e
SHA256 8f83dad189013cb55de351a6729bac69c5e2e92f63cf74679ec2225cc0d4256c
SHA512 3bdaa2b92472dc92df0d24eb81c992b4673c15accbf45929d65954ea50a49abe7561f34bb06314ab4d7bceaf083f8b659876642da63ccc62541dc2ab7a290d28

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5 6f41d2cf2dd443dcabe8a87c87240a71
SHA1 7ed1fb47c948929cbdc5d4ded76d8e369b132df8
SHA256 4c5c5e6bbab7ad93dbfacf0b5d075f227eac7f509dc8b0b89add6a56a58f5868
SHA512 5914cfa74730d1e33bf893558bb87df2079c0955c7dcfe9142a916446ae243611aacced105c05b68a2d9e5145c5c834878bb52108b01d6589ff9532cfac1763f

C:\Users\Admin\AppData\Local\DsNET_Corp\aTubeCatcher_Path_f35fd3fpusjrlmrmp2xaknh0ujuum2wl\10.8.5.0\ymi5qfyk.newcfg

MD5 90981ef44b9664e5ad6e386731608b61
SHA1 c9577e6f2f8b397bfe146ed69b1fdb7b20b5a295
SHA256 6cde879bef05885fafcdbc46b4381013e44d226cef4a06657742288a33073a13
SHA512 718086c05fb2d670fe9878041eb56f665f60b93356aeab557b82fbb51d3ae022534b9609abf9c9d880a46d70826c346dd604b641d01c34e67fdfac4c6ff23329

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 38c2e597b5671a28826324249d0624d3
SHA1 bec9c8fc3efbc85125f1c3b47e089e429e75bfc5
SHA256 f144fc2b3ac8d2cd0c1a3f4262c453ccf0308ce72fa6c2cb3f3ca8339062b915
SHA512 6a14fd9ef66f13e93d3af9249c27ccd73c5d36ca4d76c010c4b344c755f146e1ee20a270aa816b39847528d5ea820747937dc994592776efc06cfad6add15c9c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9b5bf7de-6ab3-4c22-987d-31cc2a2aa3e0.tmp

MD5 d2287dda058397a86d953cadc9072b9c
SHA1 9d72f0795745ed61cd8bbb1b952543acc7e8f9b7
SHA256 45749f4e5c2fe1aba55d38aeecaeb4212cd7de2b1cab237d0a554487e3b763a3
SHA512 f3f413c2c73e6d2b58bc1bc0ac8a99c5972e248952fa1a639cdfcf1c7201a1a7af9491e22cadd95a2157606e56f0e9d3cb3c816d89e2cc23f7507067a4e2704b

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Partitions\mc\Network\d225ff50-a60b-4e1a-998a-7906f7533b0b.tmp

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2676_759449325\CRX_INSTALL\assets\fonts\noto-sans-regular.woff

MD5 0a66f097fb9215e828bc0ada73d19e45
SHA1 f962197011fa900ec29b4bd14f624a3309854626
SHA256 8e5f3060067847d71c398a897b8f8aecadbacadec3324b41d6eec5b3014fed89
SHA512 060d79916429b617f950a86ef6783198ceb844f26e65b7d26fd667a37c577c5913ba4ef183d2ca0e7f46b3d6e13c128a5bf8c4ae7e0f543c53c051bf13a92fd4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2676_759449325\CRX_INSTALL\assets\fonts\segoe-ui.woff

MD5 9a2931180d6b1dc7b33052657eef554b
SHA1 77b8f3cb5410c779206782a310990c19af2b02ca
SHA256 f424915a692bc5a458d6e7d9c99e4fe0cf5cb8883bd3516b01d4fef5da8d3663
SHA512 e839eb6fa727c6a604da142e7c823c5d8b7d8e33b3d19937da7bc1948c32893b08f0ace35c020e391ab0a9694b479b28282024c3518dac995eb87fd7aa18c631

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2676_759449325\CRX_INSTALL\assets\fonts\segoe-ui-bold.woff

MD5 52382539737f4e9913e4bf6b9966bee3
SHA1 d58d3dc5ff86fe8ff594134df53ea9b8074f6bc6
SHA256 d711a54cb4822ccf7926b1a95b7a43107fcfe8ef99a817e6906a1063657c7b28
SHA512 55f1767cfb589eca775f2849b975d8311295951f8e457be58de34983531961ce4fada3a856daed8d7cd712bd8b5fad53ceecf438949deaafb7d5cb87114ecb4d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2676_759449325\CRX_INSTALL\assets\fonts\noto-sans-semibold.ttf

MD5 dfad8b708bc7b6911ed49a6f35680b10
SHA1 44bd4f1602342642f6bbfc019cca65852d9f3ee0
SHA256 6a27c11bf011fbe565c4d5be9ab49d8535c7cfefeb3aa44dad5d1339f68aad1b
SHA512 0ee222bb6dd7882ec802fb21193ec49e814014f0ece7303c16c2fe24f94735f8d420fba59c9cd689748e89519880b723dfcbd4bbc635d2b89261cc336498e1a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2676_759449325\CRX_INSTALL\assets\fonts\noto-sans-medium.ttf

MD5 09dc02dbe8133545806d275a2fec2ca7
SHA1 f85d0a08f987df19288a61f18a22519ce0551c3e
SHA256 9d0511ca54de389e3ef4e8a8accdd94e6fdf73eb144f7bba2017e55924092822
SHA512 afd4ad23eaee89cdf729c8645f3d51ead449d8f9fa943a0158270857141d40c8619e3da98163b17770c09c0409536cd60c367736938645e119e60a11ea93dd53

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2676_759449325\CRX_INSTALL\assets\fonts\noto-sans-bold.woff

MD5 a65fc7725f81daa832e2ac5d4820c2b1
SHA1 a5602a3cb911cdb6ed538c22f451763d884092f0
SHA256 5adee3972bb1a6f74b582f79a5d3b4735e665c00b2e49938a4fb68755e56d9df
SHA512 f8b07d9d46733c8820cf2466a14203710f10ceba789f80fb700b00ff950e5c1f30fb035939911e4d1a4e7ab92f37ce8f6fb47f5d9ab58f5eb5031804e4ad96a9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ace483632762e3a0a7d1d9496ce5e583
SHA1 f5376c990ca49c71c2d3daac6049fcf860df030f
SHA256 adc5a2429efa592b76d88a2689d9aed6750a46cc94a3a91162abf269b05b4540
SHA512 683ecd4bb89a5d4630c6b1aecc335bf70ec0f19fa6a0fb353ae7a84fd2ec5e9782fe7735caf876ee17334fe1c5dc95862d1e59adb6996757ff06a46c7fd79a8d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 68d4e42c4941f49dbc52151744bf7df6
SHA1 affa9d3733000a900c247941053baca9dca93858
SHA256 6496fee0f6f695933cdbbefecfa54686df5c7e8bf0b18eb9d41479c7d6dce443
SHA512 b501c86c53a6ef127297e3e6daa1e64e8d1ce559593c578f54d06ce829b4b2c1bb1e103bbc1fc28a4ab40e2c5678dd32ca17a882edf46886dfcebc2428fd1ab9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

MD5 92900ff4fa4eea907add2bf2d02e6833
SHA1 40b3ca2857b05777421cb3c8964ff60dfad0e88c
SHA256 ea058a83cb189b76c6ade5febaa73722463aba5a299d39b68d1786de3e2bf173
SHA512 b8240f6e6ebcc962585b2a9aa18ee6b57fc43cd4e7885f060085e305d043c9637f0d73861e5a6e2764c8da43d124e0ce1060eb6bef5d63f916621ad049418985

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3605d2e262a98c9ee50c8b6a6f5b8133
SHA1 00fd1f2109325d1c8b328d2afff6cbb89965e2bc
SHA256 ca8d4c1f88047a1fb6f0fd2192ac7b6372ac708084bc5ed9da42d3bdfb90df5c
SHA512 d95fbcfa6d9a11b40dbbb2c42f8a4c39f256edca4cfd454fcde6152260b5d8363bd57c1ff63f5622988a59146d6817149de7fc712217ef14f6c2d996d2d781a3

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\Network Persistent State

MD5 1c82a2e9dd0726819503ccca0b6e74dc
SHA1 9f7c6f0048f83ee248145d257373617cc5aa48c1
SHA256 47d44e67e792e8fd9c749d083186d045e7ec518ee3b11383aaae3dc93e968549
SHA512 f85a6157708becd819e58e25a5d79b0911803cb85ef282b96bd7e47bb15b22f4c664fe7f32e87591261c9d558f1394fca6be0415567a44bc85b882965458b247

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Partitions\plan-picker_5.31.8\Network\Network Persistent State

MD5 7030e574edab701334bef3c7a6b74018
SHA1 d4619907b6da513dd5d9168f262b44521ab27708
SHA256 724c91ed8053a5b29446da9cf43114a3d31613d6c1e42a85a2873c0d026c8a9c
SHA512 e8dc97c0cd4ec3cfe2f8f4aec2fd87e497ec70327f820cf383af46ac1f99b3e1ff02ed5b3f181c96415697c018328dac3bee352f44f1ea7f17c8ac0a18296ab6

C:\ProgramData\ReasonLabs\EPP\SignaturesYSS.dat

MD5 f1ebaaed07561200badff25c9eea5010
SHA1 ed1a95703b6dc80668307e1efe3b93bf00dc55c6
SHA256 70ca8aef3c32361a376e9687f2876cc166dbc5c429b70a1d01801c5a51e0ba78
SHA512 f8b71d8658ac74a6b1830f1cb74a07636b26055585d178df35a4b76926bafd16d2cbfc3ce96da3f8fd6bfd93daa053d867b9023c0ffebe9955e980ff5d224318

C:\ProgramData\ReasonLabs\EPP\SignaturesYS.dat

MD5 8de77a5ac1a0cb41f096b46ce93f86aa
SHA1 0f247215053bbe9799c18b5e2429d3e1f3f17c36
SHA256 b8a4ec881932f0387aee3b5fdb50bcef6c28c1952e99e06ca6136cb8bc978a72
SHA512 644bc1ce3ac4431dbc1efb67de09ed370d0dba488181ca334077f422c9493b8f1dd5006bb6dcbd02d4712998f6777b15d41e62ca429d2e4ffc3b24376b106fc1

C:\ProgramData\ReasonLabs\EPP\SignaturesYFS.dat

MD5 973a460ffffaa07b9591ce64f3301328
SHA1 e3427ccb5682afdbe67fa22a77886b2204031af6
SHA256 a2048698e2d32f61bf51b0b5c83d9bedb4013e2eccda047c6c249e0a82e70150
SHA512 2ebb052fb0d18e06f422cd1e5e1d526aea77fb0f95bb2c9724210dc4ba6c79f6f156b2b5e5cc7e4934c072a83b20eed838de4324de3771915e5e0e690672a5cd

C:\ProgramData\ReasonLabs\EPP\SignaturesYF.dat

MD5 6c954a0c7d0d28beea1cac4c65632253
SHA1 008957f6d1f4a65f21713eb84203825f1b82b789
SHA256 68cbb1d6ee0dc57072e6d5c29a6f30ef2d2373a8fb6a5f17a1e860886267aad7
SHA512 527dda878c68878e9570431d824c2a7bcb3bb56087576488e7a881012b6f5b1d5818779e5c5087aea4e262e57932c5bd9afec198fc7ce9a077a66c659c17cdf3

C:\ProgramData\ReasonLabs\EPP\com.reasonlabs.extension-edge-manifest.json

MD5 2ada9d57547296a2c4a7fd816f34d0f2
SHA1 99d5a06a53d25c7d39b7e8d6649238e4fd5304d6
SHA256 1abc30713226d0b63c3a9cd3e83e77b7f764855510aff5d2b5d86483942646ed
SHA512 bd62c35003910884f4ca328e9acc7fa236479853bbedc99f2f191910436c88a47be4050c3ea35d1b42c14ed25ca1c0bc13b420b7ed7669ea67d10954367cf726

C:\ProgramData\ReasonLabs\EPP\com.reasonlabs.extension-chrome-manifest.json

MD5 f32eca6e96017ca82fdc13d3c1b5b0f4
SHA1 f3e1dca2b60a376a600c0b505c7dc64347ee74bd
SHA256 9f79e3b2668037ba1145f8c908b689c3d3b153a7e261aae4dbf9d359d39a788a
SHA512 6c0d3108408a410560e1aa492efdeffaec5402ec1e4c2f8dc0d0ce1a6fecac3492a17b4dd0ed3ae04988854e648cc8103c95df0eef89f3234db15b587961b68c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 982c83fe4c0bb4a98a6af2bca79f1ca5
SHA1 5f662cc2b3802410c4a7a120b9b3a84428168009
SHA256 ac87db7e5d3fae2c01e1512df16399a2a5913ba93b9a6ce64989f3f0169cc227
SHA512 59dfa876fd63ddfead1ba4a71fb5b0fdad2bab82fbc1e5104af1e82a9ab7dd051720de44c28a650acddb753ee00b48b1dfb699f6fc2b1753d273aa73c672ce64

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Partitions\mc\Network\Network Persistent State

MD5 c9e6daf9b0613c958260a8fff4fcf960
SHA1 3fb9c3c6202bce879ddf632f367e6a92b773e2b2
SHA256 f12d61f2c71da82ccd589b63f72be8d81dee91b3d97e1755fcb6f5833d3f7ebb
SHA512 1f68923d5bc394df96da98c229d6ddebb6e987f048ea4057a61524a17ac698f4b27298ec3192cd35d9dbaf90be2fd01111e56a27354ab92076c4b27d830d38a7

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RAV Endpoint Protection.lnk

MD5 9e81ad96da29090cd356a5907ce5003b
SHA1 a839ea6dae5cbfa178065e13f428437828c2659c
SHA256 57d51c6e5e88637bf81ca10c3cfc6bef0358009418f53253bce0ce1849d4916b
SHA512 50c2e1d67b768a558c2be6148cefdde0fdf739ed6ee5d514334b0265a6591d1a8024f0905dd9216d4afb2d6fb9c61a715962ef165a140854cc827e2165f9ddb8

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5 06c6be681f3eef077ba5b401f131fc34
SHA1 d996cab236f88a3345232a766f5bc786235a825b
SHA256 14387e2a24ddfce9a4651de39d227226b8f6db18d08bf4c2f77f6ec10fd2871a
SHA512 a1450a081c5c3027c7a984e03f8d5e28c435994d8781f0e4c9fc5f6471148906883b8659a8f24acb9314700d51d735b35a5399f607181a6d20efd56305e4bb02

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Code Cache\js\index-dir\the-real-index

MD5 4890fd3205e901bcd2da005006c7ee66
SHA1 c279dd9a2ab0849fb3bb6a5335e5ffc74ad1af7f
SHA256 e740d3d0d5544612fa58945d21e6cc2fa36196b24ff73a1dd4661d2a75a447f6
SHA512 976d33219719ec4a07577bb2b261925ed64191431b967035328d7b16640204c54f39e0f4a54521ffe9a9c89d88c8abfc1c5274a0e36ea7a529326a102b6c96c0

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\TransportSecurity

MD5 147405bd983eed0af292e7a5f661e1e1
SHA1 df1bd5b40e22b35536e02df7b6ef6727d983e5d8
SHA256 6272cb6ee103aa55f4e65487a0dcda63ceb4a3094cb8456c60861819b61a08ef
SHA512 2e86d062a362c56ef19837f383d8f63900be3ba401df425813896012f0714db2737565c198fcc2bd10db29fe89792565fa99fa14a29f4f2aa62e46e381e7019b

C:\ProgramData\ReasonLabs\EPP\MC6\S\cs.dat

MD5 9c1ae2f1e5ff9f582c876632e25cd27f
SHA1 72426aeb0901fac01036c0baa21315420f884c15
SHA256 b854506a515f933b58cf57ee44916687ef3f4480c90171e4d02ebe90255918f1
SHA512 b442a6c8f09ca52013c2b9867ae9140b5027836628b0e065ecc963d24c47cd66ef9c83b7141848d3eef6878b5d116f2ed07d865004a553b1c41fd29264a8f8ed

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\TransportSecurity

MD5 0627eb3d294c0372f871c26765890569
SHA1 febf95dab7a37ced218a20f17ca388a24518b595
SHA256 6867ad24ab6b2cf92ae8246a78443d7c0b43ce362490e2991f0d4c81504ee404
SHA512 4a6ba22f094529e9c7e91a0430cb58bca10b6e7cac7826bbcd4b927a0afb635590fab96143f3f54f46e78d7b906764211b96a8ff65ed9b792d4fce50f7ba50e3

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\Network Persistent State

MD5 b31fbad2fc419bbd1df0d21bc0c83c75
SHA1 351f2911e0e9811f3bbee7834933a6a65a9e8307
SHA256 d1b8960d2dd3a4af717883305712a8292c268fbc6904b99fd46f170745e797e9
SHA512 7c6f54643f4e8eeba77643ffbc85f8c986b283c3df231d410dfffe422d40b727c03d4c5466d76522acb6ce47b4fef10fa423f6bf4109820990c7bc9d48f7a3be

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 cf9cadcf2cc9bc110fe76b2cde904068
SHA1 da1d340d1fda2f93fc2f736679fbf963481cfd63
SHA256 f62a36ca9cc0eee78d687dc3298fe4fe931b60f16790b8b30a71f3cb5e838021
SHA512 203c86d2f0f7ac4b69dc926881bdc14161c114df74e005e8a84607e0400efad64aa433a6fb9f9410e87bf8430fcd6ae71d8fa659af87a335bf9297e069f792f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 de438644d96ae4959f628b80942172b6
SHA1 cb03af9a6973647130f599cc6891b117f5efa413
SHA256 7c23498e5a85cdebac271df7bf17098fcc69b11bd7a5e1915cfa141c715cd87e
SHA512 9326ea9f6c9336fe76a5da9c91a25c18ae39abd2868095ce89bd2dd73144706546df880771c55e80f766f3c343420a83b8a1445956e7991007fdadd1f99ae3e4

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Code Cache\js\index-dir\the-real-index

MD5 b80c178a1ca083b3010acc4fd4b21dcb
SHA1 0b93d9830a4b84ed352bdd8e2d058f3783bf5f0b
SHA256 88fed41e2c146c01821a2db816bce1971f5e975d69f39f7fb4d6d6b027ed9e9d
SHA512 5a6eb436ca3c44c435c193171d8d05f1f9db079e003b37e0ac2846e6c6e0280c9f0f40fb3f210835009cbe839e1e801c65efb8b4201f7e75595677b83b6d654d

C:\ProgramData\ReasonLabs\EPP\Quarantine.dat

MD5 0f72f50ef6b95791a7feda6d932de7ed
SHA1 2fb9a146d0c05898115bd499dd2f1c99d54d783e
SHA256 e5991f167f38891596eff8cd16b8f662f9dc58ff30da08713510c194fd575820
SHA512 7d2bcf443cc1ae19ab6ecc8c90b7f9840c28877e120365c41dedee4c56abb5c5e3943877cce30c9a498eee359baf44443673b46ace9df7a85cfa74dd7a2f4140

C:\ProgramData\ReasonLabs\EPP\Quarantine.dat

MD5 0ee7bd70722a3d85402e7df5a2a71bd0
SHA1 6b5a12a576438e41b6311d12c7a120fde7eca956
SHA256 d7fecc8d9d0583b084808c6627d8b826849147568357abf82f551506d2b573ff
SHA512 1ba9a68f6983f61427e14e0c07add02bd04dfbc16f107242d16e7e98013b7874178166ff5bcc376e675d5176ab274486c9333a172346e926e351f8dca4b6227a

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\Network Persistent State

MD5 1580a28b15f72b9f0053debbc950d58c
SHA1 0480871a2c9e5ba2609784242f6dbe1ee450f72f
SHA256 9fd1bcbdc341335281edf822d8f61ca6f5ce995590bb6d4591fdbfd1ba182537
SHA512 d523eadfd703787e67b7c17fd585eb7a981841994e378edf428d158265f9811ed2ffd0e208618bed494bf36a549ed36a4cb1b08400f232b4b1dcce6465e59a7b

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Code Cache\js\index-dir\the-real-index

MD5 09fec8463107b9f05addae95d0dfe04a
SHA1 1dc62703189bad01f585c33cfd8a2e278d8451b3
SHA256 1234fc5ff7de7a063928027c2b2d64fe66b14e023d32201e06c84df6363fd1b6
SHA512 bd492b7c6f49f6c16583fcd2dbb5d1383fae9bceed3fc662335ed2c99b4b738f46b533e7194348c472a3ecc2948d1c496c33b9fa7071d3597d8f89264567fe8f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\684bd9c0-04b2-4566-8035-549185246f75.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 56082b65258c5b0033dd0771d693bf12
SHA1 e1abe4ef30cc6ebae920bf774bc0eb6b3243a896
SHA256 f9d0e3cb8800f3eacd7bf45607ea86db104755bde57b7282bb3f9df1f0057b3f
SHA512 7d27bf0350c4e459a177e71d3cee37a281c5d668c2c892aaa574d633fbc9582d4fa0506a647975a13e47fa666928b70040ade2f5cc327a888f9da5bd2c6fff2e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d32f830317bf481c1006cd95362d4cbc
SHA1 328414ce41cea6a40480d296ae59d844096cbd53
SHA256 cac064b39d528cca51b4a3363f72bf74cf9ea66b80f734534ad316f6464b8264
SHA512 4c17be5742da81696a834a4fa6f304985c4df39e0c8e19daf8e2cc52c08268df5dc8e7a3f8a9d4dc63ea9ca27b1093f729fe9674078a1c2ee1a92b61421aff62

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 11f65a25976e64bb0fbe307e4847959e
SHA1 00a25e412f3bf121620267e688ba308b8937212f
SHA256 ab109918e580480874f8dfaa4f52c5d34deea6fe7482cb245632781203ada819
SHA512 f0ebb51b66f2227d13ad526f8718dab8b459305bad060dd74f4ea1cc2151a2063287e4b367dc45017134fb35123a800a2af656ffe0a11b079ac2d8f61cdeda6d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 92fbac736a0da4c9352e79b84195eaf6
SHA1 904ccacf15f7701a75f0a085c30bcf03a9a33a67
SHA256 5bee824659400a7773ab0cc174cf559bd37262b7dd0e54a066e70af7f1697d24
SHA512 462e7c09f26c950ff1ce6cc7afa6a10c1baacda9177b3bf19596c716e85d6699d387417c7498a186eef865a0d00d271639ae0b372347532ee57341703fb832ff

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_499847728\CRX_INSTALL\interactive_balloon.js

MD5 8811c08dba69f3dd5c1be93169bd13ba
SHA1 e00f8bebcffecdad1a0efd4cf297989b5424cb14
SHA256 5a1312afd6924fa1ddd84e14e420c13cb94980886a3fee322647e29a3a7325fd
SHA512 872cd6836cf9d43c9a6e7b3cedf75fa3b81f907ce322f90b6d80f5b07c28ab6ed8b70d7ff6fc2a673535c499d695ae3f2d82ee9e144e15b66cec6b78074e3708

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir6540_1834461960\CRX_INSTALL\about.js

MD5 2fdfe23e0bdf0b0d9b7d9f79c1ddb806
SHA1 427278389f92e127018ab6d3c990957d93a3a95e
SHA256 ef8d6acf796f3c3051c5a86d1c4551e2748976be9869a1c7a4f9ea9b539a040d
SHA512 cecdc80f93aa751613d6451a8b2cd7086b55be25979bda521fcf8d19cdf1cd275bbbce95c731024d68250be742ced20588ca70c80d3bc4379358e694386dd355

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir6540_1834461960\CRX_INSTALL\scripts\content_aps_balloon.js

MD5 8c522f603f9558cad5a9af1d4671977a
SHA1 425b1eb95b1aa43eca0e6ce4aa2cb47d76d469bb
SHA256 96b23f0144982daa0c109ff5a1970a7645f5f430dfe492f72024ea6c65549aab
SHA512 11c70997b537627bf2006ef85b28240cb9591790e1585ba28c3f3fa7f37fa32f9da6809e59b93a0deb56de0056203532d2f38a2f516a5c3bf4c60b86cce0ba79

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir6540_1834461960\CRX_INSTALL\scripts\content_rat_detection.js

MD5 240ae84d325509c65c4d9d7cd1b83fa9
SHA1 b7ffa283fa3addf14bf03970709aaaca09b986e8
SHA256 8f551cea3fb5926b0ed072ae443bc42a43254d4ea98a627e662a10967c490d85
SHA512 9a85e31140a0bfa9af30eb483a5562a2527520e420bbd85b16e736fb5975b6db265d84165b7f9805ce741c32f192bcf3168cab398b75a25e55cf1de5d44ec1fe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir6540_1834461960\CRX_INSTALL\css\site_status_site_report.css

MD5 d28af29bcad60b14749fe607dda3d46f
SHA1 e45625e35340dc1eb555b24117538293f23219a9
SHA256 3f90119d778905140cdb1a8502e74e557ab540e0df46a64019bb17601c916f70
SHA512 8ea45acfb025f326dccc34edb9dda78f1fe87faf72802a2584893e32ddf46357ea2e006346a52f25bc9875d348abe0d8823789f98df29d484e9d845d92ff44bc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\8.1.0.5236_0\ff_policy.js

MD5 65ab95ea097eb045ede98a5a9911e11d
SHA1 4e2f7880681bae2d929d99bfd18f1c4e75b30d76
SHA256 cd09e4f07f25389e0ecb44e82ccc672c84065cfda3a09dcbc63df5eea3b926bf
SHA512 322c891114d3242cca615cce80cfbbe6f04089e7cbd8e92a83004b9e1437a752c9104e47e5926d540f45ee211681dbac3b1bb75589c47884b46f019c7ae72573

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\8.1.0.5236_0\images\browser_action\green_20.png

MD5 d498609be39540e6b441da31c3de20af
SHA1 1780747374c57bf886b33e957d561ae2367ee09c
SHA256 8526ea04f38e5632fb77272d9b03c0ba6bc4baa7fa25fef8adae81769e87f078
SHA512 74b567d12a49e3e984b2801eec23cd12c26383ffdaaba56b2971288e2e9d7da29fc94bc35eb12c8e00795d599ecc81154c606e9e5acac883f5e474e2fef7454e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\8.1.0.5236_0\css\ff_policy.css

MD5 feceb462e4133beda13a210ea234ee51
SHA1 e32e8ad6bc1d213a3b444c4f017583189c3c4e5d
SHA256 1f2923645b40e5ea60a00f29945e03144656603bc064bf10901cdad1b5491896
SHA512 28aa3eb3fa94b508f838be2af0562b19d4146aa820e264f908e221904048d47cbea4bb66dd60c161e838fa511a6f9d7e96299dd20ad92590739cc0603afc307b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\8.1.0.5236_0\images\browser_action\green_40.png

MD5 844950e5c560a509d18d08fde84cae1e
SHA1 f6b9fe291596760c54ef3bda7e86539ed1bc174b
SHA256 fb5b7a7cf4511a085f10c7892c30cd6e96bc1dfcfa77130187203012975c4b32
SHA512 b9e3b0efe15fe08dc36f715379f85e4152656bfa5cfcfb68ead4053c64c7c713c7c01cfc473147ccea64c2d210b49dd9078ca37b42c56353bc52939011a6c64b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\8.1.0.5236_0\images\browser_action\green_32.png

MD5 a646de09c67221f0b5635b208852fa43
SHA1 4dd709d378ec9e3b7b88d3400c7c0d159dd7a46e
SHA256 0337efdfd486d0877b3eae8a9c251e8c56c1e6787f48a412ad4b32504a46e1d5
SHA512 cced6b598b00ca4bb968234b8b08ad40fd2f8ea075a76ef6b14644f48b012ff7f95eda4317e1827bfd5517eb70cda95dcd40c0b110a28739a3e166d7ddbfcec8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\8.1.0.5236_0\images\browser_action\green_16.png

MD5 916575e87ca461fde65edc2dcccb0134
SHA1 bd0a7d65b1511b0124ad926b51dd2c98d47d1f5f
SHA256 073a0ce56d034c829b3c09102dbf50b4a9760118a3a49a5885fdb44abf36a58e
SHA512 99dab1542909ffd3c0fb81dc68f9563dc1be20bfa1e3fd1c96e63261ea2b40a5bc814281de42d17a5924f20de8d1ab97cf1c55eca676416e4cb5421229475efd

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\TransportSecurity

MD5 17d109c93adf03b86eaf6fa4b51c9b5e
SHA1 5c3093b154e05191b05903d8edc40cccd0fbb2c2
SHA256 9d685f0a7906a08ff62fbe6568ccc0b95d33cd99eda9d65e38ae9fc7f6f0cf61
SHA512 95b6ac1598d523fbdfbb22a5cb2a46fdaab7175cc9aa7bfb2c8059f09566d070664cea999a76dc94bb4eae122b6b1e66c0f1691f533c913d093071da555443b6

C:\Users\Admin\AppData\Local\Temp\936fa6ea-1f97-441f-be41-b3b46212a96c.tmp

MD5 3b79b1bf458c7f1b735408c36e77b400
SHA1 c706d975683f7523a6345564ef4f7c1e398f507d
SHA256 6baee4c573c424a5ddcd12d17a9c18f2d3f926e14f7d0e5dd36a197e2aa9b780
SHA512 c822ad57f0d38aea893e8587d88f6bbae0148089369cc0f9b964bb68313c1ca4b842809430b9b6f78333f5443ab4fd78f1767f4bd45ffa40f81f3709a655c6a1

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\contentScript.bundle.js

MD5 b5420e42524ff930ce283a078768460e
SHA1 505dbcb230b71985e0b75e1e323ebffe3b15f295
SHA256 a5d2108a9097c9f3fa821b3b90d79c5e4824f74ca21a18c5ff7271b05fda83c5
SHA512 3e8df8ad43c6dc59fa551719057f631d197402d7009b09be898454f28e56378c8539994a22c6141ea527f37549554dfe74e3169eb989d21e9ceb0637d22f61a7

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\rules.json

MD5 5736d36e31b7bc0d59788d30260281ea
SHA1 c2810c0335d1760d2ab337db349c362596df06be
SHA256 79ecc25acaf4d184958e339a9e48a1f0d187f82a676843dc6a40ff907e1853f3
SHA512 046686a280f60d50791ff8bd13989ba4bf058f402bc3d45c3688bc60e8ea91e6e44ec3ae8bf66f1e47b66b336ea8b0f70f20ff1279f6dfb377d662d633296c7e

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\index.html

MD5 336fd61de62addda84cc9e5c283b7e67
SHA1 6b5985b920c40c61fb320f70be5f89233754699c
SHA256 6476c7b35152cbbe4906e94dada4e68faf052744cb0da74589679b86d49edd15
SHA512 2f641a563c6283ee3582c597c10be2336a18cf5e4a1e0c1a3c8b661e1ef49774145f15630b90cb5c1f9bd9439c6d64dc2bfc160763ae3d949eb0eca805bfbad6

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\assets\images\arrow.svg

MD5 8a4011cef8b4f6e1fe6dfd28c497ad69
SHA1 395ce130677ff0b579f1f3c7f8b45b8489490094
SHA256 31313b5ae51fffa0684dcd10537b9534413f105cfcfc3a8a39890bad5f3aa3f4
SHA512 e25314ee23995bc6d8cec92bd969b9b7e956d46e8bcf8d3ac209445c6f551d311468382f145f8017f6ab26d7cb8c9b6a0c4b3b41c5e7c3f03384116bf720ed85

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\assets\images\close-white.svg

MD5 1fe8bf19c860d2e13f6e9f1ebd2778cb
SHA1 3a47b23b93a3b89abaee6b57fdb597a742be1d23
SHA256 39c46e8e2da43cc6f31ec85120a8879bee0eefdde9b20ce92d1f5e8733b6eb40
SHA512 a3b13146700e148dd855df06045b374ad0f887c3e7452daf480ce913e47d199425741553d9c56e01721739829a1f741d27bdb564882499b908d55af55f57ea71

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\assets\icons\icon-upgrade.png

MD5 8f0dbfccb36007d663b552bb84db01d5
SHA1 709b15810f26fe075d1037b7d90e196f4471d574
SHA256 07b43077658e1bbc63ac5c7431fd1940f74e8231a532a055de9e2fa0ae79b0be
SHA512 064962f997821ab44b523dc6a7524b6ff21352d90fb9e13281a72ad4d09d3431173d96c71277c92cae023f91d435700169113f14171446d52e65e48b1a44f719

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir6540_1121662581\CRX_INSTALL\_metadata\generated_indexed_rulesets\_ruleset1

MD5 54b8963605e13d9f85e145b3933e233c
SHA1 e6eae0d378cb72ce897a976dfc25ceffa9a0c900
SHA256 21ec97d6415cde5c52ecf20b183b9a5b2f76aecc8088b9dde49bdf195d1e9038
SHA512 3c4dac3f506789627bb858b67a94b8e7a87cf41fc801c7f3f2b827dfdd7b73ddc31ee342dd565a4ef592862d4df1c7c2192568de2fa9d465f0cec690d1f792f2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir6540_1121662581\CRX_INSTALL\_metadata\verified_contents.json

MD5 80d790a55ae2d2701215f4a15532fcc1
SHA1 9befa4db3a84e4be30b50d48f9aab8e23a84dbb4
SHA256 c6074fe44a93eb2602f1b9cecef55750852095bcd9a965b5e5c0886fdb8ed220
SHA512 ba61300014fe654e3a9d9b4f125c6929167814b412eab1c62bba0068d522fb9e26b16217b723d34b0a6d02960b7bc7d18bff503ec039c66570116aab79c94c1e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir6540_1121662581\CRX_INSTALL\manifest.json

MD5 79fd2d1b6d8650cf9617b718fd32172f
SHA1 efb92b2fc5912d2669fbb2dbb9dcaba03c4032ff
SHA256 fd01b3530f32066b9b23c2eb79fc5bd62a4b7342de0bacabb10439ca38522630
SHA512 9e301f0b14b16ea06ed36db52e48d6dba9aad840c7067b7d850abada0e0c9d0c4e339e553f401a4d6eba56703825ef5a628665b1efd2845fc882c80bb5cb480c

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\assets\icons\icon-threat.png

MD5 02e2204d82355dd71f3e9a493087ab40
SHA1 dd3e5c7ba4d4f7d4784bb040718ced43b0ec6d57
SHA256 d6c4b23336f9539c8dfb12a44282aebe1c052a8bd2a808587c08b01809a755cf
SHA512 035814b7e5ecee257c897e4ce0aee38839760eba0b745df3258e2544429e3ba0a351eed5596ac6125b2c3ab13aafb8d3b97383c2fadb56ed315d7a0b7dd92a54

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\assets\icons\icon-34.png

MD5 15b14e66c46e0a83449fea81f4d0e59c
SHA1 c3512dc47f25eb700e21a04f0925aa9d6996f08f
SHA256 10a9008f1b5e61a13f2fc225e9444f17a30036f76855826ff0f881de880db15e
SHA512 c0296a9252e9ea8336a28a73fdeb6d90a3fbd13cb5699f9b90e8b2e3858f041509e8886d056b402c5444e9b36a5950fdb8dc93dd46c15a79d84e1e579b5cd887

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\assets\images\logo-white.svg

MD5 716872be17ae1eabffaafacfb8c0d518
SHA1 f2dd6d573d2fefe6ee189dafebc829098e6c973c
SHA256 824842f23358a42597e09fcc04efadd083e1bbfd6a75a863fabc413713013cf1
SHA512 a54c370a019f85be810337c5550392cd55c6c208b8ce71156c670cd6d5a62c6708f9c4a2d7370c76b0bff3c4dbdf2f99df3dca043084d3d1b552011f0688de40

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\assets\images\crown.svg

MD5 e2e93bf6f4365635d8d01a854caf31d5
SHA1 33502919a2f609b8ef7c8a18f7722d3ce337360b
SHA256 7bf49e91bda1b6dd05b94288fbd86391500557f272b4f8e0ad3a69549e7a6104
SHA512 5548d7fc0faff4ecae85888dbe938438390d478110c26db26e27f9764a3dfc3e5faf91789f84e9e76575b8f371a6cc0cd90feae6b8e3dbf317e59129b71cfeee

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\assets\images\close-blue.svg

MD5 8d8bf8908be87508c56d626e0a776978
SHA1 3cad5703edacdadf1dc6fcb48fe921712b16fbf0
SHA256 9c5c3329378a3bfba29911b873f1d94239f6ac54dffe6bab113b3d51d8dc0ae0
SHA512 fc0b25c71d69c3721c104afd9ce6af91d89a92a37bf47f97e7df96187e45ed25ac08651e564a09281906e678f7df25af11aeff44b80a3fc17bf2c25c78e1236b

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\assets\images\check.svg

MD5 0b2e057ac7229a93f0c0815343c57ff9
SHA1 4c99a278bb5dd30203fb4f33f8d3dcfc5aae5a8e
SHA256 98ce9f3ebf75b2ca71e096bd01988540667d9e9636d5512fe17d099d9eba91ea
SHA512 daf1f0ac010b53f48a1769201bb48df13ef40531e55d3b0736925fdb81441af75f6d3f4e068090feaa6c8ece9f5168c8e44e1dc18c171aca6ef3596a596e067a

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\assets\images\attention-icon.svg

MD5 5232d122e13560c86cf3ff0c84ecc3de
SHA1 7c0a78dd1c15e4b50943e1101f0caa8c0405f2c6
SHA256 616cff0cab3ee3e3b69aff4423a541daba199172d2eb2b0f5e7d83e1d6e13f99
SHA512 619222dcc939be36477504882d3a6689a58f9ede708c135fc621d1b8c9d3d9bb4bf6abbecfe7c13bbbbcd7ae2f0f150baa3ac5cd5358db0c057453042484d7a8

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\assets\icons\icon-128.png

MD5 a3c4a97b3abf5c40532df4c73b6a0aed
SHA1 487bcc26a31f4545cada98e13532510784f3d9e4
SHA256 dc9ab4985526d23074e9cf2ee176e68dd7a5cd282c147df32733da083b7ce8a6
SHA512 71c82630413b7d9e8f2541bb036b1884c2e88ba5abee2e6abf79744951f1f2e65f7a3d82fb59c274ad7f02b3e49ee5fa2f20973410db3cc2ca92e6bb3dd42fbf

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\assets\images\logo_with_name.svg

MD5 7077be1629422619bbe5057dea2afcf6
SHA1 dccf730b9bd0ba9fb7c505f350aa2428457bc952
SHA256 0d28843ed45447345a2437b02ac99a6426de73143015d70bf2eb43ccd4fc75fa
SHA512 48da879c4223098c02814106279abcd6e5cd4a4379baf4cfeffa2fa7a961c4d8791ce10bb79a6643c1fc63d9b57e969f4fa2e5a2dc47e2ac60a1970b2f67f24f

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\assets\images\logo-blue.svg

MD5 846cbae00ad12be63ce5319c6a260323
SHA1 aa840c643cc93e70f704b2d191d4686df04c11c9
SHA256 26abe92c6ad8587e0a373ed74aba3c33f82eb2c8efefd5fba08ce66014417fa9
SHA512 6f3688b8964a38ddd081dd9f431c413656b44de3d0cdbc14a536ce4a32a1ad5fcf7a4f3f5d75b2c986e8fa647fe75cdd32bbaef27bec39bd9c4d03b328a8eca3

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\index.bundle.js

MD5 21a57bcfd8166f1a78e93ff075073dad
SHA1 b222925084dcb825c56a1f4d061ce60d73b5e697
SHA256 5fb95e4a8b1ee5fdf974bf4fa3e0890b3d973b98598ced1fd5f4cbfa27e7babb
SHA512 5de66932e9868b16eba364c24052131fa8bad2e097c72bc51f8493b91e8380df4b4717ff97536fb3789a6cffedf198c8b5bfba395572ceadf32fa1eeb130417a

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_189112014\CRX_INSTALL\background.bundle.js

MD5 a0f181524d2f89830b233309e578191b
SHA1 5112f2f12100b01f242b0690a3aaf5f7e729cd9f
SHA256 727de56a3efb2b77feda4ac895cd5ab0e7f24b28ebec029b0b3460ffd5912eaa
SHA512 f4324039feb00e2109372a40927d69aa2f739d2dc8383f929689c510fc1a14bff653fe179810daa5d2a4c5518c846020ce8fdfdba403e400535a49f6976b8c59

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 1c4952f93d59764c13f80ca381a11dca
SHA1 3cb5d3abb6b1e87cbf3236b6169c3ff47baee4f7
SHA256 3ede2cfd461fa3d793968589dfa2fb5d93437a3d1a4f221466143473b7d6eeb6
SHA512 2485aed0adde7112b41d2613c35d517e27d1f3c77f9f60649ec0b8b260a24c5125ea182a1641b0e95b0a813679ca0fada1be684a68c4307e5e4282734aa3a0cb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 05d022b14cc9aab05a5cfccbe2d06998
SHA1 b59bd9752b7a750444e9e800e66e0ec89dcd1d74
SHA256 cdcdc1bbb7c2b43d29430a502399abd8a7597f55652d533fcd670267b2f08d98
SHA512 674cc3692faa52e022363a7662eaf79614ad9f92a76932192dcdc1792e4c14e010ce87d6961676ddff9b17390926f797b58988a556f71b6f8d2424dcfbb65d29

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 866c6b06cb0db3d0489f541fccf948a8
SHA1 056c6c99004406ad92aa54214ff3aeccea6cf452
SHA256 017687671f049db9f1d782cb5db821a13a0e69be03144e0d4445791c097bf2e1
SHA512 9abe32f19cc0bf65f9d660e22f1dd1d086099b010ce29a9359850238ccd99bc548d2f56f67a42a9b9b2c0b05a494eb66638dbfd1393c99dc38752985d6912289

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2e105e76adec34cec2765893f41cd430
SHA1 18395fdb91a3723761241c06989fb05c4f9ec4f8
SHA256 7d4a92d1560376776cda0f1b7ef80171d41d94d0d10db897c1c689ffd7efef46
SHA512 1e25cfe847701694a81a0ad0753bca54c3fd56b9a00489b55ccf457c20ccd96acd0b0470ea018653a0235a8ab21f3ce33dd22ec007bc05e72297b8a438070606

C:\ProgramData\ReasonLabs\EPP\SignaturesPacks.dat

MD5 921c2064015351d735038ecb0cbaba28
SHA1 7a80edafb7ce84a2e4850f67d9685d15b7a8f4b0
SHA256 f584d261ebcf039d4a7dc80461067d79bc9b6e087966c5c99ad36908062ce5ae
SHA512 3bbcfd1be3ab58c969f823b53817a81d49b1859baaa6bfd96e920d39dbdfcb30ddde597e70ef040a501e2b9ba3154631b9cbb1902bf9c95e3b3a8d758effc36a

C:\ProgramData\ReasonLabs\EPP\SignaturesYS.dat.tmp

MD5 afb68bc4ae0b7040878a0b0c2a5177de
SHA1 ed4cac2f19b504a8fe27ad05805dd03aa552654e
SHA256 76e6f11076cc48eb453abbdbd616c1c46f280d2b4c521c906adf12bb3129067b
SHA512 ebc4c1f2da977d359791859495f9e37b05491e47d39e88a001cb6f2b7b1836b1470b6904c026142c2b1b4fe835560017641d6810a7e8a5c89766e55dd26e8c43

C:\ProgramData\ReasonLabs\EPP\SignaturesYSS.dat.tmp

MD5 f371cf8dbadd17e03393aa21f3963401
SHA1 8b7a906b5d6ab57a3bf7b32401a286e812327813
SHA256 287e1aed9f449999e9852477960f8b67b2b77869463e1baabe63bec75142130a
SHA512 d910f4d48f4f34c0d9a68a89fc846e9c776081975c8d0bb14478c7978d8be43e4e2666f957deca1ea411032d08b9b2bed19849fe284e4a2ef91806c730cc570a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\b16f4d49-601d-489c-9046-066920409179.tmp

MD5 1eee7e318d35f5c81625babc64521171
SHA1 668438196cc45e95c99e8605db7a8e1156c94508
SHA256 4ca11175ddc6f49a197fe8725fd96d8a6ffeb4e55e777a26f5bf87a18450c111
SHA512 4f7f34c4d9bf2616afc62df190283a9b432c3c69147ca721f909321d5d19892462106bbbb4f350c65f2391aeb542af314798c8c34a5887ce6d5ea69fa560545d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ad261d180ae971569fb8efa1269dde6e
SHA1 30884247a61891d6270ad9323b91d337f6d13f80
SHA256 281ccc5101bf7934da3643317961341e95767e17d1f1bc88f9e058888d6aec38
SHA512 7197ec00d5e6d9efb99555491d752ff787f1caa2f4b421f907c2819f7c50b8814f04e5376e9c4a2d6faf385352dc06830d3cd24ed89a33e48e6e229171e613fb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b6921a9763d441ad41297e8335ea56f6
SHA1 33bc482945baec4f47fe6d5fff313b1bf68f02ee
SHA256 463eb48d1d9c7e51447597320ba4c110b5fc2b11138a8d6ce53ca64edd8c5977
SHA512 7b5e65651ad8590fe90c9b248725c16108ce1764bfdf481fb094253c1d08b3acaab1e5f9e2f42770e8fe1327f5b04f6d2e9d306fb21a2bbb975d249081aaabe7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 37ae906fb5fa11252d6983720d17a7ee
SHA1 7e745f2f4fcf09e35947baf5e84917b106dc840b
SHA256 33c3abb8a9794d5fddf921472b2301e590f0454615d466ccc6dd0c2b648b3bc1
SHA512 0f3ce436298548c15fc12dd54cb6644588d166c2edd15479bac829059d0e1c3fc5a7b2147ee46366fd5f82f81509a88eb18c88deeab48a1a42e23710561c1c2a

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\Network Persistent State

MD5 c5e35b1a4a9b382294ca6c12fd47e425
SHA1 e3587e2ecf27ac83767aa57e8b381405e44404b8
SHA256 3ac71db38e3c90532c3df436ecf210429be43b6c3a03e3eaa8488e7e7d57901d
SHA512 ee42021655f720866eb00be1a59ef86f53fea5cd57f37d79e3f5916db6ad7061f328162f88cdd2b2fd846fc5738f89b3393bbf91e7eb661052306867a1306282

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5f50f7.TMP

MD5 914c3797199c5456beda2b0ed7bca1a0
SHA1 1e025f14ebbeee8871a821bfc374612c9674d2b6
SHA256 df0b647fab99f1045cf472096119370afd4413dbea59fe2583305fcd7e2b1354
SHA512 c58e6bbf3be42e11adc3b73c88cdd5d98b57e134207ac32473b01cbd4667d3692a7b6b42ba86c0ac970a1105c4f7d2a34bf8da8d80dbb501b6ffba6c909e4447

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c2c731accb096061f2a0a11b786cc3c2
SHA1 11e6a6699edbe14247f201befcda3577904898cc
SHA256 12b86d835557c5a2442c1f06c3d8abdf0119c627fc5374812b11619f6c372f85
SHA512 ba7e9d958b08e7672b6043697ccded6ca316c2ee7a49e1e4f2edde2be3950e9fb83a5f0eef358ecf561f6c0f3a3968e6f24cc0e5f399bfc40eabda13f0aa5263

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\TransportSecurity

MD5 e1f9eac8cc14d2ffea0a098b56f4abb6
SHA1 8bd0b94a38a8dc052b24c6bf90410eb3d76d5321
SHA256 c2900fdbf29e17529875eadc0a1c4722cef342587217b45d92484790638d32d3
SHA512 f28db217e2d3af87ac90c90f54d1bf0cff349ce5b2b8a647a844a622ba10b9ab4bf32dc787a2277b5d4a30ced661a0ed1725031491b39b7e33e5f84df9293b6b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2f3185960e978f6ea863f33c35d72da7
SHA1 043372e778b033e4a575828142d2aa07b070bbbc
SHA256 2a0cd74a17f81d66286ec16b6b329d2383223ae77ffbc6ff266d070fef69d9d7
SHA512 cdaf7f306f78a9cfcac672260823276d777627d331bdc3428f716096ecebcfa69848ca008b6c362d15a459a433069692ec8906fa46e11c5c6a3f7122ffa40d73

C:\Windows\Temp\asw.63e778b01ae0e962\servers.def

MD5 64cbbd842c50e8489587b82a7b14ab4c
SHA1 d63da443a36de0976f78ca816cefb6e66f97b9d0
SHA256 fc454821159496cc8c3e5fdb41e3f3c855746ea94b27b6247677c2e8e4c30624
SHA512 22d7a03ac884419aada04483ecfd454fe7d6fdea25cf508783226b9532cfa373c84d50394a75effd2f219d25d6a216056a28847268e30c1758e19683b284f4e2

C:\Windows\Temp\asw.63e778b01ae0e962\asw93cd6affa1e0971a.ini

MD5 80351d56181aef8f5d2ca75c8acd4d7d
SHA1 795223257ea4c03eae27d736253565224e6f14cb
SHA256 ccaccb2e3595c28f6941eff47c3213fb187e69ff1a3c74098e9384a91f7dc262
SHA512 f47d7dbf91881c6de230e916d56af320ed3a0cc0485f15805dade5a20f7edc5cb2fbf715019065fa6242497909b43fc7d8f75cb022373c532303745a78e14908

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 60f8e9937ec4adf7df424e5b9d30101e
SHA1 8dec7a855ea16d68e56e7c27b746d6ec6a1c0e26
SHA256 e835ee20605fab7672c52f8f8dbe04a2a33e681d494ba135f0a5ebf130a53dd5
SHA512 d15444ccacf93fd9910127a541aa2325ddb90487a3d0d9502d694f6f16dac69c14e41c31a87ff3f801e17babf00448da586953a28a868f32c1af049796c88062

C:\Windows\Temp\asw.63e778b01ae0e962\asw93cd6affa1e0971a.ini

MD5 7249b9a21b920f79a9f92b9651a065b1
SHA1 1af8dfe3b70881a4ee29d74e08614a1bc230e666
SHA256 fb233f4fd8fdebba1c906a8dc6d730a307f95550af153ac5efb268be55c21c52
SHA512 378c573df37c1f60f5c1d23c7ff0876ec774168a83e70093a0a629b731291d32d9f65d5907d55487f0ca5b77847f45d5f05d66573e5143248fa5ba399f2641e9

C:\Windows\Temp\asw.63e778b01ae0e962\servers.def.vpx

MD5 a304f0c6ef97e5a3111a3f0a37f675d7
SHA1 d8798250d97781d598cdb8ba26c4fa8f78d0d0a0
SHA256 3c362bbb1014fa517abc47ecc325989ddd6b8fdd22302506591ea9ea4f7a2aeb
SHA512 039e3d51bba4c2f70c1eb720b57a533769cb9f9b3f812e1cf62ebb259d50bcbc42742c58a7911a3b974ae1ff4286a9b9f843ddc01fade99bc6f1e209511eb4b9

C:\Windows\Temp\asw.63e778b01ae0e962\prod-pgm.vpx

MD5 730e37ee15e02dcf1febfe34d83fc308
SHA1 72488fb7c771a8b09e9a488514cf18b2535cee7c
SHA256 94d3fafb73f128ec140815eef45bc9dcf8166d54fb575527108effc0e7bb1e39
SHA512 d43aa2dac183f1bcf22a84e17535deed9eba7e7225412736bb91206fea9a6c071226ff3e02f1496a51bc1f8d986f87523844461deea6d5e36eabcf88473acbe8

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswa7f5d90f471cf0ac.tmp

MD5 0e640c5ca12e01a50089c1497ab4f737
SHA1 5d0c22581c29f56bcf597e9be347f87bfb7efb20
SHA256 ffef8170d192509f527d6a23584528a0b9676f0c11b88ff5c079fb8b5e79c2f7
SHA512 7100dc0c067286fe5ba8b363d024f560fc57b8606b2e7d2e3a344bb3380b9b67f8c8e4b8b75e70d26e9caa947a42b3e78651f357775b6817230931f851403945

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\aswc787855e1f32abee.tmp

MD5 f0ddd08f9b933c3d49c5d738e52f6be0
SHA1 7a161fd561c7b014b3255256033c0d4a5ccaa682
SHA256 435b0c4824c9aa637ca7c3335d4123d7a67a6c6818348f88eb7c00d70ded8221
SHA512 e95a1337f6b00c69c33d7383f9a8076d5432dbe9c92c4e55dfe4fca5a56f51b5c73f0ba70b1e66ef913609012ef025b151931b4184c8ad6d8e55e391c3e224ad

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\asweafb8cba777b4f77.tmp

MD5 94422d2f5e7b7c2c394592ff42ffad97
SHA1 b0688c9013391abe0946d61a296e810aae4ec061
SHA256 778ef3bac5b93ab1848321b34922411403ee45972db240e2b5ec77688fd78985
SHA512 2ff75aabe2fafddb6d468f0e70bcf2988f01bc575e42333c0c1cfb1f0ba2df8f06bbe7fe0ac8fe228a869c778f17f1306277086957a045a1bfd0f96d2262d1d7

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\asw047cc1b3f5011937.tmp

MD5 cc9c6602502984f24aa849a4601166ab
SHA1 f35f44fbeebb1d6616a27641311470406b0619f3
SHA256 8add358f520ba6dde2aa14abf0f04a0a0739929465780e910af4bcfe47287932
SHA512 f724530c3da9e707ae70420948f23c1c1b309b31a6d37c98cb7af3aa5012419bf46fd75475baf336f451286eb103d07314a41d159b2f3b447af80734e2ae66c4

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\asw6e075a8477f4f5d4.tmp

MD5 dfae82a37c609bb6f00ed781a58355f7
SHA1 92a9a702c64fd32668f3c334a770b4d3bdd49330
SHA256 9e8669adde471d36dff8cc760b1387d68f9370a668ac1669d1427fede56540b0
SHA512 d223c89cd8fe08b768c71297d46811538a21876dcfc1ad351d490392a7dc3811e4e26dbc52a89511b98d2955b28c91783c331cf9288a2f568d3cc753f6bc655a

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\asw294c1f6e46ed12af.tmp

MD5 01f81005dda7a7da7c970292c188e9c1
SHA1 9a72b263853f33ba1d28cf98e990ad58b5592945
SHA256 6c6ba59c14e1518f8f3c5d5426a402391088f096dbc1328c7557dfc65c38feb6
SHA512 de3ad9ebea124cbedb170b7a897463fba47d3725883edd55a82a3615fa8a008d7bd766f909e22ebd6c5b3797fcefe245b42b2974b0e5b856d5fa9d6546da7085

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\asw82ced362bdef0ce9.tmp

MD5 4083a128d717e41f6eb3ad762fa9fad7
SHA1 c8e41bea43a06a7f8127f490d209ffbc99b936ec
SHA256 ef9ba8d3348eae59ffb7835eed786efb2f3f87babe784a2b7e3fb247bbf53cfd
SHA512 719a8a2c638ba8ed281933afa65f32f2d2d633fb2f1a515506f06efd6e7a39b942aaf9f82a457f47a11d68028c197ea011d060e26cc3f7730fc61d84a4b7f2cb

C:\Windows\Temp\asw.63e778b01ae0e962\uat64.dll

MD5 645b5c948e61171982650feb0762fee2
SHA1 2424182a5e1957d963e10340236cf12ab28570a5
SHA256 c240e8b6271c51c11dccf41a5ac3b6f312208e3205336087af4785d433841a0f
SHA512 5cf9155b9504343d6ab6cf540feb3c47628b3add3a6089b9d787349efa3280964577c9fc101f9ba4f0f44c5d22bc31f2d12bea1a6a44ea4e72645972a49dddcd

C:\Windows\Temp\asw.63e778b01ae0e962\prod-vps.vpx

MD5 fa7efcb17ac311a955ec21ae81d0e153
SHA1 448d1030c13b53615b1d2d7befd517796319f8e8
SHA256 28e5bbef7295a207b45acd8a0616c7fa2a9fea855ac3369879242ee4cdb3c08c
SHA512 c7ac03d978ee983399f92ff1c73d0d6f57c6993c52774941f52934e7dcda8456813af173ccc526fa824a78a37f4d4ca83b69853b67bc010add55b4699ee55e66

C:\Windows\Temp\asw.63e778b01ae0e962\part-jrog2-14cf.vpx

MD5 4d318935af781d44cc2d999a732a57f7
SHA1 36905d62753831e325997c54c912b54104ab2f6b
SHA256 b4fd0c4a721c0b8fbb54d3316158963ad809b36fbf7bfcfcb27d7d809e59a01d
SHA512 ba1e7190dbfa97c12d3897043f8c1497219c731c130afffb93314e4f9420f45000dea1f073d8f70020abf873d9c7d305070be0aa31cc75b34d11b9982d6b1c15

C:\Windows\Temp\asw.63e778b01ae0e962\part-vps_windows-24062614.vpx

MD5 c9f6de2d3acb07285ca696f508d0157f
SHA1 102b328d266f6b6c7f655ecd2db7ca6139e551d4
SHA256 346dc76b29bc7de33110f6b40273a54c14e58d033ea18d84d11e37b5aefa65c6
SHA512 7b1ee81c678e939cf53ba71c3f5c49603887e892d18550ab581ba8bc95dfb4d877fff30df2f2e8fb90c1f497251630f89ccd1942f5c973d007708ca5bd0585e5

C:\Windows\Temp\asw.63e778b01ae0e962\aswa0695fbddb42fdfb.ini

MD5 0ba5c89b11e426b5d647385289878f52
SHA1 de4b4dc65f80fe244b7e852cf764a854db654a48
SHA256 3446e515bd37e3fab90a58906d5490c9dc8bb22fc37dd50c663002f20d4fb011
SHA512 6945bd383c96029efc91fb8708ecbc97b300acf0d26af0e514c0a9073c9f26a893ab68ddba4d562043381a63c2bde6ee6df299b1b4f5f380d42572fe33a37317

C:\Windows\Temp\asw.63e778b01ae0e962\config.ini

MD5 c2a0c59a00ea7b6639ef15e997f38a33
SHA1 271fa4794b6ac4e90a6866310ba702bc76107931
SHA256 bcaa5a85dd578b54090c9ae5e8880e13491d1213b9b9f4c8a251a6feba3e72d3
SHA512 347b39cce96d4fe0f446573f8256c43ae530e77c239844f387d19f21016f114017ad61295bb515f74da377134a1759c5da8ee77549c7c0c2fd6998c4b66ff0f9

C:\Users\Public\Documents\gcapi.dll

MD5 3ead47f44293e18d66fb32259904197a
SHA1 e61e88bd81c05d4678aeb2d62c75dee35a25d16b
SHA256 e0d08b9da7e502ad8c75f8be52e9a08a6bcd0c5f98d360704173be33777e4905
SHA512 927a134bdaec1c7c13d11e4044b30f7c45bbb23d5caf1756c2beada6507a69df0a2e6252ec28a913861e4924d1c766704f1036d7fc39c6ddb22e5eb81f3007f0

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 4b5555df688cc5018375bba1c3ff4905
SHA1 c362b4838055a956db726ab3ee26f6ce24719b02
SHA256 ab1e57e58ca7af4095e826b6cdf034c2401adac5a337407a0465ebce18197f07
SHA512 c2c6b19548b429a710ce7ba0e152c0ddda2b5f75e2d7e825705e258cc564823b91d2f4768c4dd7f2b3e2346c043fc7b1b7b1760d6778604e6dcc2f5affd533bb

C:\Program Files\Avast Software\Avast\setup\ais_cmp_bpc-7e7.vpx

MD5 6a1910c51f39d1d89946615ad7c532f7
SHA1 584530581f5f30d09859d3031595441cf9ddfb04
SHA256 8d5a3de2b259d2c0fb35ad6d424ffa1dc00f890ace85b7c37932aeadb6482359
SHA512 04fb819b28281d28ad0fc97ed3790223232c79de19ae9826254db144ba6f944c811a37c5f9e5ecc0c6e4dd6c283053c59360aa4d9a1023d17ceac94a2a3f5112

C:\Program Files\Avast Software\Avast\setup\ais_cmp_securebrowser-7cc.vpx

MD5 1006473abf4e3762c388f345d256bb27
SHA1 a781032413c04ca08a861bb5e6807e60c0aae5d4
SHA256 662b9380ee3fd869e99bccae856eafac1a391bed30799b33a6db01eaf306aea4
SHA512 2a5c3bd11802e7c8badd8135c9ff362cda810445034fec21feb286f67f3c86cb6f7765641e6c5733b21e5d057c25c4d562f8c9f6c219ba3c403523d5ea6cc073

C:\Program Files\Avast Software\Avast\setup\ais_cmp_swhealth_x64-8d9.vpx

MD5 60c2cedea1ede340aa31310183e107dc
SHA1 5e647f2b5615e392eb22c3fb0cf06078aab3ad4a
SHA256 f10716d46ce54b829044624f2b0f474675aada63f3b150a360a9a74d0a07cf31
SHA512 e426715b2490904ed92314eb74206ff543a4dfc1b9674736b969170c772c6bf2fd70816f0d9d473ea5dfb1963c7c75fe71f8928dde5abd98563db0634ed6089d

C:\Program Files\Avast Software\Avast\setup\ais_dll_eng-887.vpx

MD5 24c1ba1221544007db08b39196b08a35
SHA1 e6ed33311c7a9b8001429a5a63847bd3808fd0df
SHA256 bf4a8700a6335d4e322ccce957735a080dd1a18b93bb69a2bfa353b6cef38943
SHA512 02981130c8bebba5001cb277bbc14fe0c916b7f39ff4c94fc294655fff5a63409eab697078249623a5411a4fb285e08766de7e04177dfc5377042c3d55f9420a

C:\Program Files\Avast Software\Avast\setup\ais_dll_eng_x64-8d9.vpx

MD5 532d3bc062203a9e5a5a85c97ffcd448
SHA1 fd20bac32d43ba844691623ba9e99d9b873a7036
SHA256 e00e78955742919f32fa3588d01b08cc587bd859b341ee6a43945047db2551f3
SHA512 ed27245dc71bba57a0cb72b60a6d747e08d68f4fbdc5c91921a1cc00a312fe143101b5f5e75dae87691a462b4068f0dc79259e61e8d5590531432969d828c111

C:\Program Files\Avast Software\Avast\setup\ais_gen_protobuf_x64-7d3.vpx

MD5 71f2ccbe8b33caa436bd4af3988c46ba
SHA1 722f356ff23e54c751daca2603be3d89fd15c40b
SHA256 aae3db9261468b3dcd85b72e7fb7277ec7e115472b017a38962b394bc2884c62
SHA512 82e1e10080614d52633f4827d7575174fb5b05f3662ce16440d575a8166736166ed4c853bc9bc7d66db2a62933220d7e9ca200fefa97cf2393bd6d2701024a38

C:\Program Files\Avast Software\Avast\setup\ais_gen_streamfilter_x64-958.vpx

MD5 8ea1e32d31876866233fbb42a9b5c8ff
SHA1 c9f80e49f140cf00b94d52e7551457b4212f8623
SHA256 cf30967b0adb51e05c235fd56126086c4d5c5d3ffee8b090315f481016b18aa7
SHA512 e8bb6de11d45e4d50ac42be5e699f58bb8bc6cbd7771967426454fecd05ee643339bbcbd8740148ebb3723c7c7543087fad07e6d5d7a83e7e89a6b88d5160b8e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 0bfd5b4e0569f3efb5ea2e49632eaea3
SHA1 2fe6104ec930ce11b530cc186f7d55363ddd1b8d
SHA256 05150ce11cb64fcba00ba85fa6bef737d5cb5661b24b9293a976fc191aa793f7
SHA512 8542eb01940a296b03896d1d7882623f4e14cd78a817e7be4db3093666bcc9416a703d65da3840e80a08e197ea1e9d59d0d175fc8e87631621325694f13627a2

C:\Program Files\Avast Software\Avast\setup\config.def

MD5 122d44ab9cb9bb4c4888d1f0e237f2d7
SHA1 a8c08c2b8b57bbde6e2a2a9af2dac3d7f8101516
SHA256 e9304a1baf1ca2b992e484a226ceb6b90f051757ed0249dcac75bae09323129a
SHA512 0735b2de91b5ffc889529bbe24d17f079ee1c8d3594a8915b84380d60deae37cf9bf8df8c8a6c43ac2c6cf80cde16452f8b384da812df5002e437e0d26ba19e1

C:\Program Files\Avast Software\Avast\setup\part-setup_ais-180617e9.vpx

MD5 e63ce56d9b211d7432d327bfa3cf27f7
SHA1 53297bde156f132f1caf07d6bf63ea6dbb54efe4
SHA256 d3b0db1d7070d8917811b2e0b2b662ab0c7b01b74567b2e655b7f03a35237c5b
SHA512 bab3d082ba77a9dd6fb1c5f5cca13356541256d36db63255bf2a6614f4ff8289921746602f419c7ec9d080b3c2e822c89a34d5c16fdafd0395b28240ae3b6098

C:\Program Files\Avast Software\Avast\defs\24062614\asw1fdb706c9312a216.tmp

MD5 bfee1e041ae0aef04254262ed1a852d1
SHA1 3d6765f7d8cbdbb48cd145f047e9ec9dc13a850c
SHA256 1868af8a401357bab69bf0c3d4563ac699a182462cfc6f10c767bc691dbcb0f5
SHA512 1f010b539fc1c21e0856a80718a2f78e92e76840ef56c7d82c0eb4fe3692eee4f18ec84d6e66ce61172d49a9ddc0c21604f069bad2500444a36bf2a3c7232af7

C:\Program Files\Avast Software\Avast\defs\24062614\asw9492f246ca94fe2e.tmp

MD5 4a935f81766937176bbc500d038dfa3c
SHA1 f8cc406bfac12ff55ac92986b722d634340a2075
SHA256 b55d77404e8bd2191cb41d944b4d69545050a6e71eaf5759041a2aa185c160bc
SHA512 ab317dc48550f71bd87d25813bb16d08c67df774838eb711309b613e24813e8bdff66b1baaac5cd8beaa8ec310d3269117e4c68ebd5df22fe1b73bd16b5bb477

C:\Program Files\Avast Software\Avast\defs\24062614\aswf36ff5f1d6cae451.tmp

MD5 32f5665a577fd7cdf3429c030aaba667
SHA1 90baa8ef392a658fe18a43e210494f39b0a5df2f
SHA256 cf9cec9c119153c9857e44329c61023f727643c5c7f9c718204a4a316288a182
SHA512 7bcf78f744833f9754f805afacbba3166e47f5da7c540a4f821e4df6ca705d298ef8de143f90a456c4b84458da14b776d6b1bc00dffc99d3a328d1bfe6a167b9

C:\Program Files\Avast Software\Avast\defs\24062614\asw313c45340c7b6e69.tmp

MD5 d97fef84bb1e66b9e668a75914d24739
SHA1 ae01aad0e955c7c7691f3cda4915d97aa0f2182f
SHA256 fed799e8305cb16d80f5be46078f50d3484edc586cb76adab9a0cfc9058c09c4
SHA512 650afc0a5af334442b43227816cd27c750cd5b87299eb34f7e86c5f6de60922b2ddaeaa0d1c1c2416a700a9eda29c7f0ae5c3d34a722c005363eb0a97904ddd1

C:\Program Files\Avast Software\Avast\defs\24062614\asw952a7a064d9b423b.tmp

MD5 dc5a7d226bcd9553aba5f594ab61d31a
SHA1 d36a80112eb5ddbd91605323e359d78bc4a230ea
SHA256 2dee6a151f60ab22ff841687b5c81d7e02f8ec09cd40b8458a3e7a6ae4bfb78b
SHA512 acbcff03ea127b03c79ef396641dc94886fbd0caf76aa5fbf7e3f6dc0aacad648488f8dd230eb3565d7837765bdd13ce329f355bac5e1277f3337153cb90b643

C:\Program Files\Avast Software\Avast\defs\24062614\asw7fa31f6327202dfe.tmp

MD5 67e868b1aa90652ebf5c8accfddc4f39
SHA1 acc7a9909975ecafda9c09ebe521fd6275eaeabc
SHA256 390fa8187270e8db11a561d0ce009af4902b95267ad17bb556a807453bf4996b
SHA512 94e218faea8937a8f26e5fcd615962fa60a4f94de173f533b239313363c5c45fedc83554cf393ebbbc6dc7e72ce4e3757ced9db86e1f09c7569c65ab00c859e6

C:\Program Files\Avast Software\Avast\defs\24062614\asw25039555561b9fd1.tmp

MD5 ca327980bdc7ba6fb5557a1b262d6150
SHA1 0df12bdb6b4a8e6120657abfd3cbd29c369a966b
SHA256 86fd85c6a9d246324d5f36676b6f44452ecd2443f27dcaf1a826875e2cc7cb82
SHA512 7da49515d4f6609f0671792c01623004843dfa571b6ba1edea1a7c6938701d9706eba54e19da18e63a21f58cbf5cbdb34c351c9e4768b02ae0d74efb78fdefc3

C:\Program Files\Avast Software\Avast\setup\part-prg_ais-180617e9.vpx

MD5 bb77ea8a833437ce4f5214d8315ab7a7
SHA1 b76edcaa6275852232d613753d9dd9511af18694
SHA256 eb01d6e0b5d1519c05720040a8887782c3e73adf9e406fc739e2afb2cdc4e0e1
SHA512 a2acd616484843fdb4fe8c6121719f2a3b20cf06627a127d7b3cfec65ad0532c7397362464c582cee09e8d011ef0b97e69eb3bd73bd4578a121c935656f162f4

C:\Program Files\Avast Software\Avast\defs\24062614\asw741f0976d3c45536.tmp

MD5 fb8961df25facc258069297a8ba7fc94
SHA1 14400dd6d785fad5e1129969a7bfa35542973f04
SHA256 2139da81fb4d50730615cb68b766d21def442b867ad8914769bc72a957fa166d
SHA512 e3e9c32ffac1e3e61db570d3b4f1988cd768db12946e6bb03aa8774b0eea9f77f571587fb3df62175c5db113b1db58b56b047924f010b349fff09eb686b9973c

C:\Program Files\Avast Software\Avast\defs\24062614\aswf6a98ad7b972da9c.tmp

MD5 72073f1b194622102c2a60ac53a4143f
SHA1 2815ea13733253a4ff2624ccee7d9642ce2dd372
SHA256 72b270969cdec9f05dbd3d6a42965a3f4347da89c47a1423caa0afca97ba3480
SHA512 406c29c489f501f23b722ef1bcc5a55634a8593e649ea43999869c2876b5a66103e429c54688b60ed807a1664b5ca4afceb596351eb7d4e58c26d0ee80065d96

C:\Program Files\Avast Software\Avast\defs\24062614\aswa483c25ec0ec6755.tmp

MD5 24db35b3010367fd75adeb5edd16001c
SHA1 8bb4525430b26562d8ff130600bb1bd665e6c77a
SHA256 ecefa1067f18558c6785e212e650ee69f6c22a7217f722ed065bb88b7db6e7bd
SHA512 53ef221165ee5859922bf5178048703e1b747353b7174421376c8265250a1bb035317dad16cdabaa948ae56598977da6a0c6dff2bb84079def41a968fc8e32e6

C:\Program Files\Avast Software\Avast\defs\24062614\asw7486ae5f40529075.tmp

MD5 713925a7430ad5164ba0f6d6b44e2aec
SHA1 24384e07b7f16fa832e1129f00b925792d588e4f
SHA256 1286a9765c77bab5cafaa69acd89c2377d74f680d0f43d8f0fc8a38d9310f021
SHA512 9cb86e5d5ebc9e45808f5165addd66897c213b5338c0488aeaa85dd3771722c28dfee1c8ef8102570cb7feb2133ed7d5d4485544fc53811cd324a3f941a4b1d0

C:\Program Files\Avast Software\Avast\defs\24062614\aswc65af81cfd6aa834.tmp

MD5 67010e90c740ef3dd28fa6cdfb5b267e
SHA1 001ce2128c2851b36db29ce62e7aec73b67ade99
SHA256 2c861942595d9fcc6acc23a34f73b57fe15691004d0890134bbd92946269bc66
SHA512 b89773814f48296386ee8ae9720dcda0aa0fb85fdff985c87f72a3c7f166b9bae4ad77834ecd6eabab14b80dd5c522c63298c8cecbaa847f68f42c3076a952eb

C:\Program Files\Avast Software\Avast\defs\24062614\asw83e109ec8a66ccc7.tmp

MD5 425d1e4dac0bd3047e21a1288927f8da
SHA1 ad583bbb877685e42c7bb47496a582afc60fb03f
SHA256 d3929dfb69540a0022fddc6c623002a23f22950454cdfffd9d912e906735e1de
SHA512 4b849e699b662796fd68afac6277b050c388e279d50cced8db1b4ba7ddbb37efcf76f756945c81ea22ee489bbfdff1c4c255cd269c03783698f6b549b900daac

C:\Program Files\Avast Software\Avast\defs\24062614\asw85665ac712bd1c34.tmp

MD5 f8444d85a122957b457fa35ad31aa10d
SHA1 c4eb910779f555a98875beea39ec66a939975dfa
SHA256 584eb3422bbc9c8616583523d05519713d56f01728ef0f6445d6346c9352c997
SHA512 b25a47bc158d4d2f7d13c4b225097e832339ff9736f4c75355068028eca3eb2c02182eade112eb93cb83b91b028fcb31cbe14b94629936131eb5711cb7f96290

C:\Program Files\Avast Software\Avast\defs\24062614\asw51bcaf0726ef20ce.tmp

MD5 f84287d312c9904c6fc1e4526a16979d
SHA1 9d4e1f2b49beff058d8be0f3b10897ff6b70fd86
SHA256 2d684d425ced40b90fcdcb5fe531a565d8a7b27ff7b438b378c7f1fbef181980
SHA512 7530852b2be2e9aee81236b100ba6c25e7273493dcc96f6dfce4f5ecb7f5143b3da8cfac90b46fa8b48bf80d0ca00d985852c6f6ccdeedce3a86e89c2578b195

C:\Program Files\Avast Software\Avast\defs\24062614\asw9f8bd55f3e2734f0.tmp

MD5 c34b315c3df73c325479c8e73a53d896
SHA1 cd5ec2d9684d8383318f85f666f390d9565de407
SHA256 439aad001e0837bcd55567ca65447ca0a2fe6b9eab9a61d8ae02992ee099ad18
SHA512 df24e18135e5e6a777e97b8eb0ddfdf6fa5a74d474c55af9f8d2a10d9bb3108e3424687b7b132c23628215ff7ae6f7be655db188fec9d1f6ea3d63b1f0141fd3

C:\Program Files\Avast Software\Avast\defs\24062614\aswb682323bf4980dba.tmp

MD5 12b2ca5a1c3481152be0720f7c9d36d8
SHA1 182412ab183a105265d98a5f3edb435e13a10fff
SHA256 e9c6108d69c398ef05a0746840afc34d6727db7a90d0e9664969a538cb7775c1
SHA512 b7d1a29bf15358110df4e49554772344d656b6b20be4bb83bd817638797f1a90b10290365499f0811d57e376935359bf59c1cd3e3555a78ca26f5198ab5895ea

C:\Program Files\Avast Software\Avast\defs\24062614\asw742f7bf5f84c24d8.tmp

MD5 e7179d32eef2516aa97db352370632c4
SHA1 b5a6ada464f9e02871fb4373c6d49bfdc38b9cd5
SHA256 4d83609ea78ac9b035bfaa8c824be63a63d270b7743acf35fdee4963d4aadfa5
SHA512 dba19d1dc56bfea93ffdcca2cb8493a90422856e405a871e89af57ecac5d70683752154fa5ddf275b2e9478d0a6f79b4dd5031c668120db74525e572f47c6c59

C:\Program Files\Avast Software\Avast\defs\24062614\asw7f482aedb227a292.tmp

MD5 642acaf36df6314db345f38fb227fd44
SHA1 b2d664ecee38680815f05c46cb7406c47958586b
SHA256 25fc88e5327278324fff0c1220fa319f4c51a6ed9ae5b00a11ec2e485a8a1e64
SHA512 a1d81fc52e8b1afb3d8f32019f72c6d721d1e21d150dcc32a6dd268e45cfe33d2556914794dfb0ad304d9675384ea144f7d2fc63473374a9d9ba678b74c4cab4

C:\Program Files\Avast Software\Avast\defs\24062614\asw2f52234326efdc69.tmp

MD5 6eaa1bc25f7057ffb42d6636e0d27627
SHA1 46bb376a1e5c88c1747cafc6aadcb3b9e8f0b808
SHA256 2ac0a8feae021671a459022f1064fafeec23471989cc5f111962e30e565a9547
SHA512 cfda9084cb0ce599463845087e6c8fc2b3d1659ea2f7c92652dc3a0832215487f92219ae8b8031a5296268f7f56037ffa4afaaee6f16ebcafd2895c98855e734

C:\Program Files\Avast Software\Avast\defs\24062614\asw668a921c1df82ed6.tmp

MD5 3d9ac8506d84224be2c81fa68a2a9b48
SHA1 74f6c4a0dc8325513a747a423c767c9ff2d0ad9b
SHA256 301741740dbf66d17bea5c772dbdaef2cbb4939272e5877baf921ce99a719b5c
SHA512 d7cf56b886713fcc2ce059645fd2179a6872395f4079559c9ee01fe97ee48a02f9690c49a24f20b858515bc414e793f8351736369c846c77ff4affc50f8c01e3

C:\Program Files\Avast Software\Avast\defs\24062614\asw2dbad6fd9711ec53.tmp

MD5 aa5cdd63ef74db268e1ba6d3fdcd02da
SHA1 47ebd27ea7b77565c5e1ae28368de307f98ef6a6
SHA256 601acd476e56d2b008a0f8d55c6408e7158596b7d0b6daf4b8d6e2d10320be5f
SHA512 bf90228d9fc5c6272138b83af492f04e85bfc45151e264c1011545e8fc8ca3b8bff90146912030310a5b76289f85aba23a03f44881e8e25cdf663a41e35916a5

C:\Program Files\Avast Software\Avast\defs\24062614\asw650c98db72983bf7.tmp

MD5 025d4c130ca6c204cdc158e016150cd0
SHA1 6912d6bb07648c0db33d386b9aad531a0e4c1cf2
SHA256 1b3bf9ed7a274ad402584ce17c4922f9e718e3bdd0a756c3e9ae0668b7b28b11
SHA512 767cbc55d095d859b7e0b936289f83f9c6c1577a3ca33c7fecd6a10b5addf5a68a6d6b235cfeffe2fa59afac8f3383f07e2e6d094e88520fbd0d4f5004e58441

C:\Program Files\Avast Software\Avast\defs\24062614\asw212151197b4e9668.tmp

MD5 ecaca0f8705642e53d3068b96d37ab1c
SHA1 1abc8a843027fe735834fa5807cf1fe318bf3d58
SHA256 4e3e8e2fdb41fc5fb36f7214bf05411aedd0d3676c7a68cbdab2b3688b216e62
SHA512 714aeed377ffcbf7956dc9f0968c999fe3776138445e9b595a258c17ad006b9c9612a20431b7b484cc27fbf7e347dd7bb40f02b6107dbf0c9378f474d4ac0e25

C:\Program Files\Avast Software\Avast\defs\24062614\asw29a55e8065927aa6.tmp

MD5 a65d7854311248d74f6b873a8f83716f
SHA1 d091d528b2e0e9264a0d377487880607ac870155
SHA256 68484e75c86aed8c948d83a9c55ca4d0b557987063f5e47493142d8e09837e4a
SHA512 fe87aacc0be8e6cc9c05725f7be3392ba850171e028f157ce786eb1ab6b5f06dac99b21394967253b6a7d0148b0013a2fd91d6d55afaa7ace52b066c60d4a79c

C:\Program Files\Avast Software\Avast\defs\24062614\asw3e25499fa12000ec.tmp

MD5 a9e9e45238fa588976dbb5965f539e24
SHA1 d28b5fe5b79b5d2bbfa19f356588118c55476390
SHA256 bcc3b7f08bd136c37f801edb705bbcd24dcf1db02738cce66174e4c13585ac1e
SHA512 ef13be912de4d0cdd30187cecc8332f1bcc721677a6b7bc15f421cafa51d42147168065c0d2620fb7e7b1b7392102edd48f0f7b05ebd40718f5e55bc932fb520

C:\Program Files\Avast Software\Avast\defs\24062614\aswc144e621c17a4805.tmp

MD5 ccb51a228f73cd83f4bb7fa34e0dd2a9
SHA1 ed613f392e57cb9528336d1fb1a05de2bac49ca4
SHA256 e8444271833f48be2272b14024ce9047b12d6792af39010f0a1c70e329c5a984
SHA512 59c07102f0ddf0b6a3ce9d2bab918714d2e66025d9c9d4e837c49d41f3553b555130606754033dd25c31f3a884a262b5c74d718e27f99deff433ebf25f9305b2

C:\Program Files\Avast Software\Avast\defs\24062614\aswcd3d0e2f3ac5c812.tmp

MD5 c3dbfd62c59dd4b2a361bc5acd06ff15
SHA1 266ca64226452d0da7c8a744bd18e6a525339e53
SHA256 8b84b415761b8cf446a2088b3aa3804de07e7ae1c7de393c37f1190db5b3a07f
SHA512 a0c5ccbe43cabd4b501e4ea7fa6184a7536859f418ac3f5dd1b613d96676d37141ef1eb8cf59775dd9ce82bd3ea7817602e2ba4673888208252ede0dd7553d0a

C:\Program Files\Avast Software\Avast\defs\24062614\asw172231eae6073c67.tmp

MD5 6259060e93c6528e6fa4b4f3f103ceae
SHA1 695ba6d74cf3743c2b27a9360d41c2bf5cb70762
SHA256 4b5f361c0aea6e152cc6fe5d5e4da635c787b90874ebac39b474dcdfe7f4b2e4
SHA512 fde829ab47a0178295e00f1baef682188e71f92bfa49be5688bfb96e36699b8a9c252448c2481bbcc2d5c4443c1d46a20dd09a97702b256bb0edab5bf83cfd9b

C:\Program Files\Avast Software\Avast\defs\24062614\asw6bd91e7bb754c19a.tmp

MD5 ed3674ca6a60a11daae6fd6783c9399a
SHA1 f4f8b83de9202090e0e820da1b47f43cddad4b2f
SHA256 3baf96880e73a2943f6935118d1a28e24454f5e942b49e929fb95445fa8efe50
SHA512 306830fce95ef8d2d81fe721bf126800747c47ea56e0c67b0229cfca2e25fdc50acf88dedef7a60f4bdd3aea7ee5d2c7f7d35b0807fbfa5b856916de7b30d111

C:\Program Files\Avast Software\Avast\defs\24062614\asw474c8cf831024156.tmp

MD5 af0b80fb8a97bd02b5af0fdc838bd05f
SHA1 c2587ede6f3fe3ffb62f7d2944e5ca8b900088dd
SHA256 232867c4cffd5d252960f7b8a87c084fde65ea9edbb377231202f8f060a6a53f
SHA512 3b7f32567b36240a271bb4d99815c9416c94bd9b1549e5f96dff8bc00546ba054f102f00cd6ba0fef23820afde46bdf68de11771dfab27e1b0262f748e064de4

C:\Program Files\Avast Software\Avast\defs\24062614\aswc72c7f06aef61ffb.tmp

MD5 bb7085c823abac4203a08b6994b97385
SHA1 dcb59f3f5224d219d04cc2491896c57e3c8040a3
SHA256 9fa60d1a7b22a04a13d941e9ec143e2513a78aa8eb98eaa271008ed91244b460
SHA512 8b06bfd3ef2f16992184fb9d1589aaf74fcf98b408082b17c89e9013dae370a27a7bd39e3c711082949b2df1f1e51b67ad0815d5686d7266ff37b5a7778bda42

C:\Program Files\Avast Software\Avast\defs\24062614\asw6ca362de3275a4ea.tmp

MD5 86be9e219637a886943cce93741beb01
SHA1 0e3c42bcab50c93b584b8a258ee6ef6107a6d03c
SHA256 2814bd0cb372999d3f755b523a610aeb32c752c40889683f209e0f488a2b43d4
SHA512 b13afbdfe3e09ef344665272dc52f9e674b4cfc23bcd0fe5cbdc25ac811f58b30807cd6d778565e5664cba7e49eb3bfd6f8160d1be96aae3aabc8a6911bb79a6

C:\Program Files\Avast Software\Avast\defs\24062614\aswc813848f87ce0fdc.tmp

MD5 e538eff5c9e342465d086c76ec8ae2ba
SHA1 a9d0630fae3941912f56101e3f98806018a91fbb
SHA256 0be2b3f5ec46050a6e8508815ae3f81c2ed2ddaf488bd1c6982dc0b7ec773dd7
SHA512 9b0e5edf0d02b28d61068c7d970e00359715ffc8dc6cd819b352ad18257125bdeb2423b7bed13959bb84363f0241f6e8c09e2dba1d87af8c0f14f424cd654822

C:\Program Files\Avast Software\Avast\defs\24062614\aswa04752e4c993ae5e.tmp

MD5 dc8e514539bda74d870695af70a9f99c
SHA1 81f6dee5accb90a2ce0f901de05e52fae8757ae1
SHA256 00f40eccee50efa3e1f148c5c9f1ca0ac2ae6b878cdc64639dfddd160dbd7cd7
SHA512 c6be3afc1c7567d1e99af4b788a9547776a38019f6328b8c06f5de392f399a4e2d2a6bbf068ea65c822d46d27879f9a1235a0f96fee4acf5a51289ec39715b5c

C:\Program Files\Avast Software\Avast\defs\24062614\asw311c63ad0940044f.tmp

MD5 75d4842b7f443b68056eae5418056869
SHA1 67c6c0f000eaf7a52d7fa579cd13758e10d8418f
SHA256 a925edb89741e665471d59f56e8a4628f33e2b3ff9987f15f0f75cf5caf55bc8
SHA512 b78f67bad7f62689d770ac6164c89923f0cf5f217c74846805274fe0c450f9b413e417b68b683d342af08451d318c3caae539af58d03d0a0194f847c1cf60cdb

C:\Program Files\Avast Software\Avast\defs\24062614\aswff0a5592211484d4.tmp

MD5 adbca9bd8731b88f46b3ebd4a4b508a5
SHA1 3788bda5ea01e5a04dae3265205cb4459474eab3
SHA256 e86197732c8518b4f49805a0c3e6f33c43b80e0364008a9abe8bccbbcf098c0b
SHA512 97f2672571698f12b86a32e5e65c4d1b1ac3b250b70b20b1df21b9dd00f612fa749aca9aa85bb69a987ca946f0c682959c85488b7171feb5057c972eb87d418d

C:\Program Files\Avast Software\Avast\defs\24062614\asw9cbb2c3a32cc111e.tmp

MD5 29110af49dc38f149f1034a8fc590fe1
SHA1 ec116b65983b8035f1e707530e39659ef5a34dcd
SHA256 e66e4b48f65fb6ef54947c5180b701e9df0aeb4d6d446c3298f7e393c4da4467
SHA512 c07c2f3b9934c5303c15af0cbc80a170f1b4f7a6abe820f97bd3fd39bf1c0ad3c2f40a3132a91bace42d41ccc0d6c206da871dd022d91c8da3c13aea13ea1820

C:\Program Files\Avast Software\Avast\defs\24062614\asw5d5799b0fca11bf7.tmp

MD5 2a025719c3390f7371547a8850a681db
SHA1 aca3b384e0201004ddff0ea33cc40e4d1c731e38
SHA256 7e1f13ce3fe4519b1efb9ca8151b293da29fcc4c1fc3db33d6772d925cf88f71
SHA512 c78f89adec76c2442ef0c1f088c033951919258be5cbb95e4dfd22caf5accb6085c83f5cfd3c87201738d5bcce067253ce040f8a0e8dc490f88882bcf81b5fe5

C:\Program Files\Avast Software\Avast\defs\24062614\asw98bf97d9af92c60a.tmp

MD5 079068690c46fb39f66fb47179eb94bf
SHA1 9cb1390dd10f1c4b8dbd2a5e81fa3f194f9004bf
SHA256 6cf61441b8c6b60d9f9af1a08a5d470c24336c2121b4940f00e8340d485d263f
SHA512 ee6fa68cea80bae2b29bf5fa8d07e904813d29ecccf5b4b5953f3e3d389ab5bdfeda32929c4e689b3acb4f27c7294c46dd3eaba7b59d94c9e237b82b164affec

C:\Program Files\Avast Software\Avast\defs\24062614\aswc7e8b196f00b47a0.tmp

MD5 ced1bced491069f3b1fe35cbfb91bb6b
SHA1 836bf0342531aedcd6866c8a19d3e2599c576916
SHA256 be36bd28ccf235743e6a8dd8a8b944956c520d56ad7503f31a157e6876694fc5
SHA512 e882ef19b90843cd483bf44826f4b8df22e1a44df2ec83ea529902280ed532d287ff132701c3acf1b207492c9a8e55f738aa88902c936829d3e8b30d6ba85d72

C:\Program Files\Avast Software\Avast\defs\24062614\asw79f62ddc7bdbb77b.tmp

MD5 7732e403b7a9d018e07af6984874dcde
SHA1 254d7b0d3355a8f20cd3a62fd0efce21bf68072a
SHA256 36d6da4b2c780fd2d0b869ad62a36c78f97329d1c94fac466a70ce9417dcc7e1
SHA512 a4d31672dae988ac1edd966b8b0691e860aacb9951aee4e76b196695b65c68c6be48efb22475a9ca6c8991da4b40b03a7ccffda9050b445cb198e0a22978eb59

C:\Program Files\Avast Software\Avast\defs\24062614\aswc0c1da7b8f6bf489.tmp

MD5 29f9b605dce1f6e1d0ace7c3ca89aa8b
SHA1 5b00b6dba34e90254369fca547c12abc415091a0
SHA256 90971f5a09e220ebefad248d59e5feb6bb6e1b806a1599e1bae1e2f18c986b3b
SHA512 8f111e838855a3bee58faecd6683104fbd68bbe937e88ff1df72fdcc8ae7f050d806aecad9a29032dfe9d2cbb8a3f52c37d0a5cb8d9b011aa5c510048edb89b6

C:\Program Files\Avast Software\Avast\defs\24062614\asw8fb396fe758fe5b0.tmp

MD5 ec31008e738eb8b36da94dabaa2dc3bf
SHA1 ff9a10d2a5117fc2067b95eb061d4d7dec95b329
SHA256 c3897b5dd4f05623650d14fc1dea1dab1beb4cc648c094a832707b8f0cffc035
SHA512 941e40d58624a9742848895ea011e7aaaf85e2b7c4553df779cc040193003fde245c219609f7754aa927fb5311f82cc1a73aa5e732dbcb2da8b5adae9a1faf2e

C:\Program Files\Avast Software\Avast\defs\24062614\aswa1757b4856c2bd2f.tmp

MD5 8e98c7aec4cfe4a9f791899d834a0634
SHA1 b43e3716b90e88407044724f2cfc379eedec0a19
SHA256 d2cee2833c1889bcbfec05b6d6d6384d1154359e22377f62e5765d50380cbb77
SHA512 0d4cc9550a37bc48cf7014de326b932b86b53cd6aa702a9b6b722fea355f29f6a331bfec0ea315baf1a38c1cfc50b5764058150bd2382285f678501addfa7941

C:\Program Files\Avast Software\Avast\defs\24062614\aswbff704e2f1ac6fbe.tmp

MD5 6c866e645113127d87316d052a79ad64
SHA1 8dafb6e680e0c618cc8218da18c7eb0e13c7091a
SHA256 cf85771156446252700a206e5744c69ad3147f3ed50f40a421648ef7bc98d572
SHA512 6f464b2c03d6d0206883acf57b6f2f620f6c981ea8e5a1c697ed5176f5104c57efd86ba8b9204109fb5e37840b8b5ac5172ad48ba6917db06ac47e4993cdd7e3

C:\Program Files\Avast Software\Avast\defs\24062614\aswd10cf6647ad61081.tmp

MD5 cf9f59778eac8dbd7eaa1ac5d6f59279
SHA1 60e1a4b594ef8df434ac07ee1925bcb9c0940385
SHA256 b9d4b236732fd6b099f2ea033b17ae8f992558fe852572eee415b8dd0001fe59
SHA512 82816a15c6b314ec4044fec5024541fcca76e6b0027cb49c58198cf2dd0595487f275d8b0d4ccd40adc85d29e14cc89680d25412b189bdbed0d4ad215ef1716b

C:\Program Files\Avast Software\Avast\defs\24062614\aswbc5bb0939b5574c7.tmp

MD5 d8d10f178140b4d4e61af9deeb9b5ef7
SHA1 6abd4d3abd0fee196f02af7f12dba48b2a10bef3
SHA256 f6db3819fe9382513b576d16c6e17930d9cbb8a0c1b97fb97e8a6ca7f13bb4d8
SHA512 3aa345deaf6660127b678d9afa928e0ac4520222bc69af1be4a66d6e4a861404c20d4fb2e5c1c5ad7e3f6be5d309f95b42fd90faa36de16db6826460bb297218

C:\Program Files\Avast Software\Avast\defs\24062614\asw15b7cccad3508ba0.tmp

MD5 cb4a7a9c9143d12d76f5367ab3c612d8
SHA1 02997965cb84d64a8146bd6e47bd79026157a826
SHA256 de92f02c0a0e4dc70196682fcb2e922a43d46958049fa4540ab1b681b2d4784f
SHA512 fdae5e9718580a6245561d9a09f72dfa63cb833cc77963e53aa7492d4d746a1f3acf40e2d263ff1417802116766330f9fad8a2992b9b376fb5374301f6e0759c

C:\Program Files\Avast Software\Avast\defs\24062614\aswc59664582e75035b.tmp

MD5 37f22a5384a9722c9fe31c0988e497c2
SHA1 a1a0709cc52a4dcc7a2eec11f1e84a4db0529e38
SHA256 5953ec52658aa27961f0f522536da52dc9f0e01837772a40076c635ad341ce4e
SHA512 f29b4789b920fdd0b2fdbd8befbc4930ea5699eb9f39d631225909ac9b0bb68dc74c32554b6f873843b09be0b1f84d0e025bcd88b7af17d9a01d8df1c608b9da

C:\Program Files\Avast Software\Avast\defs\24062614\asw281a9045b292dc0c.tmp

MD5 534fe68a98dd9a38b72506bbda9a9daf
SHA1 8b33da97ba8a55c28745536ec46cc3fa22876c96
SHA256 847756a48e1371ae2a6008772ec5e7993db907c2cef716740e67c71aebd89bf2
SHA512 8495e8c23b463d84513b25d472e31cf8b0be902d9a4f24bea11e4f39f8745d6b6a7f5d26b5e211dfaf9570ca9f16174217a6ef4365c846b1650b0fda0ccdf6b0

C:\Program Files\Avast Software\Avast\defs\24062614\asw0aa41c0d81d45b18.tmp

MD5 d5d34d6cb005c10d1d9b0e32300ab4ca
SHA1 ae77274d3623717d0fe17098143f15287ff3d6fa
SHA256 1ef1a2f70416f595fc906d8ecc7d3c544a5dec1530364c0c7758a40d3239cd28
SHA512 078bfdeddd3697ea0ca439953acce989e53b9647ff7ddac1be9af710a2cc3584bedec78fe469456c1f385cfe5be0a0a5059911b4d7db6a3eaa5d07a3c8c68186

C:\Program Files\Avast Software\Avast\defs\24062614\asw334128297295f586.tmp

MD5 462c5619b0c6c25c28cf6a8e6810e6eb
SHA1 d3622f7ab16c6122ba6790c9f99ad523473ad920
SHA256 67dbd38406c8a3967b1e5d660af63b71ed12da981258902de3007c956ed41d9b
SHA512 932570ef316c1fcaeb6c521426d598b238b6c2b72b766595537b518710d187a95d36621dd6a07db9cfe3797a21c3c9916521cc79b01b14ddfd6eda589ebc43ca

C:\Program Files\Avast Software\Avast\defs\24062614\aswd37a86b5f6181a92.tmp

MD5 812c7eb9f7702ad5420853f07678de58
SHA1 0f29335cd57408ee8e898f293924f191394e50ca
SHA256 ab030c3d8c8011b9940a214275a1ae93ac5d05e2766a7585a9b62da9233b9589
SHA512 e93062fda7030b8e72027c04c32cea8c398b118243a12e9639bc08aef88e1c1b02e872941d831803cf1cc8b6b636eecad862572f226c26db9a66b5d28123b81b

C:\Program Files\Avast Software\Avast\defs\24062614\aswef908674bd7568cf.tmp

MD5 36c5a100dadddd5d3db2c756fde3e47f
SHA1 caec6bc2164c899e251c6bb24e99f9e32fa908d8
SHA256 804f0aba7d3960cc15fea70578fa64a4a7bf7fd6323cb13b24dc80b63aa96510
SHA512 03d919a53d3bdafb0f3a78eed71c3d95681c9f2359f858c973b9ed425a1a677c1a05ffa03f2c1346c79bb3f3216657cb8303cfe3250fc477933a37731abd6168

C:\Program Files\Avast Software\Avast\defs\24062614\asw72066df12f8991f9.tmp

MD5 13cc2cc12b2752bf14d49188a1195da6
SHA1 8adca3a81e9a7748881d73f0d35a93f93fa0775f
SHA256 e24430528a9707173f08c5a2a4b327b7d790fca2fa44b7be58d8e3fb31d9d8f6
SHA512 baebfeef682a0f8cee62b5d3fd1af0c0aa64b9a93f07db8e2364cdd39efa424d5c49baaac66def8d137bc4c74c8b8cba0986b16466d75471ef9db6f2a9f76066

C:\Program Files\Avast Software\Avast\defs\24062614\asw1721d04b9b9f0483.tmp

MD5 86e1a697660da916c308d3d72ea78727
SHA1 9beb100fe8651e698797dc04058c3daf23d5b70b
SHA256 6ce65f742ede30c49b9db5ebd8fd21f0d48045b612bf5155406eb8cbea358d63
SHA512 377b31a9dcaf93ae1d3213aa62c242b0ef08f3f10b4d44e5fe39a890818ea002cbb93158881d17bab5266fe420fa80c9e8ded8957fb3f1faae651ebd8592c8d7

C:\Program Files\Avast Software\Avast\defs\24062614\asw55472e3246251c11.tmp

MD5 26174655632108c69e33a3e0e4f39ba8
SHA1 dbd55f2584a69492fa30e0e994ce81a18f91d187
SHA256 b0fd42994070018e2598ec6f0f0196560e4a70ecc562e093cf88e917957c1282
SHA512 f1ab61f9da186fe4e1fadb0b303d7fc95fec4267771a1f2da34cfaf6c1e77b7dfb7475a62e6126f5e98cabce66e55697c31e65e6bd8ee9db24e7094d85b5903e

C:\Program Files\Avast Software\Avast\defs\24062614\asw29d6e0e3204ed785.tmp

MD5 6170597ab42618e1c2136f859247e3b5
SHA1 81c9120133dd3743e05698781b996bfcd1b840cd
SHA256 79f386d33044df1f191e908f71613230cecfb0a6a8a4a413a23a7d8a7babe5f9
SHA512 f3bae2ec9daa4a38756d70281dd038b93abbd6af0373216e0d52a68783b0c19b46ba10ae45fe7cb2d13fd8d571e18728e42696a9a02dff832ed3c3c258c35c8c

C:\Program Files\Avast Software\Avast\defs\24062614\aswec287d379b98df9a.tmp

MD5 16e7b31e73c7706bff18ec365a32a13f
SHA1 da74c6a6c1c44f4e11cfafe488b5c39ba26e7d61
SHA256 d1a5a028099e81790e687b5d4115f5413ef7ace68a0a884c0a155d91547ccd62
SHA512 120d4f1bdb8ab5e3eb20c3bdeccd48c537f01c54390156582d7cb46a8e278024fbff2ff89460ccba57e073eee02d1c8f8495c62601ce09f0d14ff24a13118256

C:\Program Files\Avast Software\Avast\defs\24062614\asw8ae9e729a447113f.tmp

MD5 48c9462d1b260913aad89e7a27335352
SHA1 e027e41c04f0753df18e0153c973aad269b21ec7
SHA256 4da5bdc3c6ad10b2c6cbf180f3b13ae6ca1c5f7b492c56201a9ec8ae1e4b9f47
SHA512 7383a6c39fb8ac93886c843ab5e3e0432271a90c1125e55d0bdba547dd237c4c7075c18222ed0ba2c59c790d6b4e988baad85af3d10a5abe348a990e27af1071

C:\Program Files\Avast Software\Avast\defs\24062614\aswce027226c86485f9.tmp

MD5 4219b9baf27b9c69de57497f91087119
SHA1 57116786d2974f83b9f10b98349d95417d454e42
SHA256 fe1dbd3567ae711f267a6be4e6fe97231e56e294d4ec17d8df3352023015d47b
SHA512 1cb1b07349fe086065bda6de33e8432e08389ea0fea6daf99a9ce103f270e5672ea7bd7f539912c1b529df23cf5e02c5c7d4600a879340abb9fc2df56c890685

C:\Program Files\Avast Software\Avast\defs\24062614\asw07f5b02c82bb0e88.tmp

MD5 d9e702b0770fcde0e8972ef908f407c1
SHA1 1dd133a49bdbc660555e6b1817e7f32b86cea207
SHA256 80462d9f317d92d6a30859cc7dec5eee5f0831ae3314a6028ad75363e64dfeb0
SHA512 eb1beaba3e6acf231e24ed339b505ec9fcfd5391f5e79b2328f612212b01e281dd17538f74e9b2601dc157da57f07c963fac5549e6c23c92571d42f182ea886e

C:\Program Files\Avast Software\Avast\defs\24062614\aswe838a5b7d1d86548.tmp

MD5 d929b49214f049191612dc5886f18a62
SHA1 e392e6a5c72de1e17abe8d85ef28eca99fdb8df4
SHA256 65b88789002563f463f106f87d1f6f572dbda79e812c1a7f370135ce7fda39ca
SHA512 fc55869392c43f84132789a29dac4ab0fd7dee211f453e708ccf4c18fb982baa9ed1e270d62181219aa61ecbbc263407dda348dec880b639653a3da316863a5f

C:\Program Files\Avast Software\Avast\defs\24062614\aswa7b0f7e42089cb29.tmp

MD5 3e93ceb0ea4aee5e01b9c6644ecf047f
SHA1 14431fc21bb5c3f2b8d7fca18c9db006c45bac01
SHA256 d7c1ec4e4d38ba1279bf73931a306cdac5f32640ecdf54f5f810808660b1e332
SHA512 a0e6b9c6784626fb13aa37464b847be0d03e1d32c9080989ee593dd34f63522fb83e5d9bf62719272cc0c440b7f681a03b4c993f7ee6360e265388a4a2fb4270

C:\Program Files\Avast Software\Avast\defs\24062614\asw48dd057d8bc3474e.tmp

MD5 49768e977bbdc969f6295c1c50be299d
SHA1 9f857fad06469092258399a6fe7b88e26f85e498
SHA256 5411eb4bb01fd301fa2cab9ce3d8d92728f53e309bb8c14c455a0d3ca3070f75
SHA512 b3b746e09dfe6f4d0a061277d5dae2df1a7e6b8005494f43e6bdd7bb5adb82b1b18726323ce76d6ad8aec4ba997cf47c7cf87a5845039c54940a8bca650ab6f5

C:\Program Files\Avast Software\Avast\defs\24062614\asw53d8032a9ee2b554.tmp

MD5 e9d9391f48c39b88c07c054e80670e0a
SHA1 bad72b66bc496584ad6ad891dcbdb0fe9dfa9544
SHA256 8fed4b56eed1dc812d6cd18b5fef17eebdeb32678b18545d31edc0140aaaee07
SHA512 a90749cb3c4989e2ec2e3fd01c20c528e8a7aa26d572c82e3459da8121f3298d43cf7c7226cf1d9ca4a94eed8854945353e60d6575cce734cdb90d0925860250

C:\Program Files\Avast Software\Avast\defs\24062614\asw7e6f9913d1efd7dc.tmp

MD5 5ad6260dba269dfc5208221e6c95f369
SHA1 105761309d643432e334d641d4bacec54d1dc35f
SHA256 0eb012a4cbf7e04009ab2dc08f3e7a81a2680906b7fe1c952ec145311de98062
SHA512 e294b733fc8b56d328abcf544f8f327689f70517ab9ceda6fb9b4c4aed76bc0a8a6b6e8be222165b0835936e6a5636668eba6116dfc0b1420393840f1691743d

C:\Program Files\Avast Software\Avast\defs\24062614\aswad7ec9d7bae6ca15.tmp

MD5 30f8640fd195384333037021ec597286
SHA1 e249dc80798a6648c2edd079d0046240eab3f2c1
SHA256 f200c474489841248d3d5c29816d2ef47fb6b57647a402d54f67ad9fabb9db2d
SHA512 44a553e5b4b7960aa39b9dc5bdda928ba219a5162de404dc7228a83a5b6b2838fb905ff9804d133eefe6b591bf2ad04b797a7f6482fd0d61d083d1c7831156da

C:\Program Files\Avast Software\Avast\defs\24062614\aswcd68e8a6f327819e.tmp

MD5 c8012047d209a8516e55f4ab095f5e2d
SHA1 6a3414d92c55cee73b0278025f9a593cb29cbf5a
SHA256 f52a92c471a54dc2d1ab7cc828c6dd2763b677f7733fc733a87424a548d9dd55
SHA512 0bc355fc407a73b64f47083f89f6b66d443e809c35a913693e3f876545c9af86e1a52c4b4fe93e166218a3533f17a7d4f02d7294675429b88ce50c1beab5237e

C:\Program Files\Avast Software\Avast\defs\24062614\asw3d00abe090f1de39.tmp

MD5 f28fb624726efd4021bf0861c1bf7cd5
SHA1 fbea0f38519d7153ca7beb032d783bbe4faf64d6
SHA256 302235ca1f3a4cd74721e063c4f5c4f0c9c1698979317b281a6c02ef4731a575
SHA512 98f43086e5b959a84a580a2fc25102bf7a14dac3552fee33f772e5062542ffc463ce7b6d49abaa1628de0ee193b127038426ce806980b67859e0cf0f5a08a924

C:\Program Files\Avast Software\Avast\defs\24062614\asw14b532fd9f273470.tmp

MD5 bd65cf8cfe2ca63b0a3332b631e20692
SHA1 78e7da0c9a0b6904810a3882871d587a4526d87e
SHA256 59709dc69cb3b8c65f8d3db43c9b2da6ea6a55e1aa93021f29c6d4f678f2fa59
SHA512 5a438bf9caaace584afea2be60294ad40cffe855a254f9f19340ad65214efb4f9441723aa6757834d8400246491cbbfec0e1f0e9c3b8ef27eb20a90c14e46b77

C:\Program Files\Avast Software\Avast\defs\24062614\asw5bac348afbf3fea2.tmp

MD5 a3eeed27e6252ecd6e1f5f8d02f0c86b
SHA1 5d6ac9885e00434d44e1c80cec1340270f7b3cea
SHA256 a087cf35b9d9e8143e9b84b0730a362eee68564c3d0398b6cdcc6b77bcd8e7ff
SHA512 be368b630d7431d898aa16e5cbc0b4d1a6af4b43ccbfdc772d9a2f58732f596f4d05f3b4a68eae014349b5011c02a8354cdb7bf0036244f29c2375bcd0aa3310

C:\Program Files\Avast Software\Avast\defs\24062614\asw0441a3ea833b67cf.tmp

MD5 573052f08c380ed3d6218abea3aeab5e
SHA1 ec953a8a7db005d802f6efb27a17e6a491929dcf
SHA256 e2677141498721b367960ae9f70b1a54ae8fef39b0ae4d5829a9e8feceb0e6b2
SHA512 492c544a6053301ccb55c6ed16015046986a5ef0dab6538459691667507849944ca6b07c07279e6e890e5da1d58bc3dae7b470d2c8056f48763417276cc36f70

C:\Program Files\Avast Software\Avast\defs\24062614\asw85555b86c5d24187.tmp

MD5 c838d5e46b10619ee43d1d203666ec21
SHA1 a041f513f7c76590f2a92329d75b8bff719de375
SHA256 deec78885e387a05b5d98ae9e218ee0be3b72793787f19f95e1521727d133743
SHA512 a7713021c04df99c4cc8ffbd33122f4d9b45698dd2d4329ec05a787340766a74cdff9a1834da13403986706ec30e35ff06f43153a1b1b491db277fe2abfa16bb

C:\Program Files\Avast Software\Avast\defs\24062614\asw75dd1548536d0112.tmp

MD5 85c2e280d07c6f1bbad88cc4250ff631
SHA1 1af18a316dc462ccac7fbe31ebada27ff1782a47
SHA256 29700d826cf286b66ff5d8f56dce0912934ec007b0b3dd2129c187df26588100
SHA512 49168b881647cb8d3039b978e0bd22fb2b89ab5eca5d7f7705c5d82b63351543110068dad93892f64ddf6d31d8471b6f73a3dae8655abe1ee3da04c94edcb74f

C:\Program Files\Avast Software\Avast\defs\24062614\asw3eececae4648651a.tmp

MD5 9e8d3d87825897f301fe7f31651374d4
SHA1 53a40c4bf1fdfd4a74e4f0ffe648e92153780c49
SHA256 85f9a442c054695f46d566b783bc97947cef4a4f9525aa438299910d51d36581
SHA512 f0cd3d2c909d2a09d8f17d92a8c7516e13b1d0c40baf45c37cf9fa9d319c3ac12d6a34de9dc0587eccf987cc05932eb80b922cacaedcbd9f8c9100c4fc4ed57e

C:\Program Files\Avast Software\Avast\defs\24062614\asw57c07e843240461a.tmp

MD5 e157445645bb880ada7d72961b50b1cd
SHA1 7d48bd864fa4aac643d87e0f9d184ebc0d6a1515
SHA256 f5a66618688e0a48c9bdc5afd55bbb4652ef31f37b6c442c0129923acf766444
SHA512 197f9b4b0cd299ce66c0e42af4c91adbf2a11f5dd945047e685f23f938803096c17243336ee358e5600f632ecfc30feb8f11ca5d273921e94a4fe5568349afa9

C:\Program Files\Avast Software\Avast\defs\24062614\asw94f41a6022041208.tmp

MD5 e1b5eea2ee17eecac6a229a39ee12673
SHA1 a69522a3f6e09720d04a8cbda24e6159d1dc4d48
SHA256 37cba3be4cef7ce8a86241aeb2e6a5c4e476fdcda5724e1785471f1894da7726
SHA512 fdf77b87f696f4722df671720b5f5eac73555e5eab6dc0aead24edf99b200e4e19f40ff84eaffb7d94de2066a3b6aa8bf3e73a5c883298ecc308f9de80413d92

C:\Program Files\Avast Software\Avast\defs\24062614\asw08899ab52b9f34ba.tmp

MD5 75ac85d9308bc70785ca9f070d11c1ab
SHA1 fe0719544c76522837d1ff0e7728833951f13e34
SHA256 40b3e1a2c62815c6f2fbd55ccb5813d467e465e4762eb4d6e78fe4c39e9f6298
SHA512 5e43ecde5722f375ef0a62638d32dcacf2dd0dded80db417d58960f94c2e42d89fe0954548f8c21169a0ccfd802254e244ba68755c5adc8c2ab3c2e02e4ca106

C:\Program Files\Avast Software\Avast\defs\24062614\asw8a4c2299653c9330.tmp

MD5 36023651be3eeabba3f88a1bab2a62de
SHA1 ec66ca10f4ff667c207ed003109af192eb532f7a
SHA256 f28c494b891fc146d0cf01096183519acf663509fa993d8dd26aed86d873053e
SHA512 a0bae518bb7f9f15045af7ae92075cf42c324d29e6fe6a2ac07357ff02c7eaad3625823a61ae6059666fcf0f66597c1c72fcfdfbab95122c9ea208f13a749ad6

C:\Program Files\Avast Software\Avast\defs\24062614\asw7e5f38e55d0da412.tmp

MD5 757cb743019b706562962306a762e19c
SHA1 65f1340366c4dd56310c67795f912a279b30afc9
SHA256 ffb7144c20f80f1131426e19e3b322dfa06e0221007799bdefe590edd25f60b6
SHA512 70a72a64710fa08202ec506d70be0d226194ed661af40e67cc978aeefc5e33fe4077894d0ff58f354c95e0d03bbbc549127b8bc18351683c26f5a1ea445142f1

C:\Program Files\Avast Software\Avast\defs\24062614\asw4ad808f7417ba417.tmp

MD5 d1608acdf3df1c1bc1bc50faf9374f78
SHA1 ab6e1ef20a25f5350a5f8e3b36d317e1b05c75a4
SHA256 9cadd1992f7ea8d579269315504ff8390be771f7d2358731e2e8afc039a095a5
SHA512 76cfdf8f5359959429c2f9887bee8d17803f6862fc1b184375528558f05d2c2e932752af3869f672becac63c8f2ab11652bfe6dd891360f059ec98154d354fc9

C:\Program Files\Avast Software\Avast\defs\24062614\aswa9deb4632b4dc7e7.tmp

MD5 6eafc6b178ba81a9b4794176cd2445b3
SHA1 dd5fcdcd18df2d7652dabf500545578fde57f829
SHA256 c3b8286715f98d76d611069d806d881afbf72e5ba139c6f3807080a9fc885389
SHA512 ebe7338c733d2307c7a4b542249eba4588bf47439c3d012794d1700b4e5f805292514126a044b96733904175add8777763bbe254d7590f927e2ab333cb9a7663

C:\Program Files\Avast Software\Avast\defs\24062614\aswfaa13d9a485be8bb.tmp

MD5 d3d61156aa25a967b01827d5d478c7d8
SHA1 1e35afc1fc55c587d2b6a0dd0b1fa5a3d21e476a
SHA256 2086e21de1cdf7a16bdada153364053ad5efbe4ec5688fddb9111ad2dc7c2876
SHA512 b9651703d1ad7b7b065f430835e5196d864b9c464b3544dc01583d45550298447277d95bedb661c45a03dfe3b67360629f53b0ccbf9b1f92b578f67dc8e2440a

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\Network Persistent State

MD5 983def7809b9939a776ec8770bd26391
SHA1 1fe555546d773b536236cf59cb86710d91ab2dc1
SHA256 507e5b000aa500304e92aad2c3903497f819e357739315d4e662f9e38aa65805
SHA512 e793493d3dfa7e92a719dfc86643f1100f634d97ec8af7d99010dad1b1f5698e914987e6ff3afba9c1daddc044fd5d58d870f2020f031d7a2896e55e743618f9

C:\Program Files\Avast Software\Avast\defs\24062614\asw3e207f508a18c0a7.tmp

MD5 5848d91326f4439f47a4667d53a145d2
SHA1 e3ea5cf99e774144e17d5e05bb8775b52b6c9638
SHA256 599bd37aab9a287100c865ed4cf36abca83a90e574261070edc4ee5183c817b6
SHA512 e7ce6c0a5f21ae29bcb2c863b198125b5a5aab5b4c2aab78e1f30f7309934d17fb797919d35209bdcef359da745da4c40cfe78cfc755962fbf3b832f72663c08

C:\Program Files\Avast Software\Avast\defs\24062614\asw610df31a1efb59b6.tmp

MD5 abe964b5d1292e524defa1c923a2fe5c
SHA1 f932ba9bae0f25c4d607df1139f1913d2d421bcc
SHA256 229cd9f867ca4b790df977f5b53463bc78d56f0679e6f51b39bee684d14b175e
SHA512 6f1bce79e51935f959ada6e29d6fb04c85ffe138ace76aabf1012b6f733948ac07ee9cad1284ba234b68d299fb7859b3f5783bcde4baf953becb918763aaef94

C:\Program Files\Avast Software\Avast\defs\24062614\aswe8415bfcd0e2e0a6.tmp

MD5 fede58c5e447d2fa7d39b9340d72ef0d
SHA1 4f258d23692d795e2a78d73ff299063a0abfc33a
SHA256 cf52174b647373762150cd11a50eb0ebf1383caf6f641e3f79cbc713959d2a2d
SHA512 d51a55e7475d2d78cc7f79915729e05075b4c24484f60ce89149d1a5a4c598fb260a766b9b5e255d414d8adc3f3d19da1cbbb89a18601ca313f1cefd226d10cd

C:\Program Files\Avast Software\Avast\defs\24062614\aswdb44ac0b55bc518b.tmp

MD5 6845589832587ead403083435b0a3df4
SHA1 44dccc45a1f009eb4876c36fa57068204fc520ef
SHA256 aedebef949dc5c12acf001262951d0835fd0bcc2db720a4e7a9d799e645a10f1
SHA512 58dcf7a838d95a330ff06553d09d3cb6d11cab1d8eb2ac8a5f394e9c07ff231303e601fd24ca555e9226d6680815614a2e66c07d1a00ff59c83dd9305de07069

C:\Program Files\Avast Software\Avast\defs\24062614\asw8124fbe17cd9301f.tmp

MD5 525f4fe527ca7c09d4ee3cf687547757
SHA1 8332ab48a2ef07033b97d2178442d8c6ccf6649d
SHA256 aad3b0a87587ea79ceb4cfda51ac5c93c565357f1c62b21b653ad5ce916244d3
SHA512 6763281d8aa1a985e767d4d7b8c22ce361ceec646022bfe33c66452548cc519aec23e9afab61c12f5c3e6bc7ff191554f226f3b8e94edc2458b8190056a38fed

C:\Program Files\Avast Software\Avast\defs\24062614\aswafb65d288e4c8f07.tmp

MD5 26a42092bd671b28d6e56850d24b3ddd
SHA1 ebba332815e055c117e11698638d7d54baa2169b
SHA256 7e691301430b0c4171f491ef148f6b19e081bbbbe26a192faf630be0e47b566c
SHA512 8d04f91fcf88aa824f4a78215c6fcb5225cca040c6ca9b4fb97e6fbc518439cbda114a20101fad9a65cac65f1fbb7f28202f5c57b49c03ab53277c62c4b77da2

C:\Program Files\Avast Software\Avast\defs\24062614\asw6d1bd9bc22c41134.tmp

MD5 2c3ab92aff2fd183bb4d99b043d17d12
SHA1 49148c8c8a22d94a1c7cfdb39856f4fc295b600b
SHA256 3e7cf015ee4b1da8418548272a67a95e0bacafda5ab11750a4a2d9df164e366d
SHA512 5f0c82718a25710d2ec31101317c72e217b0456ca4cd10cbd2e73c0d0dc4e99b468acbf9e5ef5da42af87f540cd24efa9cffe66c64a8154577eb500bd62547b0

C:\Program Files\Avast Software\Avast\defs\24062614\asw3854d8360ab23226.tmp

MD5 4fbaa69f831568116c159456edd6638c
SHA1 98256d11d2173670b825a3b15cfdbb4fb4edb93a
SHA256 1be2e4c92108b92b55092f24e5fbf1f40eeb1f429f5c8c410b99eb8cb74700f4
SHA512 aa9358c5a7399140271dd92ec7ec31cc5b0a1b9181cffeeb968ae60f68fa3d61c3c8642f1bd2e0f1df2e50d4df7160e4b6926a6f642dd6b49f7d544a98691c1d

C:\Program Files\Avast Software\Avast\defs\24062614\aswf0bbb37f4d5b0090.tmp

MD5 adb520c8708e5589c295c265cd633797
SHA1 e5042d4ec74bcac0a941414ed541455b347238f0
SHA256 905714cc602a5ece86a9efc97ba61fc583679e21d2f9c46525c7b6159b8c2d2c
SHA512 b39152e85d61700180962bef8cc7debf2120a0921f5d45269aaa615b758ea8af8457862dcc5eaeae6bae53035c7a9c6e1831d58f857c8b8ebf293822736191a5

C:\Program Files\Avast Software\Avast\defs\24062614\asw4d8678204cae7300.tmp

MD5 55c98084cd5e581ff30935ebe0d8a433
SHA1 ce3b9ad186d5a4897cbc17dcb0ea6f5992e3f25a
SHA256 cf4c00d63179b63681e731dbe3928f9e0459b04235b14a180ffca6398265e275
SHA512 5ed79a95b88615756283958db2bbcc9c96cdc1c5aa4183356c71df387c7681b5a6a997e5e1da676985939dd15f4a3dc188637110c9536666f7b6ead7465cefe5

C:\Program Files\Avast Software\Avast\defs\24062614\asw4407e3d204b0f824.tmp

MD5 48ee9244dccbdc8afb86a7ef36497bea
SHA1 e0bac40ba7b9cdae9139ef2f487b5b300aa78255
SHA256 4f15fbbeb19dd95d400d0ad4e49a48380763d41ff6772d4ff979ea829106de65
SHA512 9b779e418c30819524e2211a023ff421e8d61822118b47728a271d1bf34c0258063cf8cc940ce581aff9148dd153ef96a5179466be2ec33f48a87da1f28b06cd

C:\Program Files\Avast Software\Avast\asw466d38ff0be206b9.tmp

MD5 4957ed73d5e5e303e351c8f8b7b53e1c
SHA1 e61238f49e44237c56d4d5b41aeb150160880b74
SHA256 59727f7a256b7a70971f2e62b43b0a923937f85689fc3aa4ae50e4fbfbf83499
SHA512 db4854667285bb1cd8d07ab189607ec5bc489afb2d0a5b5a3388f91cefd012feca689787452901e0eb1de6e8792e69c0097c38b89bba0d977d0b29e5e5ef2feb

C:\Program Files\Avast Software\Avast\defs\24062614\aswbac63c56bf7b3be6.tmp

MD5 6ed2b604ea31b9bc216b7d8adaf567e6
SHA1 e874bae793ae9bd790caacc250348959fa91b5fc
SHA256 4a64e8af87ba15f91a50a69f75d99d7031561c1e5811013437e48927c1507ca7
SHA512 731a0fc99176f7d0686e2d1c71747e61f03a466b72658b75b3448c491b77caf6eca49f9157955ddc761f9b368bdf5601b430c60c753c4eb620b53935dbe88639

C:\Program Files\Avast Software\Avast\asw0d4d79436591b807.tmp

MD5 c3d491e16924938131f3f49d87485ce1
SHA1 776d9494367a5d402dccd6702e0e869bb483df5e
SHA256 b0cdcb4b24d92303c7b8c15de1ad5df6daf91ea7bd6090b261e703acb646fa51
SHA512 fff388e513211216adc5adfc8bcf809c665ac8186f4b83800e8ec30cd2c44ede06683c7e49f88f0304d94afadde9689e15f647e06ec3cd8905b168f4eaf95949

C:\Program Files\Avast Software\Avast\asw37053f748fe2e3ba.tmp

MD5 55e8abc2e2a985bfcf63b31fcb616798
SHA1 1515621393b52ae31c697422c3410d9738d58ad6
SHA256 0e5c4afb2fd25f3b0843c1f982d5f1314040ec5446d3587888743e6e5825ef31
SHA512 a0e8ea08b458a791455846b8a38f4576e9d88040dc4240eaf76253d100212f24c3fad76963ea26edfc3dc634ac83cb0151254e64bdaedeb943dbd12d8cbd6e1f

C:\Program Files\Avast Software\Avast\asw5ca84f2fbc424d7d.tmp

MD5 17b24cd98ab8714abfb1847aab4bcc38
SHA1 e3c8a2ea624e9e4739e951f27e8fe0748511c420
SHA256 532fd260954d47eb1364ea4e79f313b56f4b440a17f32519dcedeb7c91276705
SHA512 29ae5c1d51699e1fd11e0c8d14f5d8b0e56dc973b6b39834c1892014d6a512872e8d9331d9553f3c2ff31dac51dc3b7df7d4df0bee3cb76db84d2bbe9af1a29f

C:\Program Files\Avast Software\Avast\aswc677f81ab9764823.tmp

MD5 62d829f91ec96677fbbc4362cf6fb98d
SHA1 f641fc9376557d0bd15fd5706d367d4bf76f9cca
SHA256 9f2bfbd4a93bede82d4b5e465660deeffe3291f3e0df7a37c36282317be588d1
SHA512 0acc08eba170495d9b815fdc1137347d60294d0f5ebf8515c5710cc49d9cc20f266710bd1f005fd867880d94a68ea9dcb8d04161652078ebb7bd6283749e789a

C:\Program Files\Avast Software\Avast\asw4fc8e0a07abbe9d1.tmp

MD5 a7bcd6caf81ec3885556a8cf8c4add00
SHA1 b0137bcd506c563e26f41eeac42300332db7c3d2
SHA256 73cb1a52cda3ca650d5e6823e5454f76ffab2ce7b69eeeb261df6276006f3d2d
SHA512 7e022fb8d15b99e8d5816ea491abe5e12c247c0ca338c87350e9dc499bfbfd8d32bbc76132d176b2b86e215d60a4ff331b8b66ce73275772b5155ad66c2a9c69

C:\Program Files\Avast Software\Avast\asw526ee0d7056eeeab.tmp

MD5 13c520abb15829477f295cc8c11b5889
SHA1 e23f9aa51e65fe6d9b30362774a5b9ba36ffc10a
SHA256 f2aad2ac13e4fdc8bc1031f85928d5e00f4ea62c81ca57aefe3833a86e85a559
SHA512 76e202b72f9b64e45b39b7e22b69c60ea55bfac51ed45380676064f6314039cd1e761eafe367e2b7246b1ebf933a0066843f5f6666e3cf0d27e63f60c19031f0

C:\Program Files\Avast Software\Avast\asw24aef7c34ca5551f.tmp

MD5 63068466ca1174caf81e4001fd0c59bd
SHA1 47631e02756a1f21155ed5843f387aeb690d0a1b
SHA256 3c3d8d965bd77dee71575465d21a66777f475e9dc096dc74eca7f8c8563a59fb
SHA512 11821ebe6c17f24c39fb0301c5563279866c422f19620395cce909ac6729320d9461af3b4c5b44d1b4f39763464c56f375ca99fefea7311dc736c1b6b627ba1d

C:\Program Files\Avast Software\Avast\aswdcd34ee8c0627d7c.tmp

MD5 3b75ada66473de44aa3d9635a4d9625b
SHA1 1adaef95b090382921938e50bc07d15402bd6b4c
SHA256 c8fc551fde0ea0941eaf471659d0de06f0061d7d9c345b2050d8bb443843bd80
SHA512 952672092260ffddb4573e9c3721b6d52e065877b31661a8dbe4bc5b23086f837793c0683bd44547d14a8ef43842dc30b50126397b00558d32cc5617be524e6b

C:\Program Files\Avast Software\Avast\asw0d9f048359536cdc.tmp

MD5 18272ead1f11dc2e461391d0f4c33ff2
SHA1 acedb923ba9a3ae00fae925d23d74e397eaf1928
SHA256 e35ab314a93461b97db6dc086933215b7ee05b0c0ae4aeb04957d61ce0fe5164
SHA512 17293c10b4ceda46254ea83e422a3757295c941aa7e95a4284ecc3226525e1f8e0cf7f74652ceafc837ca2fb09cfb47de0faddd44fac93d6a36baf65c1587f5f

C:\Program Files\Avast Software\Avast\asw58ad7411e2b62221.tmp

MD5 8fd63a6aaf3a567117fca223dc7beee7
SHA1 c30ee27bf5d7a3ff83bba91bd8aa34f3446a2e82
SHA256 3450add16a815e551871bf53d4a496e14567ab809c29db2dc4239060ce954da0
SHA512 9fd8731dd46fb783d8d3c3d015461a4d6aa7da8a01def7f93cb74363e3bbd010996fd34dc6285e7c29843c39dcef720d8039153dd4db886adb3d51e4dfc6e1df

C:\Program Files\Avast Software\Avast\aswefee1655b72c5e51.tmp

MD5 255fb1c6b8455881c9ca0e75038a6f98
SHA1 dddbbaa4d6294b706648c7f4c56d397fa338f046
SHA256 d3a6809e4810a5d762dceab0a15042d68f9814bf359c3aa36731d0c0c98e23d8
SHA512 e91b8584779daf9c23fcbeca284f5cf5c5cecbb9d7f129f68eb2600d518b59c80374fb26da89d9a2e432881140591b423f3b864fc08c51ab7fe4ee3b46c6150c

C:\Program Files\Avast Software\Avast\aswd8da663dadeb8721.tmp

MD5 0b9199f978354026e8a571d0b87aeab4
SHA1 c58872ef4cfc8994550e9c59cb70839afeaadf31
SHA256 c2f77f4ac4123b0083096d1ac9218a2da14fa3c28399fe75f3970c740e962c6a
SHA512 3e70085bfa174a74723959bf832ce10155c55def270431f3bb9401816468dfb8cf3e16f4108574900434fbfc5dfb3b325ef1dc0e797906e109514e513f38337f

C:\Program Files\Avast Software\Avast\x86\asw34890f3ab9ead302.tmp

MD5 ceb79b5419ae577b74a3a0e4ef64ba5b
SHA1 f4540de05b0d74c251d48f40bd8358838e1e03c5
SHA256 9cfd0629dab808ecc8d717354fba3f25cf55be7e1f456f668d542f31c5167bd3
SHA512 d526d8c7fec3cf6c48c7eaa5d8472af85a9e9e144a8cca4c31db27dccd016a05ac375474af366f8c4c440bdf2cd0b5c7bf83ed3b0909e16249115d7900667333

C:\Program Files\Avast Software\Avast\asw638d0ac83aed1444.tmp

MD5 01f579205f7a339ce96efde164386b3e
SHA1 19ccc2be4e6240b4d0502d48872ccf1ca8f2f419
SHA256 fd38dcd3494e9cad2c9f9f36359a53fe5759eea3b1dc8298be0fd7f28567c823
SHA512 aada70d074fd192c09c7033548d29b91ecadb3ed16234620f7e15aa9ce29cab519c308340eb4147c30c7acc220126e7d53c409cde8795e37c6dbe5ee01ae43d4

C:\Program Files\Avast Software\Avast\asw2a4c2ac166505837.tmp

MD5 f7a1273ab54f18db6a8fae743369f677
SHA1 adecf082de95ccfc8be2c896cbd640503fa57726
SHA256 e8da831c0f9d187845b310719bd53aaf134fe511bc312ffbfafd91ae0a41044b
SHA512 2c86d69948ac69c943dc550dc4b1ece7775dbc354310d239f2cb4e4b97817bbd44b7ecc89966d708b0b1a3c4e4782e3ec649a9303ba64b16e755634e7a588690

C:\Program Files\Avast Software\Avast\x86\aswe975e7f40ed66a88.tmp

MD5 061176d35706e957f0ec7f203458a314
SHA1 37933c76ddb2d44b8a2fcf84837fdb776fc62518
SHA256 f33be0284fbc8a5d38a05272995363156b31fbf1febadd874ded07b618881d79
SHA512 333938e69ac6f2d270f4c3a7a3885842ebab5f1aad2ba03c8638aa42b22be787941422e81f1aac4bc61dbdfe4854b5da56959cd2e5ca755834919c6b8c554f32

C:\Program Files\Avast Software\Avast\asw455fb6f5de72104d.tmp

MD5 557c85b7c440b0ab9a3a448a31da843e
SHA1 93cfea862580a5c9ed8652b162dee092cff8ad02
SHA256 67ebb046f7fc883ec4458614aa396444b32570f7bda61a535559cf035e68cf17
SHA512 3264f6f60b7f3b0173cd9571e7952c6ad45e6ad472808f59451e6913560b60982620243ede8da1450e9cfa398a4b8224c1d78b239a047e885492bd3e03ab1667

C:\Program Files\Avast Software\Avast\RescueDisk\aswfd779e1e13138170.tmp

MD5 51aba93b65204620176963b8437ced3b
SHA1 5e52b7d58aca658da053f7cb6a4d982dc04ecbfe
SHA256 875204eb16b067619ee9ef540cfd822391685e16ce9119c74dfc7c9b5b940206
SHA512 abe37d442508fb8fd749b694e900d30d70fbaded4f5c798214ab2ac7d9a3ed55d853a5c1b59b24bc26e9c58ec079cf1f32a611a447f95d057e3e4d06323d6de1

C:\Program Files\Avast Software\Avast\RescueDisk\asw9b54f952c4a01a2a.tmp

MD5 1fb0fddf13d90f785de23a4ef7e2989d
SHA1 61580f779bfe15a27a7702e5910f8e0c4e063c5d
SHA256 c40f472b580205331a0e68542997a0334c33ccf60d96ba644ccc2489f75afe0e
SHA512 a17f4ef91b671996e14e2fa32cbe42eac44661bab96b5903745a0e76a1e5eaea543c07fc3a66bb7c9689ffe0ed0abdaba6dd2f40b3c4e7e68d705e5c30535833

C:\Program Files\Avast Software\Avast\RescueDisk\asw2ae114436026d059.tmp

MD5 0f0887aa32899feb3821c4a5e7a53203
SHA1 8a3f0c5afb0f88d24fd32788f6979d389f0878bc
SHA256 a0edbbdf246260e70bb423760f24723d962462f906e63b37914666b2f914b97a
SHA512 c66c2573f54bc668ffd49fcaec93d3a358ea1adfc58338f9a96d09bdcfe7c9be7a618a9e039f368bc3e7aa761b28bd20f4cd5395b3a9d1c6b9107f41bf527359

C:\Program Files\Avast Software\Avast\RescueDisk\asw66f8b9ee30be58e0.tmp

MD5 305b47675022e79eb2b302087081cff7
SHA1 1f16755dbb76ad69ee6f7e22762d0c1f52c99c34
SHA256 c9c51ba41bfbf948b2e030d35323bffbba38df2bd29fff41abca210a1c1a8a5d
SHA512 399177a829987b48eb5994a001df00246286c64c7e11e6035e070f2ec6edc4f8cb1b6ab72f1981d58b01f4d511dd236d5b1dbef22491d9a03063f04f5571fee0

C:\Program Files\Avast Software\Avast\RescueDisk\aswf90bd0d088188782.tmp

MD5 bbd60a023299b63864fbfaaf9699cf34
SHA1 514838176e634bf2249f730895cb7919c16c5463
SHA256 3b7e420a3207016d2d80aecad0664b4d9bd518b6bac72e4784fa0e85bb0c7a39
SHA512 e5b2740d314ce766d3a5e2c818badd876967a050be0a6ebd5909582be111a178745881e23aaf944ef3a3c8094719cf480b6d808f4bdd2f360f131f723b5cb02e

C:\Program Files\Avast Software\Avast\RescueDisk\aswdc780aa70d1ed6fc.tmp

MD5 ec82d1081d31554e75d7e72b30d31d78
SHA1 ff5615640cda8cec9fb0ad3fb8a4e441bcc8e398
SHA256 0823905ce46355fe514ed547d5c639af39b2b3d28a5bcabd1846997c7a4208b7
SHA512 2f36323db92f1c1d4e3b8f18f8258830a6200bc7061eaaeadcd0a655e30276592376fa4c4f706f497d5fcd00a1e5c5649e20407d3860910a184ccbe4b36547b9

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw7ea752bbf8891492.tmp

MD5 772cd36295f0abbcb7c471da0692b227
SHA1 bf51a2debfcff03c8594e3fb45bcc7c912359782
SHA256 928b1e6f9bfe6761d07f8d919d039efb77e9f1bb3f7147ef0a68b282ae0c0cc6
SHA512 66005c062b4c96c42e099c66a5f1f40e666124566b0d7dfa8ee5b32fc68001b1615328fde845e05f87e695e7b169b88b3c776e2ccbf39677fdea4c5c425c1f26

C:\Program Files\Avast Software\Avast\Licenses\asw6e779283772ead7e.tmp

MD5 cff54e417a17b4b77465198254970cd2
SHA1 a2922ac9caf1914313d4117dd30f4f1de71c5e14
SHA256 60ab263d1868282cb8262199edf648c21e45b729a78c6768bc9c27214a673da0
SHA512 a8cbf26c8babcf722623a709d5810baff798448a969000c36bfb7570d6ad388220066973783d7e162c1968fc42d0418a1c7ae15f51eea2ef2a2e843fdd9cddfb

C:\ProgramData\Avast Software\Avast\Fonts\aswa713b0a7b1238b62.tmp

MD5 c7dcce084c445260a266f92db56f5517
SHA1 f1692eac564e95023e4da341a1b89baae7a65155
SHA256 a54dc8488f8193bf30c3820cf6f261f911f9d328d699e1a1b8042641554cec70
SHA512 0fe7ec4c8eceafe87fbbdb9780519faffb646a23579ce5a4f5170808284c1ed85b9aafdab18cc4ddcaa9a7e6e2559fa6ed984d986ba93d1bbf4bc0551d5661d0

C:\Program Files\Avast Software\Avast\aswdae2131088aac801.tmp

MD5 e241e813f65282e22c09f85743e8915c
SHA1 5eb758d682a5c7b6ba6b98ff26945d27b7a1323d
SHA256 40a33471893a8a514b0f7c0259d4b107ca59167a7f8ebd11bd79a49f5a9d2f7d
SHA512 49a85b022520ba23b433140d545d92d9e366cc0b8fb21c7b29ebf0588b3433d15406f1d4fb0a306e14f10584ad26831afeca1d16063732b7c42f468def512d34

C:\Program Files\Avast Software\Avast\asw43dc719970e54ca4.tmp

MD5 cf93842aa8db0bdfbf435dd17f8ef276
SHA1 4611b17763bacc2ccc5fe84d5f9a15f42195b36d
SHA256 fe7c6b15ce097ab6d3aa3af3f38867e710350d81047872c4d17bee64f14f26e9
SHA512 43c6f654b4d0ef7cd2c3fd2f2f29f9fca50f9a5c5d5d0fd2d261e9d60742ede0b90cdc4986a62e8b6460b2ccdc67ac9905f1a91748ed17f8626aaf18a2102d25

C:\Program Files\Avast Software\Avast\asw32dfb5fc52ad6e95.tmp

MD5 452ad3abbcde774de310897c44136c0f
SHA1 f3f6bd90da4a0b2d1bcd603be4feb34a9f4019aa
SHA256 57fe77c6cf5965730f9287a355e262eb0fa125204a95b4630127d0684e9b16f0
SHA512 f3effb829d5aeeb901b23f8a1ee3372df0522cd3389f72a80fd3fe07ae66c0d7b9caed2dde42523b3e385f60d417b5d4eab39a4bc23c815c74301fb34786ed3b

C:\Program Files\Avast Software\Avast\asw5c2e9cce5724bd70.tmp

MD5 d940ddf07f61f9204a5129eba3a34189
SHA1 d32ba0068b59fc4ddbcaef991bea00c65d0161dd
SHA256 951621d1c13e951fac0962e06b95a8385ca89af469e6a5a5d5a50b6a1d03d0ba
SHA512 4877f81c67dfd766d6d9e3e4a1c8b1a7643d90150fbf6cd6cda886d27b7417b781b07884b630b1de98d3a59870a3d7adde50610d2ca8ab3e5d8c369440f82549

C:\Program Files\Avast Software\Avast\aswc945df34cb238183.tmp

MD5 ac04e8b5ea6ffd052d87a8f3ee0d7e4e
SHA1 bb3388a220c45281df2571bc92f67684e2e9a6f6
SHA256 978e6c757771fca495c24ebb753b2a7e631d29d783ab21876737fabf2165e18b
SHA512 830d2718e3bfd173d796b86fde7c1df418df1c86bbc2cb3142e9f72151fae81c4f79431d5ca19cfa1b7f20915f2e3f99307bac70b492d3bbabd388ddaa688ec5

C:\Program Files\Avast Software\Avast\aswf1d9008d202143c5.tmp

MD5 9772b741cd9759c1a57ca4dd182993ca
SHA1 3458b9625b0f89a07cbe487072029e8a42ac7889
SHA256 5242f30aab11dd80880c373e9bd98900f33a47387033dd4d108c2b954db06b84
SHA512 17dcda2d8398b927706b843b9bda1932d3101fdf44366cddac1d6ce66c49840113d59d2683c9994c99ff1aa134a213d0e887cb08d9b8ae2b5b2022a234e84aef

C:\Program Files\Avast Software\Avast\aswc1bb7c046ff98207.tmp

MD5 4d04ffe7b376c79c9cdf1d2ce1796046
SHA1 d361c5a353687407060f084ebc5d9f51f103265b
SHA256 de52aaa22e07dd1ca07db8b2fd52252bd4e2d9fb78f83084b7e86d0afbc1882c
SHA512 63e8bd485498365c80a6fe136af4b1db376ed1244bd73b44d406514de5331b7789c435caabf31d217fc6da38f0afef287b5fe5fec2729f2320105924f65dd668

C:\Program Files\Avast Software\Avast\asw20ae97de8ef504e4.tmp

MD5 f03f8636b46dc5c4df47844cca22318b
SHA1 4a8fb818db47f5ffa5d8310ec1516821a4698377
SHA256 63841696a545e2dd6545c9c4cd88d8b06055244c841f8f72a406a92b99079d57
SHA512 a443db285fe7f6212df800a99ec5d1f10e169dab0a7ce27a7040aab26830ce6cfde70bd386d99d611570aa63d1f91cb4e9c418ebc778e8f33e274adefc0ca26b

C:\Program Files\Avast Software\Avast\asw405381b01964d0a0.tmp

MD5 8f947c611b9b24487eee2b143c4187cc
SHA1 20d370206f46b6eb6f3f43d9d3c554cf8d76d694
SHA256 0c2c97a0120ae698c9f16af480901553023a46528e0b24a20c490e6040152768
SHA512 d18920b42eb7ff91394ae6df3abeeaef879ab80b0ddf56ff4aaa83b6344d67538a18157a0542bb7f214d31f81959f6ab7e26cdf143718329b16868aa9b7b2c9c

C:\Program Files\Avast Software\Avast\aswdf7aa5db3fabf3d1.tmp

MD5 e3c3a79de40abe97147c4fb9c7e7d154
SHA1 440810c76ccaff2c23dd365ecef16c52e5023c2c
SHA256 f90b89f1c965d52a2793451bff2b505fdb6a738d87aa3234530613ef0e272fb8
SHA512 e519ceab7040ab99f194aa5ab72435ae683240e6d2953a2c8967f3724326c72745ebe69153fc2560fed1724933616e0f77af33bb72f08bdd650c4de7fca8ed14

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswa57f0e6e75fa2f99.tmp

MD5 a1bee0af7bd944fae7f14174d9dfdffc
SHA1 ea699130cd63857569bf34826b9cbcb5ecfa1a21
SHA256 2c557f6a21db6c99af6184637b5efb57e44b40fae892230a43e96ab05ab27d40
SHA512 c6e9473ec6cdfc0bdd1b8f9f42bdcf3d31855b6e106b811ca52d2eca895328889451726fe12ecaf0af9a238d74c10e79bcf0870f056e7e85ccdb9be49f4515a8

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw851ef4a8239d9161.tmp

MD5 51b851eb7b58ca2c3280def9722a9602
SHA1 75aa3331eb7da58868f700158df56fb49e3c4507
SHA256 9f0d6efb48c7f8c0f001ec30d45558c5d8675c06573eca7c8125a7d5a1db2634
SHA512 e9b0c683b58ecdba5d5132f6808ea2dd85a3db3b0d9690efb54aeee92c29b8b2b4535437d861d2fa2a8033e623aeb4ee0661dd01e17527a74d6002c9926e8783

C:\Program Files\Avast Software\Avast\x86\aswf5ae1b3b62f0b154.tmp

MD5 b055a63315e55167b95d5ce14858ccf8
SHA1 63517c5e87288077455c2f2c8e2031f337a7111d
SHA256 9f68ccc3498ef91598b09581f94c984e56599c6b8451c13acd80701d06d61833
SHA512 5271792f8f219a03f2460c4a5a5e587655942b98a4cd7e53eb6624de8283d28f6fead3926d2263f2a5f39bea38e87fe3a8e2224e9a49159f9c453f47589e2f07

C:\Program Files\Avast Software\Avast\asw5b8a7ac46d7ee9a9.tmp

MD5 f97693f8ef88ab80675f5696e98488f4
SHA1 e3f4f31953620aee2c4f47f6da2a4b8409a34ed9
SHA256 12b4f844e87d36a976c49497d6fc3d8a59f19112742653e02e38048bc4380928
SHA512 ac4034d25f6d0c1ac6b25f7bd31a789901ff479684932df903f3210d7dda613c3496ffd673337557ebfd817f62515ca39f63d348b72a7e555cd579676b0e943d

C:\Program Files\Avast Software\Avast\asw25ac42486c2ed1f3.tmp

MD5 b9254334a93e8005a35112d9a9fbe977
SHA1 7623d6b2450cfeeef491658678450737adf030e5
SHA256 ef2263c950e126b4804803997b14dcf100afd45ebba370b0ea034fb3f7ebf1ec
SHA512 d206d9719660276cf308fc44c0ba49cb7673587dcaca438a64a83f1c2a90abc61c89a683f3cd6b0a06732d7812f7ee160ef5a4945010cc1ad49ee2dc0441b3fa

C:\Program Files\Avast Software\Avast\locales\asw901494efb3ecd934.tmp

MD5 4795132dc7086e139a2af75a69fa4f63
SHA1 e8acbd586ccb9ca0686c7cbf90f0be5cda48228a
SHA256 8ef002c7ef1d7207b5b41038f16fef198d2343c0539f14090960d6f1295d8c7a
SHA512 466f4a0eb01d2f8d8359016fba96189f152fddcf5c041b05a62c5a7b14b3d93b3f2a4c7eba7e292eb8acacb65afa68b9e9adf4843ef78c410f3d5296656911de

C:\Program Files\Avast Software\Avast\aswe2ef3cdea380169b.tmp

MD5 66c6ebdf3180d0251319c454f1c46bb3
SHA1 7f91fa29630de3d776ac58a9228a4531e4e1f9c4
SHA256 25b2b5fc76a52593dadca0515c9403199d863d4a2f968432981922bdf12c2c66
SHA512 502fc9d813aaf62797bcc0f1de7c39fe35b81e63a7e3df6ddadba0e76d5756bafb7032ae9bbc720783927ff2377d21d0f350b6ef8e9b63772dfb80961da4c2c9

C:\Program Files\Avast Software\Avast\aswe03a90dee7ba9f89.tmp

MD5 abcb0e5dc06a0b2bfbec4796a78e0f80
SHA1 67faf8d954c6913d606c81758078b56415456366
SHA256 d94a14ef4e833ed6c0cead145108ae3d94a4ab88cc89b460afa43f487051ff9f
SHA512 2373c8aa26281acf315f31cefdb1ed1fd803b566bc12981bff4d36956fad3f368843545dcbdcf8c5b274cdd554159975aa44197587d40a7cd66be115e1f21eaf

C:\Program Files\Avast Software\Avast\aswb7b3f83a5212f363.tmp

MD5 9cc54c4f60b992e040bda27c882a13bd
SHA1 fc11945e174c57469d3555a9fc69f680b4adb8c1
SHA256 099f766a204cd8e4d1e1a5ec752905fb5d36a0eb58d0290d4b7e850aa6e5e1c1
SHA512 8a0aa94b3a1ee3b7fb6acbca7d21a9b30a2aa62e175fc87f39d444fe097119cc601c1d123b79234acbe0578674940a6885e7f0d29d3633da9128f4d0c8cccf1e

C:\Program Files\Avast Software\Avast\asw0e9f838b269b3e12.tmp

MD5 df4ad5771b9cffa410ea860a72919040
SHA1 194992f0f1bcc96fc8ef980ed7adce30b63fa3b9
SHA256 78eafc968e2524216fedb753a573fac41a24076d808a9223e82c1fdf3b3b9055
SHA512 d425018fd709056e8cc8034d76944b682261c635b5592c8fb4fab6b49611d2e2ef30f9b57dd14feca0eee66efb8a263b5ba4df4a653d0e0563943acd9bf6be27

C:\Program Files\Avast Software\Avast\asw05608e98d1f6db25.tmp

MD5 bad3a80c0bbbda22c237407afe0a82a4
SHA1 00cfd3358c40c549d4709f4530de277ec349edda
SHA256 59a0ad87f4aa0bbfc2d1462ca7d5e760e2f6f2911c6c31f0fd450a9bea7dc684
SHA512 110a39d7c26745167d31edfbb065818afc68cf6bab273f967852024bbf7c4566920f93eb207c4f17105386f18cd9289d35ac66eef3c1ed5f90e5628568222fb7

C:\Program Files\Avast Software\Avast\locales\aswe53ee705e6d791c6.tmp

MD5 c41412769245d56fbd7d1f114f238700
SHA1 ff3ec93946677884128267d2d84869e5c6b63afe
SHA256 70ea00381aa8ae93ce9f64ae29ad3de0263ee5991861120c8df7603bac540b84
SHA512 13ca3d0fd0b4158f2bb751791870bc0a2199af3c39e66c1f971b2cfd6d536d9642ecab82bbe814908020330eb351b4a045e0958a22bdaec330e161b8a3f6087a

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswc71cc1c4451e70a8.tmp

MD5 b60658cd359253cdaacd79d2cf590ed1
SHA1 849a435b350491db6ca55bc2f25f20dd44f70c06
SHA256 72fb2d4bb0bdb603cfe9d5b92b87877cdbf852c7198e64dda8a66eaf85dce866
SHA512 ba9d73666d69595d8f872e60284529e48cdc79e39e5547794ffd02fc4df8c7132622669274be14179456c8bc8028b3ef344a082bbdf88a0156ed9b951b790d87

C:\Program Files\Avast Software\Avast\x86\asw907c69063e21967e.tmp

MD5 17ac28f3e215df5b31be6ea97cc9fa9d
SHA1 98e734baf2e8bee04ec8986d1e236e527c761eaa
SHA256 2ee3d35a9d4b447238f1dfa33c2463bf53538c601f2343ae5fa500ca0467e4d2
SHA512 88352a94525a0d3051162550ac5e3251b9f779bc2c072c5466f08238cad1bc6e33206307eafed7850cf205ab48ddf1bdc3f28f3dced14c463e68adf27908b41c

C:\ProgramData\Avast Software\Avast\HtmlData\asw3b67b857f2c17c7f.tmp

MD5 c69e876c8bc4f3bca56ba333eaae7a71
SHA1 d00ac516dadf10b6a9fbaa8b6fd7f7800511d36e
SHA256 d1e88cc6880e3667b06b2d006f5fb8516f28467dd1153453c1bf954571fc4f00
SHA512 3453ec35e83ed63f2e88326c1a3f4ee23a6b979d272243131c37bb06ce8d2467585e311a3c01198f3384d852ee9fe525434f8a6eb58b7698c0c8c56b7a8f3b40

C:\ProgramData\Avast Software\Avast\HtmlData\asw3ca2f78db0011636.tmp

MD5 94aa8569ec9b33e05f3088b136dda05a
SHA1 2e7779731351517e2e6df18b313e5df28079160b
SHA256 179fcd4c70b0e5958c56387c7849e4b49e695a284b75471a15a8e6c8637eeefd
SHA512 52cc30da7dc6e6ae7266bf171e4e9c9e16c0d8bf72abda793a0f03e2889eda6171044ed65960fd2c40251b135015a0fa62132c76cf16065ef6fa47476b6d8ff2

C:\Program Files\Avast Software\Avast\asw410d858f84b6722c.tmp

MD5 4d19f818caabcb5feef19291f11018e9
SHA1 d1176a9239634afc1ca7c685b9a4927faf6f28ca
SHA256 5fb93ad51e6f40bf344757d531dd06e8f94950045d773d12b2cfd63cdb05f71f
SHA512 1630ae43bd33b0790692d08c003cc0446e0a6ea698c7dd31b9d3bd9107551a4f4fbb5e82508b719eb94052f47d1d2895d5d5263e31c85787598983245212259b

C:\Program Files\Avast Software\Avast\setup\setup.ini

MD5 4a33efbe535ccd230f244e66c57d06f9
SHA1 a3545a034fe6e19389a58ff32a65eac81bac9247
SHA256 884402bfb98da156bd095fe97cf9438238a76e9b2ccab4fb8d45b0685e9b0fa9
SHA512 04e9bd671cb5be397f8736717ddb48858cad906715260390d3be4895ecd32ab16bfcd4acac8008bb449b14333c1274c8448e74dc48fc5c4935420f6ca6064fbf

C:\ProgramData\Avast Software\Avast\SecurityProductInformation.ini

MD5 9df3a7750fd881b7f523b968a03872d4
SHA1 327fc9e90a269402734751eaafd78394bbdca03f
SHA256 97ef1b600fa4647112c2711aa5ba7e853cc54186ab1d2a374ffa1a2680b16f72
SHA512 d28947ea47e2b0ed783774bdd647675540158c17be051e39d84cbb4ca6a31e86f6892b962326d894a9e5ac423e08f8e045ffb0cad7a7820c9fb095200ac8e0aa

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw7a211a09d903d812.tmp

MD5 a191c5e101289a8c203487c51b38f0f2
SHA1 abdd386d2e520a528c76ad21ebcfc4c95fc96d57
SHA256 59b372e3f2776ed64953973493cba430144b6dfc13e18259b881a4d1ed2294a1
SHA512 1d20c16ce8c2d1529e82d60042fba776f3cd26b945efce384d3fede26e6bafc67f563fc77fea676814c750de25650ed91ec0f527d593b26e0181e91d6ed3cd87

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw9acbb31beeb8cf4a.tmp

MD5 8fcc725d14da0fe938897802cfd485d8
SHA1 0c43e6508bd37291b51232a0f283be914555a7c7
SHA256 a0142cdd0cc34bc1be3986f6343efbef5b2852c1ccd3b83307907756cfe15387
SHA512 8d48853b0218500bca352c2c2612575fd326ecc3de062308dbc14c55b0e4ede83f9cf0bf47945c8ad74fbbde974345c5e6d72e09a8bac37e9a250d3171836d91

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw78da1b9017004dc8.tmp

MD5 14ea62906864cc92dc62a89657e4e73b
SHA1 fcd332c50fbfa2e5543c9ad4084b44ee9c2c5ca2
SHA256 bdbc0257ffe5051b54ffb8a4015f5a509e16b163278d2c7842d4fbf704d1a8d5
SHA512 f77947e70bbdd71ac30e6753f7b30bd2747dcd0588000c7208bef3514b57a6b8744bb06a77ba1af02d8250c37f9a57fcee8d01317e90f45c2930d2babe3c2534

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw6b4db88422cab914.tmp

MD5 43bb505c178bb9910263a73738b09974
SHA1 beab53620225559e66f4e418e3f4a7d37dd5de59
SHA256 6513f0b98cb47aeeb613c2bce1f9930fa14367c456e163f730d1a4b34f97a6a3
SHA512 2d4a12da427aa55cbb56710c23c1940e80af8782cdc5f05d636ec9505c8e9cb70488fa2b887a335bd91adc63eed597f0f23a07db19f80f3ce586eeae19b176f3

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw2c18f308348aea9c.tmp

MD5 3f0d26a23bc31fb2e6469b36da72b16c
SHA1 3bce1bda691024465cd9767fb1dc89cd8d3f2140
SHA256 8ba33fe2cfffaa05eed0f2131e9b7b389d700451e60c3e6968b6ac07a3589037
SHA512 df1342f6cd01c93b29025a9dac5cc929b0a4453d1aa4ebbc6d758618bc31c7989802498158e9c9cc9a62747bfca40dc6ffeacab1980210db37ed1792dee846ca

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswe5eebdf058746aec.tmp

MD5 7490b7798417364db18a28945a941db6
SHA1 ee2468aead06205e8aaf986ba9d428627fb4a713
SHA256 3dd397ac6148d654f8e4469234d8c71ef9a9192eb21ae6da4b9aa214b70f8127
SHA512 3362170f92fec1e24d05de0f72fa39c120ff9f48e67ad03981e9ba1eddcaed366228159ee622af3726646c4d74a7bd88d36f4515af47213f9e0e6207c89a8bd5

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw72a94481bf78638b.tmp

MD5 0a31956e8bfe903ed956c9247ac017e8
SHA1 e4641fcb80b4a52682c6e3ee69215d6453d7e921
SHA256 cb221cc45ff07a9c44f752ec85b83794dee3bcfc44d5c67784687580d4e039cf
SHA512 81eebd4973012ec65f8935698b610df8055572b81ba05b5e3b661b33016e3b3fc29a12258f78d481d0a8f158a3fd0d034a53017a004ab4147a026a42771ad815

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswb69372d8dfd3e103.tmp

MD5 4ba48fc9ecf515bcc5eb7912b5338f58
SHA1 3efded5ed68056d4520af841e274d0a713be0c07
SHA256 621ebad69ce0661b32a001f836a271863547f0d5972c95d4a2e5a35190ef68db
SHA512 4f151076098ce4a588aff01380bf03676539a821a537c0aad2a9086e2599137de64e7d04d1c42af7efc0706d3fc47a01c0842821298135fcb01ecd1721f93e62

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw49f33ff54f686182.tmp

MD5 16ac7c81eab021ce57c99cf25bb6655d
SHA1 ed2f99b1f72a317e5ae76f0276c10db170440078
SHA256 830e148572c0eb85be2fb1f232b99edad653f2e9a5031f20130a9bc8639a689e
SHA512 49f023745644e3733cc17fd03762104269b911b06afef73c21d066b481bb1d4665c90c7815b0d9c4bb272a2d603729db2168049b7e40ab077f4aab22a975ce34

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswee4ce9bf1fc4e57f.tmp

MD5 63e6ad2d95c900154617df7fe5186d9f
SHA1 9451ba4f30c0b9a145b5925fed614461d03a2c83
SHA256 922b9fdedf3e7ed6cfefc7a926846cf78624c1ab883e117d258a777e7ea55bec
SHA512 09713d17b9a9d6e1b4ca79b044e6687bbc7a1aee2ddfd401b0423166cb43305efac55ba292959e328c39ec8766f130f732d0e51c78e7be8b8f169e61f7683956

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswb5cb1c7e58deb420.tmp

MD5 3180c23a77978a77e061babf4eb1279c
SHA1 efcd051e9054f1f8544e1c1392685d662b4dc01f
SHA256 56a2937da2aff039a9b4dbf22573169b0fbd35b065e310040da60864a22832bc
SHA512 e336f0de44d0f50656e31557a4f4cbb601ea038fd88bc5c805f629a611de808c288269c96697ea93f92466c99afd53a5ebe99b84ded7af60c7a98ab44b6b1275

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw949ca2089cc11bdc.tmp

MD5 45212fe5b418a59cd561ff607d7570cb
SHA1 277219e4b6bf4c1db5b1232dfba62ff1b54dc3a2
SHA256 f3b4a32bb52490e03387d46de5e035bfbe61361518b8b82c4d2b4707ab37dc04
SHA512 e58ccca83aca534239db8860206f438ea32a9a973c405e8129eeb7b375fe5b74681cf56501f73af252e363d426b4e17eab774d76383cf54735cf7aa9e5798214

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswff62901763fa2072.tmp

MD5 1788b45e0354abd270a3cd7b1a520066
SHA1 16ad30790ec0fbd617003f5d7c31f6f4701c4401
SHA256 2244fa227181b7bb336b8576298166602fba31e820e1f108a2fb6595602a469e
SHA512 24da488f2aff2b6d83ba93765acaded3110b057625e63e64397f116ccf29ceacc2cd322713f51e626828d2248d8d50a32866fd7a3e298f1a76733fea612be5d1

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswd557f12c487148e8.tmp

MD5 2761869159d802e20ae5d638815b8025
SHA1 c086bd0d269dfaa9b30200c36de184438b3989d1
SHA256 e88fde1b59f2b8cc7d571a63f2fd7499c3362778c8230294acd8375725a43857
SHA512 d565b8ed78b9aff90acc4268ddfcb73294bdc742c0a010584988643d6b188af2e057009679a1ac3833b9b777dec77a51613b69c9b57cf34f6beb442092c1961b

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswd98542309368666e.tmp

MD5 7ea8d43b1a34fcb29747a1f392105928
SHA1 50e25ff97213332f58b62c097fe1f856f377c5d9
SHA256 fc0dfb3c1f9d39bdb27f7f431ecc12a4f2c4a45208f707406276c9bd54f0c88d
SHA512 8d56e157c59a3cedb941b9cc4f1ab3c404d4cee8a54dde4d2bb325aa4a99d4def053e04449c2fcd2f00054d7745c5faae2f3b2af48e13a07795c2b46a4d9e855

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw917dbe38e8e5ef9a.tmp

MD5 6df1feabad0038f475907b6248987ae4
SHA1 6374bab5c92b2006a06eed4c77ebc9a677b9fbd3
SHA256 b0ce3bbd395288f2268ca0009e429401c07da5bbbd93ae5427efe7e5eb8399cd
SHA512 8df50771b2acf002a20f1a2485a1f96fa3843fe1390fd3ffc66712b88a9c4d35a47f4b8ca1ea758935b66ec06af2f883d508fe8609d8370f506f08dfb6d06256

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswad5093de6f2896e0.tmp

MD5 b5a7cce686438a881ecb7c71c498718c
SHA1 f851e505695b3a8f3247928ddf0c48bb104553cb
SHA256 491d79354d4eb61168fe1733646f45f0ef839b6b8371df603c16ebc4975d0603
SHA512 9a47927d52206f7ce19de1a56124e0ccf6fa5f3283e7b9efbaf5dbf54a7a9bc8218e3dc82e4c7ba22c7be833a2aea4208567b8a2d36c798695e2800a8d078b34

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw751e549eeff9217a.tmp

MD5 54c78aa876cfa9ce90d967de478835ac
SHA1 d9e461a05557ff59a053158d5dcafef344ba8838
SHA256 755e9cd97b7032d9b38483648d05055a3c529d08e470e0223b270ff98417590a
SHA512 527a28decc096acabba7362f8fd559cf98965594127c6de8e0719a6efb18898f24eb8041449edd7b3a68cd6f00f1fa16827f3817c292e38dd3848dee87b79253

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw7a9c0ab1440f3dba.tmp

MD5 4296b28e172768e72b8c90745040d322
SHA1 46266615021503bef5bfad625974078459cbcabd
SHA256 247ed6c25fd56cbf0b3452783bfbac14e1e69722f1f14ec7c27ad98773854bf1
SHA512 6996ad66ec989dfe797514945ce0aafdbf9b9fe714b1a1b9f3720281ba41a313d5cc7454c2fa6ef06f377fe66646fa5b2046be77d470412c9504c7a65cf2480f

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw068941157b96cd0e.tmp

MD5 294455024027f579414769d06fc2d216
SHA1 44773def40d8996d180cf0c4e6daf1c597238201
SHA256 0fdadf0678415dc2317b5b7c573a12537b838dead21bbfa60a691f6d1b1aef47
SHA512 23e71acc8d878c4d6ef94e4e5c1931628c9d63f7fc06868572ea5d7addc54460c904acd63c0db830a90e79ff4829e4ca84f03c78485976a3f9f314e0ca5e6b2b

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw0f096f941b5909a5.tmp

MD5 0077d4a19f395e783ef646d34ffab9bc
SHA1 34c071cb03ffe38b7dccdc0f75a03fa05edd3e6e
SHA256 44da5a3b0f6783b9bde4ed41ab295fd818b02d77d85302eeeadbacb79820ff74
SHA512 3164ccb5289ee35272781f529aec5363a0ee7d24137578115ffb952089a6e27e06efb793a77cb490765968b255d0e64aec900ff01f204cc2e318d5875a6726b7

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw632c3a542dd4d0f8.tmp

MD5 731458e65a10f0fd61917d1fa5f4d4ec
SHA1 2a3b0dc877102a2f1ba72b752c20bcd354fb6efe
SHA256 8e190a4b533f1ee387c287d2d7eeaa5c4ffcab5c7db26e40223bd5d7c37d29d6
SHA512 61e7bf9729524fc2f671d9b419bd09dee0319ca1bde9563c8f93c462af86737f340d9c90af59d0a45c88659d1ad288e9544104c8cc9f695eace4bea82bcbba2c

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw656a609e1282c196.tmp

MD5 f30200b5da1a6f373b04b863d9c7a744
SHA1 a27d5c59d5bced9003e617c61cbced0496ac72f3
SHA256 9eb4759bfca260c6d104e9923686fc534f28ec938f2547acb8ca823dff00be29
SHA512 96b6eaffb8584d9967af6ffd276e744564a5b20d0dcbbb3c287519ffbe1695f4c4dcdd43031632f6a4b9afeff85f5c85ef28283abee6afd40bf0b232d8501cde

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw73d383a1b9a1ef2f.tmp

MD5 10694a0b682f078d33562c182b16c280
SHA1 20474d61e43fbf02ef7e000d04602a79a43372fb
SHA256 e5f68a843859f8618b198369df8eb127a5d6403bfd7ec6af31a44fe2555ef8f5
SHA512 f89107135670caaaf73f7876db5e659699d36f7c2cdac65468ae38e17835c027ef02c43cddc6fbfe95f142ef7e93b9539eec9a0d5ba0c64b383fb48dd347a668

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw780254a1c2e2b93f.tmp

MD5 a3861115a90c5ed5717248042339a8d1
SHA1 fed936be6aab7561e86a9be7637bc8432bd614a4
SHA256 6e30edef1959a2a389885fbb563bffa456afba13105c9c700f3300e9591c0752
SHA512 7fb6a59261574a0e249ca85d4fc972390302ab57952c81f2d4cd714f5e8013414518295795b383f881ff8a6d2608cb75a593a1672c77439973fe8ded716c55ef

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw4d74f51fb7b1d2d7.tmp

MD5 56f3b9311e29cf9d27373c3fbfc499c9
SHA1 53e60b65efec41c6c6777beb2f211f878703846f
SHA256 72b0ed158b86cb39424481141cb903d8cdf6eab77ce161d4b632c763a267eb44
SHA512 c761ff2878e2d16082535381c8e66c1e788a7e81452cd231358457ff5559607bc4e40fdb43511e12d583e0b2eb46dbb8c160451e16126878efa03ea6dcf5aff9

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw43b76dae5d753f56.tmp

MD5 74047eedc155440e5d55b4a8932f82fb
SHA1 a50d46ed4025ebeb44588c2a7c85e62dcd9bb16f
SHA256 b4812c1f202e598d3d26c3f08ef960ffa9e533f658865d1e1765df565b253058
SHA512 a37b6f1b7c5d2ddb03775982466c734d1e759d07f38a693b72f65dd29f6585be221229b92341eec0eca171cfdf81a60ac5197951856e3d9bf69348e7825ef849

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw715f2428265edbe2.tmp

MD5 a593f86141b8a293372fffedacef35ec
SHA1 2f2c7d717a02b41d449975e0a95ebde71b93f1d4
SHA256 2e8f5b2746b08a673b2807423f9a9b0548b42eba499989a45b39661a8b540554
SHA512 a457cf8aabd28875dae9226943627e35e29aecbcad7ab95de2266e0f9970b04801c4cd83834aeda49b298f198fde0219c648712b8d8ee333e9fe17324dd1657e

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw84e5f00828f66b82.tmp

MD5 5d21827de75ec11edbd54e38f153f288
SHA1 b85da53e3f8f5ed450c167381f00c807969444ca
SHA256 e851d3c62177df95503f1615e8a07b9d61ca9250784e2d00e0a325d76563dbc5
SHA512 d75ab0e9043a2fd06f14834cde7578f014fa4266a4ac05804943bd1b2880da37b56c00f4803b90aeeeec692ea40032f55d5ae4d5b9ece9cbaef3d3d0edae9a63

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw18e886b93b6cb3b8.tmp

MD5 6c509d040642b9ac0cbf0962ee2decf7
SHA1 e1e8a6c71d7b9052db63d125ee96435ce3d96b41
SHA256 824d1f80ee694de4df09bcf2bf378b09eb2345831d018cc5a496d1b48224ca8c
SHA512 94eef5d22430aaa5feb9340bc726d521e8fc5b16dcc1a8ee4e193ba9586e792a5fa91194261e500362db37392b575f54ee6b98bfff89cf315b131108f4b8b6b8

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswe525251f33a00a9d.tmp

MD5 ca42e948d7ded0fa9bb10e292d312cec
SHA1 46cc0e2517acab884bd047d050d40e108eb9161c
SHA256 f1254cfd0b520ec6a04c2cf520b24490d5fe22bccbf2f61e974458c7a5a8c86d
SHA512 fe49596d57c2ee46f59b08342526722300bf78ad29c3f973c3ee2316207aec70195ae94967d37a37117d045b6aeec9547d9452f5807b0d7fe0efbc1203ee4d48

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw819c855a6ff5a700.tmp

MD5 489aed2cd8ac4449a361cec0ca9e9001
SHA1 a68a4e90239461e253a9a207b687041ae840222a
SHA256 0c380a955039143db6253a4d28ea9360f845cb1c819618a025a14f466e1703d1
SHA512 4cd9356396c4d2116d689ef24bb01e8b88c18c14474c930576e262554579d23cd219d4fc9f26234103713ee554af182042913653434e2720b91f3b8e49bbf228

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw2a0f4bd9a583e6d4.tmp

MD5 d8998a53d83b81cb90e48cc7b5b0d5d0
SHA1 f6787018c7d6e2c288cd00881d051268d04eda74
SHA256 e7bc48a67da13cb6faaed644165c3ddb1615ef6cf57c29546d4e02c5891358c7
SHA512 8d86e2d61825beecec4bd6b15cca1e590e2fc0970522b2867f0eb5c9f998ee21695056c1e22e48755aa69b8dc9dfd1ba5bdf551cb701d20c99ef4bedaf6df100

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asweda103a16c60d896.tmp

MD5 8c98c613387dc65d4cbd05ce9dc3f914
SHA1 6e638be98cb00cd22529163c192ec89254fc4273
SHA256 f6122f3df68c983fd1be38f18d7cdb39f9a448d66dfe4339ba49bbf6f080586f
SHA512 1927abdaff0ee0f02ebc4a04e7c7cf24ce2feb849a59eda9656b2b4f37d4434904fa7bad1711fd62f9a0e61dd33ed8c5f80f58f392106b0795019dc3699f9f75

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw4229c2b74b40002d.tmp

MD5 2e8647ecb402e8421ba9b322c1032fb6
SHA1 79372dfdd85f64bc6cf333c1aaa8351ccecfe602
SHA256 8dd66b9582eedcf74c56819b4861851cf5ecf19028f227da038a19a29b14f48f
SHA512 aca55c9f279a72a46a53c4173af6dadb08960ab2da0bed02c201448b13fe912c4c8b11d8f9bec9745c70ae835e8d84a89d3e7291eb467062a287985da6bbda1b

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw0b71c866e62a524e.tmp

MD5 358a247b989c2e44c8e800ebb551d97c
SHA1 6752292e14325009221e8d89a1344cd29662d890
SHA256 f38cf58c36eded53f87dcc10ff9ce67b30c5d6d74a14b6ab8c2cf44167df7f72
SHA512 b4b0323e5c9641aea8d5084c01d553d19a8277b34e71adfaf359d219a6579ca63b6f9be8e79abcd4a6e981b66cbda1dda32e8c87b9b41de9b50803d1e3f5464c

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswc73221330e0aa099.tmp

MD5 e7bc12add90a229355e1088247edcb48
SHA1 c5f9f9bca1380c78ca6fac36d4c5f1bfaee8fc3e
SHA256 73c2a27f9d71c688b372a5ff5be74133c5c6086dc3388d39e01d3c51baeb1eaf
SHA512 ddb04db5432a995ca3d708019082f8d6884b6588c742f5201d6272e6ad5e2806eb411ec8de16e94c4bf4148ede0f407e29fd79d7a407df674230a10768dadd01

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw4ac3d871a3c64d5a.tmp

MD5 1c1fa768b9810ba6af5ab90e72c29a76
SHA1 b7830321904da82ba19652dd2d4bf5ed387b3042
SHA256 e2b6cd541e9778cd1ca39634cbd3acf842fd5b0fff0ebc814054bf0c4bcc3e8f
SHA512 780bb6998ed9fda94f42d6dc95458daaa6bb0861c0abd683b610f66c87e5d92a31e9b36840e11650b7c46b52ce4c8b0fc469a52696b42eaab3f1e462408f6b65

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw0caa935a878c156b.tmp

MD5 f8c4dec9b8c019a9fe378ef38dcb4bcb
SHA1 1bee1589a587782ea22a341dec1d4a4730c1e14e
SHA256 662abfac3eb692340fff4596990330f4ecf1c92c7c6737bb639f30915e9dccee
SHA512 96d6674e2aa89e5e81abb05786a3ca75f6d62bc5d6caf772cf95886a6565fe2632885650f06efc550f2e42972927ca0b76f2336732d1f3809b9b55e4f0b092f5

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw3da6a1214b86f29e.tmp

MD5 7272e22fc0292df02d5c54e07285236f
SHA1 671e2978cd80549d12c7f8f79b6352e3532f3461
SHA256 1bc1beaf2c04f48168b4dd82d248e0428be11257a90cf32e46eb4a7843e4f792
SHA512 f26856e47aa7a8d07b7c357c8c94b924edfeb451f74ac13b5e5ccd0615d7da9dbd885cd374ca95560cb3bd43c3fda9e70b1839aea153119feba7f475d3451776

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw6334205df370633a.tmp

MD5 d5e33e5987203893c22384ce3289b26c
SHA1 1b346b602c8039d80e488b5cfe87cac1fd7d2e96
SHA256 9b5806f828fbd85b9ec8d444a84ba18cc0caf520a11eb4d478f8c4a85eb89d13
SHA512 e36799a5308ed54df4ec56385b3dae96a04b3ab688fce71c2309d71179b0a3463be896d743870d822f54d5b45287e32002e47b748f35e3d92f075c6a01cbee86

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw4e51c4ce737ed99c.tmp

MD5 2f6d8417131964551a61999974a63cf3
SHA1 b59a2b3c765d47b3339155c01cb4d6d120885426
SHA256 7dfb9126c9da28f9e74156159e8ab4ae933e6f57f9fe214689cc871c0d7b99c5
SHA512 63752fc432621f062a43c27c83d0ae89c8c55a3ff656517b360d05ffb5c815e011461779caa646d47cd7e79aa8ac118439d3053bec49a7dd58d016e7763fbfa5

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw7de6256508f4d65f.tmp

MD5 37e4bb43ddd52f99b75f88f005b3be6d
SHA1 1a15f7ceaac6cb528aafa94c580ee34829966941
SHA256 489a8caf1ebc836d011c0f5c2ced067f7f197bc71df66d46f25691d7f8361d5f
SHA512 f29bb355a7f56bf2cf9a739e5dca36e9b71e64152cf34f0b3ca9e4ea856cb61220fad8738f09a957afe68be5d3c8d5bd593e98cab1abfa7176f95048f3a4657c

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw1c934650dd87ca0f.tmp

MD5 73e598108e1d2b8e60b23b8b817220c5
SHA1 51e87324d3478faf65b7b71ece0ff7a21b4f2448
SHA256 5c28ad2a9de1508c074d8c7d3ab6d84b141c234af1e75886ac1dce6ac4932667
SHA512 19bd5567dabea5255ae24a0b0dffc3c87fd2c8386dc7b7b5903c04146159f9884d02dbe12a345c80cd2c99383cddffed9f2392ab13780c3eb9769b127e24167d

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw10fabbf37c8f0510.tmp

MD5 f9a52a66004aa231c3729acfbdda62d1
SHA1 55fd15ad8b4b56f1f909e003309ffc12ae9b5016
SHA256 6a093385940dd2443ea4a53a7335b7d9ab2a7594bbe25eed0ef93fb351efb51c
SHA512 53b061c02e7e76b39752abe236ed195d08a4172944399b3daa41788f01257e9d857649507ee6d04710e50963be389fbe2a61989d43bc202cc4a5bef81e093cd3

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw5462d0b744026d2d.tmp

MD5 a96f7872111fc1d51ccefb3a0d0076a9
SHA1 be3331cd78fe0b0256d02d303f1a37a48afee7e7
SHA256 ef19655beb2632fc2cd612f8e3ca0c29a77b4f2938fa7e4d044e684a5a0c822b
SHA512 5797271809ff24615eb3551659a4986e3e1fba4d3084f2e4c0b44f0ec7d51bdf5a5a3fb179cce54d1fc397a54394924b43e9a2d63cddc9a406ab7002257b8290

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw36473d2c1868ad6e.tmp

MD5 6a263a7236034a3f33226a895176590f
SHA1 437d7af16d92511fd0e7e1789ceb9ab63e98449b
SHA256 e9698e083c94adaaabcbc01edd8662ead1f56f8e87f6a2c32ecba1e9829395c8
SHA512 75065fe2056a648eb2c48d73bf03fda79bdee9b7179d0f24bd71c5e452cbd50dea30b6bdebd51cc0ced186cb0855387f853672a9612ac6671b5d571574785d83

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw7b1dca4958ef920c.tmp

MD5 5b0f9670bfe4468f4dedd9661683c16c
SHA1 fc2b44d97ee05dcf03cb5a8ba087299cbe9cc38d
SHA256 55bb9014e43e3ac5d876500bc92e84aed3edbbad7d458d228cbd2b9418aa0607
SHA512 98c99f945dd3913f273ac46e8f7f048015e5f3739534c1ecc805a9b1d518fd4ac2c21549ac1c6c474c7d97633364e61abc01a77038e1b14d2484b0b00a3a7336

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw2fd9b7d8d97de305.tmp

MD5 0a1b95b66d46cd81236714248ec0ebf5
SHA1 99d78135ea47000497ca945d964f42675fc45dbe
SHA256 5fce4ef2d56f0fe8f1ea4b70a9937af99f187fece9bf6ac0743ed7ff9e1e854c
SHA512 4dbda4633ba7ba1b5080645e650a9419ec1e2138812d33c21e795c620480cc69b6ce5505534d6515ef1e891960119509f2c42fb109968d987314039301fc08e8

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw4d848daf593a3510.tmp

MD5 d5f05f8ed90100ca005413d3042da224
SHA1 e3bc0a34635aa57a71fb94fa12f44e41021ee244
SHA256 3bcf5408597949cd53c763d7cf397bd3b9680abd1d9e70435b9e8f223702236d
SHA512 eb4861a9f233f88d56efb954e660907e98a43ea70ac03780ade712061cb08b16e10026de3a8dd83dc4b9d317c758bde749e2633b78e01fe6fc78805f3c1021ad

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswc51205b4a9cebd34.tmp

MD5 0a7e8e5a1136e80d1ec7f3dc475d1013
SHA1 f217006babc8f5a05300f2ac94cd60d02b789bea
SHA256 7a80636761dd3a700d4560f6fdcedeb6188a92e32c98fec279f60db026dae0ca
SHA512 68e2d475a6f1534795d88ed01efe825e17e1b610a63c1a6370c8a19fa6c496403090612b42b89e908c791ca78d32d8bdab333cc0044c580c79b0acc3887873de

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw2e3e89dc43c13f2a.tmp

MD5 f7e958849843a46c538c5cb5065f72d2
SHA1 9f15e434ecc52f4419c702c144828246f0619803
SHA256 12dc3b918016b37c2fc62744bf4b4d23f17f925c0748a6afec01da258a516901
SHA512 8a58a279261abfa47cf1fd9fdc349b7fd2456dbe327830e611e753d73cff77f8cc8fd6dff53043e288a7acf930559e92cb021fc394d6881e098a4a13cf820147

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw25ef7cf16c6180ec.tmp

MD5 436558098d652a69a5b3f6f5b7157d71
SHA1 6205936979fffcdd9b2c3a6a93c74e70281772f9
SHA256 d45c1657636c0f957e39c012588d71400157815e214895eeec75d8d3e8dac6e1
SHA512 cf2120ef0c0a5fcc2ad19cbbb4ca4096e40e7cf65de297b5938aa6ace58b0f2b4fa3d7eea7d5bdb272830353d3cce0366b5daedb3f9bd8258d1fc095d2fb6137

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswb806b4e8bbc02e9c.tmp

MD5 ff89b72bef80bfba5606e059f8878efc
SHA1 196a1dbda00e4937131f4d79c44a762446a41234
SHA256 c22a852bf5079e22bc7c23a5538550163ec424cbafdb25b1ca2ed32f5b9daf7a
SHA512 c2bfc3a420d3506edacc3a86d2846052a68713750b0fb72aae0ac79345cb11317c62ad19ae5c0dad8f6ea41b7ece2f6fa98143d4f68a8a555e3de7937cc537e4

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw6ae7d6e34c52084b.tmp

MD5 a16669e5ba7e6e075f5055a1999085af
SHA1 f22d954109168b743ba001470247f9da8bf8df01
SHA256 4a9ff5b9da75d9b178b8272d90b32e59a74fe4795b8da5648e6fdb7c3ccaa951
SHA512 f0572cb64806b536a40144db7cc091521f93a9f152c520d577812268c2b314fc56211d296a94b876dbd4013df392a4e2a8bd8afba151242ede1dd2c4414aab22

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw8a05cbb716305bc5.tmp

MD5 2b83ccb7e7e6dd56573c1d3fdbf5de6c
SHA1 6211eb08f0da5f0471cbf5aa71682ba7b77d83ff
SHA256 e1cfadf6bbd443c46d3f9b991a5c663d710906ab7dc95c27e6bfcf393d365c0d
SHA512 65410b229c97087e8b8b251c042296292543bca311252da599154d72cc47bbfc3d0a443a7048b9c86afcda04826f62a72c550bcdfae1c834bc71c3a793afd996

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswef53ef974563ece5.tmp

MD5 798226978d8c243e086fbb4827c9bc4c
SHA1 bd6af42499bbe631ce1d78bbcea9e5d3001a8efd
SHA256 67f5e43f0b5a808bab173692af4a47c24e24c8b1899234f3801a56d8b114bb64
SHA512 87f52e7657a34549a8cba4fce231bc76a89d0ab793172bbdeb63f163d32bb3a7d29c30474eb1ea935b492216093a1cb832d77bf97ffe72f7835fe0a596b5bbee

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw14f4c209aaef70b5.tmp

MD5 dd771017a31b4b6b88cba564b6b4c86e
SHA1 63f12d6e8d2fad5bd8e3b210cc20cc5fce8da930
SHA256 bd6a50e8b30dccf4575c91596b2b85875b236fd2b1b8fd1de5fc714f0b673804
SHA512 6958f2aca7a95f28f181febd9b09ae60e6c4f336d30155433cc506fd1147dbc43125bafc39e7f4cc06c68f90566fc957c92a3ed540d4ca830a8e11e7df2c5969

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw22346042be0c53bd.tmp

MD5 44a12c3ed713d049033f31d5056d65be
SHA1 e2f2c1c5fe78fc7dae74eb0de9c6da6ec64f61f3
SHA256 f448dc7a7bf6bd5e1aba7053d6758f6375c5ecb6742eb6aeb45a03f2d90bdfc3
SHA512 9afde791e57dbeb2f2be88c618b3d4bdc62b35a8fcba0c67ba483271247369dc9c76daa6908cab080828c3ca39f0b4f9b9d055d8ae2905c14a372ef334b598af

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswa6b8074c9c089697.tmp

MD5 c34fbc56005ed095a8600ee8cef02aee
SHA1 b8e0ce9596dbf9787b1868ebb95384aaa8ea0f39
SHA256 e77fc23af69bba23099727ed0a98a18771ea0f4d189b5175ef00ac8d4ce63aec
SHA512 fec58d257982671664c4bb8fcb9a4f5dca18d9c8451fd70a1446b07366c2bd82f9e597aa5d8a8f8b8dada2ea9af7440b0c547bd2fcfd5a78c63521779b32cedc

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw954e5c7dad70c578.tmp

MD5 93b5fc80ced4a12c667db738fcda95a2
SHA1 dacb1a64b1955dac5e9c5633dd0b5591c7287d64
SHA256 571a00722c8ddd0611c6bdedd1f9ac1165e61e6e86ae1fd8325e1c7634b724cf
SHA512 982042c76d6f36b6057b0c3a41f6e2308eece77b2d8b95aa3cd2ca9be6e0afb843cdbc936aec2b268743787a18eeace73f61d366325e87a312d53518551e72b0

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw2a9e80914d3934f0.tmp

MD5 5af680c041960846e8e6ca17a03f1b16
SHA1 0bca0a96b76a7f3c698cf5ee6a789c097b862fe5
SHA256 4b5407b64deff169faa48b17ae4d673a5dc2ae666a9f83851fee198e7e86eea8
SHA512 8b497773dd81e6e3d3e0bc172a6259cb01a3610fb431eaff8174197c8b54df389fcb26c67068838adf15558eee57d4cd639ee4938b9fbf4f4183de3362573582

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswa9107fddacbdf863.tmp

MD5 c0c172a8c47d33ecd8af4ad979efccac
SHA1 a62e4783e52d96a587aac0a4d8493aeb990e976a
SHA256 0d1b139a8bec241f83c9ea1e3233cc0def1f108b22122f5c3a805de4f69673db
SHA512 be9dc556f705e6efad3d513c25b9cc5e5c60da7004755024a0e8df8078cadde54ac0e52a691507f18f98d12f847c41e36e56b52ddd569cfcb02a3439478d6ace

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw81e375ac402fc1f5.tmp

MD5 a295779a5cd3365eb22a912ecfd2ce41
SHA1 1cf60a8c33f0d1e4509f8efc87ffd5ad0416709b
SHA256 41e51a50f6065e36a707ffbfd314959c304ae36136183d7ef1b5f098e4e02650
SHA512 0aab9d4bfa84da9c485c6cb513b6a61c67bfdaa8c1249e1b3d4f6cbbfb7c9d57d8e0cfc3907a4b39b4c0ad54397ef37afbc437eabb8fd05dd96f6659a2d90df8

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw9c195ae90c5e560b.tmp

MD5 d95f0322ff24da84583c4f13a5c21572
SHA1 dd6cdc4a5b6e3e95d5e7a46d6ed6ef7da4d5deb2
SHA256 e841b83eb3393068909cfd25e018e9a667a1236b7ad89c6caafa7646a8f154f6
SHA512 42ba9bab5c12c6641cf8df2f83ab51125336c535248589059e4d666e31ff0f7b5c26a56208a2af6399ef0858089ab7a54d237260c50647ad8114234c3a2d09be

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw4e0ae6049c82d0a5.tmp

MD5 189090763befc7f6cf837a7e16a6de5b
SHA1 c8cc9a1bf81973cb6dee44822c03c9c70e1248f7
SHA256 ee506da71875790bac2eab5d635ddafb844066cc0e8af05e876b9f05851e20d8
SHA512 e67efb980b7f964d15e085a427789d0c3076abbee3ec9c960cb42408e147abadfb958e85991e0b42a9283c32badea808f91139b5086799f62cc4cb0b7985b217

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw503e05fffc45a59b.tmp

MD5 91ce39a264c74f8638112282be9664ab
SHA1 9bddd0eb43fd64ea04ae383e4232819cc537514f
SHA256 4fe75e1f04a9cff36d45b3f8879e65d5aefbac61e20534936ad72c5c7d94392c
SHA512 c1b9084b91da6be8be560620af801f89e6000fcf8c72206a8838eeddd78bfe3c33aaf111076aa26371daaf1ed5f750d7b505ea9554f1345cbc0ab8316dbed9d1

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw0e86bb74ccab8dd5.tmp

MD5 d29c556f360f402de3ef6239230ff260
SHA1 0e74988f8768dee518e08bf3066b6a895c6758d2
SHA256 52e1c034bab995495e9f2da73a280af9425ab7539a0dbe7641c476bd87bcd2a9
SHA512 b1c26634b0283360d3be12cec8d2faf88f3dc67a2f3cb4a9743be9e4cf5c3ecc6d22a16f018bd1ca2d7c32c3a96323bd9bf26bd37b9b921117528a20a3a1bd5a

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw112275debb9e7629.tmp

MD5 79c91eb68eade22cfa38da3597a18274
SHA1 aed02091106a86a1f33135fe770867890e799f64
SHA256 eb44318e93fd3c598aca300bdc37741c5893765e0e7ed307e7d10681f24efe6b
SHA512 f843efe6da4096e422669efa3270645ccc859eb3fe29afbeb3d5e816dbe8c659a6b42e850ec8c22467b88902d3ba82888a0cde21d689d5908d6e18c3e813bba5

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswcc5abd661ee9cfb0.tmp

MD5 a3b4b5563b0714a5f86b6558ee703d9f
SHA1 d21280d0c8b593257a7ca10f41c73e49f7424b5a
SHA256 4a2c37cbecf92e6bf0ff463759fb5034391091edd58508a44616883ea524d50b
SHA512 3aec734a34f580beec9b33cfa5b94bf979aa73abeaedadf8d03e82ce98dfa7cb0b4fb987df15e1707c9b14b458233ab28f471d3c786253937af7b0484580794c

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw65d0303b9c2cb30f.tmp

MD5 11a32a45e1ee75d588cfb51bd15cefea
SHA1 4d38f50f8ece6c8b54713adb4f5b5acd56ab9aeb
SHA256 b5564b1088c3fdad42ecd4bdf25c196a534cdbf62cc24872bfba2f103b2e6d94
SHA512 2c81c1716bf5f5c714cbd829388722db8da99cf264e18db1a8b226ac2551e28ea705c9f84b47b426f6b1c1e6ec4364fb999ab53cd7894ba1edcfb2627d5ee195

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw2fe24feb4c5d280b.tmp

MD5 895c9d1e4dae2a6b3779efaa17263761
SHA1 ac01f1a1b31173e0383a4c80313b029fbfd2b9dd
SHA256 a8b194ca0858cce3164b50a75ef5c2f80693759c1143a7b9027b58daf9c88db5
SHA512 b67e95234db7a14c6dd2b6cb07363f841aace87601b9162e5d33afd7436b63d78bc19ed870e5bf2cf577081dec5519d7530841d6f1692005801e88142c3faac4

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw307f4dafa2910d54.tmp

MD5 6f490d0ea146ce05bfd242cb49387841
SHA1 bd5c57e9bf4a207c2bb154053ce5684ed6d7853f
SHA256 0c8c8901b89797629f0cc448a4b6484c0fce62d16594dd23a5e07c1ccf050042
SHA512 dfcb93c7a708ad9e119c609cceb58c1249bf31642d6ccb814358433258b61386aebf3a9404093c609a01c69ea11ed2d675dbca2036446adac92df89e35d7227c

C:\Program Files\Avast Software\Avast\asw68f11b1a311b3661.tmp

MD5 652a0ec5b9d98955bffbcba3ee8eb3a4
SHA1 2d7c8d85b0059df2b429e40f03da604c72761c22
SHA256 13f67a42aaafb7c1f6dadf60387b2769c8344299607b074870dbd6837ef7b2ed
SHA512 1a8968de3874006c0dd56e417ee381191bd275eedfbb83d665ab84997824a532ab44f8e32880ab740a7e15034b8ea53da4312729adfc2c213b795be594558e8b

C:\Program Files\Avast Software\Avast\swiftshader\aswb813b11737dce0e4.tmp

MD5 03a8ea9bf9c31b857a624f9146a7930d
SHA1 8fcf1f684fdf4972b70233226f35afe69b85edcd
SHA256 1314764230517ad40e490d46559c7f8f0fff3b1022ea26c63e9101e07d83e8d1
SHA512 94b7807b05ff032ed6a667d11dee94f00cf4b22caf3880beaac8853c1da415f99511701dd56759199b6c24b6106eb55c20fba7ff7b720038333563cc7516a195

C:\Program Files\Avast Software\Avast\swiftshader\aswcec2d770295d3098.tmp

MD5 eaa579b507c1533e7f40c1cd3e6c33b7
SHA1 b246b74ad28763f6bac82ac79d2e67acda40ded4
SHA256 24415da579ac1244643de6350e5f30bdd6559ab679aaaa88617e23edb708a58f
SHA512 8bfef97c27e18082cf7dd3e0370b06c070c14cd66bed871ad9d88e91b447c715d7ecde37be0ad8374c14d34457566c1f73d7b41e8c9540149091246a07a139a3

C:\Program Files\Avast Software\Avast\aswe3e8208614b1de58.tmp

MD5 4bfac8501c72cdd860ea754d1d580cc8
SHA1 1afb2418f3f31e924519eab2b172ceb41dbe15c2
SHA256 67062dee20934c4d297aaf1dd96d97a7bee8bca5c9e3cf3c6a18cae60e6ab191
SHA512 d622736ee5ebe22dd48ccd81916a400f4ed519bdddab1fa9b466e5b7012cb15601a63cb0ba5bd897ccf33aaba917e7338a0cb4339000e5f002d266396fd22511

C:\Program Files\Avast Software\Avast\locales\aswa7fb220790cfc990.tmp

MD5 56c3b32e97f3c52cebe29937806a5325
SHA1 25f4295535a90c26fb9bc476bc915d5805803db7
SHA256 70070d44c9e5ec62c57b574837423f849ed363c0167e8019afd49a93c74c7e3a
SHA512 207bf51c44900e25d7d2d5a128e11b11f972490221d7c3f8a28b77d0921860f059dc92ab96f687da4a7fa6defc87a1896b1fdbbff31a9bf45dd2864cb78c1cbf

C:\Program Files\Avast Software\Avast\locales\aswb6e3194b7bd92b32.tmp

MD5 c31f5ba58a8a0b114e1061c7c2a8f43e
SHA1 beeb19c5164c2ca5bd63a60c0499262ce8467d75
SHA256 66468ec740624dc5ca9988e2aea145bbe915333db3327653f130ec4a426baf17
SHA512 784f0426e303639e7174bea1ffe83973bfaaf18c7d61544cd4ee92e417442b085f6a5065593d608326ec8bb7374efe1c44c5c6d15811ef2449baa5597b502cbb

C:\Program Files\Avast Software\Avast\locales\aswce195d50bc1465db.tmp

MD5 49aaf394d0376e4bf0639fd928f0008b
SHA1 ecfb3e22c86323f5571c502f020ddda2d2c680e3
SHA256 23752a372251b782f35f6fca4a17dc260159eca4620ddb610f5ff7720d496a18
SHA512 e414936a5b36926f9bb4f01c7271c38d6d868c1c0341585b5c73e848928d0a03b5849ae088f964df1d77478a739edd938680b98bf75f10f0a23944843eb2607c

C:\Program Files\Avast Software\Avast\locales\aswdf395f926ca82c11.tmp

MD5 d32db9a61c2f11de5df3fe64153a48ec
SHA1 9d9c5731e0c17600ba62ff1bb9a833602e4eeacf
SHA256 f25ff7a18aebd6ecaf56c2b125aaa22a1699fe2ee9cc6f190f6525d824992f11
SHA512 43c939ab2fa18bf7009ed3594de3bcfe0455797aaa2747841957678f31410a4b368c5f5fec684d9ee1487bb40bfd8395edabb97312d97be317653df9cfb58a61

C:\Program Files\Avast Software\Avast\locales\aswc3db8adbb5681529.tmp

MD5 0b8590d79fddc502679b69005576584a
SHA1 37c6907483849773784652835ff5184ad88107ae
SHA256 a06797086a3ae1bd42bd93fdfb239a787d521cbabdda56a0c15aa255def81e5c
SHA512 c9f9ae0c139b9866e568246701473d01fd8d190024411c63859574c004befc59b8e2477a3ab9ab48b92f425744ee5e523d0f05625605dbce95d3449acb201ea0

C:\Program Files\Avast Software\Avast\locales\aswd49eff7bcc0f7334.tmp

MD5 facf3ab50cf9fd9a08f951a3cf3d42b1
SHA1 44f9874dc0bf80907ba5f1189350ef741f168cbb
SHA256 3e19980886a66ca92ea762b86ab44fac8e71fb16fbf4dd13864840923c9bfd19
SHA512 1a32a1f82d92f2db9556a50b05329415d995a3038fad7e21e82526b976e75bf171367eefad6dfab2ebf388862c5f0154de2c7772f6ac617577e61ea1a99bc7f6

C:\Program Files\Avast Software\Avast\locales\aswc86cb96b28a6fd48.tmp

MD5 35b454a9361898f148f056d02e1adbd9
SHA1 c3b0dc8dffda8ceecd0f43d3b6845e5c2e031284
SHA256 7f047181c386fceb204184cf02d1ad1859e5293db04122c5c6585ce7bda8da0f
SHA512 11d18f6d5ad0cb7ce3b9a4cf7aecd5ffd2fd8a72a65ce48afe034f7b11269cbc109f1fdb9448021218b31cfd64f52c53875cb3f0cee5ce2243938f449ccd7201

C:\Program Files\Avast Software\Avast\locales\asw568985bd439b2c26.tmp

MD5 8c427fc5a5eda451f60c0e4e6a2c6034
SHA1 752eab30cfb87e90ce5cd887786e115f15a8a178
SHA256 178590c5a7fcf0d41d93724de8aa04f4bad7b9cec119a54a4115f96f9219ef3c
SHA512 e09599a47f5f5a2295fc13cf0ad0aa45006852eec5956092677b212a5cdb6a787349a12f78c2af0529329b51a87fe0cd614e8b452b2a049af7ba51b893f1c7ae

C:\Program Files\Avast Software\Avast\locales\asw29831b5828ae55c3.tmp

MD5 335c90be59afb384203afbe08a9d5d48
SHA1 30e945993e943e1e6840b8020bd78a845dc3b745
SHA256 eca3cbaceb77840c7d861b559ee3ceadafa9f7777856112c9bd30b5a8d517b9b
SHA512 5bbfc5404f330b047365b2fb73403f5598c696eee0659fe987c0fbacab5a949f38ce5b288bb32702cfb57e15502426a3efc373932da2d01e68bf031f57251af2

C:\Program Files\Avast Software\Avast\locales\asw8358210f70a312f6.tmp

MD5 d13a44314bcd033fc50fc608ad1ab91e
SHA1 7abb6cee31c4873b717910fa9c0669130343ec5e
SHA256 6615bd59f0759e6af09309b8344c0e7f0c2dc2bec55beaa0afd1bbe09af7596d
SHA512 5efaf765533e2bbf3095a05c55b3a144c32cec14812d743a5b7de47b7ebc7429088b7b94bbd498568189ee0c4cf1056f2766ff341d46303e23410cc84574c798

C:\Program Files\Avast Software\Avast\locales\asw5c0872215ce3e88a.tmp

MD5 dbb839665d4d78d71c9d49b85a0ec0bc
SHA1 1b8662843a1acc58ef120d62ffcd19c764f8613d
SHA256 80ab358cfdafe9533005571d832377a08e5df4801a6f61be7aeb2afe626691b9
SHA512 86f7e656d140e03f68b0d7ad8c7d9168029e3fa1c8d75cddb2101dbbcebd772dfdab1da3c568effc41c1bb6b3ed0a588f4be50ff307ae14be356ccd101025950

C:\Program Files\Avast Software\Avast\locales\aswbfc399540599add5.tmp

MD5 0ac44c1ad8985cda2e3ef0bc2082fef9
SHA1 66f721bac3f1ff5be9fb7b926b87341d303a60b2
SHA256 ae4a8e4e3706626f7ba53cb395e2472389bdc1319fbbaaca608ee1ae3c918e0a
SHA512 5ca7d91b3ac747241acd8b76176b19a62cb44c62d991e2db6631097df9276c277d19d3ca6713e382ee69f61550b5d40daa03da838d80f04727a03a97a0b28da7

C:\Program Files\Avast Software\Avast\locales\aswa01fd3a07fb88826.tmp

MD5 dcbcbf5867918c54c5f8f267664056aa
SHA1 f3b706adb3c222a84cdc92bf97ce26f8aa0042f2
SHA256 fb9da2895730be8d82924d01d5e0dc28c454d8b91a1aab556d255462c374bf16
SHA512 429896d3e774eeb6f447f9f80f1c148685df728b343899e12e58bd4d58caa70d3b38e264037a720a2074e909e3e3722c8393a21b4f4ced2157da554bdfe40f37

C:\Program Files\Avast Software\Avast\locales\asw9bf1c8338525f387.tmp

MD5 de48484707e8770f47d27f0f5e2358e6
SHA1 014295dc0215191606e40b2fd757a5a637164571
SHA256 5fe258168978f52d2b3c6f063c7a7c381a70ac06e128ababe6656375025fc088
SHA512 653da7faf9f75477c084267e30a288f52fd1260b77f7d1552981034b033d796b7ef18a6f77214179521213375f4b43a7daf69e4977e487cda90c9d7e96e82e52

C:\Program Files\Avast Software\Avast\locales\asw7fbd5c38fc7aa00d.tmp

MD5 4fbebc23d7a0aaa6dcd426777898bfe6
SHA1 959ce4fa97c24143c3dc28e9420e6d6c76a7266e
SHA256 3cda10980a23de97163a2c06b31829cca1ec3da63b0bb0a246126f402c19b16a
SHA512 a1c4052a40059dd5a417d87935c9700c3cd127b63ab9191ca62e448b09109762906638c5d80abc0565711425f52c5ec3fffeed87aae70c0888199c45a4374880

C:\Program Files\Avast Software\Avast\locales\asw09800795d4086b92.tmp

MD5 3a4f9d62b91bc0eeab11f0865d4be286
SHA1 c56a98f46b9f0ef8c5180d176cfb7773a05ce941
SHA256 3051442a3e905dfdfb8f17f49d12a3722c511faf9aba0fc86d577dac90e3b654
SHA512 39a81774c90476e4e8ab80b0784a8923c698040f51cd6acd08a50b5d2f90a7a22242296ca5793ce39ccc93120df3f40eb2abaf6317ffed8aebb986ff28946081

C:\Program Files\Avast Software\Avast\locales\asw848ee7cda89c1236.tmp

MD5 419e3f381b0e0f080ec230a9f1b80e66
SHA1 c279ff058f3f3ef086715ea2206f24cf7aa75818
SHA256 a5fdcd13f711d4665d1960f512f1bd229dbbacb24c86bbb3773a905e2dd24b33
SHA512 d7896ce61b64ae92f5af2774f3a996516d24e89d7cc6f84429cbf3f70aa3d87404fca8c6d242b5a088bdc1a7a73e229628ca7dbec81d6976734632cb5291e9b7

C:\Program Files\Avast Software\Avast\locales\asw69b9b421b8538d77.tmp

MD5 cdac79ea10a58cf43ec1e5452c5faef5
SHA1 35bee3062c54f83cebd26c50718081186023c0b8
SHA256 ad97f1708909ba1c2d6119de7536448805f00275273a8b33e743dbf2e7ab2456
SHA512 d9b907c229742808561e87fae306b8e65948ed60b21e90981de1761f162cefdfb95705edf375bf686cec15f7766ada2969fd7428f5ac4334ee83d7d1fa8b4947

C:\Program Files\Avast Software\Avast\locales\aswa70f80d68db791a6.tmp

MD5 a5d5cfe69299d29812c9dc473c9ceb72
SHA1 768d505ea7678aa2d7f7aba46822de231f1a94fa
SHA256 26457724f3431e3383ac833cbd990834dda8e5e76b961ff931d171aca4221626
SHA512 c8a8e30e67e003720c2fd20150140370e9e8498e2c385bf7e6cce8406b7abafc20fa249f7c3ec92deb5d86145d59717d17d758350bb732f8196129ca82b1e110

C:\Program Files\Avast Software\Avast\locales\aswcd046926ebdb7216.tmp

MD5 9aab1dc6721afb63ada134d9d1bc2dc0
SHA1 f0e309e0570e1595709cffc570a799e013a2431f
SHA256 27baebb27c345e367f27b2ea8eb5895c2dadadea282a0fa94a1b2057859736a5
SHA512 9e04ad79a36fe4142544b6d360c0a5227cd7c48e2b0b091085e8d3a011504522da4584460e5234d705d1a9e1fdf695902102e005a30ed2cb2e021b19cd58a708

C:\Program Files\Avast Software\Avast\locales\aswf8256e2852845dc0.tmp

MD5 5434e2c549029aa898a97f78a65ab13f
SHA1 0361686f5d38363fdc5f67aa5980b6729fedd4a1
SHA256 990b6559fb32e86df8045cdf8687fe7176fb810c18b2032fbb1a093d9b2c901a
SHA512 d05d6e89e0f313622692b2173f715c4c84f80a7fae2ca9bc8b1ecdb02b090e5189d40f5777b647e97344ac65a84c284209256a7e1fb45016d170fde0eb7270c9

C:\Program Files\Avast Software\Avast\locales\asw60cb13f471be6f5f.tmp

MD5 a9f1ffb1e215b45afffe7e454dcc082a
SHA1 bcc32731f6fd700496d4445545366cbaa2565220
SHA256 a9cff7d778289b25bca696ff4873e45f098be21f8f4fa3105ae7e2b9b1ef95da
SHA512 c8e692b0ade3dae78b1bcb7d8e3c821fe4d5fe0759180f6f44e603ecda341a8a925cae5986584e98829007bc56a4744ef0082d1feab42781261a6ff7b7b65676

C:\Program Files\Avast Software\Avast\locales\asw2d5491ba9d694412.tmp

MD5 96406518a17835d2c08ea09f6a4f5269
SHA1 63f2b8ac41adabfc0f58bde2ea02af3ea830cee4
SHA256 336b6bfe35680a19b02d583f332df5d0f5dc6fa5729c2910fb1aa6659e6aaab6
SHA512 342a9d97fa6747b52e462e302cc865e8ee6018aa65ac3d517d4625cd31cef68412e4df9d28ac10e39ed73801342455635ab99a6e167bf7527ac7acd62bab733b

C:\Program Files\Avast Software\Avast\locales\aswfc7f9db33cc75ba9.tmp

MD5 d324469bd2d6e373ab875328c95322ee
SHA1 8c4d3d7e0bb3df9d4028a49b64182d016b47443f
SHA256 549b190c3722d4774cc7a8a2730f858dba66f063840469799adb449184056f9b
SHA512 10a2e751d95422fbc24f5618edac8589d033f19106ee500c83830fb839d639d30f25f2b49ee017767325dfdf833a6e1f9eaaf0c1081c1d339233dfeda9876ae8

C:\Program Files\Avast Software\Avast\locales\aswbbca1157e768316a.tmp

MD5 3a998b7d9c41dac3b2896685116ab994
SHA1 8c7a3272e79fa27017c24905f2b598499a62623b
SHA256 5eaca86a3792d40db18e7d1ce39683471bed1e8b169d716101808930728e1ea0
SHA512 e1e7e49d4f47c6338e9530b0089c1b78f96fd8e088d7ef2edb013c8a503b86f803ec074dcb8ec3998ca981a5373fc37936c102c9d8c971abc66c6233c6758eb0

C:\Program Files\Avast Software\Avast\locales\asw0acbd8ea53c2846b.tmp

MD5 017796cec4dcae8064f6303f2e3174ac
SHA1 1709c22b0a24a74b690deb61dace383484c08bc4
SHA256 8b8407ca872711857c1efe032f0c71df17fbe8d82107a09953e812a20497e582
SHA512 e469f0a63bc649126e0a191dd17c1f5db6e1bbde4b4cec63fe4dfe7c821ff5f1919980ba5bd4962095c0f8c4698ac659693b6ecf1a5feb2832936bc3c47a3af5

C:\Program Files\Avast Software\Avast\locales\asw92a57dc18298197c.tmp

MD5 ab258570cfdde79a3595b9deeb6cff01
SHA1 4563fc47d20d0a2ad81e7bd9298a5aecd11ddcda
SHA256 5fef05d02e5c971e8d3f6b5584720ebeed7c7e6e5214320f09ca6f7d84ffa993
SHA512 8a7ef6aff2682a96511e2130de62989e5e3a9ae35b8db66173f7ee0102b1e5f5e0ee7ce2a6f06588ba6e4c577c6d5d5767d0a23f1fa1bce3c2d4b08f7bcc90cd

C:\Program Files\Avast Software\Avast\locales\asw1b29ca1176c674f2.tmp

MD5 556874df87f3e62bc9f2baa6353c5d73
SHA1 6e79085ed28fc54399bf7b91a09e69aec0e21e2d
SHA256 60e0f7533dd163da804ac5445f2a80fbda26bc58ce26d8d2de7e2bfd4e5d039c
SHA512 884045476c84c3c18cf41c7a0f4ef98c9df5333284a8d9f27757fa5c19a8c8f07a821b613f7d0fcdfd594fc23fc78ed5d133e2e1e5c965794376e69903f20f8b

C:\Program Files\Avast Software\Avast\locales\asw587fcfddd2722433.tmp

MD5 ae54cf32c7e5bc9b75615225c5faffea
SHA1 25c6ecee303925f6a273a8d0818a79ff80a74298
SHA256 12949111bf85a2236f071a294a508d99c90587a97b9ba7f61dc8d70e36f5761b
SHA512 eb12669cef9fe09d8f53094aa5df2ac71c8ea334be474a2dacb5f2e8ab56bb56bbb188aac10509873fb7dd3ebb6278d69a050a700cef6388a5caa22736813932

C:\Program Files\Avast Software\Avast\locales\asw978fb5157d31c870.tmp

MD5 5ab62a807b85bf1b75c741abba0e9f98
SHA1 641b2360699dfc465a86c0e10b51b4739bc3c770
SHA256 b967887c6313fca79a82168645c1febe43c949f01e0eff3bb8413a04b590e16e
SHA512 d53895053eb4aa230bf9285e1cf0fd46704a9658065f35a265496610c951d09c2436071f421217d3dbe54423624d216d357471763bbec069d3d0d938557fa291

C:\Program Files\Avast Software\Avast\locales\asw25d644f5c952036e.tmp

MD5 e7506ea783c56cf5432618080371868d
SHA1 91f7c1c26a7eada6af72089252c2a0153066fc03
SHA256 2418a772d39e45fbea52182965a901364ddcd5459a920c8dcb56c2844954e536
SHA512 4b4d90e2fcc913c061da046b4ad7256c1dba78959d08dee67a471690177dcc8561650e3e0397446fbcb4b9bec89a345b4f2911bbba6a88444ee9b135fecb49b2

C:\Program Files\Avast Software\Avast\locales\asweda4bb795b571097.tmp

MD5 ea6c8dd5fb4007b5b5a692b857693d46
SHA1 e142738f399bf5aa7c19d478a7def3d270e61851
SHA256 7652d063f1630e33228809834f71e6e2ffec75c472ec66b6ed767bd98886f928
SHA512 a77fec4ea0fcea2de4863eed319abe2f4143b5fd345aa951c94068f862bceccfe16575271bd423bf09b7116c6bbf7faf4daa59bfd0025797ae9202a311637e1f

C:\Program Files\Avast Software\Avast\locales\aswda39a7b8e19b6c09.tmp

MD5 349ca76d987c9e2c7fb00966aa034357
SHA1 3bba7ea00e4f4d9768dd2311ec1ac59cc8239652
SHA256 79fa0f068f09ed239a8e0c3f1da0b35fa1f86622f9fa47721e13656696184e88
SHA512 330488349b8a7d9503df180611d97c4d449788284304f4bd231ec97c77d5c2221adecbf6a9486d2a8bee37b6e2c72ad22cea3937e95c1c3178c9dc6c522a52d8

C:\Program Files\Avast Software\Avast\locales\aswa747a772d6748eb7.tmp

MD5 39df7277c2854d60b4b61bc11add4188
SHA1 865db185756772df35af31dcdf78dab7fb9f8549
SHA256 1ffb04ba6986f4a25f5191da50939cfe48d1581388148b7f64d3c10a124439d8
SHA512 de627a69981b4a4604a587a610b59a022f6fc4715cbad7be59cb444db7b42e0337cbbc42e9c0a5fea84bff066be3273a8eb251c578e5457a9ddf19f90a8c71e0

C:\Program Files\Avast Software\Avast\locales\asw099d3202f2635b31.tmp

MD5 2dc3f1409e7f6a3fdb3aa55c1bceafcf
SHA1 76fdde6ee054a19f7c76046bd41390004bc6ac41
SHA256 fab8b112187fcf9ba5102ff0aac2f5eec63a646c8bf808fc5a2e4e08b9c62a83
SHA512 5ee1981ac59456a623297de3257219b69bc053aea71fa4ae1486bb6f0689f7adb5e78daa17d8d338755eadb7164b7d7f50bd6bbc004c80d00ec4fe56603750c0

C:\Program Files\Avast Software\Avast\locales\asw497764418afabc0f.tmp

MD5 59d49ab548b74d85bae165b8cc15b073
SHA1 d1946469ab92270bc99b7ed863ac723cf676f050
SHA256 fa171dcc44baf46cd4331d0a833172185ff6a166a31ab4f9890eb0832e15cbf2
SHA512 40b9018eac2f55828f3ce3b50e6428ed545f8453c51b193614137c035ab9853f63ae9c82c2ed1d6f9a4aee265238478bb46f468b08442d6cd4d0d49c9e1576bf

C:\Program Files\Avast Software\Avast\locales\aswa69f2c6aae2456b5.tmp

MD5 78c7adf045b3d8a05c6f6519154cdef0
SHA1 694fd63b612fba0267e1deab41b8a87ee0649dc6
SHA256 05a98b8dc3b6d5e3a224e17c144d873c3b84c6e704fd2b8dd659e2099789f9a3
SHA512 cea96bd1621550c6108695d51a317bad4054bac9b564e45f2b0a16cea328be15475cf2ec033c33106a184215fe7180fdbbbfab709b782f43919f68b976d8cb99

C:\Program Files\Avast Software\Avast\locales\asw3add9eb5b109c1cd.tmp

MD5 d045af9a8b85c6ac73f60e9fdc16590e
SHA1 874293f1b5d1b6e2641d9dbea59b4e1b8f377752
SHA256 241f3e5286b25864081f50edb93c4693bf001f04d7c7b98f5c4921f768cd7e94
SHA512 b8f9f59f6519c5839d4da668a16062100be75317c4275bbb50e1afc4b6b66ecab7268054682bfdd63c5a71dae8ae00e80eff3eaab161c2e35a3651988ad38413

C:\Program Files\Avast Software\Avast\locales\aswa70b5cd135fc9ca9.tmp

MD5 44c080e276c1c44cde4dee4c576a4358
SHA1 217c766a2ed03b9a9f2f4d1e2c148f10d836cca3
SHA256 85862323a3128490a2c1be66a36480f7eb73a2294d62ef4ff38ae868c034db4f
SHA512 333acd81c4b1fb5f24f0b0b2f5192175586fdd455895bdfd7092425cd877a844aebe3e74aa37060c849c5821fc5174a2471d7db95a6e7098e43e177db70ef92d

C:\Program Files\Avast Software\Avast\locales\asw76bbdcd263e2019d.tmp

MD5 4861cfbe34644b1aa3a62e0b8a955b28
SHA1 66497635946e50bb17483db226d9d9fa0e80db7c
SHA256 ef0a523bcfa4d3a1b7472947a1f2a0a68e24c628386f7f0056ca4404d82481f1
SHA512 162069b7b670d7bf68ba8276d2ce0b042a4cb0f19f2f66edbc8af00dbd97e084ea9a755b817a82d77e83e63d97e79d7e50eabaf67c880b4aa85b3b6af0cce20d

C:\Program Files\Avast Software\Avast\locales\asw9edc860e43946d85.tmp

MD5 0a70bdd8c0efc740818bdb82993bab85
SHA1 d84b6092664894f42e1afe042abc946a3e0d2e65
SHA256 21fa942a5f4f26996396f0d84807b6f8c01afd5809e2da33487bbecd0a6d13ef
SHA512 085c21045f8fea63a80678069af61e4273420bb6645a833319d58248e61adeee3cfca23edcb7adfc2dd59621184035e3f9e252db8d5840e6f6727e0e05b5fd63

C:\Program Files\Avast Software\Avast\locales\aswf9a85ca10fa4e714.tmp

MD5 314c49194e366808b2b36253fdbd7714
SHA1 e9e8ba1fcfe91b80e232899c69844282d39d0d23
SHA256 411a729d9288a62780c32d6bf5f4cf0fd8d221ff341ce79c2eca25dfa03c9821
SHA512 5c24bcfb043ec09f31e5c8e640d1bed4932f9560d68256d4409d5d51a8948af3381e2bbf164515a2e35cd7e6ab5349d9fcfb4916bd8d11453da9d69e7cd8f5de

C:\Program Files\Avast Software\Avast\locales\asw41f1f2a6f25728e5.tmp

MD5 c6009c7b038068b61aa6275b4cb9f860
SHA1 4b77f7f822f4ee15c57dbe873c6f7549fb608028
SHA256 efe6a9d8dcf76f5286bec0496209f59da3de6ab6e355a183b69a7e4bd5d36cc2
SHA512 d3d5eb21caaf361bb92e0453ee1db4ef9349e071be2736589a8d2f5cd587e85d33c7d65f01342758dede0ab0a037b294d7e263d82f60c29e583ea1c30c9f3fa8

C:\Program Files\Avast Software\Avast\locales\asw4e0b2b8978330d84.tmp

MD5 6932a8734c0ef9949fe0dc3b2282e16d
SHA1 817c17d5592129b6277075845557148e1e59cc78
SHA256 88581d49e6c83ef74fe4aeed438c0380f321d9eaf3b8ef210d39f8378836a1c1
SHA512 076f2741f28f76fb0da8fa35bb55418874db7e2304dd09afc0cc818b0c5e645831cb0c3ebf97eac474339c584e640f562b4699f54496ebd761e3733777490b6b

C:\Program Files\Avast Software\Avast\locales\aswe0cdaa185689cc9e.tmp

MD5 f1e5e7dc819670c061902a3daa17daa2
SHA1 583ca07af55f3055ce127b81fd825fe45cb722ca
SHA256 cefdaea7b486364291fad01ff402ab8098e2e13bc73b2bbeac25c8a9daba8df8
SHA512 b8e8e79f052d5165446a8392a4836fd6915cb87cf199c499e9b4e767e6e60e4e94d601420e798ed3b7354c8ca91304b1d062332cfd5016614705aa57462aec83

C:\Program Files\Avast Software\Avast\locales\asw109e6bdb848cf617.tmp

MD5 0161995c04f022922e5c036d374eceb1
SHA1 5294111882537c10e4ea4df72b3508fbf2d2bc30
SHA256 3f2e5a65ebf8938ff4e9676b12573b23c72501761f1bff4d5ae466b68c85130c
SHA512 c04c549e23d2ff33cc424746f1a1a6d70e4660612d857070810c7ad9c7021aace09acf62e0248f139acfa2369fc511b4f329e14f3d6126813ff66ee7d44b3611

C:\Program Files\Avast Software\Avast\locales\asw4dfecf7f4b9550ab.tmp

MD5 8fcb9f17f850f0dcffa2512236e25790
SHA1 429b36872ed7b655d745fd8efba6b5239ad340a0
SHA256 c79b92ba066cf5414fc37795e6a76e966c23143bd3c48c0cf5f61aedd5cdafef
SHA512 1553cbd7fa4fc87341bfca39cf58e8834d6c3100571e34bcd5a1961884776abb69592c627cef414b918e8cd4bd709a83c4af2bed5d5c4a84b9509e896b8fbf42

C:\Program Files\Avast Software\Avast\locales\asw67c8298e3f8e6aaa.tmp

MD5 c7b9e899ee655e2cec7a49b9cb2300a2
SHA1 5c471604d1a755a393f1ca2f1acafd6e014792be
SHA256 522e7a2e1f7d8e49b5632759cb5dae269578edc522689bdbcb23b74750f53e77
SHA512 b56e1afb9c3f67ce891eb0215a68cb3588a82fe51e0dd2f9b18335f2312bad156cb3be032caf641a7a39ddc0a41038f96f7b36469ca327051bfcda620145f6df

C:\Program Files\Avast Software\Avast\locales\asw16fbfb617836bc29.tmp

MD5 dec816e6e65e705be74917f249e43fd9
SHA1 6f90b68e6b1d904b3e41892cdab1923f4f868376
SHA256 ea323024091753a5576a343e46d19bfbf9939122bdde53d91d7dfdbbea5a9c68
SHA512 d21fcaf4fe07f4cc6c369d7cc5a1bf06de5ddf7e2433310b45b53aac340259f5276e1e86e15591ede8d4d5c05d719871d586942664ffc76eba1712ef3145395b

C:\Program Files\Avast Software\Avast\locales\aswfa5e86b69e16392c.tmp

MD5 98230353d1463eee93d64a4856f7008a
SHA1 10d98e7d0e095dcd947fbe0b8d771ed1574e3ca0
SHA256 36f41a346ed07708ce12d54e5a4c4612f49a375155d1655a23c52256838617cf
SHA512 53b9d1b50bb79e245d74dd30cf66da4715c81ef63af3d569eace6329eec00356eacb7357271778e837b60fee08deba2ba445b8ea74619a955bfa2b8e5c05358c

C:\Program Files\Avast Software\Avast\locales\asw3d7fe586f13e688f.tmp

MD5 ad4acdfe76c998b945642b9af2756ea8
SHA1 025ea273d63fa71f3c10c578b1a3f657dbdb3f96
SHA256 4dbde72ecf65ac84b6c01251d37c425c4cedc00e3cd9cd40c0bd5a6081359b64
SHA512 81f71679d2ee24ef8124e81f39f49b113a157c88af093a6f571c34b67d19933c200d095ab65ce099000f132fd2a04a44829047816c1e53a42ed4c5b517e90fc3

C:\Program Files\Avast Software\Avast\aswd2f9488f736808d2.tmp

MD5 80a7528515595d8b0bf99a477a7eff0d
SHA1 fde9a195fc5a6a23ec82b8594f958cfcf3159437
SHA256 6e0b6b0d9e14c905f2278dbf25b7bb58cc0622b7680e3b6ff617a1d42348736b
SHA512 c8df47a00f7b2472d272a26b3600b7e82be7ca22526d6453901ff06370b3abb66328655868db9d4e0a11dcba02e3788cc4883261fd9a7d3e521577dde1b88459

C:\Program Files\Avast Software\Avast\asw24bc300363398e3f.tmp

MD5 8f6d29ec5f29c02e8d7188366f0ef3ae
SHA1 7451e3cc4a7de1a53987c5cadf2a759269d99a40
SHA256 3e116ffe2f55faa2c2b96aee4da637e6424cb48bab27d9f94a958530f840c673
SHA512 418be962c4dcf92423b2bb780d3a7476756e16aa1b670167ed3631bbf7ad4edb1d35a04c5f8f685c5eb79edfe5a247403d25c6ef18f43eadf1192603ddb2b386

C:\Program Files\Avast Software\Avast\aswf482821c05a41a58.tmp

MD5 8ebb97efd9cc5bd6c500ef6c7a9fa406
SHA1 8e285f1ffd650c87dc4a0ec26df418acc1fc8821
SHA256 aaaff8d6c9f0307c4eb3dda812f566300073414de002bcefb273a7be57f9e69e
SHA512 f93b72eb950d924b66bdd44713b631409003feef26f6146ef366f05312459ba2d2c4c720b3ad13594c8ee6c3734c53e4d1295eea064c03be313ae2f541105c89

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw883b5740c8993c67.tmp

MD5 b961102b4a76d9107c91969041b049bc
SHA1 324b119181867aa8777774833173cf39d1e62d7b
SHA256 2e15e696203227a27c0df032f3a022f59ab75b2f1e36bf22df455dedc3f3577d
SHA512 4c7070b41872e6a5536818ffc79080e725d8ef034fbd0f56af6d162fc8aef3a64cd0315823a528228b04877ca037d5b8537a9cfa09aefec68bfcfb2fdb32af31

C:\Program Files\Avast Software\Avast\asw27256eaa3aa962b9.tmp

MD5 e24cca34236bd98c2dc32fa0182e9af7
SHA1 f516afcd74141d4897650e33f04f5550469d2a6b
SHA256 e4ebd9470ca0b809826cd413b47bafc5d5b1c0784a0a22fceda381237420dbba
SHA512 9a55b74dd986e2a9d8cbb1c9f785010e39464ff77544eefb4d120ca3a236ab07a1889a18b53841e292d6e2ef0725c7477d51b3ff6293458d2340b0bd500cdd94

C:\Program Files\Avast Software\Avast\asw0997c9360436b82e.tmp

MD5 4d019cfd5d1e56bec8ef196dde4f98da
SHA1 70bb92a226f1bdb632c7ae279a69e7a9ea36d5b0
SHA256 0bfb07adedb5add5c29e4dc5182766ff7aeda309484a170db46210d4c6b545a4
SHA512 c92f2d93e7897cb2a024f46b92afc710b92238b09be1d577adc279484b4f5905bd62ac2a6b284be059c5a32bc50de5faf553d425cda563cfc58adb00541811c8

C:\Program Files\Avast Software\Avast\setup\asw911ccfbbec0c09da.tmp

MD5 1770e768e99254927e6ebed43639a9ab
SHA1 55375ab40477fe6b56f6eeb4d6d05fd659b5dead
SHA256 c63a8e890489ad01766bfbf31b9af03d3be8fa4b97233be0c94ee5a5895c6c65
SHA512 834dad84ce9d6a13d979582e47c5850e6a8055707cdfb5328297845735c24c5cf22cc74582b4fa81e43afb4a87de2d526f0de52d985df97c6d32209a116083d3

C:\Program Files\Avast Software\Avast\asw8692bbeb2e39c25c.tmp

MD5 89da8c0fd2baf71e085a3db21d4fe475
SHA1 f3095a03e17420773840813778b98918b43b8d89
SHA256 009b4590e0a17e7631cd0109b051cd5fc2c5056a27c8e9c80e8d21fd57798b6a
SHA512 b2807f22a115c50f7a5c55bb456d9dd47a506124b5e7a72c401f3b104b400547e5a44d17cc1ee26ea3d2b0931fde21eed7d6439c290b475b681be30e64b6eff2

C:\Program Files\Avast Software\Avast\aswb83e722fe95d659b.tmp

MD5 b55c82d1117e5d16c8bf428447e9ad10
SHA1 d8cbbf96635ce71227146a602525714dfc880a1e
SHA256 e5e6a30ccf86c972d1403469fd506e9380057126adf4dd8202d6ea4cee72dcff
SHA512 a4c1284e8cd9935eebb816725b45806437fef7cb41dbf2e4adbd5bcb77ca9938f352796d626c5b439439a4bcbd6bbcb9e2139231a1f601c60680632bdcecd143

C:\Program Files\Avast Software\Avast\x86\aswcac3aaead8175a09.tmp

MD5 75ef57c041432ba791d79ad141fc5c44
SHA1 9f22c6565ec0f8cb588cd9a3d4946a9c267ef34d
SHA256 8d3a991b6aa59692107d7cbd79eba47f46aeec82c50d15c6a6f6bae8e08e8033
SHA512 f8c8ef8586d0ed673fb83f8ff84d549f203cc20da877d6f78275c361bd41eda5ad88e75425572ebf51646c7339d3ea3d5d2d07ca642d65ac8cdac4ce7d7b7730

C:\Program Files\Avast Software\Avast\x86\aswd2904d0b7acf5614.tmp

MD5 417b076b9be61463d8cb5ccfa7f1b3e8
SHA1 655cc6f4c8c0bc40ae913f71afc2af1ab0da7649
SHA256 4bb640cbd1aae48b1e252f1d875402367567cd0244f74101aa44081aa9cc98a8
SHA512 89c30c9084a9753e08622142ecbb0d74eae4536dc8814ba73dd0c2037f2d7d8f65d66d5e88ba9b4bb2ecd83abf6ccab0f4617d4369b63d62711c1f406a7277b6

C:\Program Files\Avast Software\Avast\x86\asw13b38e6c1dac9277.tmp

MD5 26b5a8def83dc142fa81b805eca5d8bf
SHA1 04ce684fb0a5b13df1dbac0a5ec4a3c3271a867a
SHA256 f56b41c3acb404e8fd9d1c58608a92cae041dee7a519b753d380c41c651ad7f8
SHA512 ccff66bcbf01a68ff86e024f0585d3b8cb3fdbf7bcf9bbf94b9e327a9f23c461bc5b7fbd0703c866edb7e10044609660f2c7c3ab1c19c54138e197b54562ab1a

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw1531b16c393d6fe8.tmp

MD5 92b426a95881b2a057c163a448a2d5b7
SHA1 d9278cce6ef28cdbe6a66b126e5a2557b426d954
SHA256 f271a00536fb926a4ec67c0e11a633c3c394079662caf4aec13025c7a6f6e88e
SHA512 b54dbdb8743b136f1fb4b2c54727f3aed863c6f1736cc5200083c9ceaa4dc9d8c7856f6fcd3104bda168451deecba52001430d0b821da875d0ba5a9487ead169

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw8605e9b0d8b8c276.tmp

MD5 03b27930a307920056e4f20398cf8306
SHA1 76857df8e58366ffb05a4f60ec829eb38ff5cac8
SHA256 43b3f44eb2a0f21129f2f28277667830748b38f5459fd4f36eb17b78825b21f8
SHA512 37ed116f945814dc2c0475e87bfc05a01473114e780e07e09d0d232781f898a5071524dcca16ec696c6d4b815c7825b41fa5535461e3f194273715f805909e26

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw343b9f3b6ddbabf3.tmp

MD5 1c665264a19d2d63a8693b47090745af
SHA1 5f689087e36210c0511ac2ca6b15648291ebf188
SHA256 0d982cc7932800e2d4a881652bfc129080b470b96249f86b6ecdf7ab43913034
SHA512 d1992c25f578012ce333048e09f1af948905b64ccfe3d1c8b0cd96b7849568c385b11978de0c9bed4d841646c40fffbe679c48a14fadaad3737fcd64ec3744fd

C:\Program Files\Avast Software\Avast\aswc1584d34ea44c64d.tmp

MD5 a7ff565b0b13dce1e4b2896564b4230f
SHA1 718891b1f89464f8ce68c1a9fc2d3ad7f618b135
SHA256 42e8bc6e755eb52a2fe1dc5e806f42ff8bff618a360e25ed34b9f0159500a1e4
SHA512 9f8fc7ac6ccfac2c0e723e0d72922b4c521c58f089724611da540ff38feab3ec8b102524e6f193403084efbf7ccb179ff4831e25de030d499cc06630fb8a72be

C:\Program Files\Avast Software\Avast\asw3b440405a28222a9.tmp

MD5 8ffa6dc1e53151aafbbcfa13e3fb48dd
SHA1 ca399ece6f6c1ea781028111e48c7f5d41788809
SHA256 95c8849b0cde8fe00c914b85c635e5e7c0c868b028d6279891439869bcba5b86
SHA512 8670db8a603152293f29d17e6cfa6db66f01ddd4cd3c045287eb2dc72bb77faa219fe373996a9e3f24be0c99114710e9faf2d712606eecbbadb978712a8e050d

C:\Program Files\Avast Software\Avast\aswcd61b81107bbff4f.tmp

MD5 c7a714ec62b04375ad61ef73b96e0a46
SHA1 4f9a54c2fa9c919d9df5cb16cfd70a0c5461767f
SHA256 b78a6cbd294277a5a1d315ac1d501f226cd84bc6857a74ea93335f270db8b21c
SHA512 dc3e24e1c31a3dd073c53f2d88fc1db9d612f35ec924e320d0f651a78e4e42b5fe717d799de2fc6deb49eab5975ddc3dd686332f0b84abbe10897900008507b4

C:\Program Files\Avast Software\Avast\aswb235a3fee7f90466.tmp

MD5 e6a5dff7a42bb67fb896e7b55e4f1d55
SHA1 f45f9bcc94c284481e859fa48e464d2f8698e921
SHA256 977ad3b1b07d21fecb010610514404ce5c930787a82d4377aa6779c3ce579d5c
SHA512 a2ea7307b9ba4f65f676303cab66ef211897612a66aaae501b766700582d4de60aaad8449662806956adac38826503e4a2bcfc886d5040a044284b5b6d708336

C:\Program Files\Avast Software\Avast\aswc42bd950a30c7698.tmp

MD5 4475386f367d2270f81a42ff3379bd75
SHA1 b384cc93069f6b78621982824f039a53e8fb7123
SHA256 9b863f0f9d50af2f02764ed8b15fc8e03e7a98abc80df4633dd0a874b0f330a3
SHA512 7616eccea59beae324587e2da4737f23be4d7e583b88e44dbe2fa681a1ace9df50995d2b6049731b040a12631c0744613fe26c8cdc2bdefa1e898cf5ae4187d2

C:\Program Files\Avast Software\Avast\asw59dde4fd355f1cd6.tmp

MD5 025dcdeb5c73dc903529491adde32a04
SHA1 539ca3b983b7bd4e516d5d20babb6ea4871efdab
SHA256 b63625340eead682c10fbf1d2d5e7700fa143d7b9d46ddc5adb442dad37316fb
SHA512 97911cc005087158216db386d5a97ca5b623a03734c063a34b6f2c37278510ccb8135b5d7de0b9d929bf156fff9752d770b0e39e3770024f2d3f9f956e0aa5bf

C:\Program Files\Avast Software\Avast\aswb82e6416f113d4c8.tmp

MD5 2871707b8de2e9e5d8f50386683f352e
SHA1 aa4979eba43bcbfd4fd59c99e3853dbaa47057fd
SHA256 42b16435a273c884e027639b9b9013df9051a1513aae001eff99ebe785e397df
SHA512 b55b8ca7ed3f5e5fc45eb984c9fe6f4b29dc89cafffd7d3ccf2604dcf24b028c65fd155dca7e93ee7446158b899a57ff3a6c28e4436728f5c3343e24baa5c189

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw9e8f9636b6267e37.tmp

MD5 184b3f55e38fe411455ee3557f72dccc
SHA1 26f26dc14c807756f45c3a3b78005f29cbc7fdb9
SHA256 44377a9f67932c011653ffd29b7fae9f38d06ebc3120edf17f7ad22bb8fa5e72
SHA512 f5e5e1560662ea9b233f95a88bda8ca5844cf073c4e229562ead86888fc40efed811b24d6dc51733c9a7537bef52e4741f2f4489ab75e4a7d90377f6b19305ab

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswfbc00480293a5e33.tmp

MD5 3beb4740c3da3c3881e4305e4250cf16
SHA1 dde9d72bd28efaf42b93751882dbae181ba4594b
SHA256 46b3b42d42a82ed63475eee871a57ab071690569822062d07dc893e627ebd939
SHA512 33f757a2f762f33780e7dd7783053b3ec1e76a309d36d6c9b4aad9ae050f55d4b249bc4d525eed24d8c67993b74542b64b929a7a6be6f414a48a02c906555c20

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw3a05f222236b5a70.tmp

MD5 ae46753892922e38858b98b933d8c475
SHA1 bce5a1dd86602076480e37f21b778a2676796321
SHA256 b185276e116b3eea61d4e9781777fec04ec77ce2b76896461d4d2d15e14042bc
SHA512 2ebd68b42c07434542ee7a4754b1af770cc1600d7104f501b2b6dbc6c719d8289998fcaeccfa8a40d45457a410542b8e1d292349e4aabc8b8f1b72c41d3bd800

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw2b8ab760e7c446d6.tmp

MD5 4aeeb33bad81fced46fa7f90a17d60d3
SHA1 f3d6e8bbd96fb42f5c52b5ae4cebd933420102eb
SHA256 5cabd407ae502f3ea4bbec56460bdf6fcf5bf39284dbbc6d10db90665da4be62
SHA512 8dc259e22a3b14e8d6688c7b9a1113cfba8105ec7942518019a944a9ff1eb87c896ef149cc2f913429733654f6211bd6da944d3aba113cb513c0123f8848beb9

C:\ProgramData\Avast Software\Avast\asw0d4030a92fd4ba2f.tmp

MD5 1a90bc8644262cd79e806a222f38e95e
SHA1 0b9dc24a50654a32e0d5974f9f4370bac30a90f1
SHA256 1210aec78a7a836e56e94accf4eea74d5c0f26c2dbb25ae4d6023886ed3c9d64
SHA512 4f67699dc93ee7df09c4657a9fffbeb1f34ac615eea55d169ac03f7f58c50640c968f4215ede9dc59b5660166a9e2392fe10b8f2f68f6b067e9631c94c805941

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw7da64faabc8b882b.tmp

MD5 2006b99608d64d8d0b388318a863d503
SHA1 4e9b24760641331b6c53288fa174b54105b64064
SHA256 009ee0c06c26f92c8b4bf112d03d5ecaf12785d08119a77aab5ab4bc5993db6c
SHA512 80a8c57966675f31d9c198077529d86887b5af0815187382567545dcfe3d9d2e32a2898d7de24c9218e267c7a9571dcb07764ff06aa5d1e7cb4c1a9f72cb6b22

C:\Program Files\Avast Software\Avast\asw8b8c807403e19568.tmp

MD5 c1a76d4eefeb28afbbce6ae590ef52fe
SHA1 790794021a71ddabc421e30855153457c462b1d3
SHA256 1e9ee30c2d147bd8d6ec98dfac74a6869f5b8f870fc2a89087d75c54e1af1bd0
SHA512 10b631d3a68e543f00d6d549c06d0ca9bdf65c4a4aa9ad6b5f80e28631288a431cc046d77690b28835a963f4d6339a8c96592d2aa615ca66447eac2ff2e89ec6

C:\Program Files\Avast Software\Avast\asw1984f42978a04fcd.tmp

MD5 e6f78e15231b84a4c95e67d9cafb1efb
SHA1 d41de69a78076b387951c7040b920e90bf8a395b
SHA256 e0dee46ce47ce07f08e10a783f80cf9e7faf96e76d7b7694cbe2b78f4960267f
SHA512 381c03813763fb047cee4de3ba17d560234207f3709ebef1a9fb31a24c9a60335f111513f4a57ba700377ebfbf6e75f1ba570a2df3dac067dc25676c06c936b8

C:\Program Files\Avast Software\Avast\asw6a41f24f6abfffb9.tmp

MD5 1a4813deffdd74758f4b9ad9913f0e1a
SHA1 8d6166798720684b0530627ff27bb9eb771a598f
SHA256 af34f46fc2bde3e9f3248a4bac241266bb8c6881bce2b2d2479a4ddbb8477077
SHA512 e69dba30a65289915f33ec1886b5a7073aacbff8adc1f45dd3dddccec63953af997b40937e09f9c55ffe8c0f9c8267d55daa92012e58acf1def4ac8e20bf9f36

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswa589935b01cd46b9.tmp

MD5 bbfd42bc499bcda9c2a2296ede478b25
SHA1 aef3ea71d3e1ac132c35fc74b6e77299cf362b01
SHA256 73a09a2293c216606bc5bdf40b524b234ed9b6bf997610af97194510d277b521
SHA512 e59309b77691ad30b6c8dac17ecfbded187b46156099ec9008720b8e6e8e5686963f54a89b91ec4852b0f104f5c5a8f693daf896751f69a5495296bf59a0f85a

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswa52e556432c3d31e.tmp

MD5 7ff564cf6c4e9db2c81c5ebe683b2c82
SHA1 b9fff588db125d72db7c139776d2fd7baac7bfd6
SHA256 390f71911ecc3ba09e169699ac035d9ea3f468a38fcbb07c7f3330b24018e25e
SHA512 ae856b97382e24c0d7da40ab099199e83b3247af0339f67c5421e2a2f5ad37ea3734bf60ba0ea129fc0f84cb3fd61176edfd2d08dcd81aa76fe07a9095f7e567

C:\Program Files\Avast Software\Avast\aswb6807a5dbdee8460.tmp

MD5 e4e0b27551ec1168df48183d6c5c8fe5
SHA1 9878db424926d4626eb3432456611403f0d181b4
SHA256 dd30b724cba25bec5ed8cdeef89e7ac5deaa73362c2a6430689a1270bf4ad6a4
SHA512 d4a564f3ae6dadd4176cc6a2b9a11d98d5e942fe0833142965827c3e67012d41c508e58f501989d94da46ce1265f68ba0520c65fd7d33f63ef82552dca2b2bd8

C:\Program Files\Avast Software\Avast\aswd1410b2bb8eef16e.tmp

MD5 ee9d2a7f8f2dbc88e9b2add555c75449
SHA1 f656c3d48b80ddbdc96cc204d05f1b58ecab2f8c
SHA256 07053d89aadcb0d477747f8ee00efb21b8a5e2c718306ecbe159a8322d442670
SHA512 c291ffcda464707140434f566ac5e58509bc56bcb24d23208359b5e86f915833cd6f33fab81df5c6eb8a54378373b528ad84598ce78c908e7ac64405af960bd4

C:\Program Files\Avast Software\Avast\aswe66416bc5010d997.tmp

MD5 839cb8b8f714991c3ee1e01e3a322e64
SHA1 76524203089a7579bdde509428077c6601b6c5d4
SHA256 b06aaad6f9a1f42fb440a04adffcfbed73b1f96367b67a040b3b0cae6a40f2be
SHA512 33054a9c91240d5ab8117fd7b3119f340a3476733cdf9cc403c5104faf76da58968cc3e78b993917ca416c0e17ff0aee2145a5ad229db3369a5c917641e3edbe

C:\Program Files\Avast Software\Avast\aswc1576bc9c4510355.tmp

MD5 acc568d12a7b8acd75a8cf2f915d0204
SHA1 37f895dac40fc91635c318000983d90bedc7c8e9
SHA256 256d22dc70daec23d11f7a2e1321e643a933712ee8a4612eefecdf879efa9281
SHA512 aaad89ed399f29a9ffd14344e713ee6a00cae2c6e0574b25e8d24955301c02794ad8dae0a81d91cd4f01829b6d48e255db3b9afb11e28455c537d79633a91d7f

C:\Program Files\Avast Software\Avast\x86\asw72ece9300ce5f57b.tmp

MD5 974a97c77ee560690162e72f0feb9e3b
SHA1 b960d627eddef7f2b5775a074f0761c9514cc397
SHA256 535f3343c4ccc7f620c937b8f1f7d7b9b16f375a86ceb4baa0695ca13039f8d6
SHA512 d776df8a8183550c9ab38efc851ca3129e6aa154ee312e942bc3ff20f5edc7205b8703fb1570892144dc40d26f339c01e18766d75685f35f659604b3385fdec8

C:\Program Files\Avast Software\Avast\x86\aswc7a0b8f6e2da2144.tmp

MD5 8afc93334d73886adc9843bf3a99bca3
SHA1 c66cc5a139d9c62e59843b355743da4478578399
SHA256 8ab6cad2990558b0afd0b96a639601dd5d1d1a9ef1dd1d1e5851ad98bbe6e2ec
SHA512 28f8d9957224cacb6cce3cfd17509560db8996078738cbb8c7dce3c1b8e0b11bbee84133365994f15ecf7f6b0145c6c5298a85af98308afbc532ce1dde5272d9

C:\Program Files\Avast Software\Avast\x86\aswbf3c2c901f642bd5.tmp

MD5 fde1f7ba80c6bfaee005e055bdcb3db9
SHA1 2f47d5dbe62762bcabdd135ee993bcc4f5b0ce9d
SHA256 097036c630b4c2a854a2a16685e341e631d1f9a169bfce4c35cc99690201e9c5
SHA512 d7ca13bc4defe5d6a4107ecc3ce53675a27db9ec04351581e623297e0b1d024e47a126a3118c0b44b5e2afbb4c58137efc60b00ba5232607ab788deed484354f

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw20357afa74f0118d.tmp

MD5 7f9531927e58fe32981d195625a17e2e
SHA1 c2831c6c980e9ffd05f450302cf81af11050c300
SHA256 88241636a8d3b8ab2af9d3b3b9e40cad4a17896f87c468ce5f177724656b7340
SHA512 92bab7dd259a9509ca2cb7ed82dee4de77a95780b9acbf36f657666630e9790dcfae51b3efe8a10563edd0ca8a29ba9c9c8138a740240ea106cbdebf61a10bed

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw27db35f319f06395.tmp

MD5 8a090e342a1cfc590b468b61e0c6e23a
SHA1 2ce5c404d0e926d3829565a819142657374271c7
SHA256 c432d3c6a02d636c4e66cb97bb738655efb1786a89d2ef446cd0aaedc7f6fb7b
SHA512 50ea6a9241dbbc52f93703cf29d2024ad49efd8f69f8552e493039640f2d0e625bd5c038e942079c0e291784674d531ea256c2556c637ce292ec6de8c417292a

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswf3bdf9324821740f.tmp

MD5 8ff7f31d203d158ca42f0bb4fa077587
SHA1 721443995a06600be6db636dbbd44767f2d2a349
SHA256 a5aad3483ab030cce01bf33f5a72da627755f13596bf3fe72db766463d9acc57
SHA512 a65478de5e6fa74723f66af35c3c24762e0ebddfd575e4bd7e868233a846e7813454d0542670159b91c74978a1db667d23229d4605080cbf6e96c3227ca2d7e3

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw36306221b3adcb63.tmp

MD5 b65aa2646529e9c1de570d28c2e37c2b
SHA1 0c0516631b589a6d87ae53442a7ecb8b277127ee
SHA256 783aad71c976972def8a34579123439cfebff071901d97bc91033a05d9c2068f
SHA512 4cc7496c2c0e18e10c0d3783892b0ba15c1241fabb2ffd168e981f60e3993fcc4cda07f2ae9afec4869f7d06928fa606be53544a109a3d78067cfeef033ba009

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw7bc78f45662fbe29.tmp

MD5 0c94dee60cf90c0950680ab6aa2c2b91
SHA1 d7051e98366d14a440111ffcd5b28379f8c67806
SHA256 ed53b64f64fc8371f8ef39b4366449aa764eaae971de628aa2b09b3a6847216b
SHA512 0cc66c7f194ddc4c0bdc9cff0709c75455a35b6c5ba78ab5d3e7093ab9388336755850f3567a93c96cc66d7376126a45ec8e0cce370518346647d1b18dbe67d9

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswd5651f6037637a9b.tmp

MD5 cc556ffc1ee06111ba305967b089779b
SHA1 9b515a2f8e7dcf570f040b19a64b36166e17d93f
SHA256 be242784fa947e505ab9d79a23d7ae96e5979af03bc51297ae840517942f8675
SHA512 51fdf6c92ac6cc06b04092a0b1f9d391ed36d8ce0b2b123fff9d228875bd91b55dc218615f757f06f34c11d2527344f21c7db48a7b0502685bf6f77650d240a2

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw01b4584ffdf7518d.tmp

MD5 1b73cbc1a51c5c2e61072729535e3148
SHA1 52f3494af0555caeaae477173dbd7a8c171997ee
SHA256 4279fe19e9d88988a93f5d334518b204a8956543f84467168d5c63d490337593
SHA512 9898d2952dc3cadfafdacd6d281d8e1614f6a8ca88448e52d393fc540e543f810d434e8eb74a640232f83c4ee2a07e8b37184f59adcfc9c8551cd0e061cb4460

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw4738c89cb6342d8c.tmp

MD5 8ecd8aea1af9dcb3bff28b1d4e0795d4
SHA1 acd125327614726c4069fcc4cde256d276f57ef4
SHA256 ec4743a6044224132ffc5f20c25bd7e36dea25f7ea9baecec7db40b0904dd7de
SHA512 33ba68e27fc769f0166e72da458244981622ffbfad33ae1015ec73ff83751eae9aebf1aff991247ddc31f0223888f8f03fa9b2b1d6069112ad8e1689e519057c

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswd9262897c27d4059.tmp

MD5 0d3e750f8b8882470a74db90de94f814
SHA1 cb07462263379d3f5dd89e2b62ac31a2f7538821
SHA256 5b858fe4a054adb9461cfd12a5f3b8a9622a2eae88bca8dbd7d84a9f972a20b3
SHA512 b5ac0039428d844db36327ce6637d207ab02ad4cd89e0eac361d61393d396d6e2fff76d1007985889ec88d20e9c62ad29363b984b77d791feba588c1ec64f084

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw748be24c4d08fe15.tmp

MD5 2126db527717014c6695f9745a480c2e
SHA1 3d564a111a7f5a2a3e9b06ace066931fbecdaf68
SHA256 50c864c13306921277e9c43f0133c754938e96cfa6982879d106b32b4551d984
SHA512 a47423d6ce322d297b0ec222ab8fb7cc46a31f840f412f6da0bd4ee9c40080ce4dcd2b00267de53721e61ba8ea02ee99d366a1047e41805f7feab8c43e4babbf

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw60e818e1be9d9f44.tmp

MD5 d942c1700059ae77f3c06918cf79d7f9
SHA1 09b1431e2c3ca7479ce6f185d2e6ea3c9052cf0d
SHA256 500acf4c502f9bc7c7ff43252b9a3f6245ff4cd7a609dfd24a1c3b5fa19f2950
SHA512 fcd75cec93463404cd588abe1b5d25f6e0f5e41fd01591d51eb8dbd49b973187181b722875d72afe7002c27309819f37f88165a5e6af81b9d2f708da4ecbe219

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw8d00c4a9bacb4000.tmp

MD5 b52238936bdf50ab985435a176281f68
SHA1 7bd2be0808c538b6f15f20a9a1228cf4a20adbdd
SHA256 3a23171aac49453f931d69cd55f6ec742243f5835386d9e6b18efad96c2be450
SHA512 36999e6cd50e26b1620fe24ba2dc11a40b25d1d77cc7a0337c7a3f65b16383fdb224e179392a215e6dae846e8bda6acb3e027445fd334e26e34278a397452f6e

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw31c3fb129d41417d.tmp

MD5 0713775484e95e5bebcbe807d53488f8
SHA1 222dcab5f38d72971fad641201ba3ff9a2a0ecdc
SHA256 e63a096b1ae68a774b1f1afc51b5dbef1a5ac2d79dccc1104112c22841e3e378
SHA512 f19d30d37718de3edba15358888b13afd9f9dfe4bdf37bdeb3204fb6cdeec3f249e388d06a89b21dd4a0da9d1cd70bc4f5244f287a4d907dc0a786df7ee97097

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw7cdd251222c8d573.tmp

MD5 841e4ff9bb531b52218392db1d7cfbe4
SHA1 5607c2a987436195f1e241a0b29e8fb1f734102f
SHA256 4da31e582dc47d46132cc73ad34d5b87dddd2338495ceb2772f7e103a9a32ebc
SHA512 93232073d95870043994c752318f9b319db508fff452e4aa0b8e42e66d13623803be4537e1798dd05177b7427175d989c8e49a379fd932297e161d461bae268b

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw3caa0899fcee2d1e.tmp

MD5 85444893a6553a4dd26150a68fd373d8
SHA1 ad9b46da45366f13a22173b06e22a45a211e99ec
SHA256 65f2a93490c845833541de1376d5bb65e6e864a1a9232f58f86a7a84408508c9
SHA512 ad56f71d0dc6d2dc5dd46eaa00247bd209403014648fb9c8f98937fc8e36fc85c0107365d2f6ba4f6d530f340278e0205d94bafebc78d10201e71dbb5d4c36d6

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw23d8d9246c5e3371.tmp

MD5 90340ac74d22b9a67237ea52a4dc1c75
SHA1 75d44b240afd4198b0f3b7256a4a9533ad1ba73f
SHA256 fd48da616f2d17054bcab961239431d99c247586f96bac69aac5b704ea694352
SHA512 6f52ae85b4d9ab8516d72bb1662ac9cf602092fc61ea78bd85af05047c70a0adc5edb67266032f12a86601c983015276f15a457935f5b6143dc80d335351e5ec

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw6c86db66e733ae15.tmp

MD5 0444624f30e8030d84bb169fc2410444
SHA1 05c1cd844368ae2c113585b477f91507430d72a0
SHA256 0b87358da7882fed313facee92bb8f4e45299c63ca557fdfba1478b364575fc5
SHA512 648a79fd30a73582907c7ca008be5ef78e6e72aa22478448721c4c5bad45a45bf76570d24e061dfae5e535666e79154f5f9f66a08746313620a17582e3998304

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw8293dc897660e553.tmp

MD5 3b07abbe272e9b9e2989e2d6a400fa53
SHA1 f925e5e58377dcdc13b6d80ff22c775e2334e372
SHA256 a170d9851a1427066d1fd61c32a9ae4b9545aa926be55da7e7d94275be281dc8
SHA512 14762c984aa6736b1330b1f0b296622fc1ce3ac79108c0bfee793a51131deacd09b494e8c851c6e437a84871a864dd65389657df8b2256f931e3c60a61fade8b

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswebaa6ef07f6abd89.tmp

MD5 7442e7059f712705d4b97699bf56de35
SHA1 f924088428eda3b76030091cf59ad38afb590118
SHA256 f822289ea5a9b0ccf9777a72bc8b73ce68b596fcca811e0cff0adc4031056b20
SHA512 dec6228063bbab561ae0c02cbcbab3d08c15f261758405d8a709707a180a09af9c462b0b382b700177f285a1ce3bf7e71e093f9031d15f932120fbfd396aa851

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswb92a8159356fa6b9.tmp

MD5 46aaecdb8d337980c82cb2714a985986
SHA1 22104d2272b592a344df5b575fcff83ca0e4b161
SHA256 34457a002e90a590b516bbf58530cdddbb618a46bb3e764e18167c44934917dc
SHA512 33c91058a693b82f1457d49bba2e209a90b825927be89e38523671ac16f4fef208b98efa980a3e11185baa4df6d7639d447bf30e19dc91b76f04ee61b6169bee

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw81ce3dba892e4aa2.tmp

MD5 592a65b922d4cd052bae1957be801a4f
SHA1 8371486ce1b38e692c0abc4a2a9e0c3e1945bb89
SHA256 d78e74087d151454365adf6239967c8ecebe85b1c6c6d3f59e70f0980028b1e7
SHA512 0837209e518d5db76ceb8128dd49cf03b8f0d11526630ad20c716ade1e02df1b39a8440d20ee20b488c6d6180c155d00a9cbbd311fc50f4803a8b95d4a545726

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswd1a3acf0c477c611.tmp

MD5 0651bcd9acadac1d50653be35378a82c
SHA1 5d1b2233c7acb3915d33f7b29cc2f0cbf34ea1ad
SHA256 fcf66176b6f7ab86f98f38d5662f61fa61ad3f1e59740d8a1df0e1072248cf6d
SHA512 1ce05989181faa8d291bb0df34bb4e93f2f576187cf2d0c5110988ce17e6a682d815297fcc9fd174bc1791713fb07b616ed952729923abf8c06b8b8f6d71d82e

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw76306ce8d5ba1809.tmp

MD5 d1f28f796bacea3d58eca271fd128758
SHA1 934efde030a54a441c342af18ab5275e5facd0e8
SHA256 b8d3d45141ad57d917b25d2491a07f20c77b1dfd047e203e26dad591c40b225a
SHA512 4b6ada7f10a4a660c3b6ac0fd81a41c680bd6752eb1a70da08510feb10fbf2b7d5ee177a94d5093239914eea79114097329a64067a72068a8baea8a9963e3901

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw4fefe62557e65276.tmp

MD5 490c63e6b1aba9a525404067ce3c20b6
SHA1 04997f8a146284f8369c7db6204949658d6d7180
SHA256 c5131d1abd188d009e72b8c6474c74a262b7b8ec504470385f7f69428e7ae0e7
SHA512 245c4e2545e7eb5462e20e12d8092cdaba24d48e6c53d02f3eec586de17eb9cb6c15cea204a18deeea3cc8668c8afbe9f35b0fc1e751d2f515edd18ae149d275

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw8bfeb7a17766d7b5.tmp

MD5 03c2c3d48cba89a77a8c06158056aaa8
SHA1 3cf294991250721c2100288d4dbcb0343cc04bf2
SHA256 43e0c37da7bc6b2786f95765f14177651bea534ca4d1d966c79fc301a55ad5df
SHA512 bd9787ec2cf87f8c790db18724a5cc10d1a6de005fa8cc6a74733521bb11251bd0d026af9468e98b616a6d8212cb41c3da102248e105a4b312d7b068e9c407d0

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswd4049b1e0a69256c.tmp

MD5 410fb7adfc54094b95609747a5376472
SHA1 e2e79f589a2e71009d9947bb02f05b877e208266
SHA256 77f2e7e09fe542ea78f4f6f23440014461074b993e50bf75d02b2c6571f5d696
SHA512 57fc04e4c770766ee9c2cdf7ec166792fb4164d7657fbbb6a6ec74a5073de953860b7c1d5754b28b61a83b7bb1cc0a1417a2f13c246aa06044045687b207bddc

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw41c0d7be48bce90e.tmp

MD5 b179b9f02a2a42a92c8eee8722d03745
SHA1 86021ffb09e59a781e96158c8f5fd7b63ef950e2
SHA256 9c57a5fbaa0a57530b988a4aada32e378b1cbd1fe368b90e147f12069c8ae7bc
SHA512 4fa0ba86b83d4d3ee041772cc59c17407d02eef04385ad9c6d63547fd9e039a90d5a161b9acee7af9defce761ff47e288207f60b2b81a28cebe73ee1d68f0482

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswe71757e9eec1fe8f.tmp

MD5 2a21692ef3a54e5f4a016a3a1767a7d9
SHA1 9890261f7cc42d660371c1b9d3a96c09b1e48783
SHA256 01f6b2760031ed0d521e8d972a6e7b4aa05393934a37266c3f9374042cc97b3b
SHA512 7ee03077c29867a717245bbcc1f4c7afc425c5e248c7c70f884e3ad0bc0267f95b94ea2f47e3554b2d189160d56ba4a6924399bc80201fde24cbc943894e60af

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswef981fc9e58f8514.tmp

MD5 7ebb75a1000e52570ca55c35dfc7bd6c
SHA1 764dc860173990e451f6aeb6fd9b0164a86e447e
SHA256 2b151cce07a4d9c8507a1c547fdcb6ad904f9ebeeee71439d6151eeee287984f
SHA512 6d9c127cb35c122cb028eb9e8e7cdb466dc7b429ae8a13ec818df96917120f5e1f47902ecb3ecce9ddb1379029c63db3b6504d83dac8b6342484124902672c09

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw4358b612f2a84cc3.tmp

MD5 364d65fe7f976fd00702f5bd63eea9b3
SHA1 e40359ed2e2deb198caefedc27acf8c7715fc80e
SHA256 85fd25863a60e7c627494dcf14b169480023c0b8e4682a0e495f4f7389407149
SHA512 dfbc7b8660a7b96135ce0b35c8f2f576e536e8f8bfb53ee268611fabb4ddc4c53fe06a1a9e81ff26a8e10dafc40eee5d579a2bd1e19d7517bf6f089c605ece6c

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswcfda0364fb9e495e.tmp

MD5 c748312b0f6dfa5440bfecbd094f9180
SHA1 d991110deb52177634630ab6165e195ea62ab1bd
SHA256 7966a70a6113a131c563914f8cc7acfd8b8922d8ef1ddb2a18caede076f1eca5
SHA512 c5554ea1436d27ff336d7e25f6f68d485c65d916389213cb9c33df2622cf08314411ce941482c03a251e214e2faa72abd266e2ccd444c95c65f12f78eda5a830

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw412510aebd1af3ce.tmp

MD5 796e70f25faf0353eba92c001569c976
SHA1 2b427d0ad6e6ada06c012860a532da24e3f1a8c0
SHA256 9e153dbf1c157a910dfc62d1f1ae6c728ae3d5f2b767c5659a6881cecd35d8f7
SHA512 e0a2b6716add6542de78d409a4986a57a7d2e7d10672a57bc5a44fce3e65e365727cc64e9fb34deceeeec96b544d22b0901605985f5cce7f11341a00f898b56b

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswc23fead9b1ea987b.tmp

MD5 f04d8cd1c228b2a9321429bc9d72599e
SHA1 6695fc5cbee5c73077c59ef514353a4e2d6485f8
SHA256 498d2f02f5fe0a73cdaa1617be6bf7b2b550ada0537f8b1673c590ea99429c30
SHA512 afa2baa1a7344e795e325cf3b757371978d5e1c2288c31354095f4c30a4d308f2d405fd00b4efa86fef5830930a247dced395f11cab49e6a620df2241abbd069

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw5327fb1a8bd2d2b7.tmp

MD5 5e50911343631e123b2de2d19ad5e2ef
SHA1 48f0330e58e1a17a72bfc9b1283c8eadc96e1ccf
SHA256 b3caf7155167f5d1d4ada4df4764bc78b85032bb769e5ef586fcab27fd681cb5
SHA512 eb6e19b6b51a4422a861615d1f1d0742473e49eb4ff4a2a25c84bc485b9db336f14e3ee83afe8d221d91466ec7ae436b1210288ee3328a2ee0f66addae3be953

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw857d61b7dbdea7dc.tmp

MD5 fc776a56634728a146211939d14187b5
SHA1 f8372701ba9ee1a51ecf4649c74e27d1e996a45a
SHA256 ca2b5493a6699756b3bf63d9bd807b0204419ec3087d02f4bb5c7b01e8fffd4e
SHA512 dd468a46c62e8a5a2ee64332522d5ca5f8093b13722e13cfd996b32b6efc74cc2a8502b44cada19ec0c30027dab400c8567c84937f08ccd989d8a0b75b470a75

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw22d9a9a0c5e1dac1.tmp

MD5 9c46e030383d0f85a113a1f3b7477a77
SHA1 7f762360a7cb9881fa9c153f42f3a39be89db946
SHA256 d08d50eff27e71af2e72655edf22dbdea85346cc14be53c48988a3c039fdf17f
SHA512 6ab0490d9eb82f010dc4bdea8e54b9b760a417a44bb88a7bc74ce7d61833e355cef54712f3340b37fbdf07dbcd83e17295ab546d864ac06e84e0bbb7d8dd8649

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswfdbc4f07c23d0d77.tmp

MD5 4ee09ce90a33fc4f885539370d3ab11f
SHA1 023fb903cb6ddd95e25f18fd72e1b57b4a5ccff2
SHA256 4b00d5be82d9eae3445b559f4eb1c62eb192f5554b9edad50b09f98fbc65c126
SHA512 afdd5f50fecb5ada09a4d8217f1db396a2501b4ea14db90267ce51e964536a9e7c32cc55b5a8239c357f9146a7f4fa601181b7b8222670550667fae95d55bcf4

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw4ddba1f4c0c6aa48.tmp

MD5 2b3eae5e560be8c87a246d0e8fe3f593
SHA1 8f9563bb72fbea30d37a27c353daceb552279603
SHA256 b858256aa6a926f89714f21790d25e90b7dea5096bd9935454a8b4c7abea736c
SHA512 e33e50380d37f075b8d7fa283d5b4005ccbd7c35af1d11dc6ea4f4529c39571f50114d2c678061daa47f6b36bda9c948ca724acb9aaf9595ed7caaef2b0c0359

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw596f92137f3c887a.tmp

MD5 c542c43d910dd6ae2f4a7cffebccf613
SHA1 02086fd8e53fcb3ac20cd4aabd730d46458d698f
SHA256 230da452a8068ff5be158d84618c9d291bf9b8bc878ed5d56318558d52e4966a
SHA512 364aa5a59c10d95c6a93024a443972a06dfaa1693c942bca517700bcddb9372aae1c76bdf35453a5ea256179fa61586922cae7d22f4623135fe7168b5bf04153

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw2fd03bf509eab554.tmp

MD5 ae1eb2e7a5de49e2950cd2f7892d5513
SHA1 ab7ea36f3c4232f0b3f6036edecffdd4e8603936
SHA256 23fbe7263ca595af627fc37e774fc6fd5f66daecb54e38d48486c9df09e438f4
SHA512 ef919e89dbfe93ea2f45e01913c9b7d1695520f3d0073f2b578ef814e3dd6443bb506e5766d09d41e802f9c2cb4d35778c87f86faa89baf7dce66da787b85418

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw8e95f66677351422.tmp

MD5 f6f0270f98f5cf857d1e0667819fc9d6
SHA1 959209e5e068aa2564f4f777e1c8616a9d4cb6a0
SHA256 616ac120e3b9abb6f245a09fc17398bef10c5e6aa617849fe68a89efdcddb7fe
SHA512 1ef69bcf037e2ead4b4c3518a8e8e3c2dd3065049649a6973aaed9300ff6fef4bc2bc25f7d0b92dc4ab5f6a576850537ce9d6e00090af86512d080417eda42c1

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw62ad1b6bf098f82a.tmp

MD5 e36e88531f284b1135617b91f73e5ec7
SHA1 dac7d7984c7f906f66a2eadec395207a4fd9a599
SHA256 0c25f2284aec3aa7dcf6432ba9416e2fb289e08bbd996bcddadaabe42e361b46
SHA512 7e2f7095bba85a3d6aa21cd7371b73d9aea6b07d89a82c448a65f3188d9365a0070cf8b5312a3ef0eac1e4a2d79eb3d34dfbd7a16a7d9da19545ea216c195c4d

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw3eea3a8f2c770c05.tmp

MD5 0e37f414237e14f395f8914ac2532581
SHA1 2b06c81103d7c94075dd63a8df33b72ffda75d2b
SHA256 3ab7f3707a380352c5aff32c0761c5ff86f358f3683b1dd273da8be18f6521a1
SHA512 3e226dd4a8c2aba7fc81132840e8087bc2fbc11096098345051d6eb1dc724f3960789f7f958d362c6cbf7d58904bf5ec7ac84945730256a50583c41dd2135bda

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw5afcd2b5c52532a9.tmp

MD5 320629a907048b64a99ef484417df721
SHA1 0de1886eae33bb5f16de27d647048a92586259d4
SHA256 b5823ce2d6e600eaf4e2b1353600dca0351c46d014f97ac525c3ee9dafb2bf4c
SHA512 6567cd36297cb05ed301e5f7eec87a5f796aeb9fb63ba30cbe73087bbe9539e2dc47a11947c8461cd79ead01052999913143d32ecf4cbdf5833a970e61d5bfc4

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw2edf9610651448a8.tmp

MD5 918b087149a2571d9db1eb04878c3603
SHA1 aa1d2c7550df6eddd2e99b44ac9de925888281ad
SHA256 b2546e21336714858d2b03d2532b6955dcd7ff46b30435f6d309d8c39d0dc957
SHA512 07c0d13e505c69985d6354c450887260345dc59468eb82b9b0534d1bd13f5f960d2d56932b204b300ac7e5f0ff7234c5e459de06d0e466fbc3f710fb9551793d

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw9ca98b9cd4569854.tmp

MD5 4d0399f0050b13586b8b04f62e95b16b
SHA1 407ca079a3bbe2837203beabf41516fdba776a16
SHA256 420395ac9ab87accb00fa478be0b73b583a42d406d1341d98a77f6189b556998
SHA512 8908cbf7cb7b87fc78a2baa1eb2aef52303e733987891361db07098fb70d776fe936d48221a846787d67adcfbaf30ad93b867d5578b7dd566fe8addc480cda18

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswf8d025b9b57d3e24.tmp

MD5 38646cd15ac25a8d71bab09d5b077338
SHA1 4c153622a3f069480a194bf98add276f9138e168
SHA256 cb9f01af9ba4b50c604633073e4003652f1e99faff93daacd4502d4c08177688
SHA512 43844f5e82c7bf6a485a5411ce19aad3bb0f418852b86bb479f41170d85e04d02eaa76092b84ac7a1abf14b285d66fa2ff891cc9c97bbc18633af14ec44cebb5

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswbf95d26a9dad96bf.tmp

MD5 b2eac5c213cc442820167617d568e179
SHA1 9e61baac12e1a536be5e553530db8957ac606d37
SHA256 8b4a9ba2855247adddb4ee1e7f503dad5674ea7bb45015bd69cc83a3332f696b
SHA512 af7a8e6e16b86d4e2aa3141fd41a8c897957486b4d87d8ed14210590e86577e030b4b7c419ed988d22851c5fdf75236c23560fd855ada97a76459c9c93802c83

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw700a549d5dd98c05.tmp

MD5 1c76698d36fce20d2919e67e3f08bfbd
SHA1 eb85df5d35cad00ee7eda50e8a4eceb2490f9245
SHA256 d95f01fc571294b128d0cfde5e68472b8f6a0b3dd5f0c18b676e3a077df80cc7
SHA512 7b0a9de7a2fab1b969b469f7e7edde93b9ede530080f4090ca0066642ce6bba28023bdb8ac5bd85eae38d918549be7066981a08263a3fe2a657a5cec15c62487

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw51762cca646b94a7.tmp

MD5 bb66dd4c715754bfa99abbcbee3a4449
SHA1 21a9bef9112c1a614bf3d5f6eb2d2f0f17b58531
SHA256 55804126146c7c575add104eec386f161672cb740e765eaaf7ec8707a7cd2af6
SHA512 aa3b8ec6c34ce2d162783595ff3902cc1e8812ead15f2e723feb82fb0202f654d7e1138e4b3f83c7cc0204e15c41a34ad0b1d07fd3bfa609e97c01241271d136

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw71ee596fe1bf0f88.tmp

MD5 4228b8901e130b70052da8562dc7b5b9
SHA1 5007d4da77465c38d66689312418acbef9c7aace
SHA256 67f4d89f85a61b18ac1f5d6d04f625d64bedb252c219ff9785cd1508876bc718
SHA512 cb42b5a184fe08df207ac391c3e87d44dba15008efe2caaa0774439e8f7df2ec35f63e981d080fdb8fe2f46e8a43ff58a332d6cd241313ce419fa2ea0ac2f40e

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\asw4b46e4e214dac868.tmp

MD5 cd3ab89fadee9d9ab307f55390798102
SHA1 7f5646953d2a90c1033cfee8d2e6d394b05d0a5b
SHA256 915c296fabf88b9e3b43b5a570a6e8e642071678ac443c555f6e95bee7925bc5
SHA512 5b68fbe6456897695fdbc683dd703c286531e831fa3039ba19bc376ac5f363cd0588a815156b18139b82e64ae5c9d87bee025805658005e46d3fce915a9f332e

C:\Program Files\Avast Software\Avast\x86\avast.local_vc142.crt\aswbe1d9718f00d0379.tmp

MD5 b685358b3d0f37b68a24a6862f2ab63c
SHA1 b98d6706b7c922a2c93a75280e599361502697d1
SHA256 7cf73e4f69b3dfd89f3b24167f2f421b17537f3a4e707c63c675457b4fbf850b
SHA512 965580bfab334a217625e64dc5ab8622dcd18e5377453252b0c40c8e171040411a8916145f98e1bbe7476ad140562ea52ba148bf584d3389a07c2654d122e9b4

C:\Program Files\Avast Software\Avast\asw840d7c9b862d2ef7.tmp

MD5 cd97b86463a7755aa6902a18625993b4
SHA1 3cc6675550719994b237635a62d0874d4f3d604d
SHA256 05f3d04060880d09a4c4f03fa8a17cf15b04e9f7f764fa346e11ce4e98d2b777
SHA512 c454dccc466e10a10ffb7161398eec473b70336527063a18e353ab25a5d7a2576176c2af2a7096c47cb98acd826fadc0bf6c1e0e6b7cf7421528c8be07d00a35

C:\Program Files\Avast Software\Avast\asw16040a730c76edef.tmp

MD5 e0f0d9c1ea05cac4bfbbe7c2247aa61f
SHA1 ac73392983afb5a55c245c79b55d5506db6fe8c8
SHA256 f0e82a2f1290346217138b3d892cd916d8ca69855f63977d9561f5278d350332
SHA512 bbf3d0db25821381ece3cfa161447513f28c2ffbf107ff6c8752cf61cbe2c497d7e5c154533a35da95505472dc475ce83ac89baff5762ef9cae7d83c89b14ce3

C:\Program Files\Avast Software\Avast\asw5536f1c677d8f7d6.tmp

MD5 575634e4b6719eb8600605a31c32750f
SHA1 f327886d113db53d209d9896f0cc8df1f0295efb
SHA256 9e6d05d9b6d8bbe66c647a1f07b3be2234f070c9938a10724dca1ce3fc05ec12
SHA512 0da85512e6ac5673e51ef32e4e95a60416c80f76c4612194878f64b6a70ff3c026717c0708480d6141f4ffd8c881157e67ce703936ac5529d2bc225909f00e5a

C:\Program Files\Avast Software\Avast\asw43c74b56efa1254e.tmp

MD5 cad16fe5795c362b05905bed436b5e1f
SHA1 20b845f469e94e533b545bfe05fe5ede0a3fe32a
SHA256 706583f44a797afc17d2c394eb792a33f2aab0829a1f5867cc36fd94f00dcb74
SHA512 b2b1ebda861ee710700bca22c38ae33043717036c3cc07a236670b6c9c2f006a20b28c2eb98c4151259bbb670ce159e3d346a0854f73fe37ac1124487c29aced

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswba90e6faf6927399.tmp

MD5 268036dfa28320d2186b9b21631d443d
SHA1 96fa44f2214af9ede1160e043c7cd31b890b437a
SHA256 edb3ff7cef28496d535e40769625e542dd3e13110c38ce2e3dc1caa8687b892a
SHA512 99ce4bc5798320dd7f736725eb85a98553e277ab93353e1675fb7842bd258bb408a5df7bc530a161d91c1eccfcb510138f98085a80e892c3f54e2e8a723bb841

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswf53bda52dc49ee36.tmp

MD5 9410ee0771ff1c2007d9087a8c316a4b
SHA1 3f31b301b5a99a13486ddec08d25646d5ad510db
SHA256 e4e85eea1106d361923995e53a0b961a28d4fb58555f40945003f35e5bf2c273
SHA512 434a32ca6c4fdd8ffeb45d1bdb4d9f3c1b1259a1260ae66eb241f8bd63524cd1a3ec29d5eefa2d2f266dd740273e69b6bb8a7771badb77e781dc789dc18de2c9

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw036f2975e7640cc3.tmp

MD5 699dd61122d91e80abdfcc396ce0ec10
SHA1 7b23a6562e78e1d4be2a16fc7044bdcea724855e
SHA256 f843cd00d9aff9a902dd7c98d6137639a10bd84904d81a085c28a3b29f8223c1
SHA512 2517e52f7f03580afd8f928c767d264033a191e831a78eed454ea35c9514c0f0df127f49a306088d766908af7880f713f5009c31ce6b0b1e4d0b67e49447bfff

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw599e8e32ac0fa9a1.tmp

MD5 22a66d8309244779b8a7f275a3ff5cbb
SHA1 195e58fec7a5d39fe7a6275dac37295777da1352
SHA256 aca79a9c1f6d664d99691fd0d3d84a8819993f784b2ff6d7baf8e8ab2e15e7b0
SHA512 b39eacf78b9b97d968e96e357725bd6cbad7592beef5e0e5b301189cc76847be49f8a5299a16d68bd5c1c2d0e86d5263f865b29b66df8360cb1d4725b7b00ac2

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw109dff158f36b523.tmp

MD5 932dcb8d7d06f4b89fc3915726c418b7
SHA1 33a1fdbfc3dfa0a1b7d2fa3b2e8bad8e8c71e961
SHA256 a73bd7d75f368ab2fe949dcddbb25cd5d5975ff9091761a01b98f5e26de543ee
SHA512 fa24b5f9a4192fbfe737506899dc052c51f48980992cbdda878deef01ed0280ca455bed0c813089503da3ccac92a0289dd8fdfe64cbf6babdf70d7bab531540d

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw3bd2597ce4b7a6c9.tmp

MD5 0f4e5f6c68c514e63c4cdae9eb9e40f5
SHA1 b755c91cb14e9f22c690209d0b4c3661ab20770d
SHA256 945225e01a65e5199aa7372b893da3b42dbd99f315c345f0e7c136af88e897ef
SHA512 8962e7f92446c535151b38a7e34bacbfb9f0f48ab57d4c2c8f2162dc2f1cd9f15be70742032192b41aa368c97a149e1e6fa6991e29077b7b7d7c1708f1a54f9b

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw462483e7019abfd4.tmp

MD5 f9c7a19dfc5fa60b1405c81208bd959b
SHA1 4eb70df0a412d79fbd8011fa17ef815e10189c0d
SHA256 2f9cdd965650440cebaf2349140a7dde9b587829b7753de8cd051933a777f499
SHA512 2ea1e4d7d63af427a0c764b4a9a646421dac1f1eba15c1d43bd040b284fc611c8059d889c48edfca56e745abb996939d8f430ff3e249a5c6455e81b520307a55

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw9d73cd72277c36d4.tmp

MD5 718e5c4a63d2f941eeb1b4e9d6d85a8c
SHA1 deca5196d35d43c7abb35d9ad4b0ac0756585fd9
SHA256 f3117e3445945a872a35e91371e2a6c9f7b3fa5e74e5985f6ab12ac101b280fe
SHA512 61694ff307bcf3869dc14dac45e74b0cdd5a661d40e8483cfe96debe4727ec45ceef867d18e972d25a6b294c43ba0569562392b6752e068f2ba7c15407fad975

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw8c2249e773efecad.tmp

MD5 11d5d26552c1730ccc440f13a1fce188
SHA1 4c534eb613cb05455809b6471d38e1e0976aa919
SHA256 edfbcb2ced712f23842525cb076ee2c09cc7b811a389cf37922d04ef1985e10f
SHA512 2428c4257ac8349035ebb286dec236a25acdbf23178aaa80fd5461b2ed3101c0a67574bf7db8728d0c101d92f45dc72e7bc578049d5b18fac367bdfb44ecfbf2

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswa335e41d0105255d.tmp

MD5 ebf8072a3c5c586979313f76e503aabf
SHA1 2fd9609f099a8f42b1b7ae40ad35be1569c0390e
SHA256 a030dc2dfd2eca28a9375c92989adf4daf161f988db5e16b9e10678eb0dff4c7
SHA512 438c2db953606818b843e42c04240d510b5e398617e8e5539498264f93cf1893ae9a6b6b02ee35b169ae60b0e3b5621d7d9f7e2945d0f1e7c2e7e0c1e9e3c1de

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw00c3008cf96e7cf6.tmp

MD5 e6d7ff1c7c1311a9011f1039639adc3d
SHA1 d47faf7b6f8af8ed67546e75693200d022ebeccd
SHA256 993af3de5e1fe2e3d0954cf06254fabb91a5a3aa513183fe0841b897eafdaeee
SHA512 35eae324dc30a6bf652cf571daefa8d34d12c09361b248d8931ce721940347ed50a2d51222adaa655abbf9c5a0ab58d57cd91cb1cb26dabd487ed721790378eb

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw14fbbf3a8a82dc3f.tmp

MD5 0307284d59b87eb2a10219270ebb2f4f
SHA1 a0c911ad793223f3274097afaea112081246853b
SHA256 1621c35f57a6202245b8b06468fc1cb2ef20de75cc2ae110819eb753607146b5
SHA512 b33ed63d6d928a2345310f9d2aeac50d3d2a55179c8cd79bc7dcd2a7c5ae9a1425af354654f613715bc2aba836108986daff83651208b437345071e2bedb7bcf

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw3636d0e2c2fa6798.tmp

MD5 7b7f4484966036ff86a7e4cd303d3871
SHA1 18a789e9d1e9df0fdf22e94d71a18c483cdeb611
SHA256 7d3d88332d4744c9b6be81e2ba8d42ced7657ce7879a26f5b8a8d3bb2331ada0
SHA512 39e986994a99361fadcccbf5bd861ce9c4c6de65ce5e3da4d390b234fff34d7c561637ec012ccdb2757794adc222bc80de19a60a8917fe65fc221fdb3054149c

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw380aaa7db8be7958.tmp

MD5 6aa7b1323c5d8e314f2fb42f855e9b12
SHA1 044cd0167de5e9c1b014e07287c90473c96944a5
SHA256 9c5880c395b4e7db4b8d6de49c75909abdaeeef0b041c1703c7339b05d7d2866
SHA512 e99a14c8772662dbabcaa504bc61ef616590bb6f7384adf8ae0637e0a365f94c67fe4222b978605b7a2eeeaa62505e57c32857b17b51f4b2e9a0d8a033f0a204

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw2d39bd748d362caf.tmp

MD5 d7164ae82b7332432bf2eb7fc7774e72
SHA1 221d79c77a8a80068621a0eb8688ddb86224408c
SHA256 08d811ff57efe50d9f365c76ec29e095474e0679e06bb4d0d4d0134b0120b40d
SHA512 d1a4cfc0a21509382606f4650a67556b0616283231e71bb1870ccaa5deba42fd77583c3130d60d632e98f5acc4763f57a2ed932aa2eeef49601618761acd9429

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswe39b339365526488.tmp

MD5 58a8c2d2404ad7bf6fca8bdfbb8a5b3b
SHA1 6e834364437bfd23b48e66d8d891966860528d08
SHA256 eb7851e182a4675bb34633869938ff3579779a92a6c094194efbc970f3765dcc
SHA512 d44e3b47dabd29621a3fadaed16074a46b646e1190ffcfffb7ec835b8cd6eefac88570812e41a490daae485a1d71fb2d035c91e73b65c2fbde649fda8733ceb9

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw8489b77ebd77be13.tmp

MD5 80e80532239aa8929ec0fddedb7aa8af
SHA1 312e743535e66735d782cbaffacf94c6c791edab
SHA256 d3641bbaeaa5a7e7d4ee0ee0ec64ccee0327cfba3d10b89094144eb70a0867a9
SHA512 87e7a5496bb2dfb9bed4e9b9913db2656b335b916eb1277ebebc33ac9d6622bed50a22293dcc02193f846be5e0b4b0f032dfbcc673955aa90f04cf81b47a9305

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw6cc81597dc2f2013.tmp

MD5 dc3fe259a9b778480c2405fdd7405c9c
SHA1 d28a588217738af932fc43b809add215eb932856
SHA256 b33a762f0eb072033044e7ee89505b695f357c958d4107ce6f1c4d68f88d3277
SHA512 54f58f5a0d1aecfb9a6c8f12b5aac30e26ec427dccc097f8015d690a0a2244603e80810c19fb8eb2ee7ae9122d14829b3aaa81c69c77b6b4c5751d040c3849f7

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw67cb8af8ad5ee20c.tmp

MD5 533b418afd2ef8e423f42d414cdaf5ef
SHA1 09d3a595bad8f0e7ab5604fc02ef832d11a26b88
SHA256 66f910721f4477ea238603e5c14c858d1e26fc2ceaab3b48294cac069790202c
SHA512 eb73c82a91ce67f8d0265ac4f0739849e5696ec0069ab6508660368b8d382a230dc88eeb89aacf8bc9fc6b7e31c009521fdeeb979f4ebe6e80cfec083129ccf1

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw46adf8313e62c35f.tmp

MD5 4847091828ad3b0734418343c712cffe
SHA1 24e69b32dba65631b92493b7aabd68d141cf21e3
SHA256 d9388848ebfe27138998518332bb507e5dbeb1d8851e9ed0300f15e14b6958c2
SHA512 5e8061cc226f3471e3964c04cdc5fbd3a607c9abd22a11a1e818eaec42b20ae873fa80cfce7f47b8f8844f3127ce98282c737f25666d20ded47704e0db6f29e3

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw1e69048c14f10462.tmp

MD5 bf69d049653e504a7a1f8b55a6dde7bc
SHA1 737a1cbf1fddc0ae93a0a99d2feddd474f4b85bf
SHA256 e6e839c6d205f91adaa3d980f843bab3131b8a25e06d152d0f70a6e98fbe0fb0
SHA512 a8d834d46fcaf03aa53bd48b4cec816e0fd599b06b16a14006e402bfaa5a470f47dc6a55c1a94314d635af55ff2322eb242b0c535a02fc830dac83e375adc6a2

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw986b3bcfe864bbd8.tmp

MD5 152925be0e3a0ff77b0979bcae7a7583
SHA1 4ac4bb649b42893a8d5ba345a1c92ab2ddd1ddde
SHA256 2e23b53441ba6b0779b222c120d44eb9a156d55cc3648f76216017ef06f9a16f
SHA512 17b41057b82b1eb037a59715970496d402ac00a59fcbe67245203f117fc38f1b7e7f5b78872850ac4fd7a5dcf4a3ec561dfdb3fb0e827ec7043978b535e9ee26

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw3f6cb3a8e2495754.tmp

MD5 374d505ced3719d875ac316ce365b1d5
SHA1 24da4d65eb7a9116c626bf16c3bc95b563f10176
SHA256 1edf013e890072987b8957b77baecc37140bc01581e5de6b020ae454bb57f8bf
SHA512 d9b82d1679afd85c660ea985d6f57cc13fd35b4d7b8104c6d9ce1f182789b615a573b68d5f1da6c25682cb35068ae0aad3c1c9b4509f339fa1a83a9eeb7f74ca

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswc35d2183501d6528.tmp

MD5 e4fcbf91666504c1eb70644dc4c5f479
SHA1 bf96622c082eec928920a052bff477cb0c9e0573
SHA256 58d9a9b2442c10140db98ba705e8c7b7b9ac5a2c030d3286a66debf63b615c1b
SHA512 9dd34f36144010b3c1400ed1b1db8ac8e97997a0d2c803858abeaca75e26d19dc56512714b566edee581ca20c813c3cafd47a3f774a1596b31e23208b1eee4f5

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw5009dc8ae015ed2f.tmp

MD5 6e245fdd89bb6f88f56784adbdca0b0a
SHA1 9ac5d68ff969f984f74e6a8cded8e683b98ffa36
SHA256 0e195a8d013a329a06df877a4569a3ec772f112ad29295f086c6d3e53f322fb5
SHA512 601248c38540dcbddd61fd26203df39ef5d450827570f01cdf0e415873e098913d82ca6e3c7b21a9bcae267b4cb67e970237cbd1c6320b8ffab58c9fb675a3cd

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswc3b86e514116026c.tmp

MD5 b9d80efa3f5b0b75c523d4ced4da1fd2
SHA1 f493358454a273d0ddc6467c9ad82bf460dcebc2
SHA256 44ebde7f2681c0b8518e55ca242261b24f326994f089a4ef6c060f8dda04d62d
SHA512 d597c0e7c5309b9631966b01fff7e166c0dd0fc9d63534d588d47f9deee593cb2cf79cd490145aefd472b9493dd65144e875d5870742c8d09fa4c7d459259feb

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswde08f807d8b4964a.tmp

MD5 d91e6c55a2304aa59d24e76f34884535
SHA1 04ebc0bc4932c09c3dc7d9259fe7c9a6166b7233
SHA256 8875816a3809753c04acd961244608e9a47127523c1d5e50cddbd83a4627821c
SHA512 19c1e2458c5475de2b41013fb18dcf3d149c88c0b3816596b67c90f7bdced3d5214fea97dc3782f56f8a276f93fd28cf519018257bf432c00435ef6bae60a8b9

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw9dbbc2d645d148a2.tmp

MD5 70f8acde94e2c3952b7ba7f56a4ebfb4
SHA1 955064391f0c9b41362cddbff7a070ab3888ad3e
SHA256 91decddc6e80d742755a1f65261d10c3c0d059aaea6389bb2da6fd3aa7ec5289
SHA512 71087a283d560f08e43b1a183258f1153ab5091d5d318cf4ee0fc8385285592c377d8e68a0f06d3f0be84202aad6dc7376b56057e23b6b3753a445323580f287

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw017c4cf5f214a6c8.tmp

MD5 177009944ea3860b58c09da1871db999
SHA1 01cf9cab3aec3a1ea89111269f8cb036e73916d6
SHA256 f353bfe02e30f4fd5cdc89bd7f44703257f229a09f0d815d7794df902f67d1a1
SHA512 279d1e663ecc151dd2dd15462191ef41e668c7a2bfcb7930b8d568facf7695a030948c3af7f9907226b00dede255a7f30169083ae2ce544f2381548db31c9981

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw51165dd5cea445c2.tmp

MD5 5dedf9f86ba1366d9e920f33eb03721c
SHA1 605312ce6d623889a1d404354ee653414a7e4920
SHA256 0ced53f1ac2adc9525047d2c2a7592300dc48a5f52ad8b740ce22e3f3aad85ff
SHA512 bed8c7a74e57f4cd44bd0edbc1bbb1f528ce261d7ad6a5545c33974c223ba910d648f0cbea8bf0736deb5aedd3b257f373cbbc4f9765d12c56a78e823d05d4b0

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswf02eb594063a5849.tmp

MD5 afc4db1ae7eb74d1b43eda3d7ea5b43c
SHA1 f31b2c1161024ec2f89c72631631e11fd5ceac60
SHA256 fb4b382e2dfa80b3427a98c51d3270b1e80b5c2a10fdae1a72b7c464e57fc6a7
SHA512 a014e4bbe207fd707a87aaa0228241fa7c414062af8922f51e46210b958284096357b21f89e59141fef28039a999dc6ac832ec7fc38bc4895e88fbed6b9a45a0

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw50a02809d27eb692.tmp

MD5 1862f49d5c2ba7c2bbc78bc517cb0b38
SHA1 dbdca39d6d9d166f9cb5b8855d456653419136c2
SHA256 90ba9da43d6705d76905e630505bd1fd097d1899c9bca3241ad0de5ab08ee366
SHA512 c9c85ec2851f5b793de07e672365e6db28f1150ed6b6057d15be828a36029f4ba9e0d4cce12c7d424da4c94713c18ae256d9ecba9e59ab88af639adf56ed6a3b

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw617c732d04f87943.tmp

MD5 57745a06849d90cd5c79ccbec559e7b5
SHA1 71d3d3c0998e648ef6b061f7c65850c6a2a8593e
SHA256 890dbb72c4c35266bd658c663c1242cfa3b50cf51e2873e986b7ab2e055af4a4
SHA512 ca28053575e40eb805f366a7363257b3d40a6fa8ef46ffb5b58ff17cfb0ea2668f5cdf2661355e94866b73b914950c09940f5c32fef5f9a22439932e35391dca

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw799781fd5f79f135.tmp

MD5 948e3c479e87ad905a3689bc94cbf86b
SHA1 c9b2dcc45feb9b0bcd52122b51adf98d7fa5b0e5
SHA256 982fcc32d7614cb921cc5203970e3997a33b31aa1d91f14db5db25a582dcc3af
SHA512 6f15478ba5e7b403580b4b52924866e52adcd112d82900dd17a2ce67efa10306a5a86e1ba5cab76bbe3577e2497b83adafd6cf6c39a81c35b53b528e8bf6b440

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswba6f695e267a7d43.tmp

MD5 31f60bf9a22a86cb8879fce5c1022254
SHA1 23cdaa4d6ae0e953d083b968558a2af49bf95a4f
SHA256 53afac76a7124a132a7c11261f3b6ba8d6a5466e7e8f683c8d12ac370b7d6b62
SHA512 c41ebb39cc0939b38d788b692e75c10c78a806cc8844d8526ff25869777eefd086518cfd817ebb700e20b3937401d6c0f7f506bcd479fafe1b801507376f4ba6

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw861f01ad5a7cd864.tmp

MD5 9ac788a87032640e046f305413585503
SHA1 41b74cecf0f78134204dd3d8aaddfae34d6aacbb
SHA256 363825adb27d5a5bd249fe58460a977077f823e50dac7509e124fcbac1512128
SHA512 cc725796af3f7793ce6e6faa96a201ebf5e77ed00dfac3211a66a95ee071e559c9efb8e47ae0287d9cc1feded559000a582a2138736ab8c628325428c78e648c

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw979b31e35e54081e.tmp

MD5 772d6c07e47e77a4479c7a9eccfeac4d
SHA1 b88db71fc80eb57182db6dc6ac00b022e1e47cb3
SHA256 2c9a8f8d47b49d04a82e8e689ae9f6552482b1861eb8398f3733e97327191c2a
SHA512 f87bb803e818372f57319af97227834673cce9988c81ffd4a3d1c6d7038c6f7398e06a7133a17f063cae152ad27666a6d18f87ed77bb46dbe141c1272bc3ac84

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswcd7ca9d4beb72dff.tmp

MD5 9ad2e67f2b1f04b760deb00b889fab53
SHA1 465314c9bdd359840f7da11a619ad0b409c271d8
SHA256 5662035361e37f6c5e4a5a19de134df2ec20bd4c0f1be803203b37c95ee61265
SHA512 cdb358848d48cd3913e7249eaa45470bee4ba9f9d92d975215018477a57db930c16b349541da2d82a2f9131220ec3b3cf9ff471ca411c2f705bfe916e8736be5

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswd52f3e9adbdfcf62.tmp

MD5 714e850aa29e808568933c5ed8c7df5a
SHA1 ad84833bcac69b5217705e1c4d33d54c856525e1
SHA256 4a244eea4596ebde0f9094cc6dfeeb5abb3c4385225bb0630ef55a431fe1c4f2
SHA512 3a220ad4e2fd49f40f7fe5fdfc53608b114661f31993c0329e993c5d733b6d6f3a366eb46f93aaa9d5cad90766b21d85e5ccd09cb9c5ab905118d70702a3ed11

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswb901376877212dc6.tmp

MD5 d4bad006e413ace7d729b1249c49b92f
SHA1 cf0dff1b371316c8517619fdeff81c583268bad3
SHA256 245d48bfce5cf6e9c5093e995d6ab5988e2401d32530fd6863bd5f8fd688d780
SHA512 d1a5001633f1cce60db2687da28706f66644613672fa8487b065e3aa8d77ddcc96d9272c665d894b243e222e1c104be10be1dff8e5d007490e50f2bd2a708d0f

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw2075c9440e770718.tmp

MD5 6337654372aa9adf6a8fc97d9676a33d
SHA1 b790f4828e7aa18cd0eae77e78c67ddd66f3ec5e
SHA256 6fc551cfbcaa0f90ed24dd09fa117e9fb3b6755a3fc0251d33ca64862a9a3414
SHA512 4a888d71747c64cb4a964d8df956c5ed9e3de9e8cf30d804e3ba76e8c35502e1802423ce527a419935b0d8c8e4c0f6168657b2734ab79d01afc946521a88d528

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw250d7f49932d2391.tmp

MD5 d8999e328af5ee1eb23c216336637cb7
SHA1 a7bde6c833e4d6ddefcc4050997b1583ff1ffa42
SHA256 4ea02b683513a157e21824b1c1e9ebb782d22f14209b67961f97b1f79673d3ed
SHA512 4f041ed2daf781b7f86b4459e74330650b2687ee46dfb961ed7a0716ac7ad2082a631cb619cc6d3c7d19f550bc030553b9656aeba14f969dd52df0b40a0e418f

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw8c556a477ac9e69e.tmp

MD5 892e47390f34aac7d20afe63ffa92f20
SHA1 4a78a77ae1d5bdba55534167f781a3c8675c7ed3
SHA256 6070ffb5e20ed032d460d323df981d369fa68045fab130fd100803a00ab88c23
SHA512 8b37866ebdca5047673d984bd779b1df052e3d44e3fabc3a4ce2e747489baa2bd86add629d95c76cf08150f74281d89d46372ef64266b90304cf7dd581af3a93

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw80e84b8c8646bdbf.tmp

MD5 1902b85a588178857e9637902e5a1b85
SHA1 31ae4cf76a34ccbd92fdbe60bee080998741ef4d
SHA256 5e48c99dd6318b017686bde507cdcb9d6ecf25f4f78f345845b865e443f1ee66
SHA512 0755e9c0adc9e374060c851d4f7fa62633ec07dde0bbfd56ffc9bc8ecff5b9efd6fa8418c43e838770eed43a54a48fd61a41226d9ea84834275a4a36c7796472

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw899500f2409f6413.tmp

MD5 7f0ef1cf592d04b082b65f75584652cd
SHA1 f7b9a2851a66a6a8eb509f2541b6ccc3b551f2fa
SHA256 9f496e181b1c862c7a7d03c09d9b0a5361535c98acbb1a9d50a27bcfb0a2bcc5
SHA512 30d2d695773e7bfd67de8691c40e571b3b91858e72eab3d78c84902b359108e9988247bf81689ab15fef6ed0a9ef62031f1937c6e7ce4ce8e1a34970ba23e727

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswace20843e2b1ba70.tmp

MD5 e334f2fe1e0e6d5d6966f139ed328d97
SHA1 68b2cd826f3dfa59531397ebb3f382dec9af5fe5
SHA256 d56eae93c55abdc8eb77d132777049634e28a9b59fd4b2101d51351546b984d1
SHA512 fb6ee02f06447c906a4353d93ce247e14a9a1ea4255819a88e395afe2e3775fe3aeb622b7a97d86086d88c739ba4d2e2fba9e8fd6467e167fc75d595c9182327

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswb7a270cc6e294135.tmp

MD5 817f9a76b7eadc1226b006ccbdd38a11
SHA1 8b81897cdd4d48befa389c1df2d0b887ffeb58cb
SHA256 99ed148ffbb35829480412dc64da6ad24dfabe2f9a0eff9ba1493455d7127677
SHA512 53d8b2561862c6b2465665d761612aaa8b7adc887058260fbf970aac0fb006317283ada01468b1e042fd9dd44def90451793afee297ed787086645cebce45cd2

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw68529d8f99840e22.tmp

MD5 9fa3992f5dac5ea5dfa15b9669c68154
SHA1 a453fb6c4064da8c01ad03a4ea3c0434efe82635
SHA256 9057131f628e547c14754d545140ad6544e64606358104da50841e9a1b03f442
SHA512 ad73f3952dda55cfaa6a0d6a0233df785650f5965caa4859b6c1577e3fbd6020e60b4b26338387690cc48b16a186d2b530708a71d2671ab17ee8904399de292f

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswf6fba08c57714e35.tmp

MD5 059129bae1776f03c59d3ba66a6f6dee
SHA1 33b1dbcaba1d16eaf5413f1378119cecc1298724
SHA256 a83af0f79abb5e5c818c6f38a38da80e531081f3255cb006ed4c29635cc0b9ce
SHA512 6a7da7e58620bc1ce4b6d3cab1e0b746fc9fcf05a84d85931f845412301880786fbc63b31611d9442b5a1cfa72558966375ef14edc749473e2b7c988dd20b675

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswa4bd174bdd94df95.tmp

MD5 607703b245d9b4fc69a8b5363ff626fa
SHA1 dcf4626787ea220b19e08cc5bf9e55553a3a2aef
SHA256 f65b1b3ea2767f98f0c29118e85b06f4e61654bec34b60b3abb593b24ec29af4
SHA512 92d761f733f2c678946894ca72459b0e6dc62cd3abe1073653104689ab48c19603e6e1109c07b2f110822b424430f22d112f87c629b99d0b3ccc16e179549628

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswec2802bda26ca701.tmp

MD5 2b4a3a51e075ab9819c6d6bc40efb4b5
SHA1 bc52c10ded8b087c73229dc2f98714b5a368f521
SHA256 d718e1b6c352112c2f8e36b4ba5ed28e6179257fd2fe944c4a0d404b5c15b5ae
SHA512 13b07dc2247d51dad1ab9bc7df93e0d3e1bd6cc4fd16f9aff87ceffd40a56933d569a5fb82177dea7b6ea04ebf9f909f95451d123126155a13de6a85f747c592

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswcbf5ea44a7193a1f.tmp

MD5 6b33e6f1d77cec0901ea8e91473bc18b
SHA1 a397d2c6aead0b3e57d413a8d4af7f28e67f4166
SHA256 449631a3f5fadef72acc2c2f84765208d0ca014ec1fe93fb9ad805eec1d40eae
SHA512 8f5214e38202719f6a7549b2b97ad24288974cfb6cf0da1e9eec5b3b2092220f2330a260b17e28afa90b90226666a765a4e64fe91107e2063cde8e285f64773b

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\asw01f471d0c44406af.tmp

MD5 0909e61c8c9c717976828f65c987e5f9
SHA1 b5affabb8afda55ebb1f404edab69c6c239affe6
SHA256 03ffdb036329a25beacf905d62611a13e3dfdda6cbd2d13af830258e8cf40ec0
SHA512 7f78746e40da64631c08d0e173fbdeb40beed180932b42382d9f3ac0cdb4348d2a5b1c29770bb98f5d4823cfd66ecac2285afbcaf109f82c8b75c7711f10c49d

C:\Program Files\Avast Software\Avast\setup\asw3c9a16595fb272ce.tmp

MD5 da251273f6b395c3643553d138013014
SHA1 6aa71a8e73ce5fe1a06ea5da769f37df1543d0ce
SHA256 ccf508b092e866ecb3c4487c832390ba8fd257d45e5b8ba8fad688c59ecac3a2
SHA512 1ce7ab315049c37f1d7a3e361f464bc2453a4c5892b4ddee209e633d0c9114703deafc90493abffdb42534343da08231886d7411e5878a6ebd37d602b3a5de2d

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswf069e603aedd11b0.tmp

MD5 435d3672b43346f116311d3e8e7576b0
SHA1 bc5b610380b47027c0ee3fdd68a8a5a1d0689381
SHA256 d21af7ed8261babd9ea5fc7f117c0c13e729947d30331ba90c48ea2cb083829e
SHA512 b449a2ce90ee47487fc6788a0c7e6b55b151a1a971a7f8e86d47d7d71dba1d7447f0a11fa30a52456dbcb5536729d14e6b8b9e26d566489ebb6022eb2907d812

C:\Program Files\Avast Software\Avast\asw48604b43d641d892.tmp

MD5 7cefa19bb1eaa218e139641afe5f7ebb
SHA1 a7e9779e8638eb304f6ed251c598bd49d050bc2c
SHA256 1e7fef380e3b0a873ec4f19e089af82d40e1999163f4018c316e93efd725a8cd
SHA512 0336c0984f01fc432442a12a5d3084dfb05c9b1e44a253d1073288cfd5ce0da4a0841ca6989047697107d553d7a04f354a6898f1d00f2f7efd6469dd50a49f1c

C:\Program Files\Avast Software\Avast\aswfefdf7ef2df91085.tmp

MD5 399885827cc1cb81e485431caaeb0fbb
SHA1 96bebd240762a5536af04ac37dae1a82d73f2658
SHA256 02232e09661519c0931e3a02acf07967b52c0ded9be793791783332603250e3a
SHA512 967cbe4abe8e96e85176b21cf27b4e25f0467e727121e9753d74aae633161e47876f5aabcffaa79f6bfa39c9080f452254d2e0d08435d45d701975d76e930ac3

C:\Program Files\Avast Software\Avast\asw2e960f6578583621.tmp

MD5 dfc15ec9eb85bb7e2c5d39a58f1f374c
SHA1 1618e40e19660cd9a53e4f62fcb66743d57dfb5d
SHA256 4ef152ecdcab533041843a166965f8ffccc3b39d93fdb1e909fa3d642a5caffc
SHA512 1215135da30d586a5acfbd08e20803ee19e216a69cce2bb0ca095270b4e47897a584dc8985fa27039ec316220f316c35425cc69f320de6d40b292dadd0e065c9

C:\Program Files\Avast Software\Avast\asw7359b899c25df9e9.tmp

MD5 9c43d3f6174b3806d4f372e016bae1b1
SHA1 bcf979321b70323f3966dc35f6566f8f07c67b23
SHA256 afffe501de3fbf6b319463239a9ea857bf736e433b5173d0d987339633c4c129
SHA512 9ca56ac21bd748fd36c7f36bb7cd1133dff45fa95fb34df08cc47e49ced818de8eb92f219454ec9bd0b3ab08479da188d510c634ef9246238803328612baeaa3

C:\Program Files\Avast Software\Avast\asw5f562a68550fb3f9.tmp

MD5 a861e191153b8b8eed5ef56f4f1a9f4c
SHA1 e48df0b43511cc97df008c521763c597eaf39281
SHA256 bf13ef093120320720bac740a0df7e2728897df53d385d8001cf709a9034b2f9
SHA512 5136c85c8a1067d1abbfa12702018c4a0d8a6b452983a63b455534d93ee338ed4136ae9710d0c7708f3ad65389407350e51337ec34b37e4a03dd9b667400bb88

C:\Program Files\Avast Software\Avast\asw24b8145613057b16.tmp

MD5 0fc6e8c9ae55ea778c7541595c541e23
SHA1 0241c18b7c7acab54d5d69542129a81fdc76ba2b
SHA256 15b8d7d0bb1c43c5448a604ebc97d58117b2c6d08d80939a35e486858736f1d6
SHA512 9ee658782ccbf2c21acd6700c1cb0df09f9e699384a18d2579adf3fe1e040e1df6bf40a78f0caecd80051374a32d2e3817022bf60feee1c20c3d334bd70903ea

C:\Program Files\Avast Software\Avast\aswc9c9123d0a839802.tmp

MD5 cc938a16799bb17cc194b3eeba31bd2e
SHA1 ef8a8828d5c94f72a2c5bc7ae4eed4e824a9483a
SHA256 ba34d0bcbacf2b4989bad0449a8a897fb36581cadcdf845ab70ef5fcdbb5724e
SHA512 728e5ed2c078153472bcc99c97329802e06877b99f59358f055599b4afc629a19f9db8c9e7070c05295f274b929c30d9e748ba64da4307b2f019f90eead10b65

C:\Program Files\Avast Software\Avast\asw9522e23c203bf11f.tmp

MD5 920a6dfbd2af24c5992ec6770b455d27
SHA1 99f036357146abaaf877cdb773d22f3aa710ea0b
SHA256 888036da1e31b2b49cc39bbffda4640896cc340a0d636e1907b3e832e63a2029
SHA512 42ecdfabf7f37e79072e5da4737bdc35893f04330dd2b5f0a413e8ed730d5c907ecc20a69812047987123da67c9a121bfa4e0b48e065558ddf1e8d14a34e1bc8

C:\Program Files\Avast Software\Avast\aswe707ff490b8e244c.tmp

MD5 08fdf736f85a37841bb9168c5c16a643
SHA1 fed3948e14d1f1c2067fb01df1b386daae993adf
SHA256 3d9cbf3f9f9c7df3f542f89e1da0fc2e53ad3b249a3a573fe2fc16310bf26491
SHA512 9bd9cd8fdfe21b55192d5f21ffe6aaf805db06fb4e8c1b12d7165fa52085d1650addd26bdee75b9a5bae0d85b086601485df9dd53a7257e9d45efca6acfd702c

C:\Program Files\Avast Software\Avast\asw70ce0c32d97f163a.tmp

MD5 04e591b85a8ed804cc05c720e49cc385
SHA1 fa9a691e883070b76498a10db34fc81b4736d19d
SHA256 684897ac7b4e73cd50bd4db3d7a77ffb2d05a6b2df88896d7762c04b6b685749
SHA512 4b98a5147d6d8b819f0b999908594aa7f9f96b3a2c1776cfb1c69b07c367e2d8e89e0d1f3985b6ab5b3d8cc4b464e24decda46674172085ac485fd53929e2d66

C:\Program Files\Avast Software\Avast\asw76d1231a3791401e.tmp

MD5 ccd086ed525f1a27e2ffa07825ebd6dd
SHA1 a0086711c74fd7b43efc4379c715b3882d0adf94
SHA256 4153f299e8ccece1b72b79a6ce05e813391779f16a46f4d99864e3999777aa12
SHA512 e694c56a14bc1ea6ef930dfb89cc0a125cd87db1310334c70c869bdee11ec34996dedb3e1aceeab32b14b7cfdff5fd50bd3b87ae0c416b8ba35d2a1a6dd4c3ab

C:\Program Files\Avast Software\Avast\aswcde94c2ffb3ddef9.tmp

MD5 1a146f3294ca8a4df2fc4ee9a7183eb4
SHA1 b2281448786393bbdb36672e10903d9463b158ae
SHA256 02be4625c80e015ef9243f2a3f071cc2b72e9776c08757b5a149e41ae98d4fad
SHA512 15e4bc625c59ff42c4f60073fd75ae1a5d5d135ebe5fdecec23060a01d8daee0d79a9987c75535fc5e117698f318f7eddbdf0e0e7103e01f6d866ac520708e6e

C:\Program Files\Avast Software\Avast\asw13d945fc8521cf46.tmp

MD5 1748d219223f4e4bbde216f6ac9b5923
SHA1 1db103c50c1114f5946456023432d8d6eda62f30
SHA256 e7168832c6cab2c58033857e76e34c5967247a1cd1fc8d54d10063b3689a96e9
SHA512 e3eff296f43bca69d0c51f7f4d75e4844ce241060bb04945a93851bdb32bc59ce13bfbb52502e35750e29b9766e86a2a0d774582e4f6c0cd69826c5c54f390cf

C:\Program Files\Avast Software\Avast\asw4817a2c0d77e2f9d.tmp

MD5 0b82e486d55b3ae49c59ddcd56dc1b46
SHA1 39601183e5a910952592c5173becfbd9131fdcb0
SHA256 28fd91763b9811327ac5e0827a7e7de02c545b7ee4d869e32b223d9a8bd5890c
SHA512 c3450b984f5637718076365d1365ba269e9168ab0779cc8e3896c3a8c8a5112e1df1bc6a21f077e820033766e2a97d8e4bdd410d40286dccde3fd25211c6687d

C:\Program Files\Avast Software\Avast\asw1bb4043135b697d0.tmp

MD5 dfb7b99c1eaef7fa8bac93f590a87975
SHA1 d675dd5984d43f52d82b71a81fe8e42c5722053c
SHA256 b4c71ddedb0ef2de2754145a2452f824f0045bb86bcd8f19e53bcb2095fb01ae
SHA512 5de623901c667f5ed4aec6e139973346b0d25636bb6dc14f267a2bc6f51b437ccafd8fa05c50724dc53b4fbf3de445dd30487b0886588805c2ba063c2fd864ca

C:\Program Files\Avast Software\Avast\asw8c44e7b5127796ad.tmp

MD5 06a5a49946a1b629de9e4f0fd1416419
SHA1 8ae4227264b57f931013df93b03212f0e1403607
SHA256 129a23c8a84f2e5561d9be2ce873b3bc451440f600c4569d812a9fba9207c6a1
SHA512 3e0fae007d5b9af08058708888f2cce395c7d24f9f192f303e4a6ff0ccfa3ced9763f3a507a592f1afc127c1115e7b93c3b822c632ec129216cd60b3fc2b098b

C:\Program Files\Avast Software\Avast\aswf1216eace5f5dabf.tmp

MD5 6e147b8be3b5a8c2f1af8ac8a12d0364
SHA1 388e30e10e86d0b82f18394dfb42d07e5cc644bf
SHA256 575040eda2f7bc4f9994d425f4bca3834842308ba1e148d46a6715119a06c5b8
SHA512 d155a0fc8181320b362c8a7a0b073bdd8d5e375d0ee66dc77bf46eb9b2c5db45bafbf7861c0b93a2ed1bb81dd739b64a26a4ad12eaab7ac16075399e7ea37ef3

C:\Program Files\Avast Software\Avast\asw0f5130d7fae88a7b.tmp

MD5 ede4eb3856ffa5b56ae7665a3f415a84
SHA1 49895900897a61b6b723ad9372677c77e0c8802f
SHA256 2533bcee27348d6d898a638e5cdbc931ef6b3716f45271f072c85e481cd95b34
SHA512 2c765ca004ff234e07eb0dc8b7db678eb7d767422bc4ac0ca1be67c281d985102dbb976bb07d6559d99618e80a6d280f84b4b717a31951c1be6c2b9a3e3e28dd

C:\Program Files\Avast Software\Avast\aswbf4c6d3022572671.tmp

MD5 7741a3a7790d976b9b2a428dc953866b
SHA1 c61396469d2a1bda9e28e5330fcdb7bda3e84626
SHA256 40954a74d1db46d7cbac9ce0d79202ca759414a755a3001172dcc7cd724b0b0d
SHA512 ae9bd15ce12cf9d02f3b789868087bf6a9f040158c03cbfc2e4c07b4ac5e6aa624246bddb89e707a2fc274ec0d55ccece89420f9e2c55afd26543b4af4e5312d

C:\Program Files\Avast Software\Avast\asw1432c099498cd805.tmp

MD5 4a9682dc6f6ff9748b34b9f11df72804
SHA1 66d81c735947296b1243d1f222f9d869107001c8
SHA256 838551e19235f390bd50de79d1aeadaafeb5fa4adf5b21419983358b4d575153
SHA512 25d4f664403b4605e02186937ed415eac33973fcb75c71590bd38dddc81e4b00482b187f96b2592a04996efd9249fb2f47d2ebf325913a9c6aa55a88982d3516

C:\Program Files\Avast Software\Avast\asw2d2a27c92ce2fd10.tmp

MD5 07dd5db27a6d97a1a99167cda99f7a04
SHA1 863a8ec52f50992fda55843096bd058d7da855c4
SHA256 6a83b4cd08726387f5693ae37eb796b3feed1e8aae1b771a5ffb3358073bca47
SHA512 8ddb9b0f6a55f9d802e6013290f545abde03c8fce84dc521f8832bcc8ebe8b9b75a34de5fc723dac5228a7f6d803b33f0a139ea8b1ce5dae601776a3ab980ac8

C:\Program Files\Avast Software\Avast\asweff97681b9bfb900.tmp

MD5 5ba6c58a4eb27474316be6f8a1b7c254
SHA1 3afd8b5001cef1a4b8bfc3aefbeb0d37f0e96d98
SHA256 f2409645e9d25e61df9b9efb8a90c1ba4fd50990c6125436bc0a333f3655b8f7
SHA512 48cc4a8c7c434309dbc35581c1d8e742a7ff5432c9b39486abd256e92326b28e2bcecb4b6e349df4fa59b6288308d6c817239fa1179804d7460ac100f94d5d29

C:\Program Files\Avast Software\Avast\aswbeaafa43ce8d9aa4.tmp

MD5 6d9f6a074a65657550b62f1a76f454e1
SHA1 69f734478e3f313970288b758c625c425b0a5dca
SHA256 c4c216443bce20df3d42788f9ffa6660894f1faea9b30175b24405946c275d94
SHA512 94d9d92fa3b7e942eb0f6be264abc22ae06f62195687a5e29818db2fab10249c1040c3ea17f95ef9ef4c8018e663011945124052a7ae4da7bae6e14d6de51160

C:\Program Files\Avast Software\Avast\aswe92227095db4fe0f.tmp

MD5 ea0c502c32be1eaf2c9f7a27936320de
SHA1 2f5b51481db4d3244e665f8b0d5af2b3330a8ecc
SHA256 e6f8178f05ee34a900dd236beba7de703d0fcd448f55bd3567fb95008feffe3c
SHA512 4edd468b9b1a395e4b35054bd4f7fdae17614aad0ec169f786e4b4540a9a1aaea7f8a17cef4497a760f5eca9d07b9154ac3554c40c337c6ba78d66b6c4c14dec

C:\Program Files\Avast Software\Avast\asw92219d74b7f94438.tmp

MD5 36cf3e3224e251a554df5d4f607922c9
SHA1 343fe0754bc96d9b56e088e36202ee4d57ac0dc3
SHA256 555971b247c05507458177c4fd8f4ea08f486d30d9e1d43ae159ac01821878a4
SHA512 4faec471733d2900c72e857c32d1716372329cb795af3ffc307ad02f3b58a200a54ebbc037c98424861a7da89248e5cdb5b32cc21d2ae9c7beb264282cdeb8c5

C:\Program Files\Avast Software\Avast\asw4acd104bcf12120b.tmp

MD5 dc601cfec79a1f747ac5b41ff8a2e8d4
SHA1 e7ad66c192a20b6297b27491bee222f965fbb8bc
SHA256 24e15e5cd9000c1e8ca1a60a224a8b1b965890e49eececbd35fb9d6d096de649
SHA512 d5c09c9e7fd118c29ca1ba713a954eadd91ba5767e52c1b3389652e370db7efeaf2918728bb5e4dc88dcb4c2c5b074823f8adcdac195e5b70ed26813636757a6

C:\Program Files\Avast Software\Avast\aswfec0d0445d876db7.tmp

MD5 990202d195a8da8099e33b5220d6db2d
SHA1 4342f47528f485eaa8d3a8d99089fbc4c2b2e9e5
SHA256 be5763f7f02a41f32b8040d659275298e988596338b0a39c9b9b37905d50bba3
SHA512 5e4655a1197ffb9e2e1048ae9bdf444e18dffa01585f27d0ddd9c411f5e13d8c27e8a14b7613cefe0a90a3d86a43ebf3f5fffdf8ad020c452a24c662321223ac

C:\Program Files\Avast Software\Avast\aswcbb91c2d425f4753.tmp

MD5 de7764529ae035fdba707404d2432817
SHA1 d0f62ef01b92e0cfdb28d730adb78f3f32c6f277
SHA256 70f1bc1247dce59b50d5b2bd4b45bde779696c46fc8b9dc765d682381ee4d06f
SHA512 2221bc500d2bf1fd621c6739fb30fb18465404073afa128d4eb0149f987804830646465697275d080ff379c09765da419940c8db51dc3f7ae32c531d3bb460ec

C:\Program Files\Avast Software\Avast\aswa110da3f2041aceb.tmp

MD5 1be47d43b88b92b2f46b3dff77cd12bd
SHA1 bb1a7a9eafc55bd39e8311f5fad7ab01d2e1e9d4
SHA256 010fa04c59aad2071bc01fc7d377dbdd7a88b7342f90c2f797ee17ddb70e5f14
SHA512 4d1b6eec4a073cf0558f0e1b144e4ea18696f791983181bc22090ffae9693eee888cd6a3740f19ff9fdd9f45663c364b985471bca4bcc680417ef4cf1db6091d

C:\Program Files\Avast Software\Avast\aswe6478032a0c6939c.tmp

MD5 a2f7db95437a8c108264e695eabfb4ea
SHA1 3d0c7d82f49d8fcf8a15023f5dd37d6b6850134e
SHA256 358d3cc315a90111a214db2f2309779d36d9a5a55c142e51b6d36e7749990c7a
SHA512 820832d1ae5cf3b58298f00bf91d7b12cf215daeb3b7c2653c8046a7440d5ec098178bf02067e4c99394d72b0b1a5cc80113a8c44832202c67011be4ab6ee6d3

C:\Program Files\Avast Software\Avast\aswc6d485fc72084630.tmp

MD5 b640ba2313b87f61937f3571fea97fb6
SHA1 8ad3ddbecd240e3a71dc8f153f78516e538b0cc9
SHA256 a7ff9777466f020a87d0c800fd40a5cd11420f8918de8fe871aa18a0c58f04e0
SHA512 e6a9c968e6471a4049637dfda04cb2ae3d1ce7791ef2dd08f842e133bf57018bb1a01a286a71a7664b187845dc22b2a11a75ef37920fb965819df1da898ef22d

C:\Program Files\Avast Software\Avast\asw7a7dac46c7873798.tmp

MD5 a5f127cf1500cd27dc8e82323c4ba483
SHA1 4e179dff7e01631ebd3c9568ad4efe5e4ddd5ade
SHA256 73050c90cd97b23cc1a0b02e18edfea5752b1d0f3f476607f60ac59a3c7a21af
SHA512 c951fc42d09a177980c66944d97dd27207b88ec41bbe7240e1615e238923392e2ac42896999a442e3c570a5b707c0ae2c2c808231ad6e4e8fe85a2a87c91af0d

C:\Program Files\Avast Software\Avast\aswbd3948a48cfb1d12.tmp

MD5 e2429678f57c289f8cfd0da5076d9473
SHA1 fa643ac4e00c420df23eb6ae9bbe09e9998bb1cb
SHA256 6781a3410f37e06528dca3306db7d9f5ed87ec1322822f924cb256888f1cc390
SHA512 03f90b51bf37a5913588ed243491707fc8a295f5a0fea2e9e9aa8d673927f3e11777e2b2d1244954e407b2c90a436b35ceffee06312b406698b8f53ce6bcbda7

C:\Program Files\Avast Software\Avast\aswea9fa3483104d694.tmp

MD5 be241ec51b6a2c346fff55565cc574d3
SHA1 affd88b58171eadba84ab9e671a35f760174052d
SHA256 ff7336f45eea931f1ec478cd866d45692793a2b4f97c0fa887446bc865ed3676
SHA512 f47fd1bcfe30778935ec5f5a884d009a4d1de55860178caf9c21067ae1ee075426696a548824bd07aba159063e6db02c9cb84e3bde6d11cee2d0d39f7d57f691

C:\Program Files\Avast Software\Avast\aswe78c4f7d33be4680.tmp

MD5 a2b979bbe442bd5e1d078933531bc904
SHA1 e5f0aaa99cd4c082b6910ec3d734e905b4740c8b
SHA256 ac589a90c98db8e1a3d65862dd8139fb34baff694b5e110394e335073d6d35f5
SHA512 6c383dc020e9c6c4170399c6f87362c948d83d5f70688bd09a2089afcca6a1ee60528c62c65271fc8096f79271a241ce39bb186347fd9b6da77ebfdad7e77daa

C:\Program Files\Avast Software\Avast\asw4ab2c9f1d55eb613.tmp

MD5 cf389a65609f70eb50f14fc0284e708d
SHA1 4b92e09e8dce857f131edccba6173dc185ccf14a
SHA256 e6f838e3d85c19b96e35cd7ad23d6de2233361fa2d88710a4a7ea81a884221c8
SHA512 b80d0b630303f868cc273409b1d151bf29b62a24ffb665ac43d414216e24a16dcceebb686fbffce153fa9af02878d8fced39f44d3cba551e390d5a3d531ba89a

C:\Program Files\Avast Software\Avast\aswcabb42537edfe29c.tmp

MD5 ba2cac355a7075ccf85b57f8ea2fefa8
SHA1 47b70c786c3179f3dc6bc6481cb81e7ba7a5e0a9
SHA256 def6101a8fcafe73e9bc1a225b46c66d490e9dbb99b4b723fac51cda04d6c566
SHA512 b00c148a371c3261326217796242de4b10b315b146c5006556d6b2a6cff554703ad71afec593e4dc5274d47df3ce3649b229434c5774367bc0efeff18d277586

C:\Program Files\Avast Software\Avast\asw84e9f94e1b242834.tmp

MD5 7e1fcbcd04ad392c3865e850cdb627a2
SHA1 bd64da891110520bb434bc3d95ad41cdc981fde9
SHA256 211f28a183ca0aa6c361ae4fce55b9ed3224d6da19ad65f13588eee1bacc21c9
SHA512 85ee04af0ce34763beb460ae4f4078977e8f7b07df116e3610b3d5a0a02a6a3b0c83b169fb4a1773854518e888d48422d1cfd78777c38ac160a2b0e8cadc9fa3

C:\Program Files\Avast Software\Avast\asw0020ef82815e9b28.tmp

MD5 bf95d8501e0892ff24fe7220239790ab
SHA1 d312d5bb1c6d67a2f9dc29b06a5dba5d85430d74
SHA256 7a10515a23f000211c6f770282426c80d10215398b9e1c9a6a492fa81406bcab
SHA512 5fb19629ed862ab8c8833e6f1b1f60db3a9a46236f036abbcd4d637787a1e5982c8260d672acb7035938061fa9c9b06485fd36fb2a251a8a5c12efbc6fc5860c

C:\Program Files\Avast Software\Avast\aswfc6d7dccb0ce84b0.tmp

MD5 aabab03e55c4f41ed3f9e9bae3962b34
SHA1 0b8c6525f6c4dcf7eb614437ff968d0130979337
SHA256 1c8d60fbaaa0830a5d04ed776a2875f05eb0f141105849f853d6a6cf5cfb50f5
SHA512 4b9d3a1d6ae413d4dad13ae8839f79f2367a3559798adad0aae7d9e0180fde274fdf28d1f141cfb99d52775f6e7b9eacda15598314ad7c0fbe3f9815eff7374b

C:\Program Files\Avast Software\Avast\aswa91195d7f0f61b31.tmp

MD5 b037b2bda07a4ccee11709dc235b3a2f
SHA1 c816ab57ccce237c7b84135043b4d0cf3ec6deac
SHA256 6cee84646ed16a0e2991a6f0f023125b8c779303033b5cc60aed644331c55f34
SHA512 453663127bcf7d2a7366615b1b76e97b069cc6c4cf9b4864c5a2f0c232e059cc2e7a161ecd2f62d451712430b30754463e1fc1dd27ee96731196f47ad9207a3b

C:\Program Files\Avast Software\Avast\asw5773a7523dd44ef3.tmp

MD5 e881768f434d8a8759bfe02f5ec944d1
SHA1 ccc208a83d73e579bce3be71164282c5770cb437
SHA256 ca3714799bb58510fd169cf481eba31d0d43cab4b58d1e1385c2865a1d9b2ca3
SHA512 e1b868dc0ba85cdfc5d47844396c6773a5ee4d47a836069ac471a1a8693bca556049916257cc405e13e79dec0c71472e38af9c0fde3bc1e4c3fff06cfae3ed40

C:\Program Files\Avast Software\Avast\asw0b5ace91af2a1b70.tmp

MD5 042a4f6e3c9af621f1f6d35e3cdca956
SHA1 f2390b696f048c4c28b1134920135ac509a28850
SHA256 0df9ef3733548ac6502ff18581d2d2b3512ffd3095b04e6df3edefcf7f82de8d
SHA512 b32b2fb7d95e9f4def8f5b2c8c87bd9e16604529debc706fe0be05ae1e42851478363d89c8b470551113a2bca1a494e42e52a24b593ada8d60c747f0159e5741

C:\Program Files\Avast Software\Avast\aswbefd44e372fc7bbf.tmp

MD5 01c679d4d797d4edc0072cf70daa369e
SHA1 ad637dcca407706fb71152d6b7f5cc92d1fd7bd8
SHA256 f7bff1df86f972306ebf7326a9f07a8044d880a47a8c9ee124ba060aed9dec66
SHA512 73f1eded20ffa2c9b07cf8c6cc6c3607c268df2391f7801b01d04e0e7710e96b353c465e468f9c81818b0fba944a8afeb1cba817682545dd9eec2d499a2ea19f

C:\Program Files\Avast Software\Avast\aswa896cf71bbcdb865.tmp

MD5 c9ffd27c9170154be859b79264fa0f46
SHA1 34fef5b733def5df602c5d9d98d62d2be7613f36
SHA256 0ef8f885b036c5e8501d78a191e6558bd9f320e275f94c30a4bea20f5ff99530
SHA512 299919dbbdd28857afebab109bb4221683e18ef6dca221ff73d439f14bd67b5c82ed52df271faea2a1afab1945fa5c6f97020cf60c22c81f36044f420de5186e

C:\Program Files\Avast Software\Avast\aswe76e8255a885ce6b.tmp

MD5 8aca37cbd098f8a6deb4372f5cc16c0b
SHA1 a5371f0aad6c09db3a506da538aa21c3f6dce5c8
SHA256 fc2ca65b9a138b515095d354036529f5382143519e363314be045ed02a8d435b
SHA512 080ec300cb895989b9fa8ad62cd9fc4d1a3100091e0fe0f4136896d71d0713e515803caa34845e157b8294ec3c18c0cc3193e41fed88934b6ede043afd8cef10

C:\Program Files\Avast Software\Avast\asw26c6e2f5b0bfcd58.tmp

MD5 117ef38818ea9c064097b43b4d2549ba
SHA1 f682241f036a2ba465487cfd17d7a0c67ae0e5f7
SHA256 c69f8fabbdc8fa38e61448c5270e74af08a2bce9e9084149ace979c80278673c
SHA512 d9fa2359902600db489dfd04bfd1675a63273b41e9e47f034c44faf0f0c9dffe54eec09021ffcc8b4a58d9a8f199c679a9eaf9585be8b358dc1220db944f4ea4

C:\Program Files\Avast Software\Avast\aswd44e9f3e579a1a7d.tmp

MD5 b53d1d6e5b7bfa2f93a8f7908bd9dc57
SHA1 62494a6d6118cf4a9fe01f7c231fc09396e30a38
SHA256 87ea3e97c9d8dab8d6315d37a51ceebef19fe00c062ffb70a941aaef1e1c52f7
SHA512 0b5665d9d4e2c16de5610ad8545bb3721aca89ab997716fa5d7ea9609212b54fc0f07ad9ce57075adde7e517d8061f065b53df95dfd8ed04dd12b6d6b280697d

C:\Program Files\Avast Software\Avast\aswb24eedef2a228269.tmp

MD5 12d7f8d6c71edccd655e1b6a4a64df0f
SHA1 47f4c825dd9a75ed6a68840141bc7e08fb5a6fe5
SHA256 6fc9a679cc8de4c16b365769e8de49cd167b80330fb871b1f6029031aca37e73
SHA512 b2dcd366cd53cd04b1f4ddbe16021cceb36a10b9cca66f55b172e0297816361ce5fcbc07ba35e7011dcc702baef52039229e03f4e63d2b36449a21acda5c5053

C:\Program Files\Avast Software\Avast\asw1db5dec246fb7f8a.tmp

MD5 3143302ec9fbcb12b206ca8f1adee775
SHA1 2cea8af0d62dfb8a8527947b0a8665f40c713f00
SHA256 71d171b5311df9d41e7814d516a6ec09d8c07a41e84544a665250779b0c212d6
SHA512 cae237b28f46f61681552fdfe68fc12beb57c77ff8a08a0bccb7c8fd4065d28e7be8156339dcbb10a1e98fa65bd36ccd7cef98e8f452446bac3330f78b93bb36

C:\Program Files\Avast Software\Avast\aswa08dc1933e1cf632.tmp

MD5 1b231b5c4d36de4750a587f08338dede
SHA1 80305bed318b3124f3c3f5c5a1e577bd0a1ac498
SHA256 79e53d36a40951ab328e153bac9c1e3adf3330b45899345e645889b9046f06e0
SHA512 e46ef05924aad05ee9fb8592babd53c9fc4bbd136ebd2032acf28682ded9e78ada3de1276c2eef63cc9630a8e8cbd618013e1562b1af550178d84e0f0c11fcc2

C:\Program Files\Avast Software\Avast\aswf292169ebc2607a4.tmp

MD5 3929e840f217abc0782cb3313487f28b
SHA1 3c6f896b373b4b9f125e4417b7c3a428c25f0ee9
SHA256 bd04b5cfa4640d4c1af87183a7bc261c68515e4b1277960a835688766729cc0f
SHA512 89d3bbd5244ab90a5669cf70101e51f20df193343ac8c34013d637f5130dd7217df3d7b6dc0dd910365f75c431b8ace38acb15b1644ab49ea8b083808aee27bf

C:\ProgramData\Avast Software\Avast\asw3d50c11b812c662b.tmp

MD5 ad6bb231d6ca341d585caa0881bbc680
SHA1 249d7ed96bd7368985770fc91243ffc27a6787e8
SHA256 362c8627a8cde159dc2b52d1c3315c4499dafc8a5a6781acb373307453584785
SHA512 70c0943d74381c9b00b59cf28297211905a983c3c5b0203d71d9f28a1367c01d821f329aee1fef6d2b04f2ad6552e32d5c7f7eb8ec053691d2d1f6b21940694e

C:\ProgramData\Avast Software\Avast\aswb8c0d62314eb103b.tmp

MD5 9224a48b87ecc5fb3801b7a50d6671d9
SHA1 3a72a356ed0d83070638deab19affa1768650a1f
SHA256 94a96219634a3de20dfb98371730cf938ba65d35338a02ccc298fda587c638e6
SHA512 1b78613b2a30daa344534f720b227c5eda50d50de42ba3a7cf699f0c05ceee7a495daafcfcb55302717861e7cfd9a4ff61979aed229c5200901ec8a1bbfed040

C:\ProgramData\Avast Software\Avast\Fonts\aswb58ace3de5ef730f.tmp

MD5 9372d1cc640df70d36b24914adf57110
SHA1 374508b24ea24906f25655de27e854e69cda2935
SHA256 31daba103891abf8b4d0537661117a8689c9ee5d91ee264f74e64ef1bb37a61c
SHA512 8100e80e7c7a6283a348fb0c2f9339600dca96f8db21e49c3c875ca6c0129d87452ca0d678904e40f65404f5c78b37a82718def85efc085d5f2c9d0ff94182d4

C:\ProgramData\Avast Software\Avast\Fonts\asw83638efa21938519.tmp

MD5 b7913e898d3cddf10a49ad0dc3f615b8
SHA1 560917b699fe57632d13cf8ef2778f3833748343
SHA256 1e90e49b182c8b5876ee6805ff3cd2e39a23fda79df33d2e8b57020d6f208334
SHA512 baee3e6114fb8b4f946cd85fac7bae19e1cc681820c6c5824092ad955e70ce7253ae471aaa28ad97412e67d4a9c741137bf3ff27233bd94b6d3a654f72adee16

C:\ProgramData\Avast Software\Avast\Fonts\asw2d8abe1efccb17da.tmp

MD5 0018751ac22541e269f7c8e0df8385f6
SHA1 541e47f0b29737b74c2758b1f040783485de2a6d
SHA256 9f4d35bd7ca167c7659a872bdae6fde11c306b07eb5c758bae762f7258b39071
SHA512 6b6465848cdc0fb24ff2b1953e71b17c19e5e4224857df761222224778b4659443e8ce21bea15c76abfbcd9e371e607a0c1a94addbe761c2f07c1648971406c8

C:\ProgramData\Avast Software\Avast\Fonts\asw842b5ddac1e696f1.tmp

MD5 0e1821fdf320fddc0e1c2b272c422068
SHA1 c722696501a8663d64208d754e4db8165d3936f6
SHA256 4a7c36df4318fee50a8159c3a0ebde4572abab65447ae4a651c2fe87212302b5
SHA512 948adb943bfae5807e0e88a23364d8e706a8bdfe8c4d00592a95cdd34081a64a8d44c4ba6e33a65874ac8a7117927c3de2b995fdc57c2746aedd7161df727293

C:\ProgramData\Avast Software\Avast\Fonts\asw356552bc2a1cf28e.tmp

MD5 52f9b35f9f7cfa1be2644bcbac61a983
SHA1 c348d9f1b95e103ac2d14d56682867368f385b1a
SHA256 28a1d37668b4cf94fff5256e9639f175baf4dd654ec84ba910485d38beefa6bd
SHA512 de48b5e6751134c7fcaa8ee4c734e0f458e86fc59249ef19d9c45b7098eb7273c4119d5944332465080154a3d9c8acdb1aa84ccce011bbe5c7f32251acde6cad

C:\ProgramData\Avast Software\Avast\Fonts\aswefbf70a2e721ee1b.tmp

MD5 629a55a7e793da068dc580d184cc0e31
SHA1 3564ed0b5363df5cf277c16e0c6bedc5a682217f
SHA256 e64e508b2aa2880f907e470c4550980ec4c0694d103a43f36150ac3f93189bee
SHA512 6c24c71bee7370939df8085fa70f1298cfa9be6d1b9567e2a12b9bb92872a45547cbabcf14a5d93a6d86cd77165eb262ba8530b988bf2c989fadb255c943df9b

C:\ProgramData\Avast Software\Avast\Fonts\asw3e4fe6d74a08db29.tmp

MD5 1bf71be111189e76987a4bb9b3115cb7
SHA1 40442c189568184b6e6c27a25d69f14d91b65039
SHA256 cf5f5184c1441a1660aa52526328e9d5c2793e77b6d8d3a3ad654bdb07ab8424
SHA512 cb18b69e98a194af5e3e3d982a75254f3a20bd94c68816a15f38870b9be616cef0c32033f253219cca9146b2b419dd6df28cc4ceeff80d01f400aa0ed101e061

C:\ProgramData\Avast Software\Avast\Fonts\asw41efa27c3349e4de.tmp

MD5 50145685042b4df07a1fd19957275b81
SHA1 c1691e8168b2596af8a00162bac60dbe605e9e36
SHA256 5894a3649b213cf5b2d673b6e7a871815fd1d120fa68a463592f27db14eae323
SHA512 9c995725aade5f126c727faf1c4453344e37b590a14152d31d44dca3c9328a54207bbc7c840695cb55bc1b559097b457888655e11199192cd5197c85aab8b1b6

C:\Program Files\Avast Software\Avast\x86\asw0601a3cb59493a1d.tmp

MD5 5d2acd0453ca9969bfebcdd2597429c5
SHA1 7b0d762583cb8204e18e66c9b97400a6da8b6dd2
SHA256 8a658ae9065e36e616e805aa98cc2767f10546ca3e0777b8307e7ed829c3d781
SHA512 8debb90ec752f4c05915da480900ca4371547987f803485c0c929880f5f6fd714ab9a99a9a1c2cf3b42892e0b7b4db857e0515270d69763f32f75e3a5c84c630

C:\Program Files\Avast Software\Avast\x86\asw325b313f73de2f26.tmp

MD5 1f1e18083c00f835874bf410a585f82a
SHA1 1c1e9433a8966d8a3415c6fa7344f150124307f4
SHA256 853f95041a1e87660d47c034b9eb0a7b7b893b0b6df627ea5be231e135a9ec26
SHA512 6d3d73718ca33de88463a53b91d71c8b624cc8725f50229d1b64e25dadc49e443e819cc7f99f0a24b99f7c44f0a8c4637e677b760aae33e0a7917b156214457b

C:\Program Files\Avast Software\Avast\x86\asw25f3b92f9aeb4f1f.tmp

MD5 25759c36575883c7faf30c1343af0c4e
SHA1 f94a1232e9b36db0aea8ac8d9b1aed3584c36118
SHA256 ff2dc94d236df6481d7a987bd278a6e696d1ea157ae36ba18b3bc105c3460a30
SHA512 f3b2b83847b477ffb9cb4a9083778d7e915715d860893a11b8117ce3d84e1186fddf77a39266e2a5b8ecf5507cc9ff3730b669aea424de0062b1e20772726ea6

C:\Program Files\Avast Software\Avast\x86\asweaca63aa3b5b2983.tmp

MD5 fe89264c0e93c065211436e0cafe4c90
SHA1 04072c6121e04292361e7ddf3b49dda08e3d4c4d
SHA256 6fbcf9fb31fe347250430005320c07833bc4f3e38295901fe715217cbf519d26
SHA512 79f992ecae04de46dcc960e7a2ec0bcf18f1279190a9216168d5ecac15c72a18471f04d1e47df4085b442295a929816f3653dd7dee5630de9c9b507240976b6c

C:\Program Files\Avast Software\Avast\x86\asw68d13ef047bac0d0.tmp

MD5 250281999b4fd80a6af6661eca4b17ec
SHA1 ad5abc04d8162b0d43dd7f8469661290a8a8fb21
SHA256 a9d3b55e5a8168c3d63cfb743f1d12c639bc5226d61891486409055aefe1d3a5
SHA512 79d486385b1bfd3fda1817c90b116d6371c0da83d349dc0fb059e197c0066332cdcebadb6ef0d5715547fa08d0810065967245f254a69134c2fe991b1834601b

C:\Program Files\Avast Software\Avast\x86\aswb9d992b9e64ec1fe.tmp

MD5 0624af536a22d6a7ba877a399748499c
SHA1 a92e23d8be292b92eeafe4d3e3fca7c69b760573
SHA256 9a3ac3c67ba28af2f6cb6e72369696cc53deba50de93675f90f60ff4fe04923f
SHA512 2514e0bbfd047b9ca73c8ecf100c12f7e4f3feddc807f6d3766a6fff74c237e96f9b5bbb60c2c9b8150f8d8bb1ac0bd3313a4f8aa1c9f7ce964230ae0087330e

C:\Program Files\Avast Software\Avast\x86\aswc9b065d5430232a6.tmp

MD5 51a27921a65f756f9b2ce3c1eb95a5a2
SHA1 b9c845987ec6f80331b7e038dd044d3210a0f9ef
SHA256 70317f717b6015cf576fc8c0ab3b069e0a1ad18eadb26ceabd6e4f5f87281f5d
SHA512 dd82ea4293d6b2e03af8bc87b9f8134211e2eebf087eae79b5aac695acfe6f035073dc9e2c461a93da269a53cb298694d28d6e845139dcf361dc9d698b676894

C:\Program Files\Avast Software\Avast\x86\asw5a24941df14c638f.tmp

MD5 f52010261eae31038a6bee24dd7f1c5b
SHA1 dd77b1d7d74516b7697c9c59cf4217163fd6cbe5
SHA256 2c68c1714bd0207191fa9130ea5aef5121a645ef7d02073e2aaf700d59616d90
SHA512 2b1ddf6b6ae0f1fcdba56ea4e0779454c6d250e6ea521ef4840cab15da2f74621d49b127f93bd071deb128e35cc1a65591acafb03f1c5531562bdaa44a3d6d1b

C:\Program Files\Avast Software\Avast\x86\aswe6b778750802b40d.tmp

MD5 f9b76abd8ff0776c844747287db19c84
SHA1 891d8511e4f31067e11a02ec45db96f6a966a0aa
SHA256 18eb026391168832a6540d73c408054a4c3a0279cd26f9a6346a2f419a11cba0
SHA512 08fb2d7ec231982410a5c62f62fc0c358e2e505a9629f2899e373b242c775314b091cc2ac543898869f220eae0e6b8c1804c6443860fdcf41b42b21b045458f3

C:\Program Files\Avast Software\Avast\x86\asw77b9f293effa4993.tmp

MD5 3b06d047e9b6cda850af27066e7679e3
SHA1 a44fab2a9c02a4963e83222e95783bd0186969f5
SHA256 8f42b888663ea0a9ce82fe8f9e939f5eff96ae3d9df3f4f89b4c7ad440b767bc
SHA512 32efdd0ebf137364408beeb3d8f2ec8a93b9a30bb0d03d61e5686b06ad1c41c3776bb0f55682fe333e93a4300469bbb8f31af36fdd083a94beb774beb4a93ec4

C:\Program Files\Avast Software\Avast\x86\asw8c95cdd661a5bc4c.tmp

MD5 6caaac55f460b44db5b506e63a9cbfed
SHA1 be2e91385575a1e20d22c4523dd304d6b59ed6da
SHA256 d52e37315640dc888b9ec4d283b5c4be24fe8bde87c3d2ec0911122e757c8238
SHA512 f6a8e897b499ce9b45e9b255d055d2779a2c93a66bc0f774a2bec5d5f4425d4b049f04520467934773efdfb2ee49f97b22a23f3b9a2291e3ff7286a2df5fb904

C:\Program Files\Avast Software\Avast\Licenses\asw1627b25afd183b6f.tmp

MD5 8041053262bc492837749777c930a791
SHA1 e8cbe20136c6d1627d40932dc4398d2053be5228
SHA256 d988d5362ea432d8c8ad9f05af876ba9409eb1ebad8c34b899fc9cc8c7ea5311
SHA512 0f321a821b1ab36a5e60a5d5e94dc26564a2cb03347b54279b5530f7b50ab3105d537637f338553dfc4ef800d28be103ab0ca50f77da3b4627fb6d7c558bd3ea

C:\Program Files\Avast Software\Avast\Licenses\asw09f556e6836682fc.tmp

MD5 4bf27a810f9a1f9e7c76b029b3b457cc
SHA1 8edff1174e110de6aec218a8d9ac56dbea27a1e9
SHA256 1e5a5eae04b378d12f93a3acf56dfdcac7005bdd67fe22d71c855f4e994e9928
SHA512 d818fe6f1905f46445fdbed9ea63751441fdd69651ac532aae946181fc28da8d2aac98146fb507d3df9720b24dcd2f05a20735f32e113503253fd85defa2870e

C:\Program Files\Avast Software\Avast\Licenses\asw7e1269f0b1776df1.tmp

MD5 06cdee91812ddfaf4cf3916f7a5309c4
SHA1 00397115d379f863279d13e823d33ed9c8b51be4
SHA256 7a9555c822ed30fcbf6832004edac893ba10bbcdb8e12d9a3662ddf1b52bd6e7
SHA512 cf22a889618b15fd40dd82809c2c8f5003fd40236798d8738fd3c56cf0f27b52e4157f834e5339bf12388dedb96eab1dc3e9d01968e1a4aa155e60cea9c96694

C:\Program Files\Avast Software\Avast\Licenses\asw0264221672f87af3.tmp

MD5 a3e6629906286395714e96dc4ac8edf4
SHA1 e1faf4917a367e29be497afc8ca14bb7b4493efe
SHA256 bdd96967d9b60683a91e086651ec03eed0d4ba142b37993111a0b1a608f8a05d
SHA512 c9be16142c2d45b9e81b2e33840b58837eabf94b3659cbce65e18d1501ac85cfa35fa087a467cbd55d633f1dfe370e61abeda2ed1e6db4e8b65826b7c41a4ccb

C:\Program Files\Avast Software\Avast\Licenses\asw8b07428d0387b66a.tmp

MD5 7c3860ffbb2e3df660f4762e02a28a4e
SHA1 9a689135294896040420ead4e5a05038d0ce8cbc
SHA256 803b8b5aa4151030221b3c3f71a645da6241938421e49901444a79e5cca75fa8
SHA512 393e4077221420b1a1d73cb1d89ad264b65e36dde03271959699260e8305ff8715ab1a7535c356f2bf961f316ccb1ef1ff6e13da1708e7b53a9b6e12ad7066d0

C:\Program Files\Avast Software\Avast\Licenses\asw16912d337c48e164.tmp

MD5 7cf65040f98baf1ba15f488d76f31e6a
SHA1 c9e9e12d8d124bdc38b63a1c832bf36890ddf046
SHA256 64578d53633622b31d19024184265f01d045b637da98fbd15ca81e39acfba63f
SHA512 4ffb42ad75204da6a288aa2d748754eab2a94386c33c9981ab1edb6f848e02fbe4590baafd81f5349a4c09bb913aedd7f57d49c43d96b8ad6e63c0e44d0a8ca1

C:\Program Files\Avast Software\Avast\Licenses\aswd57200eed6abe242.tmp

MD5 bdc36270610932ff0c405f7dbec4f1aa
SHA1 36ef609b122ccde100fa096a4703f3433af6e2d1
SHA256 8c109e1d8394fd4557d916d75ef61fb406319106cbeab77736d7c666befd1ab6
SHA512 83f1346cbc0d4e49b0e4cc338fa12813661eafb00acba39d350e28c54c86d6d19317545dddae562763e6794e5268731cf4d1d8f24db42a0cf8d9ab9165970beb

C:\Program Files\Avast Software\Avast\Licenses\aswf08c26d4f3941c93.tmp

MD5 ae1fcfd0aa84b946bb9fc04ba39dafcf
SHA1 e1391ab3bcdbdd0fb6e9169ffa1d72c1650f839e
SHA256 e9c108afa89f5f9ef50484bb1c64a8d07d0c0bfce171df01840702ceeaec1e34
SHA512 bb9635487def64130a10ec3cd4106e5018ce17d9b979124d9f6674ab1fc7fa549c32c0602aead88cfa78f6900ada5a1776995fe4b864b466d6dfbf1cb53d942e

C:\Program Files\Avast Software\Avast\Licenses\aswb98b2b155b391119.tmp

MD5 ce79a5e699943b3a132c0deba1777ac6
SHA1 57919d5bf210193d05ba496a870832582f475559
SHA256 f4df8b2457697851385d9ebb93267832c1dfa24e0e61881952f6b0c452663dc9
SHA512 82cda6f61e3dff94228d3eefe4e1f65dc483aca9c8597e482c1d6584d2f70ab7327af6461080447649dc4986b9932025dbcae5c078a2dbcca82c3a985d118f4c

C:\Program Files\Avast Software\Avast\Licenses\asw0614c35114be044b.tmp

MD5 ae3f3d4fd356269cb456df973156650f
SHA1 4f58ec889575f422dfe25fe14f22eeb5d009a4c9
SHA256 d0a9c5d1e40d1179f0669bd93e079a518b3067fad240410804170f05d1ba04b6
SHA512 ac1c0e7d7020f7ae091bb53e4b5d1afa8e9a669bbed4f7a418b8cb9975eace1c8c6eaa840f1248ea4f607f87ba8765d61ea0f05fc0e586ee21275633c8f1c3c8

C:\Program Files\Avast Software\Avast\Licenses\aswdccd7097938ee01e.tmp

MD5 c58efea00b9a80527a4eb1edf3b48d42
SHA1 7a9460def676dec00affda16aba1e93f0fb26f74
SHA256 a9c42b959825bce9b7c72a7b0797a41580cb21f407b73e08168fb1ed1db438c4
SHA512 6cbcc440792e05c8b73755acb329e2961a1991b730fc468d7483b1c005bdc664271237de634c3a1969967f8feea03b36ee8d2dd58e94dc61f553c4d728ff9d2e

C:\Program Files\Avast Software\Avast\Licenses\asw6281a451ee811951.tmp

MD5 d273d63619c9aeaf15cdaf76422c4f87
SHA1 47b573e3824cd5e02a1a3ae99e2735b49e0256e4
SHA256 3ddf9be5c28fe27dad143a5dc76eea25222ad1dd68934a047064e56ed2fa40c5
SHA512 4cc5a12bfe984c0a50bf7943e2d70a948d520ef423677c77629707aace3a95aa378d205de929105d644680679e70ef2449479b360ad44896b75bafed66613272

C:\Program Files\Avast Software\Avast\Licenses\asw358e63cb7772c08f.tmp

MD5 d229da563da18fe5d58cd95a6467d584
SHA1 b314c7ebb7d599944981908b7f3ed33a30e78f3a
SHA256 1eb85fc97224598dad1852b5d6483bbcf0aa8608790dcc657a5a2a761ae9c8c6
SHA512 e2f81cb44129e1bc58941e7b3db1ffba40357889bace4fd65fd254d0be1bb757625bdf36bf46d555eb3ca4b130dcd1c05225caec28d8472dccf52a63dbd6e185

C:\Program Files\Avast Software\Avast\Licenses\aswda41ea5c869c3e87.tmp

MD5 fe680362852389fe7a16c47aae27bc92
SHA1 377ea1b96cabe859af78bb561ca4171544ab0152
SHA256 e89251cdaaf385d93f74b819412217e47a7a06cd65115a1f87eedda0dffb2947
SHA512 8bb0e1ae7fc66e12581b43c0823e82011ec88d714eb244a840a46272d9c04163893217b6ae6c42d07ef72c88ea154950282ef09f0aef2dd44a3e42de709135ef

C:\Program Files\Avast Software\Avast\Licenses\asw83ca6f1fe7eee755.tmp

MD5 dcd04d4748467021571f4a01f797ddae
SHA1 c59d498fa113b09406389f8828dde6407f5a651d
SHA256 7b8c5dbc64e5ce65c94d31b5690a0e30ff83222bbbbb859df2a56b9dfef14326
SHA512 7ae6a19fdda606f467c15e97ba08620838961bf64d9c5b6843cd877a23f0697bde8874842b12e3c317e18b4f8609531bb05414d5ed4ec68337ce8e1c73aae64e

C:\Program Files\Avast Software\Avast\Licenses\asw784190840ca89a50.tmp

MD5 d6913685a013829414179d17903310af
SHA1 d665df4878ae79173751d5a8a4346c1e2567f232
SHA256 8dd48e57572d33854a835ba6bb045d9a01321bae43377934fc08ce642992206b
SHA512 228fa37c918f781f3151b7cebfaa2575c70e515193adcae66a25c5de0035199ba935e677c1df1b2acf6951b43ad4e253a5277ccd72aff9bc60cf6f1bbf444eaa

C:\Program Files\Avast Software\Avast\Licenses\aswe812fe034ed0ee09.tmp

MD5 9c08c5872a3314661e37289d53a846e4
SHA1 ddad81444c937f22e749ab9518058682953b1cdb
SHA256 0ad3bfee8be10e5519949e7af492e36bc349376b75fbeb412229a5967e3e9434
SHA512 dda85f29349e7222a6487f91e42e798c6d93a091fb01ed08d7caff5b906a2732788fea763d3e8fd10084361af8531ba2059e2410e845390c937aff659cd0fa36

C:\Program Files\Avast Software\Avast\Licenses\asw68d524eed2ddfd2e.tmp

MD5 928ffcbe179ca1faa2d4a2747ccab1b7
SHA1 0978fa6a4bb455f6237eca37956d179b7512fc1f
SHA256 c8d3b9240b998223daf58ea16bf2856caa5cdbcb75e93d4fd20c548033d885e2
SHA512 627af0d12924e508694e977823fd6d705700eec590e9edd432605078b007143cee5c70391143ae259cff9287db89fc3e613198c4c586236d71e2de70cbc6d0cc

C:\Program Files\Avast Software\Avast\Licenses\asw20fe8b7d39c9cf86.tmp

MD5 4cddb654fe704264c203b4d9c7c832c0
SHA1 9d236e8f305b4bc8c486de24549a706a3957c210
SHA256 634788199f33637e3cc36c61e5272f72ccbdab87be0c07eaaaf487c5f4f1ce82
SHA512 1933696744c8a95bc6c82ef0d19e99f1d4291f6e0aaf8570e45bd74065ec076ea9b3e4b030ebc8df52903f4f98aef6a9727d3370834efb9187e4ce24ab9a0180

C:\Program Files\Avast Software\Avast\Licenses\asw3dcf446f36f33e4d.tmp

MD5 7eee1933e27bfd222f8ecd48d463c30b
SHA1 506dd04ac3db8729abffd4132294d017b8b1fba6
SHA256 e9bfbf4cd2bb60ea2982dc50dee92466a81a42de9b40e65c4ee17298646c7bce
SHA512 279d059dfa2c81c371000b865fe49389fa911bebf4c4f7e83379598e3e109852b14a185f1bd970dc94ad53a804d7554a4547dbe7bd7902781daa8da1898f7885

C:\Program Files\Avast Software\Avast\Licenses\asw88bd5b677e2ce792.tmp

MD5 4434d135a9d9631e1741ce7254375a0f
SHA1 e2d2dd3fa7a0f0f7814118af8c03094fc325d333
SHA256 2e69c36a7eaa4fa153426eab635c607ea0356cbc7a68a70f42a49e8ab8eb8106
SHA512 9c59379e08895138e88b588f0ee3c4ab0938e8fd6906ab041484c6ed90da38c7ef9df7843002abe5249b359dac56c9c064f9119e58eeb1fd34bb2b7a35194450

C:\Program Files\Avast Software\Avast\Licenses\aswfede800022ded8c3.tmp

MD5 8915cda79ecb12328ccb33113dc85ecc
SHA1 127e0111a102fb3f6af9ad82d0620f4c4ac2c164
SHA256 7c3794f6aa18b133dc86045d00f3d5894682084692a959ce521982eed4554f37
SHA512 30acf8eb04e4063478c8ce0879c838dd9f9083efb6e239393f4727cea279a171ac4c597f3f1bf855210eed3091acfb50d9d31851cf6a147774f3bf246d6f4d59

C:\Program Files\Avast Software\Avast\Licenses\asw5df6e166d0398315.tmp

MD5 128b02ba4177d31ef91600882bb0baba
SHA1 6b98f098fa3f1cab58b9610b0af9c9545d5010e2
SHA256 b87ac954a37f855f6f7199a3154e2e84623558df980e8afccb94c5c93bd4cba3
SHA512 77b2fb5862bd1d999cd9549319ffe492ed20aa63659003bfb48c2426242984f97b6666ba9afbb0cb7d71a46f4f5f7e883e31c248f9b9eec339e3d4d7ffa66a0c

C:\Program Files\Avast Software\Avast\Licenses\asw4368ac78ac7f2dce.tmp

MD5 9087d9182e280d5a124e844fcf52af82
SHA1 058d1d953744a7ace99b86c97238a3083dde120b
SHA256 5eca2c8028dee3a4728012bc60a763f69205325d0eb75b344cb7e10a788faa96
SHA512 18758d28733aa9db4257db7a18176a8459265021f6cc60e48ee6bbca422411d798bc597a683afefce0045c2b025e65577f6ed085fa8c9acb10b3e23464da6dfb

C:\Program Files\Avast Software\Avast\Licenses\asw693466a35e23264d.tmp

MD5 a5f132cdee178b77dcac80346cc12b62
SHA1 d44350c4d2332a9a30f154f896e88a3e89016825
SHA256 331b34c5d939627eb370fe4250beaec0d0fb5edbf687b0c3631930385026cf7c
SHA512 d3e45ff903524667e40fd06870c957eff349e44eef22a2d9e9e01db9ff806dcfb3082ad5bf974b864944a6c4b2d7d9910d67e440a5bdb50be23600115537588f

C:\Program Files\Avast Software\Avast\Licenses\asw22d8cb6263d436e3.tmp

MD5 7df5cd81700618ef9926feb32290d2af
SHA1 4763ba7dfa7730d98b190dd8a4a2c6818d301fcb
SHA256 60ae0f13e76cc2eaaa108677eefa4ce16b647f6bbe8cf0a1ac9429d82eca7248
SHA512 92c0bbdc5155d6e218682840dde38697327973b8f45e0c6d100705601449a6f1f8eba74cef8bcadf09ea945602b378bc64e81885f40965fa038d7974a71e5641

C:\Program Files\Avast Software\Avast\Licenses\aswfa1ff8f3e3e9d106.tmp

MD5 b2feaa6a26c0149af9c4fbe2d6b692b1
SHA1 23df548394b0b16e6d5c733b427307288e1b359b
SHA256 d7e3eaf9a5ec61dd5f4065d252a2b0130c0e300ac3ac9cb307469e2a86ebbca7
SHA512 156e4cb2a1ae146cee9cd25258b299fdfab716866eabbab3e01f23a0e063e4469537c0a1e497d36f829e710211fca7db58608ae6bce87cacb75c66c8a57483b3

C:\Program Files\Avast Software\Avast\Licenses\asw6404a295bcbd6f67.tmp

MD5 347dfef587108750fa72297199fcc986
SHA1 0e34d7cd8afeb7e3a17bb25f371262a1ddc564df
SHA256 08bebda80b178f4b558faed4e52930f66e855614e4dfae15a436733b4712e041
SHA512 defa096320296c640a94a6abead06698a7682bf522dc1f216bd6a3fb70519d789b83ac061a518672987f6cf2d5fe5f7e60d1f9dccfec5b74c9b387ed591339ea

C:\Program Files\Avast Software\Avast\Licenses\asw15f1d5de74001045.tmp

MD5 97aa3aafa51953d4ad591398b916595e
SHA1 a849084b5239438f44c43b52576171f660576e2f
SHA256 ed72ce2b51ee58f117e5a021e2e04af158857f40269fbc03491f0b2a99dbcc96
SHA512 0b54f6b692ee9c92e0a867361b1601459cf6bcbd653b902e1dafacf3ec445af11023e8a5f7485e4513d351ec662ba39dfd52a9e84858128e512e68ace970c18b

C:\Program Files\Avast Software\Avast\Licenses\asw03e6c734c4779b4b.tmp

MD5 d774c7a88d7b41d7c73490067b54e3a4
SHA1 661206b3d45d9f6836915cb266f8536ef8ed39d9
SHA256 6182268f7c8c37fef81e83f722d1ac9bd1ea4307f16005a6900bc1aa473828e0
SHA512 7f9bc6a96e2cd7a1b8522edbcb72be141a5136dda654e0e8ab5ccf39a216b23478c64bb4fc68a71ee303237e6e9e063adb84873bb786e235e9a039d914e7b762

C:\Program Files\Avast Software\Avast\Licenses\aswbe5f56ee748095fc.tmp

MD5 513ea4bce55c427e58b1b6d40d087d24
SHA1 d2f6cc5490d34da9fd15e6edee4995d6eeb42892
SHA256 7732fa42ebc8652ee3300a086a068f6aa5008cfa0d14948b144e4b06c82efda7
SHA512 0c9f8d90f4ca229b5f175384d0cf348cdb8bccc062ba5b2f97d5aba0b9d823b0ebc2a0634041ec70e62715250a238b41b0c31ccd76ac24b8e864508d93251931

C:\Program Files\Avast Software\Avast\Licenses\asw657eb06b331681a7.tmp

MD5 51d2728ac2976fdf6eeb3a02cd58982e
SHA1 3d4af58a6b52ee70064abf68a2412aac2cddd42e
SHA256 c3aed6a54154090685df3bbcd72e7a84943a4f3d5e5491bc6446a0b2d538c493
SHA512 734dae65afc8b551ecbf6665dd0a48de8eff2cb815a079a2bd7e37e19388253e39441a779403cb553d091449ae1eb858ba560726b86b2486220bc694f85cb6b3

C:\Program Files\Avast Software\Avast\Licenses\aswaa3fe7fb4b5563b8.tmp

MD5 a2a0baea9713f129f7d433dcfc635167
SHA1 349e31d4f425c71d5c63e2dcf4a19f5e0edcb57b
SHA256 f155f8f66833bdc8e0479656256bfac1d66a9ec9df4aa56292308f522b4e3fa7
SHA512 87dd90b17aed6c5aaca53baaa3d149c07028f730ca34681842aa9c855817413345af27a0bd27dfc64677ed6d9b2e9013b585bda06130315cbdccf0a27103a809

C:\Program Files\Avast Software\Avast\Licenses\aswd209cb1f150dfc1e.tmp

MD5 598fd6266b820d382b6f1134f56351f2
SHA1 91d5e0457d0b8a0b9c0a2f557e0e2dc4d7f3805f
SHA256 656e11ea18f7fb862f6625469b822583f3c08e986b3a24962d74737ebf6927e6
SHA512 a1de7199ffc3adf0a4679b47ce77ccdd6ebe7ece123d286c58236a08b64c13c707e590fb5a12ad0a72e6a5907356f4d5754151eb7fb45a99d71caa50912c16e5

C:\Program Files\Avast Software\Avast\Licenses\asw5534c9b972f5284c.tmp

MD5 c26b34f5996c7ed7f7bce6aaf6c8a98b
SHA1 553e3a3efec9a07d9b08fcaadbcd88f2099aada8
SHA256 f854ae8aabc0404652b48a2b3bf7f21ec174c69d73f5596934c20884eb0639ef
SHA512 e3c82bfe3bacb07e3a8327a01b2c9772e44bfa1a8012c0f0b363d6e3b2ee2371bc66f9c207611cd6f73d6f1ff1ceb9b2bf2c7d0864ade256d41d533b598a804f

C:\Program Files\Avast Software\Avast\Licenses\asw64af9ecf7b3a1737.tmp

MD5 15f12037d9859d059c3a557798163450
SHA1 b3609a3d6832159913cc9b8fb128df1383087b24
SHA256 e668af8c73a38a66a1e8951d14ec24e7582fee5254dd6c3dae488a416d105d5f
SHA512 a976ecbe99ab8f29c8290f26df5906326e820eb3f212928cd2b74783716bb6b7b6e75104140b2816408af15a1db30f4f5ab05133baa2c2d3a6e48c6d915fa915

C:\Program Files\Avast Software\Avast\Licenses\asw056200b96ca7ac5e.tmp

MD5 b51058fead1aa71840b79527f5bffd3d
SHA1 bc3c4d41d4cc7753bea8e7a77fdb7cd384adbb59
SHA256 beb8e42e9d6b4284e03304d05a81a0755200a965fc8d0a5e0aea1e84cf805d6e
SHA512 f1a8d21ccbb6436d289ecfae65b9019278e40552a2383aaf6c1dfed98affe6e7bbf364d67597a131642b62446a0c40495e66a7efca7e6dff72727c6fd3776407

C:\Program Files\Avast Software\Avast\BrandingData\licensing\asw4b361d4238d94d80.tmp

MD5 176d0d77a0ee1c8cc866fa1c8dc2d4e6
SHA1 a9fbac7a9ac1997d0b5fb709e468f2db60de311d
SHA256 cbd1e58667b88a9eb1b852895dcb8234ecef878b9e29fd773d79cc7563eba0a2
SHA512 77cbccbb6717443ecf45ae2348c31b8de6a30644871ed477459cdc8f418c0508c613aeb6de4eefc849f36f67af2a1e7fe48b9aec6470aadad7ad82166daf2b5e

C:\Program Files\Avast Software\Avast\BrandingData\licensing\aswa1e6201521e6e32f.tmp

MD5 82cc8690ca1106945e7498b46adbe6b5
SHA1 886f56a93925439aebf31bc636ba648bbf84fb8b
SHA256 b2621cabe4f088f386d1b5cfb2dc36e4e23b343ffdc71f4e790fd98d1c7d7cf0
SHA512 9a5fdbe5b47acaebc36e97b34b500f532c5836862066947dea959caad7284ef2cd0c702ac56a510b30d534b230e0b7ec9da00d21e704320215c8b3ab97f379fb

C:\Program Files\Avast Software\Avast\BrandingData\asw161e9ceab58bf817.tmp

MD5 0d5e303798b74c90f5aa20dde60cc285
SHA1 c745d52ee327e8a990d8e34209ad7de1630d4940
SHA256 3097fec3faae594780371bdd7fee94238cdf20db47051f078a9aa2396eebe831
SHA512 77e17089684683e106a400bae093e414b4dd4881ae5166f456f2f757d3817cbede009fab6d75c2ec58d8fa59f45d67c6fae6e927259295ac33c048d238d56c0c

C:\Program Files\Avast Software\Avast\aswc2595faca7bbc81c.tmp

MD5 88705ece4de7b921b25a8b967d3b1eec
SHA1 8c01ace20cad95d210ca6026eeaf45e61c2fef40
SHA256 a0c5d53ea41eeb43f36b4f196d06980e0671139ba969014344d567b7006471b7
SHA512 182314b90b8f0211bbca765a87706ceed736210280f0d357ef434d5159cb6cf1eecab29ea6d4e7cbd6dbf181aaa1231e76e22b144ca7746519299c2f2bda2724

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw3d0fbb705eecba94.tmp

MD5 65ef0ac7bc9b68bafc9a28af35428864
SHA1 a07573ee1fd18e9b80fda6dceefda6c52d0b40f5
SHA256 5262ebf7376847a064b497a3d69adf7e7a9887eb96ff0189cff6396bcf7a713e
SHA512 7495f2d876a7e3a483606340576bdb66c178a6a3b89c280fa80ddcaf831dbfa3afa342e9682da07cecbaf922bfc0e80cc991fda28bf3809a32c2341b6ab69f2d

C:\Program Files\Avast Software\Avast\1033\asw12599c33f1373558.tmp

MD5 6b48b2165bc3ab79c45a0b14d3ef644e
SHA1 fef6e3e228edba52fe0eb6814fce4dca0c8cb428
SHA256 31ab3d1f664542ba65f4663cd17fced22d8b8dbda3781f2460dc71159fb07da4
SHA512 7489ffe8218616dabfd3e90df0b1d322c68786aa19a471aa569fdb9bb600d6494d1ff29243c1ca33b25396a42bfd285c4986f3dc9e52620c3a251f58c93a79aa

C:\Program Files\Avast Software\Avast\1033\asw2a36893c121c5be5.tmp

MD5 07cf1d36450c9a5b481731cb26243f02
SHA1 78f2db6d5556c261e7c6956b27f8d6917ee2dcf8
SHA256 65f1fc820cc1f3ec11e0dec4be991682ed2945228305b060c08a326c81cf7a25
SHA512 8f228a212ac5b4325787ab4d253e084f3940a493a4840019e443ef185c112bf80a4a1d7c49f08a2ecfb6cfc6bfe750068f60b891a8c888fe872bea32f6034b8a

C:\Program Files\Avast Software\Avast\1033\asw1eedd61e93e1165b.tmp

MD5 c7bcc4317adc53a4cc4c80b95f5f451d
SHA1 06ffdbc4169f506678f40530c2d99ae7b85fb45d
SHA256 274398dee01d9171248c71dc5ce09f7f5761125887c71057e697a81ec7e9ec37
SHA512 fbb0287bfe7e431f65bc4b0d0bd036e5684c3daa0503f0d5537397bf283fb6550dc078e0117808acb72a5ee899f1c572e91db5d67a1a49f5394f20eefffc15fe

C:\Program Files\Avast Software\Avast\1033\asw7b447c2b134e4890.tmp

MD5 218fa59d7554e0b100b924e4caaebd7a
SHA1 e3b4cc7dcf0055476b5a44aeb3f9942bd32d8476
SHA256 d437eb23d17bf8852581c78dfc535112fbe6f9fa74a087bdec624c964599c562
SHA512 72b11bb35837c67f379fe9069fd434482be4d5abe7ee87402db49094fed7b9257374c05e1bffcce2c695adde87c1f58085f31c57c843ff23c2dba45c5ed68e12

C:\Program Files\Avast Software\Avast\1033\asw99138bfd9858a1a0.tmp

MD5 305126d7183f01ec6f1acf7bfcaea7e1
SHA1 7af9472f353a84b3478a7f9d2ebc0144a2328b9f
SHA256 f38dae99b094acd30990cbd13be8c1985ad72caadc912f6ea0a9a6d71a8648b8
SHA512 ab6b7ad952907ed1dc7f2acdbb56633b63065e5c095f5b9781a3a3da2f75032755673266d122ce4a6900bb67ccb503f4b4bb71ed8113e4b2d9683366c6c70159

C:\Program Files\Avast Software\Avast\1033\asw38d87e2da7fcee15.tmp

MD5 c90a9845728310113b416c15467973dd
SHA1 abf27753addbe931bebdb760f5af207100a6d565
SHA256 8383741771116816cdf40de2a5d453ed74c669bb5ce7a626e63e0c62f2ebbb39
SHA512 a1725f9b4f35f613b51e021460a15dd76b2d1b9deff0d6528aa3551c58a0f0ae0b037e2ff7dabd87f6307c3694aa27cc875fc7fb45a9034806c890cab6e15c00

C:\Program Files\Avast Software\Avast\1033\aswfb78c6530728044d.tmp

MD5 9cc0f27acfd3c4da4b9daac4b362f3bc
SHA1 c56f5f8ea53d73bdd13aa160a775cd3b89cbfc43
SHA256 d576d18b4bab7e4f74e03bdca0d0853d2740ef95a2e20060867897d63ac0e088
SHA512 99dfbab3a9c324fce78afb42906a921f3d6a418df263143a6144703ebe85c8acf0624eb8b385170093772fc4ff1faf0c45364eefcb4ba54c8c63f5d5f0f23e8f

C:\Program Files\Avast Software\Avast\asw0a46e6daa7520dad.tmp

MD5 1b2ce7a9ceff5a021ad5ec8c69d07ba4
SHA1 5e4d072bbaa7b3d5a85a8ffb5b05a9c61ee54f79
SHA256 8037d79d36ce9d479749f329848a0d7d5755aaa01dbcdb277374fbaef1210db1
SHA512 3b1a3dbae5a17cedd99592ed3b7804ff8c2b69cb58c396a61ba05d32e066ef9230e88c06f3be1cfe71a0637d638ecc5049ff8974fdb7244c90b2624ad07a5267

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswba995100b8e9de5d.tmp

MD5 124a52c297f565ee7a40d32fe7fd11b4
SHA1 7903a073dea2c0f11ab18930d1d884343cd6fad0
SHA256 80258b80bf337e747e09616d9f9e87ce6eebbcb65819ca09e17a441b283c6c77
SHA512 f909345147ef1a7c7089235fda0cfa8068b0f256efc1e652c517ea68c70c2bd2778dea5142a9c6891abef134b8840734e780122a6ce061449395475ed4273771

C:\Program Files\Avast Software\Avast\aswfcecada20b08043b.tmp

MD5 1c9db8801468938587d077bbaa117268
SHA1 f06b004d3d95a02bf4e6780cd015f6ba50bbf48b
SHA256 829a1aea58bef947c91efeec66a6de2fd638515a1b782d330fd61bdb01f104ca
SHA512 b20a54090f2043bb1de8c0835bfa7a3e151e2b8fc2a0a543e0ae6de98564372c1b53b7e18298b8b8e0fc2e18f25f834a3632e4fe48742bcdd288bb9fba73a89a

C:\ProgramData\Avast Software\Avast\aswa0c06ede8ce7a5bb.tmp

MD5 db89473157a2109d2cc065b9c62acd27
SHA1 d903a0ed7c5aa5a686c883a597894657a8c0beb9
SHA256 2b8d115e38b1ac4ea4fe0ea24006e4e2d7e6429f469b4ff0f1ea45fee4e7e8d6
SHA512 41486f90632e52127358b7a6046b347d47ffbdd62970ed67980b56c247f68ece4d7d0250e19c28c7045ab3d4c9d7db40e1aeaf2a4ab33d6ae4b591f05ebe3d3b

C:\Program Files\Avast Software\Avast\x86\aswab686e721254a52e.tmp

MD5 767b1464f1e5eaf7928f43d293045336
SHA1 32851321a46c4e30deff1dbc02c39c21bdff96ed
SHA256 ff6b10776c7ea562b1328265a32ab7cf78e16d845fc13398a828c521c6855bc3
SHA512 03f77f77b90cfe177bbdf863369beb6ed9e9cecc3b52b0c83e1d1cba371f3c7bc0dc7dd37e4d5345607f2e171abf129fea14979cfc9778e74a22aa0bca11f2af

C:\Program Files\Avast Software\Avast\x86\aswd3998b41e3ee8a09.tmp

MD5 8db1be98cce0e7f430c80ce8ff5f8fd6
SHA1 eee6b1961b35f36749198d065af1411c4d0ef417
SHA256 d609f1c51e3de1b3ce77b4ca6990e75b9a8bc83751a09e9672ee225653c9ac01
SHA512 01dd755b9b6c75753d4f1af2de0ba0b48af9cc0283365278a7b33884409daf52d76a1921bcffbdd1778e86895d352afa6f130cb4bbbfd15f51498d76b29a9298

C:\Program Files\Avast Software\Avast\RescueDisk\aswf1f1bef5591ca27e.tmp

MD5 82dc347deb8b9c8e196a19223566a212
SHA1 fce43a71dfedeab1a79f01e1abb9537185afecf7
SHA256 fa14c8b264fa60fed54daa93403c007f8dd4e272bc47684b069ca125f9916b0e
SHA512 6bd1eb8abf1e2067acbced14a9587d74fd001dceb2120c261c74366f88a67dc03d5f629a026ec971ea727d0636e12b864ed41819270f30af7641e7d1889745ea

C:\Program Files\Avast Software\Avast\RescueDisk\asw07d3b9d15adcada1.tmp

MD5 ce2bc818dee23c17f03602cd90f1e036
SHA1 9103e39b383ae2c07ae779e4a704561bbb85260d
SHA256 ba4fcf4ca8615b4c76002390040c0480c4c9fd28ffebf2deab413353b6c63540
SHA512 00c6058e5b43439780d996b153ceb5d5d362cd19bf48a47f8e03951376b120969ac8ffa1c25696a7ebc0dbdb41e32859036c7dbd13d04b401cc6c13aafe87236

C:\Program Files\Avast Software\Avast\RescueDisk\asw0396d4ec98472465.tmp

MD5 0e173b909cc7b0ee28e384bad4069c84
SHA1 55de81acbd723308a8e400325978966ec9eacd51
SHA256 caea420205ed52aa638664d2a9eea197a66709d2bfbe1469cb74fb9406b6c640
SHA512 62c74b9d8d62dfadc3239b590156ccdaad9b396bd7e6e372fc315e36cd82f71777df63cea258c4544f040ca19fa5b0514c2391d0aeda8c4c067452880fc6bf16

C:\Program Files\Avast Software\Avast\RescueDisk\asw632c93df4ee4d19f.tmp

MD5 8e2f519507ba1b86d6fa8ae8906e8076
SHA1 d35134148bb47cd2f534aa48ab38b9ed7bb5f147
SHA256 99bac1b9b6c7df2858b07f6edf7ab3ef8673d7801a6526bb67b03777a2bd7856
SHA512 daf66a6bd1a06c47f6e4fd1b597816f6b997f2e795b48cb4ccc077be46e0c19af1477a230749731bcfc350e6a9e6e470a82c9cc8d7962016cdd4681446659ffc

C:\Program Files\Avast Software\Avast\RescueDisk\aswfef51fcc6c878bae.tmp

MD5 d8391ba696d04141dc29ec91cabf6d53
SHA1 e2369bc663f8aaa6d5312631a9bdf6687a957fb0
SHA256 d06710e8b818200329699072ed01c66bea6cd159580adf3a2284b8979cf43564
SHA512 735febf5719c707856230708868f8bd379c588af5310d011a166ca7872b7bc3a9054cf433676a00f237ca434f4d663f81cdefea0734952cc32efa8a126655617

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswd9b8a69aa82a8f61.tmp

MD5 6802de6107f474d20cbfa630f7b6d4d0
SHA1 31d2e71cef8f9e080fbd2d8aa95975c179f70694
SHA256 e8692cc981a9209288eaf7de5f9c82359d7e58b1a5ae75c4d1f97f46063ba96d
SHA512 b5ec47023003e26cfe06de1e0d8d188673f2ea0689e2c54252e7969475645b9a948bba85a5ea341f024d6944707f088d7621baa622063402eb728f7d79d7f031

C:\Program Files\Avast Software\Avast\aswc1ff8811209309a0.tmp

MD5 6a23c46ba9f2bc0584bfaadf50dbf008
SHA1 65cee061118aa1e717c74f098f4a805376189517
SHA256 3aaac12c0eefe871b4ffd5de0f2c14be4b824751a84da2050b7c85920b3598c5
SHA512 32fa845155be1ebd3a21720c633de00f778d2b41c0a1b9ec72e09f7ca9441b5acce3ef5b88b7121a3b93e946c1a105ecb01d0749411a79e2607c75954a07613b

C:\Program Files\Avast Software\Avast\asw87168ba25598a442.tmp

MD5 29a5e5a5651fd36ac18b87b9ef2ba28a
SHA1 ab35029fd1d4fa425e930970a59e651d29f3ab0c
SHA256 d01317294b9603c1c03cde8c0dcd110d7cefcdffda48c8978e8eaf41bf7f7676
SHA512 57552c1ac23ab3f26df5881dce63b46c70a0d34246e25ae68b44643cd5968af86f15f1816edb48a6f93695f8757c3dc80aa7d0c080680ea725aeaac0662bb8aa

C:\Program Files\Avast Software\Avast\asw91bb7aa933ae422b.tmp

MD5 be91b350117086cd013ed8f835f83b7d
SHA1 f837363014966b6d51f19ae4328b7906c8ee8889
SHA256 c867f1d4e393c5e7d4ebc091d03b34b7e89551e3270c343792c2e3690f86f828
SHA512 4160928373a8b962e0dcd26a5e139396ca92e73e6f8d29236a090dcc0246ac3c55fd571434f4420107210fc22235d45940f3b943e40e75d2f1ad3a12b360a181

C:\ProgramData\Avast Software\Avast\gaming_mode\aswb3b20c4090618e1d.tmp

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

C:\ProgramData\Avast Software\Avast\gaming_mode\asw400183349ec3fae7.tmp

MD5 1527c1fd5da898c3bdb68b8a105937a4
SHA1 d0f9fd4a698f91f54f78dd2043c1349a7e4ae7f3
SHA256 c269c9e66b2acdace62e8ab631f39c24801c4644193bb3934a8dea3c43f669df
SHA512 d574498392a55b47dc81276d63a33e9870232e77f60ac0d78c9bd29e3d419d015a19241e86a7963191643f6c0d0fd2db613ca5290d559c3801358a60fd5cd27b

C:\ProgramData\Avast Software\Avast\gaming_mode\asw637316193093e1c8.tmp

MD5 9bf31c7ff062936a96d3c8bd1f8f2ff3
SHA1 f1abd670358e036c31296e66b3b66c382ac00812
SHA256 e629fa6598d732768f7c726b4b621285f9c3b85303900aa912017db7617d8bdb
SHA512 9a6398cffc55ade35b39f1e41cf46c7c491744961853ff9571d09abb55a78976f72c34cd7a8787674efa1c226eaa2494dbd0a133169c9e4e2369a7d2d02de31a

C:\ProgramData\Avast Software\Avast\gaming_mode\aswba4bd3b28f029c8f.tmp

MD5 0bd42763975dc54ad5efdcd321c750cb
SHA1 24202455a58c7ced31240a90603c6489728bbfce
SHA256 4845a0d7b287399933536c12ad5549fa4f4d49f42500c7311dc2c3c108480a7c
SHA512 9204678ddef894657c0f6bd5451294e104ffdea90dae12fc3f642547debb80435b0cc9d08680f50482bc1236daf5ae1cd79c322eadcde7765e9e251231753e79

C:\Program Files\Avast Software\Avast\x86\asw14b7907d3a40ae1b.tmp

MD5 bfdec6b4301493292db20aa5f172d438
SHA1 17fc1c10789336335ddfd172099695f5f0f3d337
SHA256 d363ab97640d7ec51b160d849543e2a56af44ed9dec0dd4fd8d11681bea9b0ed
SHA512 a2009e8dfbb38f2d22432eefc31168d1e02720cd87cf4e6f0b466ffb49e6d80284006969c09e7a45211f46c73cda88c43f5d293290964c6658844c707e14d75e

C:\Program Files\Avast Software\Avast\asw7904b1141895480b.tmp

MD5 304f226dadc5468f039fe02dfab3046c
SHA1 f50b4b6bed200b6eadf67508fcb6a7c68f1f5b13
SHA256 e5410f5680c636ea57b4dbf730e7d1c2c17b43c43b10cb020ab254a1d793ea0a
SHA512 5e6e82a3ea2c7b616bd17af3ec0ecc3157525d0d530422a86474e4fb83a0ac8d7052a56c44646238ac19be41bbef9d0c7543a3ec8752cbf22d384b30ad14aece

C:\ProgramData\Avast Software\Persistent Data\Avast\Logs\Setup.log

MD5 0915043c84744f604f822f92a4dd9dc4
SHA1 7b6941da408194b63a209b3a1b3b379ce7bf0d1c
SHA256 94387e6cebc09af97f09971080a28deb22ea7c882976fcf89b24847dcee1ec60
SHA512 f2307ede169961830cb14a9af628ea5cdc4c6b23115e943a02c1c576162ad6885db8eb9f08624a06a781d5fae1deae5fe971c8dab2b9f9a9692c90ad13c53d53

C:\Windows\Temp\asw.63e778b01ae0e962\New_180617e9\securebrowser_setup.exe

MD5 ef48c6868425052640b553c1fa816e48
SHA1 5f662be2274e52a2a93708b96435457f8f40f393
SHA256 bb237c15d4f239e74cc26a289e720164e7881c10eaa384d33ec294c0827650c3
SHA512 8be9b74ef7836fdd737e1db4b5c4f7a2d3af0d34bbbbd2330fb23c6792bbbe2d323047893c4d7c1c95451261d7a749bcd649acdde87147c577149129533b84fa

C:\Users\Admin\AppData\Local\Temp\nsq419E.tmp\JsisPlugins.dll

MD5 2cc408a77060b0a5208f7c16ca572309
SHA1 7cf03e5be4fe3998b79d54116d8cf55bdd7f1767
SHA256 957a320332b97875ecc425a34f3e53ff83e63943ec28b1bdddc895505c885135
SHA512 a43ed06f702be6b3ab7835e47a28e2e97f4c0f61e86d04125d21d7a935ee39a207585cb42e02843ca43a0f8c55f79272da05d5a8a19d7cb3289743bbf0cd0333

C:\Users\Admin\AppData\Local\Temp\nsq419E.tmp\CR.History.tmp

MD5 3b8b39afe8b6c53560900a74ed8dd4fd
SHA1 8cd6bc1bac502f4592958df0bd75c4cf3a8969e7
SHA256 7f8883e1f42609e9616a469717be15f6f38fe27231673e384abd0187816a2262
SHA512 0f933c1fb34cc7afcee3c632e676fd0e782354863f1f83c1ef34e800a4f7c4625e60ccd57c17373b7cb252d44926cf92b91531061d532c6f8396dda4aa7520b9

C:\Users\Admin\AppData\Local\Temp\nsq419E.tmp\FF.places.tmp

MD5 ad3b813160c2419beeb7d3c6309e0055
SHA1 e51d17fecb625d0c7bb293dc5661d761fb2b0417
SHA256 e7b3cf52a3a397778eb71aed1f5d095b00f0acba045ece3ac43ec8649ba6c791
SHA512 877cb5be837cf75291ff81d3e06123809832fe0f51a1e9273066af084a6c072b21f4c98123ce0bd92395023bca957d30f819d6f92986f0cacbbda00bd96acda9

C:\Program Files (x86)\GUM4DC1.tmp\@PaxHeader

MD5 b71137c23a8dd1f97c6947fec398a203
SHA1 4499f8bf48cb809329262d7efc4d4fc1bcecfefe
SHA256 828777edc72d233cbafa6bef915d1b9b34be06e90785e9086ca1ac387570ab0b
SHA512 f9464a475f831c2befa86555c71e6b1b3f01af8a8338cb528fefbcea6e06f452ab3f9dde2455165822a83dde99f2c675c234b5befcde08a4c474666e720eb3c0

C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe

MD5 87cee5593f2c93fa9aafe29413d1f4d6
SHA1 f94c9120675489c5962305c87acece115547afe2
SHA256 7bdc9f96cd4c9c8f91b10a2a2507c0a964effeb00a8b792c5f0bd309f17035d4
SHA512 30e717972cdcb322cca7e896b8c4988593bf016659d4939a468bff6abc038d51d9e20b797dc81d780e234e62bf3e62c35d4e8a2e7cd5f9d5fb6441592a028a75

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\TransportSecurity

MD5 5a1a7ed297d68f919fad1e510d57f986
SHA1 9d09a098c1f287a78d9237b7e31b9e6d607c1197
SHA256 f3b5b5648693df8fd09c76ad67ec9efa9208c317993f77ce4cd768eff0178995
SHA512 04a9ae5f4737a160add4020b26f1db1500fd3b48041f44329753a24afdaef8d636fc101f34784fa49f4b39b062b36f42400b98770a1b8f0504a7156e9d4d1920

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 234f618f09a8a565b0eeefb4deebfe0a
SHA1 8612602beb4b615a4b98ca45393218dd053bae53
SHA256 5386c1a06ff42b21b023c58dfb303aa66b3ead95a37623b1c25fb543b87b9ad0
SHA512 0692fa9bd46463922401b13cbb70575645b0765e0d8d8977cd68390f5c36fe92972feec72d25215a2021e82fe0cfb2a1cb37f163ab813318cc2e663540f82fa6

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Local State

MD5 2330cc897264e997b6309927c51135a7
SHA1 cfd96a7a3da25c86e06c614521f7ce4a44d6015c
SHA256 b5bf76e45cca8fe7d8318e551cf9c1a8a965a3c20f08aefc4d17ec7881b1feef
SHA512 6652f239b7a876d5fcacca98b5b34fdf7deb6b3c39e2effc5ecd2069065966b85283b3601edecdda4cb0e0558f8c3795c6e60ca44313fa549ccf1801730f25dc

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Local State~RFe621037.TMP

MD5 6f4ec371c25f192ee220569941375337
SHA1 c473ad38ad9e743f6d2091e4b6d0ed85936f6447
SHA256 cb26ee46eed6c9945b2e726bdbd496a008157ad858fc2381fc0a15e3934a66a5
SHA512 8ffcd18309966a84e8d4bbcf6487abdc61b5342bfda904f6efdf844e05d3b699382faf657f74bc521f71e77d61e603adb0e0f39d9365ae3fba6043ea566e2f00

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\d0a52389-4619-4db9-8537-aea8e1367982.tmp

MD5 e1cb0fe961a28b30faa8ea3056d498c8
SHA1 9cf1add65a539883d5a6d2aff8b463e7a7adf20e
SHA256 e2067bc8be6e34af6b0a0a772079669d55c10767a35e9115ee4349d477398077
SHA512 9d0eb2f3dadf15392092bd3b1189084ec9785b9b307253c89ff5a687fe8257ad380a000bbbdfa304d5598a24d2cf01af00bd070a383490155046dee6053d5555

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Local State

MD5 1d2cf2aa9c8db072a5697c3d73b4d8b7
SHA1 04dd800cd0af1b03f8f51c2790067a52033442d4
SHA256 e05c34b392b760f66c2595a7db1a0d4478336a10f115ed7d93f10cc1f905d8c8
SHA512 ffb3684592d255f287698d1f6087f91517d2bd93e7418299c64288f06048507db5de60f765d2ea5f4df9b0adc11126ded6b6fe16629e4d812801f14a90c61c7f

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Preferences

MD5 e135190a0500e5a6c4982d7c8d48ebd6
SHA1 ad8f68edc1832e83f049cb95fbb115a307da5a50
SHA256 590cc1479f9f49c4c22df69c1d64026e47ceb3602c46447110d98d1c609b3abc
SHA512 d5677e737cac689a948e6689d2566278a8519d09a06407ac969dd71d6add5f5e3d7d7ceda72d1e4c1493c10969462fe77051a397c74f2b2db6248e2e75fb3a5d

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f3afa912d964184b03524bbf519b5a94
SHA1 a75b565a842c8a71678204e6c05ed95d8dbfc82b
SHA256 5f72e85b808f467fc5327c2fe52010fc777decfe368c33a4120247b0180f1619
SHA512 9a15f5f2440ac5d74671fa2f223ca599278faf2cac4c93c78e4815665b1cd166c65433b4859d6d7811875357eb6bd053ea5f374f75346956757e0aaebd6520f8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 76ed282cde900f6af1ed01a46abea296
SHA1 e609172a2e011ab5bc595a7d1dfad90e95c9a670
SHA256 1ec05069266c58987d385ce191d155d9e1fbe29d658d45eefc1acbc14ea45096
SHA512 60034c53521a95c318433d152561e528f9e1ba6aab9b16c1b3a88cea518ca34338818cf54754e355fa8284e7f08c2322e3e83ed488dbc9622afdbedc276ccc18

C:\Users\Admin\AppData\Local\Temp\eee3acea-e20d-40b1-b606-9f3838a6dbe3.tmp

MD5 d343a7167bf2962f27b54de17ec166a9
SHA1 cec2497d5ea819f05be656b8e15f79a6eaf27acf
SHA256 a00f73fe6dedd17fd34252c40d89c6be5524027ddb2c0effdbb298d7d7065de3
SHA512 64ada12e0bbd202c2f4817bb804d7583baaac469eaac0fd8db0df6bbc9d8d33603feb0cbeae6830b205fa056765da835b0e35b0733e3ce8964b8890aba382a4d

C:\Users\Admin\AppData\Local\Temp\074d9c47-63b5-4a0d-8a70-3934ae07c6c1.tmp

MD5 ffcff8e2ba102530ce54f9ea1529ce48
SHA1 0d3ebcf3ca535032d825b6a0c5a4c5e45733033a
SHA256 bfaebcbdaf420eac93d20ad94680fd13fa391bb8d4f7a29603b5172628fc093f
SHA512 e5c8aeccc919a8b07442bb291b1da38a0f82f5a1352b8ac1edbbf9b471675b92cfae53d118c819ed32dc8992ef8efb943e8ecea73d28706a7c88b8d83fd025ec

C:\Users\Admin\AppData\Local\Temp\181ffff4-d163-4928-946d-a1fab5c18c41.tmp

MD5 db9caa5e33f6fd038e432d2b1cbe7175
SHA1 2b23e91c9463a74e26c1ff9b8640a22cc6f18af7
SHA256 57018fb5fba3de2db3e613140a3847068ab680a45cb4dcc4291bcff6117a06a8
SHA512 d70e008c5fe4b443ec822259e9114aaccf283a3f979b8ef2de174dcbf4935525a81428eb3b7cf0d22495bce439257b6ee36f66d33ae5fec6da46314c167c719f

C:\Users\Admin\AppData\Local\Temp\7447c6fd-30e0-4afe-a7fe-9844a8c5169a.tmp

MD5 a5b89fd877f0371d8ba5c64753364409
SHA1 9d1bbdf1eb2793e9a1d3dc5971d20698aefd8998
SHA256 f447fe42a51ca2204b62388624dab97ac001c58f17c48fb04148601e43585c9a
SHA512 97f44e4517955fe555e19f253e41e89faa8512aa8d101b901806fd9085446f5e9dbfc106a87e535395f9f870e1385a148e6404c856920618452940d196d61ac2

C:\Users\Admin\AppData\Local\Temp\5b3ce390-9a7b-4b82-abaa-9f8bb2a57f30.tmp

MD5 f50e00df362d5a597b9e7f549df2587c
SHA1 cf6aafdc3f25bcffdcabd3a5db2e40d1cf42dbc9
SHA256 1518106d36a5770684ce0cd86279e19ee601225d9222f7f555421990a130eebf
SHA512 4691ef983c58d2f027bb0a283ed0a3b11da972588c4c4ab3462fd2e4546f0df85ed1c1f56a481cd86470e3ed02ee8859f22bd04c75a47ce1fe5cb5c983e64577

C:\Users\Admin\AppData\Local\Temp\d499a4ba-b3f0-447f-9042-e8469e6e1a85.tmp

MD5 7fabb7813703295a20612e6c811f982a
SHA1 be28a80def657caf474829dec119858325115d9f
SHA256 493bcea5b2aded060e245e3285276813795831006abf24abb2463479148fb570
SHA512 724f2091a84eefb064e39061b8787511f08b935e552c706796cb1ffd2a4b2451c30f3e47c272b327a2c3164fecab018344908f76612aad9ed39016215d3999dc

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_645164781\CRX_INSTALL\images\cross_32.png

MD5 74a937332a0733a531ba6cfc44851f23
SHA1 54e339e3369125f25eb89f6982c452f41984912c
SHA256 9be12d0c6f86dc0852b6f2886d70ec259b8a61ae4b3b214e40c136ae4ff900f8
SHA512 dd4c3a8be8a68b28cc860395639bb3582ceb65c0a021a6de4aa8b84c10ef0947a09f08b5af4e25f62ba02a95ee729f9d9817ed7f4dd827025f870b56739d4809

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_645164781\CRX_INSTALL\js\popup.js

MD5 1fba2a51b1c640a3d2705cb5e233e32e
SHA1 38cfb5bb67ca4be6ea735fb7d1d1877f57cdd178
SHA256 cdaaabb9dc5bdc015a0dbfeaae8d8e4dcaf8e38e85f1799d655efb726a39ec48
SHA512 ce434dc5e473bede1cd2c31361d5f4509088bb9854544796ea4560a25ceb69fe09f41d9b0779285342305aa5eed6580901adeee9623b956e5acdb04f16fe021e

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_645164781\CRX_INSTALL\js\content.js

MD5 0fe343f25f391db514d2866658ed3dc3
SHA1 3b7f2308cb5ed9e9ab46a440ca6db12713df68bd
SHA256 65c60616a95eed6880733fafc420edc0c6db609712801d797851637a0ab41c22
SHA512 7ab5b87b504457619e55c58f295084d6e3087ced8b3df677e4de9fbd42cc2cf75bfa31d8a854d0c6449d7b84def74348629991458e3293af3e14ba73567a1fd8

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_645164781\CRX_INSTALL\js\background.js.LICENSE.txt

MD5 94ad18a298e8f3c03e16245453d05879
SHA1 f630a6be9dad59904c09a8a1c88fc96c3bca2d5e
SHA256 843c744616c171f24616375dfbdbc61c8c66f37e7dfd33f901bba90842db8b24
SHA512 55e83620f9a2c61ea50536ebab97eb99002c5bebfd4ce75694ff2eb5b570679ec50f5c0dddf2d3ce7de79496c5dc8e8fd0bf1423d1f4adc2ee9949cf7a6fdee4

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_645164781\CRX_INSTALL\js\background.js

MD5 071f800c21da32c48d5f581a3736912d
SHA1 54bf821cf8d7518c4a78bfec3191ce7124cdea08
SHA256 b2895afec7b11c937c14a5458162550f80fc03820f016644f7b0a89c46080148
SHA512 acd07070fffa4d882fa21eefd0f514cb0e7dcdd5dd1881ce0356a816e5ecdc1a95ff5a65eb75868a2233dfa4368f07f3e98b4e2282eddd330a757547abc2ad60

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_645164781\CRX_INSTALL\styles\privacy-consent.css

MD5 c83c747dc806cf7847fd56e0d18a0994
SHA1 966f918d64a703c2bb0b2e7ee2e23664940c6950
SHA256 9e4fc8a1ad5e978814a08dcc74edc423a3e98aa84111b14f9b3af2f846bcdb0e
SHA512 13ee1c9ebdff58dc8eaae04dcf55497e02ba1f1d4a41129fdf1bc8aaa2442662291396c75f157b82c42eebb900068e51ee4155fe1b7e5193de4c71d06d8f7828

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_645164781\CRX_INSTALL\styles\popup.css

MD5 9e9c56fe382a26a2238ca89489d163a9
SHA1 0cb73066124627a88e25d75a27f58a97109a0e4d
SHA256 e026f4b6bfba94b4f5a4ebcb0cb2ab216f8131780f245abfd6d17daec365cf46
SHA512 72cad108c43112dda3b483a5d3b29d44bdd1266a4364b8cfb69b2591c81f1a3f099920e8f72b492cd5e11c003be53d07b32e6ba960460486b2589be4b26f7c0d

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\pnhojlpkdnfhikpofiijpojgpejkdgpj\1.0.2.631_0\images\icon48.png

MD5 dbcd4cce9af34a045e5c0eb545995989
SHA1 50d40d2836d1c8a4d3695df338b227100c199f1a
SHA256 e15bf8291497ffb08dc7e3dd0b76dd050eafe6dfb7f0464240303538d981a3b1
SHA512 7e535a70c207ea16944ce47c2ae39fa9ef1e0a88cba9c221854f5e130126ca83beddcc6561dbc75407a8cb061779bd246a9d3fda5a5fe5791d898ff5f7a40889

C:\Users\Admin\AppData\Local\Temp\d80b518f-bd90-471e-b56d-7a42045ad33a.tmp

MD5 21b06e448a0bee23eb6b80dfb39f1e82
SHA1 d60b3a9021a704247af4ba58bd539d42f780661f
SHA256 3cad9f24f2ec2bee7bef2410ef713924640bda964e865096db6dde37103481ba
SHA512 9678b1302eb289f04c0fad0a60455da7d24da4bb72177561f8668f0995d695485eba915bb222d7231a8188ac6ff3b4b0ffbbfe3b725b9c0112ca6af9465f5709

C:\Users\Admin\AppData\Local\Temp\25717eee-a1b4-437b-b405-9c5ada4d2ce2.tmp

MD5 65a028a0d2831eed0228ecda4ab9ef2f
SHA1 86d5eaec3e1c7ecde3f37ab36a017599ddcb2138
SHA256 5cae2b06bc5525e26e08cfaa43be7a5f8df88053397676cf81a5402a1ea0059a
SHA512 edad812dffcc0c8b399d3c5c216973bab2fe9e9dbc0d2c6efffc8cca5f1c58e126b83046c4c90febf003f3afd3d3c12c9ba46ad9d18975f2a6c5094643ca4f87

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\pnhojlpkdnfhikpofiijpojgpejkdgpj\1.0.2.631_0\images\icon16.png

MD5 77764cf85912647978f12a6b65e8a46d
SHA1 f95b78085dc60456fb4751b9b30637f176ae8698
SHA256 ff16de8bcf3194608559789e109d85fef81e4dcd24dee4e6e40a7df57e1b97eb
SHA512 25b7e4d8dd5fc02c07c2ff74c3d4d33121610e02273b6018398d78e010dc45c5c9379199e510b3b2f6051dc8de6cec9f95f167ad98605a8c64f6b16c29777570

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\pnhojlpkdnfhikpofiijpojgpejkdgpj\1.0.2.631_0\images\icon128.png

MD5 025d8ad058f18588c7e212d9e69e90e0
SHA1 ecc58b2554faa651e47e0c2e0d3636d79d6910f7
SHA256 220292bed2a85099aeb4fbf96b6b29b66ee9136f76576a7a92c3baed63374c95
SHA512 0150c26193eb8acd4e27ae7b833fac1b0ade008db75a5652c155b597ae92d4dde80546809b60452bd44acfacd6e061c7bbedcb9099137d65a4a56111f89c9625

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_645164781\CRX_INSTALL\images\cross_bold_32.png

MD5 8700fa509bb04d3439b6d7ef765d37b8
SHA1 a1ccf88303db1032e768ba02117c8af465dfbb9f
SHA256 9f2fd5eb65300915a114741c84d0c182ccb6753d12bea3fabb3021f0794d9765
SHA512 d356327006e009e7c699c37c1ffd0ea076cface1a13df6d76606de8a44cbb68541e1e116b18f1564a2a7c91ff85eac348fcbad1c5d52d259d91b80e283e98880

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_645164781\CRX_INSTALL\styles\content.css

MD5 01b51cecd3ccae18b19885a3b0ae1635
SHA1 dd13c7d1f2c9162fb1ee4bc2bfca14488087c528
SHA256 60a4f99fb6a1ee65d31e56a2d6d0d27c3f58c676c56ec440de3c3a6ab6567d66
SHA512 f901a1d111849e9419bc11004c260693edb48f6a01a7652396e969829b62be3ab6ae3c6ae11c5818438233bdf149ba1c8b7d4922885799de2f00b03fa2a1b1b9

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_645164781\CRX_INSTALL\_metadata\verified_contents.json

MD5 8ca60681b947bb417e0e92de2f1417e9
SHA1 515e4349c1ffbd1513f87180f3b07a6605e4688e
SHA256 3f21c2a6ebdc2af0d79dcbe0ad97b96084cf73619df239e6a20eb129d4b4b32d
SHA512 826c81f8ee01ca700d664953e735b96c4fe9e73c4b8788207788e2400fdb9d92bcb3d2b95a94e8beb908d8020a1e39fa7f863f7e2284ba3aab5285a2247ca603

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_645164781\CRX_INSTALL\manifest.json

MD5 2ef3e81554d0d9dd1ea05ae7eed6e047
SHA1 8fbad7d1d00796d85c9339f3a612417bde9ffc04
SHA256 d4208b59d3dc968b5d276eca1c109d749e709d6a1cac7dab152f6c2c2c421d1b
SHA512 780d32b8c21ae19b8feecff2afdbeb1124e0c7aebdc40b27c45e56f4fd568d9752d824c9616cc631604b021dec0afff0baab801cd7ce8b3d6870095422ba05c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 49572bd11e8d731d42b7ead2a71d0f26
SHA1 1b2e5010f58349f703524cd75b758b5d82223bb5
SHA256 425dc9010f8db041c1435cc6d080cefe42c2205a8c1f1c6d25b277af337af1bb
SHA512 3abde66ff1b554a1c0df049a03be824b595a0a4183d30712a40f72c7e670a0a0e7731c12400fcd681093222dff2107b8c0b8a26780d1c3cdfb4054f5fee77621

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\lt\messages.json

MD5 609b93a82d5d438f8ef65c389ca95478
SHA1 9623741e1f1384d73bd239336fc3e280b7f233e4
SHA256 ce4a98ec47c5e362871448ccd1d911f4fc1d2db07331cb6df652cda7e216cbc9
SHA512 58eea3b3767365c88f5fd410c2522eddb097b85654560c8fc0cc48c57c38d0172689dc115ff4ee0f6ba3876fa0180e24e81a8384b7cebd98f21f8b56ed318224

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\en_GB\messages.json

MD5 9130e39fdab4df74d4b8312b64bd83d5
SHA1 cd58d86c4748a9e352bb73c5d556e9761cd98ef7
SHA256 3ce4079da2baca3d630ee0b04a2c2878622e2828c6b9d1cc1393a238d78a9cc7
SHA512 49c846c689430c146170f159f017c1cb8afce97187a29fda2b775fddc89462266afa74999fffab17fddd87fa760ac066156b179b2ff160628eba572e9db5fc43

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\images\be3480f96b56f0a5fbf69a1cce891c70.svg

MD5 be3480f96b56f0a5fbf69a1cce891c70
SHA1 6d714c1dd8af8af3ed4c1ca2fa75b81f4edeff49
SHA256 ecb734ee01d3f65481ac0e61bdcc6e3ef7ec42303829eaa8342cc79e9997bd1e
SHA512 955c9d28f62e57ab7b26ca5c60c261df18a1f0a20385f9b963edad5750c7402e51c40a9a3d66c4d51252d6728cbb7a6c9ea975a4ce45a24188c420e11454d830

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\fi\messages.json

MD5 c144335cd1435b420741d98d88173546
SHA1 2f9d5bdd12f33cf616ab1349e0eb2e1964de241e
SHA256 7d1982d66898933dee4687a2d69be095ae7aa3057d1324f551f4b888d9dae699
SHA512 3ebb570ca45d732c878f277c21c6c151ff20c70f076f43493ba035db29e8f825df54660a76a1d3b1a6be433e268c29e32e62b6b54de744b4a14b6c7b284f7428

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\fr\messages.json

MD5 f565821dc14fc8cd57d12f6b55711c3f
SHA1 d4cbe55725518244900250852589ce9026bcc6ef
SHA256 7dff3f29617d210acdb4a1b781888ab43c19535829d3df95cc39217a5268f386
SHA512 74069f6230be860585d553e3a1ba5071d6c50a171ccc728a723d1ac6f6ef8d68d1cdcccb57acbfe21f2c37908276900f46a6297c974cee8c20f3b211c8347816

C:\Users\Admin\AppData\Local\Temp\scoped_dir60_285752720\CRX_INSTALL\_locales\en_GB\messages.json

MD5 70c7984777731215a65a737b98c49dfe
SHA1 60da2b4e5a80334aff5cab61d67fa0facc62f2f8
SHA256 fbc68d0c4ed3346ae2a84580168d43b8ce12bc97564e04131ce47a0c3328f1b3
SHA512 2609a01feb2f4aac8edb180d854dbb5c93e9b053791d2bfe9c1bc3d7baacb8fcc75c0953d7e150b2203ee1a2f4e65fffdd281bcbfc2fa29326576d7b887052b6

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\et\messages.json

MD5 ef87cb0ac7a3b415d75cdd36be6f4828
SHA1 f68f606d8d6ea71240ea1bc88d04f5b0ddd9b170
SHA256 0e56ef46d2c21ac8e1870f178b91f45a4726baa3424b2e89bf1d35ee01e25da8
SHA512 60f98c8feb52eb35a995edc1c840847f27fbbe666b894551ae41dd4121a8679e5b84002a1e8e932ea7d73f3826c46b10b31dff4c06b38d158a690c045bd220b0

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_1525623748\CRX_INSTALL\fonts\open-sans\open-sans-v15-latin_latin-ext-700.woff2

MD5 15df1fb3e82321d94a0ca758c62e25d2
SHA1 9fce105a87ee8b8bef404942cf48c42ba5ea1ac2
SHA256 b41570405890d4f995da7b265ceb5cfb50246a940f9489525a8f526cfd160356
SHA512 6e18ebebd7d7101cd04394595e4243abaebac2894ec303978b8fcb892a2922539c945ee5c549470ce79e44dddb25ccedc03fff272fcda17883c29b504e5de2d0

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_1525623748\CRX_INSTALL\fonts\open-sans\open-sans-v15-latin_latin-ext-regular.woff2

MD5 81d0487ba73afd292730e6f89e83c2ea
SHA1 20f0b5b7cac1d9a707d3cce56b7a4c16a5a11d46
SHA256 557116ee5706daa3b6cb2f52e7490e22db9c30ebfc447a5c85458a5fa0f6f84b
SHA512 f069c794442a237d55a31a4f17fbfbf5d8c4d82c12508ad45371641dfa177f03b7ef59360d2e91237d5d3c38cd11b0f3a145317b58af8d0cfc0e19c65eb313c7

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_1525623748\CRX_INSTALL\fonts\open-sans\open-sans-v15-latin_latin-ext-regular.woff

MD5 2b6f63fce9104d1223d83dd12cd6038e
SHA1 1ac49ab02668c5deb14a497faefcb7bfa6c15731
SHA256 32ad89cba217fa7f180d331f6e43d87a75e8eb1b97ed102d178c534fd6e51038
SHA512 1ad5b9865a50dce57ff6571352ecb4467ab7c6821fb343f4afbfc85c7cf35a4c84a8ea4357fa7878919947ad913aa2d8b8318277373fabf2297e78ef20117aca

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\img\icons\icon16.png

MD5 74d658682a89aedc22582c15fe8d8583
SHA1 d0320a5c085a96d7f87a8f07e2045ffabb56449d
SHA256 7f4b72bd4bb72d574b516de85126cb91d9e9492af939f3a9bae80a8ccfd53b56
SHA512 cf62c3b790ac34bc07411ea158bd5a1d3e3549738aafdae6202fc37a2b429effda94ab2569f3314ad48d05c0fcf99ba97dc65b5faa1e5b92d9da41f548f0acb1

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\img\icons\icon16-active.png

MD5 7305121e28476f6b440fc21199bcc987
SHA1 d23ac11334ffe6ed2a4c068c88f48ed3056fba1d
SHA256 5887411ffe405d0036d5ae35f733dce33c58552933fa298cc78fb3466864464b
SHA512 ed7dbd8f1617b7d4c1b8b09939ce8e5b4be2271892dbe5ddf68b43b326a28d48ca6ca46c53dd81fd9f98065f2a61cff7fe22cd98ad4dc7b8c1cf0acfe4b4dee6

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\img\icons\icon128.png

MD5 6a26cb923b8a415d07c30e8b74ccd136
SHA1 d51efe6a0c87537874de4e6d1aab53bdeae5929d
SHA256 adc7ed578516e060e17cc37241d1fc058777cb0fc808def60d8bfa2309bbbead
SHA512 58b57af5d6b6755b136e1fcb32e5a97302c473c560b69b5c2c1500bf204a5092ab0b143a10a50e4bcf0a2cfc926a98f1d63f9964097dcac5bea7968624d47789

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\img\logos\avast\icon.svg

MD5 91a7c3ec0467f0e288f6afa178656bee
SHA1 e631f3800708f0ba1436200342726a3cb588f119
SHA256 88954d793a1c88f81a124b6cd9455bb7c99727ba49f99a437ae21aa1471dae92
SHA512 040cf05168ef32067205a34daa863720d698bf2aa8fc7a9243b5854de2080b51ed03164933ec67f5edd8d9a5ab7b4bad09551f100b5ddffbd164141ac8ad2a7f

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\img\logos\avast\icon.png

MD5 94a73def8b7e2c9ca07b0d974acae57b
SHA1 5dc258192300325ade68e7ce5079006e7ade23f9
SHA256 a0ea771f573c37d239707dbe484aa1de5764f77581f6eabe4c856a01d84445a7
SHA512 b5c3bbf626987c3b7f80e534d889430235a7950a1d9e1df48d67b9e3d7d9824eadc6d7871d46e0ab4875edaca8c7dab7d5109b658d8ea0a98ccbef9e47b0174a

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\img\logos\avg\icon.svg

MD5 44b895cde80fde31846a76eb84925017
SHA1 0a7bab1bc7f7c05e53e78ccc0000cbd0ec763689
SHA256 98f371676bb73135c55eb5e40262bbfeadefc717d0bf175b8da627136bf07164
SHA512 009db3c97f0112966efc9f17ec3e66c74c4ce9eaaa404a5c356c3e201d2d5e7ae62225423f176cbb1c826d13abe7b589a43e40b461b7deb3a5a4a6ec0de7b5a8

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\img\logos\avg\icon.png

MD5 06918658a5144d15920ce3089802bbdb
SHA1 58df1500c80c86c68f08499d636679cc13090021
SHA256 b2cfb79adc45a5587a0b187580a72fe778ac14c4c073bd624efee07de9c27785
SHA512 e5da10ec6ad6161b9757fdc37572c405283512ae14b8cb431358d72da295fdd3cb2ebcd0e5ba414dbd84bf12aec5eb229ea8111f0509f9d008cb5098f9605953

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\img\logos\ccleaner\icon.svg

MD5 53d3147175fffe2d71eed5db7ab21138
SHA1 4f3c397950706342b86506e33229fad0592747bc
SHA256 fd9001d35b016899e7b80302ce3f754508390a5d5775a337aeee12d0cb1a919a
SHA512 4b0160e80c258e43cd9087380876ec7815d30dff1954dcf2662ef2a4085dfe564fe7b998044832afac26c902fe5f744fd7507ddda7ddc37be956a25265de23b3

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\img\logos\ccleaner\icon.png

MD5 e173f076151ecaa315777a1cdc6394c5
SHA1 0c3423744ac9c011d4f40b9e416bf9bd0748c753
SHA256 ee060039ee5d705cad81a871f1678864a801f91a2e800f93985eb00a0d23a16c
SHA512 069f004e642256f07dc078164dfd02912639d803aff32337080b4e78fb71e84965a1c01ab16357bda0eab50b1382aeebc172c2fad9d11b68028d055ba9e40bfc

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\img\logos\norton\icon.svg

MD5 2ee58c8732aea4203ecb92e16e5ac68c
SHA1 f8cff9d53e57833e10ad2cb2489fb75a57ea7003
SHA256 cbd20bdea1a73d4cc506fbafb729d201d01fa08f1884f4495289672f34f398c8
SHA512 f6deeb2e330be99e4d5ac63625f7b7f2a052ef2f778c99657714245e9b2ad912dae5029e8dfcd5affc13bc4c892d4ea508db471f009d6c550030c477ee98d87d

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\img\logos\norton\icon.png

MD5 75e461d8925e8468b3994dc838bfb68d
SHA1 40a05fdacfcc9f153cd3df62a95c75fe148fc0fe
SHA256 fef31cd788c1845647cb739db304cb65fa21129a93500f51d8865ce52f75a0d3
SHA512 880c83b8414bd441d20d61360b7018b4f6fcb68c2affd8b1e32b1d9317e86dda8f9eba925df31b552011d5158eee2f30970756b26b2e77f3cb91ae35c8c37cc0

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\_locales\en\messages.json

MD5 c01bda904507ad435bc35744985c4ef7
SHA1 2c298313661fef987782c54829d0f16dd8b129f2
SHA256 661505cb11e4b456a6eff122a081aa95e742b405de833106761a90193b2789ba
SHA512 52870e5b03ab7db71a9588e775b379bacfa34a4d6afa856d4b09902ceb86b8f92b5b610c4e6db164a13a8fa92241030bc110fc6688a612185902af6e24d1aa83

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\_metadata\verified_contents.json

MD5 0e7bfb2084dd49ad6bd4b927d594794c
SHA1 ba3bf3c75cce643968c7a3cb9fe15f9010d938c3
SHA256 e281d85bb3163e6ec3ead28efb084400207b64e690c8302d87f7924b821e0064
SHA512 2f10dbd08b917c8c674cb658e9911202d6f601d089ee66f05972bf03e27ff48c2b02bf691bbd30da83ed9a4aa0f8b9f72dc3c0fad4d3754833713b8489484060

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\webstore.js

MD5 ff713828113f6377533d41a36bff5ebd
SHA1 7157c2333be0a6df2db2dc0c25d36738acc823f4
SHA256 60657bad3b62a195d588178203e25df302ecdb8b51fcc49cc4f628aed8998dfb
SHA512 b55bd6b59b57003785db6a8f7e0f46b2ff4db619b4ea143c09f1e456ff1c5efffa46226984849cd8da98f48c06a79a4d00edccba3b7e1d4423e448f1be001113

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\popup.js

MD5 d678d1c275e66e2a2049c30745d6f0a9
SHA1 f47d058e0050194882f2313231cd25d7efaf5d62
SHA256 12ffab848cca31b75f8c838491c4d5285d5193af8d84b75cdcad358e20af1125
SHA512 79aa3784daa6fad44d920110893833fafc3a3dc04c22d26712475cf3b8006446f924bf15643b105476e087b49e401f56c7d3ac26086334d72c1b0da9ec0cf4b5

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\popup.html

MD5 533e314c6b3d2d31a1d89f8885c80983
SHA1 64605122a9279193b2465d88dede450471935779
SHA256 98050462e9480795ab7e63cc3f097a4bf6b8292e1fb27eaadfb0e4ca6e7adbd0
SHA512 1696447537d7f0370a7a1c296e59f709021ddf0eacba62de33c9fb794309aab1eaee3a5c9534a26c0a10d6f7ecf81a707c932346fc90c8c147e905c5bd560f77

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\overlay.js

MD5 2e139f8901f0224cdf3c8282de49eb99
SHA1 6296747c5a575f79367231f1787409df1a88244d
SHA256 9a72fb36f88ee3cdec265e68d9483c86e0ce4966d9c236a5c3d05e6d463ae51f
SHA512 018421482734e7d68b817c2370af79715bfbb9299bbc0787f4a785395b97e397ffaead19716065ec1264fcc77297b904156b440c3d0a8b7e5a117658507a2d00

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\manifest.json

MD5 ec4cdef7fb696060841f410da00579a9
SHA1 2057908c60420c6f5656c06cb87caef2af9421bd
SHA256 cdb802e0c9f2bcc8d12b708081d2690a42cf9b8c60109a8853bcf609b3dd1082
SHA512 bf314d4f27529992d65a30f2985a2e08d6f7edf99e7056d68804f455564bf2409aaa7ff19eb08b73eb2a625bc7d08685201f76ddae970edbb7a678142817c6d3

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\contentAPIs.js

MD5 230487d1a334dd93e1e58776b649e666
SHA1 9c4f5f40d18bbd7e8743e3a169013c496868680c
SHA256 1b6a880411a56415ba5c81776a8f3126f638b6f555d8303aed6c9e0124275018
SHA512 100c1d272b8eec8501cfab0167b9e46e417c7bed6fe78824a22bfebe48727c77661854d17925600509b65399b1fe345d142c6ae1d36dad4b56ffaa5d04dc941d

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\content.js

MD5 748826ee616784ea761c6b2efd8cce27
SHA1 e407d92ea2aed385d144f4bf32f636c562f0fbf3
SHA256 f971751d14373439e79c62c5fb48c5e4b1859e4318bb15831a94fe499cd206f2
SHA512 bc6b139c1ec9495c8433e9de2c7aa09b268d9ff9c2e7e6eb1523e9d41a7657cff763cb0cb9f3afe3fd728e38f6d596866f42c3ba42295b8b2cca6e00297aaad9

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\background.js.LICENSE.txt

MD5 275fe79abee3b697f1673c8bd9c58856
SHA1 cf2b1a01feb5dba1eadb49e8fe087675fe70a7fd
SHA256 d33efbdf4d309bfa4448199551371ff81d5f57661b781faf79d256554e038595
SHA512 f6c93cc7bb4d678fcd51ba4024371915d614621b0f526130ae0a51ac4711c8cacc8881282538674867c11b0e37c1f0cfb5a64bb047c92594e0a4d4c25b26a932

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_552498032\CRX_INSTALL\background.js

MD5 d0d58c54aa20e17a2fc7c90c5cbe97d5
SHA1 59de8f3d461128d40634dd9359eb8fd54d47fd7c
SHA256 c533093e78dd57b7358b779dc5a8f1ee2b2fb0d79e3a38d4f3a9d8cc0b9d7149
SHA512 c3c83771a5d3dfcb8cd03ef10bac4d55408444b17aaa1e6c88746a9950c8fd4051545260b8bea5c01e8f7572a470b6da862fd861e8e12be9bfa235487b0f8aaa

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_1525623748\CRX_INSTALL\fonts\open-sans\open-sans-v15-latin_latin-ext-regular.ttf

MD5 abd464fd52dec0108904f062f30b31d4
SHA1 f51881b3732bcb7aac9592f50184720e7d726ccf
SHA256 0c4595868d57ebb5f2793e22e8493bfe2606cd8c628a039d2d1a4fa79f642b05
SHA512 7ed6d565101bdd3e15596c7cc9ba8cb4c4a7be57333fec06bb01492360b409194f0ae6a8db1c368a1b1880ae260c122d1f0f551b74a6ea18e932d07687ccaea5

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_1525623748\CRX_INSTALL\fonts\open-sans\open-sans-v15-latin_latin-ext-regular.svg

MD5 7aab4c13671282c90669eb6a10357e41
SHA1 4ca4e88a77a4d81138206a10793507cde43e31a8
SHA256 f8396d832e2b270319c4e17df620c06f77293f5c4e7ffdce337c9b90fa75d133
SHA512 08a74874f74c1b75f7a93e94faa632d1bf21c2d42c85fb66c9b11138e60aeafea8874b7bf33facf7503d19dc7965142d78e5015a0dbc340da2b4550d232d7116

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_1525623748\CRX_INSTALL\fonts\open-sans\open-sans-v15-latin_latin-ext-regular.eot

MD5 916fcc0b03b40457b311609ac7226183
SHA1 193e96a3b8ed9720bdd05d56f81dfd9dea43b5c2
SHA256 6ffc257b02167f060ce8c84cf4137f896b812a814ecbdbf9e85bf3af99428dcd
SHA512 974b5ade776b0915c3cca3dc4f0b5dd6b635f0053f10658fe63145e16de623023ede0ba3571caffb1aa6e4adcb9d3b3ee3dfd3d58d00028311621372bcb78b48

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_1525623748\CRX_INSTALL\fonts\open-sans\open-sans-v15-latin_latin-ext-700.woff

MD5 efe9ead0aecdedc597ec9d4e745e0a58
SHA1 df6a1ea1917ea01c1f53f73cd9412afcfd254875
SHA256 c173db3aba8f65231290d9c956253e0f8bbfb12750e1c4c56b26cf64fdefa735
SHA512 ec781dce0b93d82d4096f8fcf1b3397b686d2415abadf543dd00ddb55a5aa49a87d063ed4fde670eca3ffb0c97c72df506265daf73c4b03f4d6d9a98996e9109

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\Temp\scoped_dir60_1525623748\CRX_INSTALL\fonts\open-sans\open-sans-v15-latin_latin-ext-700.ttf

MD5 81ca5af45045261f536c71baafd77298
SHA1 4f613dced987f67dd32883fa0cd9298a20c102f2
SHA256 d123a1a00d692830f1f5276c64edfbc7abc9d0640bbb02596f83e10b14f89c0d
SHA512 2156c44e95f51c8a56ca2aca1d5b6127a9e76ce709506ddda2df37cac554fd04303f14a11232a18ac6098c8502ed515d2ccbd1f8671a180490acf8a573457284

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\img\icon-48.png

MD5 455726b96e7b10bc519d8f68ca0ff700
SHA1 7c6cc22d7f5959a398a12c95071b031247f87b60
SHA256 bc6f6111cc2973f49b0305f79d5c33debe50a2d2fedf3ee612faa207896a725f
SHA512 1ca5db8466a4310d127b70eb8674851a814fa5aca8682f1f771a946e71e5bbd4ea4f2fba281ba6ad8921cdeb07e4947179144538c70b560dfe5d5f7791737245

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\img\icon-16.png

MD5 964b18181490248e5d4b6ec1d37f8d56
SHA1 d7f7d12fa39bd48220f4d8158f05f39706a1cce9
SHA256 22f8515513e91b308c24b0f3acd2dfe1c1ca62fbf795d4dc1f688099d96f3cbd
SHA512 444b56391f4c87a569fe5a8b7928826462e15e2c5308e8b7fbe95260a1781f313e7e4b2c0a3295d1ea39c16debbb7eb08f32feaf478d27706de5729de143d983

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\js\options.bundle.js

MD5 fcf662e70f2981ea9fce846985a3db9c
SHA1 fb458741fd44ef6394418f2c83fab11955dd14f6
SHA256 e0b4c21430222c675ca600d1aeab56d0546549c760e44052cd7277dc3700e9e4
SHA512 28f564d0c6f3fb3dd08dada6b93cd20872e77f87ceffa3ba3c41ae8ffec89330b4397557408cca03737b7426255a23293bd20f6e2a6a72bb84eaaf8ea3830496

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\ar\messages.json

MD5 a5d85d08654dacfc837f7b6f72e6dbce
SHA1 2cc8f59d687cf8b686a7349f9235a80328b2e354
SHA256 b8598beb9b2fc91a17f86ef9609f0d49cf016ea48f7d5d0535b163df9bfdb673
SHA512 376cefdff2af3e597eca7bebfcf2dc579058a92220df2fcd9786d4514bfe8c9f9436939d9c432693665f9262cee375b68e96d1dc9027f73f7a5a330af3b81171

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\bg\messages.json

MD5 d945e162c3b5842b29e7a11f22479f97
SHA1 f0c697a96f230babb3198b445ddba14a33c6c846
SHA256 a18a2d8484517ed9584229d5cf58f6ad7618926210249261c29af14c6326a025
SHA512 48a1f5e071892b7ea6c54293595948d9858d0a725f7ee4f3ae6bec16cdce9116402f2272cdf06eb9ae3f8a53a45f3c490428fc5591f59331ebd082cc56e15b56

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\bn\messages.json

MD5 b5af23ced9a7a5b995c9fcb1119dc2b2
SHA1 be85158410ab3c36673d5b8fa14d5da07d9530ee
SHA256 4cb40cb8eb1f2c1fc2a6691ac0d2b7138299d6dcb0c1836beeee8a43af12f7d0
SHA512 b3ffc042c7d4246e87a1c26f0fd31a6130347f8097a07fb64be57dad22d7b5deee9ed922be647edd049dedfe00c8f4c066fcda8481ad65b3b7f32ddbd1bac547

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\ca\messages.json

MD5 b1d37ded9d6e3569f955ddd213101059
SHA1 6cc5fa9f49c6bca83fe862a50b2f8e9eaf838e42
SHA256 1b20cc3de4bc55aa1af9a31618f5d07e630605774c7c92fca0862427b5a5de94
SHA512 095461240b28552b730ad24dead2b7b5191ba8c77703a1758e60c6097dde41834a3f6147cda5880bec52a363b2772025a55245f7138b515e87f9a64553b09d0b

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\cs\messages.json

MD5 3b971c847376f49c17fddd94d99ee14a
SHA1 06f57556597827c5f11fd80c335c055d83c0c63d
SHA256 162a9f2cb434afc1093581733aa643a1b0263f21c01deb24f26d4a3fed0274c0
SHA512 b2e1cde93cfeb327cf6e78d8b1a4bda800881e5f345d7e50fe7ec0359a422b2ec80be61f3b248b4230c72a07d55db8264ead7c0757c1c16b38b3d3ca94bd408c

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\da\messages.json

MD5 db729316339e408f888da652d099e6af
SHA1 747689da330277dbabbd2dc219febe22df744375
SHA256 b715724bba10ff50273fb7ac3685c5472ab01fc7c3024e7b457841881b7c8707
SHA512 5c52b71bf8f1a832d8e04f7f8be3e88ff8798632a3aaf89ce3550adc3aa41d3ba10f020e0fa9d95aa96b490827d900f8e2d4228ab79c737d2157268b31e09700

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\de\messages.json

MD5 3c651f7432afe9d495c57abc69c30b62
SHA1 f0d6d0084a2b54b8ea2fa9f21c047341e42c762f
SHA256 0cf5f828601348cdd46fb6c260099d1846edf1b6f4a009e5c719a55e50ed3bc7
SHA512 2193461a027d5ab8df2defef283a36362e845068faafa7ef040c308532a4894c40dd6b47a121739ca7b6fd683df9443053bec46e3073ef573da2dbfb270b4fd5

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\el\messages.json

MD5 9288729963e1230a74efbbf071de1fff
SHA1 17a438183e94c336a9a50e631074fd43b7d852b8
SHA256 c647435b41dccaa5f77620a0f4d423e1f777f5f0738ad706de86571f7ad76482
SHA512 d4d2dc015cb0a4cecd456799044c31958e4d281adf6216db6f73c24eef4e06e7f6aa3320c1abee96a63f978f5c09897f8e0b78237efe472d50ca087db38bccc6

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\es\messages.json

MD5 b87f24a632f1394f2b4d953eb851d522
SHA1 06b230390c38da48e958e38927c4f27bf4877c4a
SHA256 bb68ef6c46d390012368e42a08314c4653697cf0e4e6c4c8f76b788056d4dc87
SHA512 6126293d7917220d8b28ad13df87d1cc0757444c139058d144282bb4763527e0a1abbc86225448dd7f315807c3808e513670d81092afe6cc801f2f83379e9424

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\fa\messages.json

MD5 b37406066b6b248a9ae6be6d6b94c838
SHA1 d488c6e65357596a9178cb86db67183e9a7dbfd1
SHA256 84dc48a25f3697a1455743d80430def6027553ac41579e621e232ae3e153f46b
SHA512 259f9bd6619e44413a9110cef481f64b043dd820ccb8fa73893f32e71b3f33c357c6ab2dc981eef9a9f444051d8caa1fcb6128aaffd1fcd285a2724b28f6ed32

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\fi\messages.json

MD5 99bd1faef0a8d04fc945c3e11d31b151
SHA1 f5ea3cb156598052b99efce4eab2e9b64ac37518
SHA256 106d6f20de82ab642b825be080855448835e59fca46f6d6546c484502f8e6637
SHA512 3e652b08ce58f6f6f212fe62329cd441ca0fa362be464ddecbbf9a98c090082c69347820c7c8dde213061afbe5f12b98f7d76ca7bee135a757d10fa44d320601

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\fr\messages.json

MD5 f53ac5863deb7bde23e127995c086f25
SHA1 99a4f59892d06747b51b363de267f466a72e8008
SHA256 c7f83f037f2a9561a79b66c7c5ba6ec230ec038b01ed0442832471d2c4a4ac08
SHA512 c93e65ec1a08d792997cb13676ad40539dfb2bc1fde18b8759534f47b6908f7f4d84a2108b579fddfb8edbb4de00b1eb50adbcbb209296a91ba38b0f19bd9d13

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\he\messages.json

MD5 e3333278d6a92406f8aa1da627b7ec25
SHA1 02b0d6f2e9547795e4240e6819948dbb9b4481e1
SHA256 10921f5fcc54a5bd0ca546b2ebdf2c65a4c062d96fdfd8b6b6adff4228b9e758
SHA512 6d02737934a77fac4fcfb1e489f9c1164a8aa3111a324acb4754cdb9512a0111a004ade9c0cb9f858efac9543d9263fa393bb1d751f4a61c8e3bc741ff826149

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\hi\messages.json

MD5 c3954827ca16d49de136110caf6f4129
SHA1 a1ed0910d1b12f2a2e5bd88645ac214b02f2c953
SHA256 7a1039337aadca607c99a392ad2558d16e3f39c048c82e2216c094ab26770d37
SHA512 6f8567ffac22f1fecd101a96bcfa5bbfec79cdb1ba0e305c1366fdab519df096b826d6c54c07ce4fb1c8520f2baabf008357d9fd7e18a92f35987131cdc49147

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\hr\messages.json

MD5 b0aaaef3224face221502b9be35433af
SHA1 352016e75d370e371ed85806e0e524b1189b0901
SHA256 3fb11705f9aaba63084e8159172b07af10c30ef08fcf1c26cb9a7af6c501ddab
SHA512 2282da110bf4937e848e03c22832a6a68e5022cca5b98b176d6f1b9abc924299d58c5eb6a3b6c441c30d36d0346934f763c1f16183e3bd0e931d332e5519d04f

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\hu\messages.json

MD5 830f778ed7e5c02342d67feff9abd3c0
SHA1 793d0aefa539d3fd0f7dc4ef57d9daceb4713911
SHA256 0f2c4646e051b466bbbe8e28f4366d0cedeee9ce9d7646ef6155494ff7c1aa70
SHA512 44ae829af29acc1200fe4c8ba151b19d1e816450f45a7614ce40f72e544812f5730b4abd09de1ecf6310d918818535fa4e1360335263f4d2eaa428f96eb02457

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\id\messages.json

MD5 b664a816e55958ad35e9fc0bba1a72c6
SHA1 38c3c869bbee7f6e013dcb79a6b78e658079083c
SHA256 80242d7f7b07846e4dc49ee6b25c8f1cc71c7d161038e2a939f4bc8d09b22bb1
SHA512 6ef9ccdb7411cce478b82ed40d8d7d87b2ee185f368e49ed5ea8f3ca6e77e83e3198a27ebd8e05c2c9147d8ac57bada682b094b0490ea162869959e61c5859f4

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\it\messages.json

MD5 3a40212d09511cf73a9abff33ff23553
SHA1 c0c592b1875794e1f086b116799d91fe03552a67
SHA256 4bc03d2796dda350fb148d6dccfec14e818202e79775a1711ff538dc3cef312f
SHA512 ca0492bfe61585c8c0c50d41a35573fc26657bfd7acde16d15326bf327bf04973c730e96ffc18ca83e05b365f0730c5d41faae1feb0717046e919332e1d781b5

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\ja\messages.json

MD5 ed7a51a91db6521ea2eb3fcd488b5f40
SHA1 2f981947fc94d1c310a58a182aaa251bfe86e882
SHA256 8a0aaf8ed4d59ade98354e5f596b6b2c4a03b5065bc3b09d6c13e9c983a527a6
SHA512 ee065a401a6d65312c12afe604dad9137a9247b96bb6d6dc01d14fcc9fa2c6c299eb5d0e8f1d30abe4b46f8b9af85e6cc935566c6b3ac2225666cb2628de53c3

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\ko\messages.json

MD5 f19d786e8a7bdb0f3bbc0f9e6d8455fe
SHA1 5473f500aa1b5d0cf6ec618cab463010e8386a70
SHA256 b45b7a2b28bbe59db53e26486cdedfe5aa5ee19dbd01ab94fae8d124cc3de826
SHA512 31d5fa959f6551cfc822c0b7d8e4d68baa9f7a3e2866f383bc1cc4e3cbb6e485da1491d811fc27d57e17bcb3774bf384c9b84da1cb3c5bd705a56551669a801c

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\lt\messages.json

MD5 416f2b8ffe43a7f035f41007d50fc2d1
SHA1 b9628abd0b6bef289b7d9539611577c4460005e7
SHA256 c960852e7e43057f6ceb4acb07d0a9f2a8601d44c5bfb67d69211bb2354b988d
SHA512 67f0dbea7f8616b1bbe30d1ae30e2bc8d4f4334aa33904728f093afe1672feea55abb15ae375787a2e9dbb6e246b33ac1ed74fe4de79f68c75e93f81cb3251ba

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\lv\messages.json

MD5 e6a8020d78b58be2ac40858986057522
SHA1 1b63a5f1c26ae7d01da0a2eb28eec39d28819e0d
SHA256 ec31919a5adea04160d6f722b434d6ab3e3ec72244f330fb3e671b3d4816ab1a
SHA512 3ba8933e42fefdf9a07aa666528c6e380bf025bb0a4d5fe7c18a404192d45493d68224dc51af9904c604775547b814ce00b49a8b132250fd2b7bcef9907d055f

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\ms\messages.json

MD5 29d96f05a391ef594b04b9da43133261
SHA1 86fc11af431d61dc229810ff04815caa90d5250b
SHA256 a0395e1dfa50f0ba8bbd6118424fd1303ce19a3ca32972f5eee012ad850d6901
SHA512 1672fb73c5a0f73c7bf776fd9189e1e47ad8f2af17bfb49a6d299e01098e0de5761900ec909da31770fe86636ac8e667236490f0f612d5e59d9bedf182b90935

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\nb\messages.json

MD5 d7e7129b526af85ee114ea293636ef3e
SHA1 8726f0da967ba7c66aa49ac8133528bc12948a7e
SHA256 8c2f8c2e708da78b2039f7ce7a6c825852b22f8f865f1ef7ff8250ea475b0361
SHA512 9a46dedb87fed4ddb699c289f3f1b67c7cf1ad3ca4f66b65c326aba6b74afb155fcb11a7688219c427ea6d93a9a09b3a1f2c9747d7c2fb0b5317fcc990047d93

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\nl\messages.json

MD5 c33749fd231abd98f45fa1bd4d18275d
SHA1 2c30b01fc6f2a71f86d58832acffba4eb7646e99
SHA256 d0b6b9c8bd7c7805ea6dd883dc29ebb8d42f499ae40ce9dd7d9b1082d105b375
SHA512 f085bc98930b28117d33c85b34973317d24d6784601efde34db0f877251e506e9c345b0e4fcd9d8aca7b8d754f8692b5ef920f6c75f5d476917b32e8e4d1f2e4

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\pl\messages.json

MD5 e6e130f30085ad6b55886fcaad73741a
SHA1 d30e6de45bae3ff58cd05ae6e75b45dc66fa7b3d
SHA256 8691f6363c4aa7fb4bd1fdfa0a2413dbf992eb942d719692f42b68ac26b3430b
SHA512 9c144743939659318894389dfb97184ab29f05a9b2b0cb823f2414c61c2129ec8f8cca0208db534024b7b96332a3e7c8452afa66043c03b1c2d27522d72c32f9

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\pt_BR\messages.json

MD5 8dc02b40c5afd3142d3701e850dcb50b
SHA1 9af12b26f0ade1657e3d10063f44445de356b6a9
SHA256 9d407d8979bb58d330157be475c619f27ec2bf15c3530805b4b7518c714c4c0b
SHA512 8d9dea428da9a6bbe9b3f8b631541aeb97e4ec890cace542ca09a04474f9ecd20f31ba6ae7d421a54582eee8da1715a077f77cc855796ddfb3aea30457ff39f8

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\pt_PT\messages.json

MD5 7ba365deba378a383155a74a11ebcfed
SHA1 2c5e66dcc18e9178a0e6a25f79ff545af08abb1a
SHA256 381877c8038b80afe11865a00b82dd78e9676da2511bd08087257d8ffe8f27df
SHA512 19f2f5fd60334bbdec5a8a1facb15521c4ee90d60458fa42a8331a1f7dae9b0ba1d5c0d2a5386f160b157af0dd7cc33488e93fb6407623ba5fb93ad689eb4973

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\ro\messages.json

MD5 fc0c0aac29d05eddba3b1aa1c974f426
SHA1 aa176688c93ccebc58ed53c344bed5c25e33900f
SHA256 f4a86eb6a5a67178bfa24255874090e9c80a5acaa458f14dbed91c8e9c3da1f7
SHA512 640e4b745e08d23a4bb0146054e99ab5a66552509f20d9afecbea42c2b0c67f402f5bb9bd3ca73a5ce788dc75b2af36cdaad36322f297017383f07fa0ba31937

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\ru\messages.json

MD5 12a9ea240df3a579c96e6aefeaea0ca8
SHA1 749ad7498f904f3ae4b7fd91db3b674df72855db
SHA256 4efe5990080b6388306f12b74b31c493701d45794e8a300a41f6a90ffb0591af
SHA512 cff032611e8ad4e66a404d8eae5951775c0c730fd9a0e668c56615cda7bb5c25359c2987820294b28999dbebb39905526299ce656c0887c9009c88caecdb5dbb

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\sk\messages.json

MD5 5cf9cd122e26346effd48db0c8fc75df
SHA1 21dca1f8f552ab09c765d80da60ff87e937af76c
SHA256 f43aa954098a6d72d3d5a9dc74c131b10f59eb111b5217913db0c0d68b7a4019
SHA512 f5819a66bc5a7f9dc9a80a0d3391ae68c9d6f923f90f8f8713ce96155ef95b726ed36fa71e6afd0d03a2466c9154cc9085332fb61263a4ed610761851c8d69ff

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\sl\messages.json

MD5 bb93e260e7e2c75d4591c678ee93f81d
SHA1 942289144564a5db6d9eea6aa2c37cb0d83af037
SHA256 03371b65cd719a56ae34e00c3d05d20739eca452c0895c214847724cfd401c99
SHA512 5acd8afc440961ae342a3235ad94244f11f26f486d69086cc55d4e991c205dbc9b19fc82ae918a3fa64326ccad844596d70adf8abab81b212c11903d24308fab

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\sr\messages.json

MD5 e29a2d569b43e93a63de075bba9b51c9
SHA1 619fe39b5197f8a17090db232efe565338ad823b
SHA256 32c9be85fe0871d2acd30aaef4434f3369eaa1b3b12a39141754f98d9d7d181c
SHA512 421a01e0a27e39e56427eeffea01777cc2ac2368dcfd42df6adc368bcc6a1dcc5e07a26209e88c57f106dfb64f255e218cc1bb95e77e5b9cf85dbf11a1d68180

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\sv\messages.json

MD5 de263878f8f7c10d670221567d9ecb24
SHA1 af91e39c90f1c06de18791893eaf1af1f34e04fa
SHA256 d0ff3826cae2bff8238c84f3a6f6870874e8fa93c65e73d896db9cc3c3f14922
SHA512 59d1a6f5c7e487cbf9d23cfd207bacf7aa20ff1f8616a3431370b6e1db2752d2b23fc5d3cc4b260804d3d98f1e61c2f5b5fed39440358f2dfa458e4df4db1fde

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\tr\messages.json

MD5 c6ac0d250d4483dea83ff01fb1dfada7
SHA1 15c863f7380fa277ae42da5514d73cf5af0fe503
SHA256 945b2841f8b7db64cfa9738e1d4e9ce652d0e54a2bd174cbabc94e494f44ab7a
SHA512 33a43f0c98b46af15021d09facc4d29f6413ec9276b2e70733573dc96c2f28877a7bb5e2ed52f57e2b22f975037482b84fd76fa793674cd82768b43636f92754

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\uk\messages.json

MD5 5e024d5910e23c1c2052b560a8ae62aa
SHA1 edf5ba60588876ac2fbc1787ec519dfbce9308cb
SHA256 bb3582dbdafca749ea74eaae270b5c61d61cc1961c2f33fe3a4e45e1b2306e26
SHA512 e465fdd296ae049def59e7856bb44cb087c1585de36db98505e8a15f909a92523098c4eaadd750a8aeb5d90065cb60521bfac4721042c80ba7ac4a76b0689dae

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\ur\messages.json

MD5 abe5427813da3a1efdd72859f8ff9f68
SHA1 a6366cb5d6d0d08b43cc2dc54e6c66c48cac195c
SHA256 82ad8bc296bfa1ecbca8866d1f6c078aa987346e3a37c609b22f202b53a5cce2
SHA512 a4dd9ff6eda79604826b6c03b983dba837e99fbf085e832b93d47fe225df07406ab9cf6296ae3093e7b37b6137b3122a2468447cad7d1703f8f5d33987840149

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\vi\messages.json

MD5 b5f18b94d6479fa84715a4245f6f25f6
SHA1 54800434c74ac6a2e0fd8a1672dd8242b6f39f69
SHA256 a41883d12892ffb1d888ce4cb7057db2b6d00ffa8f037ea6e962927c3f095739
SHA512 e3ca50a862cc890157346600201c92bdc0fc67eb412cd0eccb4d3b90ef467788a32b84413ad3ba567313554076c5acf677a5f438e6a2147423dffaf23a4a2acc

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\zh_CN\messages.json

MD5 79dd279b4fa24a31c0267fa5b58962a2
SHA1 d32bce6872dba9065a3f22ae5e7ae5d4fde38855
SHA256 944b3c946452b0f12c39a13c3d44d5836b22e6939be6d90b21fa07d91a87e4d5
SHA512 79d6dc7cb201019b78ca52ac04a0f3080322003e858725a730f5ae6e8cbeb938c06a26078519c0ac5b6f4057955d919de2f37050bf7bc74ecd4f325d3cb2aab9

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\_locales\zh_TW\messages.json

MD5 46b65c0271c694dd6fb28eb690a007e9
SHA1 7480cb94f90ac788792b3d4c077986a4a784fb04
SHA256 e86135fc21e9a5090399003977062b1ef42ef50ab134081c178642c1f9cb1386
SHA512 cfcde69635feb1cc78446bacbc6ef4fd4ac4eafcee22a2fa29f81040d6204cf58a15b82dbce40098a25ebff6ba1e66541aeedb734ec8469963887fb8c13a18e6

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\beghmmhchncjignfbfnemngnlnjdmbcb\2.6.240_0\manifest.json

MD5 253d12f545c3e24d1129e5f98c68f98a
SHA1 8a9d8c90400ec9b583504f5be98fb1d4e2e26000
SHA256 a14d2edf37826c68af6f4be85da450820c168cd4cf4b64be70b1bee8989d342f
SHA512 a7944a3527ce651dcb5aeb4861651649ec0e498a0ec616fd081f033ce7dd1235150b0fae046ef7b3006b2953d265ca8ce0ff324518ed732ae6dcfa0b58598261

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\he\messages.json

MD5 cdd6c90e41b31c561956bc1a92f7c604
SHA1 3099ce391aa9a028b0be06dc963b03657efd9acc
SHA256 7ec6e61838ccab10da29016e990c0675867740fa0199d0f0eed1c6bc714b8be3
SHA512 f67cdc159147de4db84613aaf8b4d04493e1f7de03aac50377943e4cddf04c9f07d8db475dd7324e521559b28c8ce8780186e483807225cff5af9b5c9ac4e960

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\hi\messages.json

MD5 1fdd064b51fab6ded153039c9a47af68
SHA1 41c6ce05972f087d4b86c61cd9b9fba7421878d1
SHA256 196c8028cec2320090aa2571e453c31487c9a8b3ba73b8e5d2960b79c91a805c
SHA512 04230b903c6467ebef6c2ebdcf5092efe984550fb5ed224bc0759cde791f9250ffaa4fec47f683b984985dd50e12abc179bd2344edfa00311bf1a9fbd4ca1cc6

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\hr\messages.json

MD5 11f361271211d063647bd4e26566f9d2
SHA1 7b304fe6ed9b78154c30b82a7cfcd8fdbed1dae2
SHA256 48082a82e27030b034d506775bca023d5d49cb04cf4da8ad3ac24ea06ceb15fe
SHA512 5ac5d1fd63fa4e6b05ba14f0aa68d2377c95963b3e021e18de07a29b822515a3ed3007260efca7c3bfccedf1c1e8a8e13c6a99a802db11a411c83bc45cf725e4

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\hu\messages.json

MD5 ed71f70a5fd38d1b0b6c45e00002641b
SHA1 75ec2696ab937c4f464a1a39592272ef4e094774
SHA256 b7151014e496dd9dbaceaef0ffd27fe6b8adede72496ffe2cbaf8255a2532b35
SHA512 51a1e87990f53db6696321827ace71764fb932370e701a16c77f60f590b56aec5a75b2697c998033aff5ee753653848cd154a2ff4abec52c784a8ea84442919e

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\id\messages.json

MD5 2769ca73a8c628cf76a9ee509b17525f
SHA1 61edc917f706a9e97df5d1df02f691031c0c8298
SHA256 79a560649824332054ab97e99693a604b8156c23e37f8928b696a34fda3b0257
SHA512 3bf3be844cf13285280632f087fe7af9e714b77d61f60a97e8243d274e7217219d4b735f493fca56ffb4e27e206e8b070f425cf301ee769b021aa2409765b14a

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\it\messages.json

MD5 ad68443f194204af383c4a1c8d0ca08c
SHA1 9e0aa5d9c2aeab780f43cf9eb9c713ca9f14a227
SHA256 1ee154836fc87677738efa7b03a845b3f8750b9819378739e16eb1afd839c6b7
SHA512 2aabad8d039484072913b8c090de777d3184c0b56ed237694531522da54d2c4ea392ead33786730b225970675d86d7fea1cb9b9a15fbcf0b120e73616da28726

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\ja\messages.json

MD5 70e9deac2d8396608d47e14eec0eacb8
SHA1 a0d1a3df94e8df2014030787c53fbe403c9560f3
SHA256 ebbdec6d3d9a6b97edb3cfbdaa8c8c4aff24bcfa4ac6f2c5d378794fe16bdb64
SHA512 9818154c89e4817b26b200848f62e6f1affcfcd07e11dd4ec14d081c3728d26c29ef831ced62edc423aaf0635fe00dba9d69bd2d8cf76abd17f312b1efb9411b

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\ko\messages.json

MD5 998c7c80f9491507f8db362d701d0216
SHA1 c6046fdf796d809a6fb55a894bf3cf29bc4d7b66
SHA256 7698d4788886e9b2dc71ce4d4c7d1d8e37a2fe7e3b3e70f6ade9e73af2615f7b
SHA512 9471580ffb08b531b956c00b855b774331b12b54f08394ba248d8a36e9b91db86de2a01afbf0276dbd39e082c66194cf7eb7f3af07434eb13e0158bdc417aa0c

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\lv\messages.json

MD5 d997d8bdb6efbfeb23504ef3a8a5f7c3
SHA1 1fffa996bd86374cb69c65b95e1b349e46fd4b23
SHA256 f4b6bfc1448d362484f0267bf908e34f2adf7358e491d989393fed5b9841a47f
SHA512 92d56612112f4bf21209a9d5060ec88123c2c41a522e2ab7a83c1c62d791eccbc85b35c0338062bbfae5c37015786a627c6c5ff2c9654f00a1c40716d2f80c9b

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\ms\messages.json

MD5 bbeba973eef2b173824d33a29e64cedf
SHA1 f51cd77ddd7a5e8e87e1a7d8ce59e73b3aee472c
SHA256 afb8d4fb5d69f65f25af9f93512f15ec150f52a2084c59a7ce0c72e9c2c4e031
SHA512 62ab5f49c6d97709fd5de02ca8aa2082c1981dacd4d6674fee9359a41c8b6ccbe412d1c584c73111af9387a1e1f1dffb32b59a50cd6d5281c19fce62b243963b

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\nb\messages.json

MD5 875449cbef384dbafde81460bcc3f33e
SHA1 90c2b1683849ec25e7c003f2f42cfd16bce398fd
SHA256 93abc52af287380cf9f109eb54cedaecd551bd12a03d055f664efaab7517151f
SHA512 52f1082809eab0412698ab2701c667b5d9fcc20aee8f5930f7783a8821da5499af7b57234a2b7045aae720c6f18a47a04434224f32ac4f9d23f1f471c6f35129

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\nl\messages.json

MD5 007d5d0b00989f3b5ef80ed730f54b0d
SHA1 8196f6d900858cfbd624334725f4f109879a9e3c
SHA256 ab995e967e3ce6aa0c13957b4de947f1cb993b66859b6f1cfd611c0a43d4393f
SHA512 caf02966a6d18078cb33b62d3dd3babe8fc34c83b3d5bbbb3958ab5d1253035da80f9026884f531da4d18f62a76266d043424bc988f88ce41bc4f88cec51d2a4

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\pl\messages.json

MD5 34664f25cad84d1b7270760d0f856c22
SHA1 ae88704c429f174bf0d10b048c95b530cc35403a
SHA256 5d6f7629180fdd5c623e669d516f6f50ffc73b75d3363ae0d09266396ec56803
SHA512 90a9c726d8a206388d7779374e5541506a38a2c3d3301d7a11d0f86a2a9d28e58a96ecc935f1addc39ac373df8630de94cd8a550e2e1bcba9552194219ff8a2a

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\pt_BR\messages.json

MD5 8dab8529dd17ebf5e1b079a296331af7
SHA1 552a86e03a7628f2bb349a050f42b3c2ab29d7d4
SHA256 1ce620f1c104ae4a0dcf8f672fc4218fe647d07f0da9e9ba68ba123c667a2b14
SHA512 451d92f146f709a10e7c3934034a5f89c3372e54f63c11afefc50fba0fd8c24bee011e04fa71d15f5b3c9fa6a45e70b2b0ca2254c67000393499185b28fe9ac0

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\pt_PT\messages.json

MD5 a7a7fb27e1fb36c4669f6280a0f120b2
SHA1 349d60abbd9c42299ffa49eae6ab8e775e0f5b73
SHA256 ff3e415e28eae0098f87b2b6de229a146d1bbb437d80ed08c2a8bbb985c25705
SHA512 79366fe687f0837cb69719d6dca2927ec3c74eaa689575a231ac34ba099fbb0fedb6a51a1fa8d0151817afa228bb8c1d0059b8f79b7d570e697e6d81677d9c11

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\ro\messages.json

MD5 9bf2916aa382412ddc2cdea21407658e
SHA1 36cffc4737f84935a27b4b9669eb948479edac67
SHA256 b3f7928e8940644f102d715671bb840b0f9400e42ae61c02ab698483e952aa89
SHA512 a2ad7386dc8b2f3f4b3ce0180e2cc670d4933afec427f0e865b5e4f44d8539d09c4a2d3f1be2e1b4c5cfc0d456c8c304853a6d2aec4487271227a5662e3ebfcf

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\ru\messages.json

MD5 bb343dff72efd8050ad99b9c3d5f2729
SHA1 a6055f600b44c9fa58b086f09627fe0a7e25ae92
SHA256 2034234948de315edbe89c7767f5d7fdfb32aa65a30f53a07adfeef0b0f1ffd9
SHA512 6d39113874abf76d72f646a4b62df8e801f937eae7a45070da2dc92e04465d2ee11b58ba5b0315b3f3b216f8fd367ffb7aa3b277c54e4cdda121457f5c941261

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\sk\messages.json

MD5 68bb5c0f33ec2238252892c1ea97569b
SHA1 1ff8b1baf11625c7ecc6d9095b6375226b456ba6
SHA256 c4be621bd21b22436ceee7bfbe85cc5ffaa63d4caf6e056b5fe9d7d6a4f2b48d
SHA512 636a01e4a3b63e9a2bc8b61ad0837c76e17c447634d83fc3def01338ca89b361e11c918e9a9769662e6ce79f900880b03545b7c096a9285bfbbf6749e1c9a8ce

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\sl\messages.json

MD5 660341ecda5503d6405f4c788a20ea78
SHA1 da7565f96ffe188b5794ae3f74bfa8a786972200
SHA256 c604c74f6dfed41cc7abaad8687545aea4ed607807b50d2e9d2f6eeabdb76374
SHA512 b791bf7ee8ff4cb48792ad1672eb3495a36a79fcbc8bb7eb307728ef42f9821d1ad3365969c19393de1c4232bac801efd04b08cfbd6dc91a31cd5b02cd0a61ce

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\sr\messages.json

MD5 c7cc4dc0bc447a0e1fb9409d4d4272b7
SHA1 b75c80af281b15d88023fae0a0a48cccd782263b
SHA256 0055e1ee39529d36eb3ce456e8d5302abee09a4886970dfd08b60bcaeea2c105
SHA512 f39d57a8120759f47fa30ab044252f4df545559822dc40ca2e448974de07671f63d801ee37755612e130fc809c43befa98142959eac3530bafd96dfde896dcb8

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\sv\messages.json

MD5 fa5d3c3b72df0038440bbc476cdc4eb6
SHA1 72fef2a580677c690f4cae7f77913ee86343fb68
SHA256 bac3971a67a93c63fc0ff1804dc4bd86cf00d53deb884851bcd41bc593f0e4a5
SHA512 433ace1278b1bac3c95d1e9aafb2cd18997bcae4adce6c5dfd3efa7a44226c82eaaa039bd6205a6b96cca3f61d004159703877e1c1ffbbeb220d2b27637d9174

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\th\messages.json

MD5 106d5a4186d63569d48c4d6dec150459
SHA1 95475145dd0025a1e0eb4de565dba70a27473361
SHA256 74affd73a5418c508aa1e50f8762feed1cc6ecafdd8217a13ba0169923d9679c
SHA512 c4f676402befcae43994eaad29a8fa3756a9ca11202806e4f1a4172d68187db4ecae46862ca87d35ef95a7cc14f63b58e802852efab096bd21b8ebfac98f4dcc

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\tr\messages.json

MD5 fdf3580e75554e2190012662fb4493de
SHA1 cc3671cd5e411d8d9ea03e52a7596dc5b2f6bcb5
SHA256 f1a7be973fb0c5b2891596381f948b8dd055fe83b1170648dcb1fc975f79ecf7
SHA512 f9590106c7a516a4e2126a7702048d857fca4f807430bb8aaa651d6b37ca3465eaab6f82c32049a74f95c4f194c97715f61df0583393fb9906ae4584e2ba6345

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\uk\messages.json

MD5 a37bf10eb61073044d2b7079dc45e908
SHA1 df1942914444f5425ca4ae2b28eec63da57232fe
SHA256 c452f4ee5318dafec442174c9358e4292a005514ba58ba2934ef631cf381e6b5
SHA512 f7084da3384716cfea82aee9eb9856fbc5a30079a698d83249f883ac6e84ac98d9d9dd01f50bc6cd92c8cbdec09e173b0ce6983360e915c9090c64857253d442

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\ur\messages.json

MD5 c3fb71c125123502ed532703c77121e9
SHA1 a45300039b1d3b39d065f7042ee655bc0df12f25
SHA256 c4d963ec59dd98ad88b4cf7a4e4b51e5aeaf11230532cda919ecd83882ba69f2
SHA512 1faff17cf54129fe3c47414801267475c4a28db6f34c7264b5352a70cf4bf41a1eb59baea34a05eef2e90ef90dea7feed72f6912add51ac0e8bd6f8f709ff0dd

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\vi\messages.json

MD5 0e91031356042b86a7aca1bad2e3fec2
SHA1 57f15ba27d52930394e6020d61308c6c066f82d8
SHA256 a474236d8c907afc5b9525595a09df2ad5ae437e96df80f4eea5952bb2f98d66
SHA512 29da0713c1849ca6afacd7163daf714f1f7c88a06b24fd1513490eadaecf073af2173064c4b924b33248aebfbc95ed4011c3ea68af01de216f8b65396ba594ea

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\zh_CN\messages.json

MD5 7acfed973d4f641f2a242c2a048b3da0
SHA1 ffe2cf17c0ab7c372a9825e066fa35ae31a3ab0c
SHA256 63aad930adeda4a49ed37b6a82ad07e483f709974910dfed2652a0838231b4e8
SHA512 9fe7942e8ed88dde712f230c0af8f14b4791c7c333caeec4ee2cf3837ecf6013feb5db7b59fc873f7932a21e56f6b94eaaa69c160486d4a10c60ed8db2103c90

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Extensions\lhnnoklckomcfdlknmjaenoodlpfdclc\1.4.0.104_0\_locales\zh_TW\messages.json

MD5 e5b8d585349407a9c7e4eacb24e4bdad
SHA1 a3d5ef9ecf6148e20016278ca33bd554d0bf8576
SHA256 741df00d0abae5457e69385b43c0617a45ef6e306feeb5de90fa23e87de6cbfd
SHA512 01ec8ca7d518d48c609b9a10b1693670f77ed5b5cfdec367ea4aa5d2955f53713638bd86d9af1473e4639f57fc1631720eb44b467aaf06559eeb59b4effbe5c6

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Local State

MD5 9a9d0f3e16a7016d2bee141653298a20
SHA1 a838ddbcbc36cff89ec1ee208dd7895397a63538
SHA256 7b182fc6de268ca98fddd6bfb830f2da03064877e7f5e0907c957651af38e9d6
SHA512 2014fa868b85f7014ff2b15be28ada7fce6facdc304543e9b04b1adb98ee3cfb12b53848758d2ac1aa5eb7e3dece22cdc47e0f6fa82a479c36df869d5f5301ac

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Preferences

MD5 e1b12c47e5436d5a946e138e96d8652f
SHA1 e64221f1b6efa8de9d7f203b85cb13d502ccd492
SHA256 5c3b12f44b216a93a4c69e80f8b1976462950b30c623d4ed2c7cd0b384a9270b
SHA512 1067905b690e01a5a0f4b769ac3afad889d447c847e4b9e08bc67ec31b82bcbbbbef33bc76bd9c394bb313ec05c34cf0ce5e14af175f2cc9bbb22f19112815c8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 bac8649570664e746c60c0e7f69110be
SHA1 4a468ca6992e5ce71f4a5b1fba5c7c0bc62842b3
SHA256 451b50298e80cae99489933ce5b1698c5f836d80818039514d3ab2cd06dd1e55
SHA512 da16980c089ce20a2b09ed70562e75c21f172977444b06e6614d812cd5072453b2ea4ebc810ae750aebc8559db1daaf43d37fdb5018be1da835b23258aa37a09

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Network\Network Persistent State

MD5 4cadd8a283357be329f11679c4eb82e3
SHA1 494d53f292e9a46fb51c6a1ebe1cc5b085e005c4
SHA256 75e7b455b0dc4ee26da5b71e5ecd6f3c226ba2852a04cc2c326ecfedb92f16da
SHA512 9c965ebcbfce4bfaa0ea721b013c5e6616ae254b46902ad44830b538f736a6d479dc9b5d2c40b85487abea975feefa20dfe4ded0e135b78757898e0203d66633

C:\Users\Admin\AppData\Local\Temp\2d320789-85c6-420d-8ff0-a091d11f1eab.tmp

MD5 715d7f588ab10704c47f7a199547db61
SHA1 99bf0e0a40995b4493bf984cca2ada80a69ba0ae
SHA256 fa0fdb0809fa35a693d886b7d30b072c114e92dac721deb0d5c7b0349829963b
SHA512 77598c3c67cc295043b133b7bd9134e6daca750fbf229a9a194d3add588cbf578d2f329ba926885757d4cbd5b7ee2a73211b66c865dd6d12830d946a5d5ef17b

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\8228231d-cd2d-4c35-913f-d81aa3ef6fe5.tmp

MD5 4bbbaad96fa4074dd756820eb4d9e107
SHA1 ab844c46e8c3b0dbb0ffc8bfefd838ecf6eb5d41
SHA256 b82ec8f3d75e6ab9bcd7c1901f3e425dd9d7afafdd4d9065853d0da3e8bf6034
SHA512 eec7e1f6edc238ea52a46480f647ba25fa8453ecf360d26264bc538d3f401a00ba483fb5ef9b61161ba58253781916282e80445ebf48c6d9682e8ea4d1f65a91

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Preferences

MD5 b6e0f7ae78be38f561ded5380b0342c1
SHA1 158a36cdc196ad6b6d9d66a533dae71912fc8831
SHA256 bcb272bd058190189b6511f5744682fbdbd1a2fbd2054640f44f6948a9418adc
SHA512 dbe96e0d3b60b87a45b90722cfa3248f29869abe348ca1ae6f4231d7abbaaaa81fce8e0cb8d8a6e33d86344317e450c75de298b2d01258db49d23c1523a8576b

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Secure Preferences

MD5 8782ed78c4ac4cb19d9e1b7bb99c05de
SHA1 fb2bc14c9c5ba14a5662d7173017fa3ce10cfb30
SHA256 e6eb44a4a3b96d5522bc49e604f92621d0b8f678a89fe84175f86b7d6ceaffd3
SHA512 fda77d4859bd42b511f9e19442df16a1dd5dee57610e0996e88f15e6cd17075af99a80727d7f40257dfce8521c323919eb325345799babb84808e39838b8dba2

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 2bead4cde0872bb15eba9c25f749667c
SHA1 301be77b82c9f7662770c57ad19556c9bb4471f5
SHA256 4b934a4772c0e0dde81a227ff4c6c2fc5b56cbaeea717bad0b3645383d89b3e7
SHA512 be3d95b9302344cfd4e6b0a4d946dd0e427ee3d03d417e07c73c6e6aedf9663f549781743218729e53950aa9045a5ba3ea1e61b74f4d4b0262cedafa72c6b1c6

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 c20db0fd4a61aa27c19c1d8dcec3f029
SHA1 9a9de8fe225c1e56b7b11e7319d89f3b2c6e03b3
SHA256 ac8390a51a96dc4e2d3607eb6dc3ede962e443a8678d6d190c21a00d8c75b102
SHA512 53c4927f4f0accc0c56929ff6d6e52992d25a804ed13ea0c29ee167af0c38556b47931194d478733c8b50e51527facc460d66af9d344ce8c4f71ae65a3ab0fff

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Network\Network Persistent State

MD5 2cd4d8df57e0042c12a9609927d1c6eb
SHA1 5f33b045d4228698feaa2365b814cd1ec5a1d600
SHA256 1fb27c8f0be0d003d8d6fe69420374b6287f5a2004063769379b06a6f55198f8
SHA512 bdae95c141a44ccb091e41f60f720778b4307527aae123bf8652282ad7f62ec5dea94b5bda4ca4861f932473723f37ecc3ea9e1d35fd05c01727519cc6a71349

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Bookmarks

MD5 38f668bd65b5015f44d0f510f7d58d9e
SHA1 568ad8c9964f5e0048da2543267cd64d6137d635
SHA256 0f19d627c53f88b3f59d55818d5e5131ea2770f23ca12fa828cad8f2ed808634
SHA512 408a730eef834661ea3cc4eebc6276f191f601fec42b24e79f27a3efe489954b0868c4ad77b5db8dac185dae9124a9fe5d335f7c8b27e2ce220930bd5713a09e

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Crashpad\settings.dat

MD5 f6ce1bba7f5ddbf3b2df01a35448df88
SHA1 b884200bd2c10ccadc5c777797daa80759e6fc6a
SHA256 9c419b71d26d3a67b4732d1ee5c73378c2fee7c286d959153f70b6bf81a438c8
SHA512 f70ea7685dae2a6140a1c6db06a14771003f410195bec5125727a68448807409ee860b1e85c56eef37c84e9a81cf59141f712e37b939ce75f99a2c724d6df3c5

C:\ProgramData\Avast Software\Persistent Data\Avast\Logs\AvEmUpdate.log

MD5 f92e464fe32d24b9b77a1cf2c7ba1654
SHA1 7f732a04ec7037fe7a4bca638e24ae1ce382d93d
SHA256 e0fc53e05edc5f51201aa60466716fdcc26f69bc1f3c210a0c1b9e472a5f6b80
SHA512 f6141d7d4c01d579c924183e7cd2fc26a68c685674dbf73fdcbf3123a541f5abac6694dfab905fc4a637f41a9e97d8b7873bb67d242e273256459604e9f1bd12

C:\ProgramData\Avast Software\Persistent Data\Avast\Logs\AvEmUpdate.log

MD5 b89d95f6c3b96f0af828aef1898f9221
SHA1 672c9c5614d2c0d259c659e8308488fd9513eb34
SHA256 97d4cf1ed54f7b8c65c878547d971c997c1d776df6bdd7a774b2996fec6a3511
SHA512 a1d4938251764ffec616bf106a6d2b2f63a2b313f2a16ede4bc7923bb75e5ece929879256d35221066b9e2b445fecba67ee22c40cd8f02a714a13cf7e5c6c1cc

C:\Program Files\Avast Software\Avast\setup\aa2e5838-c47a-4c8f-95e6-cabb743af767.ini

MD5 81051bcc2cf1bedf378224b0a93e2877
SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d

C:\Program Files\Avast Software\Avast\setup\63e02463-cf88-4be3-86e4-01f3449863d7.ini

MD5 25bac562e5bf3d9fe40f43a7644dc072
SHA1 b5be000668278e6c1ba2c29993e3c7c88e11b483
SHA256 6c2e37cfd957aa51531649ddc0428ceac72e2ebad067d46288a7526543db4b34
SHA512 db8c12d369f064298ea337e508fa05e593b4ed75aeb9084267093b561183ec25d3ac4a6fa467067dda9ec4eb5865c22e79b0049671a4ab434641b2716a01998e

C:\Program Files\Avast Software\Avast\setup\3817d214-68e5-4eb3-b1a1-2c4f1d457cac.xml

MD5 a04e237f20e1726526ca05f0abbfb935
SHA1 83469f488ef04b620e3a4f33f0cb39e8e371e986
SHA256 8d35159d67be66d01304bffd1332799d01bd11db7210931cafa3f095c5d14f67
SHA512 c924eeb69c00915da90ac9b264ed29dfdceea728d6200f6eeee6010ae3ec38737d45371b448dd2f9d512c929fc7b55a6d50b049247857f90cd70d011142ad6b4

C:\Program Files\Avast Software\Avast\setup\a1e0783b-9a50-466a-b23a-5370e9014cf6.cab

MD5 d9023d73bb27513d251a6abf5d6b12dc
SHA1 c96941903231185b0f43f159c650aca348d48057
SHA256 855f420e9f4b5f26051fe7669db8d016dfeb9c8926854205c4d2d9e9407570d1
SHA512 5bf99c826e73e9e9e8232bb48fbfe264ad674584d37cdb71de671f885a123b466b91bb40d7efc013819a92fcd54768639eed629665307e257f5ea033e9b7e43c

C:\Program Files\Avast Software\Avast\setup\65147f20-384e-461e-b9c4-59b97c2eae69.cab

MD5 d1ef32c42378f0b7a34f7f7936f03d6e
SHA1 230649ef7320df5939a24e3668aacec46509b693
SHA256 e8f5636f5f2e6717caf2fa5caf9a7f8518d499ec42604ede23687be8ab2a43d1
SHA512 12a1a2d63935bbe10923bf81bf2bfb112d6f550f2533fd778cbe3a67e1eb77947c016773d56212ee3beda67d2f1ab8a67b14bc88a95fe4193fd8772236d6a671

C:\Program Files\Avast Software\Avast\setup\c995aab8-a901-4b62-a998-53afd20eb58e.cab

MD5 64ae0041df10366b9dcd791181fbe2e2
SHA1 b0a8a9b4913b784290b5a1bfff7579dedfaba6dc
SHA256 f2d3072a159b79d49dfb43b01b63601ff7f2b628e24f0a1ee397ae3e34a0617d
SHA512 9dea64a78099e191319c2734d2cf00ccd3c4dfa1f6fd73f5d0c5d20b9d916dda489cc359a0a380f6112fffd27c678f5143e2fe8867cfdb7089a70bcb68cdfca2

C:\Program Files\Avast Software\Avast\setup\b37a0ad7-dafd-41ed-ae1b-e49300234b2e.cab

MD5 138dfe6b167cdfe9fccb3695a399d305
SHA1 03c92db2378e43aac40916cc2ff46d9a4bf374a7
SHA256 b60c3b77b80d34d1ffd30fe29199dbc8db7d6e5129a27677dcb414761efba323
SHA512 4d5bb00cd759395869052886c223d34b11c000b8a9ac0b421e9b47feafa1e2ff6195d4327a49004a8ef6fda60ed52cc9d858b437bf38ef822631365750d2011a

C:\Program Files\Avast Software\Avast\setup\f69c9dc7-d0b7-44d2-a9e1-758f12a89867\avast5.ini.171946210890604

MD5 3a3c9efb77053e8ff775a51e77fec5b8
SHA1 20bd7474934bec52dc34b96533cebd1010b20e11
SHA256 caf028e8ec822d3de835e554e2e98676915597be1c14d74d367f52b815edfc02
SHA512 e83dd33949d88ae9b08e408d138d1cc8a23b65aadeddbb13a71f8152a2cf816429c293a132b79289cde7dae84470e79282b2a02fb4fd769260d77730d5ed3bb2

C:\Program Files\Avast Software\Avast\setup\d691cc6c-4329-4306-9a61-2c7bf3e24c6b\update.xml

MD5 a3613e997feb8adc35f80b03a30b2b0a
SHA1 584c5c04ae5cb5113725aed4b1e35b2ae732d85b
SHA256 ac2b45e3664db47a9b30f45c508355562de21e15af2b3d34f2d4fe2da993fbab
SHA512 59b7dffc80502397098650ed50d3009c8a547b2c7e6b845e45c3eb1495e7290a66d39b70ebfe4c911ed079b771a75b47d698b00f1f80f80fc375d25fd58839ba

C:\Program Files\Avast Software\Avast\setup\e09bbc05-aee8-459e-b030-97b5e6feac4a\update.xml

MD5 f73f5401e824b4805fbe673c8b93dff1
SHA1 f5c34316e2d10aa039f2fb99204ed4c879eb06c7
SHA256 41fa82253a09e17699692d1787d2e25640c96a812bbff0094a721bc34682eb9c
SHA512 8aedf35b7e932427d02b1f731a49d3eaa1fa9a283cf3f02e11c2ab8b5e07e33c6ef51830dcffd576190d17b33272f38e4b35c4770c6279b2da306dd261b09fe7

C:\Program Files\Avast Software\Avast\setup\c4cbb1d2-3b54-434a-a928-914acff0096f\update.xml

MD5 9924e24b4214c01231d316752a39aa93
SHA1 d90e2daaf0ce49355d15193688c6fb5929c6cd11
SHA256 762028af5b3e1b7f3272de82ed9533af3904dd4ef3078e4f3a00aa817fe5be46
SHA512 93daf2583e82351c761d048d9613929b63fb612624930b1f4e7f20e64c12b3ce6553ed3ad0dc0510fe6dbc5736a322afe4833d2d7bb4ba0e477dc131e1ba57d0

C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Avast Secure Browser.lnk

MD5 700bee1bb3901c469230effa32809021
SHA1 e31bda94f2ecd772eea420e6649ac21296449de4
SHA256 95537d2e731f208eafd1a1667393fbad5699764b5d413dcaf19c5d07fc1c7b17
SHA512 3951094b8423033088903245f68478d71248a19d2a32e55c516ae49a891175711127197394429276c9304e3889f8aa202a899961f9ec9f6025aad74e1e146fc3

C:\Program Files\Avast Software\Avast\setup\c4cbb1d2-3b54-434a-a928-914acff0096f\E05A0DC3C3E9CF9D13F813BC04FFD2A1.rmt

MD5 1d36e360bacb0ad0879dc02ea64cd3e2
SHA1 9a643c8b010fbadea0a1e36db2154ef6e4ceaa43
SHA256 7e546fd3a8bcb096c14081d8b86149b82020a8c88d3e3fddde8818ea350df0a2
SHA512 e909908cf52150cbf3a8dbea06ebc5e13c65fe62cabe8bbc1c66a476683dbd16f6175cb4bc8777751741152af9f5f3a13d33c3d677ed9b6a0e1808ed4a08c29b

C:\Program Files\Avast Software\Avast\setup\c4cbb1d2-3b54-434a-a928-914acff0096f\F5A2D1E391A646F3B90F0DA15BE81B8F.rmt

MD5 c186d9f8800591a44d93f5375c062172
SHA1 81de25dd041257ea2dad5b473b00592a3f90cbd8
SHA256 4d2088106d4e6aebe63e93b8a9fe9276bf056ec3fa23162846ae9e2c8b4e1738
SHA512 87ecbf2dbb07cf0dd7ce0ddb24b69f9b38c42db23cd0aaaa4679298415469b203c7b8ded88e9240156e17b868732801aa4ecc23768af39369fe10bc65da2fb65

C:\Windows\System32\drivers\aswSnx.sys

MD5 a996ef92162d0376fa69fde857c401d3
SHA1 7e2b7b0547e40ea1935000264a6819562ae5f78e
SHA256 eee456041e45552ccba1e5b1a3e2cb83e87c14f4254dde8444560463ea26e6d3
SHA512 67d2a2900d86b49a8a02048819c17c78607679f10db3b996eb37ae55b3bc815ad12356b03797d900ff2f36294cf0c93579ac22f7e22b42e76bdea6576d3f0a04

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Local State

MD5 071b228538ab1795dd6516e9c24b9a40
SHA1 8c5f9ace3f264d52f803f5304f333cc467182ff4
SHA256 8d16304dc7b8eaa3e7dbf98a012921566daa9ddafd4a4e6503bd873d136a805f
SHA512 918f5473e8aa440fb09bf76bb1c0714760587ab2353e149519e12ba2d914888fe0b42f5406e6eeccee9a5487de33120b5b4c869986330b02fb28d752f74b0584

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Preferences

MD5 6196ec81506c5bf04c1b50819d51e95f
SHA1 1ccdd6eef9ce81c5878749ebd0409a46ab576077
SHA256 8974853dee9e637d184f9135813c9759f41b4adcd7378328c0acaabd8dfd2658
SHA512 3e34a726a0f8b1ca3e0f2b8a0f35c56f9781f80aff4a2ed58ade7716f78960236a7b9fd25127853ae5e80524d82808381a6adca478f71b95968396127ac20958

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Secure Preferences

MD5 3df824c3e51e4c966e3e1393e14125ca
SHA1 6727c08f23fb9cd21384dff61828f79ed3653e52
SHA256 b230ac939bac5c4442a30a2f9644d8954b55ffd02a9bed509bd621de1ceb64b1
SHA512 592dce3f1aa054f378e9814082dd90e9b3509760ae857076dbe1f537ba111fdb7728fd8451c4b375dc2e68a2a8f1248669317c67b9923152722f95f72be62e2c

C:\Users\Admin\AppData\Local\Temp\app8e8cb6056e1d776f.tmp

MD5 d367ddfda80fdcf578726bc3b0bc3e3c
SHA1 23fcd5e4e0e5e296bee7e5224a8404ecd92cf671
SHA256 0b8607fdf72f3e651a2a8b0ac7be171b4cb44909d76bb8d6c47393b8ea3d84a0
SHA512 40e9239e3f084b4b981431817ca282feb986cf49227911bf3d68845baf2ee626b564c8fabe6e13b97e6eb214da1c02ca09a62bcf5e837900160cf479c104bf77

C:\Users\Admin\AppData\Local\Temp\appfc19c501239590b9.tmp

MD5 62047181e3014b836101713de0e8bb7a
SHA1 953c347cfe6f36953c624c7805752ac53c6f2ab8
SHA256 f10f8d833ba45723fe0ac72c68b9bb5257d92dc1f7682e4e314fbfc0c1aed9bd
SHA512 54de2040396031536a46b647a469e5fd97268c9bd8889214126c49b7ed58831915b7b8f6524c4b24b978c797dd99194d28d59fefc6e9fea388388a92f2527c1f

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 2a074ab35ea4eff57ab525b2a0c5e349
SHA1 60eb1def430ab69cb4d1432392f6551a9360f60a
SHA256 27bd6713fa1e56258a901fdf1b56a0bc9d01c648e62298208f990e0a7e695e60
SHA512 161fbd27d61bb85e3341ea329bc9ea2f5ef38e6cf42bd1864652772b7c0ea4589ff42c3b421811b96cf78c5a70d32a5bee13ba3c862f02be6bd759427f217560

C:\Program Files\Avast Software\Avast\setup\setup.ini

MD5 783a9dba7097195ed9247aacb0a55d67
SHA1 b9eeace50f0ce2bc5a26442d5f5bcb99e0e28d56
SHA256 4a59545efb091fdd3fb71c7acb2a8a98bb769441a3a5a5e4ed7f5472f469d468
SHA512 0e6f901e016981d2afca890b4523e74b9ace755af910598ebd2057ece7d28708497d5851d87313af3ec7b5f681ac6f4e64f458a7f94c7965f14020066edbd145

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Network\TransportSecurity

MD5 af0ecf6d53ea0241854e0b6b571dfda5
SHA1 683eb4e4213518e06a7f84439bae13d87c39ed0d
SHA256 36343af32fb31548efd40b450032043e137f7518c241eddc60ca46b440900f42
SHA512 9b4882ae5e5be733bc01ecb0559fbd532e06a6e78bc1aec4b0ab6a3e48e4d2b789f114f66054b9cf1766b0e832f8f1d6728724bac242b25278f6960dc2a57097

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4b163ceb285d7e8101481802db231f2c
SHA1 72ede039fbc4f3a2f57c6e53d0c0c3a53e9cb7af
SHA256 392210264da5c3ce2fab895288e64003cf3402cd7352443e5f46221628802dca
SHA512 d42872513322d9fd7bd238b12394b4e90ba8311aff809d9e311f55de6718ba02f2c6d4975c942f67e3ca60bd6c9427248b417e596bab04cdb77f0fa43739d4bf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 26601ad83186573c5c24522ae16a75e0
SHA1 2dfc7b3b22b9f9c74beed8d7b5f1bfb5bb4780e3
SHA256 2ba07079d02af3026996534e4c01596b126a5b1e89d6597889357f63e4b03e6d
SHA512 a80a5b98f4607a43c48890fe2a807f28ceccc2959d209d5199f77b8ce85a700c4f4a6892bcf625ebef20358f5178a2641776dc07ad1152e933da9cbf8b7db8a8

C:\Windows\Temp\MBInstallTempca5a83de343c11efaa29fe349c7d5183\servicepkg\MBAMService.exe

MD5 31804b530a429b25e5763de3e7e5238b
SHA1 4d8eb7342a2bad8318ac51a02b7b55f978178422
SHA256 1541c57f87f24610dff7a77af7e932992ef574d16ef3c5e7007255776951ee3a
SHA512 efb6d78ad79c6edd8378640d2e6082320936b20462279ace63b127602009b06cc7097c822706cdbdbf9603e33372bfb5c8492c0319030a687589def37ba3c416

C:\Windows\Temp\MBInstallTempca5a83de343c11efaa29fe349c7d5183\servicepkg\mbamelam.sys

MD5 9e77c51e14fa9a323ee1635dc74ecc07
SHA1 a78bde0bd73260ce7af9cdc441af9db54d1637c2
SHA256 b5619d758ae6a65c1663f065e53e6b68a00511e7d7accb3e07ed94bfd0b1ede0
SHA512 a12ccf92bead694f5d3cba7ff7e731a2f862198efc338efc7f33a882fe0eb7499fb3fb533538d0a823e80631a7ca162962fbdfd78e401e3255672910b7140186

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\4ad35b14-59d0-45df-b40a-796520bb2eea.tmp

MD5 1a1d4e5cca80bd65a35dee3c846a4a27
SHA1 3780fbfc7dbd9cd116891b9a2d0f424519648159
SHA256 977cf785fc220298b2749a38adb7104a94cbde99961d9d08eb5c6ed5dc0e1134
SHA512 c04e6fe0c5c3e134dcd02cd5bd7c8a38e7526fe1f95fd8f3184d3cae265fab6b2aaef73830567939a0588c3758fa0682d914b28fdbbd09f50f096b0c43ab51e6

C:\ProgramData\Malwarebytes\MBAMService\MBAMCore_b.dll

MD5 0ccbda151fcaab529e1eeb788d353311
SHA1 0b33fbce5034670fbd1e3a4aeac452f2a2ae16eb
SHA256 2a6ac5a8677bd1b410420183169b9ca9ec87dbb78ce0f11ebac2bfa022df7c70
SHA512 1bf9b8849b27491ecadfb4caf4e61926f9a0a8479c247a2281ba2d7c1ae0587251330ee29cc053630047e279ef6b52d3a125e21144b9688f1328f101bfc3c2e9

C:\Windows\System32\DriverStore\Temp\{658b950e-331b-414d-9634-74c8fe0782f5}\mbtun.inf

MD5 5d1917024b228efbeab3c696e663873e
SHA1 cec5e88c2481d323ec366c18024d61a117f01b21
SHA256 4a350fc20834a579c5a58352b7a3aa02a454abbbd9eecd3cd6d2a14864a49cd8
SHA512 14b345f03284b8c1d97219e3dd1a3910c1e453f93f51753f417e643f50922e55c0e23aab1d437300e6c196c7017d7b7538de4850df74b3599e90f3941b40ab4a

C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json

MD5 26fb0516b06c8b8b8efa2d1bb41facab
SHA1 ade582ca062e19c4c22c0c7cfcb9c47114caa303
SHA256 6f963ef2134c20f5769d2534bb2471143d0d529cc021f2a8e6554ac9e52fa659
SHA512 9c4f2e8423e09832281faee50f8a4409b530979c6160ea8b80e46310f20f8fec5892e89f09106471585af01f2a3c27afd2c8122ae832e2190f26701ad10cdfe9

C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

MD5 57df58297a49e4e13395c18cd53ada9c
SHA1 e8ad883dabe4e9497fd5de08303fc529ba9f41a3
SHA256 0ef9c256c764c43cf89dbb92071ef6f1c4a1f6ab4b7870ade557413e64073b58
SHA512 7572aaa4a90d3c5798c224e081b23ab2af3fb7efc011637eda7bf0135bd5eb7f26b71fddc9a6d6581a5edb9a628e67e31ade5e777bd36e54c141a95caf029caa

C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

MD5 afe6e360d662bbd2f21de400f933ec16
SHA1 606c168da25b4e76651d7a3d0776284c51d70c6a
SHA256 15fbef1b2d97228f690b4aa1115554641a13c2d9be8bd1136d2c86f1e2310486
SHA512 e473cabb8be9b09c763d534d1ce358f35eda8c7d13d67cfd965894789304353a14366a42b819ed80f14f46c9c07dfb3ea79f85d8a9bfd661cc7119e30e484ac1

C:\ProgramData\Malwarebytes\MBAMService\pkgvers.dat

MD5 17c57b3e11e56dc945e9846fdb0a8f74
SHA1 370819227c8c183f0fe2516e4a137d40dd385c14
SHA256 218a35cd328474984d094205bc2517df111a39710d8c2197d93639b15235bfd4
SHA512 d9dd0c691eabec6b9a716131acc23a98bc1c8cdb80e14219652033fcbaf7c1c46cc7e46519f6a3aa14246af0b27d7e46669b7be9f05af64f93c499e576dd740c

C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json

MD5 5c93ec71220c0b7143093862a0e0d774
SHA1 e507f380ae56211a0f934fd34cbbcd4fcedd6d8d
SHA256 0ed80a92ed306a38b1ef6a9298e90c21361e382c648b5a195086068a4efce188
SHA512 9669d316fe1a93c66fb9be749a6438bd8c186d25216b2ff774664176a1fcb430c8b92f0c9eee616bffbf9aecca9acbabe51be743ea9202788bd731e3f656e5b9

C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

MD5 2a7342429e1328a561afb278f3faa8c0
SHA1 dc09d4f37d445418d6387531e49aed601c06f681
SHA256 277ed52a87d7351e8f5dd8a6a56e132cac27fdd1e6efeb71ff00ea8c28695b78
SHA512 62ce2ede606f042f6b96eedda9be8801dd7ff8b6b253bea734864c9e212b37302bffb71847ab265e1aaa4a7da9e850237acc56f96f338fc253a95c11a3388316

C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

MD5 613e9389e750b3bc0db59575ac62a43f
SHA1 d2c9938d099027306faf2af9f8ff2b12a59ab91c
SHA256 60427cbb14a89a4b67c2f1705191f97b21b9ce31e9b170f47c36c55e7342f947
SHA512 ba4e41e1c0cd8911d8305cd3fdb087b5f2e986ba001456b3098459a9f0f148eefb3c15f0b57c6b70ea033c5054fab98df91a1287dd2a59faf702eca992a6616f

C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json.bak

MD5 a551462dd814d1eceaa6135020ec814a
SHA1 b01cc586a291c8a9cf0f798ed17aa6edf1cd6211
SHA256 90b06c86f7ea90a717bbce86fa8e3e14397b30047f42bf43a040b71ece0d2483
SHA512 24f56c7728ad59f9bcc2b9c48f1bb45762eda393e2cd8e4eebc7e631e418ae6c1c98d065abe0364749b3523160b7e3bf412bc8935a79ce95a012012e7c6208b8

C:\Windows\System32\catroot2\dberr.txt

MD5 76e8794643ec0bcb4ccfdcd99eed1c9d
SHA1 e069f9e4fe42e6246cdbf818f626c0ab98795043
SHA256 7bf3b61e0bb5f05054ff99e172815d919600c144393f3c8ae4f3e438e5e4c1df
SHA512 11701f2311e11451d44fba3046b471cbe089ba0ef45a9ae0a2e1a6cebc586269fa00cbe7d819ec25e41c83db8e6e640b7d751dcbe2ad062ad88cf938d4985319

C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

MD5 8e019ad8b87e27c1da765eb0f4b16448
SHA1 839321aa40df5610e380e0fb856cc16406b4d339
SHA256 698ad5b97575b37659aafde02373da5ee33c27c511f8de2546c8abb32a00d6ab
SHA512 cba3046c70601971f2b0189ba95cda4debcfef30c93c0c1beaae6f1d16296d63327da6d9ab295b3ad80e0232515af31d2ac0e72ecdbd66b44d126b0777ec6a70

C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json

MD5 82735407176fd5fe564444809ad5264d
SHA1 64e59941d2618d6b97ff69aa4e42c3ea6b830d73
SHA256 a009440bc45c574e4cbb1beca98066d2fc7b643ac94234b0e2cc4618705615e9
SHA512 3d794863bda781719cc6773593efd59f701ca3c601860f700cd862d2c4ec51db4bb3f298d9e81bbcb27f443c4f7c1adb2df09df1088baf73e8c68d7452144980

C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json

MD5 dfca7d6bacbbd60e84c53c6341b10a7d
SHA1 a15aeeda03a1dc1365bc233d7e62dba40fe796a8
SHA256 0eab6a648c01dbf60134719e5e987a4414e52247524b6c80810c163dc357bcfd
SHA512 8dd3cfec698f6204be75f313e804ba3bd9681f6c43c2f23a7d9cbe54641793f42da69b8e5d171269d10a267b7d1be45e5d266d760c3cf49492cdafed7bc91a72

C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json

MD5 216b20d354aaf6e42790107f796de976
SHA1 fd7873199d0ce757eebc0f8a7a10ba6ba925b310
SHA256 2a42c286d18d31c0f9611cf11df6595c201e235e30a349e29eada961db9a9662
SHA512 963c490f3db7df2c57c828008ef998885ae4aa5e194367799081e7e02e2718a747c1f1d11f1fb4893457898bd4592e54b0c6e8792e7b614823554cc9119b8b20

C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

MD5 5058829e455483cb0921feca8b4642eb
SHA1 0818b5bef7ada8651d474bc6a6a41d6f918a9e92
SHA256 eb5429f26a07ce89ded31632237f3c4c9cacd9e2bd14a95a605faad0092df39b
SHA512 96de416c1ee9891fc23dedc6ca0493ba870fc2270b077380f1a64672f9b26260725de18612e779827ef7bebb03e62bafbd39065f45d2a05895697e0ad0f8c05f

C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

MD5 c0cd41ef29c2228a23e50fcbec4c654f
SHA1 4ca78d0f38474ea02bd2fc4ba544ace1e1d54b25
SHA256 31ace6b04ccc9e5f059ed36b2dcdc6719a781a78f69226fa44d5776f3a7d5c29
SHA512 d043814fd42d3ad1955f9b4511ada3053324caa29634e3c35d6c5a3dceb4a6bbfe531c1dc5a52c19a2889d3b0ce12fe923a30d4029e0a3b8efe18329a3b374be

C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

MD5 e58841e6204a80385113ebe35c657689
SHA1 f0c4340f75aac9cb09864832c5892eb9e0a57f0c
SHA256 c6d62af92266b740fadd39293efa67406041b60a1f4dc5027e7485a95a6ce1b0
SHA512 57f576b5ae1d56a97ef93a0b59ad8bc13d6e488ddd629e693fa6a691370ae9c6fabf8c0fd560ba1e39740e1e8b9544ac652f9d907eb83c826805d23c3b000261

C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json

MD5 4d3135410b67b1b1d42981b7204caee9
SHA1 9089fefc4b27b5d9b7b2986a9545e6ba0cd45fe0
SHA256 d5b9c49c08ae32c4b70a2238ce4007ab687328ba162403235c2dc750a143a347
SHA512 0811ce219b99b346f9f7e3c0cd2aeec2aba8b7fb4a78bd07173dd11a7dbeab8743d7ed9f49a3e361c78b0b088b66ef969b5d7607899895de96d9300166fc36d4

C:\ProgramData\Malwarebytes\MBAMService\config\VPNServerListConfig.json

MD5 3e41e1e479dce0d3cf503b817c860469
SHA1 e18e3ba7dff7299d6801dd27fe55d26036510f0d
SHA256 a50126195823b59d2b103446230412d5f272aa00cbda3f2fe43b904342f77cf5
SHA512 2f0032696a71f3153a33e35addc9d35ee43fa15450c8f59db82436713f6cef4183d564b65a8b210494022d2729fab79e5d2d323e543a2aba777fc8c7738dceae

C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

MD5 71ddc98cb3e8436596c14c31ee95fad2
SHA1 a6dd90846cd2a1f217eae2647f1da05245bfbe0a
SHA256 fe671bda24fc6661bceddce88e9159567a980fc27d392c33d17679520d7c9719
SHA512 63dfa5723df42f10750ff5254766ef6ca0a2a6ab6e96a9e240b8c2cfe0980f71cb71679629ab0871ae0bb48f62edd16da1f5832c581bf784259b4e0d3c3b36ad

C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json

MD5 b970f26152881808789e51ab242b53c7
SHA1 22f1a66a497d5db1dc4fb4505425ed2973536858
SHA256 0e4ae9e3b8df185177ad13777bf43521f4c5fc9d0786dc5fe672371fc2afefc9
SHA512 12ec1eede78369004edf84eff2ba915ebdb3d854cf27dea197a591350796fe8aeffe716c23f1bd88f97ae31bb782b65885223451cd8432088d8cbf76d8f20612

C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json

MD5 5d6de0c5aaa85be2c4ea6162836c72ac
SHA1 d978b49258a487fe8e37812cd3bb9a8d2cc7f9aa
SHA256 8ce1758c8b1de73d0cf9006020209ce5c25e4510ab33b0dc909f6869c6790560
SHA512 e2f7e18148d247886530fa45870d5ea44d00d66e857918416081b63b77973e0452846e9cf036d6816e37611e01a8424a0633fe09e9e8c59f1461f6e1f6046374

C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

MD5 fbe69a2c53991a9bf76933f2d690994a
SHA1 6c1b357abca4db41c534349dbb4cce4d54d199ba
SHA256 e9ea3105c1320259daad56f360e326d1b7337226be1755a841e37c9a7ef76baa
SHA512 0a252bad914e3048881e893dc02de2e309e7368bfb7ee7b09a444a48d4fb06be60f93762429ef7d6b3e6592815ff05d32441400ef5f470c5499d4a70116e2af8

C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

MD5 8272e4bbf90787e1fa128c303c1574b3
SHA1 0043592937a6754768019381254bb34985968952
SHA256 8fe25a2cf1a04f6058e086a510207f5c9ff04f2b77a420f9fd97c31b4c0120c4
SHA512 6d594abd3bd93f9940bc2090b283e6a5c7c7d74c403ee7187c027f717170da49e7a4b5613834058ac15e0f1082d20a0e198e690bab0bcfbeccacab4025e06054

C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

MD5 8617b5d94bfdaeb87092871c624b80bf
SHA1 4a3f2d3d3de1b916759ddd6a92d2c4c82ed9590e
SHA256 5c494a4d6425b5271be005033eb681a978f0c6764c8a1db1d41d3d9ef1bee7ab
SHA512 217aaf1ab2b3b65f2b6ae37d7113566e8f54a558e182f4dfa15a4c4d5dda49156e04ca264013691ff5b766a21e01326368f6fe10eceb0d039169f3845e288c65

C:\Windows\System32\drivers\MbamChameleon.sys

MD5 2a0bea88ce233b8d841d56df26195e06
SHA1 889af4a1f2b77423d5557c8ba7980e5d25e74647
SHA256 6116b30ab6f4bf5f0e8eca78bc67890e7aacc6c74fbb4a15a93af44bb34f2636
SHA512 c3d2620e3e1c19b63bacd578cbe55d52242dd01fc3ba5a90d0d001f8cab105a123959f0b18a8e6e71b4dc97d7995e832c8cd2d3693d808c8a81c98499cc63fd2

C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json

MD5 189ec1836dc8b862b4e3d8f95340b99f
SHA1 4613efd4a331252263c1d77741ab848771c7eb71
SHA256 5f30d88eb41ce7a3377eeb2354337369520a44eb68d0ea9e8c8ab04e2f13734e
SHA512 e7f9493256be4b5279638514f3ffab090004d0b3b588b82c4d771d50188f2eb6c38f602e84031f4edfd5a0c6529ea5fc884114b5589eb45f681a8fe1d66ae6ab

C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

MD5 91cac4345067a26d76ee01cd28c0a260
SHA1 e9ddc31f6b29704ce5f625fcd6af62762a18ada6
SHA256 150d2dc42493005e1f4c5e550f485d8167e8c81dbf75d09c52026d19c450aca7
SHA512 a85293a40fc6e02ad9218324d2dc53ae0e2aad7a89833a047bf7d9a3f618d69766a113985e1853cac8d8fffcd53aa3f6a29f22540279547e6b3bee833c0bbb8a

C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

MD5 9c2f27102e3225d0abd9765bf2aab79f
SHA1 7b528ae36ce92b332b59c63ddf7b0af3d5409d21
SHA256 90678c0c5bfe7f196e1544d0371a7a1d68652ad3744bd0e4dbea257a094cb77d
SHA512 775d4464572ad481be365dd5875bf3009d2564c77125f1c8ff4c450385225153ccbd42fa45f21cc117fc408fe77c4e962769c9f8fe4bef040c362b778529f868

C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

MD5 ca9445a4bde2235fd11a7ce0eba8517e
SHA1 519255b10521e0c99091df1d705dd89cbac0dd8f
SHA256 fa6a691fc53d403fa6970482154344e72d6931dfcd69bdcd7714b7da48d78a0d
SHA512 2fbf16031323227e1aca91a1035902c449010a6ea7e574e4bb35ed207c504c9e7ed6c3e365f64a9f17b0de74501d15ace6c41e1ba1e513881ecb159999857a0a

C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

MD5 55b6ea6d6f458bd8214be1021a9f87b6
SHA1 7ca124c4700d908c4067ecf44e6ddbdc5a7787e1
SHA256 58ed5c4037b2311a99cf7127dc2e2f99abfcc60a8c91f35bcbae9c0b5a792ded
SHA512 79b0fcc597994af5a695697aecd293bb1c513f9bed0c286cca82839f4ab601870be7fea481f2fc7c665d88afb491e2061d397c223b4547c81071efe78f387a1a

C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt.sys

MD5 9c4bec17ba2add58348045dbc762ab67
SHA1 b00ed0ca3634a93a23f70e79bda67c945dc915b6
SHA256 9c3b11ba1d4e462d9470fa0b50a61fde9f00cf4adfafd8e8b19f1e8af369cdd6
SHA512 6aab0e3d3c189c18ea6540d1736b64a518958c62e1cb0a2874826f6cfd76e3a06fdbd28ae0b81e2fc8fc20601d00d804d86fe9887ab6919dd8090a696fb52b31

C:\ProgramData\Malwarebytes\MBAMService\LOGS\mbae-default.log

MD5 5253cffcd41cb779d907be68eaf150d4
SHA1 92aa1f5ce4924c4427cf976112f922d17e9925e1
SHA256 26c2935501a9a054de23da42014cb27026bdd625cb65b98610f7d5899c2ce8de
SHA512 25c4dfba5eb9113e9c06d27966684b2a998cdb21b85eec41723659c036b5ad853af1f549613546c3a9b59dc5c31811e0e8a55fbf98329fa6bb5075ac6b7d8493

C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt.inf

MD5 358bb9bf66f2e514310dc22e4e3a4dc5
SHA1 87bfc1398e6756273eee909a0dfb4ef18b38d17c
SHA256 ff51780a5a854b2c18f71ae426cb066a13723ef6155e24f4910137c9e8dfdc17
SHA512 301ec5ec5c0813951843011f2204924240235494999136ea30a557cbf58146fc6043a8866b344fa7deb927d7c83d44e2aaf45adca7d221aba5d36715b9a63e09

C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json

MD5 3be93a30d71e61ed5aea0f883fa9b90a
SHA1 0ffb3e716eaa234a2abea172ab3cb32d70e87135
SHA256 6c7c40e8a189f1f1e2dbf271e88819821711273b7532969f521717ff735bda56
SHA512 fd952015dcc96d2b37b1491851b39a82c7b5e6076f3f489002b4afe894d6dca24bbb8f53fb9309066bfacef75ecf71e1397714425fb8715790e9e0ae377c8f41

C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

MD5 4e8f68d6331622273960406a607d9d07
SHA1 6c4951e55521513b76426bfaff590c4396480f5e
SHA256 e24ab29465cc6cc0880feba3730436e4fa6cf52c0708193590ba88dbf7899e22
SHA512 60941c6f2755b5f5a0b9142131776a3b00a501635b37340001c03e7005d02b4974c5dabd5447920354ec8f41b0758d6884a3b2ec0884b68a3b1f216e5c42d287

C:\Users\Admin\AppData\Local\Temp\scoped_dir6540_1336779427\CRX_INSTALL\_locales\pt_PT\messages.json

MD5 2b4ef25f9d9d0795fb54855b9caf37b1
SHA1 13688ae50244b44a38a34b745a51db962b9e7402
SHA256 98f17ef222ec0b6b4dc6201ba6dd4fb920b1425446b8bb58b215d72831c7a75e
SHA512 3de9559c020b2743b3a7832a28428c7efc5b4921cdb946e6db111ca12f892cb22b6cf4b20703e6958897b4af0ff53e8f1459b5da7687494765a4442b91d0d927

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jhlyxaos.default-release\activity-stream.discovery_stream.json.tmp

MD5 496efe76a30b2e57412e4085a30e01d6
SHA1 f1d7434cf1335d159a09e69a8941ded653489974
SHA256 7305b9bbd21ed54fbf1060baa84962cc5bc5d8706ef08ddf1611288c1287f9a7
SHA512 d51ac9b077e1d1fb51cb0879f398dd7155953b4fc561632cb20f93c60890e1ba99ea3f064721186ac9c47a004b9a426f9fd433d51bae53f20e9b65ed7937c125

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\_locales\de\messages.json

MD5 8a18639c12e9b2df08fac8215fea8efd
SHA1 f553a04a02646d9f076f426ead62291905553897
SHA256 d1b51aa2df2e26fbefed3846a3366d8cf5406ba24b6146094a273bcd41f2df0b
SHA512 7eb14e9fc9431b247e91e4bfe8be3d1362b683c58cc268f59ef73c3f4907ba94a685d083284f2459409c17d0e31c4835d2f1e6ca157e8bfc8de38558e10f474d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\_locales\en\messages.json

MD5 474b10d7d6341bf2f314573ff60672ac
SHA1 bc26b05698a9728ac4122a9bc5ffd474faadeb77
SHA256 e001d089dedc3615260282f00526ad12bda55f13b237ae9a7d518af7ddb001c9
SHA512 2fb5d1e12fb5792e490c805402fcef15cff086eba5c6e47ee61787a56cc5a6b7d8c65d2876603b5787a69812a4ab57debff7b99f9786f6b4172ca1291a4cafb3

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\TransportSecurity

MD5 748c7c368765c5c86f26fcb9371cb2d3
SHA1 b8a17510c34a5a5937ecf84c28c5974b1fde16c5
SHA256 921c59bc560b42ce9b6bee7f593227623fb82445d7e0fe0810ce4caaf61eb3f2
SHA512 ee13b4284ddd18d8278035aef8161649304cdab7643ea6199ed04a171a4a82ebc7b9cbc5748db4efb3c5e1946310d8705722dcce0877e9077bb2c8ec668f12a6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\_locales\es\messages.json

MD5 609c555ca3967fddfbb76597f08c040a
SHA1 a37f3fa40d3acf43c92d8099b314980dfadd2781
SHA256 a8f279c29af62f5daf99ec78513a9e05a439cde96753e35cd348de63238f2b0f
SHA512 b4c541644878c404d0e8dc3ba5a0917777f571d16b2c7a1aa1f4ae489d6449ffe10da8a204ab58b1291e4a297a4a1cea832bab74b263ecaab878566759a4d510

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\db\mbgc.db.rulesetoverride.3.0.2

MD5 54da31d12f21eb1b9157dc6558dad7fc
SHA1 3819b40aed0e4d85c03c8f2b599dab5a8b32a762
SHA256 f3d8d71ec91edc7a7e5bc5bb220dc889c8cf23aa3ab512f52a42f24db2362907
SHA512 4415f44ca35f0b9ab998c803fb24dfc3638fcbaefb65f80fdf6383de8fd584cec0ce92c1048494972e1f48f08c971e85a727b35b0b5f3c24c3b10b162c6c732f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\assets\images\light\no_items.svg

MD5 8780c0229fd120e5f8866524137542f5
SHA1 13e7d9f5cda40cfa1bd7b372346f066594cf9f1d
SHA256 c6a3b0fd7fa7b49e717737baef5bfc2e320768b94ec98d49d6be121c3b011055
SHA512 9512d941e14ca0b9ea3f7518787b5b5b27b6d03d37e65a82a7fb057fb118aec87ce8f4e155bc1a7b564d95c52fdffd52629fff3e3db4e69571b6694c4aee836a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\assets\images\dark\no-items.svg

MD5 647ee72468992a14e8681d23d7e28540
SHA1 d46eed64dcbcc625d83d2b6f8f2f2caf82f1fed9
SHA256 7b43c21f8e6e0c1208e8aa36b6702271686f8fdf7c82cc046857a35997b271b7
SHA512 a595487f3563c20ef43f62f25fd144a621357d83e298d1bf9c1854960b30f00de52a4cca863ed9ae91305916f22d5d47c8ac19afc0b0e144accb23b7a4678156

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\assets\images\dark\level_up_illustration.svg

MD5 a9e3771385f296e75ebcb2d007a6373b
SHA1 db8327c0ed04e15d682cef672a519e99d4182cc8
SHA256 900d8c36d1dbc29cb7d14c435a42d8e0763b98bbfcb7372a3031f90e992fc8f1
SHA512 bba6c401ded4ed75fe64d7d3a7dc24858a82936441c176c7cc4d1df4632bf18b89d15cdd89795634be9e5b218ecc77013b24225fe6afc172c27efc727d033e3d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\assets\images\light\level_up_illustration.svg

MD5 654530887587ea6c25496619b01c6d07
SHA1 3387fc1420016445a51dde530582a86bfd49adc6
SHA256 9d4425b5d11cf9476b72a37b836d23d6bf340bb4648fdc7fa0d443c6987a7b6d
SHA512 4ccadb00a920266eccfff6c63af10eb09259aeb26b1fac71bf246c70a20fad08eaacd4d751959ee6e474481cbe5915b56e68550fce8fe46e3a54e07d0a2185d5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\assets\images\light\learn_more_info_icon.svg

MD5 7fa6ff207c7ee40d20e8bcd8106fb3f7
SHA1 536e31442aec3b14845ba1ce6d3ba2d67a051421
SHA256 318f6d36200609a8f82e336c7c0eb5627a9e970c67a1d3c5e87690d26097d5a4
SHA512 787cd6555279de9b3edd73180e547a6ba4863a10a81d1de562e91ae9a40767c9b15198c9d21e05250d734e31ac22861ce00e0cf06de08a1d9f6c1631c23d3538

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\assets\images\light\cog_icon.svg

MD5 644fac82b826dfed1fe991fc34de5abc
SHA1 21b9b3cfd7a1e53ea9318d0ff30740e14d8d93a9
SHA256 9b1ae662ce0ee13b4cf195be75b1e1f7d1bc07140ee167d2c7e2d55007efb6d8
SHA512 72b8a9750602142f240f0a6620188f7b13c1f534bc17ee50ba9a9c39fa7fede67d63afb0ddf18f851db7fcd856e46ba7ab34e699c8f0eb0211cdf8991908d3b7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\assets\images\light\close_icon.svg

MD5 5773d0129091debf0a7f17aa001d9e26
SHA1 e2d75bcf624175150c1bc6fe224ca1f43f533697
SHA256 986ae7cd13eea34af51835d3883733dfcc13d6cb827da099ac7098e7642ec923
SHA512 ddb3c52ef1f97f423197fab6e53801f2fbdf49d36bb529f3a73a83d6019171bbc1495b4887069b516cd065a2f1a1d6aaea1a68cc19ca0e02249562111568aa77

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\assets\images\light\block_page_back_arrow.svg

MD5 40c3547cbcfd2b62e83c7d4569dc3e48
SHA1 dec17685ead5db29cdf70c02ad6b489280d0fe26
SHA256 bf995d63320762b2ab0d33b26348b1b6c0599cb6f9cfc3a3befd42bdcea32a0f
SHA512 a6409ab0b7d05dba3981e93d75f23fa9aff59ea8b38d0931f625b56e47fedb7743e8160bb8976c1f1c011f3efb63b24eb2c72e301a16b75f4cd25a545805d06a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\_locales\fr\messages.json

MD5 f8a5665be14d1a8b46216fc8ca0281b4
SHA1 9403cd9f2b2b35a4f688475abbe79935a062b8fd
SHA256 6e413e050657c9fdf51e2f8e1aadbf3c9d5dc8b3e8ab4ce88b85487be4f7c984
SHA512 921de232056cd4008db3b3db62a5abe4670e83d2a630d8d47023d4eeb96aec91691a48d483d9bd49357ab4462d1f38145bf2db9ddd3d78ab91ada66e249dda16

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\_locales\it\messages.json

MD5 4a922ebca7ff735a558a2aa2ec7a5d6c
SHA1 deb936d3c685338c98d6565241d62c6250d17f14
SHA256 3f8f7b5036cb35186b76ab53caee4064710881084d75f24d6b5df177c7dea5eb
SHA512 ead5c831111ff32d10f28fa68049e68c35952b91e24942768137a7f7771baabea0c8a7c861bbfb855d3f2d8eca422cd1e5feee8e6c949f1ee7d6600682fbd885

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\_locales\nl\messages.json

MD5 09db9efecdc268c775486f170dd7d8af
SHA1 15a53d75a8c5d4a9a0cc3e96a55da5db67f08e11
SHA256 7150ecb382816aac20deb3247944afec5d0f48c16fdfc85e5d348294a63b2cf8
SHA512 b2348eda0512964b5b5fea0ee4615fe8a0673711d04bc142d1dc9d19068a586be36193565d22c0bb693341d37728bebc12634f2e7b202d5f0e1aed6cb0c8a354

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\_locales\pl\messages.json

MD5 565e5fe156b25838034a550943103ad6
SHA1 b4c288f60ba83906ab7479a28bf16c84d96b7e79
SHA256 445d2cfa19707b2b73a44ae1e06dd1c96e22e711e5575c3d628af22da9759d98
SHA512 9ad807f3c7e17f0a5df1c286c28e1fea45aedf90a99240ef03718a3f67c9c46f01cc89e702592321cf09bc33c68dabaf9c092ee98673941b41372e9f58685171

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\_locales\pt_BR\messages.json

MD5 1f60d88c59621160c118d575cc8f1133
SHA1 67c8ce32dee2e29cd586fb6029bcafd9dd6fd354
SHA256 d3c8c7fccf8596682f3d5e4e7e25767cfb16501b8ef02e9150f9db5b59d2406f
SHA512 bf83cb00d5c3dd2be6826d36cbaea858beef7f41f8bb9d6f15f8610e8f681f4e26c12045e4fe3c20a6941da896bb484c2e380281356353827a81a19897a9fb30

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\_locales\ru\messages.json

MD5 80f4b197b58f0a461e451f5a24694599
SHA1 9e9afdb5433a457d9075cad8d019857b6bb6c4b3
SHA256 fc8e6a9d41d8e020e3d3a140d4982d017f21b0dc77ef373960ef2bd17891a959
SHA512 09b98f9b4708ca262384bfda7a76a50ee1476e0164fd7cbedac2863c5bb26e52ba3a19c41b72c88e173c6050848670542280961cecaeb8a544ae1e7bd86a2926

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.6.27_0\manifest.json

MD5 f9ed8ff3f7460119d26edacc828b618b
SHA1 66c7cca9fed8b4227ce9c320a91a30792191e358
SHA256 e3ef579b88118aeedaca9b931c1bcc928599d9a5f4b384aa0fed558fbb3ccf7c
SHA512 944de440471399263e560612597057d698caa59be879de7991befab2a61078bd3fbae6ce7c34eb623ccf19604ad5d96da0bd383eec6fde623e6426e4775ced6c

C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json

MD5 0eb944a6ace310512b6b9690aa3122cf
SHA1 68acf0160b342019dae21af702ecb1ace775fc18
SHA256 31f33dd8f94e8640788433fe90e42bb272164816a48c8e59c659fe886495544d
SHA512 a28c8474f32d722286ee3da7fbc266eaa1d191adb0463995243e4c192ee0036d8bfb03ae120bacae048a47e3cb4b766f8e3b83f2c4bad97c62ec6b333a2a1246

C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

MD5 6fcbdddc80f2f8d972c185448d92f9de
SHA1 8e30bcd8c5d18fbdfe3f30b287ba4d51fa220cfb
SHA256 0ec70427c5c47f8cb136a8882ef074e12ba1465da587d13a275ff7219e9b6116
SHA512 17202c808f9e5deda6c3600a77f0009a7571497735e74ac09db0e4efcc0c45e3f9544da3931f2fb7e6b80e8ecd100de4b833fcc68cdb59c9ad8aa4ccf867b27f

C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json

MD5 f42293235523cba04c72a34ab9df3ffe
SHA1 f2297927fdc574918e56265e931d39edbd921255
SHA256 5e30dbe7af7a0f60cefa409ff7d964d87a5c3b5a556895bf04c2f0e5770f1e70
SHA512 5de4fd770994b24bb34c18c65ad92fbec2e471a8cdc0add1fb6fe3131b8ccb40e0472a8acdaedf7a03f9381c8faf840d7bf3ab10059b5c028228ad48496bda61

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jhlyxaos.default-release\sessionstore-backups\recovery.jsonlz4

MD5 82aaf26c0a2c858f717cf123cd306d2e
SHA1 177bf77411a878c3c020b1082764d646e72caf5e
SHA256 e753b4aa24a285151002c6cab6ec9616a8274e625b4ed33bc6c7de50152ebea8
SHA512 586e89a064b37d4dc49d2c7d12d42ae97ab93bd65f57f8701e9fe8a458e1baf9dd5e019893f9541888fa2d9f4ee2222c0d234b8cad3a97889ce092986eaf778f

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Network\Network Persistent State

MD5 178bac73d5cbd16b8d4e757a79a72b23
SHA1 bde9c013654795bb2a10a964ee33f6a762c2e63a
SHA256 ff8415cfceb31788d33c76076441a232056910c10da87ed324cd38905f4cd436
SHA512 a95f9de6d672a62e00ca4437295566fb51dcb221225f434ecce95801b44d309f7d3b16af350f53d551b4c3b26f56e21102ad6665d99d08bdcd550fcdca935813

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\GrShaderCache\data_1

MD5 2ae4352b40830f0fa4005af32d780235
SHA1 a1588ecdec0ca3f0a5aace80ae8c045839c16622
SHA256 125cd4b97b5b893b60faf951c3745e7f160a7ab7c1a299a5fbc2c5b9e2fbd43c
SHA512 7dcfb2893d835e7769b2346d6a1428041b961fd3df2448e6d6d725fe371d85e6292bc6fc722f50ff4e986a339ca54865d070a946231e16a35c7c2b78260a7d4e

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Preferences

MD5 ca2285989b7eb0f746b14d8ea79c44cd
SHA1 1f82a8b954556fba55c919c2a1801e5dfd6f58ea
SHA256 488f73cac302ded35a3bebc216017bd3f4984e3dfc37f875aa0d63e7a4bfe670
SHA512 72e39973cca531f75e8bed20ac262c9990c4152ef9bcebd42da3a5a8d8c64bc4750cb8294e87352415a576ab8cdbe0272dfa7ad652534913af0e70f75acc5c17

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Local State

MD5 e17745fb1582afdb6f2f592c02efd45d
SHA1 19bb7d3cdea8300f12aaeba4bf58e66e8600efd3
SHA256 eb3c879394fa7709cd2c93e93e188c04c97bb9cc5b24d56c2a48a3f8048690a9
SHA512 81c105309e6d3dc6304b9c13ece266331aa68ee464c4e166a38f0b197f2ec5bba1b2ca65688a1c210bf758772cdf3ee642d85de672e1831bbe4edac179a0819e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

MD5 aaae36a9b1edffb9ac4f0514f5ae0662
SHA1 19ee880b0f3be6c9f87e3ac65553da6961173650
SHA256 744debf170297a563cb5976cd962767f1a88dfee2ab62237969a85852b195943
SHA512 32947ca3f92b5f682e9f6fb975046240344bc5aa84bf4f7553db14d297c8a6412090dd8decd5575fcac07802a49a435d918e2482110275bc07a3d2cf7c06f190

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4f1b61049834f9b7f1144ec73809335b
SHA1 c3981d40fd20df83f1e32bcb502b7a4fd2869a3c
SHA256 cb7f4dd9067c863d6ea6fcb0cf3466ae819fe0d9546030d947ccd6132c863249
SHA512 d2627da28af0f74005a4197196303cec29b16307b5ac529243ab7236a9383247f5f827b582fa2f512b917e230db7f07c4d0fa40440c73c9edb614a121b94d708

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Network\TransportSecurity

MD5 d0d08e8efd195e63acfd5d622e229419
SHA1 997c96e1c28f45bba95228944d63c147e585bc71
SHA256 d123f67ad8beed287e7886e301d0f149516ea2f79256586a4f75e154571bd74b
SHA512 69a55e177a05714d31360d2ddf649e0a1523078b05f630b1958cceba9e0b784111f5145b742491662c8840f8bc404dc4fa2e944e45869da72019d1be3d7b5e4d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 5ed710be2a1794f300b88b6364152578
SHA1 85c4cf904524eacf6cfb663bb1a3220291370021
SHA256 30011d06849a3856dbf1567dad8ed815e0ad38246cca06dbce59441e6d3fec4c
SHA512 6ca9a23b7fb40123abcf499a71ef83258a35fd6d6a0168e83f024173e02a7a0e715f8b7f3afc82a9b93f0d3f22898b1bbb055d4505d4452676e1621d726d6bdd

C:\Program Files\chrome_Unpacker_BeginUnzipping6256_112684627\manifest.fingerprint

MD5 c9d0db1bbb2fb9b7ac6c6c38cf591f7e
SHA1 471876df7b528e7a369f03e00cd64ba81a84253d
SHA256 33d11fe2cbff4e373e66bc3d270a250c3e5c7e9c7db144211edb79e9d0f0de14
SHA512 6b574e92f49b53560b841d8acda1bb5fe661f5f6d1313fb8e21ccd3faa7dad7eef68761506591f23f7b843985c3bd42fe69f99a0df8b4226286bd58d7aa29e0b

C:\Users\Admin\AppData\Local\Temp\mwbEDC1.tmp\vsifjbo4.newcfg

MD5 f57c884e497901bec5026918308cd1fc
SHA1 6225374854e52782bb6ebac84f9820677e96f270
SHA256 996f32ca3ddcb925c28547e0a43ed20505df95dc2441222639f2a9e463f86c9e
SHA512 8ae30432c450ebd95794faace0d38190e20976f029fd57f8addff35a3195028407949b157c436cb53962b4b8a86a66a49f62156b6283904eea7b31bf54caf991

C:\Users\Admin\AppData\Local\Temp\mwbEDC1.tmp\mb-support.exe.Config

MD5 8081140a0375dae6d1813a859f7dcf4b
SHA1 a03b615804423d47e9e2a6143db9092061a6c5c5
SHA256 947ba49caacbdfc935f5c933c39bb61337ab2a9918f14dba29e72670b753afe3
SHA512 04c1e0a995850b03044fa32ef60701383ff11cf64569caf512d450926f2105e8fad626d898299e05da6d49eea4ac921444502371eeaaff14b9635c066574842d

C:\Users\Admin\AppData\Local\Temp\mwbEDC1.tmp\mb-support.exe.Config

MD5 7e922500f1ebbe93e0a78ee9101b00d6
SHA1 599f56075d9a04907f1a4177e4a34250aeae2000
SHA256 69260ff57d4ee81d6b901933a6b0a1b247ef09e13ce65b6cce30672104bf6199
SHA512 ff65e06d908f363f7a600fb7c999ad12cfa22c8f2b7ea49242584db1731ba65f7ee3035150fb147784161b9c99c6db8f3c1363c62ddecee8f169c5573ba04d61

C:\ProgramData\Avast Software\Avast\log\szb.log

MD5 d41efe736751e3ff328ca52976ffd72d
SHA1 4b4776f3e8d58a738306559cfb919369118c6694
SHA256 ef6839b6e1f2586e86059b9ec1cb084b16535444887e0c96bd6a371fb359c71f
SHA512 ad6e8d5bf390333ce9b25ef5e048600b602dbad5eb423803fd23dff8cea8e899a12e058360c112657d3dedf6b74eade630ff34bf8b10a494dd96cdfe7125e43d

C:\Program Files\chrome_Unpacker_BeginUnzipping6256_548587562\manifest.json

MD5 4aaa0ed8099ecc1da778a9bc39393808
SHA1 0e4a733a5af337f101cfa6bea5ebc153380f7b05
SHA256 20b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d
SHA512 dfa942c35e1e5f62dd8840c97693cdbfd6d71a1fd2f42e26cb75b98bb6a1818395ecdf552d46f07dff1e9c74f1493a39e05b14e3409963eff1ada88897152879

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\TransportSecurity

MD5 9d66a82b8561bbfdf33dbc50996dd81a
SHA1 8688fe04e73a989bb4949941632ed3789a389e1d
SHA256 647376b83ee05e5208b2ef18d7be3137ae5455f914c4ba0bdf49e4de4b6ce7f1
SHA512 ffd7fafb101720fb51def21be721fa21ed228cd0aa5b37c99d7c5fbd66d60742457cb862575ff4e8b12c48b9f2acf8c50af47fcaf9ef1669e0f6aa4423c6eb78

C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

MD5 6b784c875c171e4df15d1f567c1ff67f
SHA1 a5b89bc22d0b2fc5767abc34cdb33cf3a5188925
SHA256 26d93f3dc15fdfdf7c5f7b3e092d754abcca4a7421b79e498474694b400a7a51
SHA512 103286c56a02fead923868ba5dd14465862072e19c4dbffc0ec980635ec9a5059f635d692e40dc0212c97f91ab8d4b977a2df54ef6b1f0608837b08fc9dc690f

C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json

MD5 b86160ce4bb821e1551428b7af0b9119
SHA1 64f2845b98caf9007349790c6fcf5c5b6cfca926
SHA256 ac2c324141ee8b80441bc5a076e6c01b4cf9af73813d4b0b6aa771fb507d58ae
SHA512 033b7f2756fddeaf25a4565967f4bbe77f8a3f04227a7f09b44dad6c869d453b81c19d8e6ce6b77ab0afde8bbb35802cf50333ce1a6f2238e390ea197309f5ce

C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

MD5 df681a48d3a83add31ccf8334a65a14c
SHA1 1658585aead0bee74df7017d801c74c88fd542d9
SHA256 178369162abf7b9d49063e6c1a09e5ddd72df44f2d51660807ea65ec021b9a6b
SHA512 7a3ab7593cad31ed7ba0acf6e1500de3d0ab93fcc4e7315562b4cc7ea0eb940ec99f32fa8715a152a7eab2ce67e9691113b63b68c56260173de320bd4b335ce8

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Network\TransportSecurity

MD5 9f70f155b0e11a67ee9d0d27604b5a88
SHA1 703670fb29bb5f7326e3ff83fec0e53f0b668cc4
SHA256 6b1d824d87913e70031faf5ed3675efca492b5279a1b717bc0a8e4c572e21305
SHA512 f175ddf2f33c2533cf6f3abcfcfbf03c58127505b14876b048762d5348497f7007eb0ffaeb4a93d667f9f412a7180e7c294d93091d7e8f38a4e4db95396264d3

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Cache\Cache_Data\f_000022

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Network\TransportSecurity

MD5 1900983900dbd287a1ba1fdc5bbf666b
SHA1 409f6d96857048c14ef757719d8380eb6be25a49
SHA256 14a98527c5989368a08020966b6a2f3d197385aa5f9a24d857407111c1728049
SHA512 da1dc6f8a33a58407ffc6771579c708a58f91f11c809e86b4c1755597b8542cf629ec705a8c9fc4da6af9ce85d9683e1df894268f5a2e1e99f22a48db0163f5c

C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\expapply64.dll

MD5 76a6c5124f8e0472dd9d78e5b554715b
SHA1 88ab77c04430441874354508fd79636bb94d8719
SHA256 d23706f8f1c3fa18e909fe028d612d56df7cd4f9ad0c3a2b521cb58e49f3925d
SHA512 35189cc2bf342e9c6e33fd036f19667398ac53c5583c9614db77fb54aadf9ac0d4b96a3e5f41ec7e8e7f3fe745ae71490bdcf0638d7410b12121e7a4312fae9e

C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\SdkDbUpdatrV5.dll

MD5 52c4aa7e428e86445b8e529ef93e8549
SHA1 72508ba29ff3becbbe9668e95efa8748ce69aa3f
SHA256 6050d13b465417dd38cc6e533f391781054d6d04533baed631c4ef4cea9c7f63
SHA512 f30c6902de6128afbaaed58b7d07e1a0a674f0650d02a1b98138892abcab0da36a08baa8ca0aba53f801f91323916e4076bda54d6c2dc44fdad8ab571b4575f7

C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

MD5 8bc686ffbd9e5dd7c7c10544e63e2635
SHA1 aaaf64351917a76ecb182860c81bb41f8b5f37b8
SHA256 c7764eab83d1e549d0bb7696be255d64a596d7851e8ff0970640bb37bc0ae19f
SHA512 83e873b8b7e03abfe154c8009734b1c68eaee707dca9dc02e86245948df18e279878a226895168bf0dae02d640dade2f4fbd831496d2c9aedfbbf407f45c52ac

C:\Windows\Temp\TmpDFC0.tmp

MD5 f32a21bb599377682a6ed7daf0230b2f
SHA1 82bf2720e64b24eaa63a009fc7592cc73c7cb823
SHA256 de9e116467266b0e7d0cd4fd318f41b841487a1fe125b437f211c801ac8cedfe
SHA512 54760cd4d0ee368b9729c48ee04c3655f8f61d8c9b1a2be74b5b6bbc3ffe6a71886dab023d1033e1d94f9ce8e499f326459590428ca29b6db0b75438f2d81fdc

C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE

MD5 5bfa51f3a417b98e7443eca90fc94703
SHA1 8c015d80b8a23f780bdd215dc842b0f5551f63bd
SHA256 bebe2853a3485d1c2e5c5be4249183e0ddaff9f87de71652371700a89d937128
SHA512 4cd03686254bb28754cbaa635ae1264723e2be80ce1dd0f78d1ab7aee72232f5b285f79e488e9c5c49ff343015bd07bb8433d6cee08ae3cea8c317303e3ac399

C:\Windows\Installer\e65e772.msi

MD5 a7071c094c7fb10e4814d62a06734b1f
SHA1 311783f9964452fe1fec970a91efc3dc1c589a86
SHA256 fe6aaee4419c077d7bb0230e78c830ba3999b7786b1c987bb0bbbd80f16554f0
SHA512 0813b03a41062912bff20af2521e5cf945218406f9b4c143c901b752d54d534263c774a4fc702b1638f5f4554ebf07be63e03b288a700740c924e67a7852f863

C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

MD5 8435be75ca408711abd940fd91f2b799
SHA1 c6384d0b64dabda215d6a41808eda70672b1ff49
SHA256 28051db9d4f4cc4cd79e09211eefcb7b6b2ea77f0f05d57bb654622086bf9ed2
SHA512 fc3cc7ae2b3fa9cfc41280a3ea6784fca81223194db5f70b99416ac80e56516777d9c5ceef86084f63e428a24b9df0d298fd528bfb9e30ef800c2723949c407c

C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

MD5 407a85d1f43e9daa1ee4953adb006654
SHA1 b50908a80aeb2bd6aad32441e48225689ff4bb7d
SHA256 9c12ec0e35edc00e93bf0a62b19c0fbeadb5db991dd7aea7aefbe94bac5d46b4
SHA512 c0fe82a66046a2bb1f508a44086eafc5362b3b6a152b69826f1e493436b6f7c51518d1befcc394b02c052173502835e1046832451b4ba2099d0a8a645e50c07d

C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

MD5 780f6a9725afad398becda70efb70feb
SHA1 df0f138c22ae64ed2cf0700926ce8ca70cade40f
SHA256 5146dcb4de31a980b33963dffcb907415ffc332c8455aa955cc9275b0cbf9f0d
SHA512 f03050d764bbc1d6df351c8449df91f36f375843c000caa5af0a95d9c6c763e6eb7fc2196e9a9a2849f02c37091f1a7245c4a5318af90b0674de89d664a668ee

C:\Users\Admin\AppData\Local\AVAST Software\Browser\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 443af658c7dbf3d28ce66e38097b19bf
SHA1 ab1f389bc22559019a82d0f68d7cc4e07cc7218b
SHA256 bf52160f3048b220b4ed050a79bcf0dcfb309dea568b63de8451f9c55de0733d
SHA512 2da6ec7c699d9db2e800ccee818006ca875c7fbd4695d30b1c06cda575831edf413925132cdd14eb993b49780cc120e6603062575f1fdc0f252694b963222455

C:\Program Files\chrome_Unpacker_BeginUnzipping6256_1417205575\manifest.json

MD5 5be67ca403afd6d1a47f0c56578bd8c2
SHA1 434f0f82a741dd869c20af9d87a7c8b74ee6a132
SHA256 0425063c480769e254f7b23b7d850db2f9ac5ebc130777f0878e48bbc5337052
SHA512 d008b88aba3f76a3165e31b137be6a2b29ee70831c393119d5c652abfb784d61c7229293f289c4112db593592d86b0a2ba4586bfee292154136a2447e9b2249a

C:\ProgramData\ReasonLabs\EPP\Errors.dat

MD5 37d6d91901f7672c1b3568d3e12014be
SHA1 dd87f366c0b1639e636865571f0669aea51685ee
SHA256 6b0d9a0edcb6cb30723b3d5bbafef2a74d187681b5fb9b500fde4248131d84a6
SHA512 e1ba592c28003d5ffdbe70dc5b665db01770d5f98edf2aa010bf3899fff32abd7ed4c93c12276ff2f0163c1c796cded9649754131e8d36f4c76821788ad2ab69

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 df3d38da02e01919fcac1a59f5f49549
SHA1 994392e5e5f3709d109b91f89c04a800f52d28c9
SHA256 e8a9249393258de12a3d569cccfec3e3a73fd1ab883fd38fb3d26e1d34292e06
SHA512 0a0e6f322230271532180718325b677a9c2f1714aff2298f5832d5d6020d0f7dcb7cdde9a43eead4e4811c7b3dda0914e9bddbfdfaa358723b44279b6cb68ef6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\a6bede35-90eb-4816-9556-596e5aaf14c3.dmp

MD5 ac5d39159283c862c8eb6bd3f10ab376
SHA1 d26f83a1d413787356e6d226eb75d34062525a59
SHA256 f3da2fdd51e75c8bfa73947b0284494fef1a9b377b952b61bb8d47bef5a83577
SHA512 7d8d9ea6ebc346fb77827ce9e30456ac1f3f330711b519171e4f4775158538875035628fc64740df0c585536e819d24586e75b0fc5389f3661eff35894773236

C:\Program Files\chrome_Unpacker_BeginUnzipping6256_1428175763\manifest.json

MD5 538700bd1289c6fbc3c27f4352bed310
SHA1 5ec322d1ca77e7dd6cefad362cda3c984b88f03e
SHA256 40cb33db9d11afaf9fb0c5db2f6f91bde9fd8856f469e6b798c0cfdea04cca9b
SHA512 3b17503cded36d38a4c3a94653fdba964091ff05044e2bde742084c4e1d623b1e5556bfc26ec8f75121107f2253d3fd2d9a12b869a07081ed58e43443a170d45

C:\Program Files\chrome_Unpacker_BeginUnzipping6256_1882351764\manifest.json

MD5 c222d99ced7896b6fbacf293ef54adc0
SHA1 fdc8dc8823b10c732114a3eadc4e02d542e7f990
SHA256 91a685c5fb8ad368cee83d9150fc52722df59fa3a86fa7b4c14140da6d390b8e
SHA512 088731fa049c646af1cc3582bc59ca7a5e89760ca397b515b36228a1d93a410c73001cb9eca91ce3a132e87e522ba6438ea46fc2bb9ef798bd5e9d6065ea5587

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 97d4dccd1302504db98e0b29af4a44c9
SHA1 8d31d6af58627756dde15cf862b536b8ab13a0da
SHA256 222cbc6f7409a3b4572ea689dcabe4ccd487867aee55b471d9838e575784bf23
SHA512 5f13b0d5912d431f63fe82487cf05bd093784d39f9e401ea32133cd1697c91486508ce8125be25775d51892097e6c1d8e08fd24648927d36e2eba28bd42ca05f

C:\Program Files\chrome_Unpacker_BeginUnzipping6256_1379070526\manifest.json

MD5 45ae39398658bc0b408db630b4d71b43
SHA1 b1e5e087aef21ce8f817c54effb747088c69a636
SHA256 d63873f328af7d00927a1a325a6f50321d14da1074384296e139f666f4b361aa
SHA512 b10178fc3183b188ac59bd8da7c69dc9c001d4abb9317112fd6d192e2434b196f0b6e20d97f1b5f174613e4e23ae9ec6a35a52f910a57caf518f3939ec9fe727