Malware Analysis Report

2024-11-16 12:57

Sample ID 240809-td7jqsselk
Target LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe
SHA256 8d48d0a05d581922a4d30ba98cbf51ea981a37c95fad689e0b84b979e312f6a4
Tags
bootkit discovery execution exploit persistence privilege_escalation spyware stealer
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

8d48d0a05d581922a4d30ba98cbf51ea981a37c95fad689e0b84b979e312f6a4

Threat Level: Likely malicious

The file LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe was found to be: Likely malicious.

Malicious Activity Summary

bootkit discovery execution exploit persistence privilege_escalation spyware stealer

Creates new service(s)

Possible privilege escalation attempt

Reads user/profile data of web browsers

Modifies file permissions

Event Triggered Execution: Image File Execution Options Injection

Writes to the Master Boot Record (MBR)

Checks for any installed AV software in registry

Downloads MZ/PE file

Event Triggered Execution: Component Object Model Hijacking

Checks computer location settings

Checks installed software on the system

Loads dropped DLL

Drops file in Program Files directory

Launches sc.exe

Executes dropped EXE

Embeds OpenSSL

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Browser Information Discovery

System Network Configuration Discovery: Internet Connection Discovery

Suspicious use of FindShellTrayWindow

Modifies registry class

Suspicious use of SendNotifyMessage

Kills process with taskkill

Modifies data under HKEY_USERS

Runs net.exe

Suspicious behavior: EnumeratesProcesses

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Modifies system certificate store

Modifies Internet Explorer settings

Checks processor information in registry

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-09 15:57

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-09 15:57

Reported

2024-08-09 16:03

Platform

win7-20240704-en

Max time kernel

191s

Max time network

336s

Command Line

"C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe"

Signatures

Creates new service(s)

persistence execution

Possible privilege escalation attempt

exploit
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A

Reads user/profile data of web browsers

spyware stealer

Checks for any installed AV software in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Avira\Browser C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Key opened \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\SOFTWARE\AVAST Software\Avast C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Windows\Temp\asw.a4926e31f59569ff\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\AVAST Software\Avast C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\AVG\AV C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\AVG\AV C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avira\Browser C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Browser C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\AVAST Software\Avast C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe N/A
Key opened \REGISTRY\MACHINE\Software\Avira\Antivirus C:\Windows\Temp\asw.a4926e31f59569ff\instup.exe N/A

Downloads MZ/PE file

Event Triggered Execution: Image File Execution Options Injection

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVGBrowserUpdate.exe C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVGBrowserUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.a4926e31f59569ff\instup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_antivirus_free_setup.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Checks installed software on the system

discovery

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_kn.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_vi.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_da.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_en-GB.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_iw.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_ur.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_zh-CN.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_am.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_bg.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_mr.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_tr.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_kn.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_bn.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdateComRegisterShell64.exe C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdateCore.exe C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_ms.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_th.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdateSetup.exe C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_pl.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_el.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_lt.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_mr.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_gu.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_lv.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_ml.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_et.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_fi.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_nl.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_id.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_th.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_vi.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_ar.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_fil.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_hi.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateHelper.msi C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateBroker.exe C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\@PaxHeader C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\acuapi_64.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_sr.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_en.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_ms.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_ro.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_te.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserCrashHandler.exe C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_nl.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_ro.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_es-419.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_fa.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_zh-TW.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_cs.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_da.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdate.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\psmachine_64.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_el.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\psuser.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_hr.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_is.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_ru.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdateWebPlugin.exe C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\psmachine.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\GUMB50D.tmp\goopdateres_sv.dll C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdate.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserCrashHandler.exe C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
File created C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\goopdateres_es.dll C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A

Launches sc.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_antivirus_free_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_antivirus_free_setup.exe N/A
N/A N/A C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.a4926e31f59569ff\instup.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A

Browser Information Discovery

discovery

Embeds OpenSSL

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\taskkill.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\taskkill.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\taskkill.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\taskkill.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_antivirus_free_setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\Temp\asw.a4926e31f59569ff\instup.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\Temp\asw.a4926e31f59569ff\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Windows\Temp\asw.a4926e31f59569ff\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\Temp\asw.a4926e31f59569ff\instup.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\Temp\asw.a4926e31f59569ff\instup.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\PageSetup C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Toolbar C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 105b80fb74eada01 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28E08968-59C8-4A77-BEBA-12C9394AE077}\AppName = "AVGBrowserUpdateBroker.exe" C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\GPU C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000000000001000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28E08968-59C8-4A77-BEBA-12C9394AE077}\AppPath = "C:\\Program Files (x86)\\AVG\\Browser\\Update\\1.8.1693.6" C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\MINIE C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{513C6D01-E4A3-4F34-9BD9-3D83C35A3498}\Policy = "3" C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{232D0051-5668-11EF-A74E-76B5B9884319} = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\SearchScopes C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\IntelliForms C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\InternetRegistry C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\DomainSuggestion C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "429380950" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{513C6D01-E4A3-4F34-9BD9-3D83C35A3498} C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{513C6D01-E4A3-4F34-9BD9-3D83C35A3498}\AppName = "AVGBrowserUpdateWebPlugin.exe" C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\MINIE\TabBandWidth = "500" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{513C6D01-E4A3-4F34-9BD9-3D83C35A3498}\AppPath = "C:\\Program Files (x86)\\AVG\\Browser\\Update\\1.8.1693.6" C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28E08968-59C8-4A77-BEBA-12C9394AE077} C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28E08968-59C8-4A77-BEBA-12C9394AE077}\Policy = "3" C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\IETld\LowMic C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Zoom C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bb7c5835718279428690b074aa627b7000000000020000000000106600000001000020000000bac3c7b964d2ea86225cbca62d11d1a5ecdb66dcb0825be8be29eb2f9b13b8c6000000000e8000000002000020000000576382df6b0ef9465f71a0416ce089bf0979af47d9daae2ba7300fae0384273a20000000368c5b1380106f67552de8f0cbd2b2c9b569a8e346f551ae77afbb2728dddbeb4000000079ea13be1ef894e98192a53800d7839067304c2a2b0fa18a8601a91958243510a181c0ceb60661d01b3bd48ff2a941c86a3934b888978cc94982debcabd2c581 C:\Program Files\Internet Explorer\iexplore.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\AVG\Browser\Update\ C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\SOFTWARE\AVG\Browser\Update\devmode = "0" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\AVG\Browser\Update\ C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\AVG\Browser C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\AVG\Browser\Update C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\AVG\Browser\Update\endpoint = "update.avgbrowser.com" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\AVG\Browser\Update\hostprefix C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2D\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\AVG\Browser\Update\MachineId = "00009bb098663592a3a6086bcc2909e7" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\AVG\Browser\Update\MachineIdDate = "20240809" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\AVG C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AVGUpdate.MiscUtils.1.0\ = "Google Update Misc Utils Class" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BAAD654E-4B50-4C9F-A261-CF29CF884478}\Elevation C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{30612A81-C10F-498E-9163-C2B2A3F81A14}\AppID = "{30612A81-C10F-498E-9163-C2B2A3F81A14}" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{41A025DF-6171-460F-B9A1-29ECE33E754E}\ProxyStubClsid32\ = "{2E7A212B-A33C-45D6-9EFD-2AB58EFAACF0}" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{B02B2F29-8637-4B78-892A-CFD7CCE793EC}\NumMethods C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C8159E37-5EDF-4E6D-8E6D-E558E8DDC2A0}\NumMethods\ = "5" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7BA03866-1403-40EA-81A9-23FCD97810E2}\ProxyStubClsid32 C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{3E21E991-301D-47FD-AB7A-99FBE864EF65}\ProxyStubClsid32\ = "{2E7A212B-A33C-45D6-9EFD-2AB58EFAACF0}" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2DAE1732-F855-42A3-9D28-B7F6E291ECCD}\ProxyStubClsid32 C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2DAE1732-F855-42A3-9D28-B7F6E291ECCD}\NumMethods C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BEBC1D02-EC16-479A-83F6-AA4247CA7F70}\VersionIndependentProgID\ = "AVGUpdate.Update3WebMachine" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{41A025DF-6171-460F-B9A1-29ECE33E754E} C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AVGUpdate.ProcessLauncher\CLSID C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{AB785069-B832-4423-B813-47F7422BA6E5}\NumMethods C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C8159E37-5EDF-4E6D-8E6D-E558E8DDC2A0}\ProxyStubClsid32 C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C9E6B2FC-34C6-435F-BC66-1EA330DB1270}\NumMethods C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BAAD654E-4B50-4C9F-A261-CF29CF884478}\ProgID C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C0BE1521-7935-42E6-B606-058A559910BA}\ProxyStubClsid32\ = "{2E7A212B-A33C-45D6-9EFD-2AB58EFAACF0}" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{B02B2F29-8637-4B78-892A-CFD7CCE793EC}\NumMethods\ = "4" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A708F91-06A3-409E-83BC-4A5CF10C8025} C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C7B73E65-20BA-407F-8A89-DF649EF82559}\ = "ICurrentState" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8C50E3A4-12A8-41FB-9941-E8EEB222E07E}\ProxyStubClsid32\ = "{2E7A212B-A33C-45D6-9EFD-2AB58EFAACF0}" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{804EC8ED-BF49-41ED-BCD0-CA1D716D3E98}\ProxyStubClsid32 C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{45F7CBA5-258D-4852-AD0A-B18F3FB214F4}\ProxyStubClsid32 C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5CCD3788-C8CC-4EE9-8DF7-944B7D9674F2}\NumMethods\ = "10" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{925547A3-663F-4673-A7B7-3FCACCDC4879}\ = "IAppCommand" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C9E6B2FC-34C6-435F-BC66-1EA330DB1270}\NumMethods\ = "13" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2DAE1732-F855-42A3-9D28-B7F6E291ECCD}\ProxyStubClsid32 C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0929891C-854C-4BFF-AE54-7EE10636719D}\InprocServer32\ = "C:\\Program Files (x86)\\AVG\\Browser\\Update\\1.8.1693.6\\psmachine_64.dll" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C32E10AE-6600-4A1E-8BEA-EF89A3072F93}\ProxyStubClsid32\ = "{2E7A212B-A33C-45D6-9EFD-2AB58EFAACF0}" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2DAE1732-F855-42A3-9D28-B7F6E291ECCD}\ = "IAppCommand2" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{804EC8ED-BF49-41ED-BCD0-CA1D716D3E98}\NumMethods C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AVGUpdate.Update3COMClassService\ = "Update3COMClass" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{41A025DF-6171-460F-B9A1-29ECE33E754E}\ProxyStubClsid32\ = "{2E7A212B-A33C-45D6-9EFD-2AB58EFAACF0}" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{384098DD-AB6D-412E-B819-2F10032D9767}\AppID = "{30612A81-C10F-498E-9163-C2B2A3F81A14}" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2DAE1732-F855-42A3-9D28-B7F6E291ECCD}\NumMethods\ = "12" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C32E10AE-6600-4A1E-8BEA-EF89A3072F93}\NumMethods C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AVGUpdate.CoreClass C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DD8E03F-6BE1-41E2-B931-A37C7D1C0317}\NumMethods\ = "4" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{B02B2F29-8637-4B78-892A-CFD7CCE793EC}\ProxyStubClsid32\ = "{2E7A212B-A33C-45D6-9EFD-2AB58EFAACF0}" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E21E991-301D-47FD-AB7A-99FBE864EF65}\NumMethods\ = "41" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB785069-B832-4423-B813-47F7422BA6E5}\NumMethods C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AVGUpdate.Update3WebMachine.1.0\ = "Google Update Broker Class Factory" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5CCD3788-C8CC-4EE9-8DF7-944B7D9674F2}\ProxyStubClsid32\ = "{2E7A212B-A33C-45D6-9EFD-2AB58EFAACF0}" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5CCD3788-C8CC-4EE9-8DF7-944B7D9674F2}\ = "IAppVersion" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AVGUpdate.Update3WebMachine.1.0\CLSID\ = "{BEBC1D02-EC16-479A-83F6-AA4247CA7F70}" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AVGUpdate.CoCreateAsync.1.0\CLSID\ = "{B80EC6B9-55FF-4E4F-B4E8-9BD098DBBAA5}" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AVGUpdate.MiscUtils\CLSID\ = "{7E22D0ED-B403-44D2-BABF-4DDD0DFCA692}" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AVGUpdate.CredentialDialogMachine\CLSID\ = "{40C1C1D3-AAEA-46EE-AA2B-79A2CC62F257}" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6972DB5C-E9D6-4A81-B352-B415A3A61CA6}\NumMethods\ = "24" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AVGUpdate.CoCreateAsync\CLSID\ = "{B80EC6B9-55FF-4E4F-B4E8-9BD098DBBAA5}" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\AVGBrowserUpdate.exe\AppID = "{30612A81-C10F-498E-9163-C2B2A3F81A14}" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{384098DD-AB6D-412E-B819-2F10032D9767}\ProgID C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BEBC1D02-EC16-479A-83F6-AA4247CA7F70}\Elevation\IconReference = "@C:\\Program Files (x86)\\AVG\\Browser\\Update\\1.8.1693.6\\goopdate.dll,-1004" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A42B2494-93AE-44E1-B76D-BA8509A5167D}\LocalizedString = "@C:\\Program Files (x86)\\AVG\\Browser\\Update\\1.8.1693.6\\goopdate.dll,-3000" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2DAE1732-F855-42A3-9D28-B7F6E291ECCD}\NumMethods\ = "12" C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB785069-B832-4423-B813-47F7422BA6E5} C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{2E7A212B-A33C-45D6-9EFD-2AB58EFAACF0}\InProcServer32 C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{59577BB5-F97B-4880-B785-510238C5C5CE}\NumMethods C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C32E10AE-6600-4A1E-8BEA-EF89A3072F93} C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AVGUpdate.CoCreateAsync.1.0\ = "CoCreateAsync" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{3E21E991-301D-47FD-AB7A-99FBE864EF65}\ = "IApp" C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0929891C-854C-4BFF-AE54-7EE10636719D}\InprocServer32 C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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 C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43 C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436 C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 04000000010000001000000079e4a9840d7d3a96d7c04fe2434c892e0f0000000100000014000000b34ddd372ed92e8f2abfbb9e20a9d31f204f194b090000000100000034000000303206082b0601050507030106082b0601050507030206082b0601050507030406082b0601050507030306082b0601050507030814000000010000001400000003de503556d14cbb66f0a3e21b1bc397b23dd1550b00000001000000120000004400690067006900430065007200740000001d000000010000001000000059779e39e21a2e3dfced6857ed5c5fd9030000000100000014000000a8985d3a65e5e5c4b2d7d66d40c6dd2fb19c54361900000001000000100000000f3a0527d242de2dc98e5cfcb1e991ee2000000001000000b3030000308203af30820297a0030201020210083be056904246b1a1756ac95991c74a300d06092a864886f70d01010505003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a3061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100e23be11172dea8a4d3a357aa50a28f0b7790c9a2a5ee12ce965b010920cc0193a74e30b753f743c46900579de28d22dd870640008109cece1b83bfdfcd3b7146e2d666c705b37627168f7b9e1e957deeb748a308dad6af7a0c3906657f4a5d1fbc17f8abbeee28d7747f7a78995985686e5c23324bbf4ec0e85a6de370bf7710bffc01f685d9a844105832a97518d5d1a2be47e2276af49a33f84908608bd45fb43a84bfa1aa4a4c7d3ecf4f5f6c765ea04b37919edc22e66dce141a8e6acbfecdb3146417c75b299e32bff2eefad30b42d4abb74132da0cd4eff881d5bb8d583fb51be84928a270da3104ddf7b216f24c0a4e07a8ed4a3d5eb57fa390c3af270203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e0416041403de503556d14cbb66f0a3e21b1bc397b23dd155301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300d06092a864886f70d01010505000382010100cb9c37aa4813120afadd449c4f52b0f4dfae04f5797908a32418fc4b2b84c02db9d5c7fef4c11f58cbb86d9c7a74e79829ab11b5e370a0a1cd4c8899938c9170e2ab0f1cbe93a9ff63d5e40760d3a3bf9d5b09f1d58ee353f48e63fa3fa7dbb466df6266d6d16e418df22db5ea774a9f9d58e22b59c04023ed2d2882453e7954922698e08048a837eff0d6796016deace80ecd6eac4417382f49dae1453e2ab93653cf3a5006f72ee8c457496c612118d504ad783c2c3a806ba7ebaf1514e9d889c1b9386ce2916c8aff64b977255730c01b24a3e1dce9df477cb5b424080530ec2dbd0bbf45bf50b9a9f3eb980112adc888c698345f8d0a3cc6e9d595956dde C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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 C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6 C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 040000000100000010000000324a4bbbc863699bbe749ac6dd1d4624030000000100000014000000ad7e1c28b064ef8f6003402014c3d0e3370eb58a1d000000010000001000000090c4f4233b006b7bfaa6adcd8f577d77140000000100000014000000bf5fb7d1cedd1f86f45b55acdcd710c20ea988e709000000010000002a000000302806082b0601050507030106082b0601050507030206082b0601050507030406082b0601050507030353000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c00b000000010000005400000053007400610072006600690065006c006400200043006c00610073007300200032002000430065007200740069006600690063006100740069006f006e00200041007500740068006f00720069007400790000000f00000001000000140000000f6aad4c3fe04619cdc8b2bd655aa1a26042e6502000000001000000130400003082040f308202f7a003020102020100300d06092a864886f70d01010505003068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3034303632393137333931365a170d3334303632393137333931365a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f7269747930820120300d06092a864886f70d01010105000382010d00308201080282010100b732c8fee971a60485ad0c1164dfce4defc80318873fa1abfb3ca69ff0c3a1dad4d86e2b5390fb24a43e84f09ee85fece52744f528a63f7bdee02af0c8af532f9eca0501931e8f661c39a74dfa5ab673042566eb777fe759c64a99251454eb26c7f37f19d530708fafb0462affadeb29edd79faa0487a3d4f989a5345fdb43918236d9663cb1b8b982fd9c3a3e10c83bef0665667a9b19183dff71513c302e5fbe3d7773b25d066cc323569a2b8526921ca702b3e43f0daf087982b8363dea9cd335b3bc69caf5cc9de8fd648d1780336e5e4a5d99c91e87b49d1ac0d56e1335235edf9b5f3defd6f776c2ea3ebb780d1c42676b04d8f8d6da6f8bf244a001ab020103a381c53081c2301d0603551d0e04160414bf5fb7d1cedd1f86f45b55acdcd710c20ea988e73081920603551d2304818a3081878014bf5fb7d1cedd1f86f45b55acdcd710c20ea988e7a16ca46a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479820100300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100059d3f889dd1c91a55a1ac69f3f359da9b01871a4f57a9a179092adbf72fb21eccc75e6ad88387a197ef49353e7706415862bf8e58b80a673fecb3dd21661fc954fa72cc3d4c40d881af779e837abba2c7f534178ed91140f4fc2c2a4d157fa7625d2e25d3000b201a1d68f917b8f4bd8bed2859dd4d168b1783c8b265c72d7aa5aabc53866ddd57a4caf820410b68f0f4fb74be565d7a79f5f91d85e32d95bef5719043cc8d1f9a000a8729e95522580023eae31243295b4708dd8c416a6506a8e521aa41b4952195b97dd134ab13d6adbcdce23d39cdbd3e7570a1185903c922b48f9cd55e2ad7a5b6d40a6df8b74011469a1f790e62bf0f97ece02f1f1794 C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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 C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 0f00000001000000140000000f6aad4c3fe04619cdc8b2bd655aa1a26042e6500b000000010000005400000053007400610072006600690065006c006400200043006c00610073007300200032002000430065007200740069006600690063006100740069006f006e00200041007500740068006f007200690074007900000053000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c009000000010000002a000000302806082b0601050507030106082b0601050507030206082b0601050507030406082b06010505070303140000000100000014000000bf5fb7d1cedd1f86f45b55acdcd710c20ea988e71d000000010000001000000090c4f4233b006b7bfaa6adcd8f577d77030000000100000014000000ad7e1c28b064ef8f6003402014c3d0e3370eb58a2000000001000000130400003082040f308202f7a003020102020100300d06092a864886f70d01010505003068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3034303632393137333931365a170d3334303632393137333931365a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f7269747930820120300d06092a864886f70d01010105000382010d00308201080282010100b732c8fee971a60485ad0c1164dfce4defc80318873fa1abfb3ca69ff0c3a1dad4d86e2b5390fb24a43e84f09ee85fece52744f528a63f7bdee02af0c8af532f9eca0501931e8f661c39a74dfa5ab673042566eb777fe759c64a99251454eb26c7f37f19d530708fafb0462affadeb29edd79faa0487a3d4f989a5345fdb43918236d9663cb1b8b982fd9c3a3e10c83bef0665667a9b19183dff71513c302e5fbe3d7773b25d066cc323569a2b8526921ca702b3e43f0daf087982b8363dea9cd335b3bc69caf5cc9de8fd648d1780336e5e4a5d99c91e87b49d1ac0d56e1335235edf9b5f3defd6f776c2ea3ebb780d1c42676b04d8f8d6da6f8bf244a001ab020103a381c53081c2301d0603551d0e04160414bf5fb7d1cedd1f86f45b55acdcd710c20ea988e73081920603551d2304818a3081878014bf5fb7d1cedd1f86f45b55acdcd710c20ea988e7a16ca46a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479820100300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100059d3f889dd1c91a55a1ac69f3f359da9b01871a4f57a9a179092adbf72fb21eccc75e6ad88387a197ef49353e7706415862bf8e58b80a673fecb3dd21661fc954fa72cc3d4c40d881af779e837abba2c7f534178ed91140f4fc2c2a4d157fa7625d2e25d3000b201a1d68f917b8f4bd8bed2859dd4d168b1783c8b265c72d7aa5aabc53866ddd57a4caf820410b68f0f4fb74be565d7a79f5f91d85e32d95bef5719043cc8d1f9a000a8729e95522580023eae31243295b4708dd8c416a6506a8e521aa41b4952195b97dd134ab13d6adbcdce23d39cdbd3e7570a1185903c922b48f9cd55e2ad7a5b6d40a6df8b74011469a1f790e62bf0f97ece02f1f1794 C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 190000000100000010000000fd960962ac6938e0d4b0769aa1a64e260f00000001000000140000000f6aad4c3fe04619cdc8b2bd655aa1a26042e6500b000000010000005400000053007400610072006600690065006c006400200043006c00610073007300200032002000430065007200740069006600690063006100740069006f006e00200041007500740068006f007200690074007900000053000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c009000000010000002a000000302806082b0601050507030106082b0601050507030206082b0601050507030406082b06010505070303140000000100000014000000bf5fb7d1cedd1f86f45b55acdcd710c20ea988e71d000000010000001000000090c4f4233b006b7bfaa6adcd8f577d77030000000100000014000000ad7e1c28b064ef8f6003402014c3d0e3370eb58a040000000100000010000000324a4bbbc863699bbe749ac6dd1d46242000000001000000130400003082040f308202f7a003020102020100300d06092a864886f70d01010505003068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3034303632393137333931365a170d3334303632393137333931365a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f7269747930820120300d06092a864886f70d01010105000382010d00308201080282010100b732c8fee971a60485ad0c1164dfce4defc80318873fa1abfb3ca69ff0c3a1dad4d86e2b5390fb24a43e84f09ee85fece52744f528a63f7bdee02af0c8af532f9eca0501931e8f661c39a74dfa5ab673042566eb777fe759c64a99251454eb26c7f37f19d530708fafb0462affadeb29edd79faa0487a3d4f989a5345fdb43918236d9663cb1b8b982fd9c3a3e10c83bef0665667a9b19183dff71513c302e5fbe3d7773b25d066cc323569a2b8526921ca702b3e43f0daf087982b8363dea9cd335b3bc69caf5cc9de8fd648d1780336e5e4a5d99c91e87b49d1ac0d56e1335235edf9b5f3defd6f776c2ea3ebb780d1c42676b04d8f8d6da6f8bf244a001ab020103a381c53081c2301d0603551d0e04160414bf5fb7d1cedd1f86f45b55acdcd710c20ea988e73081920603551d2304818a3081878014bf5fb7d1cedd1f86f45b55acdcd710c20ea988e7a16ca46a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479820100300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100059d3f889dd1c91a55a1ac69f3f359da9b01871a4f57a9a179092adbf72fb21eccc75e6ad88387a197ef49353e7706415862bf8e58b80a673fecb3dd21661fc954fa72cc3d4c40d881af779e837abba2c7f534178ed91140f4fc2c2a4d157fa7625d2e25d3000b201a1d68f917b8f4bd8bed2859dd4d168b1783c8b265c72d7aa5aabc53866ddd57a4caf820410b68f0f4fb74be565d7a79f5f91d85e32d95bef5719043cc8d1f9a000a8729e95522580023eae31243295b4708dd8c416a6506a8e521aa41b4952195b97dd134ab13d6adbcdce23d39cdbd3e7570a1185903c922b48f9cd55e2ad7a5b6d40a6df8b74011469a1f790e62bf0f97ece02f1f1794 C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 190000000100000010000000749966cecc95c1874194ca7203f9b6200300000001000000140000000563b8630d62d75abbc8ab1e4bdfb5a899b24d431d00000001000000100000004f5f106930398d09107b40c3c7ca8f1c0b000000010000001200000044006900670069004300650072007400000014000000010000001400000045eba2aff492cb82312d518ba7a7219df36dc80f090000000100000034000000303206082b0601050507030106082b0601050507030206082b0601050507030406082b0601050507030306082b060105050703080f00000001000000140000006dca5bd00dcf1c0f327059d374b29ca6e3c50aa62000000001000000bb030000308203b73082029fa00302010202100ce7e0e517d846fe8fe560fc1bf03039300d06092a864886f70d01010505003065310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312430220603550403131b4469676943657274204173737572656420494420526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a3065310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312430220603550403131b4469676943657274204173737572656420494420526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100ad0e15cee443805cb187f3b760f97112a5aedc269488aaf4cef520392858600cf880daa9159532613cb5b128848a8adc9f0a0c83177a8f90ac8ae779535c31842af60f98323676ccdedd3ca8a2ef6afb21f25261df9f20d71fe2b1d9fe1864d2125b5ff9581835bc47cda136f96b7fd4b0383ec11bc38c33d9d82f18fe280fb3a783d6c36e44c061359616fe599c8b766dd7f1a24b0d2bff0b72da9e60d08e9035c678558720a1cfe56d0ac8497c3198336c22e987d0325aa2ba138211ed39179d993a72a1e6faa4d9d5173175ae857d22ae3f014686f62879c8b1dae45717c47e1c0eb0b492a656b3bdb297edaaa7f0b7c5a83f9516d0ffa196eb085f18774f0203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e0416041445eba2aff492cb82312d518ba7a7219df36dc80f301f0603551d2304183016801445eba2aff492cb82312d518ba7a7219df36dc80f300d06092a864886f70d01010505000382010100a20ebcdfe2edf0e372737a6494bff77266d832e4427562ae87ebf2d5d9de56b39fccce1428b90d97605c124c58e4d33d834945589735691aa847ea56c679ab12d8678184df7f093c94e6b8262c20bd3db32889f75fff22e297841fe965ef87e0dfc16749b35debb2092aeb26ed78be7d3f2bf3b726356d5f8901b6495b9f01059bab3d25c1ccb67fc2f16f86c6fa6468eb812d94eb42b7fa8c1edd62f1be5067b76cbdf3f11f6b0c3607167f377ca95b6d7af112466083d72704be4bce97bec3672a6811df80e70c3366bf130d146ef37f1f63101efa8d1b256d6c8fa5b76101b1d2a326a110719dade2c3f9c39951b72b0708ce2ee650b2a7fa0a452fa2f0f2 C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A

Runs net.exe

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe N/A
N/A N/A C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe N/A
N/A N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Token: SeDebugPrivilege N/A C:\LDPlayer\LDPlayer9\LDPlayer.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Windows\system32\SndVol.exe N/A
N/A N/A C:\Windows\system32\SndVol.exe N/A
N/A N/A C:\Windows\system32\SndVol.exe N/A
N/A N/A C:\Windows\system32\SndVol.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2992 wrote to memory of 2056 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2992 wrote to memory of 2056 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2992 wrote to memory of 2056 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2992 wrote to memory of 2056 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2056 wrote to memory of 2424 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2056 wrote to memory of 2424 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2056 wrote to memory of 2424 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2056 wrote to memory of 2424 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2992 wrote to memory of 3052 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 3052 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 3052 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 3052 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 1552 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 1552 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 1552 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 1552 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 1640 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 1640 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 1640 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 1640 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 436 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 436 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 436 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 436 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\Windows\SysWOW64\taskkill.exe
PID 2992 wrote to memory of 2804 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\LDPlayer\LDPlayer9\LDPlayer.exe
PID 2992 wrote to memory of 2804 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\LDPlayer\LDPlayer9\LDPlayer.exe
PID 2992 wrote to memory of 2804 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\LDPlayer\LDPlayer9\LDPlayer.exe
PID 2992 wrote to memory of 2804 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe C:\LDPlayer\LDPlayer9\LDPlayer.exe
PID 2892 wrote to memory of 1412 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe
PID 2892 wrote to memory of 1412 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe
PID 2892 wrote to memory of 1412 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe
PID 2892 wrote to memory of 1412 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe
PID 2892 wrote to memory of 1412 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe
PID 2892 wrote to memory of 1412 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe
PID 2892 wrote to memory of 1412 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe
PID 1412 wrote to memory of 2400 N/A C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe
PID 1412 wrote to memory of 2400 N/A C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe
PID 1412 wrote to memory of 2400 N/A C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe
PID 1412 wrote to memory of 2400 N/A C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe
PID 1412 wrote to memory of 2400 N/A C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe
PID 1412 wrote to memory of 2400 N/A C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe
PID 1412 wrote to memory of 2400 N/A C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe
PID 2400 wrote to memory of 3036 N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe
PID 2400 wrote to memory of 3036 N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe
PID 2400 wrote to memory of 3036 N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe
PID 2400 wrote to memory of 3036 N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe
PID 2400 wrote to memory of 3036 N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe
PID 2400 wrote to memory of 3036 N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe
PID 2400 wrote to memory of 3036 N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe
PID 2148 wrote to memory of 2668 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_antivirus_free_setup.exe C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe
PID 2148 wrote to memory of 2668 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_antivirus_free_setup.exe C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe
PID 2148 wrote to memory of 2668 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_antivirus_free_setup.exe C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe
PID 2148 wrote to memory of 2668 N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_antivirus_free_setup.exe C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe
PID 2400 wrote to memory of 900 N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe
PID 2400 wrote to memory of 900 N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe
PID 2400 wrote to memory of 900 N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe
PID 2400 wrote to memory of 900 N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe
PID 2400 wrote to memory of 900 N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe
PID 2400 wrote to memory of 900 N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe
PID 2400 wrote to memory of 900 N/A C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe
PID 900 wrote to memory of 3012 N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe
PID 900 wrote to memory of 3012 N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe
PID 900 wrote to memory of 3012 N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe
PID 900 wrote to memory of 3012 N/A C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe

Processes

C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe

"C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe" https://www.facebook.com/ldplayer

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2056 CREDAT:275457 /prefetch:2

C:\Windows\system32\SndVol.exe

SndVol.exe -f 45286554 401

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x498

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM dnplayer.exe /T

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM dnmultiplayer.exe /T

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM dnmultiplayerex.exe /T

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM bugreport.exe /T

C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_antivirus_free_setup.exe

"C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_antivirus_free_setup.exe" /silent /ws /psh:M75AarNFjDThIreqoDY7OdCVpC5UOyh8q4oJbsQsuW4pNg0KbZZH9qxETBatojixxOwHJyvvIbXG0wEBZ0FHJas

C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe

"C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe" /s /run_source=avg_ads_is_control /is_pixel_psh=3cFh3l8N4B6Ih9uryZL2gfmgJ3LiqAJUN8Zeia93PBdhz1K06lkx9AD2oSQXFIsSdO8ldhdfsnL2MI9m32cjiqSmo /make-default

C:\LDPlayer\LDPlayer9\LDPlayer.exe

"C:\LDPlayer\LDPlayer9\\LDPlayer.exe" -silence -downloader -openid=25567197 -language=en -path="C:\LDPlayer\LDPlayer9\"

C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe

AVGBrowserUpdateSetup.exe /silent /install "bundlename=AVG Secure Browser&appguid={48F69C39-1356-4A7B-A899-70E3539D4982}&appname=AVG Secure Browser&needsadmin=true&lang=en-US&brand=9263&installargs=--no-create-user-shortcuts --make-chrome-default --force-default-win10 --auto-import-data%3Diexplore --import-cookies --auto-launch-chrome"

C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe

"C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe" /silent /install "bundlename=AVG Secure Browser&appguid={48F69C39-1356-4A7B-A899-70E3539D4982}&appname=AVG Secure Browser&needsadmin=true&lang=en-US&brand=9263&installargs=--no-create-user-shortcuts --make-chrome-default --force-default-win10 --auto-import-data%3Diexplore --import-cookies --auto-launch-chrome"

C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe

"C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe" /regsvc

C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe

"C:\Windows\Temp\asw.b4f75dd08683c002\avg_antivirus_free_setup_x64.exe" /silent /ws /psh:M75AarNFjDThIreqoDY7OdCVpC5UOyh8q4oJbsQsuW4pNg0KbZZH9qxETBatojixxOwHJyvvIbXG0wEBZ0FHJas /cookie:mmm_irs_ppi_902_451_o /ga_clientid:73aa3811-5299-4d47-bd43-d8f770fbccab /edat_dir:C:\Windows\Temp\asw.b4f75dd08683c002

C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe

"C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe" /regserver

C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe

"C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe"

C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe

"C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe"

C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe

"C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserUpdateComRegisterShell64.exe"

C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe

"C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe" /ping 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-PGh3IHBoeXNtZW1vcnk9IjIiIHNzZT0iMSIgc3NlMj0iMSIgc3NlMz0iMSIgc3NzZTM9IjEiIHNzZTQxPSIxIiBzc2U0Mj0iMSIgYXZ4PSIxIi8-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjYuMS43NjAxLjAiIHNwPSJTZXJ2aWNlIFBhY2sgMSIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0iezFDODlFRjJGLUE4OEUtNERFMC05N0ZFLUNCNDBDOEU0RkVFQX0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuOC4xNjkzLjYiIGxhbmc9ImVuLVVTIiBicmFuZD0iOTI2MyIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIGluc3RhbGxfdGltZV9tcz0iNDM4MyIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Windows\Temp\asw.a4926e31f59569ff\instup.exe

"C:\Windows\Temp\asw.a4926e31f59569ff\instup.exe" /sfx:lite /sfxstorage:C:\Windows\Temp\asw.a4926e31f59569ff /edition:15 /prod:ais /stub_context:0f8d0827-15c9-4961-9f8b-9a180722b3a9:10028136 /guid:0a0dca2d-9846-4ee1-b8c2-0b10250401bd /ga_clientid:73aa3811-5299-4d47-bd43-d8f770fbccab /no_delayed_installation /silent /ws /psh:M75AarNFjDThIreqoDY7OdCVpC5UOyh8q4oJbsQsuW4pNg0KbZZH9qxETBatojixxOwHJyvvIbXG0wEBZ0FHJas /cookie:mmm_irs_ppi_902_451_o /ga_clientid:73aa3811-5299-4d47-bd43-d8f770fbccab /edat_dir:C:\Windows\Temp\asw.b4f75dd08683c002

C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe

"C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe" /handoff "bundlename=AVG Secure Browser&appguid={48F69C39-1356-4A7B-A899-70E3539D4982}&appname=AVG Secure Browser&needsadmin=true&lang=en-US&brand=9263&installargs=--no-create-user-shortcuts --make-chrome-default --force-default-win10 --auto-import-data%3Diexplore --import-cookies --auto-launch-chrome" /installsource otherinstallcmd /sessionid "{4D01EF2B-3550-4474-BB11-D751E5DFEDB4}" /silent

C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe

"C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe" /svc

C:\LDPlayer\LDPlayer9\dnrepairer.exe

"C:\LDPlayer\LDPlayer9\dnrepairer.exe" listener=459110

C:\Windows\SysWOW64\net.exe

"net" start cryptsvc

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start cryptsvc

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Softpub.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Wintrust.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Initpki.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\system32\regsvr32" Initpki.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" dssenh.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" rsaenh.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" cryptdlg.dll /s

C:\Windows\SysWOW64\takeown.exe

"takeown" /f "C:\LDPlayer\LDPlayer9\vms" /r /d y

C:\Windows\SysWOW64\icacls.exe

"icacls" "C:\LDPlayer\LDPlayer9\vms" /grant everyone:F /t

C:\Windows\SysWOW64\takeown.exe

"takeown" /f "C:\LDPlayer\LDPlayer9\\system.vmdk"

C:\Windows\SysWOW64\icacls.exe

"icacls" "C:\LDPlayer\LDPlayer9\\system.vmdk" /grant everyone:F /t

C:\Windows\SysWOW64\dism.exe

C:\Windows\system32\dism.exe /Online /English /Get-Features

C:\Windows\SysWOW64\sc.exe

sc query HvHost

C:\Windows\SysWOW64\sc.exe

sc query vmms

C:\Windows\SysWOW64\sc.exe

sc query vmcompute

C:\Windows\Temp\asw.a4926e31f59569ff\New_15020c62\instup.exe

"C:\Windows\Temp\asw.a4926e31f59569ff\New_15020c62\instup.exe" /sfx /sfxstorage:C:\Windows\Temp\asw.a4926e31f59569ff /edition:15 /prod:ais /stub_context:0f8d0827-15c9-4961-9f8b-9a180722b3a9:10028136 /guid:0a0dca2d-9846-4ee1-b8c2-0b10250401bd /ga_clientid:73aa3811-5299-4d47-bd43-d8f770fbccab /no_delayed_installation /silent /ws /psh:M75AarNFjDThIreqoDY7OdCVpC5UOyh8q4oJbsQsuW4pNg0KbZZH9qxETBatojixxOwHJyvvIbXG0wEBZ0FHJas /cookie:mmm_irs_ppi_902_451_o /edat_dir:C:\Windows\Temp\asw.b4f75dd08683c002 /online_installer

C:\Program Files\ldplayer9box\Ld9BoxSVC.exe

"C:\Program Files\ldplayer9box\Ld9BoxSVC.exe" /RegServer

C:\Windows\system32\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\VBoxC.dll" /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\x86\VBoxClient-x86.dll" /s

C:\Windows\system32\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\VBoxProxyStub.dll" /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\x86\VBoxProxyStub-x86.dll" /s

C:\Windows\SysWOW64\sc.exe

"C:\Windows\system32\sc" create Ld9BoxSup binPath= "C:\Program Files\ldplayer9box\Ld9BoxSup.sys" type= kernel start= auto

C:\Windows\SysWOW64\sc.exe

"C:\Windows\system32\sc" start Ld9BoxSup

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "Ld9BoxSup" -Direction Inbound -Program 'C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe' -RemoteAddress LocalSubnet -Action Allow

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "Ld9BoxNat" -Direction Inbound -Program 'C:\Program Files\ldplayer9box\VBoxNetNAT.exe' -RemoteAddress LocalSubnet -Action Allow

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "dnplayer" -Direction Inbound -Program 'C:\LDPlayer\LDPlayer9\dnplayer.exe' -RemoteAddress LocalSubnet -Action Allow

C:\Program Files (x86)\AVG\Browser\Update\Install\{1A1B9E5F-7479-4DF9-ABE1-3CD9FE3CAFE9}\AVGBrowserInstaller.exe

"C:\Program Files (x86)\AVG\Browser\Update\Install\{1A1B9E5F-7479-4DF9-ABE1-3CD9FE3CAFE9}\AVGBrowserInstaller.exe" --chrome --do-not-launch-chrome --hide-browser-override --show-developer-mode --suppress-first-run-bubbles --default-search-id=3 --default-search=bing.com --adblock-mode-default=0 --no-create-user-shortcuts --make-chrome-default --force-default-win10 --auto-import-data=iexplore --import-cookies --auto-launch-chrome --system-level

C:\Windows\Temp\asw.a4926e31f59569ff\New_15020c62\sbr.exe

"C:\Windows\Temp\asw.a4926e31f59569ff\New_15020c62\sbr.exe" 2044 "AVG Antivirus setup" "AVG Antivirus is being installed. Do not shut down your computer!"

C:\Program Files (x86)\AVG\Browser\Update\Install\{1A1B9E5F-7479-4DF9-ABE1-3CD9FE3CAFE9}\CR_73E7E.tmp\setup.exe

"C:\Program Files (x86)\AVG\Browser\Update\Install\{1A1B9E5F-7479-4DF9-ABE1-3CD9FE3CAFE9}\CR_73E7E.tmp\setup.exe" --install-archive="C:\Program Files (x86)\AVG\Browser\Update\Install\{1A1B9E5F-7479-4DF9-ABE1-3CD9FE3CAFE9}\CR_73E7E.tmp\SECURE.PACKED.7Z" --chrome --do-not-launch-chrome --hide-browser-override --show-developer-mode --suppress-first-run-bubbles --default-search-id=3 --default-search=bing.com --adblock-mode-default=0 --no-create-user-shortcuts --make-chrome-default --force-default-win10 --auto-import-data=iexplore --import-cookies --auto-launch-chrome --system-level

C:\Program Files (x86)\AVG\Browser\Update\Install\{1A1B9E5F-7479-4DF9-ABE1-3CD9FE3CAFE9}\CR_73E7E.tmp\setup.exe

"C:\Program Files (x86)\AVG\Browser\Update\Install\{1A1B9E5F-7479-4DF9-ABE1-3CD9FE3CAFE9}\CR_73E7E.tmp\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\Crashpad --url=fake_url --annotation=plat=Win64 --annotation=prod=AVG --annotation=ver=109.0.24111.121 --initial-client-data=0x14c,0x150,0x154,0x120,0x158,0x13f847c40,0x13f847c50,0x13f847c60

C:\LDPlayer\LDPlayer9\driverconfig.exe

"C:\LDPlayer\LDPlayer9\driverconfig.exe"

C:\Windows\SysWOW64\takeown.exe

"takeown" /f C:\LDPlayer\ldmutiplayer\ /r /d y

C:\Windows\SysWOW64\icacls.exe

"icacls" C:\LDPlayer\ldmutiplayer\ /grant everyone:F /t

C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserCrashHandler.exe

"C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserCrashHandler.exe"

C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserCrashHandler64.exe

"C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\AVGBrowserCrashHandler64.exe"

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

AVGBrowser.exe --heartbeat --install --create-profile

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\AVG\Browser\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\AVG\Browser\User Data\Crashpad" --url=fake_url --annotation=plat=Win64 --annotation=prod=AVG --annotation=ver=109.0.24111.121 --initial-client-data=0xbc,0xc0,0xc4,0x90,0xc8,0x7fef3786b78,0x7fef3786b88,0x7fef3786b98

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=gpu-process --start-stack-profiler --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1232 --field-trial-handle=1296,i,3295843837769302223,3132858856273737750,131072 /prefetch:2

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=1548 --field-trial-handle=1296,i,3295843837769302223,3132858856273737750,131072 /prefetch:8

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1636 --field-trial-handle=1296,i,3295843837769302223,3132858856273737750,131072 /prefetch:8

C:\Program Files (x86)\AVG\Browser\Application\109.0.24111.121\elevation_service.exe

"C:\Program Files (x86)\AVG\Browser\Application\109.0.24111.121\elevation_service.exe"

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=2388 --field-trial-handle=1296,i,3295843837769302223,3132858856273737750,131072 /prefetch:1

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2400 --field-trial-handle=1296,i,3295843837769302223,3132858856273737750,131072 /prefetch:1

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2612 --field-trial-handle=1296,i,3295843837769302223,3132858856273737750,131072 /prefetch:8

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2988 --field-trial-handle=1296,i,3295843837769302223,3132858856273737750,131072 /prefetch:1

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=gpu-process --start-stack-profiler --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1424 --field-trial-handle=1296,i,3295843837769302223,3132858856273737750,131072 /prefetch:2

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1472 --field-trial-handle=1296,i,3295843837769302223,3132858856273737750,131072 /prefetch:8

C:\Program Files (x86)\AVG\Browser\Application\109.0.24111.121\elevation_service.exe

"C:\Program Files (x86)\AVG\Browser\Application\109.0.24111.121\elevation_service.exe"

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

AVGBrowser.exe --silent-launch

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\AVG\Browser\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\AVG\Browser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\AVG\Browser\User Data" --url=fake_url --annotation=plat=Win64 --annotation=prod=AVG --annotation=ver=109.0.24111.121 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef3626b78,0x7fef3626b88,0x7fef3626b98

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=gpu-process --start-stack-profiler --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1084 --field-trial-handle=1212,i,12221009835111572159,7179702736427129110,131072 /prefetch:2

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=1516 --field-trial-handle=1212,i,12221009835111572159,7179702736427129110,131072 /prefetch:8

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1572 --field-trial-handle=1212,i,12221009835111572159,7179702736427129110,131072 /prefetch:8

C:\Program Files (x86)\AVG\Browser\Application\109.0.24111.121\elevation_service.exe

"C:\Program Files (x86)\AVG\Browser\Application\109.0.24111.121\elevation_service.exe"

C:\Program Files (x86)\AVG\Browser\Application\109.0.24111.121\elevation_service.exe

"C:\Program Files (x86)\AVG\Browser\Application\109.0.24111.121\elevation_service.exe"

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=renderer --start-stack-profiler --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2428 --field-trial-handle=1212,i,12221009835111572159,7179702736427129110,131072 /prefetch:1

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2436 --field-trial-handle=1212,i,12221009835111572159,7179702736427129110,131072 /prefetch:1

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=gpu-process --start-stack-profiler --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1404 --field-trial-handle=1212,i,12221009835111572159,7179702736427129110,131072 /prefetch:2

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3504 --field-trial-handle=1212,i,12221009835111572159,7179702736427129110,131072 /prefetch:8

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --disable-protect

C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe

"C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\AVG\Browser\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\AVG\Browser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\AVG\Browser\User Data" --url=fake_url --annotation=plat=Win64 --annotation=prod=AVG --annotation=ver=109.0.24111.121 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef3626b78,0x7fef3626b88,0x7fef3626b98

Network

Country Destination Domain Proto
US 8.8.8.8:53 cdn.ldplayer.net udp
NL 18.239.69.105:443 cdn.ldplayer.net tcp
NL 18.239.69.105:443 cdn.ldplayer.net tcp
NL 18.239.69.105:443 cdn.ldplayer.net tcp
NL 18.239.69.105:443 cdn.ldplayer.net tcp
US 8.8.8.8:53 res.ldplayer.net udp
GB 79.133.176.235:443 res.ldplayer.net tcp
US 8.8.8.8:53 d19mtdoi3rn3ox.cloudfront.net udp
NL 18.239.63.224:443 d19mtdoi3rn3ox.cloudfront.net tcp
US 8.8.8.8:53 encdn.ldmnq.com udp
NL 65.9.86.70:443 encdn.ldmnq.com tcp
NL 65.9.86.70:443 encdn.ldmnq.com tcp
NL 65.9.86.70:443 encdn.ldmnq.com tcp
NL 65.9.86.70:443 encdn.ldmnq.com tcp
US 8.8.8.8:53 d1arl2thrafelv.cloudfront.net udp
NL 18.239.15.83:443 d1arl2thrafelv.cloudfront.net tcp
NL 18.239.15.83:443 d1arl2thrafelv.cloudfront.net tcp
GB 79.133.176.235:443 res.ldplayer.net tcp
US 8.8.8.8:53 www.facebook.com udp
IT 157.240.231.35:443 www.facebook.com tcp
IT 157.240.231.35:443 www.facebook.com tcp
US 8.8.8.8:53 m.facebook.com udp
IT 157.240.231.35:443 m.facebook.com tcp
IT 157.240.231.35:443 m.facebook.com tcp
US 8.8.8.8:53 z-m-static.xx.fbcdn.net udp
IT 157.240.231.36:443 z-m-static.xx.fbcdn.net tcp
IT 157.240.231.36:443 z-m-static.xx.fbcdn.net tcp
IT 157.240.231.36:443 z-m-static.xx.fbcdn.net tcp
US 8.8.8.8:53 middledata.ldplayer.net udp
SG 8.219.48.146:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 crl.microsoft.com udp
GB 2.18.190.71:80 crl.microsoft.com tcp
SG 8.219.48.146:443 middledata.ldplayer.net tcp
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 8.8.8.8:53 www.microsoft.com udp
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 8.8.8.8:53 d1arl2thrafelv.cloudfront.net udp
NL 18.239.15.231:443 d1arl2thrafelv.cloudfront.net tcp
NL 18.239.15.231:443 d1arl2thrafelv.cloudfront.net tcp
NL 18.239.15.231:443 d1arl2thrafelv.cloudfront.net tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 iavs9x.avg.u.avcdn.net udp
NL 142.251.36.46:80 www.google-analytics.com tcp
US 34.117.223.223:80 v7event.stats.avast.com tcp
GB 92.123.140.34:443 iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:443 iavs9x.avg.u.avcdn.net tcp
US 8.8.8.8:53 apien.ldmnq.com udp
GB 13.224.132.14:443 apien.ldmnq.com tcp
GB 13.224.132.14:443 apien.ldmnq.com tcp
GB 13.224.132.14:443 apien.ldmnq.com tcp
GB 13.224.132.14:443 apien.ldmnq.com tcp
GB 13.224.132.14:443 apien.ldmnq.com tcp
GB 92.123.140.34:443 iavs9x.avg.u.avcdn.net tcp
US 8.8.8.8:53 stats.securebrowser.com udp
US 104.20.86.8:443 stats.securebrowser.com tcp
GB 92.123.140.34:443 iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:443 iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 iavs9x.avg.u.avcdn.net tcp
US 8.8.8.8:53 v7event.stats.avcdn.net udp
US 8.8.8.8:53 analytics.avcdn.net udp
NL 142.251.36.46:80 www.google-analytics.com tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 middledata.ldplayer.net udp
SG 8.219.4.49:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 shepherd.avcdn.net udp
US 8.8.8.8:53 shepherd.avcdn.net udp
US 8.8.8.8:53 shepherd.avcdn.net udp
US 8.8.8.8:53 shepherd.avcdn.net udp
US 34.160.176.28:443 shepherd.avcdn.net tcp
US 8.8.8.8:53 update.avgbrowser.com udp
US 104.22.62.125:443 update.avgbrowser.com tcp
US 104.22.62.125:443 update.avgbrowser.com tcp
US 8.8.8.8:53 b5006751.iavs9x.avg.u.avcdn.net udp
US 8.8.8.8:53 b5006751.iavs9x.avg.u.avcdn.net udp
GB 92.123.140.34:80 x8960797.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 x8960797.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 x8960797.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 x8960797.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 x8960797.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 x8960797.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 x8960797.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 x8960797.iavs9x.avg.u.avcdn.net tcp
US 8.8.8.8:53 browser-update.avg.com udp
GB 92.123.143.235:80 browser-update.avg.com tcp
GB 92.123.140.34:80 x8960797.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 x8960797.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 x8960797.iavs9x.avg.u.avcdn.net tcp
SG 8.219.4.49:443 middledata.ldplayer.net tcp
SG 8.219.136.97:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 g5856219.iavs9x.avg.u.avcdn.net udp
US 8.8.8.8:53 g5856219.iavs9x.avg.u.avcdn.net udp
US 8.8.8.8:53 g5856219.iavs9x.avg.u.avcdn.net udp
US 8.8.8.8:53 j9121315.iavs9x.avg.u.avcdn.net udp
US 8.8.8.8:53 m6211579.iavs9x.avg.u.avcdn.net udp
US 8.8.8.8:53 x8960797.iavs9x.avg.u.avcdn.net udp
US 8.8.8.8:53 g5856219.iavs9x.avg.u.avcdn.net udp
US 8.8.8.8:53 k8136955.iavs9x.avg.u.avcdn.net udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 g5856219.iavs9x.avg.u.avcdn.net udp
US 8.8.8.8:53 k8136955.iavs9x.avg.u.avcdn.net udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 g5856219.iavs9x.avg.u.avcdn.net udp
US 8.8.8.8:53 j9121315.iavs9x.avg.u.avcdn.net udp
US 8.8.8.8:53 m6211579.iavs9x.avg.u.avcdn.net udp
US 8.8.8.8:53 x8960797.iavs9x.avg.u.avcdn.net udp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
US 8.8.8.8:53 d9217321.avi18.u.avcdn.net udp
US 8.8.8.8:53 d9217321.avi18.u.avcdn.net udp
GB 92.123.142.66:80 h1785399.avi18.u.avcdn.net tcp
GB 92.123.142.66:80 h1785399.avi18.u.avcdn.net tcp
GB 92.123.142.66:80 h1785399.avi18.u.avcdn.net tcp
US 8.8.8.8:53 shepherd.avcdn.net udp
US 8.8.8.8:53 shepherd.avcdn.net udp
US 34.160.176.28:443 shepherd.avcdn.net tcp
US 8.8.8.8:53 alpha-license-dealer.ff.avast.com udp
BE 34.140.0.190:443 alpha-license-dealer.ff.avast.com tcp
US 8.8.8.8:53 alpha-iqs.ff.avast.com udp
BE 34.76.203.183:443 alpha-iqs.ff.avast.com tcp
BE 34.76.203.183:443 alpha-iqs.ff.avast.com tcp
US 8.8.8.8:53 v7event.stats.avcdn.net udp
US 8.8.8.8:53 v7event.stats.avcdn.net udp
US 8.8.8.8:53 v7event.stats.avcdn.net udp
US 34.117.223.223:443 v7event.stats.avcdn.net tcp
US 8.8.8.8:53 v7event.stats.avcdn.net udp
US 34.117.223.223:443 v7event.stats.avcdn.net tcp
GB 92.123.142.66:80 h1785399.avi18.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
SG 8.219.4.49:443 middledata.ldplayer.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.140.34:80 k8136955.iavs9x.avg.u.avcdn.net tcp
GB 92.123.142.66:80 h1785399.avi18.u.avcdn.net tcp
GB 92.123.142.66:80 h1785399.avi18.u.avcdn.net tcp
GB 92.123.142.66:80 h1785399.avi18.u.avcdn.net tcp
US 8.8.8.8:53 update.avgbrowser.com udp
US 8.8.8.8:53 update.avgbrowser.com udp
US 104.22.63.125:443 update.avgbrowser.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 iscnx.avgbrowser.com udp
US 8.8.8.8:53 iscnx.avgbrowser.com udp
NL 142.250.179.174:443 redirector.gvt1.com tcp
US 104.22.62.125:443 iscnx.avgbrowser.com tcp
US 8.8.8.8:53 r4---sn-4g5edndy.gvt1.com udp
US 8.8.8.8:53 r4---sn-4g5edndy.gvt1.com udp
DE 173.194.1.9:443 r4---sn-4g5edndy.gvt1.com udp
DE 173.194.1.9:443 r4---sn-4g5edndy.gvt1.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 browser-update.avg.com udp
US 8.8.8.8:53 browser-update.avg.com udp
US 8.8.8.8:53 stats.securebrowser.com udp
US 8.8.8.8:53 stats.securebrowser.com udp
US 8.8.8.8:53 engagement.avgbrowser.com udp
US 8.8.8.8:53 engagement.avgbrowser.com udp
GB 2.16.170.113:443 browser-update.avg.com tcp
US 104.20.87.8:443 stats.securebrowser.com tcp
US 104.22.62.125:443 engagement.avgbrowser.com tcp
GB 92.123.142.66:80 h1785399.avi18.u.avcdn.net tcp
US 8.8.8.8:53 s-install.avcdn.net udp
GB 184.26.57.84:443 s-install.avcdn.net tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 104.22.63.125:443 engagement.avgbrowser.com udp
GB 23.59.171.9:443 tcp
N/A 224.0.0.251:5353 udp

Files

\Users\Admin\AppData\Local\Temp\Setup\ds.dll

MD5 d9cb0b4a66458d85470ccf9b3575c0e7
SHA1 1572092be5489725cffbabe2f59eba094ee1d8a1
SHA256 6ab3fdc4038a86124e6d698620acba3abf9e854702490e245c840c096ee41d05
SHA512 94937e77da89181903a260eac5120e8db165f2a3493086523bc5abbe87c4a9da39af3ba1874e3407c52df6ffda29e4947062ba6abe9f05b85c42379c4be2e5e6

memory/2992-11-0x00000000048F0000-0x0000000004930000-memory.dmp

memory/2992-12-0x000000007381E000-0x000000007381F000-memory.dmp

memory/2992-16-0x0000000002940000-0x0000000002956000-memory.dmp

memory/2992-17-0x0000000074010000-0x0000000074026000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Cab7B0.tmp

MD5 49aebf8cbd62d92ac215b2923fb1b9f5
SHA1 1723be06719828dda65ad804298d0431f6aff976
SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512 bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

C:\Users\Admin\AppData\Local\Temp\Tar8AD.tmp

MD5 4ea6026cf93ec6338144661bf1202cd1
SHA1 a1dec9044f750ad887935a01430bf49322fbdcb7
SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA512 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 c849e1ebfc8dc5ee6d284718da422979
SHA1 d91403ebc26895dd5f4259a75ee1c2afc08049f2
SHA256 9c69f81f3b99e1b6845ab87a27642705165254640fd5df5d6e3f787f45ab257d
SHA512 59cff97d4594df1bcefac48b6efe7d3a27c761e047ef524abf0ac9c1de14d0eea7f07b3ef336bdd058705c42bf693199e94acce084f027951ff772f6c3cfe658

memory/2992-146-0x0000000002CE0000-0x0000000002D24000-memory.dmp

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 ef49b1c635b1d44489e4d8062a52d368
SHA1 b2a1c3a780a2586dff46f0aab66f6fe44678b3d8
SHA256 2b3e532d333efbdad2ff28404c64725eb8428a1c5865c4dc7786346b432c4c05
SHA512 52554d80516b525e07d443c1f0cf72ba1cd31e01e748614dd924cdc2b75f4f37c5741fdc8eef3beb8f0b11e13f584b61ce3da914e5c30fbd765d314901696d9a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 dbad35ea6930ec831a127d5c48ce4e8f
SHA1 1c14ba8efcdcae2dfdc6b9574c520e5fd1c2cf5d
SHA256 dd3dd6d205bbf9a215c68eeab4b12f0446abcb5e0bbef1a0a13a2dcbf2d56743
SHA512 c6c826b85d795b0481dadb0ff3cef3d753cb325858b1d9981facaaaa21e20f01405c025c1a7d4447714e91f3f9d0e597d9c2da03dcfb5a193ccd67428ef409d0

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 6b61e47542eaded914148494eb380ba1
SHA1 43d3fb073e5e09dd5cf8abedc84d4e72dd14d608
SHA256 077c7ca883291dba3910384603142ae0ff2cf71f0ae7bd8a2c2961e1065379af
SHA512 fa19e50d12b939e796ca7eb66d839c4a12a0563158c7cfdea6921fb797e178d80fc8d472c01d4ff564d24429e2663886049f795f5bedb1848a719beca4a3e191

memory/2992-250-0x0000000073810000-0x0000000073EFE000-memory.dmp

memory/2992-251-0x0000000073810000-0x0000000073EFE000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NFAY0EOS\4Kv5U5b1o3f[1].png

MD5 a81a5e7f71ae4153e6f888f1c92e5e11
SHA1 39c3945c30abff65b372a7d8c691178ae9d9eee0
SHA256 2bc7a47889c56ad49f1b8b97385d5a4d212e79bb8a9b30df0665a165f58b273e
SHA512 1df32349b33f6a6fcb1f8b6093abd737fa0638cdd6e3fd90a7e1852bd0e40bc2633cb4e13c4824fb948d1e012e5cb9eed0b038b121404865495d4e57e123db69

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\ljg9kkp\imagestore.dat

MD5 6f3149f740ede2404cf16664377a09de
SHA1 6598b93ac4a77272dd3d4f7eb3a1a58fa082431f
SHA256 6e71cac98eed5b832b79d64ef19a6f659790f29c9333de4e30730dd731ea15ff
SHA512 f1f7098f735eb5b9a8315ae64213086488277486b5e1d46de6fc6f4464907e715b8c12388235d144fd04566c6a5066b0c2c72bfc84bf1fde56eeda3d90d83534

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 cd277f41724dbbfb0c024dc18e17edb4
SHA1 03defc87d00193b6d8c813ea5b563203c25b36cd
SHA256 13f5f249a602217037909c9e7f6c05f24e097dfed4ad5bd566df78750b278583
SHA512 3efa062bd044b2c3bc4aaad8f98aff40e0dcc9fd1383944e86b90a9a2c092d89075a7aa087e8148b6b5d56134e508e8faa2d4902c793f188878e1d8b51e5c11e

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 ed08fd9b724997ad70117fb342a835f7
SHA1 efdc5e101924dbdd46329e4241806e9087992061
SHA256 8ceb93f95808e7cd8f6b42469972158254a198f9fedc2d156737281142ab3028
SHA512 eacc92cbaf5c10d73bb7ee017a736018b3325bc5725c2e5680e0619175d550678b1623fce625d96e42b1a134ce014c8d4ae32981494b0540d2572be528b58905

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 7222e19044055ad0f362f1933282ea18
SHA1 60ec04f8539ad51b1e851c71d0c96998dd8df26b
SHA256 cd2e9a78927969cf2544b9a87f3fc0417fd53535d261e935d9f931023f2c7f47
SHA512 67044bb22e0fa67f4749779681ba5c7f8c6b8da526c2b56114f77c5717c8fbff0e6cdbd15aa97558161cea478e40478210445e648175dac411927e4a03181114

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 8b1fbd750a6d6e1d218214c154d7745f
SHA1 f63c4cb801b652508914203a8b211f034f273cc0
SHA256 20833d022cd5c44f722ea9ba9d0fbd20cebc70a5a4711180c96743feba3f5dea
SHA512 6d89c835772421b4cd955dfaa74e95940d736cd36e6007213fb14310a1c62d25ee56dbd77b737f6486542fe760d6066cc9208772aba89ffea97e142d06a74338

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 4fdfdeb184ede7b1d5271d093e75baca
SHA1 ee77ec54e95195c89612f4963f8377c754280e03
SHA256 72b508dd4e8be47e0c08aea4ee899059addd49ab0fb67d4b5db514adf92543cc
SHA512 7a4ab811d4165684b69f4b5ee7e6a6e8fc189b763d60bbff0b5da38bd32ffb5a1d14df6e1a05a87ebf1133a973fe86b9c8884f0ad0c987fa753478a3c1483872

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 a4ca59240396563a54582a4457a16f8d
SHA1 68ca499554609dfcaf6298305f4be72c6c0b25e5
SHA256 04bff4b1c5e72c9a0b72248c328c5b5092886de1da41f0fca04483801bc1b61b
SHA512 cd6245e614cda6584efa8ebba0d79e32c5cdf9814e069b247dfea39ab774c8bf50609994f1f12456f97a2146b4236c58b237c2fb558123f8b50790604b2d0e5b

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 a69ffc5335560006c65a3f97220ef055
SHA1 0dadfa98e6c9ecde507b95b00199f60a72131477
SHA256 d84f79bd3bd39fa540a91d36bd7d4f2fb970281ba8713ce5907145109c7766d5
SHA512 3b8c2e6f334709c0d399e69c3c069acadc5d16af175aa653226e289f3c1114e7c94ed73435effd5089cb4a670df29c0baabd19fe5e574ee101c22d692f361a95

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 85bc6c904913aee03380da7322aa7f8e
SHA1 41ae561e0c90ddd6f1f495b58e8192eaad89d508
SHA256 58a4d061b9b15d0adab6a0b1f03466c8c67509a3f8eab29e904b264e5e5b6a5f
SHA512 0ef5f7f64ae0c75b232b33abb0c61692ff3e66afb8f54ad6fbca1de946f1fe0cb8c6ffd6e7055699b3b6fdebca2c9ead10996059965f709ee4500ca90c939bdc

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 3d4c4439810f1b85cc91cf5a488ca0e7
SHA1 c89014815fc8aacbcac2f32c702f8014765ddaf6
SHA256 c8fba0973010e787c54e73590637c258f34f15a51f3c49fefff0f3ff6a8b97b9
SHA512 cbbac85e1f3a9b0ac26138aaf08f712af847c2f9d8435f47112e144085364faf9248e61fecf1d983024de7f36ad9394879914845b9f367a4bd6690524a9b70ca

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 7275a0eb8122e76275e14e43b75f87e9
SHA1 40136691115b5669c3d5044f01417950da265b1d
SHA256 a95d13cfff5115b2552ca4a396150e4a6f591c584f66f632e7ff479f8375e586
SHA512 ab4d302bc4f3e268b9b322e54380251360186c6580efa5afc20294f95143d0db6c16a834fe16a33137795464ac6b3c2e25f20ad45819d8bc3c705d6e14d503df

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 d74f6def1f5c58fc44d4ba2c718a94c9
SHA1 86f21d0c82f00c450ec3a1fd3f7361f620b08b69
SHA256 ae862b7867d84a10a278ae3c4b5a57aaccce4ce76fe73c06293f5343fa66224d
SHA512 615202e15b0ebd6a46f1008b7f591b9d3e67ea57926a571a13268fe8bb58c5b0c75ee20fde34ee866bdff9a5cca51850c2daf82dba1148ad5376fc316b342d1f

memory/2992-611-0x00000000048F0000-0x0000000004930000-memory.dmp

memory/2992-712-0x000000007381E000-0x000000007381F000-memory.dmp

memory/2992-713-0x0000000073810000-0x0000000073EFE000-memory.dmp

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 d7ced95bea2923a96497ee035a92dab3
SHA1 0b1efc74bd99896a10a01a33fffb12df2028f408
SHA256 bd3d86a7c92a2db1c08efcd534ddc61b8a4fbf19ee964edc2a69dca410a72c18
SHA512 05c60b6b248931ddd559607158fe5b8f49d99b85b38d9a22de32ee42c219032ed6f831bba19571be03a5b677170c792cae71ed1083fed94d86793a4fae3e4f7c

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

MD5 0e33d9a59b709c11b543a879c77c1255
SHA1 d7d3c252f90d79b96bd955bec9c745ad7d47d768
SHA256 4b50a0060736abf0550f6b5cd148736607e81390ded95d38d90511ed33d5e291
SHA512 b5b2a0d82882ca5e5c6ad773e1146875b89a2f0fcfac16a372e2aa9d33e612068096283af5f6913acf5d5cd0d86d988553ce03159c3e14f0aedc62b1addfd2e6

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

MD5 a266bb7dcc38a562631361bbf61dd11b
SHA1 3b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256 df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA512 0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 eecb5cdd35e55d570b15675c87242fb3
SHA1 25d7df45686e6a096255bc8ddd241836c7e3cd9d
SHA256 0cee63574f6f5a4f73833e00e72987e2d70794eab69ba17df4f6200eb1dcf35b
SHA512 3986f4ec7bbb80d522549ddabe251f8dbac6c14c986af7bab1d13e12111b7b014c61ee3edeb2f851242d595b8448caa880f2c64bc68e1659f7d756cbcba2d3e1

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 91ee64e2c6d945065dfa5da3a6638753
SHA1 15229a4b13539d799543625b21834fac3c14eb58
SHA256 edd8deeda454cd1d0aaad8be9e7d451a930ac29e99d9736f6cefc624410c7628
SHA512 d8e268fb9254ab43ea318ec1a426a3ce290e52cb7d22b3a53246616427845b65337e23bb8be9a645ddf87bdcc8ddf1f8a930bcb74c962625b6a3cd8b3f32acbd

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

MD5 a8f9f58a78a507e0b88b2b0a4737c6a4
SHA1 807e88c4278df37a1fb89615b87e9c93b2c87b68
SHA256 3c0559e7a7bdb957f7b1fc5094727ad7266ddc34589b5623e974922b3fabbb79
SHA512 2426ecd4bbf46a53cd22f8368138660a1bfe15756085c14eca51017cef038d3556c63a4dc1d1a45c2c52a45b3413d80e0bfab4bfd45ee8690297f94f1a122e6a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 513749f7e2d49a9f9069c6f209ae04da
SHA1 8008b6cfb0e920a8c474d3987f99af4323d4f01c
SHA256 61850678022ce62ee30a782f903857f997db0608da2fad3254cc0dc4f93493af
SHA512 d298e5da515c3691d2233f25d20630274fc46c88d391a5ad380a14ac4ba21941b99c0e78ae0c936e0c83b425e0c25810bd7e5fdeb86ae2116f2398ad11bd2afc

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

MD5 e4a68ac854ac5242460afd72481b2a44
SHA1 df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256 cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA512 5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

MD5 2306c629aaabecaeb3ff73c0904e499c
SHA1 1e8c13e7db0009b65a573186e611fb5c22d842c5
SHA256 17b17481048a403b5e342d4f370cd7ecd25ffcb4dd627373fb5a7413bb407c52
SHA512 4ac39d487a6f0d7b96b93a95dbcb2315f3e5dc26286e2cba2d6e145cad7b5b5e3e2180e5e37cb9c3e2837f6a4b35b44277a0f8c5c47b7ef1dccf5a55f6beee7a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 bc0a60966f877101741f5d8bbb59624e
SHA1 ba1048e69fc29767eb41396f50848158d8375601
SHA256 ca5508ba92da58dea832cb1470bd91081c675478a7afaee0ee646568c8bca415
SHA512 a3887b94affe85003121bf3f9e4103f1d4d1e9d60789c8c0657d3f58260df97dc40c62abd1f35c77adcb3571bbb8371d40e3c2606da67172dd32183f6e965bc2

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 0702df29ce6cc53e416848f43912cfd0
SHA1 8cb81e4ef44cfa165f7cfe73e6c5c9d1a2e032f3
SHA256 2e446da18df1e0e10ca3500cef0b55b6217ab15675029163689cc8cc860aa79c
SHA512 83a8d151ab7e50bd99cc0c6dac777611a05d3af10d5be1524726dee136ff45495a010737bf6077872a284fdee1c0e0a10c3231c1238985a75c43ec19c6b4a904

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 9b4114f16556d427e428c891fde8f22d
SHA1 b1c0948de6004ae3112aceb7da2aa7f65ec4c360
SHA256 fc23629780fee403ab3ef9139fb1b2ae3a19816b1474c595fdf25c28a697631b
SHA512 c37c47a9a061d2ee813a7eed3cef17eba7da3492ab90e6dbe154d685e97c5a78811b942121e2ffac0cc4388d3aec3a75ebe86f5f7a0186ed8e35955fd83a6f97

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 982f3384c86fc303cb9e5d44cbbc9e81
SHA1 3bf21ba579f972f0b5630f864da5a001f99503d0
SHA256 8b381a50ea21cb66738f3e6e24e692bbf608b94696c4656a4558da83878aa597
SHA512 828e3cbd5434562b48e8b3eac5c1da01ab0acfb44c36339607002f79077bb47fb6c52cbb8cbbab69dc23c63a0a5d88c6c93f58c9231fbe71742afd3404c2edc5

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 403118e47915f08dbd90a050ba5a45f7
SHA1 c85ff531dbe5c3d2a5c346502c701481aba57542
SHA256 2979ec62b2bd565bd2f50b0cdf5783bf0876f524d48099976c6b32f03d10f24b
SHA512 4110dfb6aca73611ee23dd59389c5ea1c8a63c608ebc21c0045b92c8e90029aef37d48f2bff3db233762869624622354a5fa6c6103e82a8072cfb685461fd743

C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_antivirus_free_setup.exe

MD5 26816af65f2a3f1c61fb44c682510c97
SHA1 6ca3fe45b3ccd41b25d02179b6529faedef7884a
SHA256 2025c8c2acc5537366e84809cb112589ddc9e16630a81c301d24c887e2d25f45
SHA512 2426e54f598e3a4a6d2242ab668ce593d8947f5ddb36aded7356be99134cbc2f37323e1d36db95703a629ef712fab65f1285d9f9433b1e1af0123fd1773d0384

C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\avg_secure_browser_setup.exe

MD5 591059d6711881a4b12ad5f74d5781bf
SHA1 33362f43eaf8ad42fd6041d9b08091877fd2efba
SHA256 99e8de20a35a362c2a61c0b9e48fe8eb8fc1df452134e7b6390211ab19121a65
SHA512 6280064a79ca36df725483e3269bc1e729e67716255f18af542531d7824a5d76b38a7dcefca048022c861ffcbd0563028d39310f987076f6a5da6c7898c1984c

\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\nsJSON.dll

MD5 ddb56a646aea54615b29ce7df8cd31b8
SHA1 0ea1a1528faafd930ddceb226d9deaf4fa53c8b2
SHA256 07e602c54086a8fa111f83a38c2f3ee239f49328990212c2b3a295fade2b5069
SHA512 5d5d6ee7ac7454a72059be736ec8da82572f56e86454c5cbfe26e7956752b6df845a6b0fada76d92473033ca68cd9f87c8e60ac664320b015bb352915abe33c8

\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\jsis.dll

MD5 4b27df9758c01833e92c51c24ce9e1d5
SHA1 c3e227564de6808e542d2a91bbc70653cf88d040
SHA256 d37408f77b7a4e7c60800b6d60c47305b487e8e21c82a416784864bd9f26e7bb
SHA512 666f1b99d65169ec5b8bc41cdbbc5fe06bcb9872b7d628cb5ece051630a38678291ddc84862101c727f386c75b750c067177e6e67c1f69ab9f5c2e24367659f4

\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\JsisPlugins.dll

MD5 bd94620c8a3496f0922d7a443c750047
SHA1 23c4cb2b4d5f5256e76e54969e7e352263abf057
SHA256 c0af9e25c35650f43de4e8a57bb89d43099beead4ca6af6be846319ff84d7644
SHA512 954006d27ed365fdf54327d64f05b950c2f0881e395257b87ba8e4cc608ec4771deb490d57dc988571a2e66f730e04e8fe16f356a06070abda1de9f3b0c3da68

\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\StdUtils.dll

MD5 7602b88d488e54b717a7086605cd6d8d
SHA1 c01200d911e744bdffa7f31b3c23068971494485
SHA256 2640e4f09aa4c117036bfddd12dc02834e66400392761386bd1fe172a6ddfa11
SHA512 a11b68bdaecc1fe3d04246cfd62dd1bb4ef5f360125b40dadf8d475e603e14f24cf35335e01e985f0e7adcf785fdf6c57c7856722bc8dcb4dd2a1f817b1dde3a

\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\thirdparty.dll

MD5 070335e8e52a288bdb45db1c840d446b
SHA1 9db1be3d0ab572c5e969fea8d38a217b4d23cab2
SHA256 c8cf0cf1c2b8b14cbedfe621d81a79c80d70f587d698ad6dfb54bbe8e346fbbc
SHA512 6f49b82c5dbb84070794bae21b86e39d47f1a133b25e09f6a237689fd58b7338ae95440ae52c83fda92466d723385a1ceaf335284d4506757a508abff9d4b44c

C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\Midex.dll

MD5 581c4a0b8de60868b89074fe94eb27b9
SHA1 70b8bdfddb08164f9d52033305d535b7db2599f6
SHA256 b13c23af49da0a21959e564cbca8e6b94c181c5eeb95150b29c94ff6afb8f9dd
SHA512 94290e72871c622fc32e9661719066bafb9b393e10ed397cae8a6f0c8be6ed0df88e5414f39bc528bf9a81980bdcb621745b6c712f4878f0447595cec59ee33d

C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\CR.History.tmp

MD5 90a1d4b55edf36fa8b4cc6974ed7d4c4
SHA1 aba1b8d0e05421e7df5982899f626211c3c4b5c1
SHA256 7cf3e9e8619904e72ea6608cc43e9b6c9f8aa2af02476f60c2b3daf33075981c
SHA512 ea0838be754e1258c230111900c5937d2b0788f90bbf7c5f82b2ceda7868e50afb86c301f313267eaa912778da45755560b5434885521bf915967a7863922ae2

C:\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\FF.places.tmp

MD5 02f11ac7b19e4903ae52e46082bd4503
SHA1 1c599437d0918d2c1ce298839e201a5473054d28
SHA256 eedab2d55fe86bb0566c022f913e0f39b4507cfa7cc7b53e9c8a44cad057f7f3
SHA512 08520f1f86c4dfb951008c5c8f7103f80335e61c94302a2b5f39a403b0189df8f1997571f3a3a2777f5dd845d17ccc84f2a0f96956fed8a14c58d8f0c24c4662

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 75437bf4d631d321d11412c4891b9c0d
SHA1 54dd742acd979e75dda6d77b6044c35ae3ea3644
SHA256 ea4449317b29e56360dbac6ce46e7226454fe0b8053112690e06190ca3987d56
SHA512 daa25aa9c52eeceb1b90a7d30334a9f23e65b5900c81462b9918be20940098aea7806334f659cde49c99ea0d11fc9cbe03c674b935e5aa92c32ef75dc0102a93

\Users\Admin\AppData\Local\Temp\nspA1BD.tmp\AVGBrowserUpdateSetup.exe

MD5 9750ea6c750629d2ca971ab1c074dc9d
SHA1 7df3d1615bec8f5da86a548f45f139739bde286b
SHA256 cd1c5c7635d7e4e56287f87588dea791cf52b8d49ae599b60efb1b4c3567bc9c
SHA512 2ecbe819085bb9903a1a1fb6c796ad3b51617dd1fd03234c86e7d830b32a11fbcbff6cdc0191180d368497de2102319b0f56bfd5d8ac06d4f96585164801a04b

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 3a62d8a857ac300cfa87918f02381bd0
SHA1 dbbd533db84c46fd83b6268855241d378d2980ee
SHA256 bc15f6acfc91dc9d01247871bed92fc4ca7b05c2d678c04b1abcf869330e03b8
SHA512 649c9c6c6e3df85ac96e95c579392e686391f685c5c33e8ab3b49f1627e982b965d8b290f260e44e5cbeb00bfade3b791117432aa354be13830b07e816e6552e

C:\Program Files (x86)\GUMB50D.tmp\@PaxHeader

MD5 a4b91523346a20be3854fadb9f17e3ab
SHA1 183eb8b7a7fbc79b6a767f125380591849d07839
SHA256 750499047c3c8c62b24e8dc6e1d45812e08f5beaa8405ed2bd8785fc328fddb3
SHA512 8f99dc0cd69e83787740ff7b365cc69e8a1d0990f987ba8a3433d493f5bdc5be516aab962d47fcabee358aff03acb7f1d35c2e58b2015bc12ad2335cf5916d8a

C:\Program Files (x86)\GUMB50D.tmp\@PaxHeader

MD5 939ee98d23d3ce9a0c8a0fe9aac02cf2
SHA1 b48224bddd5ad890d749f1dd16de6f9c5d9b2af5
SHA256 cea3426ac194b93a31f869d26e69045effc10a0d89962220724557136625ba39
SHA512 caddc19a06aa9bba35641c5b8b2055c18e7f8c89f0603869be5ef7b283c83ab4efc1213ba18c536007babc492ced62e406ba34af96c3a949d3378b5cae0ad881

C:\Program Files (x86)\GUMB50D.tmp\@PaxHeader

MD5 5aef091c2c4a1ab1f18d62f5c63b864d
SHA1 c46940e1b5a6ed94cb08cb61eea9e6e3e11d0540
SHA256 5a098ad8a8b1745286387dba19ac2dd9a25d6daeab76256d0c747dab11f1f02e
SHA512 8275fc5f95739ed30c4d6ced2da849deed79efa46a3cf5ec0884dcd8a29e5ae0f434b1ae33b1f87ece1da69adb49ba652ea76a527933c1a252923a74eb250cf1

\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdate.exe

MD5 cbcdf56c8a2788ed761ad3178e2d6e9c
SHA1 bdee21667760bc0df3046d6073a05d779fdc82cb
SHA256 e9265a40e5ee5302e8e225ea39a67d452eaac20370f8b2828340ba079abbbfd3
SHA512 5f68e7dffdd3424e0eb2e5cd3d05f8b6ba497aab9408702505341b2c89f265ebb4f9177611d51b9a56629a564431421f3ecb8b25eb08fb2c54dfeddecb9e9f2e

C:\Program Files (x86)\GUMB50D.tmp\goopdate.dll

MD5 04a6438c50564146e880c5eb9d57905e
SHA1 edf5d454de99159d832cc9bd0d8dbe132d749804
SHA256 26109d47bf9960e531888e6c545ca8cfc24fee2202b549df29fb8bf9c58e0812
SHA512 8705d0ab2f8a6c1ef567ad00b33ff2cca01391b105eb0ade201d981f091e4ba87e709860ab9849bf9781698fb42ab8efe53ea731af310781766bace1eb1dc19d

\Program Files (x86)\GUMB50D.tmp\goopdateres_en.dll

MD5 418853fe486d8c021d0cca2e85a63d63
SHA1 9504500a7b5076579d74c23294df4bdb1b7c517d
SHA256 4cbb2591c1eeda32bcf295685c993ce4d16acc968697fa12e2a00a1b7c4b37a3
SHA512 dc2ab4e2056e6d73a274d700bc16f75c7c687b35874029c1908b183428dec010373045d4a52eb3f5745f8b91d624cf5d40cd7f37e353f3a41348e2a054a266a3

C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdateCore.exe

MD5 dd5dc945cd848bf503862d0a68c3ea5d
SHA1 9b277a0c733ed5698b0656da8c3b99d2f90c7ef8
SHA256 8cc98345e367b083f545ace66d93bf69e03a4fa08b84805a9925fa4c94ef3f8f
SHA512 f6eab8422bde24d89a7723c6175b4197a50e18aa0bb5b8f419e5a23b265d85dcaacaf136b8f6ef6bbf2bd6c0eaecd8f86093f594fb98e596f4b39e9c6ff227e1

C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserUpdateComRegisterShell64.exe

MD5 2a3ad7362e6c8808fbb4d4ccaba4ed4a
SHA1 3f896f7df7fe202f4a717713c503665bb4dcaed6
SHA256 4dcd341907880c8dea840819628b19c5ea42ca2b5c61ad57147d0ac7da9b6759
SHA512 892042ac713e4d5b488262a584355dafa18d967035788799c1773eb39a4616461beb9d79a230d9f85cdefd1b4076b8a5e1d4bde17254bff1f08c3eba56469679

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_bg.dll

MD5 c0b41217fc33a6a53ec69ae7399460f2
SHA1 d7dd8d543b7297f1a1e138efa1806972c9489c3f
SHA256 d75a1a41ad7e5277576e3bdf35a858be3a6f540d21c8ab4156c842d8f1b3295b
SHA512 37abb726b78421aaccdbc94b358cda6b581e89ac519258eb39c6a7f0706cfc64c3a96f5c29539ba67c6e2d2afd6f10b6b0c063b54366c03376ce234d132a8253

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_da.dll

MD5 9a421423686559027e4301d36bcf58b2
SHA1 9669424f4e7c765ddb917a515d5a8b1486f87daf
SHA256 9d8ff148793d99974fab93f38027e1999323a48620b303f82170751be5dd6b69
SHA512 f5d62fe17a820323c4b1832cd3bd9c8fa291d44dceb88a8a1a8f94c6166e550ab9baf9357c5ec3388230bc75f0ccd3aa2d5247fa5d242013d22c61001128a951

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_de.dll

MD5 1c15851d9dd22e4ae3f3bf249da79035
SHA1 60fc5652b5e1c55056c961d4d3b961492cb3432b
SHA256 a9dd72a08c0c58a71b2289d76efae681a5c8eb5faf73e49b873f15ba4050baa6
SHA512 6da386c35b317f39613da73340631f927606bccd0a8c626537eda896eb32c9a2ed1d71c7cf838f1a4b90553f3f788eeb5e02fe84774fb0ad2f574bf4e4d7e248

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_el.dll

MD5 0d15748f01df49dae986f1e27dc098ef
SHA1 35a435bdaaf47795977b28cdae2e4ea1fdae73a3
SHA256 df13c38061cb0b02dd8a9023a17da0bbe1cda6fdedad5203129fc702c7fdd9b1
SHA512 290e9936f50e3bd11c1b9d28decf3b43f5e23bbff16801e7b0491690773d057b6bcdcf48c48a7ee16fa2400723b3e974e2b74e3899590a8e660c2e9c78b9d141

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_es.dll

MD5 5f8ea18786d5ef1927cd95537abc3ae0
SHA1 5530650ecc719d83b7aa89e0b326b5698e8adda2
SHA256 fa416294b078226a8919dbb8f75533a6ef96d63d5bd17aac854eae68791433cf
SHA512 577dc7d19e4443e8aede759a781826c091c17d12fb06e89b1306133f21e01dab919045183a916e1b5647ddf485134a8459745a9199df5c7e36abe192645d8e25

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_et.dll

MD5 5029406d9202d6f2f279fdd3a06f55a1
SHA1 dcca8bf9392faa0038c6cb5d25929726b16804af
SHA256 cac545e04d701c39f4a730aec4c3dad177d8ea4baca10651f150925644874864
SHA512 519538e05f8e21966e4878291692cf25057bba3c993c0034a33b1da7c9eb0a8fb881565717ceb6c1139fd601b73b1f1e2aa46e20aeb6b93f897cd2ef93172934

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_gu.dll

MD5 a4061e8408cc59cb898adfdc4f173278
SHA1 ae34e3058a40449481590bb3a63aa0225b4f6f98
SHA256 e033c950ecc6333dfcb944e70622e77a6498ba0e23fd144117dbe9a2a0c15be6
SHA512 d8a847e9a21c86c7b9b072e16914f42185e3c0e1d99f6ea5259382eb0fb89578c7a7f9f62f892f1d20be180dfc327bc076ea038057895c8b92cb1f0c053e0b2a

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_iw.dll

MD5 31227325c8617b308ccd268c2be7e72a
SHA1 71e369f26e644e643fcd538d933e4087dd593f1f
SHA256 4a98e34a528eff04c2baf4e9e50489086e58d2e32e1851f33674abbe5e104c68
SHA512 ba8d94dde5b7b74a39ed54a5f3e47a558e0c1deb632018c82423c06806071143851bb1d8c7a7bada6f13e71734e7a29457f3741266972b777cded41c953a9645

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_ja.dll

MD5 0cfc5b7b3f86d6bfaec9a0713da74df3
SHA1 81a278fdee9edc302fe4e7a88c9addb230ce6df2
SHA256 1d7fd1b6a614538530385e7a40efc95d3b8be75057ae03bf999aa2419d1f9f24
SHA512 8b8f834ccee41c69c581f0b80f26b0cdb536f87bebd5a6b1f02cdf6f1aea5cf5b29c356e82c7a8fd591bb16c0938a790ac8f90f6d27edc95fc48a5aa3c30cbf0

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_it.dll

MD5 3ae3106694098f8420b182ad5e3354ab
SHA1 bc9dab621b03d4126b97c260becd7f4525255462
SHA256 59b406b29538c3c3d0f060b5fc0ccd36556f8a6278327935a5475c6b21741dc9
SHA512 f3625be57976083d642b01a41a53d6db6cad3bfc584a50de3565fe10975a5d7d2cf4f8b41bcdaa5ac70f8fc4ada113084de07e2ed45f26401dc2d4f8f4c322a9

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_is.dll

MD5 dae35fa037b6248876347521c5298566
SHA1 8358fc05a675ea56f720052fbb4b384d97b94d86
SHA256 ce0652b8dfaf21b6192b66bf75e140b3d72aa545e0edf62d9e82e9b0878ac5c5
SHA512 4158b8fef0da76ead12b5d6e421c5709664ba84d1ddde44ef6bbd1023084cad3820a37abea03b206635a945a2435b301234cf5bac3c8e2861a852b2699036ade

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_id.dll

MD5 7e7deef6ac35c9d52410fc356391c7e4
SHA1 43b3d918867a93ba109a3e4eacb45f3cd5c40b93
SHA256 963f4d2ad7ddcdcfb6185521c0590a92f2014897d5f5f525471ac81f3807fc5e
SHA512 9eb0e9be0a973693b4bd167f6c1118dd9d702b1951a90f0a3a6103e77c43ee6afa173b79d3ab21fe94a98c320b17ab0b787cf5b6ec47d9dde9e3e8c14b8cadc7

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_hu.dll

MD5 114cc594fab2e564ccb24a826f3623e4
SHA1 c3c3fb4ef6ea6ff0e7a1e0289320b2fd2788b03b
SHA256 c89e223a42d7173f915dd088ebc84b0048cec772bd4221b4b90ce4c0e419ffe6
SHA512 9a7eb5710340cecb2d32de26322dc862812e185b6d260d76c0c7f642f30cf9e43c88aec76b515148ef986db0c77fd0e31f71c8fd26d56a4cc72dff0d023abb5d

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_hr.dll

MD5 27c0dbd61a71420bb4d1a0be2373a175
SHA1 47b4c107b711caf5a6b2978bd6fd6b53ebdec5e3
SHA256 43191a4c507a112e96e06f959b6cf78406bf970b021ad8d7db59d1b9c52779bd
SHA512 d1f20e9a628bdcbd26b8d5de89b87bdbc8dab871651c86d47c023daea86c7ada0a565fdd05b48c7643a63db044639f4eb89d1640e58c9b32722e4926c3c5e72a

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_hi.dll

MD5 38525b8a1b15a8aeb4fcfc8bee8358bc
SHA1 ac2ba33b8ad778a8165c87b579dad0dbef5bed75
SHA256 271e83bc86e490cd5b6cb9cb34057c7684d233c56a53f4f553aa07507c9dae52
SHA512 ad8df196174ceeadce4588dcd365066665267b922078d92b328ba661a4ebfa6d06b4263a4b8a28e4efb4d86e1140d71a3c3bf4b7b60970aa20552aa7f0c73acb

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_fr.dll

MD5 8ddc3f7276c12ac407cadcda6e2a3e12
SHA1 78c5e802f67c8b6ae3fe13202e6a54d3cca69df4
SHA256 7f2f0f9f443a022f5aedacc40c28d0654fec488f34435c75979118464256a8b7
SHA512 0d05bdd2d5e9f36eb09182e8b13507ba03e256c4aadb77bbfedf29584a47fd1e0733a825a3f687d3058e53c8075caf6dd9d24ec93f1bdd58ca97106827323540

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_fil.dll

MD5 5ed0105f4043466a99557dde1f70e97f
SHA1 c57c935cc4b25b6375ab3fcdfbb265f4c586ec3e
SHA256 cfbe0120ddf8d5574f7c44c85488f53aecec4df9bfb25f1cefbabcad5af46096
SHA512 4fa641810f758e0031388ec146467fc130780e2f2cc8495b6a2fff0679d7bcbe7526356f85a97b5338e84d791ba14e812b2c182fdae01763640be3324fb59526

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_fi.dll

MD5 57dad7c22bd635a5af8fcdcd63d4e530
SHA1 8aa11ea5c1cacd9b23c29989f22e82c43c827d0e
SHA256 1e0d05927a455115265db9308e0f78ffb7bbb5442f36b8483549efbe415454a2
SHA512 4236609e37ec41bf46d0f45e228c9021c1624e2f98a642eab513d290a4482da13764fcc2d044f78ebdc09e0cfc63a251678d169cb33e251d6f6d5de9b96c31b6

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_fa.dll

MD5 8564514501256ff045cf7aa6c1b5a797
SHA1 40b9aa8d04c48fe2ecf193c2089418ccc938676d
SHA256 f3f46a6da6c8ccb3ce7fdd0cb5882f45523decca95852b8c775bb90f8e92c1b3
SHA512 701077c8a1c70c1bd0c35f54aa838dba7b7b6f832e0ef2776673092fca546276166c3638676451c9655086b740b9e193cd54f952fd5fca481b964083b881bcc2

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_es-419.dll

MD5 3e5971e8559c77e8901ce30d14034730
SHA1 04cc21ac4a84abd29f7d7585282345881fd81721
SHA256 613418b8779f7440b88f1734d6c514706df9dc9a58a623966cc1c9ba4e29c28f
SHA512 b4592b25cf676db6d6de1be811c39bdeecc24bbfd4dc72fa4b3f97de866f9b0fec7c85f7d56f048f61829c1d8b4109e4a0c7e14a9e410e30a6a8da702941e00e

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_en-GB.dll

MD5 02465169cd873c4492196e03457f2771
SHA1 837ca5e54a8c12577d0d05a32996dfc04067c5ea
SHA256 4eb9edf550bf1f66382e5d8bd4958438891cd2ca46557d14f4b945dc176ec025
SHA512 e73b5f3951050f2903b80b89d2b9fd9ebf69adb922eb8238ef4c01f413ae67727d7598d4ac15f7ac8b9257aef0139e0924c70c5898357142a303d7e2b15394c3

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_cs.dll

MD5 7f3dcd851645d3d75f636c8440fb057f
SHA1 85debe41ddcb46555a0d00795e41e460a35583c2
SHA256 0b31785d1931580cad5ef16d4ff5723802d12c38b56746e70fcf91d71162e043
SHA512 d0d21c397899aaa6a718b77195a6af1556309615616fd6583ecb84b04aa7087e76eb5fdd6cae0a4ff1c0f85bf72e1f51ae002042078095f640eb95da363889e4

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_ca.dll

MD5 f951cf3ca93e5ae5fc1ce2da93121d98
SHA1 15bc869406857437babe41cd3f500c356913499b
SHA256 eb00cad19ed1d16f52928962f2cc6231d65eb74b2314976ebeb1ec860103e746
SHA512 b77086ad2b39723d697d7839d9243c1c0769a2cb0f6287cd3f2d64eabd6a48d8fc2d253e9089c6586637ed5dc5970c2608615fe77cef5003f0c4d53401ef73bc

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_bn.dll

MD5 aedf6d96ccb64f488379bb1fe65f697a
SHA1 901bbb7873d8f698f49c4b6be74fb50b353d7b5e
SHA256 941d22186ef1bfe27052e78d21944d6088cea152d1ede51452f04fb032c92f90
SHA512 d1d889a1fe75924f3569e07d9ee3f552afc02165210f5c439d4697be898b72db397bb89e7d0706259f92c1cb5759009f9e1ba5c52f764e63514b3da41dada1cc

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_ar.dll

MD5 9c77be0843f0fe4864a04f8d5f24a593
SHA1 be03adb4d3c33520e652c7a6ee45f09d5ff54a54
SHA256 39547fa5d7b93856235288b1021699b4f36f0bea10b10d6b89ea184a3ad77bb1
SHA512 f504c98b03a5d72c078b38a2cc4fdd94dbed159f5a2ed47c2c4a53fc6ec8a3b1fd969d5ad85fc7503e64427a36adee7a14f15f1275a9194103e43c8a8ee45d28

C:\Program Files (x86)\GUMB50D.tmp\goopdateres_am.dll

MD5 ba03b29d5d44341084eb06bea8f1e702
SHA1 7d8dd7556ea5e299b55ddc7477ca758fe2c64f48
SHA256 6a6aad33e2910c29a6d919aad074d89359c5e6723ced7ba4e215a62e9513749b
SHA512 29f902587b7078deb12bee6bf9993748109749ec12e6490d5f84bc9c532a5a1f414149d5760641ef052611bf2d441423d115dfb5a4c4c6f5e6d6a1f386924cf2

C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserCrashHandler64.exe

MD5 deef1e7382d212cd403431727be417a5
SHA1 fac0e754a5734dd5e9602a0327a66e313f7473bb
SHA256 7d410e9eabd086827b16c89ee953a643c3e2f7929616c0af579253fd8ca60088
SHA512 6b472a57fb89b128aad9ab6313a9ce8b171f7d73264c67f669adc5cf1f0421d81f654dad1419b620476abb59dd54e1aa03a74a26c5c93813f6fb8575fbd97d4d

C:\Program Files (x86)\GUMB50D.tmp\AVGBrowserCrashHandler.exe

MD5 f73e60370efe16a6d985e564275612da
SHA1 2f829a0a611ac7add51a6bc50569e75181cdfd58
SHA256 9cf076866935a0c64366efaeff2ec76d45ac816030ebd616fd5defb1870bc30e
SHA512 2e44e87c285bb7b72d45c8119d08ea6f2d13cea77cf0005a3cf530790bb86c7f2df7c5edac9d86c9d7214abb224738c3bf6b31f6bf104051512bb1de133042dc

C:\Windows\Temp\asw.a4926e31f59569ff\servers.def

MD5 8c3eb2d922420bb8df2c7b0d4bc77a2d
SHA1 1044de78798216d71bd3a0024bd1551e72f0b6d8
SHA256 f0a8f32fb1fa13ba830838ffbfdba6ec457b059df45485f167d378bf670b0a13
SHA512 d5b7b33bfedef8d4a2db4e49fddb5d578af3d69519a322183bacb57d6de0ec8d16c260744aa31a4caa682999e7395b6be0065766d342b20a525e52f07bd1d22d

C:\Windows\Temp\asw.a4926e31f59569ff\asw5858732e4f2043a7.ini

MD5 166ef029697d4826b18f6feadbcc9f75
SHA1 afe2ba17c110f97d1d9965353f2db8137c0635d6
SHA256 de798d481f7772c14359b3555dbc72c587d4862262e07d57127737472d5fbf8b
SHA512 e049a5fa8fc065d7af79f90000a4b3bc2a24f2d785aa0af17a4fbbc1a6d3bda04f9f21e523f6b42260cd1b11e10abf624ab4795367ae9f6d635e0c74024c6ee3

C:\Windows\Temp\asw.a4926e31f59569ff\asw5858732e4f2043a7.ini

MD5 66cda15879454b8cd03cff0636db052a
SHA1 bd9e49e18b4e9b92761800970eb2d142ab85ef0c
SHA256 fcaee383856ddaa940c5c3da99352092baddf21f5423ea3543e6d40e209ba10a
SHA512 9d0fab99aa48ff106a760d9c7f949b35b6b6b0adc7b5d23332889035eb5a34868ef1879e6e92680eb7a744878697b48055ea8d19224bdbd0937720ccf2c782db

C:\Windows\Temp\asw.a4926e31f59569ff\config.def

MD5 f8d7dfb2b9b3c7081116d13b0736269e
SHA1 224f491559c73db08daa7abada1a9bd04089e3ec
SHA256 e3eab2e5b6365c07014ad192b2115d7c9fa01c030bedd23256edf755399f2575
SHA512 ddc89431df2673c97969461c30f283bc78e85d609eb3a4e053a76a0ba67668bb63b9e4491a039154e7d9d8a47816522899e30a6928f5d7ce2fc1d9c026827676

C:\Windows\Temp\asw.a4926e31f59569ff\servers.def.vpx

MD5 6896fd9fcf256fd43946369f11cada02
SHA1 25a7e305378ec225c6f98920b786b2ce71e4e0d1
SHA256 4779cb7556a32e0d806afbfabad7b98169dbf1b9b44a4295ff6b4bc6ad9578c3
SHA512 2d66e2dd08c7966e3db362bb70a2c10847ff4800b37ff8012e24a60caf5f2b45ae4b57b507f7c1148f6a9dc0f4a41502d90e2c2e8e211c428128ab04048fb3b9

C:\Windows\Temp\asw.a4926e31f59569ff\prod-pgm.vpx

MD5 52b5d1f7a066271092c71d0e6a68e57b
SHA1 b561ab41590bba9b85f0251d8c7a86e51f322951
SHA256 014b76c12c9a392589c997b57f461b3a92f0c00dce3bc8310f46e78f32dd0beb
SHA512 afa7ba79cf47a52104cc4023c03867e8b0683dc771b2d3f7f523408f9e0b7f0472d30deea1d3866275cdcd91de37c862cbe6868024ec2ba0a2963632c4c6c56e

C:\Windows\Temp\asw.a4926e31f59569ff\part-setup_ais-15020c62.vpx

MD5 d5b798d8816b252e7d718195dfeb8a8c
SHA1 860c5807fd491aeeb12d661d8cf2ecca4ca1639b
SHA256 75176962c8691f84eb299a555d4c82796b53a12161f1e6616ec50cf97393b499
SHA512 16cd2e8f57c05ba2bae79de39867cc35178a6d99cd035d7d20efd8788076360a408affa9b6caf3ea09daf5c32834b995e47b1ab4ec29fcc1fdfddcf0ba96cce5

C:\Windows\Temp\asw.a4926e31f59569ff\New_15020c62\aswa3903458b18f8005.tmp

MD5 bbb61ad0f20d3fe17a5227c13f09e82d
SHA1 01700413fc5470aa0ba29aa1a962d7a719a92a82
SHA256 39154701a5a844eacf6aa1ccc70297c66bda6e27450fd1043778cead49da859e
SHA512 c614246263664268970562908c63e933ddda0a7f1c2f06b63eab9a06a2d8253356636cac948f709c37e66929d5d8b57663bf5f0d34fcf591ac7461c2af5b63e4

C:\Windows\Temp\asw.a4926e31f59569ff\New_15020c62\aswdfce73becfd9f8c9.tmp

MD5 43dc9e69f1e9db4059cf49a5e825cfda
SHA1 519298f8a681b41d2d70db2670cc7543f1ee6da4
SHA256 98efeee831a7984d94cf13800aeb1de68e79bea0bb5d95ff7adcbb43b648ed4d
SHA512 d0c07cb1e251f2135fdb21893e6ca70efc019a8b759274c87266fb5a2c48ebc0126aecee0020bd48cfd65ef2f794b81b1e417000c91db18e2ac128c86eac4079

C:\Windows\Temp\asw.a4926e31f59569ff\New_15020c62\aswd095518d680d38f9.tmp

MD5 c545527e69a46359a4a45f58794a0fe5
SHA1 e233e5837bfe5d1429300fb33f12f5b54689781b
SHA256 8d86976b5ecd432772d4ac5965ff86bff6da04318f231b3e7ea64818de6211f9
SHA512 754c891b4f582948ba5dd776a87edba35f96453a540c20c5dd78f2d816bc83161e0d3f8a0f6052b5d0835f5a0b4eeb6d7a871aa611bd74e61ca25ea7046837e0

C:\Windows\Temp\asw.a4926e31f59569ff\New_15020c62\asw04d9e31df7d61e1b.tmp

MD5 917a284494cbe4a4ec85e1ec768339c9
SHA1 47ccc0a04ecc7c3c1ff79bf42d424cfda356137c
SHA256 57cb03fbc4750eefba0079c3fcdfc1b077e4347e0438f41e13b8614e7f11b772
SHA512 90849e580c9da697689c664b126ed97b085bd2fd6016ac9193afd7a7ac625c76db84c9bf55a4bd0308da889a16b27832383738de5ecbec7e97bbd5b7962999d8

C:\Windows\Temp\asw.a4926e31f59569ff\offertool_x64_ais-c62.vpx

MD5 ce4d45d0b684f591d5a83fdbd99bd306
SHA1 e89637b905c37033950afadaca2161bd5b09fb5e
SHA256 907e054fef8297e3cd31d083299ff0ac495775eaa928e3e10e7000fdf6baaed7
SHA512 af0aefc20b9c9c91f63f34fcd70c27e9e304073d51cc9ec45113ab360dd5ba4ad104b5c752e022b8b153f435527b56f6bfbb6022dd4bca98f8d1778e2bfc97d1

C:\Windows\Temp\asw.a4926e31f59569ff\setgui_x64_ais-c62.vpx

MD5 0b830444a6ef848fb85bfbb173bb6076
SHA1 27964cc1673ddb68ca3da8018f0e13e9a141605e
SHA256 63f361195a989491b2c10499d626ab3306edc36fbcb21a9cd832c4c4c059bb8f
SHA512 31655204bfb16d1902bb70a603a47f6bf111c0f36962fea01e15193d72cc1fffcead1f1a7884d2929ceb77ac47c640ca8039a93b4648747496d462ffe6a05e65

C:\Windows\Temp\asw.a4926e31f59569ff\sbr_x64_ais-c62.vpx

MD5 e38cc92cd980a55d811316ac62883e14
SHA1 fa83737abe11ee825c3da6843cc4d8e3b459729a
SHA256 be4d8a5dc335ca8446c0dbba4ee4ef07553a5c242bed560f11aaef4793855e87
SHA512 1422c8f94556ff0409a3cd1ff581f6c4ea56b01be36ba5b2c0e72465f4dad38391eb85bae28b079aa2f1204615d32a17b7e73e92ffcc9964f39c79626b7afe16

C:\Windows\Temp\asw.a4926e31f59569ff\uat_2044.dll

MD5 432cdc03cd3041971ed4b4fca1388917
SHA1 eef494ba3a8ac2d601e78fa350060d0603895ada
SHA256 0c9969ac05d3fa8773737dc63891c48963d70b8ba4f69bb03722ea1a9a005cd9
SHA512 066c59e63cd24df1176316e9d0d445c454ea03d9316d05f95664b8eef73165a27d2eb37264dc3fb3ffef76cf85375ac6cd2f9ef9849f35069ec8bc34aa492aaf

C:\Windows\Temp\asw.a4926e31f59569ff\part-prg_ais-15020c62.vpx

MD5 29b9bfd25fabf42939e3a6877f9b3ece
SHA1 c30d865bc2d680311c68eb0bed0e356845f700f9
SHA256 ed586b6ceb3e9dcc7dd21dd7dc7addd89e71a2b90039fe15b751b367e402d475
SHA512 a22827a2f9bc3de3c6c0ed5a4e36c383b5f8d4989fc543aa1a4852034c84055925df7456c1f9466ff3923de81f9d58a6f12d8f24e782bb2e805b908ef814a90e

C:\Windows\Temp\asw.a4926e31f59569ff\prod-vps.vpx

MD5 2edc42dc7d861efa0697b83ae25cedd2
SHA1 4e840b902179066e5ee844443981f97bb1ea3072
SHA256 bf4246d22cfa9c387f006747b6966ced55f7789808aa1ffce72e2d47760bec33
SHA512 c3d13c6eff5de6da5dfdbe73bc2d9405239958d1c003daf40b8ae5e320fee2cf0702a20dab6df2dac46aae62ebca6116d2715bccde9176bce3ae9fa838f30870

C:\Windows\Temp\asw.a4926e31f59569ff\part-jrog2-1451.vpx

MD5 c1654d1932f2cde84cdab37ba572d8fc
SHA1 03c53d652684b24c30d0a4fb7a5b6e75020b03c8
SHA256 338cb2a6d14fe36172134adcd416e72ade13455b2aec45d76638935e046b2d73
SHA512 a1598f3f7efafcb4153075d73a5b07b2762cbe08d3be0fe8a16db07163e596e4159e154479f4ab77902d56e072119a96647bb3e7e60b4768a4a768395d823d42

C:\Windows\Temp\asw.a4926e31f59569ff\part-vps_windows-24080904.vpx

MD5 a978be15e04d046a605ea16e90256b75
SHA1 95439f00abc4892d7b8a89a647ee2f5dbc96a549
SHA256 0bb0975fcab14c2ad81e17f9cb80af018c8beae633b5b4f7837ece4ed2c45865
SHA512 3dabff3d4ced63a24d2a6f6972d253ed5c538abf5030749af30a54445854bb5062c577905e139d17ccf39293b33916a2e5cbccc46e87a71f223f9e08346b0391

memory/2044-2512-0x000007FEF3B40000-0x000007FEF4E66000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XDW3ESIGTAK1YHN3RK6K.temp

MD5 36d06a6ba7530d5b5f2bc1e2c3e1db1a
SHA1 a74005cd33c065c79ba00e691bfbee619447fa1b
SHA256 be526bd0787cb587aaee1347e4cb1cd852d3d0b0834607c2d13a1937a35d8d7a
SHA512 6b081f72d19bb84e06217e74b182b25018863d73643162ef01f206a71e490f7a5a44446408225522d0a555ccabd98a6b6ae8a25939ecac891857baf3aaadccd9

C:\Program Files\AVG\Antivirus\setup\Stats.ini

MD5 34337a7f370b1d4ddaeaaff526943c28
SHA1 24d6495b565bd50f83088c51ea06061172948c2c
SHA256 5bead349d8b4b7648230b7459c275e03c4fb29a92db9bf24391cc2f77a44f847
SHA512 463921c5b86b61c38cbeee6d97fb00a8956f4ba4396bf8f0a7f09e744eee44e72c1f85b09aa5c05994d41c0e24ce7aada75040ab159a60f6ca6d7d5860bfa7ba

C:\Program Files\AVG\Antivirus\setup\Stats.ini

MD5 eed5118a000dbea298af82081b1887d6
SHA1 265972019e59d9423ff52a9bfde436b361d10432
SHA256 245297246e8cc3e5f2ec070402517e6d7a52426e34b5a89d35ad307e14138ce0
SHA512 40ad5f9e00ea65cddd77da2ba1b9983e5b6d43ff40dc794536d2557bc44a279b2bd6321809f020619e9be4a6f107a381b166e07eba313b6560f75d4de229d110

C:\Windows\Temp\asw.a4926e31f59569ff\jrog2-1454.vpx

MD5 5d4361b2e5482deddc74b5cfef080c6c
SHA1 53e605ff3cc7871b2ed68b7a3dc2a2f020bde3f9
SHA256 9b2db631b6e4198bb280059d4ed14075590c37ea72bfd8dfc9b0bb106403ecb1
SHA512 855044da6e5ab9a41916625baa80b87c69a775e333964fbb24d3d4147eba86646685e99a4db7d331b8329e9cf463bf0511d760806d603be71bd2ed438a8859cc

C:\Program Files\AVG\Antivirus\setup\ais_cmp_bpc-7cc.vpx

MD5 370fb8113ca63fa92f7037df74050faf
SHA1 2ed9d4164c5dafbd38dc0dee0f3edf7ccabfe411
SHA256 79421461dd25e721147e2e676b0c33c5fc3897126bb5f700e8f60e0d34175ce4
SHA512 c197ad2368d138af4f0f220ffa16d47e29bbe8456e19bd097ac3fbf16fd47439218a77546312d5eeb356f7fe6ab5ecdc16f010710b1b89f75f6175a6632c3909

C:\Program Files\AVG\Antivirus\setup\ais_cmp_datascan_x64-82e.vpx

MD5 dfb14bc06277ac67224bba3003fc0346
SHA1 816c68c5489945b99dec636d7f7b13d10f732cc4
SHA256 3b50c86e7f04de527544c097fd2dfc9111c351f7fb3507fe8105cb899f69a1f5
SHA512 76957d380dd4c612c634ceb660a28d872182be35979155be0cde4f618677fe0fa31cc5d7bc7f768f5fdb0a2af33163e94950dec836cc09281dad13227c06c68e

C:\Program Files\AVG\Antivirus\setup\ais_cmp_gamingmode-875.vpx

MD5 bd3e424da9ff6e08b2710abd7b30cb48
SHA1 6a4cc2769d6a5add0ce9ee6f6f2740ac43069cb4
SHA256 5e4bec388a3e16c54250fb5a4143271202226962e2e80bdd97b8c25eb07020bf
SHA512 edb241b1808503236472a291068b729821bf6a38ec839f1bd4c70c326e97bf8e3277294986a01d15cb7f083fe8fea88a0c86b79f3a15cb19ac447459d501d777

C:\Program Files\AVG\Antivirus\setup\ais_cmp_swhealth_x64-82e.vpx

MD5 db7a407c200d1da0694f5c4ef6a92f15
SHA1 870648a412aeea32ccc03dc72f502ccd0eb1cea8
SHA256 5f0fee031ab19ff41278afba5f1b9eacf022d1c632e1b6bf3e777fefe837533e
SHA512 286490a278688967bc7bd85d6bea4b70d4bef80d47b49551f9b5354362dcfe94ea2d22a76e5b1558855b385dafee6052d3311b78ba43e3a281a27686bf9a9b2b

memory/2044-2660-0x000007FEF3B40000-0x000007FEF4E66000-memory.dmp

C:\Program Files\AVG\Antivirus\setup\ais_dll_eng-818.vpx

MD5 953cc8dab407cc320911adb8358fcd49
SHA1 4ecd20b724ca5718b87d2cd27745003902df2534
SHA256 748a4fda0713ac82afedd5c2f90848fbb743772f4c6268e70ee65285bbc48c7a
SHA512 ecb068dfb5334ecada79e0eee629bc7d4a10bf3fc7ec0044f8747e7137f65f466f5d0d6a0bc5ad9af0c6748b695a153baf431888e1df32433d8276c44b824174

C:\Program Files\AVG\Antivirus\setup\ais_dll_eng_x64-82e.vpx

MD5 a469beb68e45ce02e4e541744a95783d
SHA1 32d05acc7b266fced0a014ad07843625b1908d1a
SHA256 ea9301a1fa0ed024ba39947e9a76822c52c978397d25d0edca66d234ca012a8a
SHA512 a1bd6a24ceb0fdd07a13baae4e0a1b98ab22fe702cac4cc5f8acf182ba28879ba6c27c2b66a44a77261b16b5aec5608e0a2f18f62ee6f416a9baeb88bbb8a8df

memory/2044-2687-0x000007FEF3B40000-0x000007FEF4E66000-memory.dmp

C:\Program Files\AVG\Antivirus\setup\ais_gen_protobuf_x64-7d0.vpx

MD5 c8c85dcc856b13655d5545152f06813e
SHA1 2f54faa811dc8ec09ece27b09c20d6f4d19c4902
SHA256 6019fb4816f72279ca066066a6ae142045dbafb518c37b0d3f04d486e13bb5db
SHA512 5e033cb69ece704f00b7ca9df37ab691571e77eda7bcbc3af10fbf61613a97308ff7db60a8fb669c054df1c51b0757747fc40d43e39fc9a8dd2862504dca83c2

C:\Program Files\AVG\Antivirus\setup\ais_gen_streamfilter_x64-866.vpx

MD5 2641147e9142c41d9761b2da182c4619
SHA1 6cd4a9f62ae449ec3ef636e544b53686ed24d855
SHA256 199103456394b7ea5c6f99b02bcb452145f76f1b6d02b357f84e568b67b1e63d
SHA512 2e2839c794a82a2afd19697fd242647848488454d85bed1bcba128c2cfcbd9eab3f0f16c6436542deeb866413f52156df5a9108b8be2451d7e1e68720f539ae5

C:\Program Files (x86)\AVG\Browser\Application\109.0.24111.121\Installer\setup.exe

MD5 3154bd011dbecd86e6de6db6393b1f72
SHA1 914b3a63458f2dd05432bb5e4d8fc53966ce2ed7
SHA256 f5d036674fbeb5ae3b6d6208054151a1f280994cbf8ef80416d54cde1864d119
SHA512 a92a5246ccdcaabe370c0eb60f4fb1d7dac672db1ee70acb06f6cfe227d343551cd6f45919906717ec29dc213c56436ff4801bc08586e6a679fb1d42b85b2987

memory/2044-2746-0x000007FEF3B40000-0x000007FEF4E66000-memory.dmp

memory/2044-2800-0x000007FEF3B40000-0x000007FEF4E66000-memory.dmp

memory/2044-2801-0x000007FEF3B40000-0x000007FEF4E66000-memory.dmp

memory/1108-2806-0x0000000000060000-0x0000000000061000-memory.dmp

C:\Users\Admin\AppData\Local\AVG\Browser\User Data\Default\Local Storage\leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\AVG\Browser\User Data\Default\Local Storage\leveldb\000002.dbtmp

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\AVG\Browser\User Data\Default\Sync Data\LevelDB\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\AVG\Browser\User Data\Default\9bac60e6-8a76-4039-ad78-c45aa5733a7d.tmp

MD5 af4279bfe0838ee460bda756579f1b65
SHA1 5801c6f2a9b1f41dec47d9cc88335a47cac1bea0
SHA256 34ac120fba1e4ba7c8de65264e9446e84b37053c01a280809950a0c47486330b
SHA512 67f3104b87371a58e7e72a42754c43dac33f12cf2afa1272d0bc0a7499d0d8d38f49d3b8303d6ce2a2b607c7755cd238d1ca38a66923fd8b3d8c6c541f8ce4d7

memory/2044-3009-0x000007FEF3B40000-0x000007FEF4E66000-memory.dmp

C:\Users\Admin\AppData\Local\AVG\Browser\User Data\ShaderCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\AVG\Browser\User Data\Default\DawnCache\data_1

MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

C:\Users\Admin\AppData\Local\AVG\Browser\User Data\ShaderCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\AVG\Browser\User Data\ShaderCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Program Files (x86)\AVG\Browser\Application\Dictionaries\en-US-10-1.bdic

MD5 4604e676a0a7d18770853919e24ec465
SHA1 415ef3b2ca0851e00ebaf0d6c9f6213c561ac98f
SHA256 a075b01d9b015c616511a9e87da77da3d9881621db32f584e4606ddabf1c1100
SHA512 3d89c21f20772a8bebdb70b29c42fca2f6bffcda49dff9d5644f3f3910b7c710a5c20154a7af5134c9c7a8624a1251b5e56ced9351d87463f31bed8188eb0774

C:\Users\Admin\AppData\Local\AVG\Browser\User Data\Default\shared_proto_db\MANIFEST-000002

MD5 22bf0e81636b1b45051b138f48b3d148
SHA1 56755d203579ab356e5620ce7e85519ad69d614a
SHA256 e292f241daafc3df90f3e2d339c61c6e2787a0d0739aac764e1ea9bb8544ee97
SHA512 a4cf1f5c74e0df85dda8750be9070e24e19b8be15c6f22f0c234ef8423ef9ca3db22ba9ef777d64c33e8fd49fada6fcca26c1a14ba18e8472370533a1c65d8d0

C:\Users\Admin\AppData\Local\AVG\Browser\User Data\e3f2badb-929b-4d86-a1d7-baa9114d93a1.tmp

MD5 20f570e4ad6e336ecc9772b07c93f56b
SHA1 e5974d94bd26ddf8210f9affdd78cfd4b691c596
SHA256 6b69284d43cd2ad845b802c4678df421c40a7b60c5d5536312d57d606af8d83a
SHA512 9ba20f9e534eaa3fc83c601fd99c0468ab763e2275f1fbda476c98a07fca27695dd3f49b0042fe859970237d6864056a5c24c5ac5236468c6ab15115c848520d

C:\Program Files\AVG\Antivirus\setup\config.def.vpx

MD5 51400cbf539c8731ac06ee8e932dcd28
SHA1 45a5e04c69826e263ade93cc03dffcdaed4c7497
SHA256 f117375b8a1f7988b45e7e68e2318f9504fc3a82d0537bf2814426897e9b2514
SHA512 d02e0fee7f815ddf14c78f86bf08d0fa4e9c1b71637e79433d980a8791f43a4a6c392c333641938c2f23fb1e04dcf9b240a432d28e7adcb25a6b6b470e8f36ba

C:\Program Files\AVG\Antivirus\setup\config.def

MD5 3f8a536b939d6fc8ae308505832245f9
SHA1 0602941e21dcaaacc7d83ec8fa9b12b50b47989a
SHA256 cea58ba7dc15b64ba89cd3ec49b165fe60d714efc086913409bdc5df43136124
SHA512 df01a44014e7aeb5bc5047595dc77e2a1d17ace3de4fc5083c500a4455dbd53f11b162de9d6ee208bd3dc17486dd320a1e70cf1f7372c188a714bc76314ea205

C:\Windows\Temp\asw.a4926e31f59569ff\config.ini

MD5 ddbdf638040211261a4a09e3c9a94e33
SHA1 6cc436579946c3b10c22e069fb6cbe63535d83db
SHA256 89e1ecc027e82a619c767a3a1135a3e35a3255a99e65a2bd301eb6e9f6898531
SHA512 eae112c703c9354144a391e89deb8229a67a55ac2e111aa27d0f614e6389afaf91be36de4f3ed6617897d6315768e7fa77ed96b5f769afec34b97cf96cf9a145

C:\Program Files\AVG\Antivirus\setup\vps_binaries-1431.vpx

MD5 a747c56278d9f15751b56be5389ef485
SHA1 789689153bf63f58980ec313195ced9867882707
SHA256 93df4279d0250f034be7a1fd27c017c86ce89732bb893d4aab156695aef91cd4
SHA512 3e85153574d04884a55b791e69d9894ee20ef956e5e06ba4b3701cadddaffb076c36a1bb3a7d550c2a524289ee06754e0fb1b0f3f2d804a8b4093c7128e1fef4

C:\Program Files\AVG\Antivirus\defs\24080904\asw63b05d3829cadcc4.tmp

MD5 7405bf7eeb38a946434c4e16ff756491
SHA1 1a7e4582a73274b771fc7562a401625a63092e26
SHA256 c5acb735f54e4e99530700931ca353e0a29703b257f762ed2794180ee857a816
SHA512 c1bc03e45ca8593a008c1dc8b063cd8ea527bfc159d389238346e3db09081b5f957fc4017a11ff247555252254b0de48b5569661eb5642e1a9dd9eefb71c1484

C:\Program Files\AVG\Antivirus\defs\24080904\asw4f636de5e19b85dc.tmp

MD5 78092cee43751e226dd674979ef2c534
SHA1 48646e2a5a5f8c839a99725dbd7dd194ad64daf3
SHA256 155c5785b53ef46af90148ac1e078eabfff1bcb509dcc8593e4eab8aa451b37f
SHA512 3d81eb71d7ae4278154d8aabe365cdf5c90cf9d53d84e4fb3b18c3a7d13535877a87d80fd8c34c386fae735bc179e087ae247095f57e7744861ab52c1dc26d5b

C:\Program Files\AVG\Antivirus\defs\24080904\asw244dae73a94b161a.tmp

MD5 1f89af08e1d80719d2528e3b8790ac38
SHA1 98992d30c33dce63825c7d46de038b5b4ebbf2a8
SHA256 14ac7cf404bd3a0e808c3200952d41dbc016b301bf40ca88b6f412545a8de6da
SHA512 c018ca0d08d8a98c370f9f3b0308a9e828f6774b63e15ae83a1f71be0577e37a52fea99de115ce6154d26a54e7d859276126888727eabbf90baa350aa2ef6866

C:\Program Files\AVG\Antivirus\setup\vps_binaries_64-1431.vpx

MD5 afd3cb6adc7293a6a4d37b602b7b469e
SHA1 175c1db156140c9f81441adbd28fd687c0ac272d
SHA256 d9645d2189a93bac9a1ef39d92cd9f68a4ae9ab1d413e61f7ab66b2584c19497
SHA512 9383e5175279c7bab1c73fded543dd47ca9b007a08e67e74d7edee45ed8d3d268d914297fa5d3dfa6d01cc358b2a03c7fe4be9eecbff71a3b13c5981c2fe851c

C:\Program Files\AVG\Antivirus\defs\24080904\aswef78f0d81cf4e34d.tmp

MD5 0eb053def1e5bfe167be408552444f51
SHA1 a0dd0b6a62793ed2298a8575879b3a97616f7519
SHA256 391ba0591dce4e5b8629d055c27d3849642395c7173d83669e9a3a1dbc71fc9a
SHA512 dcf8c5b63c3df86aba823c553a4d6faa99503fe2f604b67c3d2bae8d0baaeddc96315a80f98b241522d3381fba50a4932b547fbfe8dffeb2747ef9d39723d1ee

C:\Program Files\AVG\Antivirus\defs\24080904\asw00e226a15015a36d.tmp

MD5 6c9e54d559caf573f1a94f1bb6a0dfd9
SHA1 79a004fea5b4047fb3b8f370e53a50f5963407b1
SHA256 64ccb9a9ed854ef2e9f4e9bc3ec67afcd3faee3c57179946df96e1b231ee9635
SHA512 af28e54c7cb85587c483fb83c918c8c122bd70c36447a272281bf7837bd2c1db15705c580d7a702dbcb2962bdee312cdac86002b938fe1ce5cbe4744467487fb

C:\Program Files\AVG\Antivirus\defs\24080904\asw5cde7495babe8caf.tmp

MD5 e17ccd243e7cfa99eecb76bb1601580f
SHA1 93f9dd0edab5ca1f6de41059888649853ff12c5d
SHA256 e6db40aa5fe4c767457aa846d5b0859e4e7a0af536f6b371d2fb0fd8df28bdce
SHA512 5d0ffdf4a48ec859ac2c37b1f0a726ba566fcc5cfab2be8c5480b1689b53c493fe194836b0e7ba58a177d5419bb834dc9d758819cde3d2c7209cb496727a509f

C:\Program Files\AVG\Antivirus\defs\24080904\aswd2e898f240c6f053.tmp

MD5 bf71fbd7f7e81d1d7e6d8aaa7ba33735
SHA1 cac0836e4fe65428c976e87d9889cc606042a3a7
SHA256 102fd8c057349f78830289c602960eaa46b627893a700265d8df20a264f301ea
SHA512 f955628d1e2872cdf5a06a3c8bf7b6a91d2d438055ab0027fada474e97b1bdf4c31c87c8e6a55cd8d47b46bda4d2f8aa34887565455aabf58a1dfc01e5986469

memory/2044-3399-0x000007FEF3B40000-0x000007FEF4E66000-memory.dmp

C:\Program Files\AVG\Antivirus\defs\24080904\asw4f9b49a53cc01a43.tmp

MD5 4f556e108c37fce22e412f08ccb0ee06
SHA1 b64383d40f9e75560eb9cc2c7e8d60b73d1c22a1
SHA256 a35f6d5fbe88475474faa57f7c130f58ea4ca8114d6f31f26bbf041b287c2b33
SHA512 db333a5310dc9eacc44aaedc2550b0467c0215587e685b48f1e6dd07df1a4f101504f89aad4a62b7f5b2c15af9992658e261579094eb0f58308aea8f5ed6cb11

C:\Program Files\AVG\Antivirus\defs\24080904\asw9ffbb81d119dba21.tmp

MD5 f0833121884e6868538704c888f4b4d5
SHA1 2b63c839c07d740ed0c0cc423a3897cf5daa6587
SHA256 b993be7f4e1ecb705ed06bd3f07cf41554dd24543a1fb9250c49da277ac4d67c
SHA512 79aab4e0b5dee0bd70ee6b48940ae5ff88dd1037f5b502cb3ff61fc9cd4f6eeb38ce5d61d552f35bdc7d7e24e6215c84cd56e2a02bb915b4511045abdfbe6c34

C:\Program Files\AVG\Antivirus\defs\24080904\asw21cbab968b7d6e48.tmp

MD5 b96b3a1b23272d3a28f648efdad16116
SHA1 1d46cd603ec500c200274931dea210f8e27b4ada
SHA256 6496807ef3da6621868ff770a278901982611098e7fc87f427ad495933fdf36e
SHA512 21d777fc7e99e810569d39cead4649c151bce8c2f5c43516daf139dc65fd4f8a165ad0c10846e36313b2307e8439130907a0d2238fe2b3e4eafb849fe74e7d14

C:\Program Files\AVG\Antivirus\defs\24080904\asw4a738b60a18bfd1e.tmp

MD5 b87f6fbb477b4b8249f6a5e2f8c7ebf8
SHA1 7e672aa70d2a0224dabe442a5052e22f7d6576e7
SHA256 eeeff3c5c6d57f6d12edbf617f5a5ef2df715f3625714e76715c7b56ce4f20ad
SHA512 75fb98c9b79b2fb4d80805ed62748b84bdced210bae4c9358565d0e5f3fad88d91c4e36847654e08bd88b8f735815b661aaca5ccf75d7fc3cd942fe6c56775b0

C:\Program Files\AVG\Antivirus\defs\24080904\aswc410db05c661cec4.tmp

MD5 6ee60383d3c8e1470c0a811a252523ce
SHA1 8f283f553e76b763a52c57e0fe08a306d9f32c06
SHA256 ab5e7a15b30ff859fdb2cad6d7ca15d0cc79fa799addd435abdd213bad0c2608
SHA512 9e04e7cf28a03fac44aad0b6ff626a80226cade081447ad46f5621eb03c0f15a1a825043f257bc99cdc77fe2364789c296b5e378b3454583365349ecc1062d70

C:\Program Files\AVG\Antivirus\defs\24080904\asw27dba1f8a60273ff.tmp

MD5 9d7b824514e49efb440cfe95e11b6b1d
SHA1 79b6215f6252e27db81d0167ee7828ac5ba102fc
SHA256 2b9b2e2df17a5d75bb7f96e79c933848c996cb0c0d1ca09c241e7b67c9bbebf5
SHA512 19961b09a7722288349e3c218c664efe59fc21109e65a5c1e2ae3c1262c928092a492fd732cc026334b5aed6420282c1db994a00bcb451d762c8dd957f0f28bc

C:\Program Files\AVG\Antivirus\defs\24080904\asw334f7ec85e7c761e.tmp

MD5 e9010d41b6029bf82a43274bcd088e6e
SHA1 6d00691e5aa683d1080b6af4296399ddba93b5ac
SHA256 d175b9a6c9676ea07fdea312e3df02a6ee0c1cc60637b72d8014ba09c962b612
SHA512 f349ea5093e18bcb585935beaa17e7d1e92d48fa331a75a674f279d5b632a16a02ed606c00b1f0b3309a9c11bda6b8f4358cf537d81fdd27036c77ec51d9833c

C:\Program Files\AVG\Antivirus\defs\24080904\aswe86d4b38ab10ccb5.tmp

MD5 ceab0661724bd5511e3a0481677ece0f
SHA1 6de3496d38a466020f48163aabe41a67f06a5dd7
SHA256 407c07eec4ba3aca4cf4581969a934ef6e05deb8448ee8fcf564a43707a372bf
SHA512 098ff30766f4d765259d8e870710b1996298433b9de92b875cf00051b214db96e435347fb0a7784d75f61b75ee4cfb7d97f0d2e5a04d11a903543741ff368d48

C:\Program Files\AVG\Antivirus\defs\24080904\asw0462481c01c36536.tmp

MD5 ad4e7939ebc1538986bac16d0c1317f3
SHA1 a25ec16e6f7675c65a86a114e509dc98667336d9
SHA256 4ba75dc56cd91e9299b1c975cbdb61bae7f754a176d6e44230fdb85b4694be87
SHA512 9a4d8f4fe64e969e1ad6e35205d37dfff08e4ab5d8d681b23c10fa81df3742a298233b7685bb78674bfc19d81f0cffdfffc0e57bdcced3f2cd14d13733ea1c97

C:\Program Files\AVG\Antivirus\defs\24080904\aswd4746b0a63fca58a.tmp

MD5 1317820cacaa3fd641a3981ab33fc233
SHA1 8a5810462f3f28a2123b04bef78b69f9d61c0e71
SHA256 fdd2c65c2c0b76b30134f754d6d3286cfad8c8975aabd4a84326c789a66042cb
SHA512 35b0e19aabf4ab6def1985f3af55552f3cf3c6205e9f546482a8a9335f5a39b302ab13c4cbd5ecaaa4fb70139068a8b45c87320e93e808f86a0ed48cf590b68b

C:\Program Files\AVG\Antivirus\defs\24080904\asw9618d4bcbf3df6cc.tmp

MD5 b8d2b091976942250f357bb78e79ba54
SHA1 bfd12a9ee521002242eb6eb63383a09a27e90c33
SHA256 4e76a8af1a24645a399cefbfa13036d924a4806a717d5d1278143de89aa90017
SHA512 c64ef13cd6cfb3faf9ba9d2b55b772a88d6eaa7fc2b54780bd273a8546672f24ddccece076eb4e191a174362ba4aeea611f473d8a51946126d54d3538ef05d45

C:\Program Files\AVG\Antivirus\defs\24080904\aswa0a8aa1dd9aa0e3b.tmp

MD5 447f3e80b7b95c3679e7fd9ce4c4c690
SHA1 99e360160c98ce816be641dd2b45013c9fdaf0f4
SHA256 eaba459e2e1fb1ed655b3fe0c95988c1319758bb8425a23704b1ebdc3f084b94
SHA512 b6f3c1ff05c2a5a415c205bf1767aa02d2414f147b5daf02486002b36fdf555f89a9f6661fed2259e97200d0fb6f5548437f18667736897397f8e229885ade20

C:\Program Files\AVG\Antivirus\defs\24080904\asw1e84ed25634153b6.tmp

MD5 a21bf2e26a99812248d05a4694096bfe
SHA1 01ad0ac21b9f9d85d6e39e692cc5a7406f54c2a4
SHA256 984dc3dd2d7575ea5e75e33ba608f6fafee5fc00c24e29a3bc60b0209198572d
SHA512 af169542afb970f210d4faa911e36bb082e5e02d2a6e939929f7bdb588da90b192839268dd6586d66f9d70760673e3642ec4a1aa43c473a0cbb7f6c1124e92a6

C:\Program Files\AVG\Antivirus\defs\24080904\aswb330835d3dcf37e4.tmp

MD5 b47109030eab67aa6b860b7afb8558d0
SHA1 60fff00b85aa8146808dae8f3b772e078d9de62a
SHA256 b7bdc7bc759e22708ca7c7535f1b80baf015d2b4fef6c2fa74d3af1488130ebf
SHA512 097ba6b06953f2eed350feb84648251db734eec0ac390a8af31a5cd11cc9211f58b58fad089af54c704230f038609d34f85d0d2359ac8000538b1dfbc4b0c28d

C:\Program Files\AVG\Antivirus\defs\24080904\asw2ce45dea3d13d1c9.tmp

MD5 863ed4ac7c769a8c70bfe3a041e0041d
SHA1 b1629ef0e39290add740275047d4a5e833147904
SHA256 7ddf83a1dfdcd81fce57634f9ae0bbeb1279d8df14fd15fb479bb82790b48cc2
SHA512 57046b98f7c9b4a4467bb0f13f4b0a8a0b9933ca83ab5b06f612f3d3823ed2693b4f7492c43d033af16dad292c5e1305ee070f9499bc049c75c6ff4eb9a483dd

C:\Program Files\AVG\Antivirus\defs\24080904\asw8171a50a97bb05db.tmp

MD5 91cdd43c8fc918bd916316face019cc2
SHA1 7d9ce5c4d1dd4ab9884ad7ceb0b10f1f072440cc
SHA256 3608af0e194456d0c02142e71391ed8cb68cb6e7a82dc8fd4fadabd8464195e2
SHA512 24e79bc38d542818b25c714d831a0d8ed26b66460033c54ba9f3a6a4c23f7448d0df81a8fce192dc6ef48fdbf6c9b72ac52d65f3f3e5754291d60d67ff62447c

C:\Program Files\AVG\Antivirus\defs\24080904\asw5d0a7cfb77306c32.tmp

MD5 bc1c07e95738f39e2bce20348fae8184
SHA1 0a55db6f557deec6444696c8938f3fe05f704499
SHA256 2d0d5acfcf1a738f767eb6e938bb25b694b12432a7603bc49912b5590109fb26
SHA512 918abd15c67e591007ab9198bae36a527923d23ebdbbed8cd9415dc7fb14535f052b79790e03c26a518fe9196d04ba78e238aca1e34432935d68cc08f58eeaf7

C:\Program Files\AVG\Antivirus\defs\24080904\asw5b3ac3584c97e416.tmp

MD5 9f4acd187316a44f15040fa86fc8888e
SHA1 5bf33600272b263024e6156b2e8a35d62b72904e
SHA256 a5622af54f345f294f86f61e070f57fa8243405fbe680ec4a42816eb1458e8b8
SHA512 4b9bea1b83bc3220a43a433ac6e87c0df41d861654437c38b78fd1fc4e69f8ea2fcc5a885653f87483257d49054c21f67ee6b0df828a7d196eab6914dd2fc790

C:\Program Files\AVG\Antivirus\defs\24080904\asw19f2c81d2153cd47.tmp

MD5 6b08aed950f92777b986b8af61dc26c4
SHA1 5aa19f007426c6e48e60e913eeebf00ffb6534ad
SHA256 f84569233c337f78b1e7367d3fdf72dcef6e7f4bdc7d1daf2e59c40b8a6b6d57
SHA512 3c0bcd69b6f78f4a2b78007a40ff8131420185556b25b692fac3df0197f41ff1e9507bced865079e75f0d41987809fef9227cd488f21c8b80af3b941789dee83

C:\Program Files\AVG\Antivirus\defs\24080904\asw05cbce53f1915434.tmp

MD5 f48ca555dfb1be24aba2120375332a89
SHA1 d107869e2ce918c3853b81ab97cd1e87b10817c1
SHA256 bd034b1ac6e2c44cbef722b3a18768e5724106876aa81488c6227e88a19b8f5c
SHA512 1ca95fadfb95e5a63d254905bde0c947389742901e89a947613a134bae2a16edba175deebf0f5d07f3fa39aa60023a704dc35a68d85a0c8d57e240ffac9623c7

C:\Program Files\AVG\Antivirus\defs\24080904\asw252028aa5c893cfd.tmp

MD5 e60021eed73aa582166e0b9a4b7262a5
SHA1 160006fc7e96292dd890b81e17229ef9c24bacbc
SHA256 1cb915333c11b59aa7fe18100c2f2b15c90cf15ef7917358999ac86756244303
SHA512 db77f0afb22ee63023b56035d48fb98bae1bd0aba1efc30372f79ad0f3e1d26683c86e3319e3029599832b237f18777ad6e00954c03016767a77b2cbe3b10f1a

C:\Program Files\AVG\Antivirus\defs\24080904\asw13c74bf65fed43f4.tmp

MD5 9ca55760364eeaf5f6c21f6560c892a3
SHA1 9feb5e721da698de9fc9b38771a8fb63225d7d70
SHA256 24b41784a71a687c9be72f568508b8bdceb59af6365aa0fa8536d2c0051b48e6
SHA512 93abc2d7461132686623fa3956c3c58448b4e85b10cdb56de1b26865b354ccd4cf8ed02ea9919cffc57fc21cad76ebc32d6167e5b0e3fe0b5dd363c85765ccb0

C:\Program Files\AVG\Antivirus\defs\24080904\asw0d20a5d43e55bccb.tmp

MD5 ec31008e738eb8b36da94dabaa2dc3bf
SHA1 ff9a10d2a5117fc2067b95eb061d4d7dec95b329
SHA256 c3897b5dd4f05623650d14fc1dea1dab1beb4cc648c094a832707b8f0cffc035
SHA512 941e40d58624a9742848895ea011e7aaaf85e2b7c4553df779cc040193003fde245c219609f7754aa927fb5311f82cc1a73aa5e732dbcb2da8b5adae9a1faf2e

C:\Program Files\AVG\Antivirus\defs\24080904\asw45c3d58664660929.tmp

MD5 29f9b605dce1f6e1d0ace7c3ca89aa8b
SHA1 5b00b6dba34e90254369fca547c12abc415091a0
SHA256 90971f5a09e220ebefad248d59e5feb6bb6e1b806a1599e1bae1e2f18c986b3b
SHA512 8f111e838855a3bee58faecd6683104fbd68bbe937e88ff1df72fdcc8ae7f050d806aecad9a29032dfe9d2cbb8a3f52c37d0a5cb8d9b011aa5c510048edb89b6

C:\Program Files\AVG\Antivirus\defs\24080904\asw0225fe1ef1c20e79.tmp

MD5 7732e403b7a9d018e07af6984874dcde
SHA1 254d7b0d3355a8f20cd3a62fd0efce21bf68072a
SHA256 36d6da4b2c780fd2d0b869ad62a36c78f97329d1c94fac466a70ce9417dcc7e1
SHA512 a4d31672dae988ac1edd966b8b0691e860aacb9951aee4e76b196695b65c68c6be48efb22475a9ca6c8991da4b40b03a7ccffda9050b445cb198e0a22978eb59

C:\Program Files\AVG\Antivirus\defs\24080904\aswd2c95c64af92dede.tmp

MD5 ced1bced491069f3b1fe35cbfb91bb6b
SHA1 836bf0342531aedcd6866c8a19d3e2599c576916
SHA256 be36bd28ccf235743e6a8dd8a8b944956c520d56ad7503f31a157e6876694fc5
SHA512 e882ef19b90843cd483bf44826f4b8df22e1a44df2ec83ea529902280ed532d287ff132701c3acf1b207492c9a8e55f738aa88902c936829d3e8b30d6ba85d72

C:\Program Files\AVG\Antivirus\defs\24080904\asw7aad590eac00a32b.tmp

MD5 a65d7854311248d74f6b873a8f83716f
SHA1 d091d528b2e0e9264a0d377487880607ac870155
SHA256 68484e75c86aed8c948d83a9c55ca4d0b557987063f5e47493142d8e09837e4a
SHA512 fe87aacc0be8e6cc9c05725f7be3392ba850171e028f157ce786eb1ab6b5f06dac99b21394967253b6a7d0148b0013a2fd91d6d55afaa7ace52b066c60d4a79c

C:\Program Files\AVG\Antivirus\defs\24080904\asw60a4b57a24596d0c.tmp

MD5 08619fa53e254e623fe88a89379d7703
SHA1 8c5bb3f8a3395340e276bd912e6a960a9c78a459
SHA256 97d524d17eacf99f01462be9ac9c9a341377049c47a16d0b69906dbffa7c6d7c
SHA512 5e4f251647b6c9e03335602ccdd8d1d19a7b1f2614db10c90cb3b62e467f6b008e54b97c4439719c02b2bc0b816fb3ffbb6b41fc27b4acfde263e483690a6d77

C:\Program Files\AVG\Antivirus\defs\24080904\asw58ed329eefcfb3b6.tmp

MD5 98da1568505e109a9ce1998252699253
SHA1 59a9af8b4fad252e6c49bb9215bccf9b86d7b1ff
SHA256 329f95ce6514e24f73c9d88a5fc9dc3c248e1bb4dd3b80976f7ba6752fbf1120
SHA512 5578be48f1c184566103fdc09d92e5c7780d370b4e8d25c64e8e83927c42ef49c74660a0770bfbe70acf97ee64862277df2607a18a04f4deecf742c6cba23d14

C:\Program Files\AVG\Antivirus\defs\24080904\asw7032c394e45582ea.tmp

MD5 82622eebfe6a8d0caa74c83e708b9465
SHA1 c514c7e65aa23915e1dd55d3511dd128a05acb76
SHA256 a9ce152ff3cac00d11e6080038d3d1d47910d994fe4e5473f5646e3985852711
SHA512 27bdaf2c78314198d41517cc6c0bd1396105ff0564af8404dffe9c7dd5d786bf56b8686cc80f207a410cb9e2dfe46c5bb2387e89dee50df7f84e86d2b508ac81

C:\Program Files\AVG\Antivirus\defs\24080904\asw98b7f954a9c18657.tmp

MD5 e77bad3a289cd2cf13b0c70631f59905
SHA1 c9421230b8f481fd78e8927ff0e37bd6c448c9ae
SHA256 c7ff29bec93cb47b5c2568416f9133aea9899e4ce10136d31499bc38299c2786
SHA512 ca1c9f2618ce1e74c8e63a948bf602caf0b5b3c5c87878ce717b734887ec4c223d63fdca76fdcaf94f0fadd779ac6285c0ba9f08deff3e95698e23d9b8133903

C:\Program Files\AVG\Antivirus\defs\24080904\asw24e070bbfac2e323.tmp

MD5 b055afc25fa68acb7fb20114e8a1fc12
SHA1 b20b5e81a957c90c4a211a9bb8c2c51f97bff9e9
SHA256 3a14537ca4e6f39d47cb8cda0fc81e2970eb3a112cb64c5ac4dc5bd0bfe53372
SHA512 bfd3e6122858691b27f67dcce0b84a2f5032b5c83bbc68f2f1a5d2d2f411fb0ac06d7e2a7f99beee1671902dba1f05960dee9f6c22308af0befda4777cf25704

C:\Program Files\AVG\Antivirus\defs\24080904\asw9d51bead407643ca.tmp

MD5 c1b09a62e05217249fe46b66bffd36f5
SHA1 8b4fb539d693af0dd1ccb049bc5f250176107a33
SHA256 c6472d9dddd9700a14b17d70921fd455f2edf04d2bd0655448ced66493dd69e4
SHA512 8bc829cf8e1d8e93ab36b774cc195e93966e67e49928ccd83728606ce0c33c82a9381d84f2161e0f486eaf5f75f1074220d3d2741055c18f7646ea3d8e7b4611

C:\Program Files\AVG\Antivirus\defs\24080904\asw754d9a828aa2f8cd.tmp

MD5 7f67ec86088aa4cf2c4000bc6cc6e6d3
SHA1 2cd4cacbf2a3af3630748a6e2d28e256e2815b8a
SHA256 23e93ab9f43097ef01877e9279b705b12f6c89f19961001733ab40982e476656
SHA512 0e697699017b55062a584582362134eb4aa84e8f2eea1a352553a05c49466a160c8db48ffc10c57bc65f1e4b3de6229c62cddd44ed09241d0d538fc673ba9397

C:\Program Files\AVG\Antivirus\defs\24080904\aswd7a670d253958ee8.tmp

MD5 25eb0ed6e98e561aee65eb7e3c03d160
SHA1 49fc1450dd3be0fe22dcc7a7136005ce53bf61fa
SHA256 90d91e1b3ce3e79d7b5f5953112f794413c26aea62d1680c3300039d31d249cc
SHA512 4a238388f8a144358bd323a344d09c25410f8d87887cfe7df0901a0a0c6a7b385461985f50ff8560ca21baa353dbbd108ea5bea44fad50e82a3fb33d391fe568

C:\Program Files\AVG\Antivirus\defs\24080904\aswdf5abb0315c39b36.tmp

MD5 86be9e219637a886943cce93741beb01
SHA1 0e3c42bcab50c93b584b8a258ee6ef6107a6d03c
SHA256 2814bd0cb372999d3f755b523a610aeb32c752c40889683f209e0f488a2b43d4
SHA512 b13afbdfe3e09ef344665272dc52f9e674b4cfc23bcd0fe5cbdc25ac811f58b30807cd6d778565e5664cba7e49eb3bfd6f8160d1be96aae3aabc8a6911bb79a6

C:\Program Files\AVG\Antivirus\defs\24080904\asw483617f2cc71f2a1.tmp

MD5 a9e9e45238fa588976dbb5965f539e24
SHA1 d28b5fe5b79b5d2bbfa19f356588118c55476390
SHA256 bcc3b7f08bd136c37f801edb705bbcd24dcf1db02738cce66174e4c13585ac1e
SHA512 ef13be912de4d0cdd30187cecc8332f1bcc721677a6b7bc15f421cafa51d42147168065c0d2620fb7e7b1b7392102edd48f0f7b05ebd40718f5e55bc932fb520

C:\Program Files\AVG\Antivirus\defs\24080904\asw25318ba0f27bf7f9.tmp

MD5 df956e0e5b6776b3fcfafb3a61f7eafd
SHA1 1c8e6fed3c86b1d245c0f45e84109826d6d43e4d
SHA256 708276a94609b94bea1cd6520ee15179035527cb513f6a9b22e1e7edaa829ede
SHA512 ae11b972e7d127991c4db44942d7edd6da1dbb7c97ac41eda89f3f31100bd5f8b31dd7f5dd25ff4659f7df1069198deb9c4ffee2360c563af78a96ee8b10fe8d

C:\Program Files\AVG\Antivirus\defs\24080904\aswf84d06fe268e8c76.tmp

MD5 a0803f17aeb00fb45ac84c6df2fd060e
SHA1 a081b3faae8cf13ff049889352f7fb826e76ace7
SHA256 123c6adfd1782f212a36c5836e3c4bda189e99e5eaa3d5eb7f3e763f7b1c6113
SHA512 b72c9fa4cc6c71d117fc53f89bdeb8e9a34e6763e2050af59f62323a77300070744de7822f0780b8d54cac089bc32c64ae0d3d779ea0de8ab01fabf6606ccb2d

C:\Program Files\AVG\Antivirus\defs\24080904\asw0c8655622576446a.tmp

MD5 26bce1c0a86fc6a3d4ae9689250bc684
SHA1 7f66ccf68e44a6769381570fc70cfec11aa2d7e3
SHA256 817ea6d2a7c2c488d3044def8b39a9680b3aa7145c213bb775ffbe73c01c8cea
SHA512 77860cd63a4c9552eee370e6e1cdc1e00465cea9289182f6302c90047e1c229b790b1a80655dce561d343454d4e4c949ff87b6b1de0a219455c4261e8bc3f13d

C:\Program Files\AVG\Antivirus\defs\24080904\asw8a0ab0dd2d234816.tmp

MD5 af0b80fb8a97bd02b5af0fdc838bd05f
SHA1 c2587ede6f3fe3ffb62f7d2944e5ca8b900088dd
SHA256 232867c4cffd5d252960f7b8a87c084fde65ea9edbb377231202f8f060a6a53f
SHA512 3b7f32567b36240a271bb4d99815c9416c94bd9b1549e5f96dff8bc00546ba054f102f00cd6ba0fef23820afde46bdf68de11771dfab27e1b0262f748e064de4

C:\Program Files\AVG\Antivirus\defs\24080904\asw00ea3c4c108366cf.tmp

MD5 d8184b5ed2333c919c9f056cb100260a
SHA1 dfc50d1bb42a4064346e230a8b33bf7d1644bbd0
SHA256 a69326664c4bcf55bb2d83cc74d3bbd8f9956c96e4d36601067c74f72ca19cc6
SHA512 5256a60148bc4c97975b925e8e2c6bdd7981ce589a55f31cc09e177c8760bacb843e430c152b0ee3944a03a39730ff8dae897a63db8d2b2c1c47ff58241ab2e3

C:\Program Files\AVG\Antivirus\defs\24080904\asw9f8310ceb12afc34.tmp

MD5 e076f45a3ce0790d91824630021921b8
SHA1 68dbf3e573cd46410d5ac0e78d7e2bf4e6608171
SHA256 15a960a1cfbcb08adcef2fa3f1b7892473936bf27d6dfc4eac7c14b8b50b98e0
SHA512 18f2e803937d8e599aa844906f6c0dc2fa0147a65331dbb29eb0cad36ec160e2c03ac48b636331edeadd33cb822931b86693c4c189a8b0157c4857f8d397829c

C:\Program Files\AVG\Antivirus\defs\24080904\asw64876e5f87bb87b8.tmp

MD5 f0d95c0ccb327a59c6b2281ee8bc02d0
SHA1 4078a8ecb9515bcf8417bc5777147c5661b24608
SHA256 e681f96f7d9a5446eb4faed0e4ca36dd251e6d4b6b571135159ab73c7cc115cf
SHA512 e4841526687562ded5364f6b94207d25772cb2c85819cbba91d0929f3301a8723964fd4e55612f25862d6c9fa66c8ee1ca0098912c62ed99188d3177fa60f712

C:\Program Files\AVG\Antivirus\defs\24080904\asw0ad7690165e450e3.tmp

MD5 e39e8361ab191b50418f53d39f33508a
SHA1 430eea260379242e817add0e1c3fbce3d10dc1cd
SHA256 4dc63fd3c7551dd64c26d2945bb0c9ebad3d1926bd0deab46ebad94db50a33e4
SHA512 d3c02ff8ffd51c46417ed814bbef862ba418a1d543dade9bf363487ddf4503ac1ea32a55147300d7cc1c219d97ca6c084c87f5b83d530df5679f5f9618441f21

C:\Program Files\AVG\Antivirus\defs\24080904\aswebfcc29f8810c80d.tmp

MD5 446e459eb1e66569fa5520045c8bd615
SHA1 170d7ee35a6470b95621a1a316556a06b2b843d4
SHA256 f739d69cb47fc2896f9c57bc45f90765250a5e57d4a025cd663f948404bf30e8
SHA512 723c8a3face47bdd1411de9b5b806e27e6ac4a45bbcc4ad1458669559a714028d0128c48b759fe37a2149df89105f0b7db0cb78033cb6e0d6290bca9e2ff5f1a

C:\Program Files\AVG\Antivirus\defs\24080904\asw2016b6a3cab2e4f8.tmp

MD5 d9e702b0770fcde0e8972ef908f407c1
SHA1 1dd133a49bdbc660555e6b1817e7f32b86cea207
SHA256 80462d9f317d92d6a30859cc7dec5eee5f0831ae3314a6028ad75363e64dfeb0
SHA512 eb1beaba3e6acf231e24ed339b505ec9fcfd5391f5e79b2328f612212b01e281dd17538f74e9b2601dc157da57f07c963fac5549e6c23c92571d42f182ea886e

C:\Program Files\AVG\Antivirus\defs\24080904\aswcba3aac9fd33cf22.tmp

MD5 4e5efe221d1776fa15c24668f14b940e
SHA1 692cbf33e1b5efc1cb99b540231a21568b21cc0f
SHA256 5822f666a4af393d8ff57c2d0947c746741c28ddefbe9d88ef676f7886bc8a34
SHA512 b56920fc43d50d16a9de6c4ab03a13ddb3ed42a63ccc8174f32f7e35b7a72fe81dc562892b4d7e41c9561e5352b2e02a9711e49ec3620e4b1abc5a18dba9f885

C:\Program Files\AVG\Antivirus\defs\24080904\aswfeaece8d1daa98f1.tmp

MD5 6dcc758e4f27e889045104d540b58efc
SHA1 1f03c4ef7eb0d481cb5c0540e71c4ee48ec4c8a9
SHA256 7f0cb92f91c81add8b63f38bba7ff3a6725c7aac06f611c4d62526b914876b16
SHA512 6d396c530004d8357fe9c679ebede9f0edcd61a8af2f7dafb2f9858f5830ff8625fb287a2b70c1768f827fdcc84b9a571907869d5e75f6d317f8ea4afbaf23c3

C:\Program Files\AVG\Antivirus\defs\24080904\aswfdc96a283987246e.tmp

MD5 3b90add03982327be704575d77f4d40c
SHA1 00db260145c71c72a08a6bf22cb0f5a6369ff510
SHA256 1858b0bcc7bcd02a6350b2216f1e6cafc0a021ab32048049bba0887998eb9e0f
SHA512 23da0f5f4f7e4e24cdb2aa5fae7fcc3c3f50d9ce8f7864d8f14806f76c448862f234c5694431f6685ab386cc1e9f71e2017be0d5daded0ba8bee0e9a586a013c

C:\Program Files\AVG\Antivirus\defs\24080904\asw08ac9572ef167b20.tmp

MD5 cee70790f29ae2b620a1e610cbdc9f81
SHA1 e79f179aa9c23a8d5b521b201e9c8938c412498d
SHA256 dc693b282217a116975f3b0b065d57d3be35b89735065523c5933cdef39f0f4d
SHA512 442bc11265d9d49b533a037e353365e3fd7a3967846d086f1b9f71af2fb871f5a54e6f10b39077c3b5ef3f64533c65298dfe886bf56000f6e04a73787d31f682

C:\Program Files\AVG\Antivirus\defs\24080904\asw46361ed7556171ba.tmp

MD5 2304f04fa56ad0cd4f2b3b9414f6a378
SHA1 419a65db4e97473fb4edeec3d5e3ffe97f7f5d0d
SHA256 2fbc6a06d211b5056ede5e70867fb89ea184d7209f8ceb90b00023f71e432afd
SHA512 57e2e64589456ab19cf3cdc64822dbb1b71863a269e4e590f9b29ec1fc6576536f35a457d8ce38ac85f5c55893ab9d8595c448cefbb61a6e76df61dd75afd561

C:\Program Files\AVG\Antivirus\defs\24080904\asw00586489f87e5cea.tmp

MD5 85f750940671a5123add8286fb815be0
SHA1 7c327a6f7d28ee4007dc6a3f189e16f2fba7e302
SHA256 35e0057ea974ace6e94569d0b8c55519618c2d936f5fa7668871df7d54bfe4d6
SHA512 1c3cc516ffd781cbe290fd9e5780617b3a69a148f27471c47d88ae05be696fb161a75c2c8183c69126d90672d692e144b02a5ee73a20ca5783fa0ddf61f72f3f

C:\Users\Admin\AppData\Local\AVG\Browser\User Data\Default\Site Characteristics Database\000004.dbtmp

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Program Files\AVG\Antivirus\defs\24080904\asw422f0821c1d39184.tmp

MD5 da5d78502a18457a0ca3c1928052b3a4
SHA1 fc3d197506bd6dacb9e0c9a930ec5c4c1a0841af
SHA256 ab437752163d084edf557f522e215b9c341bb24e070de41fdd53ed943878e75f
SHA512 7c479402990876afe19afff5479d679c9ba2eb6f2220ab27ab7577ffed61eb4d7952587ba8a2a617483f6109d6c84e275fb08abf6844730d46007846ed9c0b92

C:\Program Files\AVG\Antivirus\defs\24080904\aswd0b7391afe5eab85.tmp

MD5 dccbcc95f8e3c8f895a9823b8bf85e1f
SHA1 912891ff170f023375cf2c3f4e2595f9e8db46dd
SHA256 931a62ed8d6138522e38fe55558ac342a75399635b964d48eca63059a2791933
SHA512 2541de44649344e354352e647cb79e29e47334365379ada96f4829d0f5e0fc81f066698df28cb7d793abb1208f7a42f85f770b4b843adcf5289fcb2c391892d1

C:\Program Files\AVG\Antivirus\defs\24080904\asw0e3b00a9332bb1b3.tmp

MD5 fadd0fd3ffa6b0406893692436b1fe23
SHA1 2564cb8a763b995cff9bf83e6a7aff5d7b86bb20
SHA256 7bba845f5f5b31ed8b417f35d21a3ab1aceeb8d9c6ae13cfb8b617b593ece3e2
SHA512 08a44e8c1b8ad992d4a2e0cb2c0123d4a6fe75a924790c1342e1115ecaf63853b77b21b808190636fec4675c0747c661b4fea2b5b4d52c1af62bbeceb7d280bc

C:\Program Files\AVG\Antivirus\defs\24080904\asw0bc69ccc5adff0ba.tmp

MD5 721820b173881eee87d05f970fc0aaba
SHA1 f1f90181077e7794b9f0990bd7951928329e87dd
SHA256 872569d2c667e022aec23365e5ff7bc149cc8b802de92876c1a68f97e09c7fde
SHA512 299e2a259c83425ef9e598b68af4c962b0d53012ca1c0f82a5e93ee7c000518e96ffe3d573dcee74ecb32aae9828ff7402f21e51552455e77417addc23804b7f

C:\Program Files\AVG\Antivirus\defs\24080904\aswf86e9de6c6646215.tmp

MD5 534fe68a98dd9a38b72506bbda9a9daf
SHA1 8b33da97ba8a55c28745536ec46cc3fa22876c96
SHA256 847756a48e1371ae2a6008772ec5e7993db907c2cef716740e67c71aebd89bf2
SHA512 8495e8c23b463d84513b25d472e31cf8b0be902d9a4f24bea11e4f39f8745d6b6a7f5d26b5e211dfaf9570ca9f16174217a6ef4365c846b1650b0fda0ccdf6b0

C:\Program Files\AVG\Antivirus\defs\24080904\aswc51cd80601e4ca22.tmp

MD5 31a52aa445714b7c40f019079fccd302
SHA1 cdd47305fe3284a66aa3e91dc728e7fdd663706f
SHA256 b0a37fac9a7803471b6674233b869818b14970e5f444d457b8efd7aacd011eb7
SHA512 b28ff92f3952e171bfb751f75cbb81067ff3d9a44e350a3ed28f73f6c743e6831962fe972e099fc8ba2dab5a1954f43577b441a3cd8b7577c3d4271c27ae647d

C:\Program Files\AVG\Antivirus\defs\24080904\asw4bfc0995712c5303.tmp

MD5 cb4a7a9c9143d12d76f5367ab3c612d8
SHA1 02997965cb84d64a8146bd6e47bd79026157a826
SHA256 de92f02c0a0e4dc70196682fcb2e922a43d46958049fa4540ab1b681b2d4784f
SHA512 fdae5e9718580a6245561d9a09f72dfa63cb833cc77963e53aa7492d4d746a1f3acf40e2d263ff1417802116766330f9fad8a2992b9b376fb5374301f6e0759c

C:\Program Files\AVG\Antivirus\defs\24080904\aswc5167d95cc244f65.tmp

MD5 04e13fedfda229faa7aaf25c822d4c50
SHA1 fc53c1743364d7e78164414b182e5f7342da7853
SHA256 33fe54c35fa0f7c62a4972160dda23f193792a5a7d3343aa1c9498728855f8a7
SHA512 2ad2324134d3084ef82afca61432f7118446d546201d4cd64af498b68658e4e71d1dfbd0a10784005df6ec5b9fa96d3e6701180067a2fe5bb9bbae5cfa3f0b11

C:\Program Files\AVG\Antivirus\defs\24080904\asw9b3dfbba5ca95d91.tmp

MD5 352176ab7e6fc41a55701e751db4a5d2
SHA1 81e19fefb57c4a035eb182ced8fa003f08e9bf21
SHA256 a23294effcdfecab80c8f71e3bccb633758cc95f6988da433623cab5d1fb41aa
SHA512 29a4e9ddfd56cd5f3a3e576b876faa138b7b2aef917392c6cdfdeb6db4003d108444a90ea01c5d0ac8135ed0e67ab2508d52551ce989aa43d0ec06c950e457b5

C:\Program Files\AVG\Antivirus\defs\24080904\aswb8bfd2259f50b97a.tmp

MD5 13cc2cc12b2752bf14d49188a1195da6
SHA1 8adca3a81e9a7748881d73f0d35a93f93fa0775f
SHA256 e24430528a9707173f08c5a2a4b327b7d790fca2fa44b7be58d8e3fb31d9d8f6
SHA512 baebfeef682a0f8cee62b5d3fd1af0c0aa64b9a93f07db8e2364cdd39efa424d5c49baaac66def8d137bc4c74c8b8cba0986b16466d75471ef9db6f2a9f76066

C:\Program Files\AVG\Antivirus\defs\24080904\aswc89f813146a7ff2f.tmp

MD5 a333e4ab3a060c0bbd54e43f8de08988
SHA1 9c4870bb1733a4f0b673940a6504a94ffe2986ed
SHA256 449af61e13a776516a60e850174b3660b962de2fbf41f615de603fcf9dc2d8c4
SHA512 4aa14021db827a101222ae70bb907483ba880a6f71926ab12d9d421abb0cfe4650b34fea6f0e669d809d6042ba1d54ae664f83d6215ff066627aa977ec68397b

C:\Program Files\AVG\Antivirus\defs\24080904\aswc927336096b53b1b.tmp

MD5 97294cab413f73048d0a7ee1136d8fd1
SHA1 867c8f0e63b87e96dec20fff9943b909630104d6
SHA256 09f90ea2e55a08d631a5115ddddc877d6f9bfe3c220f6f392497ff6d9c0a88f0
SHA512 d3f4566af4a04b56e2ed10da686b9990e7f16ef97118d34154d5dd6e425d91e80f6c9bd59462ac84ad18629fb01c2528f48bfd9862fd7d081ba0d532fc972d68

C:\Program Files\AVG\Antivirus\defs\24080904\aswfef178f8bfcaccf7.tmp

MD5 bc70310d850e30e2d2fc1346dc67dccd
SHA1 6d76e2efc7b0119351b76390b076d628d12c36cc
SHA256 b58272dbcb901afde918e79af1a71defc753598781749fe385b1ceaf633af61b
SHA512 8d4af91c74f52347c2ff24e0eccb948400375c44f2230159852a1e61f82ac027b9d299ddf0f17943f594231b9b3cd2937cbb294489d076e3bbac47aa1f9a2638

C:\Program Files\AVG\Antivirus\defs\24080904\asw131d6a40009513e0.tmp

MD5 896ba4ba9e526fe0ed8c19e200843669
SHA1 b379185b7c3556768ef9d649603f26219a9581c3
SHA256 bc8279f4e678bee2d7adeeae88fc746d467c51dd9b7e6c534e334b69f8ebcdb3
SHA512 91a00221a1b756eb75e9576b2b0b81fdf1d86e942f60a2d45174ff6a309dee04bc47e33223115c9dcb860aa2d93ad3999022e060096c1604097aca5e8a1fb3a5

C:\Program Files\AVG\Antivirus\defs\24080904\asw848ad5f655a5af92.tmp

MD5 d3d61156aa25a967b01827d5d478c7d8
SHA1 1e35afc1fc55c587d2b6a0dd0b1fa5a3d21e476a
SHA256 2086e21de1cdf7a16bdada153364053ad5efbe4ec5688fddb9111ad2dc7c2876
SHA512 b9651703d1ad7b7b065f430835e5196d864b9c464b3544dc01583d45550298447277d95bedb661c45a03dfe3b67360629f53b0ccbf9b1f92b578f67dc8e2440a

C:\Program Files\AVG\Antivirus\defs\24080904\asw0b46a747c371c129.tmp

MD5 6eafc6b178ba81a9b4794176cd2445b3
SHA1 dd5fcdcd18df2d7652dabf500545578fde57f829
SHA256 c3b8286715f98d76d611069d806d881afbf72e5ba139c6f3807080a9fc885389
SHA512 ebe7338c733d2307c7a4b542249eba4588bf47439c3d012794d1700b4e5f805292514126a044b96733904175add8777763bbe254d7590f927e2ab333cb9a7663

C:\Program Files\AVG\Antivirus\defs\24080904\asw6a0b44bb96c45dac.tmp

MD5 c838d5e46b10619ee43d1d203666ec21
SHA1 a041f513f7c76590f2a92329d75b8bff719de375
SHA256 deec78885e387a05b5d98ae9e218ee0be3b72793787f19f95e1521727d133743
SHA512 a7713021c04df99c4cc8ffbd33122f4d9b45698dd2d4329ec05a787340766a74cdff9a1834da13403986706ec30e35ff06f43153a1b1b491db277fe2abfa16bb

C:\Program Files\AVG\Antivirus\defs\24080904\aswbc4a7f618c8d4927.tmp

MD5 81534b89474714bcee0019698a8206ff
SHA1 5e712579a30a12c8b8b6c95affb865bb115516f5
SHA256 8cec1b352aedca5909050ae4285266fa7e6da00ed696358e1ffe88f6361dd375
SHA512 25af3073fd0ca9fb4053120c080635dd9b3170b73aab1cf73a8f9bc9eca351a6d2a355c30cc6aa82f7fbb997514b6ec95065a46775694dcbc75d90473e8b9df3

C:\Program Files\AVG\Antivirus\defs\24080904\asw9ec697df6bf2ffff.tmp

MD5 d6ff5c363b9b3cf5a64e5dfc88412f28
SHA1 59688548d48f96f9bb886da89470ef5f5e687b7c
SHA256 4c1a3d7c492b54872ddcd0675d6fde6a866b49fa8fdea8338ab8abc0eae258df
SHA512 ec3cde94be2499d0d93d7128337d2462fafee794151f64de51ec03307d7212b544c6bb20945345a88828dba8fde6cab0279c95feccca87dc1f34532284c30679

C:\Program Files\AVG\Antivirus\defs\24080904\asw25cedf3e49c1c6e0.tmp

MD5 c971d975661580113896e9c4d20ca5b8
SHA1 03ff4220ed837d9d552860e3d9b259f7de508ae2
SHA256 3d780972ef60a09cdb58931293bb3b28d06e297b6461ef59da2ef98fc480dc98
SHA512 52971a536fbd1c56e85a444e9f93a7ba9ae97b6398aa89c65937f8894cc840139e528ccd40bc34b5c137207d079fc9ef451391c30e9c5d1625ce36f86a34a77c

C:\Program Files\AVG\Antivirus\defs\24080904\asw2e9974f2aa4bd513.tmp

MD5 a870ca976b420f7d4554f8e7f2e1b65d
SHA1 b16d54ee416a83c117f043da22e4827431acbc1f
SHA256 a22adf3f10704e5b5aa844e785dc75b369c5bf4c6bdc1b23a1f5d78d1f48c1b8
SHA512 698336412924053e35a5bd802ca993b29a4f918750c39a26d0f0b567d968dacb571b663994dbc6bcb647dfff6662ced4336b0ef4d684ad67f4cc3166bdd85272

memory/2044-4136-0x000007FEF3B40000-0x000007FEF4E66000-memory.dmp

C:\Program Files\AVG\Antivirus\defs\24080904\asw90e2eca2c1efa208.tmp

MD5 45cf84e859b0a5e8425c6e24bd06fa8b
SHA1 aae0c589d6f51d0fa2d04830a4e5e20630f0cdbf
SHA256 6511d9949fabce1abb086d2b21ce069ff0bba61f6c9dfe4d28b2919998b50b7f
SHA512 959f7ec6ff26ae8311544cfd3401351de8876de7161550e148a8cd866ebb3eed90bd51a05206b96b5aa7bae9f36616b50cf716f072b0774df392cdf53f535f40

C:\Program Files\AVG\Antivirus\defs\24080904\asw98bfca93eab15e16.tmp

MD5 87261e93193f30e25be920690f99bbd2
SHA1 c0ddc477acaf561bcd724e83b34b1aa6b71d78c9
SHA256 414ad8e1d3902527d2b67bcd7703860a1673b7cca65df714435f73076412dca5
SHA512 8a12a69ea60d60c55ce1713f35f1b2136d8421a19ae03eaf35ae079c88bd979566b980d79e1eb11b374c4de6ed9c866111c48f257a8e201431270e3503230582

C:\Program Files\AVG\Antivirus\defs\24080904\asw0b9263cff50153a8.tmp

MD5 9e8d3d87825897f301fe7f31651374d4
SHA1 53a40c4bf1fdfd4a74e4f0ffe648e92153780c49
SHA256 85f9a442c054695f46d566b783bc97947cef4a4f9525aa438299910d51d36581
SHA512 f0cd3d2c909d2a09d8f17d92a8c7516e13b1d0c40baf45c37cf9fa9d319c3ac12d6a34de9dc0587eccf987cc05932eb80b922cacaedcbd9f8c9100c4fc4ed57e

C:\Program Files\AVG\Antivirus\defs\24080904\asw9ed836317ca3d715.tmp

MD5 8bb06e0ec39c45cb3bec76e5fa3987f8
SHA1 8050202b550696ccb7606017cd3c02fb13a0aa0e
SHA256 44b7e67785eed432e5a6e60ba22e5a1b0375cef91a03834d4e57bcd4da2a71e6
SHA512 1a09ea9c2788eb1dfbd8896ab1e45cd9cdad5014cd7168dca1bc0d0f6c7989c2e1e906e6e52b72fd6af35760eb5491f0829f8238f599ee7f2e349e033f73c84c

C:\Program Files\AVG\Antivirus\defs\24080904\aswf8857de452e5b92a.tmp

MD5 1ae1677be620c5e683a1acde5b1ef132
SHA1 eafd58e932c72773035fc424a7bcc8d6af95ac4c
SHA256 969eb47b57b48fb4af1f2324fa9dff36ed5330e5fdefe64891f8d02c41d0bb2d
SHA512 c4d307f7618a5fe31fa163e2d0329ff21bd20040843cb2214747528b992024357852358ac5cc235ae6fb0a865db4b464fa56949648ba652f7b4943f0d1031ed3

C:\Program Files\AVG\Antivirus\defs\24080904\aswfe7d228d511ec8f6.tmp

MD5 f94f8998187fa41459f02418a842c0d3
SHA1 a59b42371ca657de9274fb89170dd25bd8f0dd04
SHA256 065f1849cfc7f90986ede9fd286515272d4769940b5a2cfdfd6a0ca0867377e1
SHA512 9abf11d5b8b220dde2b340fc66e54f3913190bb810cc57d879ee636e610ed103bb5f1c854362faf5069be5a6726286c8116e9a1fab5da46d2877ff04c311b035

C:\Program Files\AVG\Antivirus\defs\24080904\asw121101db7591ae39.tmp

MD5 5a84c1a1a11614ae6636acfd5ef66346
SHA1 53e35d9f73fcb28a4a994ffa7903e840ca03bc0a
SHA256 8243cb253de5b38e3ff73c55d9532689cc244a0300446ed06469b901883b27c4
SHA512 3eaa5ed6ded8d5af39b62fc5678eec47bf6dedc36b78018317e3fb1d4e1ce3a7f9345ae190408c36b3f864c47841abf06f33438e249e1c35f6eb3f317c224211

C:\Program Files\AVG\Antivirus\defs\24080904\asw4c734be748f86b46.tmp

MD5 5848d91326f4439f47a4667d53a145d2
SHA1 e3ea5cf99e774144e17d5e05bb8775b52b6c9638
SHA256 599bd37aab9a287100c865ed4cf36abca83a90e574261070edc4ee5183c817b6
SHA512 e7ce6c0a5f21ae29bcb2c863b198125b5a5aab5b4c2aab78e1f30f7309934d17fb797919d35209bdcef359da745da4c40cfe78cfc755962fbf3b832f72663c08

C:\Program Files\AVG\Antivirus\defs\24080904\aswd6b59fe600dd88dd.tmp

MD5 525f4fe527ca7c09d4ee3cf687547757
SHA1 8332ab48a2ef07033b97d2178442d8c6ccf6649d
SHA256 aad3b0a87587ea79ceb4cfda51ac5c93c565357f1c62b21b653ad5ce916244d3
SHA512 6763281d8aa1a985e767d4d7b8c22ce361ceec646022bfe33c66452548cc519aec23e9afab61c12f5c3e6bc7ff191554f226f3b8e94edc2458b8190056a38fed

C:\Program Files\AVG\Antivirus\defs\24080904\aswbb9b0314c89f906f.tmp

MD5 fede58c5e447d2fa7d39b9340d72ef0d
SHA1 4f258d23692d795e2a78d73ff299063a0abfc33a
SHA256 cf52174b647373762150cd11a50eb0ebf1383caf6f641e3f79cbc713959d2a2d
SHA512 d51a55e7475d2d78cc7f79915729e05075b4c24484f60ce89149d1a5a4c598fb260a766b9b5e255d414d8adc3f3d19da1cbbb89a18601ca313f1cefd226d10cd

C:\Program Files\AVG\Antivirus\defs\24080904\asw2d3773725797188c.tmp

MD5 d7108fed34842edb4539842ceea60ae0
SHA1 acc7e312d780c7829ebf44f3a89e7358bddb8098
SHA256 2f3301e09bbe8cf9aff78e7158dce00fd24fbb9fc3b3dcafeb5f603db689a40f
SHA512 b4eb5be952f6bef541a37e5ac3bcea7898a48be0fc5ad1ed16d7e835a2aae29c368e5a66bc626c138504b1f005f26db9a96f70044ea11cb8bd12519b231e1070

C:\Program Files\AVG\Antivirus\defs\24080904\aswd180a6cdae3d5d84.tmp

MD5 eb29ad680806b45043d15912706dcaf6
SHA1 1c9500597f477edc4e70e51b80e88cf167d95a0e
SHA256 67a75b5a50c542178b28059fe030aa4898765a2dcad13645627822f52b5bc528
SHA512 f78404aae51af60294458dbb8f4397666187263f20f5725a3d5f288ddca641fcc800ec02854319264712f752ae6ad5ea29a618cd2c150e9f227e6fc1695a4b13

C:\Program Files\AVG\Antivirus\defs\24080904\aswe272a9c337605460.tmp

MD5 1a35729a9ee5ce1dc796d3dbbdd71f63
SHA1 b32eec824d760b7685626631e3292170e04c12f7
SHA256 3d29c0c31055be7095f47c70465534d16bcf297f0ece27cc2a6d63085c80f444
SHA512 fe4e36e19348cb5891f78b0590b96aa7fc9c53333eb26e2e31bb3c3c739871cd917f007a36a06d643269110f84cc9dde1e091ffb05f70b65174349e9a7730d63

C:\Program Files\AVG\Antivirus\defs\24080904\aswa00203c85ca38259.tmp

MD5 191831459b767d6e5314a35a3bb669ac
SHA1 7ecc1677098035f4b55e19ed43b4abb98b6cf6b3
SHA256 0700d978338daceadfd00fe9eacfb103f7e66739450e8cbcf54a008d225b442e
SHA512 81de4ee17ebcf1dafacdf14261be0882d7ddcefa4d8a43c760057748336813e6cbd7ab7c0866e8e860e3b029b93b02c79e5b8338d4ebc717a37c099c581e241c

C:\Program Files\AVG\Antivirus\defs\24080904\asw9f01722d4ccb6795.tmp

MD5 a8a22e3a5ef88854b3c61a7c48a05fb4
SHA1 5aa85cb15d6b66fddd40aea58cad11e93acaf934
SHA256 6d817dae7678ec76cf6f7cd7ad26fd04c156bc818b250e1189aa55ea9c6f7e4b
SHA512 43232176639f6a9c36e19a920f7520a73e06c41a73916f76cffd7b62415d056bf8f22558e0c64141853d736302f95c94ccf837e0125ef5b9f2d7f23a83132e48

C:\Program Files\AVG\Antivirus\defs\24080904\asw8328d1a88588cfe7.tmp

MD5 19e84a7cdbbe1fd5cccc64fc39391708
SHA1 caeafe339cccbcaa2fed94f23e38fa6d444bb86e
SHA256 65b56f3217316293397103042d54c8a8b5bcd86576a915567536cac0e510dfea
SHA512 246c6f125f002bc1285dd7894a7bf93ba10f1b74ba55a1247ccbcf922b3dc519e25dc4e05bf432f69e793efbd4a4c4096d5e3d307179d3627bb9a9db799a8afc

C:\Program Files\AVG\Antivirus\defs\24080904\aswc158680e3d7c7b8c.tmp

MD5 1ec7c4feed230426245df226f55ff5af
SHA1 86cd49511bae8209a98689e9be55036e35c12554
SHA256 0d280884fb0a08c0e62dd5299df248501c9d94d9714b67990833bda5d592104d
SHA512 39b09da401b99360a9c404f46cbe2ab6d87a944d13ae367ae5aab0b768963fbbf9df66616dde11e53e12ce9216f3434332a7e8aa451e6c5cfe385a15f086b4ce

C:\Program Files\AVG\Antivirus\setup\vps_tools_64-1431.vpx

MD5 eaa41a12e9420fee6ce9285344b49cf2
SHA1 f8626c7bc7cda17f589fa43d632a02a16d6a6f8f
SHA256 f1afe1a9f4fd172022c0934a0b4999f4e4d3851b6d4de5708a6f4d57b6c43343
SHA512 bb49b2286b8d57e5307762e1902b0328ed37eb134588e6de641669e12ed3761527d6656484b10c2bc7e8a1d9207d8a466478e579dc212581f5e75bb6d9019504

C:\Program Files\AVG\Antivirus\setup\ais_avg_crt_x64-7d5.vpx

MD5 78279d48e66b8560d9d275fd749e5233
SHA1 0b8658adf1cfc34339d44ffe50e3581255f6f939
SHA256 60dba9747257b728662c95d0cb4e87b7c12e156ed0244196f0d22a9d76a396f8
SHA512 1b392a0a8c7022fae1c2aaa153f01d62e2e3812bba3b63fe3f2a127ffd9ec04240222d4a04e5c3dd8c3172395ccc245cb02c13aea4315333fc54ea29e5ece52a

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswf3dee2e37aa9c922.tmp

MD5 8c1ea3de9b06dca5a17ecc851c46fb07
SHA1 1a85bbd40db8bdf972834f288542157aa8ca9d63
SHA256 3909fb4f509418ee6aacc708340bdc386f58f395b985689960fa02c497b7014a
SHA512 b8a75b6099255a67ad5d24515e86fe14e3a34fa02390e44adc019eff478f405b6d3f715376f0c6d475a02d575dc06078403b31cbca9c9695d219ab093f8fbaed

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw4a37bb7a7010c65c.tmp

MD5 6ea580c3387b6f526d311b8755b8b535
SHA1 902718609a63fb0439b62c2367dc0ccbd3a71d53
SHA256 275af628666478faba0442cb4f2227f6f3d43561ea52ecdec47e4cbdf5f2abac
SHA512 4146f0faa09e2b23ee7f970829664031fa4b7b7acbdb6f27d075eb1da0d63b2d41ac50e386ac0668157532db69499ce0588563a9e891d6dd74479788d56494d2

C:\Program Files\AVG\Antivirus\defs\24080904\aswbb494607005263f4.tmp

MD5 47fb34f81ed3153e00c2f49ec3fcbaa8
SHA1 dbcccc333eacc553a06a6d8e1e973b515865bbb3
SHA256 7c83b610198f6e7297e14500e49dd160fa627142118ffe6dfed6ebb05f118656
SHA512 cad91cd4f2a6d8b4347ad1330d1a5d97bf4e2a4bb569462a0c3cb5ecb5ad6b4daced1b0100af8e8726e7c30d6b8c0f570eeae60f3e0853e2999536b58955a1dc

C:\Program Files\AVG\Antivirus\defs\24080904\aswde41a41cdb47f301.tmp

MD5 82283a7aa1d428e9f30598194798dae3
SHA1 bdcc56ebd1a31841381cc80fe4577dda7b4639dc
SHA256 56b53eaa76c12f0de3dc218c3fa68e6bd57eb5e8b29d5867c494405c96dfc0be
SHA512 8555a4b121d6ef5fe1dcc239a40299e82d121e88de9735e8db91e2fa50a0ab65393406703589b7f5635bf491b88bc8da28b4e1acd44c76943ac98d96ba3f7109

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswa37b1173ec2227c2.tmp

MD5 b826ac6e0225db2cfb753d12b527eed3
SHA1 3ec659eb846b8216a5f769b8109b521b1daefdde
SHA256 40f595ade9f60ca8630870d9122bf5efc85c1a52aadad4e4e5aba3156fa868d5
SHA512 00ce60bdf31a687de63939ecf0f4d5123bab4de80b4798712769cd8a0b49b764f8b6e0d7afdf749b8b574fc447dba9b78ba59e430c1fe9cf4f8008d9be5b897d

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw755a5de0d1397f01.tmp

MD5 e6506f25a2d7e47e02ecf4f96395bb38
SHA1 bbb7d458f619de7fdef55583198bfeab1e8e01fb
SHA256 f040d06fac81aeb3cbdae559785c58f39532f92307e1bcef4afde4114195edf7
SHA512 ca50727a68f6e58aa803fa251934f93d8a607ab12fd8cf149f68457a685660e422b530f5bcdb7086ae3b71f8578ce77b6b347888a510bf7ae094e42623efb905

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswdab042836eb8e794.tmp

MD5 de967e2d473d8e55c095db1094695708
SHA1 a7c3278f2e84ad8f2148776e611a0b8481af7670
SHA256 318975cc9090747aaef2d7fea2b0ceaddb5f8347d01a90f94e7130ed1ad0bd5a
SHA512 db937d171d31e82d26c146254f8a88b7948c9e90b53ba805b5d5dcd56b9273be02c1b500105fb3c2b42435f7863d023ca7f0b8060fd4dca5b04b2966219e9f14

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswf39901e2b78b2d88.tmp

MD5 cc44206c303277d7addb98d821c91914
SHA1 9c50d5fac0f640d9b54cd73d70063667f0388221
SHA256 9b7895c39ee69f22a3adc24fe787cba664ad1213cea8bc3184ed937d5121e075
SHA512 e79df82d7b2281987d6f67780c1c2104e0135c9cfbcb825055f69835b125dedb58dcd1d5c08cd4e8666f598d49602b36289b077e3a528db88f02ee603a6e8819

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw4e804b1078b10681.tmp

MD5 7816039fc35232c815b933c47d864c88
SHA1 e68fb109a6921f64ae05104ba1afc1952b868b9a
SHA256 9c8f443b3a42e9e1aaa110b12c85f99b3d42ce22849cc3072cf56e29ccdd8401
SHA512 943b5eae98337652b3ee8c0ad88172d5cc22bbee14e517a91c0d67b89cfbbc68cb854a3f53badcb49d355ec6e748de5579e8bf6a0f8ee28f85ba11808fb79e25

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw69e868b41699a2ff.tmp

MD5 4abbe981f41d2de2abaf96ab760fab83
SHA1 09a40758a7c280d08acbb98320a3902933ddc207
SHA256 6ba4e1ac6e8ab26879298d4951fba25352b6076b346aec220892454220410875
SHA512 c63727b2fec31fd3b302301e0e7cd6fd7f028a5b7f4c713b0d4763047a5b7918539a0207a1d8d2e10716b10684884682c565630afe562cc0dc9c34185e6191e6

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw49bf63531c0bb246.tmp

MD5 1763ac0af41b1bbc75d576a4d86f1bc2
SHA1 92bbe9320592fbd46ab3875af4fc4304b16a973a
SHA256 f57902b8877ade936a37448317a01cd79b36cda8159a17d3cd86a08d53ba7240
SHA512 c1ba2d2420cc53377863964d353689fb67e4f8d4821cc337880858486c8909fb7acf77cb6591e29ee46c20429d479c44820e63f04c16645a6e458f3cc2a9a2cf

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswdc589bca3507bc83.tmp

MD5 83e0d47925476b83941b11a0813a8851
SHA1 b4ec57ff7b20f2915b80152dd13c580ac7220d36
SHA256 a085103240813e53fe1ec04a9676b3a983ba8958786d3f90e34a59733e614357
SHA512 ab9683b708ebb1f7c37fc62bb106e7b7626138c3333774338be1a10d2f21a9cc97246f7f9220f9fabc6eb88b3fd109749f42649cef1536811e2aabb521324747

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw312db03fcf9a72b1.tmp

MD5 bceb3a4fd70578a2bb1e5138edeeeeb3
SHA1 9796afc837c53a83a8e77d4c2bc88c26b31ff525
SHA256 8a4b5a175d575d1037a046156630df4ca5389b4919a9746e1a2f5d456ca50bd8
SHA512 7fcc7c22032a22e79b6438f86e491a179f74a9a33ce64d8a6ebc3fb6f9ff1f2e2ece15cba19fe756a90b104c6beea8f892a98193770b478fecb9dedb1b66cd25

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswa5da692b827d5681.tmp

MD5 329fe3e93cff33d04af93beb7aafb90a
SHA1 516f6455b2076b9388c8c1e214ecb9a1d7bc86cb
SHA256 1541b5811a7af089ece0c781f934da011f0c5667a83f3d1234b4ee5403eb334f
SHA512 62c4fa04cf84b81b303e166f6f7c1e90165c67f2ee60cf8a5cfa7719f42c2d793a2de10f55b3cd270287d91e3f309e5ad1742990092f26bbe2aae193a4ad4662

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw58cf9b316a69d4c0.tmp

MD5 5fded5599461319595639569b49e7e53
SHA1 71b9f74baf50d7db3335806fa25891acc5943198
SHA256 d5e2f838a5ba030bb9ace8f179e78409b32e0ca0c47839a49a265046b6b73888
SHA512 8f8db3dbe90f7366269a5d27a6e5776e01cfd4931da34c678642d6ac370741316cb95b5344e27154f539db2eacbcc1be872f1e0a7b82e025848f266bce93af4d

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw98bfd25545485d76.tmp

MD5 9a9d6258a5ab98bb10b3d36233eadde9
SHA1 1053730d49a03cf72ec129e6b6047062f6d8212e
SHA256 713ccea0e9e6f7ea39f88aed12812b16911c38ba0a9234f6d0770c29ed5a3e1f
SHA512 187b0c18d12348bb32940b22f6db37daf1a18638dec2cb8a9a0d5a230e430490e732256acb5ad52e23bd24f2f18310ff9255c96f4a706b02c66029d172219cc7

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw7112aeb2d0f45f49.tmp

MD5 f00887195128ebd4b8f7e95436e86a98
SHA1 e121114df338f20666ffadbb86043b0695f0d0ca
SHA256 adb851f8de3154f32d74b3e65577e2da195ace2f78701eb52e09313b271d7544
SHA512 799d5d2fe101db17c0e0eefed83ba9d1fd003480aab55cff6169586a2f771d89532e3798635cb5915db74953aca425f55eee09aa0394285fb374cba431f595ae

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswdccb567827284908.tmp

MD5 c58e2f3828248f84280f0719fda08fd2
SHA1 9679c51b4035da139a1cc9b689cb2ea1c2e7cdec
SHA256 a1b79943cdf8ded063cdaec144f8a170de8bbe97b696445885709573c5e0faeb
SHA512 57ccc658870e9d446f9c9d130adde6b96428999697b007e844b7714998d2a23eabed92460c1275a92f1ceca29be232d5d97e29f0d4d07cc749cde41bcb5f8729

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswe71aa5a0eaf0f0fa.tmp

MD5 9f434a6837e8771d461f4000a52ab643
SHA1 46994247c06b055f5ce5aaecdcd69e00a680f1e5
SHA256 8a6b6c7731f6922e6e125feceaca919e4d26a96349c7b0c90e469396b34b29c7
SHA512 31a0a88672406a047da8c06be7aa7e3356d2108d0ef507665409d8d38ecad285de5ba29763f26bfe27f502f2171697ced2884a6542e4be4f39e94572fafa0a4d

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw37ba39dfeefbbbe1.tmp

MD5 1e5d2d2d6ba5379db875e46665e05d8e
SHA1 2b6bd4815c6cc44c3f7b18471849961146c60d03
SHA256 f64fabce8aed2f16d65d8533afe11ea814e7c01dc7a839f370c7505eacc556ac
SHA512 a996bb2f83c5961e9c5d415dffd630d4798968dec4f99ceb00c6a32b96ed48cd5f93d6975c28530ab2ab666a074d4c9c7ed5ce32bd57418b94ba84e29b2e8e0a

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw388e3ff27e98f5c2.tmp

MD5 5fd759382cec7f4c280bdc5f3215d22a
SHA1 7fa466c8482bed4a4ab4745275db357c9a84cf3c
SHA256 36f418f9eeb0c3366bb3f6fbc3f91f37117632c0a5eca697d76792aa5c2165fa
SHA512 101ff9f83f704eeaf38ea20428fa5501f63aedd69ad808498564b43f37f7059fc9caa484c4a878819881508309f1082c72809d3e704384ef159bbd512dc24f3d

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw9da146bba18c3941.tmp

MD5 33791965a25f3f37d87af734aade8bdc
SHA1 6bd02e05bab12a636a7de002f48760b74edd28bc
SHA256 162a0d97d99794a5b7d686ed8ab27bd09d083ad3c02c2721104c19cf68164fdb
SHA512 e1c79e606d4887c0e5f7ef582d2ac2e3d767c24636a3ffa35032a0c4d46de40eb660f71127fb75ecff6105d9a1ea2c5c0f891c589a4ca5ad8ea9431097f6a412

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswb5414d1af82214b6.tmp

MD5 842d23af3a6a12b10c9a4ee4d79ec1c1
SHA1 2cd46ebdd418b12444dc351c0073dafc5b9eabd5
SHA256 33adac3484118f56f3d8d8745431cef241d643b46956e08fbb62a63a6f2236da
SHA512 45a8238862b6ad157d261e5120d1bfd3925fa7e429025d7470ce82f64e51c209f4231f37b3445a4cd3f6649c4b0222bfbd845a16c0e5e022685b081b39cd9296

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswf20603181bf7dac1.tmp

MD5 9966aa5043c9b7bbb1b710a882e88d4c
SHA1 a66ba8f5813a1c573cfcbaf91677323745bdea91
SHA256 514be125e573f7d0e92f36f9dc3a2debb39a8cae840cbd6c7876296e6d4529b7
SHA512 3fbbecef13e3c8baf13072bd14348daa5f824c58d7b04bcb65246a6b03c9d7b6ec97a78645f1a0dfb6347db4a698e770ed33f1f9fe1378292c3dfa1040fa71c6

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw8d8cb3551dcb6812.tmp

MD5 d3d084a56d8cbe2f410db77ce5a79cdb
SHA1 0dd30e1f1feb93a58b8c47cd26f951388d1f867c
SHA256 b009ad33c5ecc934791565e8b38c55b4712f79d53a257a04295561d12b4a122a
SHA512 23c954818ba45a7ab777042a44a0abc5712217d2cfcd3714fe043da1ac22132e0f69b9c795b712a84c21caedc405c59ab43da9b58f86407085609723c44bc881

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw7743a67d8456829e.tmp

MD5 252077d2df92b6ad8b9cfeaaa78ad447
SHA1 1c3e8b683f1b4cd5555a26fe0bad692c2e8f9fd9
SHA256 7bd17163aa56783867b42a267a3805b342df6d7e832e6ae8f0045d80d73543c6
SHA512 7ff85c1adbe350247b49f8698b5d7706806bc14c488d8d9e6caf14e4e678dc340a76cebe858b96365309616aeaab443791ccff7a6ca62ddeb0a28f1eeecff822

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw05e11a41e232b5af.tmp

MD5 0b1c38c9babecbe7664c80e0dc2c0e68
SHA1 eba69ffb10487780c1b5e35430dbef0e43b8cbd0
SHA256 cad6471e8393046ff3c623454fc904b33e6166e58ed05f98dc36c122309db618
SHA512 3fca96585f4f6f3968b9d76757b5428531c7aa3b72d0390cd552f567e47b7937b522bb417af06326ed04e45f83f228312774ae64c438bdd628f1eefb057adcb0

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswdefa92cd4a42f444.tmp

MD5 c0efc253c1cff5778cd23e62060af6a8
SHA1 ea760a8bc2248f2066938e16de849a2d1cc5c539
SHA256 525c9a51b70233bdca0fd0dfd61d7051615616698374cea0b3ca55b8ef5792a7
SHA512 92bade19f0140a851cb9b5e6c6b1ecaaa84484d4b47ddbb91d99fd6c332a42d50abd2cd58f5de3b28851bb0910c5215a340fd4a3082b184dacc4a6b05ad6494c

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw192eb3f7476c5faa.tmp

MD5 dcd968fb42d0ff67e82fe0ce6ff312dd
SHA1 920e52ab298274fae942c5cbb478780566ce183e
SHA256 a2f7fb5d09670e2d785720d07d2541d064d939f3265de725d79dbec07a953b63
SHA512 bc518ef9c2c640bcad1f8d9009c4961307754ecbc4455bd543d80057d1d5707fc7f87a001539cd5f21387a69640f73b9b4b5c3e1fcc5b15cd5e0b0314a98c9cd

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswdf15025a202de447.tmp

MD5 efbc21d545d6c4c57c6a66e836e33a32
SHA1 4a4c267e2d6181f2aa71f6b3bb6904be47e06a07
SHA256 48a564e05e98d10a327fdd41b1051c7407eada1530802efb470b7425ad07742c
SHA512 2d9842b3bd1a8e8883202d3b0bff79440d01086d9b464f893c113eacc57171f74c7d2e003c1a15696b411fb054cdfd24cf539612deb0bc594815a7442ff1d52c

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw6641ccf3ede3d147.tmp

MD5 19efeaab6ead964abffe520f975dbdc6
SHA1 c895c62d6e7c25f2e7f142905b57565d1d3210e3
SHA256 c65e7b9671d7263622761d70591a5c55f47d1f745e4dde62712e9c211b50fbf3
SHA512 b6ac6a4d2fc6f9d031567badee63c99bb39d35303c0b0a428740216e90d549ed6650819c96fddd873f4e4cbf18bac0a7df2d42967a4d0b19076fcf39ce443f27

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw1af7302a6ea16ece.tmp

MD5 4142a4627d4d537389b641545dcda4ce
SHA1 d05daefc74c4c089f5df7f3d2e333b2f0d2889d5
SHA256 c8d3c40ea5c4ee9167c79aff577ba9598c1c95b649cb363f980fe72eb3641f56
SHA512 11fff083d8e64ead33ad980c459d3661dbe3aec34ea40ad1a4d54ea996985d964c09773f027932bb544c168c3a1e37d50ed82739abbb66d1c67d809bad0fbb89

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw7c9948183f60e082.tmp

MD5 6424969d1330de668f119587744a77dc
SHA1 161d63e1b491b673f617843b66aefa506860c333
SHA256 1ea135cde9495900f7d1339384f4a93dd00053796209f8d625f49c3a3d191ae4
SHA512 430ef56dc7d19f2b3565fb03bfad39d7f9ed67e676fa42337021131e908f93b8442d5d231a259eb43ae08f59e19d726c55e51c2cd684fc71c3a8a30657b608b8

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswa5b8953a7164ce5d.tmp

MD5 e849abbfca44c1a5489e92e6307aa9dc
SHA1 9e97d3744989f8ee8284aecca29bfd235b4edb24
SHA256 11311e78b47ce86cbce9d3fba59a8cabad36874f3fe58b4be6efaaf40a5e318b
SHA512 b2bf9d892db8c8b779d3c50ead5d2b275a2eeac9b9c5592e1159f6d2c04d287dd77d243af2b9ba1e507d5b1c8c21b742a85e0e2eb17f8e852176d4d31d224422

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswaf42461b8625be60.tmp

MD5 0fc56003ffa56ccbb9e7b4e361f8675f
SHA1 d3b6c0efc553d058d115a20ece9b28a29dd97b6a
SHA256 e85f92bab9228a9f68ed1dd45f10fd08a6e69ceb476cb2a62a2a4b43bf572c3d
SHA512 dbe5cf5ce11a797e13a0628ab737d85daf67005634a5168558fd683aac8dd90962742c5f071e1be746b0bdaa5179399f49835cc5cead525a683713e3948cbae5

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw5047af58627dcbda.tmp

MD5 e7f8bb557278ae29aac7b2576734e451
SHA1 28d81a31cddf7787b9616a3aa5add74f7a895b8a
SHA256 a199744f8ffc7b9c1cd025f4fb0421000bea850356e47707bf5ffce962b9e058
SHA512 53e088a7db13de8cf014026a2b8fa5345a1ed02376eadaef172e44b0964344a1b02478475d05d027ee51e2c7d283ffe55e96490f46e494adad0b94d392c79905

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw30d8406bbea92f32.tmp

MD5 01b946a2edc5cc166de018dbb754b69c
SHA1 dbe09b7b9ab2d1a61ef63395111d2eb9b04f0a46
SHA256 88f55d86b50b0a7e55e71ad2d8f7552146ba26e927230daf2e26ad3a971973c5
SHA512 65dc3f32faf30e62dfdecb72775df870af4c3a32a0bf576ed1aaae4b16ac6897b62b19e01dc2bf46f46fbe3f475c061f79cbe987eda583fee1817070779860e5

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw10088456292a0081.tmp

MD5 f3c9f61b9e1b25c9de8d817d3d1c02d7
SHA1 dab244ac19c66bb5a7bae0aee6e3ea280c30f364
SHA256 1f072a6dc98cd882c542208e7a8fe4fbe5239781588f17c005a2607fdfe62d5d
SHA512 8a6cf1e91a15b5a1db52880258f3a39f6cc3bed72e79598f7a10661dd9ed28d369499f585225eb016a2f0b7eddade096ba80083db301b68deb173fadde3b9619

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw3e8040fb7e806165.tmp

MD5 bb0e3819e308a153c99fa6bccf2f4e77
SHA1 d96dc06cb9f441869c5088aaee4e55a81fa14387
SHA256 83e7252e6af0e63bd80bc996eed6cb687c36b94f20a55a16145d5e68076b1587
SHA512 7eb23a895bc4fac0cda16b1ab8cdcdacac7ade76519b5d9e14d2917025f3cdd7fc4bd16d22df59a8dfe7b110eb8a8ce98a50355aa32d8c49bcab3596bd0a01ed

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw48dc0fc06c737434.tmp

MD5 57b9f090af61f408bbcf4d6a30f80c89
SHA1 6ebb3353feb3885846cc68f163b903aa3d58bdfb
SHA256 c2c826953847a616b59eaaa261a0c7712037691dd92df01d9b339c2ba752ef1c
SHA512 4de6ec03b25c5577a8cf8809f38891c9dbea104fc3001f0a7a16e9000533426d4c65f6704816449b2a6234abb00f78462149c0a77f662a65100534a25e1c10ce

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw2a2647a4cc2d08dd.tmp

MD5 971dbbe854fc6ab78c095607dfad7b5c
SHA1 1731fb947cd85f9017a95fda1dc5e3b0f6b42ca2
SHA256 5e197a086b6a7711baa09afe4ea7c68f0e777b2ff33f1df25a21f375b7d9693a
SHA512 b966aab9c0d9459fada3e5e96998292d6874a7078924ea2c171f0a1a50b0784c24cc408d00852bec48d6a01e67e41d017684631176d3e90151ec692161f1814d

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw93e7fcf674f7d83c.tmp

MD5 18c9b3e3cba9f9dcfd4f46be55de709f
SHA1 88e493b1bd4df6c6e91bc2ecf522d552b39d4cc9
SHA256 c7d803e0464fa96c062b58dca0ec44ce792dab12c62e220b86c1c29ce6005c3a
SHA512 e699186403e7017ff69c325154602d63a164111f77ffc463783baaf6aca3d08ea09ce66462ef5ccf92eaf7f81344ae3cdb4d212bc54773129f4bfb7af652c6a7

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\aswab674ff26e122dcb.tmp

MD5 e7b05ab16d02619ec58ca4e1964a2182
SHA1 fc356fdae1cb5f0b4c4217292e4a291eb190faa8
SHA256 e92f98ec9afb424fbea02ae7b4d881b11d85371d9a303b35c02de1a74ed4e81e
SHA512 48197499352e5030d07b9229e5c8ad8a2dac8339d55701497721cccbb7bd981c58de1e1d888e490f182646180dc0ea47a54b990fc2dc8b8f3905df3420379b07

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw547a2dc7d64e31f7.tmp

MD5 7b7cd224de0dfacd07d95b0045dd0d5a
SHA1 ec0491a4c45778c9d40002871ef5709f9ba14731
SHA256 56bb6208278eec8dd62b636ee2dcec2383ee59798d722410d7df8b0c3c04f3d6
SHA512 4bf4e8f8376b4570782eb8ef21c4086616779e59d464d4127e36928c530c04cfce87696480aaaef3630568f4d4ab163464e13db35968219d048231e420e51558

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw2aaff305eae16386.tmp

MD5 5beb048eeaa4d22865414f6a0ae825b7
SHA1 9476aebcd2ab30f9bf62b374f61417aeb00fee11
SHA256 6696608a50c505cc420b41b70cb47c4b403c2785c52c8aeb8a3d04cf7982b19b
SHA512 e6c766bacf91789a297b3b787bd63b5564caf88ff4772f6b14c8fff2d7b61825f9c3d6129afbfc9c589402f958732e1f0128ee529679fe3828a1d1d537981b47

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw14b5eb190b54e28b.tmp

MD5 00a96ebeb236c3d93389e23c7c40d6f1
SHA1 e0c4d209404b1890f988a099636dbcf4b79e4d85
SHA256 16b9c409c3f4cef7a276170aa9dd020afbfb70bafb1f10acea5e8d0e7aa0f6b4
SHA512 1558e6e4437a6b79a3061f960067333852a66dc3ac121617db341bed114d6ecdd9ac460a3c7a85f72af1d031754c08f732a55a1d1cc9bb5d27cea801e4849d15

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw0711b6069920d855.tmp

MD5 6578096f353a0390bb5012cab7c575e6
SHA1 9d4d9b988b28a79e59edc24ddad1ea33718821c3
SHA256 4fce17577c2eab622835267bb5e355442221de85a0e481b4eef284a2eb0fdb04
SHA512 6b95e1d61f85625ca91d03cbb1fea1eeabeb0e6eca1590352ac3b072b5cd42756765c2cfec73a7ef7555c9239e141eb7c76b2eaacd4314bb8b4dfcf42e514514

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\aswd9f61a5874d94423.tmp

MD5 54864a516d26061e225ebf656eaa5655
SHA1 1a2cab704a4a56da8424ef114d977518f2dce65b
SHA256 e378bc303f7008a76a845736d5a6b0d56746e4904a9792fdb642cddd52028b4b
SHA512 d529c7064175cf77607c54f69084973774c473a21c55ecb6bc9e26404a6ba1f893087be91c7c3003cfc66b4bd8e73c8d40a6a203378e98dd72da23e175303ca1

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw5ff9131880da6298.tmp

MD5 2791e9e5fb104a377c5c4c16b27f2612
SHA1 0d514d0d2efaf0c14a18d32d5623f0becec184ee
SHA256 018c64386a62c9759da743b29079b9fe205db71385c758d42e5065a58b7b8c14
SHA512 6a7d6dcebf7ccaf27f8aa60b27a755a80b72913e078a53b9c2d69622be130221e1ba81348951c3ff5e3e024acb03e93481df4571ec65b2a5675c60962e37370f

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw3282fa2da264d937.tmp

MD5 9846995dd9919b1e376036e06953fa74
SHA1 dd96f69d9a22a1f6d8dd5d7272ae4c33b0c08b0d
SHA256 e7c72a3db22143283d7b4d9ed66fb98a37fa9de06ea1296b076941d22c2120f1
SHA512 0f3774690f2b796fb96f7a6af4dca5046ffb0a6169c909b450be66f0ea38bce6aa8eda6af29d873c5a239975032ba5b89e050d84bac3e08a7e327759e6550020

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw68fbb653499e5200.tmp

MD5 1641a8027af5a754dd164d6044917014
SHA1 5577d0be9d5d3874448e9f2c77286870c05f6d1d
SHA256 f8c0711a512059c648e83bef2f5b23119a454f457496e1dfead71d6942298863
SHA512 dded04a5211fe7762952afe39d51fa3540c0d7025c19468d2b5218f58bdd88043977f9eff99aa33decb6599bb3a4dd2a326cf9fc4fd7f6c4f3d38ef18e77d339

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\aswc85ae4d70e5aa061.tmp

MD5 16ef841ae26b27e21957173fc22fff30
SHA1 730d5d6c7b4a16c031a334dd677a76c8342d0f4e
SHA256 30a25b56d4778e94f5fa2ac25facfab779dc0ead6d9c2f19e20244b6604c153b
SHA512 f6b2ec2f8b2028df3ed03953d7c8df9e9e45847948faca1c0acd4177aea9186698f80388bdee4206b160d4b64791686d9577b0402be11a78808b3037d998ccbf

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\aswb1844a5e5481ca33.tmp

MD5 c2214603327f41ec82d53ef166da91d6
SHA1 96069a26ca213b4e5762d4a4257cbf0cf5d71337
SHA256 a4cb4009975ce0038c9cf9b230d237f105193f202722094d39c63e49d923bc97
SHA512 830d26552ac2aa52e3c751549203ed9808d2b569a144425030f0cebf0c6a2c7fe18b6cef95d95cec2af5ad92bbf6dc23d272741bfbd2aa4fb7640937a4738dca

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw2dd07f5b2ca54f7d.tmp

MD5 84d7a38d4f0a1f63be32d3d85a84b5d9
SHA1 d51faa128f6e2b61ee282d05e986579eb9696769
SHA256 f344fa150e3ecc77387378e017fbb72a5b90cf2c8c451cae90c4eba3f04bfbdd
SHA512 f6375a45458ac9a018c9dbb70e78c67ccb9a7e8a21483a330fc3bbcd95a15576d6ddb795435b71b028dc9717331a63313d450e9699e5c7088e9afa70c5e028b9

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\aswa62ecaf94670838f.tmp

MD5 fc9d5650c0a6992895a7b2b5cf6d39e7
SHA1 cab181c155bd6b8abb3485304714e2243ec3270a
SHA256 e36f999d1e2bb978274a8dc2d6b7fcdbc04227d51645a0250df8e2bf915b1ebf
SHA512 8d7f2aeb9b01077856e835f5749ae22407389562204331bce54787d519765e0b537ee77efdc8b01e18134313730958f22104601335d7f9e90d0e9062b55de28d

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw133cb35824733020.tmp

MD5 589914e52bed4161fd4b288b2c07de94
SHA1 e8775b997fbf7e2c39ac881a217f57744b41b6bb
SHA256 67f146e4508967d30df406fb18d4d771217b6d3585659a5c9aa2499cdad01500
SHA512 7b4b815a1a1b13a7a12c6283d0739c31ea93abf70a23aeda480b2884416926ad910b05e477ad2ba63683540348d16bc3df50d598c32146d55e5b1e9a17ddbd79

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw40327972ef45c4af.tmp

MD5 d3805f7ad81f965327a67cf7b1acf853
SHA1 ffa849800d57097d4c8795d8c2c8f184573a1be8
SHA256 4ef4b7559269a0a826617eb824269eb610bbbc668c0de36cd50cbd7da0e4df85
SHA512 afdec49739b165450ccec8cf3aa12cdbf946617ef066b92e4ed7f271bf2bb81bf5a635031bf13a8cb300bf5f7d43b61a9fa637281b2ecc1c4d8f54401ed3622f

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw9602ae39d03b97c0.tmp

MD5 d8661447deb6a1f46d5e220fc75bbae8
SHA1 554bef2243f0e4d2802723d43af056c6fe3b1d35
SHA256 3dfc2a67b380b0d1ef0a206c6b2880fb975267d206773a2e0cf98bed206727e8
SHA512 d5cc94a459b951b2d32df163078b7e026a35e9332f01e9662e1100206bbe15c352e32736678e1eb88b9d3a60fafe3c8c0dcf5ab385dd6a2be99b7466768a937e

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw5d64181cf2a6705c.tmp

MD5 ca9350d978ec4e395d8d76b54da8b7a3
SHA1 fccfdbbc86303e2f84f5a882fc6337de72252444
SHA256 8e022faf3a8f7df42fb5c955b78a1416c455b819b4708cfc3bd619c914c1d5a7
SHA512 827a6e9773e698cc69b415c2d4fafc0ffc514a0636e05be68f3d06acfb97daacdcf35e34a9e5463d684c1a40fa330126843322ec5e6dbd65bdfe26ab21b684e4

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\aswc7a438cc5fafa5db.tmp

MD5 93e94d0e45aeec0c186bc3f74577bdf6
SHA1 9268a0568a0c296ceb54881f2c581a2549b3aa5c
SHA256 2e693984cadb0f5076160d800252017e5089928557cde628caa0966d2b3b8f0d
SHA512 b4b9162f0548f31533a3c09281447ac3261415659176153fe6dd3f3c4255024eafb808dd7de2a055f3640d0d76c4531ff4ba111d124cd6e8eefe62ad65c2d585

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\aswd1ef7108cb6a19c2.tmp

MD5 ef92efa971eeaf443f38a3c677fbab38
SHA1 b23e588c7faa1e292786da55c90fcc4ef52b96f0
SHA256 ce6b41db80cc6e437faac2b17852f26895ece6fa5ca1e31ded5339db4d1ae0a6
SHA512 b0fe8918caf89f2a3031b141c73a6c366629b103423c4bfbfbbb5726ca4a01976247620df6a69500780a07d68e928f3ac9d40d97c68a86ec5ddac449b4cc790f

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw064b89b625638c44.tmp

MD5 4025ae33cf64c88aa4d73ff1b74ea515
SHA1 2ddc1928982fb60c03261e399d9e627a51683938
SHA256 234a768483b288a5065986a6b44e3e1d133c4fe61508601e26f2c1c52a6db3fb
SHA512 17ee91236d068ea35f938aafd15f1f710a0fa00f58be29f4232a7faa79c459638623a8a93eb72086f55c948666dd747e26ce3739c3bd81fd8dd029f9a5c93247

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw2b952350b26ca726.tmp

MD5 fc012c8e58ebab289adaa27fc48d2ab3
SHA1 92cbe81dbc3bb8632a619a4bac4a083ddb36b33f
SHA256 8e096b90b0687a45a56bb85deee36a9bd3624b653901fd5585582e0035a1482a
SHA512 714ef73c1bf4a6f9f588ca7401ba989a973c5212310fadf7f68c0d52386c55cf7b7ddf2a4780abe8b173e5902f73dd9a61865796aa6a94eca6e1a1b4470c9a6b

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\aswf3ff72393b1135a7.tmp

MD5 765db87311161a131cee64e9d8f2af8c
SHA1 c8f2ab097f1fa7b55ad1ff27741147db6fd558fa
SHA256 098678c7c35e7c1ad545abde1fa5bca27b66c38bc122c8b54295ada1023ff18a
SHA512 b936e072bbd667df03b2a9da43872e628d2de4bfe747d13595e0703c3800221dd8e72a76759bdf886a4dea9ed0a27b27af3ffec8d9cc4578865d935e8477fb99

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw72ff1612778ed75a.tmp

MD5 1c52f55e2f2affeccc5a070a54e5a68f
SHA1 e77bf8002dbf8aa1bb70a3336686d7ae6af4d139
SHA256 94c1677139cfcd687dcc11b7b9cd94a82aa7ac2084992aa7d9db6a06010609a2
SHA512 c65395073c23171402d6faf50bd3cc8b789256e5284cc4d0c0416c5bb62ec046c21ff2f40dceea89dd0862b92d56e0cd8ada8c73f5b8fb59fc5931eaaab5da3a

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw11e2b90d476b454b.tmp

MD5 e36aa2b1607c38379e6749d106d316db
SHA1 d47e25f957ecdd7274ff249556a7a6500eeb0bb1
SHA256 6b38b7cbd1e1c387514f1bc464c0eef74537d059e09a20b3883dad5ba5e19d34
SHA512 079f4291ab644ddef1bed66984dc4b9ddec735e8dd0eb5a7915e21510d366a7e649a2ef9f3c49077ccfd5fbdff657ff7cc72c9b61e0a543b52eb6b90f12d2cdc

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw15ac48d56a6de901.tmp

MD5 b4489c03753849621a05fdf7a9d6c215
SHA1 b27fef508549083c38a91fbf2f7eae4996f20bfc
SHA256 22c729fb45b274cde72fbe83078d28d76e94d61914e0087cebb73cefb8e590bd
SHA512 bf1ed673342c226b01bf372beb38f6f6cde582492beb9f0c863f09e8c3d0664d748f2b3a0536e787313af4b5418ba600d031fac41b083ab7b61f319ea68e252d

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw9b1fb185c3d64b7b.tmp

MD5 86687c52e23debedaddd5baf63ed82f4
SHA1 dfa253dd1f9b4f84a54badd7d42ebd7a9881b451
SHA256 5253093eb83612fdfa121dabf3e4aa63a8b24ae74a6d14ea2b59f02c2059df02
SHA512 f3d33a391737f046d2fe6913c7d6da68b077d6249b8d09c70da009d9972e29a619c6b956f52d3ad2d6b0400d4dd63a893229f3d094a8928204c607465a586d0e

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw03fc7b9ff2066c06.tmp

MD5 d0f621b4fd5a2c6613333ff1df29ba65
SHA1 ca623f7413eebd7724771af1f2cb9e384a3c1ee4
SHA256 4c246a9b3c55b0ca1ee1f53a70034c8d0a073876b8b938bcea3e294505414714
SHA512 c9bad970ae0f52dcecfcc4a087c48f7e1b0f4dc73432a77898ae22719e5b7b0be0c48b3a879e2e96beefc94cf2b976479ea18ccd0f091bd63ed2694b182a1f98

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw73b96ec4a49e100a.tmp

MD5 12ef188b3d44a114d553902b7e9f3901
SHA1 e7aa13c21b821969af032eb7e9a60a5fd9b889e7
SHA256 2237fe7b80eae43679e2a770291a9a34f6811c320fffcda247794e0972c6f39a
SHA512 38ad0445167d00f84149fb1c9758677e591fdf74c5cdd8d405d1aa3f21475f8006d0c7737aafef446d506e5f9a275abf489d49f9c484fd72536046f8c96f3a2a

C:\Program Files\AVG\Antivirus\setup\ais_avg_crt_x86-7d5.vpx

MD5 776c702244f080a64ee0769e4115806b
SHA1 1c75f4d486e56dd9902e778392afdd7ae4027bc6
SHA256 183c0c047612f225bec9ef90094385efb204b5743a2492f6c574f2eae778aefe
SHA512 1d1e80c72550435ac4d60eaa7357c200658811991e817b9baf8c1c305845410874b5b4867552455ebcb3f7c6cc3318ee4a85d679a3d049c3a7ab5d6493651995

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\aswf3f455b5ea346166.tmp

MD5 6c7857b8cc69ab0ba8e0ec9eb6a60bf9
SHA1 62a9400b4ddc439797a46d02493476be6311d642
SHA256 3679526600fc83b81424caf6e39010fe20a2619519a1f293aae65e1cf93169ea
SHA512 248622ffcc61a20687bbb6a16771a9ec07a707e67c9eb65663e6dd5f4414d269c739e04c20a35b1619510ded81b8707dc854deada60ca87cb6cff3739ddcca16

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw958d83c609e442eb.tmp

MD5 c0ec87ee5b27bae483814a8dd12fabc2
SHA1 1375eccef419b27057734a91a7a2e0cb751e80ee
SHA256 d5f8c30abe8737c1473da4b0a0e17105f7e02787a26d5b56e5d33f6904b81387
SHA512 409b826c85727516231bf65f9cd17b278edc81ac7c7a48c40043ad05d0ecf0f8ab871076b7893dcd139e3f44257848ffeed85ad9058b98ac578e0c234cd42306

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw7492b65c9f8f4f3b.tmp

MD5 6bc084255a5e9eb8df2bcd75b4cd0777
SHA1 cf071ad4e512cd934028f005cabe06384a3954b6
SHA256 1f0f5f2ce671e0f68cf96176721df0e5e6f527c8ca9cfa98aa875b5a3816d460
SHA512 b822538494d13bda947655af791fed4daa811f20c4b63a45246c8f3befa3ec37ff1aa79246c89174fe35d76ffb636fa228afa4bda0bd6d2c41d01228b151fd89

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw3db6f78a77f1cc76.tmp

MD5 f16cc6ca3fe38a47608c5300a5eeb7f0
SHA1 ff69bce13fe14973a96f32923fb75f8b3a9b013e
SHA256 247b3dc70ca0540ba7a31e66ad765b2273d7253c20db719c0b14fa48420ce545
SHA512 9147681876ef5fa21d2fb4b7d87ecb94a9f2e56dbd677c9bebfebe1b59d4cc18759b4ed61d1f4092358a3315fc0bee6ca92b538174a6b4f82654a85eff742dc0

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw60e89fdcaba7997c.tmp

MD5 49e08414c8919c5bf316c2c8327bf51b
SHA1 3283d95843d91ad9ff38be1574fa727c755bedc2
SHA256 622246592d9b118ffcf2a30ef619d0a81d921dac5735362050093471d6c9ffea
SHA512 3ae3a4d4a5e8a4e210cd1b954864a148d5e1b2a3e6dd208e1ce5ae0fd31104c789ab4e8fa9fb8cb6ca35f98329a0ae9e610b4f6ad9653b8b03b4a933b1af5ae5

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw99bd68e16bbe8a74.tmp

MD5 71e4937249b1d5394a60371eb3deebb1
SHA1 0365f5435dd6d0ed1854c1543c55135ccf53acf0
SHA256 fb3d921311b54253cb93a1dd0cd8db7ca96463bfe40cccdd3f96d19b58757708
SHA512 48ced3bab54fbbbe2bd4988a23a53e362503c0df5f4c8e623a4560347fd8b8834685b9e0f287574412342a3dab8db446bc2a96e69705398703672c71ef622407

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw37bcbb6beff79acd.tmp

MD5 d52c7926d68a33cf1ba357af450f5c52
SHA1 274520849dc07123e53406736b69f10dad265503
SHA256 0acc16ddaf549de0850e50c1a9f68cdf2e2d17789cb37a1d466373193e8f6a6a
SHA512 890b8d19dcc83325471e6fe063ee9f148399c5a4975248600305ca3ffd6fe2567ddc3dfdf401a7e6b181dbb44e02fcc272c33a283ebbebb10d1cb7e6da5c5241

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw1fb5d995adcbd683.tmp

MD5 aa4ecf393c106e9687b7bb8ab91bb431
SHA1 3a726a8a830c12b30135cbe69b597dd1e358dee6
SHA256 4adff24cfea9d01a4b0feb1616b601123aae66f937189191a3ea85b964797b91
SHA512 3b7c087e30c6bbb406f75bf15b8fe72a96b7e3e5f242f4847efefd95c0633c86523221204de34ff1b699867ff6efea0d235727970a443afbb71829c28249d6e0

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswb127f6e15b2ca2e9.tmp

MD5 9886ba5285ef26aa6fb093b284be99af
SHA1 bdb8b82f95ce7b309d7cbe0aea4501455c2f435b
SHA256 44fc35755a1865d293e8f9b61d35127474717c03cb8d5c8e400bb288d6624d0b
SHA512 c1e172cc0f59da04cc5ccb44a33851f86ce47bcf308afa6521b64e5132baf52245f46a9a376dd5b922e3cf18d0339ec8b9424ff59a0b3695771c5f0e5ac59fd7

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw83130e705c327b09.tmp

MD5 004a1a453191f514d764107a0eaa5c95
SHA1 1f4a82d4239691c74bda12feb4dbe427703ee61a
SHA256 38b98b4e2f41867da273a37c9224a4a111974cc68f7daba4560bc2dd9e404b39
SHA512 ef50341144632fca0dc680e0c03b4548a66571e10dced82e291f6b079e084ed4e8f14757682943a8824080230757259f8bfe91c37e3309570486320fa3182973

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\aswb137ecec30ecc873.tmp

MD5 d39831f59fc93eb7dfa18bd5c371a2ee
SHA1 a431cd881ad4ab1cc8aa1f2bfbbe82d0ea09b7e3
SHA256 15e214446a836735fba73b2b647feac76fb6b82c307da67fed742fba96f9ce00
SHA512 51f1ae8d9cb9593500cf9639daa99583c9e1e8589a15c9a540cd224a7384489d7142cc338cab0c7eb8e6dbc2545f2f323b4561cec2d28e627e1663886259a3a3

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw5e73fedefc7d5285.tmp

MD5 0bb3382779e0645cfb6422a787063d7b
SHA1 e8fe3a813ee66a33f5f8f4131c716b97138ae379
SHA256 4cf65b89eda312a0bc96f571f889b5c7d0aaa7f63cac9eba0978315518eac7d7
SHA512 3a4cd4dd7b2e809bac944827243bad0bba77782172c7b54d3b3e0f755133b3f37ed19a393f60bfa1c60818477a2e6c67719975c16d2166c80f2478337b0a0696

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw374dd0c73cb72ccc.tmp

MD5 38a5ea69421cd83f8e76961df77bae83
SHA1 f2c26b9a4a013ed99285f35aa055fa537d7cd25b
SHA256 5f0529ff65ddb1a7d1bc9bf85720d39200e4f9d12b936cd20041b6129c37174c
SHA512 16418a67277e8e6e3654b1c8eb814f5e375aeae73c4bcb7ad06d022260813b6dcd249f44f47b38fde52f76c2456d98a0a79befbc6d680315c6d7a0843ac36045

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw0d01bcfb2f982fcd.tmp

MD5 eceff9c92e14b580ea84365f3d60f7de
SHA1 00699126456379fa48cb122e21b7f4731a72c57c
SHA256 265591a709a5db413d73c95b538da321edeacb40059bdceb142f997a3d458b49
SHA512 fd325d77eb2c30e1cd1b2d871986e057318c1be911793521c7bf79fb2c5dc359cb7db90c6d6c5711fedd734b6b03117b8baf241dfbd78585cf55a25983ec8727

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw72168c9b8a1d2b6e.tmp

MD5 013140c067efb346386c9aa47fac6fb7
SHA1 d182af7e337b552b70c692a255660347a2b17a34
SHA256 ec1c5e3c9dd3a818112b3c2920af5bc558b7ec3bcbca432e945eb712d4a0d85b
SHA512 57897b29553b145634d20048f13795fffa85e48d2b3086889abf765fa9449f130b7171eb593bb995a0eb25384b349a1d6cecc1e3260506681fec7f5575e2ac46

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\aswc43f26fe6042d8df.tmp

MD5 26b7a7657e4b9658a1dc94439d35dd96
SHA1 6b2df3b21b3edab21918e8c0181c2f6638187743
SHA256 3cac979f82a0508b24da2a63d2654b89883cc11062b77b3c2d6fdce7e74c5db7
SHA512 d90855210e7e7db7334471b3d81bd8e8916c5fc98647083d567e1a1741b9c18b26e5ec397579bc19f76a15ea440c82fe0d9e36f4cc90ccae3e57b11a4c00dd39

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\asw968d0aaf93357b7a.tmp

MD5 cfc08fca16c3647a42e78ef7556e4090
SHA1 83c0d044850ce034632e4ea8deabdb6a44fb2652
SHA256 0b08756920415c5f087e65c85da1fbc7a1fafc0d91038e0425cd339c0d903910
SHA512 623028520da82aeb5be1133af4432d4fa2dcc5007c3ffcf99ba25fa82532769a78802e78b65ad62a4cd69af4dc1661730f03cc0cceb78fc3798050b9aafbafda

C:\Program Files\AVG\Antivirus\setup\ais_cmp_cleanup_x64-7e8.vpx

MD5 d4e761fa6dc05baec7472c414da09ca5
SHA1 a2fab3d2f1b8a18a183cfde95910bb3080a5d5f2
SHA256 8e8c0b0f76ff2b4749538ed885adae490e5c66503fd2ec2a421ba04a7025bbb5
SHA512 b743ace38a803c45a58f7d64d0bb0797b9ec389d2bd81d71cdd755ad5b66c08287021bfac4be7c2c2dd1352d7d749e7c2fa55fa17f4c00d6b0226e577dc82d85

C:\Program Files\AVG\Antivirus\asw48487650bce7e0fd.tmp

MD5 4957ed73d5e5e303e351c8f8b7b53e1c
SHA1 e61238f49e44237c56d4d5b41aeb150160880b74
SHA256 59727f7a256b7a70971f2e62b43b0a923937f85689fc3aa4ae50e4fbfbf83499
SHA512 db4854667285bb1cd8d07ab189607ec5bc489afb2d0a5b5a3388f91cefd012feca689787452901e0eb1de6e8792e69c0097c38b89bba0d977d0b29e5e5ef2feb

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\aswf7671db564853e3a.tmp

MD5 146ae739f3acde4e04f992e1f6dc26f2
SHA1 9d0a36bcefcb06bae0284482c9f207799409e93c
SHA256 6385565a417feb3cf7165244826479d2ee12215eee930390b3ad28ee3608af12
SHA512 05e06f644c7694dd530dcea20474b5cfc4341e267fa05e90db2bc700a5e2e39f957005c7c75c8921d924e602974e20944e9bf3ef48dc82fafe5645cf5b3076e6

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw230b96a9934680a6.tmp

MD5 26f357ef413713c57c8f84837d1ec94e
SHA1 ae2671c819a2c1be8e7412126c2d93969acadafe
SHA256 9ba3c364897009cb7f9d22e656dcdea154b437d9cc2a81969ab11d72e861b491
SHA512 7f288a9d5b13dd417e8501e9ef8f624c0f29cc08e39e3cdc1b3fb40b4874a975678d23afdd081870cb8935fc263115b070252fe6288400b18cb175114546ada2

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw51be91419d6e6669.tmp

MD5 a50f84e5bdf067a7e67a5417818e1130
SHA1 ee707c7f537f7e5cd75e575a6244139e017589a5
SHA256 47cd1bf8ded816d84200dac308aa8d937188bddbb2b427145b54d4cd46d266f4
SHA512 892db3be7cb4c7f700a9dbe1b56331b2f6c6ce98a63f56ab6810ec1e51b362ca6577271aefa70cf4fbe867f5762044965b0b81da1f43d65120b4a860aa0454b4

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswe62283d0efc755a1.tmp

MD5 32e739b5f838dcfb8c1af0d3ff93eea0
SHA1 98bd2ca3c6bb7e5e750a7245a254906f38a70c05
SHA256 b250b0e69fd96f5f398fc6a0e16df54f632bc9d575d568e885cf25082bd80a8a
SHA512 818eb27e6b0b1d5e9487b588bdf492bf3ef176d43a83a039f651aacd8ec748bf8225966d6957489383d05e1ac63f69e98e91e557719c41bab690c1a2ff4c780e

C:\Users\Admin\AppData\Local\AVG\Browser\User Data\Default\9720c742-cb97-4ce7-9bc9-305f573a5e21.tmp

MD5 5651fe0e14f3e8eff15672302b40dd5e
SHA1 3d5a012e9000d31cfbc25fc8c80c176c9d29b635
SHA256 4db3e16e9e1ce0678726afe8770ff33aa07a255c1ef1132fe523aa02ae5852d7
SHA512 95a1129a149348ebd082109924dc251e90fa26e027aac6d65f99f2733526eb3cfb376d866ea9d0d5e2571c2fa6d8e1a9c239021972f17c01b7bb151eb7ab780f

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\asw09fa135cb55849e7.tmp

MD5 29611d3442a5096ffc8eaf94d0aefe1a
SHA1 fbb3510d6e3974a69242fb743b8b15b6bde0ee33
SHA256 775c77f0c4d2a87b207c9678dfdbff3496559561a95086dcc6ada33c47082a4c
SHA512 925f430b8fc079776af9388bfb6b741b7c580a6e226ee88e1817bbee0a1584703b83a5195cc3c24ad3373c8e30789be4847b07b68fabb13925db1ce8c3ced726

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\aswabef1926c03fe988.tmp

MD5 605275c17e1cf88b83be9ef4c330f86b
SHA1 4a43ea1171ba60f0ea55bd825173e0b113d3c3da
SHA256 3bbbe0fdf572eb5bf3a800d625faa1fe0d864b126c95425d529870f719df7315
SHA512 cc59f53aa07c4fc6ff5eef13a9a09cac8b38ba38226461ad63ab53213d9934430ca297714cbacf36688573c2a867181d36330ae35d525416ee505789f945c115

memory/2044-4981-0x000007FEF3B40000-0x000007FEF4E66000-memory.dmp

C:\Program Files\AVG\Antivirus\asw6c544ef19cd20cf7.tmp

MD5 69a7c590c8cc2f7c08fa310c0ce23c36
SHA1 29d40599f74c3dbafbb13ca5fad228c8ac2b738e
SHA256 daedd02797e56ce3ce137b1e7142ac3c4ca03aade06cc767981b859a232d6a00
SHA512 0d5bf705f22c35c6adc76b5996d7181c95b87392f23cf72a4d4eb024e45ac237a70b2f760f3ca8d765266db4468641abf30720bc71667effb7dd8bf070c39e75

C:\Program Files\AVG\Antivirus\asw31e08714cc753221.tmp

MD5 aedc274353510d08e05e9c7f805184e9
SHA1 48ec30e87bec8bafd7c9a3a642a92623ac95bdcb
SHA256 5d875408fe1a4a314e38c0ed8d9ff7d05a2fc442f1c31ba1055392fba6697713
SHA512 7814a19fa8d64211127402d3b23f295d0454be7d5cb14da06574c4cd16bf614a6910248321314478c64261b1a1eb778aa1ceafcf99bd6ba572675acb11fe2b19

C:\Program Files\AVG\Antivirus\x86\asw4e692cb44c5b887a.tmp

MD5 cd2d07c86cdbfc815a01ccf79daf5cb3
SHA1 1d53b36dff030f8e3b06b29eac74ed5df72f54de
SHA256 da62acd3e82b88a3c5bc482b57fef8d91599d26b0b352e2912b54d4087782085
SHA512 8ad8338b830824073d4bbea1e41f2c1a1894d38099566a0ef78e242e7a8d8c3fa6bd71e9ac6d6f985eca9d22bfaa62c23fd7e21e560b47fad4823747f8d216ee

C:\Program Files\AVG\Antivirus\x86\asw1990531068566295.tmp

MD5 de4b9553c284268e834fde314184aed9
SHA1 c53931a54174a758a8604fb86a13f176adb7872d
SHA256 989cc6035198f0999362d86e3fe77e1aab02421b83aa4436ff449b8089e3da65
SHA512 51eecfa52583dfb748b752f134ac03fc1cd1e91ab4226ac637681ca8fadb5877c00f5bf0e0246d8131effa487dda5b6977697abe7bb4f70bbd2a20380c8ddce6

C:\ProgramData\AVG\Antivirus\gaming_mode\asw64aaa5cbaff11b08.tmp

MD5 0bd42763975dc54ad5efdcd321c750cb
SHA1 24202455a58c7ced31240a90603c6489728bbfce
SHA256 4845a0d7b287399933536c12ad5549fa4f4d49f42500c7311dc2c3c108480a7c
SHA512 9204678ddef894657c0f6bd5451294e104ffdea90dae12fc3f642547debb80435b0cc9d08680f50482bc1236daf5ae1cd79c322eadcde7765e9e251231753e79

C:\ProgramData\AVG\Antivirus\gaming_mode\asw03f4fc2a0da3c34a.tmp

MD5 9bf31c7ff062936a96d3c8bd1f8f2ff3
SHA1 f1abd670358e036c31296e66b3b66c382ac00812
SHA256 e629fa6598d732768f7c726b4b621285f9c3b85303900aa912017db7617d8bdb
SHA512 9a6398cffc55ade35b39f1e41cf46c7c491744961853ff9571d09abb55a78976f72c34cd7a8787674efa1c226eaa2494dbd0a133169c9e4e2369a7d2d02de31a

C:\ProgramData\AVG\Antivirus\gaming_mode\aswea1fc8058e64f5d6.tmp

MD5 1527c1fd5da898c3bdb68b8a105937a4
SHA1 d0f9fd4a698f91f54f78dd2043c1349a7e4ae7f3
SHA256 c269c9e66b2acdace62e8ab631f39c24801c4644193bb3934a8dea3c43f669df
SHA512 d574498392a55b47dc81276d63a33e9870232e77f60ac0d78c9bd29e3d419d015a19241e86a7963191643f6c0d0fd2db613ca5290d559c3801358a60fd5cd27b

C:\Program Files\AVG\Antivirus\setup\ais_x64-876.vpx

MD5 1bc46bbf3f84e1d0d5734bbb84e9da9d
SHA1 ab811dd94295768ba9fb9d0cc78fdf30bccf5b4c
SHA256 2d4609a66852d1ea2859fafed7a69c10cf950ab4cd9e99c6aaf60f1763dd9e53
SHA512 5686261804a278bbec495208fbac7ff13e66cda6db868cc4f7fdf4057542a4bc181cd36e1f801e4611d0b12d98289ce61f9cb67e0c0861335c3d1fe1496e1b90

C:\ProgramData\AVG\Antivirus\gaming_mode\asw7406da9e30e831a8.tmp

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

C:\Program Files\AVG\Antivirus\asw109593c2f2d04415.tmp

MD5 f813e4a676f4538ec198dcbe06824150
SHA1 3c8ee4d516b436d520c85036f3cab72d386089b7
SHA256 7b1f44a352a7d39d541b0907501a581e981fe51cbb5f2dd72a58bc8aabe9d82c
SHA512 3aab1f7c0541b39b456dc3d935579d4337d868673b6d7dca305787d4de66305f950e1269866e633170f4e2c65888904a011868c19fdf5600f2a919d76d95e53a

C:\Program Files\AVG\Antivirus\asw0226a0017ff57c2a.tmp

MD5 1f77457cf945b1a0d8f01acdcb435fef
SHA1 8425e8f83b4aa8a5b5c859e3b1745a227cf73847
SHA256 bf46bb85a2b7f7692ab536cc8779f6e323facff5229be2983040e37d46a3a227
SHA512 9d87ee1bec639ea533c2030acd919e2be6707f781a479d9e5af6e8fa7b97dc1925df7929a79cdd58b431257110d1b5d61a58bad8293700004fbba11e6631c6b5

C:\Program Files\AVG\Antivirus\asw2c08c62bd8ed62ff.tmp

MD5 3470ef7fd503d04604876276fd8e7fea
SHA1 79faf432d0d8a4744d0300c2004674aa16e02881
SHA256 1cfac88a3ec7f0945496d06709ae889f71d7a7d3aff723adda2f112cfcccf74f
SHA512 29b79b7362a40de8e8aecac227ef076d6e61c1f4d4eb5912af3d55243db263a04b7bbadb743aab99c16fd5134f172680b2ccac082146a3c148157ff5691d4339

C:\Program Files\AVG\Antivirus\setup\ais_res-876.vpx

MD5 9f33fe6a5fb6ab1f6947aabe92dd9810
SHA1 f85d0a741c723abd106f7aa06f10e42ab633370d
SHA256 4992fa3740a87268f19669c71725dee815da881875c6fc697b3ee12a9053ee92
SHA512 e79b307ec5d999c442e76e130a54a1d3bf2a1f33d35789331f83752f93d63de34bc9304348c6494b95f01b1c5928bdccbcbe92097b7535fd37c9f90eef3b6650

C:\Program Files\AVG\Antivirus\setup\ais_cmp_idp_x64-869.vpx

MD5 7aa295cc8148ab5a441227d6d97f4c31
SHA1 bfc9b10986c53bfa33396432f6bbaad393006ee1
SHA256 974726348c2dce1238101d8c207d2c10431bafb4e90713c54f9ac80a06a54918
SHA512 e42577ffc19bff4ce846b48f260154836939150d81f410cec56346acc5f10092375efba6acfd91918fb3a62eb9959c37695d401b3bdb1cb4dbdab44cbcd3a6b6

C:\Program Files\AVG\Antivirus\asw33cbc5ca87a40b62.tmp

MD5 456acc031c76f575265c22056b5cdfff
SHA1 1e442645658d1be5f3066b02558a14176adb6222
SHA256 e2e48e7a0dad4aacebb4bd90f7c5586022637f9108d69be624b2c56f34481a90
SHA512 307aeaede2b6d6320d599898a6ac23108d80f51eb3b1cf41663523c544918947a27a4798fe614797acf91dfd4050de12273eebcd1fbcdc35b6aa028a643f22a0

C:\Program Files\AVG\Antivirus\x86\aswef1d8051518fcca8.tmp

MD5 dc1b4025fe3dbe1a210604f905e1e33c
SHA1 0fe4add0bc7f63ccc019ee01aeee7d2cdcb9c7d6
SHA256 693f4528bfde8c4a060636f0bafb0d61dfcd75101452bfa41c02b3f1d11b5282
SHA512 e0f622a93ba1402262c4e1aa8fc1b0cf4f3888c0a65278a0a661e8dd14f6b9e6719189b99bfeb93e798ae0d08428172686bb2b5d7c52377d4379e2c201519ae3

C:\Program Files\AVG\Antivirus\aswf27b5ade21b2036c.tmp

MD5 7c4c6ea4a85ce149ef06ef35b56e3eba
SHA1 66bb58ef5811d5b54e6721b3abed7afd4ebd9159
SHA256 0308c3c063f1319bfe9fdf4035cc43897ad2606bed1c2e0ac77fca8e562a0ff9
SHA512 80d94930e58b2b5c9424cda8123ee9fc45a6d295e245818b7dcb8d63423010d8e81c7c45ee790eb0847d998984dc2ab9349e281622fcd175aac31e74dfc57297

C:\Program Files\AVG\Antivirus\asw0900f2f94d4635b0.tmp

MD5 83733e9f12613dc258fd81960c05ccdc
SHA1 06590cc976e183b0c5b8672b9746f9d10780c0bc
SHA256 3d7fd80aa799dbf0c18a04e4cad82a594684dbf63a0f886799e5a554b655e9fd
SHA512 3843061b1d53eec5d065dbe04340de73b66dcb852a0bbce8b93185cbec2228a11fd2f7f07e98cc2e5bbb555f190c847d35dad7adc0a2cc7bec88f467c831e9a9

C:\Program Files\AVG\Antivirus\setup\Inf\x64\asw123b5c5ea0aebf25.tmp

MD5 91b8c0e1f445f5bdab096396d9975208
SHA1 e5d88c7214cb8ea7a51728aa4031decf4a5b6981
SHA256 add7e9c0f066baeab066bf28dfa6308716151bb42abcaaac1efe5a6c9f003a5d
SHA512 beede7c727ed780a1af288e9b885a84be406cad75e202645d4661802d22ae25b4c6c136f3e48822fed92a92aa33fdb2adb88212b7bc90128d0201764121e98a2

C:\ProgramData\AVG\Antivirus\aswc42855cd61a30244.tmp

MD5 db89473157a2109d2cc065b9c62acd27
SHA1 d903a0ed7c5aa5a686c883a597894657a8c0beb9
SHA256 2b8d115e38b1ac4ea4fe0ea24006e4e2d7e6429f469b4ff0f1ea45fee4e7e8d6
SHA512 41486f90632e52127358b7a6046b347d47ffbdd62970ed67980b56c247f68ece4d7d0250e19c28c7045ab3d4c9d7db40e1aeaf2a4ab33d6ae4b591f05ebe3d3b

C:\Program Files\AVG\Antivirus\x86\asw13aa8d1d4e5e66bd.tmp

MD5 18d3e1c23845defa56df811e22e1f3df
SHA1 e314a56e3e2a014c771ca888055f1157fa4461a3
SHA256 0bd4ffab671b5a89401660d7de5cfe5e3a33d34e14e9636fc803a80d2a8ee57d
SHA512 ccbac018a73e9fdcc4888709e415ccf59ad2934863f47f3969707e6202be556bee49dfbbf925de0bf7b5e03bb2fe088ae6a24dc830b8c36d1f8874af5e4d76af

C:\Program Files\AVG\Antivirus\asw08508e04e897e2fe.tmp

MD5 185a51217a8b9501053d56fc05a3e865
SHA1 d3d06faac5a5773eafc3fa8ea4b591044421fc87
SHA256 3104cd5490da5663f465b08b1cffc27b8aa2eb389c51b21bdf1cb6546091624b
SHA512 2c220d06681d6bd76aba7fa7f1a110c928653ab0aa04a5f091a0a442bca88aa0174ad581d22f0f0906daf4b44aad78b5618d0d6f7daff4fd6e6d9505a34266c7

C:\Program Files\AVG\Antivirus\setup\Inf\x64\asw9f0a776837ab2f50.tmp

MD5 b92dd5182509fc0d838cbc803076fda5
SHA1 7906d87767c2b66d8537251435e4bb1038ff962f
SHA256 1728b25c18836a30993e7e7f01dc55090fc80a734f15b0d5dc05bd87027634df
SHA512 de0c85f6278790a8eeb783f5efb327c8c65d9dad3c818bc8f6994b9a28901020000dd464ba2d87fde42ea71bb15c21b88a0895b7863847e3110a96d1cb1ab79b

C:\Program Files\AVG\Antivirus\aswa466abb0bad8c9ef.tmp

MD5 48140788e61d58b0c0b27810858e6a10
SHA1 ab7d3db8815456fa2598481aafcd824644f77220
SHA256 60ddd12f3c46fdfa8a705d8b407f634e952e421241998524895422c292d43f9b
SHA512 55b0e560d302ecc1c04213ccf6b346ced6fbba1910027b4fa5746421ecbd6807a932d24ae5c8612193cf2e458f233c44b722f1bf23c216f5e6994eeaade71141

C:\Program Files\AVG\Antivirus\1033\asw6eed250c4868d309.tmp

MD5 4ebf04faf20dff03f5d62d5af5f32151
SHA1 7088e12344219071c118ddc11415c7a8643e52da
SHA256 c27d162c8c40c816e09a3a0093e7fcf30df436e3266065633450595ba156ed53
SHA512 b784cdcc2ec75da2faf00ccafc211cb3fc874f085000bdb6bbd2e05fb1d11dd966cb04e5a1c8f4c91b0720e3caa7a8a82c753c87546005a969d27ece581af163

C:\Program Files\AVG\Antivirus\1033\aswe0392dd2282bfa04.tmp

MD5 bdcddde17edb97e31c4807f8d7acf493
SHA1 cfedb83267a1846b4540b54671dd7d61424bad6a
SHA256 ea2948d2b0d29c0161ab035308a29f0b02250e1f1d52e816f6c4921bc00041bb
SHA512 51bc2846adb8fc561d62b4207f3bbc298465362e67f66ed2654e5eec69a3ea62e9eedfac2a268b5f92b5fe004d99ba549c2c4d6ac176044267d4c9677365ac6b

C:\Program Files\AVG\Antivirus\1033\asw5a34e9618215b826.tmp

MD5 9293ab9e72ea339880ed902bafe3267d
SHA1 52c1685ceb4fb3021c30186c69a9df43f91c4721
SHA256 b7e87ef164f514767a1c16d2016f1a759bc9610bd8ad48d19e1e94f00d659a76
SHA512 bc076909c1c4aff17cbc604c53b138d8a290cbc6e398697c283a9465f5223a1f1fba29ede1040ca7ddd60ce2572ebd56f0e20426b217fc053f32a6fce464938f

C:\Program Files\AVG\Antivirus\1033\aswd393e12f3854324f.tmp

MD5 64964e03f0192a8b27391b2fc311d756
SHA1 419b0c6ce4d26bbcd8e3839d85aefa7808e989b9
SHA256 30fff47becec5188cd2ce78b8b3d49c584153c343ffa2a2d8e294c90429a6b4f
SHA512 48859b796101c2fc3a335e51be254d7843bb53cc55b049b3f84fd0b6cc6132b2e1deb5f8e7aef60c46fa2f74ec7671e26d71b8057e6fc45e121923a23d8c0486

C:\Program Files\AVG\Antivirus\1033\asw64c1a96e76ea1fbd.tmp

MD5 45898d6ef575a94cf7c8f447f52b1a0d
SHA1 2903789a6e7d6e3b7e7338fab5dcef594aecebbd
SHA256 62d22320241e2373d029930dfcb8788ee14e169f46184806d29e9662f246f541
SHA512 cf8ba5b7df7c82ef7bb11304d6fc8a89fee379672f105451e67d5b175ff2b0af2b35292729b2b0054e37eee89df96b7b5bcd740dd23c3f9274bd135d9989247a

C:\Program Files\AVG\Antivirus\1033\aswfff78d7a138ea5ee.tmp

MD5 d345f5ba37c4842b71891b5a20bbc89f
SHA1 60bed3c9e9774207380204a2f433770c00bf2b2a
SHA256 f721371a5421cbabe60ac0acbf6af87fd3798a4b124a60c3cd672ab3bc9377e7
SHA512 b728d72376b1a3fdbd2dc1742a19c6197b42a5431e3133d4e1473c01eecbe3823162ea82eeaaa85d5b6548ffccb706940e81efd1cf040f0826540c9abbed141e

C:\Program Files\AVG\Antivirus\setup\Inf\x64\asw566358af9cd600a9.tmp

MD5 5dfa5673219dac88984bc417af99d31c
SHA1 02ecd7944e97530018cd6f28f4d204616104a448
SHA256 9501a0158f196b1ee5370c42607b2d07ef450785a68a00dd760afc29af7051c2
SHA512 1153c1a46056284db7f7897f342b30e6d4fdfc2e3043bdf93514df4c25e0f864b9b91962da4199db50d2ae412883224951ebc3eaf84c6f0fc3692f6e16a47b4a

C:\Program Files\AVG\Antivirus\1033\asw3a945bf48e1d15ec.tmp

MD5 f27e56279b0de10cf9330dd15c36f997
SHA1 3aae430d7f3248afe29a4e70919570005bc4743a
SHA256 f49a2735886ec0a1199973160b88ac88dee576588f4c0a211ed5ebf44c566067
SHA512 bbd01eae02dacd6452a1edb191d1aaf00f2009789676cedbb5e50d39627ad7d86176763294c63c48a8e84bb77074363c5855aa42c4e601584748318751f6b7cc

C:\Program Files\AVG\Antivirus\setup\ais_core-876.vpx

MD5 b63edc41e5815738724b522eac66953c
SHA1 9124be4c75ad4ff7e201bc35dd40504a9ba10b02
SHA256 e6b8682cab76e218ca2f82aebbb8a4a6c9420d1ac5cb6c515525e9a27ecb47a6
SHA512 5eeff8454b6a630ebcf2e4ab552b3eb897faf11e808378bdb4957e964c9baad8a5bb7618c3412f2c145d993f5830b10b390955acd6896763518588433110dce4

C:\Program Files\AVG\Antivirus\Licenses\asw1a1a293ba3766222.tmp

MD5 b51058fead1aa71840b79527f5bffd3d
SHA1 bc3c4d41d4cc7753bea8e7a77fdb7cd384adbb59
SHA256 beb8e42e9d6b4284e03304d05a81a0755200a965fc8d0a5e0aea1e84cf805d6e
SHA512 f1a8d21ccbb6436d289ecfae65b9019278e40552a2383aaf6c1dfed98affe6e7bbf364d67597a131642b62446a0c40495e66a7efca7e6dff72727c6fd3776407

C:\Program Files\AVG\Antivirus\Licenses\asw6a2d456a60bb77a3.tmp

MD5 c26b34f5996c7ed7f7bce6aaf6c8a98b
SHA1 553e3a3efec9a07d9b08fcaadbcd88f2099aada8
SHA256 f854ae8aabc0404652b48a2b3bf7f21ec174c69d73f5596934c20884eb0639ef
SHA512 e3c82bfe3bacb07e3a8327a01b2c9772e44bfa1a8012c0f0b363d6e3b2ee2371bc66f9c207611cd6f73d6f1ff1ceb9b2bf2c7d0864ade256d41d533b598a804f

C:\Program Files\AVG\Antivirus\Licenses\asw0c9dd1b65234d051.tmp

MD5 98ed747585fdae910038499a32caa6b1
SHA1 5bfcc2d13e2e88a9e73c5146cf81655a80038b27
SHA256 f65a29ae37f5222f6ea8ded3dfee6b2c9ef368c93665c7cba8ab124940f4c7d7
SHA512 d5e54661e48daefb34e2731c8e331bacfe3b0b14b81108bbeba8d353cc7e3f0dc46d6e5ff68ba3066234eb1ffc9bf0b45f02ba4efb3e223c08771ee7a8915dfc

C:\Program Files\AVG\Antivirus\Licenses\aswe14c27f4185e89bc.tmp

MD5 15f12037d9859d059c3a557798163450
SHA1 b3609a3d6832159913cc9b8fb128df1383087b24
SHA256 e668af8c73a38a66a1e8951d14ec24e7582fee5254dd6c3dae488a416d105d5f
SHA512 a976ecbe99ab8f29c8290f26df5906326e820eb3f212928cd2b74783716bb6b7b6e75104140b2816408af15a1db30f4f5ab05133baa2c2d3a6e48c6d915fa915

C:\Program Files\AVG\Antivirus\setup\Inf\x64\aswdb0a8129d79d80e8.tmp

MD5 f52d112bb219689982530f12953f2a18
SHA1 99d8c284b244a7ead0b00f9531cfa4fd6a18836b
SHA256 7740b6c6043b3a37d688fa5cc221938b34810be389e7994cb5e5c9a9dcee7698
SHA512 9318c4f30e1220b8ea08cfbaf5e1a95155b7dfac19364c86a8000903b56a000946b1c762fbd91f99c960cabb2fc42b867c4971c522458400c900475b9f5572f8

C:\Program Files\AVG\Antivirus\Licenses\asw99b1b3f77a0f75a7.tmp

MD5 598fd6266b820d382b6f1134f56351f2
SHA1 91d5e0457d0b8a0b9c0a2f557e0e2dc4d7f3805f
SHA256 656e11ea18f7fb862f6625469b822583f3c08e986b3a24962d74737ebf6927e6
SHA512 a1de7199ffc3adf0a4679b47ce77ccdd6ebe7ece123d286c58236a08b64c13c707e590fb5a12ad0a72e6a5907356f4d5754151eb7fb45a99d71caa50912c16e5

C:\Program Files\AVG\Antivirus\Licenses\asw4eebcc8d3b45880d.tmp

MD5 a2a0baea9713f129f7d433dcfc635167
SHA1 349e31d4f425c71d5c63e2dcf4a19f5e0edcb57b
SHA256 f155f8f66833bdc8e0479656256bfac1d66a9ec9df4aa56292308f522b4e3fa7
SHA512 87dd90b17aed6c5aaca53baaa3d149c07028f730ca34681842aa9c855817413345af27a0bd27dfc64677ed6d9b2e9013b585bda06130315cbdccf0a27103a809

C:\Program Files\AVG\Antivirus\Licenses\asw37c4131a4a440bb1.tmp

MD5 51d2728ac2976fdf6eeb3a02cd58982e
SHA1 3d4af58a6b52ee70064abf68a2412aac2cddd42e
SHA256 c3aed6a54154090685df3bbcd72e7a84943a4f3d5e5491bc6446a0b2d538c493
SHA512 734dae65afc8b551ecbf6665dd0a48de8eff2cb815a079a2bd7e37e19388253e39441a779403cb553d091449ae1eb858ba560726b86b2486220bc694f85cb6b3

C:\Program Files\AVG\Antivirus\Licenses\aswcdeb98c3e1729bfe.tmp

MD5 513ea4bce55c427e58b1b6d40d087d24
SHA1 d2f6cc5490d34da9fd15e6edee4995d6eeb42892
SHA256 7732fa42ebc8652ee3300a086a068f6aa5008cfa0d14948b144e4b06c82efda7
SHA512 0c9f8d90f4ca229b5f175384d0cf348cdb8bccc062ba5b2f97d5aba0b9d823b0ebc2a0634041ec70e62715250a238b41b0c31ccd76ac24b8e864508d93251931

C:\Program Files\AVG\Antivirus\Licenses\asw0f2e1f4d4448c164.tmp

MD5 97aa3aafa51953d4ad591398b916595e
SHA1 a849084b5239438f44c43b52576171f660576e2f
SHA256 ed72ce2b51ee58f117e5a021e2e04af158857f40269fbc03491f0b2a99dbcc96
SHA512 0b54f6b692ee9c92e0a867361b1601459cf6bcbd653b902e1dafacf3ec445af11023e8a5f7485e4513d351ec662ba39dfd52a9e84858128e512e68ace970c18b

C:\Program Files\AVG\Antivirus\Licenses\asw8d2f06777fec4af3.tmp

MD5 347dfef587108750fa72297199fcc986
SHA1 0e34d7cd8afeb7e3a17bb25f371262a1ddc564df
SHA256 08bebda80b178f4b558faed4e52930f66e855614e4dfae15a436733b4712e041
SHA512 defa096320296c640a94a6abead06698a7682bf522dc1f216bd6a3fb70519d789b83ac061a518672987f6cf2d5fe5f7e60d1f9dccfec5b74c9b387ed591339ea

C:\Program Files\AVG\Antivirus\Licenses\aswe3e8535275ba7315.tmp

MD5 b2feaa6a26c0149af9c4fbe2d6b692b1
SHA1 23df548394b0b16e6d5c733b427307288e1b359b
SHA256 d7e3eaf9a5ec61dd5f4065d252a2b0130c0e300ac3ac9cb307469e2a86ebbca7
SHA512 156e4cb2a1ae146cee9cd25258b299fdfab716866eabbab3e01f23a0e063e4469537c0a1e497d36f829e710211fca7db58608ae6bce87cacb75c66c8a57483b3

C:\Program Files\AVG\Antivirus\Licenses\asw4e7e7610b33204dc.tmp

MD5 7df5cd81700618ef9926feb32290d2af
SHA1 4763ba7dfa7730d98b190dd8a4a2c6818d301fcb
SHA256 60ae0f13e76cc2eaaa108677eefa4ce16b647f6bbe8cf0a1ac9429d82eca7248
SHA512 92c0bbdc5155d6e218682840dde38697327973b8f45e0c6d100705601449a6f1f8eba74cef8bcadf09ea945602b378bc64e81885f40965fa038d7974a71e5641

C:\Program Files\AVG\Antivirus\Licenses\asw317031fcf781d536.tmp

MD5 a5f132cdee178b77dcac80346cc12b62
SHA1 d44350c4d2332a9a30f154f896e88a3e89016825
SHA256 331b34c5d939627eb370fe4250beaec0d0fb5edbf687b0c3631930385026cf7c
SHA512 d3e45ff903524667e40fd06870c957eff349e44eef22a2d9e9e01db9ff806dcfb3082ad5bf974b864944a6c4b2d7d9910d67e440a5bdb50be23600115537588f

C:\Program Files\AVG\Antivirus\Licenses\aswd5eb722ef53c3936.tmp

MD5 9087d9182e280d5a124e844fcf52af82
SHA1 058d1d953744a7ace99b86c97238a3083dde120b
SHA256 5eca2c8028dee3a4728012bc60a763f69205325d0eb75b344cb7e10a788faa96
SHA512 18758d28733aa9db4257db7a18176a8459265021f6cc60e48ee6bbca422411d798bc597a683afefce0045c2b025e65577f6ed085fa8c9acb10b3e23464da6dfb

C:\Program Files\AVG\Antivirus\Licenses\asw22ca4cbcf1451470.tmp

MD5 128b02ba4177d31ef91600882bb0baba
SHA1 6b98f098fa3f1cab58b9610b0af9c9545d5010e2
SHA256 b87ac954a37f855f6f7199a3154e2e84623558df980e8afccb94c5c93bd4cba3
SHA512 77b2fb5862bd1d999cd9549319ffe492ed20aa63659003bfb48c2426242984f97b6666ba9afbb0cb7d71a46f4f5f7e883e31c248f9b9eec339e3d4d7ffa66a0c

C:\Program Files\AVG\Antivirus\Licenses\asw6f26488cf676802b.tmp

MD5 d774c7a88d7b41d7c73490067b54e3a4
SHA1 661206b3d45d9f6836915cb266f8536ef8ed39d9
SHA256 6182268f7c8c37fef81e83f722d1ac9bd1ea4307f16005a6900bc1aa473828e0
SHA512 7f9bc6a96e2cd7a1b8522edbcb72be141a5136dda654e0e8ab5ccf39a216b23478c64bb4fc68a71ee303237e6e9e063adb84873bb786e235e9a039d914e7b762

C:\Program Files\AVG\Antivirus\Licenses\asw60760c44089bf481.tmp

MD5 4434d135a9d9631e1741ce7254375a0f
SHA1 e2d2dd3fa7a0f0f7814118af8c03094fc325d333
SHA256 2e69c36a7eaa4fa153426eab635c607ea0356cbc7a68a70f42a49e8ab8eb8106
SHA512 9c59379e08895138e88b588f0ee3c4ab0938e8fd6906ab041484c6ed90da38c7ef9df7843002abe5249b359dac56c9c064f9119e58eeb1fd34bb2b7a35194450

C:\Program Files\AVG\Antivirus\Licenses\asw51149416e1870524.tmp

MD5 8915cda79ecb12328ccb33113dc85ecc
SHA1 127e0111a102fb3f6af9ad82d0620f4c4ac2c164
SHA256 7c3794f6aa18b133dc86045d00f3d5894682084692a959ce521982eed4554f37
SHA512 30acf8eb04e4063478c8ce0879c838dd9f9083efb6e239393f4727cea279a171ac4c597f3f1bf855210eed3091acfb50d9d31851cf6a147774f3bf246d6f4d59

C:\Program Files\AVG\Antivirus\Licenses\asw40ce5eb02dbdb402.tmp

MD5 7eee1933e27bfd222f8ecd48d463c30b
SHA1 506dd04ac3db8729abffd4132294d017b8b1fba6
SHA256 e9bfbf4cd2bb60ea2982dc50dee92466a81a42de9b40e65c4ee17298646c7bce
SHA512 279d059dfa2c81c371000b865fe49389fa911bebf4c4f7e83379598e3e109852b14a185f1bd970dc94ad53a804d7554a4547dbe7bd7902781daa8da1898f7885

C:\Program Files\AVG\Antivirus\Licenses\asw050002882b74d883.tmp

MD5 4cddb654fe704264c203b4d9c7c832c0
SHA1 9d236e8f305b4bc8c486de24549a706a3957c210
SHA256 634788199f33637e3cc36c61e5272f72ccbdab87be0c07eaaaf487c5f4f1ce82
SHA512 1933696744c8a95bc6c82ef0d19e99f1d4291f6e0aaf8570e45bd74065ec076ea9b3e4b030ebc8df52903f4f98aef6a9727d3370834efb9187e4ce24ab9a0180

C:\Program Files\AVG\Antivirus\Licenses\asw1317cd6e9e9812fd.tmp

MD5 928ffcbe179ca1faa2d4a2747ccab1b7
SHA1 0978fa6a4bb455f6237eca37956d179b7512fc1f
SHA256 c8d3b9240b998223daf58ea16bf2856caa5cdbcb75e93d4fd20c548033d885e2
SHA512 627af0d12924e508694e977823fd6d705700eec590e9edd432605078b007143cee5c70391143ae259cff9287db89fc3e613198c4c586236d71e2de70cbc6d0cc

memory/2044-5269-0x000007FEF3B40000-0x000007FEF4E66000-memory.dmp

C:\Program Files\AVG\Antivirus\Licenses\aswa6ca585ec91ac622.tmp

MD5 9c08c5872a3314661e37289d53a846e4
SHA1 ddad81444c937f22e749ab9518058682953b1cdb
SHA256 0ad3bfee8be10e5519949e7af492e36bc349376b75fbeb412229a5967e3e9434
SHA512 dda85f29349e7222a6487f91e42e798c6d93a091fb01ed08d7caff5b906a2732788fea763d3e8fd10084361af8531ba2059e2410e845390c937aff659cd0fa36

C:\Program Files\AVG\Antivirus\Licenses\asw14d13e1f52f28b7a.tmp

MD5 d6913685a013829414179d17903310af
SHA1 d665df4878ae79173751d5a8a4346c1e2567f232
SHA256 8dd48e57572d33854a835ba6bb045d9a01321bae43377934fc08ce642992206b
SHA512 228fa37c918f781f3151b7cebfaa2575c70e515193adcae66a25c5de0035199ba935e677c1df1b2acf6951b43ad4e253a5277ccd72aff9bc60cf6f1bbf444eaa

C:\Program Files\AVG\Antivirus\Licenses\asw46d601768fade47b.tmp

MD5 dcd04d4748467021571f4a01f797ddae
SHA1 c59d498fa113b09406389f8828dde6407f5a651d
SHA256 7b8c5dbc64e5ce65c94d31b5690a0e30ff83222bbbbb859df2a56b9dfef14326
SHA512 7ae6a19fdda606f467c15e97ba08620838961bf64d9c5b6843cd877a23f0697bde8874842b12e3c317e18b4f8609531bb05414d5ed4ec68337ce8e1c73aae64e

C:\Program Files\AVG\Antivirus\Licenses\asw516f7e7040c9cad5.tmp

MD5 fe680362852389fe7a16c47aae27bc92
SHA1 377ea1b96cabe859af78bb561ca4171544ab0152
SHA256 e89251cdaaf385d93f74b819412217e47a7a06cd65115a1f87eedda0dffb2947
SHA512 8bb0e1ae7fc66e12581b43c0823e82011ec88d714eb244a840a46272d9c04163893217b6ae6c42d07ef72c88ea154950282ef09f0aef2dd44a3e42de709135ef

C:\Program Files\AVG\Antivirus\Licenses\aswf9afcbf7f709ba34.tmp

MD5 d229da563da18fe5d58cd95a6467d584
SHA1 b314c7ebb7d599944981908b7f3ed33a30e78f3a
SHA256 1eb85fc97224598dad1852b5d6483bbcf0aa8608790dcc657a5a2a761ae9c8c6
SHA512 e2f81cb44129e1bc58941e7b3db1ffba40357889bace4fd65fd254d0be1bb757625bdf36bf46d555eb3ca4b130dcd1c05225caec28d8472dccf52a63dbd6e185

C:\Program Files\AVG\Antivirus\Licenses\aswf2a98647be9f2334.tmp

MD5 d273d63619c9aeaf15cdaf76422c4f87
SHA1 47b573e3824cd5e02a1a3ae99e2735b49e0256e4
SHA256 3ddf9be5c28fe27dad143a5dc76eea25222ad1dd68934a047064e56ed2fa40c5
SHA512 4cc5a12bfe984c0a50bf7943e2d70a948d520ef423677c77629707aace3a95aa378d205de929105d644680679e70ef2449479b360ad44896b75bafed66613272

C:\Program Files\AVG\Antivirus\Licenses\aswdfd83809175088b6.tmp

MD5 ae3f3d4fd356269cb456df973156650f
SHA1 4f58ec889575f422dfe25fe14f22eeb5d009a4c9
SHA256 d0a9c5d1e40d1179f0669bd93e079a518b3067fad240410804170f05d1ba04b6
SHA512 ac1c0e7d7020f7ae091bb53e4b5d1afa8e9a669bbed4f7a418b8cb9975eace1c8c6eaa840f1248ea4f607f87ba8765d61ea0f05fc0e586ee21275633c8f1c3c8

C:\Program Files\AVG\Antivirus\Licenses\asw33a69fa7f3867830.tmp

MD5 ce79a5e699943b3a132c0deba1777ac6
SHA1 57919d5bf210193d05ba496a870832582f475559
SHA256 f4df8b2457697851385d9ebb93267832c1dfa24e0e61881952f6b0c452663dc9
SHA512 82cda6f61e3dff94228d3eefe4e1f65dc483aca9c8597e482c1d6584d2f70ab7327af6461080447649dc4986b9932025dbcae5c078a2dbcca82c3a985d118f4c

C:\Program Files\AVG\Antivirus\Licenses\aswa3f3e8e686d07081.tmp

MD5 ae1fcfd0aa84b946bb9fc04ba39dafcf
SHA1 e1391ab3bcdbdd0fb6e9169ffa1d72c1650f839e
SHA256 e9c108afa89f5f9ef50484bb1c64a8d07d0c0bfce171df01840702ceeaec1e34
SHA512 bb9635487def64130a10ec3cd4106e5018ce17d9b979124d9f6674ab1fc7fa549c32c0602aead88cfa78f6900ada5a1776995fe4b864b466d6dfbf1cb53d942e

C:\Program Files\AVG\Antivirus\Licenses\asw0306eae7d8298006.tmp

MD5 cff54e417a17b4b77465198254970cd2
SHA1 a2922ac9caf1914313d4117dd30f4f1de71c5e14
SHA256 60ab263d1868282cb8262199edf648c21e45b729a78c6768bc9c27214a673da0
SHA512 a8cbf26c8babcf722623a709d5810baff798448a969000c36bfb7570d6ad388220066973783d7e162c1968fc42d0418a1c7ae15f51eea2ef2a2e843fdd9cddfb

C:\Program Files\AVG\Antivirus\Licenses\aswc3e0636afc39f6a0.tmp

MD5 bdc36270610932ff0c405f7dbec4f1aa
SHA1 36ef609b122ccde100fa096a4703f3433af6e2d1
SHA256 8c109e1d8394fd4557d916d75ef61fb406319106cbeab77736d7c666befd1ab6
SHA512 83f1346cbc0d4e49b0e4cc338fa12813661eafb00acba39d350e28c54c86d6d19317545dddae562763e6794e5268731cf4d1d8f24db42a0cf8d9ab9165970beb

C:\Program Files\AVG\Antivirus\Licenses\asw1e01a8ded8361e84.tmp

MD5 7cf65040f98baf1ba15f488d76f31e6a
SHA1 c9e9e12d8d124bdc38b63a1c832bf36890ddf046
SHA256 64578d53633622b31d19024184265f01d045b637da98fbd15ca81e39acfba63f
SHA512 4ffb42ad75204da6a288aa2d748754eab2a94386c33c9981ab1edb6f848e02fbe4590baafd81f5349a4c09bb913aedd7f57d49c43d96b8ad6e63c0e44d0a8ca1

C:\Program Files\AVG\Antivirus\Licenses\asw9891752e2e9218af.tmp

MD5 7c3860ffbb2e3df660f4762e02a28a4e
SHA1 9a689135294896040420ead4e5a05038d0ce8cbc
SHA256 803b8b5aa4151030221b3c3f71a645da6241938421e49901444a79e5cca75fa8
SHA512 393e4077221420b1a1d73cb1d89ad264b65e36dde03271959699260e8305ff8715ab1a7535c356f2bf961f316ccb1ef1ff6e13da1708e7b53a9b6e12ad7066d0

C:\Program Files\AVG\Antivirus\Licenses\aswec53b3f04c1e5a5f.tmp

MD5 a3e6629906286395714e96dc4ac8edf4
SHA1 e1faf4917a367e29be497afc8ca14bb7b4493efe
SHA256 bdd96967d9b60683a91e086651ec03eed0d4ba142b37993111a0b1a608f8a05d
SHA512 c9be16142c2d45b9e81b2e33840b58837eabf94b3659cbce65e18d1501ac85cfa35fa087a467cbd55d633f1dfe370e61abeda2ed1e6db4e8b65826b7c41a4ccb

C:\Program Files\AVG\Antivirus\Licenses\asw93cce9179326eed5.tmp

MD5 06cdee91812ddfaf4cf3916f7a5309c4
SHA1 00397115d379f863279d13e823d33ed9c8b51be4
SHA256 7a9555c822ed30fcbf6832004edac893ba10bbcdb8e12d9a3662ddf1b52bd6e7
SHA512 cf22a889618b15fd40dd82809c2c8f5003fd40236798d8738fd3c56cf0f27b52e4157f834e5339bf12388dedb96eab1dc3e9d01968e1a4aa155e60cea9c96694

C:\Program Files\AVG\Antivirus\Licenses\asw9b4a8f2a05171ba9.tmp

MD5 8041053262bc492837749777c930a791
SHA1 e8cbe20136c6d1627d40932dc4398d2053be5228
SHA256 d988d5362ea432d8c8ad9f05af876ba9409eb1ebad8c34b899fc9cc8c7ea5311
SHA512 0f321a821b1ab36a5e60a5d5e94dc26564a2cb03347b54279b5530f7b50ab3105d537637f338553dfc4ef800d28be103ab0ca50f77da3b4627fb6d7c558bd3ea

C:\Program Files\AVG\Antivirus\x86\asw7d0be3f908070bf7.tmp

MD5 011d53b58790d8565325909ec0376c18
SHA1 522048509bf6d03770ce82178b94164f97aedc6a
SHA256 d65eb0c31455f3852bf67d160bbe84ddf19c274ac0502a74ac7bebd0e29845e3
SHA512 6ad0b98b83111792b8c766b479a079b0a5fd407a242718e034d77ef31c814f84dca3f61706683e7218700d94cafa64a8098853b09784dc00d6689b6f618c8eb1

C:\Program Files\AVG\Antivirus\Licenses\asw3bd2d957f5ba4832.tmp

MD5 4bf27a810f9a1f9e7c76b029b3b457cc
SHA1 8edff1174e110de6aec218a8d9ac56dbea27a1e9
SHA256 1e5a5eae04b378d12f93a3acf56dfdcac7005bdd67fe22d71c855f4e994e9928
SHA512 d818fe6f1905f46445fdbed9ea63751441fdd69651ac532aae946181fc28da8d2aac98146fb507d3df9720b24dcd2f05a20735f32e113503253fd85defa2870e

C:\Program Files\AVG\Antivirus\Licenses\asw54a4a4a04fe0409f.tmp

MD5 c58efea00b9a80527a4eb1edf3b48d42
SHA1 7a9460def676dec00affda16aba1e93f0fb26f74
SHA256 a9c42b959825bce9b7c72a7b0797a41580cb21f407b73e08168fb1ed1db438c4
SHA512 6cbcc440792e05c8b73755acb329e2961a1991b730fc468d7483b1c005bdc664271237de634c3a1969967f8feea03b36ee8d2dd58e94dc61f553c4d728ff9d2e

C:\Program Files\AVG\Antivirus\x86\asw0e871438e7539039.tmp

MD5 dc9f5f3f3a1c2d6b7ee465755d7d19b2
SHA1 93ba66d18e8c7f84de634cd8d1e7d501711942b4
SHA256 103529af3045e3cb469c5ff54d0cd84fb2cf0a5dd27d76643b286e532338f2a8
SHA512 7104d19c9739443c725a2b1ce6f8a6ff754278964a293ab2f51f4d578edb9e2563276028add408398d894ccf84906a9995af6535b66c60909932089d2fde2a37

C:\Users\Admin\AppData\Local\AVG\Browser\User Data\Default\686f02e5-3efd-416c-9825-9f16c2ee6c37.tmp

MD5 d0822bce9fbd7f64247abf9a672a5ed9
SHA1 8e01107ea27a36c8a49fd7e48d3dd508e00ec6cb
SHA256 e19f305478154e672bd65d88fefe0170c60ef5f016fa430908667cc56f3c12b4
SHA512 9cc616866a82c06182c71cee60ade13d8f548e6050e106dcdb5045ca61572a653afed3d6bd65630c80f0dbd847b1ffe725c1fb5c08d25a760ab4f348c5d23153

C:\Program Files\AVG\Antivirus\x86\asw36573333eeacfe42.tmp

MD5 14fa8465880c37173dc5066e77b0d513
SHA1 a77bfc668b3e1c87d69ff679e3fdb4bafc4bbc72
SHA256 ee573537c277641af1334bbe0616857d04e98881254c0dd69f2cd264d8aeb164
SHA512 a1ef900e67167584089e30234f1b295a856e88442d3f0b7fc4507022f0ea82014afe4361242ff9019cfdb90983014e0567780b44732ff932780e4165cfa65ac4

C:\Program Files\AVG\Antivirus\x86\aswfef6a92b140b6436.tmp

MD5 fb974d6fdb368eda666408dbc0ee8ad0
SHA1 a6ee3ed5c8764ac0a7a3d1c0f48169a238ab99da
SHA256 8110ef0a27cb87a9ce2897593c1377580f6c965c3b860b8da823b493ca60205b
SHA512 4abe2e7bbfd6e7bd94a90a9e05a81eea05fae1f13e05785cf7da8a0da8b693e2c91bcb2714dcb4759b8251a34ef974efe98aeca700954509bd4934cc6de1bcc4

C:\Program Files\AVG\Antivirus\x86\asw4b6b873c9646da20.tmp

MD5 a771884654d233a3a7d7c16c06c634ea
SHA1 9e88cd99a57a53e812072d28c67dbc2ac4b7b98b
SHA256 5b4c8b5e57a76f67afef9fd28c3308a624c916e689fe5e65dfa92bc106dc3c27
SHA512 b1a5652aa8a9fe56330f49ccee8766ca5f844c190e92e8ec73d10630575c30f09ccbd7e86f3825b2e4f8ec1311977525206905fbd0e9099de4575d73a5a520e9

C:\Program Files\AVG\Antivirus\x86\aswe390af7116146235.tmp

MD5 60776e33261c178c1232083586d59154
SHA1 26bfc8fe6bad8bef8e901c4b88960e87bf1b796c
SHA256 78d9adec99658b1b124d02c9f9443836bdb3bbc90e2b36771e440b9e19eaa009
SHA512 371ba6261534af99faafb64b829a7995187bb9e0c12ec636a16d7946b055f2596639ecb1daae7965066121dd789268995935f7ec1aaf7537401fafe4135b0d8e

C:\Program Files\AVG\Antivirus\x86\asw570136cfb13ab893.tmp

MD5 6026205534f5e1bf8344f081ab8a5076
SHA1 d33217f7a91681102dabe8107d28ad5cd560b43a
SHA256 3c2c398d7f7d4a3143a356eda60f5d20ad8b092c3f7d8c0c852788bfeea40839
SHA512 75a5582a2857a0f38e33bd7178d44ea70e0d619df3b06cc58e006f6e9c3eaefa25cb35c0fc22257b658397a3ec8684ea79e0cf788b90861c352ca8eba425b2ed

C:\Program Files\AVG\Antivirus\x86\aswd3b9526a2295175a.tmp

MD5 e71043d96f2926acb4f1f61fb89b4c11
SHA1 4e8867f93de33f77b5124bb177c3706b620dbfb2
SHA256 236b43a3f1314bc9a502cbef7dfd9fa9eb191408c05971b936fac8f36b8cfc77
SHA512 0a3c5216132845c1bd4d0d6f553de38d9b0b01ae3e2168dc7a34555e00e5a1b266a3ff5aece46b560abc540b79a7bba3549e14b932608fb7d164a3257c25af48

C:\Program Files\AVG\Antivirus\x86\asw4f0620848d2b3bf4.tmp

MD5 4537a747ffe285e377e6d0de394d18ad
SHA1 63ad26d18546800e944bdc1fe9ef3410c7dc5efb
SHA256 4053b872860b84093edca4c3f75cefa0fc3045e8116eecf630b29de80b276cd4
SHA512 ab80971c70982d7f32ce594329f8aa4e08468be6b659941cf0562ce17178a7075c84b5935d4375986a198c56acf4899b36c71fadb3d69905f4621b00092229b5

C:\ProgramData\AVG\Antivirus\Fonts\asw8e4e4eaac690e068.tmp

MD5 50145685042b4df07a1fd19957275b81
SHA1 c1691e8168b2596af8a00162bac60dbe605e9e36
SHA256 5894a3649b213cf5b2d673b6e7a871815fd1d120fa68a463592f27db14eae323
SHA512 9c995725aade5f126c727faf1c4453344e37b590a14152d31d44dca3c9328a54207bbc7c840695cb55bc1b559097b457888655e11199192cd5197c85aab8b1b6

C:\ProgramData\AVG\Antivirus\Fonts\aswf28a87e14e8ae91a.tmp

MD5 c7dcce084c445260a266f92db56f5517
SHA1 f1692eac564e95023e4da341a1b89baae7a65155
SHA256 a54dc8488f8193bf30c3820cf6f261f911f9d328d699e1a1b8042641554cec70
SHA512 0fe7ec4c8eceafe87fbbdb9780519faffb646a23579ce5a4f5170808284c1ed85b9aafdab18cc4ddcaa9a7e6e2559fa6ed984d986ba93d1bbf4bc0551d5661d0

C:\ProgramData\AVG\Antivirus\Fonts\aswa33e9159a6bc2568.tmp

MD5 1bf71be111189e76987a4bb9b3115cb7
SHA1 40442c189568184b6e6c27a25d69f14d91b65039
SHA256 cf5f5184c1441a1660aa52526328e9d5c2793e77b6d8d3a3ad654bdb07ab8424
SHA512 cb18b69e98a194af5e3e3d982a75254f3a20bd94c68816a15f38870b9be616cef0c32033f253219cca9146b2b419dd6df28cc4ceeff80d01f400aa0ed101e061

C:\ProgramData\AVG\Antivirus\Fonts\asw8a642cd3e7d9d0f9.tmp

MD5 629a55a7e793da068dc580d184cc0e31
SHA1 3564ed0b5363df5cf277c16e0c6bedc5a682217f
SHA256 e64e508b2aa2880f907e470c4550980ec4c0694d103a43f36150ac3f93189bee
SHA512 6c24c71bee7370939df8085fa70f1298cfa9be6d1b9567e2a12b9bb92872a45547cbabcf14a5d93a6d86cd77165eb262ba8530b988bf2c989fadb255c943df9b

C:\ProgramData\AVG\Antivirus\Fonts\asw8a9c40e5248dc625.tmp

MD5 52f9b35f9f7cfa1be2644bcbac61a983
SHA1 c348d9f1b95e103ac2d14d56682867368f385b1a
SHA256 28a1d37668b4cf94fff5256e9639f175baf4dd654ec84ba910485d38beefa6bd
SHA512 de48b5e6751134c7fcaa8ee4c734e0f458e86fc59249ef19d9c45b7098eb7273c4119d5944332465080154a3d9c8acdb1aa84ccce011bbe5c7f32251acde6cad

C:\ProgramData\AVG\Antivirus\Fonts\aswe8a363ee0d62da66.tmp

MD5 0e1821fdf320fddc0e1c2b272c422068
SHA1 c722696501a8663d64208d754e4db8165d3936f6
SHA256 4a7c36df4318fee50a8159c3a0ebde4572abab65447ae4a651c2fe87212302b5
SHA512 948adb943bfae5807e0e88a23364d8e706a8bdfe8c4d00592a95cdd34081a64a8d44c4ba6e33a65874ac8a7117927c3de2b995fdc57c2746aedd7161df727293

C:\ProgramData\AVG\Antivirus\Fonts\asw6a9d51742e0915be.tmp

MD5 0018751ac22541e269f7c8e0df8385f6
SHA1 541e47f0b29737b74c2758b1f040783485de2a6d
SHA256 9f4d35bd7ca167c7659a872bdae6fde11c306b07eb5c758bae762f7258b39071
SHA512 6b6465848cdc0fb24ff2b1953e71b17c19e5e4224857df761222224778b4659443e8ce21bea15c76abfbcd9e371e607a0c1a94addbe761c2f07c1648971406c8

C:\ProgramData\AVG\Antivirus\Fonts\asw98bba1bd41f1fd61.tmp

MD5 b7913e898d3cddf10a49ad0dc3f615b8
SHA1 560917b699fe57632d13cf8ef2778f3833748343
SHA256 1e90e49b182c8b5876ee6805ff3cd2e39a23fda79df33d2e8b57020d6f208334
SHA512 baee3e6114fb8b4f946cd85fac7bae19e1cc681820c6c5824092ad955e70ce7253ae471aaa28ad97412e67d4a9c741137bf3ff27233bd94b6d3a654f72adee16

C:\ProgramData\AVG\Antivirus\aswad5b0225b098b15c.tmp

MD5 773276b47f5130b1ec5909f06eb55a79
SHA1 18f5bebe2b2d7f353fe67e66dbca9da018962711
SHA256 6ed4753125bf88ecfeda9780065d3d4d44f089f67ea9d4295c6918be6c47cb38
SHA512 754461683fd52ce3c320e0c152968f613b02f38091d9fcb9443aea5ac981846679ae21a0b224587f193dc63fc5001547e39ca0d8c096cda09285387ab36faf55

C:\ProgramData\AVG\Antivirus\asw13df6291fcc45edb.tmp

MD5 1f2180e74835eda20f6d01d5eecd79f5
SHA1 996792e4411708db07954fcacc97188fde082f9d
SHA256 339161ef9b17a7ea3793c19a906ffcb1f66d8e0789800236bba33389fe3c643c
SHA512 5025ae637cfb0daa4d847b980dea7fa1c86b4ae47c609fbb633766eeb41ae61893b58685b1bef0697c806ea08007f6d09315a8ef4f9ca7237066b754a0528829

C:\Program Files\AVG\Antivirus\setup\asw7333d8731db7d2e5.tmp

MD5 a3759d1a370be70a4435865225b2270e
SHA1 9eed4fbb8b56499245facaa1c4447cd04f67517a
SHA256 1c91e8953b7c85b339fe120a9979165748d27df7edee252667c0159c09f8919d
SHA512 4f22805c0c3825205d598b0f364ad2eb5ab0062e53cd48cb460166e63e70afc55416958e530a6c902171a19dabcc2efa1499f206ed644b74b6fb8560f47baca5

C:\ProgramData\AVG\Antivirus\Fonts\aswd9338321ec24280e.tmp

MD5 9372d1cc640df70d36b24914adf57110
SHA1 374508b24ea24906f25655de27e854e69cda2935
SHA256 31daba103891abf8b4d0537661117a8689c9ee5d91ee264f74e64ef1bb37a61c
SHA512 8100e80e7c7a6283a348fb0c2f9339600dca96f8db21e49c3c875ca6c0129d87452ca0d678904e40f65404f5c78b37a82718def85efc085d5f2c9d0ff94182d4

C:\Program Files\AVG\Antivirus\asw3e5d798f75fc358a.tmp

MD5 8617be975c7bb0b00b4db4ce89ceeb56
SHA1 0b5444a3742504c063f8b293936d0f307e6ee1aa
SHA256 cc8041022961c7cd43449f6d8d8860c6ef4f041663bad55612e92ddd6f1c34db
SHA512 7f434dc8ba1e829ba0be8d112f48d6e95e30f739354bcc4458e3cd5db9c47837047218dc0182e16c40ac4e587fd2353e39ab2841a59590c8f6764e02c315935d

C:\Program Files\AVG\Antivirus\asw8c0cb2fadd54c688.tmp

MD5 d002213bf78f2b988b57b2e7188853e9
SHA1 c5199ace6ccc53f20c07fb3e5bdd15d1257eb254
SHA256 b7b3eda47a5a45e74f5bada855a0a9f8db025970eb29b90ab6948233d4110df6
SHA512 a894d6fa4c1236604395e3cd3ee6e99b04b391e6dd3cb06e0945a446edcf8c745b678b784391e7f118bda3ce2fd7713ff251370544936d78093e6205ca17e8e5

C:\Program Files\AVG\Antivirus\asw1dd44a89fe1b138f.tmp

MD5 560f68084d6824bd104e617ff242e889
SHA1 56ade5cda7b52a9f40a973e8eaf4ccc189d3717a
SHA256 3a9a6c8f2129835f8031582e99ee62403dfae4ca3656b2214c27a920531ad8b9
SHA512 0bc26bd3a882817c61447f2463f8eef9743082abcc25b13f63d4d51d2c77ab77a79c5aa556bbb00817502864c4edbb89f872a3d907bbf5eba04deb6cd84e347a

C:\Program Files\AVG\Antivirus\asw883f51b4eba8a130.tmp

MD5 a4e000f1c4f0801afe5caa118d789bc1
SHA1 ace55ebdc17ff6be261c8e99c54b1274618a6ebf
SHA256 8e4417a945954809976c5a707cf73b6545650e6d118c7f05f1b88ab591cf2db1
SHA512 4730bbc49e31061569c107021c3cbcf845aeba8a6fb4c68839559db789ee920e7706f61f480f92eaaf0984ff964aa7a81972f9f7e57bc8df5aa0b293fd3150d0

C:\Program Files\AVG\Antivirus\aswdb20e4ce20e78578.tmp

MD5 86fde46dd79020df2c470157b6d025ad
SHA1 8aeadeac00be35e982d41cf91359aacd13819477
SHA256 b703de5ca22cf5e8c2f96403069f914c3dfafe9104971bc65d65072177b9325c
SHA512 b2a518410581ef6ba6864010cc51dfda106a9486e31875daf0ca65d1b04dc7d48e413796c27255120057987da5c0c0b7495d91f0c64f0535b6d96e461891c7d5

C:\Program Files\AVG\Antivirus\aswc12eb28dae53c792.tmp

MD5 836ecc9e55a17c0e001b6d5d61bb5656
SHA1 fb7ce65d0ced1846c5bc976f83e84f1959c10b21
SHA256 c9fe1ee8042f5033881dea8f2e671978be94e73c06e3deb6f1256853d10022dd
SHA512 c61b155ec543993d88bc4ef948fe4c7cbf5070e4a3a264cea018be65e548f14cad1acde9756111c2239632a006ceab3e7250cca341c6e8c47dfafe56b616d962

C:\Program Files\AVG\Antivirus\asw015d38695894d007.tmp

MD5 9597282d606e7578bb54249bdf7d2d0e
SHA1 e85bf9f561971cba8ef0c3c889db263455935c7b
SHA256 f647e7ee7e79976537b612dd9a5eeaa3398249edc673cdce387ae174d8e6a803
SHA512 5b1759ec9064944771e2af35fc07416cf4856d52fe8bffb3039854282bae15ae28f35b4bd21cb34e5f54819e5f034da03a52b2a436adb74a451791673788bb1f

C:\Program Files\AVG\Antivirus\asw562a0d47f2b2ac2a.tmp

MD5 a94a40b03545d233c64222f55ac8d332
SHA1 20704797391df68591c34e061859008cc62033f2
SHA256 0b82264f32f843d018d8ce2d8676ea813face564ef0dbd4f3090cc797f363d5b
SHA512 9f57f4847e0759bd47c771656bb10ec7da2022ca73f9fc4bdea5a23bea63eb2f4ae1a7192a0253fbcef5613a113539070cd75aaa929c5cdd1610741d685dfcb4

C:\Program Files\AVG\Antivirus\asw2c48fd3647b50a18.tmp

MD5 3a2a835a04c93b72080acebb3522c8c2
SHA1 18c1d18ce5c939c3b2d6332f88ed96783c853faf
SHA256 1620919ffb0c79693c5290a541b8b3c470f0862e23eba01de345013becae4f73
SHA512 b58eb17d59a91994bd9d432ac7acf5948d1775a3421665d40e3153cd5e68cc4e3cfaf8f58d095e6eba4fe411c13954adbefb5b0690588dc6bbc1db0440928bc1

C:\Program Files\AVG\Antivirus\asw276be104135478ec.tmp

MD5 99d7a8f1d15b1d55e59dc65d2ebe8988
SHA1 b9292af0048455f17241e174427999acaacd41c5
SHA256 d904edb33f45d6bdca58d4b1888fafee45367de4395b8adb96e74bb510a603d1
SHA512 81542e096b6a5d06dfde83441c1549844752cd80c5323fc89599ad5e6c7976d5a7948ac43c72daef861b002f36c919e6f36580d9baabae230a23f8614bc9bdea

C:\Program Files\AVG\Antivirus\aswc6dbe443a339a6a9.tmp

MD5 279d41dad82433b239a0e0b3c846317f
SHA1 a0bc3c142bad59d3f4d2fafa33705986fd5d92b2
SHA256 40348291b16de5628f7682c8e175f1fbdcbdc7e6276e9a5e5f67d82ee0c8af2a
SHA512 85372619ba77d735078bb4f42c94c77dc35d5caf01076b5e76366cbebd6e2a01192ad5bcd1bfbd3421317c8904fdee6eee3b0f6159c67d5f390a65a06a062ba4

C:\Program Files\AVG\Antivirus\aswabe258849dc8a4ea.tmp

MD5 d6163829c227685998fa2c660881b606
SHA1 c27948940bfa591c802fd0d64f2000d539c28a59
SHA256 aedb9932185adff6781abf88da15a1b95dd0e49261e7d9a83ccc21927d67a8a5
SHA512 15f396c9845f11fc40a4235e3e2c94c9c0a24a228339feafe20cd175b67438c15c9e37710ca83456ae62219a2f7934c312d6c63751e73b64b3a64e46345616ed

Analysis: behavioral2

Detonation Overview

Submitted

2024-08-09 15:57

Reported

2024-08-09 16:00

Platform

win10v2004-20240802-en

Max time kernel

139s

Max time network

115s

Command Line

"C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe"

Signatures

Checks installed software on the system

discovery

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe

"C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 cdn.ldplayer.net udp
GB 18.172.153.8:443 cdn.ldplayer.net tcp
US 8.8.8.8:53 d19mtdoi3rn3ox.cloudfront.net udp
NL 18.239.63.224:443 d19mtdoi3rn3ox.cloudfront.net tcp
US 8.8.8.8:53 178.36.239.216.in-addr.arpa udp
US 8.8.8.8:53 8.153.172.18.in-addr.arpa udp
US 8.8.8.8:53 39.58.20.217.in-addr.arpa udp
US 8.8.8.8:53 224.63.239.18.in-addr.arpa udp
US 8.8.8.8:53 80.41.65.18.in-addr.arpa udp
US 8.8.8.8:53 186.15.239.18.in-addr.arpa udp
US 8.8.8.8:53 64.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 d1arl2thrafelv.cloudfront.net udp
NL 18.239.15.82:443 d1arl2thrafelv.cloudfront.net tcp
NL 18.239.15.82:443 d1arl2thrafelv.cloudfront.net tcp
US 8.8.8.8:53 82.15.239.18.in-addr.arpa udp
US 8.8.8.8:53 middledata.ldplayer.net udp
SG 8.219.48.146:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 146.48.219.8.in-addr.arpa udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 147.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 81.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 8.8.8.8:53 20.58.20.217.in-addr.arpa udp
US 8.8.8.8:53 19.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.27.171.150.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Temp\Setup\ds.dll

MD5 d9cb0b4a66458d85470ccf9b3575c0e7
SHA1 1572092be5489725cffbabe2f59eba094ee1d8a1
SHA256 6ab3fdc4038a86124e6d698620acba3abf9e854702490e245c840c096ee41d05
SHA512 94937e77da89181903a260eac5120e8db165f2a3493086523bc5abbe87c4a9da39af3ba1874e3407c52df6ffda29e4947062ba6abe9f05b85c42379c4be2e5e6

memory/4044-12-0x0000000006770000-0x0000000006780000-memory.dmp

memory/4044-13-0x000000007231E000-0x000000007231F000-memory.dmp

memory/4044-17-0x0000000006C20000-0x0000000006C36000-memory.dmp

memory/4044-18-0x0000000072BC0000-0x0000000072BD6000-memory.dmp

memory/4044-20-0x0000000009370000-0x0000000009914000-memory.dmp

memory/4044-21-0x0000000008ED0000-0x0000000008F62000-memory.dmp

memory/4044-33-0x0000000002F50000-0x0000000002F94000-memory.dmp

memory/4044-34-0x0000000009D20000-0x0000000009DBC000-memory.dmp

memory/4044-35-0x0000000003020000-0x0000000003086000-memory.dmp

memory/4044-36-0x000000000A450000-0x000000000A97C000-memory.dmp

memory/4044-37-0x0000000006770000-0x0000000006780000-memory.dmp

memory/4044-38-0x000000007231E000-0x000000007231F000-memory.dmp