Malware Analysis Report

2025-08-06 01:38

Sample ID 241016-3rmwxstbrp
Target pivot_v5-2.exe
SHA256 ae9e4974652dc907c017d94d511f1c4cbab72b8c440c052f38acac86279eb509
Tags
discovery bootkit defense_evasion evasion persistence privilege_escalation spyware stealer trojan
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

ae9e4974652dc907c017d94d511f1c4cbab72b8c440c052f38acac86279eb509

Threat Level: Known bad

The file pivot_v5-2.exe was found to be: Known bad.

Malicious Activity Summary

discovery bootkit defense_evasion evasion persistence privilege_escalation spyware stealer trojan

Suspicious use of NtCreateProcessExOtherParentProcess

Sets service image path in registry

Drops file in Drivers directory

Uses Session Manager for persistence

Downloads MZ/PE file

Event Triggered Execution: Component Object Model Hijacking

Executes dropped EXE

Impair Defenses: Safe Mode Boot

Windows security modification

Reads user/profile data of web browsers

Checks computer location settings

Loads dropped DLL

Adds Run key to start application

Checks for any installed AV software in registry

Writes to the Master Boot Record (MBR)

Checks installed software on the system

Drops file in System32 directory

Drops file in Program Files directory

Drops file in Windows directory

System Location Discovery: System Language Discovery

Enumerates physical storage devices

Embeds OpenSSL

Checks SCSI registry key(s)

Suspicious behavior: LoadsDriver

Uses Task Scheduler COM API

Modifies registry class

Suspicious use of FindShellTrayWindow

Checks processor information in registry

Suspicious use of SendNotifyMessage

Suspicious use of AdjustPrivilegeToken

Modifies data under HKEY_USERS

Modifies Internet Explorer settings

Suspicious use of WriteProcessMemory

Modifies system certificate store

Suspicious use of SetWindowsHookEx

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-10-16 23:44

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-10-16 23:44

Reported

2024-10-16 23:47

Platform

win7-20240903-en

Max time kernel

142s

Max time network

122s

Command Line

"C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe"

Signatures

Downloads MZ/PE file

Checks for any installed AV software in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SOFTWARE\AVG\AV C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\AVG\AV C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\AVAST Software\Avast C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A

Checks installed software on the system

discovery

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Pivot Animator v5\LibAV\is-VIUL5.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-O29S5.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-CC402.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Animations\is-GL901.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Animations\is-5QFI9.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File opened for modification C:\Program Files (x86)\Pivot Animator v5\pivot.exe C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\LibAV\is-SHF2U.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-JSKIC.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-OTBDQ.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\LibAV\is-CJKDT.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-TC50E.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-0DUGJ.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Animations\is-0AU11.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\is-2O68H.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-4QVJI.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-EAVNR.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-GQI8P.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\is-T0LBI.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\is-761N1.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-PVFUO.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\is-PDI6B.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\is-FH6J3.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\LibAV\is-HMVA0.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\is-UCR6C.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Animations\Legacy\is-IBV2N.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Animations\Legacy\is-OQGQQ.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\is-P48BK.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\is-DQL4N.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-8KM8M.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Animations\is-SVTSA.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\LibAV\is-K07UD.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\LibAV\is-CTBRU.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-F9VUE.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-2VJ1F.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-MH4E8.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-I5ASA.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File opened for modification C:\Program Files (x86)\Pivot Animator v5\LibAV\swresample-3.dll C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\unins000.dat C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\is-L5DVK.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Animations\is-J4AQ5.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Animations\is-H9B7A.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\is-DFAL2.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-MIO5D.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\is-E1KD9.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Animations\is-DCP5T.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File opened for modification C:\Program Files (x86)\Pivot Animator v5\LibAV\avcodec-58.dll C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Animations\is-H592K.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-C0VN8.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-1M6OE.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Animations\is-K16N8.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\is-T1324.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\is-DVQMP.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File opened for modification C:\Program Files (x86)\Pivot Animator v5\LibAV\avformat-58.dll C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\is-L64F5.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\is-UQ10K.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\is-OHND6.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File opened for modification C:\Program Files (x86)\Pivot Animator v5\LibAV\avutil-56.dll C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\is-VT28D.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\LibAV\is-SFEGL.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-HDCO2.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-1K2GP.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Animations\is-RKI9S.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Animations\is-C5ECI.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
File created C:\Program Files (x86)\Pivot Animator v5\Animations\Legacy\is-JQ8G8.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\Fonts\is-K9QQ1.tmp C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Pivot Animator v5\pivot.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Classes\PivotFigure.stk\shell\open\command C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{64644512-C345-469F-B5FB-EB351E20129D}\InprocServer32 C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.piv C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\pivot.exe\SupportedTypes C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFile.piv\shell C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.stk\shellex C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\.piv\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.stk\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFigure.stk\ = "Pivot Animator Figure" C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{64644512-C345-469F-B5FB-EB351E20129D}\ = "STK Pivot Figure Preview Handler" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\PivotFile.piv C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFigure.stk\DefaultIcon\ = "C:\\Program Files (x86)\\Pivot Animator v5\\pivot.exe,2" C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFigure.stk\shell\open C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{64644512-C345-469F-B5FB-EB351E20129D}\InprocServer32\ThreadingModel = "Apartment" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{64644512-C345-469F-B5FB-EB351E20129D}\InprocServer32\ = "C:\\PROGRA~2\\PIVOTA~1\\STKPRE~1.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFile.piv\ = "Pivot Animator File" C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFile.piv C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.stk\shellex\{8895B1C6-B41F-4C1C-A562-0D564250836F}\ = "{64644512-C345-469F-B5FB-EB351E20129D}" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{64644512-C345-469F-B5FB-EB351E20129D}\ProgID C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\PivotFile.piv\shell\open\command C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFigure.stk\shell\open\command\ = "\"C:\\Program Files (x86)\\Pivot Animator v5\\pivot.exe\" \"%1\"" C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{64644512-C345-469F-B5FB-EB351E20129D} C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{64644512-C345-469F-B5FB-EB351E20129D}\InprocServer32\VersionIndependentProgID = "STKPreview.stkfile" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFile.piv\shell\open\command C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFile.piv\shell\open\command\ = "\"C:\\Program Files (x86)\\Pivot Animator v5\\pivot.exe\" \"%1\"" C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\.stk\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\PivotFigure.stk\DefaultIcon C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\pivot.exe\SupportedTypes\.piv C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\pivot.exe\SupportedTypes\.stk C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.piv\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\PivotFile.piv\DefaultIcon C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Applications C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\STKPreview.stkfile\Clsid C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.stk\OpenWithProgids\PivotFigure.stk C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{64644512-C345-469F-B5FB-EB351E20129D}\ProgID\ = "STKPreview.stkfile" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFile.piv\shell\open C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\Applications\pivot.exe\SupportedTypes C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\pivot.exe C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.piv\OpenWithProgids\PivotFile.piv C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\STKPreview.stkfile\Clsid\ = "{64644512-C345-469F-B5FB-EB351E20129D}" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{64644512-C345-469F-B5FB-EB351E20129D}\InprocServer32\ProgID = "STKPreview.stkfile" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{64644512-C345-469F-B5FB-EB351E20129D}\DisableLowILProcessIsolation = "1" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\STKPreview.stkfile\ = "STK Pivot Figure Preview Handler" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.stk\shellex\{8895B1C6-B41F-4C1C-A562-0D564250836F} C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.stk C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.stk C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFigure.stk C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFigure.stk\shell C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFigure.stk\shell\open\command C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{64644512-C345-469F-B5FB-EB351E20129D}\AppID = "{534A1E02-D58F-44f0-B58B-36CBED287C7C}" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\STKPreview.stkfile C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFile.piv\DefaultIcon\ = "C:\\Program Files (x86)\\Pivot Animator v5\\pivot.exe,1" C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\PivotFigure.stk C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\SystemCertificates\CA\Certificates\D89E3BD43D5D909B47A18977AA9D5CE36CEE184C C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\SystemCertificates\CA\Certificates\D89E3BD43D5D909B47A18977AA9D5CE36CEE184C\Blob = 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 C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 19000000010000001000000044ba5fd9039fc9b56fd8aadccd597ca6030000000100000014000000317a2ad07f2b335ef5a1c34e4b57e8b7d8f1fca61d00000001000000100000005959ddbc9c7632ba0a05f06316846fe6140000000100000014000000a848b4242fc6ea24a0d78e3cb93c5c78d79833e4090000000100000016000000301406082b0601050507030406082b060105050703010b000000010000002e00000053007400610072006600690065006c006400200054006500630068006e006f006c006f006700690065007300000053000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c00f000000010000001400000007eeabaf80a9ef4ae1b2cb9b4b5fc70d0428e6a92000000001000000eb020000308202e730820250020101300d06092a864886f70d01010505003081bb312430220603550407131b56616c69436572742056616c69646174696f6e204e6574776f726b31173015060355040a130e56616c69436572742c20496e632e31353033060355040b132c56616c694365727420436c617373203220506f6c6963792056616c69646174696f6e20417574686f726974793121301f06035504031318687474703a2f2f7777772e76616c69636572742e636f6d2f3120301e06092a864886f70d0109011611696e666f4076616c69636572742e636f6d301e170d3939303632363030313935345a170d3139303632363030313935345a3081bb312430220603550407131b56616c69436572742056616c69646174696f6e204e6574776f726b31173015060355040a130e56616c69436572742c20496e632e31353033060355040b132c56616c694365727420436c617373203220506f6c6963792056616c69646174696f6e20417574686f726974793121301f06035504031318687474703a2f2f7777772e76616c69636572742e636f6d2f3120301e06092a864886f70d0109011611696e666f4076616c69636572742e636f6d30819f300d06092a864886f70d010101050003818d0030818902818100ce3a71cae5abc8599255d7abd8740ef9eed9f655475965470e0555dceb98363c5c535dd330cf38ecbd4189ed254209246b0a5eb37cdd522d4ce6d4d67d5a59a965d449132d244d1c506fb5c185543bfe71e4d35c42f980e0911a0a5b393667f33f557c1b3fb45f647334e3b412bf8764f8da12ff3727c1b343bbef7b6e2e69f70203010001300d06092a864886f70d0101050500038181003b7f506f6f509499496238381f4bf8a5c83ea78281f62bc7e8c5cee83a1082cb18008e4dbda8587fa17900b5bbe98daf41d90f34ee218119a0324928f4c48e56d55233fd50d57e996c03e4c94cfccb6cab66b34a218ce5b50c323e10b2cc6ca1dc9a984c025bf3ceb99ea5720e4ab73f3ce61668f8beed744cbc5bd5621f43dd C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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 C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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 C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 0f00000001000000140000000f6aad4c3fe04619cdc8b2bd655aa1a26042e6500b000000010000005400000053007400610072006600690065006c006400200043006c00610073007300200032002000430065007200740069006600690063006100740069006f006e00200041007500740068006f007200690074007900000053000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c009000000010000002a000000302806082b0601050507030106082b0601050507030206082b0601050507030406082b06010505070303140000000100000014000000bf5fb7d1cedd1f86f45b55acdcd710c20ea988e71d000000010000001000000090c4f4233b006b7bfaa6adcd8f577d77030000000100000014000000ad7e1c28b064ef8f6003402014c3d0e3370eb58a2000000001000000130400003082040f308202f7a003020102020100300d06092a864886f70d01010505003068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3034303632393137333931365a170d3334303632393137333931365a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f7269747930820120300d06092a864886f70d01010105000382010d00308201080282010100b732c8fee971a60485ad0c1164dfce4defc80318873fa1abfb3ca69ff0c3a1dad4d86e2b5390fb24a43e84f09ee85fece52744f528a63f7bdee02af0c8af532f9eca0501931e8f661c39a74dfa5ab673042566eb777fe759c64a99251454eb26c7f37f19d530708fafb0462affadeb29edd79faa0487a3d4f989a5345fdb43918236d9663cb1b8b982fd9c3a3e10c83bef0665667a9b19183dff71513c302e5fbe3d7773b25d066cc323569a2b8526921ca702b3e43f0daf087982b8363dea9cd335b3bc69caf5cc9de8fd648d1780336e5e4a5d99c91e87b49d1ac0d56e1335235edf9b5f3defd6f776c2ea3ebb780d1c42676b04d8f8d6da6f8bf244a001ab020103a381c53081c2301d0603551d0e04160414bf5fb7d1cedd1f86f45b55acdcd710c20ea988e73081920603551d2304818a3081878014bf5fb7d1cedd1f86f45b55acdcd710c20ea988e7a16ca46a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479820100300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100059d3f889dd1c91a55a1ac69f3f359da9b01871a4f57a9a179092adbf72fb21eccc75e6ad88387a197ef49353e7706415862bf8e58b80a673fecb3dd21661fc954fa72cc3d4c40d881af779e837abba2c7f534178ed91140f4fc2c2a4d157fa7625d2e25d3000b201a1d68f917b8f4bd8bed2859dd4d168b1783c8b265c72d7aa5aabc53866ddd57a4caf820410b68f0f4fb74be565d7a79f5f91d85e32d95bef5719043cc8d1f9a000a8729e95522580023eae31243295b4708dd8c416a6506a8e521aa41b4952195b97dd134ab13d6adbcdce23d39cdbd3e7570a1185903c922b48f9cd55e2ad7a5b6d40a6df8b74011469a1f790e62bf0f97ece02f1f1794 C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 190000000100000010000000fd960962ac6938e0d4b0769aa1a64e26030000000100000014000000ad7e1c28b064ef8f6003402014c3d0e3370eb58a1d000000010000001000000090c4f4233b006b7bfaa6adcd8f577d77140000000100000014000000bf5fb7d1cedd1f86f45b55acdcd710c20ea988e709000000010000002a000000302806082b0601050507030106082b0601050507030206082b0601050507030406082b0601050507030353000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c00b000000010000005400000053007400610072006600690065006c006400200043006c00610073007300200032002000430065007200740069006600690063006100740069006f006e00200041007500740068006f00720069007400790000000f00000001000000140000000f6aad4c3fe04619cdc8b2bd655aa1a26042e6502000000001000000130400003082040f308202f7a003020102020100300d06092a864886f70d01010505003068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3034303632393137333931365a170d3334303632393137333931365a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f7269747930820120300d06092a864886f70d01010105000382010d00308201080282010100b732c8fee971a60485ad0c1164dfce4defc80318873fa1abfb3ca69ff0c3a1dad4d86e2b5390fb24a43e84f09ee85fece52744f528a63f7bdee02af0c8af532f9eca0501931e8f661c39a74dfa5ab673042566eb777fe759c64a99251454eb26c7f37f19d530708fafb0462affadeb29edd79faa0487a3d4f989a5345fdb43918236d9663cb1b8b982fd9c3a3e10c83bef0665667a9b19183dff71513c302e5fbe3d7773b25d066cc323569a2b8526921ca702b3e43f0daf087982b8363dea9cd335b3bc69caf5cc9de8fd648d1780336e5e4a5d99c91e87b49d1ac0d56e1335235edf9b5f3defd6f776c2ea3ebb780d1c42676b04d8f8d6da6f8bf244a001ab020103a381c53081c2301d0603551d0e04160414bf5fb7d1cedd1f86f45b55acdcd710c20ea988e73081920603551d2304818a3081878014bf5fb7d1cedd1f86f45b55acdcd710c20ea988e7a16ca46a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479820100300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100059d3f889dd1c91a55a1ac69f3f359da9b01871a4f57a9a179092adbf72fb21eccc75e6ad88387a197ef49353e7706415862bf8e58b80a673fecb3dd21661fc954fa72cc3d4c40d881af779e837abba2c7f534178ed91140f4fc2c2a4d157fa7625d2e25d3000b201a1d68f917b8f4bd8bed2859dd4d168b1783c8b265c72d7aa5aabc53866ddd57a4caf820410b68f0f4fb74be565d7a79f5f91d85e32d95bef5719043cc8d1f9a000a8729e95522580023eae31243295b4708dd8c416a6506a8e521aa41b4952195b97dd134ab13d6adbcdce23d39cdbd3e7570a1185903c922b48f9cd55e2ad7a5b6d40a6df8b74011469a1f790e62bf0f97ece02f1f1794 C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349 C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 0f00000001000000140000003e8e6487f8fd27d322a269a71edaac5d57811286090000000100000034000000303206082b0601050507030106082b0601050507030206082b0601050507030406082b0601050507030306082b0601050507030853000000010000002600000030243022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c00b00000001000000180000004300b7004f00b7004d00b7004f00b7004400b7004f000000140000000100000014000000a0110a233e96f107ece2af29ef82a57fd030a4b41d00000001000000100000002e0d6875874a44c820912e85e964cfdb030000000100000014000000d1eb23a46d17d68fd92564c2f1f1601764d8e349200000000100000036040000308204323082031aa003020102020101300d06092a864886f70d0101050500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c1841414120436572746966696361746520536572766963657330820122300d06092a864886f70d01010105000382010f003082010a0282010100be409df46ee1ea76871c4d45448ebe46c883069dc12afe181f8ee402faf3ab5d508a16310b9a06d0c57022cd492d5463ccb66e68460b53eacb4c24c0bc724eeaf115aef4549a120ac37ab23360e2da8955f32258f3dedccfef8386a28c944f9f68f29890468427c776bfe3cc352c8b5e07646582c048b0a891f9619f762050a891c766b5eb78620356f08a1a13ea31a31ea099fd38f6f62732586f07f56bb8fb142bafb7aaccd6635f738cda0599a838a8cb17783651ace99ef4783a8dcf0fd942e2980cab2f9f0e01deef9f9949f12ddfac744d1b98b547c5e529d1f99018c7629cbe83c7267b3e8a25c7c0dd9de6356810209d8fd8ded2c3849c0d5ee82fc90203010001a381c03081bd301d0603551d0e04160414a0110a233e96f107ece2af29ef82a57fd030a4b4300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff307b0603551d1f047430723038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c3036a034a0328630687474703a2f2f63726c2e636f6d6f646f2e6e65742f414141436572746966696361746553657276696365732e63726c300d06092a864886f70d010105050003820101000856fc02f09be8ffa4fad67bc64480ce4fc4c5f60058cca6b6bc1449680476e8e6ee5dec020f60d68d50184f264e01e3e6b0a5eebfbc745441bffdfc12b8c74f5af48960057f60b7054af3f6f1c2bfc4b97486b62d7d6bccd2f346dd2fc6e06ac3c334032c7d96dd5ac20ea70a99c1058bab0c2ff35c3acf6c37550987de53406c58effcb6ab656e04f61bdc3ce05a15c69ed9f15948302165036cece92173ec9b03a1e037ada015188ffaba02cea72ca910132cd4e50826ab229760f8905e74d4a29a53bdf2a968e0a26ec2d76cb1a30f9ebfeb68e756f2aef2e32b383a0981b56b85d7be2ded3f1ab7b263e2f5622c82d46a004150f139839f95e93696986e C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6 C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1268 wrote to memory of 2268 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp
PID 1268 wrote to memory of 2268 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp
PID 1268 wrote to memory of 2268 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp
PID 1268 wrote to memory of 2268 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp
PID 1268 wrote to memory of 2268 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp
PID 1268 wrote to memory of 2268 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp
PID 1268 wrote to memory of 2268 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp
PID 2268 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp C:\Windows\SysWOW64\regsvr32.exe
PID 2268 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp C:\Windows\SysWOW64\regsvr32.exe
PID 2268 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp C:\Windows\SysWOW64\regsvr32.exe
PID 2268 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp C:\Windows\SysWOW64\regsvr32.exe
PID 2268 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp C:\Windows\SysWOW64\regsvr32.exe
PID 2268 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp C:\Windows\SysWOW64\regsvr32.exe
PID 2268 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp C:\Windows\SysWOW64\regsvr32.exe
PID 1788 wrote to memory of 560 N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe C:\Program Files (x86)\Pivot Animator v5\pivot.exe
PID 1788 wrote to memory of 560 N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe C:\Program Files (x86)\Pivot Animator v5\pivot.exe
PID 1788 wrote to memory of 560 N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe C:\Program Files (x86)\Pivot Animator v5\pivot.exe
PID 1788 wrote to memory of 560 N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe C:\Program Files (x86)\Pivot Animator v5\pivot.exe

Processes

C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe

"C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe"

C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe

"C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe" /VERYSILENT

C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp

"C:\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp" /SL5="$30186,18433013,58368,C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe" /VERYSILENT

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\Pivot Animator v5\STKPreview.dll"

C:\Program Files (x86)\Pivot Animator v5\pivot.exe

"C:\Program Files (x86)\Pivot Animator v5\pivot.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 d20ozt0ryq20yh.cloudfront.net udp
CZ 65.9.94.187:443 d20ozt0ryq20yh.cloudfront.net tcp
US 8.8.8.8:53 www.ssl.com udp
US 44.207.196.218:80 www.ssl.com tcp
CZ 65.9.94.187:443 d20ozt0ryq20yh.cloudfront.net tcp
CZ 65.9.94.187:443 d20ozt0ryq20yh.cloudfront.net tcp

Files

memory/1788-0-0x000007FEF5D13000-0x000007FEF5D14000-memory.dmp

memory/1788-1-0x0000000001330000-0x00000000013D8000-memory.dmp

memory/1788-2-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-3-0x0000000000C40000-0x0000000000C5A000-memory.dmp

memory/1788-4-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-5-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-6-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-7-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-8-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-9-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-10-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-11-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-12-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-13-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-14-0x000007FEF5D13000-0x000007FEF5D14000-memory.dmp

memory/1788-16-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-15-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-17-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-18-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-19-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-20-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-21-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-23-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-22-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-24-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-25-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Cab1E1D.tmp

MD5 49aebf8cbd62d92ac215b2923fb1b9f5
SHA1 1723be06719828dda65ad804298d0431f6aff976
SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512 bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

C:\Users\Admin\AppData\Local\Temp\Tar1E3F.tmp

MD5 4ea6026cf93ec6338144661bf1202cd1
SHA1 a1dec9044f750ad887935a01430bf49322fbdcb7
SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA512 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 3125689eb0782eed57c99ae665d6d55c
SHA1 3b63a4c3f2cc5d672c0230f711e417465fb01dee
SHA256 3360b621db793dbe6ba70a026659f20d9b16836a2c84e9f80834509b4289980a
SHA512 e9519b9dfdf1bd8abef681875c1fc531e750d1dc4af9fdd7392e9bcc053d5bd6841fba9587eac643aaaf478faf4ebcf54cb252b64450fd9aa22056d55d869e71

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 a157699b26ae65043b4f62c9ad7428e0
SHA1 44118a3f9e234754c4cbf3937ff76eec34a432cf
SHA256 9f2470110193982986e7c0920e087d2495cf4b948983049b5085511eb5320f40
SHA512 a1b90968a20472300ea41002bf1c17b7404ad42437fd52f82fd0644de9dcfd1bcae8cf9ca119f06903f86e624c104d5db7b85ec2b2a7d6539b322d12ae6cc918

memory/1788-268-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe

MD5 a52c104395773710fab7f6264aced388
SHA1 87bf5c40fbac501bc272cb5343e7ae09b13bfdb1
SHA256 2852267832c4338f9ab2488add87c71be9e9b6fac50f3395915e7b9b6ab5cd11
SHA512 47eb7a1bd1c78961a8ab5a90896df6be0d57e253798033ba6caafaef6826414a08f6f8fe085faee7601d06acc00bec26c8c9e8da0da97168370e69fa27cf829f

memory/1268-272-0x0000000000401000-0x000000000040C000-memory.dmp

memory/1268-270-0x0000000000400000-0x0000000000415000-memory.dmp

\Users\Admin\AppData\Local\Temp\is-KL8R5.tmp\pivotsetup.tmp

MD5 1afbd25db5c9a90fe05309f7c4fbcf09
SHA1 baf330b5c249ca925b4ea19a52fe8b2c27e547fa
SHA256 3bb0ee5569fe5453c6b3fa25aa517b925d4f8d1f7ba3475e58fa09c46290658c
SHA512 3a448f06862c6d163fd58b68b836d866ae513e04a69774abf5a0c5b7df74f5b9ee37240083760185618c5068bf93e7fd812e76b3e530639111fb1d74f4d28419

memory/2268-278-0x0000000000400000-0x00000000004BF000-memory.dmp

\Program Files (x86)\Pivot Animator v5\unins000.exe

MD5 6341d7c8365a68edfa370476a6de9262
SHA1 08ca9e3631bc815b7c3afd4fe461385f4667710d
SHA256 5cc26edaa9445ff84e9d118245f07e4ff740ca72788a7b8d2c32d52d68f36afb
SHA512 51ab8057a974fa227084756311d5fe8d3e9bb6d5ac785d405a3f9914a0066adb5cd753a0e844109ccf711c2b34ccfa001f2ab3b05587848519ec5b74f71861eb

\Program Files (x86)\Pivot Animator v5\pivot.exe

MD5 ab3c884e603de1d2d9d4bb9edeac8762
SHA1 123e87c326a39d641571c5f5d54e9b1f42926cc3
SHA256 af38da271a7fb34617b094b3832af8f016168d0923dabbfb297633fb22e49036
SHA512 ecf3474372d1af6f4e93fe655b188b03744f07166fe2ae3947650fec8afabd2bb721270d8e3ef97d52cd4071e6a94ca1c1f5ecf304ed0711bb932bfce133982f

memory/1632-453-0x00000000022E0000-0x000000000256C000-memory.dmp

\Program Files (x86)\Pivot Animator v5\STKPreview.dll

MD5 2c639820b502df57891e7c4ee805f4b7
SHA1 d90ecab78c86152c31f6963096107fbb115f7bae
SHA256 dcdaf630b7a42bb9d6b1693e159175d68569f20f3ab034af4124d3c775436458
SHA512 afd96af844d30256e9fe1983e82317ace56d6741bf3f2647fee6ef6870b610a4b71560aca95a62ed5b54a2e1ab0ef1487a536124328f4ac327a0b86b1c1900a4

memory/2268-456-0x0000000000400000-0x00000000004BF000-memory.dmp

memory/1268-457-0x0000000000400000-0x0000000000415000-memory.dmp

memory/1788-458-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

memory/1788-461-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

C:\WINDOWS\FONTS\PIVOTCLASSICFONT.TTF

MD5 32965780e3c3b53b1e2f8b82eb96da05
SHA1 85f817ef5d3150f4bf69e967d56a032f4521f79a
SHA256 f22de79fe47abd955f05c0ea0cc1586eb549c956f22616c051142f448fcd8f23
SHA512 046d7f36faff39650b29a7198dc3b4a5af1a94efa2cc807c5981023010c448ae5421be1055d0a5bf4c1b7d23214c5cf19e122be21eee49b11a774694be788605

C:\Program Files (x86)\Pivot Animator v5\Animations\gear wheels.piv

MD5 0db372ae4af1f4df6a104dc98d9acf0a
SHA1 1961172d58f6849ef5378fee930c0387a9af2eb6
SHA256 5ab8f2911c6c7610729134a1543926b8c4c4964c080da9fdc3ad35a27626cf99
SHA512 3941326649de80060a975d37648e234b7a2b14aa2bd265364f4f2ced79d42bde601702b6195ec96bb41f033bf9e75c489f8365c74c870244731d241cc261e435

C:\Program Files (x86)\Pivot Animator v5\Animations\deformation_demo.piv

MD5 b810f7a219611f4ce7c078005683474b
SHA1 ea63273b1fafdc3a57c15c0070f7e1eadbfe3f4c
SHA256 2ed6a7c53c65ec762d9d9b0ebadf64e02e22b5c5a0f507627d062db661a00b68
SHA512 7eff076b226970d4c98c1b448b7a78fccb7600a2ad524f2aeb485f5d5242b910f357f1ce40e423bc1f09e52557ba738e2b6356df5eece22afb61fa2dcda4fda4

C:\Program Files (x86)\Pivot Animator v5\Animations\archer.piv

MD5 55ee1cc860856d8edfb175139fbc0cd6
SHA1 9ef9d5f35446b2a081f6f91002dfe09301f6d4cf
SHA256 1f7255a15e09dadb3a35e9a07b60dc48c681605de35a7473a5fef5bfc75bdd35
SHA512 2324d95472a231df3a9a75a72524c9c90412878ee2b7b06fe47bfa09382d38a4fc418911651f21b3c79486fa29af0f113f8ad4321e24940c961534eb7b24375a

C:\Program Files (x86)\Pivot Animator v5\Animations\Legacy\horse_revenge.piv

MD5 834bb56ece2ec9942d38013d3bb60a18
SHA1 2025dea0b5bd24703ab641feabc716add70bd66c
SHA256 703046dd6742dc3e04113ef1c2beb8547c0f42501549372b8a17f954ace2b5a5
SHA512 c28f92c969e90247c733d80f7f676b8c63b6cf89ae9dd12d412e550bae2b2cd15e8fdd36d3d2321bfdbb65abc03c5168a8344cbd68dfa2a57d0fb3a16ad620f0

C:\Program Files (x86)\Pivot Animator v5\Animations\Legacy\dominos.piv

MD5 08557c8776d979a1143cc674a5fafb32
SHA1 bac5104bd62594892404b61b5bd0e96f6c7f153e
SHA256 d8e45cdcd53ec9ad56fba89575c66701b01e009c4d371db092deecb1604a087f
SHA512 5b0cc057cecee04beb080fa44eea6657dff3e7b43a5032035ebe1554ef6f166aae6ef8ea189b829855eb2db7503e6195a9f6965f9c65b5cc9c4a0d1c25357a41

C:\Program Files (x86)\Pivot Animator v5\Animations\Legacy\cursor.piv

MD5 2e923d0f7f805c9acb390a85a782d49c
SHA1 fb98065c9dc3baa5c3729f9540806075c8bf17fe
SHA256 5eaf90001d8e3b867473137e904af9baf29a0cb6dba41caa9242a368c28d0c83
SHA512 acba39c54635e2bbf8863da415a52290df64932a2529c0852d28f121cec033c290cce4dc7d007a5a65b8fede938b42a792e6a0c74fe9c7e952517af606014dca

C:\Program Files (x86)\Pivot Animator v5\Animations\Legacy\run.piv

MD5 8af3f2f0668a79696fd82f8be2eda937
SHA1 25240129f6d07c81e0c6b7bafd9455ec9ed4677d
SHA256 06cd354fd29a8d1a3ea697d0bf9d5b8f29cf413554cfd995b2111bdd21c1c4da
SHA512 785b18ed83af595f7e405c29cf11d2a4939f1d9ddfec1c042cbb5d35590cf4c76c0b90fc85a6a2c87549d614b145b38dd8ff9989caf78069c8c8527bfb100395

C:\Program Files (x86)\Pivot Animator v5\Animations\Legacy\sprite_demo.piv

MD5 8fcdedbaba257eadd8be3cab322a9251
SHA1 6cfce653c35e3d9dada31d2f95a60f6783e6b680
SHA256 07e2827109f791ea15f3dc095593bbf9f8b04d897b84f20d721b0b12e0123d0c
SHA512 3e9eb3ca2f4cdc63552c989d0780a06174b6e4e9979b69224df89b61f94933bf7b6709ec14cc5bcd59dc671451af37cf128d181f9bd3c47a475c77ad4ce1c34d

C:\Program Files (x86)\Pivot Animator v5\Animations\Legacy\tower_fall.piv

MD5 62b0d70606a4007449fe4b874fe5439a
SHA1 0320443ba131e16e7082e7630335137920e6843e
SHA256 1af0fef50894c5aff61c2a521c872715105f25d2039aa37b1a048aa628373cff
SHA512 b3eda7099348978899b699897969f095b2d18184f9e0b1574c3eca5806f49ef2c8b43112f3ee94ec93c2809c097d52fb68f0afbf7fe703dcc42cfd4ac2986438

C:\Program Files (x86)\Pivot Animator v5\Animations\Legacy\walking.piv

MD5 b2eda498c427624b00b8dd1a03939afa
SHA1 578d03967c0eb86a1f8dacf5ade9e16bbb09e24d
SHA256 525e4ad75a58ba9d20c3950878f27b2c55277e4d59757aa980a5b6260d2f16d0
SHA512 a2f1520839d3e0934bf7a5f7197cdda5321013e81471debf0cf89274f66b96a9d96b8611391474f2ce5fbded653dd6e19f88cd492a80f13a6b2d413e63ad3b76

C:\Program Files (x86)\Pivot Animator v5\Animations\pythagoras proof.piv

MD5 12ae5f64729cb7edb9b1713dd53da83d
SHA1 e801787b3f2158710d516512933f387cd863b081
SHA256 933073be25c12e6d089ae9413230630804dd830742ee2e8114d621278055816b
SHA512 d386f5b6f4d6f2a8ffef981023013b25d96228df79e79220ceb7e7922db14934a02f0343394465870c4123069f7a913cba814ee539b4be981d0e3a620a579d1b

C:\Program Files (x86)\Pivot Animator v5\Animations\Legacy\tumble.piv

MD5 f93b4710781fa8957a8cc3c86929025a
SHA1 efa94134deac0e9edcfc028bdfc120d7ce58cb91
SHA256 c57ebe624a4cf08eb72783f7aa5f7f1f511fcea84791908be722398a69d8f7b3
SHA512 3224c1ceb84923a92788ae09a21fc202fb33b84c1ad9a81124cd9bdbe7335e19d2d16044ac1979518cd8124c593e888d4ccd4762bfb190df8178045320c128c1

C:\Program Files (x86)\Pivot Animator v5\Animations\square wheels.piv

MD5 5ec681f762df42f824781509b07a8197
SHA1 2a6bf546c4f7d1b9e6556b3548fad2d9361a46ca
SHA256 96c0eda02adc1f87d89bc0996da0b50935efd3cdb36475748753b02c5a362d43
SHA512 35a9cb148ed9d6ebc86a1c7269ebdfac1e0bc56ff0817b70d2a771eb96814eab83d2e7844ad22549abc2bba7f7852c636d5593092c55f73c2d48880486dbbf8d

C:\Program Files (x86)\Pivot Animator v5\Animations\run_demo.piv

MD5 42803149c1f956a427f150d0905be563
SHA1 1384465e3b7ebf64d98e6fdf35476cbf9aebf2e4
SHA256 f2783753894ad376681f370247314c1377ff6724145501635c7a7c8682155023
SHA512 902afa28a5566edc029fd2d288d9a119a54760946f27a9ee80d6e8c42dc84f305e5c7dc4e052df79fa7678a1ff2c639ca82d7163922b12710903fa558390fe5b

C:\Program Files (x86)\Pivot Animator v5\Animations\text_abc.piv

MD5 e90984f43f77778062a574baeffc3d56
SHA1 60ab52b15adf4d832e19606685272f5073d3878e
SHA256 198d25ddc7fe0c87166aa6225811be28b341df8493404d5f32247b25774bc5ee
SHA512 bee3c26e1cd9bbc51dcaa7c7f83d66712959f09b07f3fe89610f32282ad857d22ba04ebec9cb43bfdf99dd593d5a16a06ca0b44fd677c71b6a883bad3508c06a

C:\Program Files (x86)\Pivot Animator v5\Animations\text_speech_bubble.piv

MD5 c0da29c6c68e6b07b3c3663bccdef12f
SHA1 e32b0af30900a51294a6eb0fbaf739648045b7cc
SHA256 a98e443c17047e009ce0b40d868597b49dbd09cc64f1a73991c59dfddc1cd2ec
SHA512 7c6b7800a341b1b75559c7f2620b9587ecdaaf597bca83f089d65147b03b8681a5fb5b8b6d798f435119263601d36023e451a0a2bcc034c368d766773ac6355c

C:\Program Files (x86)\Pivot Animator v5\Animations\text_bike.piv

MD5 de938ed1fca12777739e6720aa846370
SHA1 5ee6765b2046c3f58f823405eb9e3c1d3b2f5c4c
SHA256 4f83a5ba94aa5fefff5faaa6747077d424792023407e7795d68e98ed91e72326
SHA512 94edf47fa47695b48516a9a8f115142aad8c9b4424a4284da4ddd37e13aeafa95f8c3f7acea9a26fdebe4c55f32ceacd3b532a871ec8bd0596cbefa33d763187

C:\Program Files (x86)\Pivot Animator v5\Animations\tween_demo.piv

MD5 75e011d607a4fe83e19c858f68d09709
SHA1 03d9185fdfb437f9bc5cb4b4ebbcb1816148a032
SHA256 822610840dc2da27ae1587916bea90aa731b1cc7a99210e5fc91c27d2db0973a
SHA512 0cae9e6a2dafc7a34b812db177335709f1e98714031aa51c13df3abcc39dfed71642faa22d95d4cb4847995dc0a8683e1f76270664aa88560b1035fe412152b9

C:\Program Files (x86)\Pivot Animator v5\Animations\tween_camera.piv

MD5 a0c7825383dfd56f8448654563e2d3f1
SHA1 9e26723e9a46301d5e7eedd02fcfe17f7d298739
SHA256 d2059b69914b3342fd2f0e62eb659cf84b6ee5faf9d09a760bb63a70b36599db
SHA512 c4e2988098141dae9d8d6ecb8f03dcc2b725f58496f15ccb030661b767f6b05efec2d9a565f4c5083523ae29f13b24bb56151f3ba6673a16350d3bf148bcd6ef

C:\Program Files (x86)\Pivot Animator v5\Animations\tween_football_bounce.piv

MD5 f02c84a7f5e47a7af3950336841d0af7
SHA1 a88989811682ecaed505ad4133e6710c8bad67ae
SHA256 7df392188c1ed7b740ae292a734af4c53dafb62f82169d680f389a1e51a41d90
SHA512 a20f0dfdc42c9b044bc755830a06217548c411c6cb33da9a340ee88030cd0d941311e0bb449694fda9ae85620a10d0f7bdaacd1a03bf80a7db05dfc823eb9419

C:\Program Files (x86)\Pivot Animator v5\Animations\tween_falling_object.piv

MD5 cc39ef21859d52916fa65a8b21a27d22
SHA1 0f56f99f45f30ad80484e7f192767b7b7182bdca
SHA256 7f2ad7f786867bd68469017e04a905ae07688053bd04d1ec513bee83a9442f58
SHA512 81161126e5216646132d6bb872781c8d423d44862c50d3d6738720a5cda4778536bf240426da14d204564a23ccc6ca7a4b6a145003fa25cf0e6c8f31376568da

C:\Program Files (x86)\Pivot Animator v5\Animations\tween_NY_day-night.piv

MD5 4cef79aec9863cc101d772a7b6ff21df
SHA1 b8326019886275ea2e58ce1e3bcbb09fc3e594d3
SHA256 16578bb0a7e1187e40e1cbb0e16c196889a17829dd449c5b6f32e238f0a628b2
SHA512 2b06440714074543b7540d30e210c49b9ed6bb595dd22f9ac51f21198501ccd944b0c4e96adf906a44c0c9ef6adcfa22b2fbca9f67fdfb159073fc83506d80c3

C:\Program Files (x86)\Pivot Animator v5\Animations\tween_water_bottle_flip.piv

MD5 83d80e1843a022e3f6c2eeb798fc77cd
SHA1 4d54af3502321f409aafe56813afa5d78d5e91cd
SHA256 8b4d754c5a800f6270aaead4ab39d20e5b8ed229034213e3f42f560f3706faaf
SHA512 b1a3d4a1c0ce97722d3c3a49c539342233e1b49b31972395d3a75a3f9aa2e7a94e62d3588b33ec38ced55e772b48c33caf887470ce0d51f3ecffb81a5c33c015

C:\Program Files (x86)\Pivot Animator v5\Animations\tween_pendulum.piv

MD5 7de0ea14391f0dd75363cee75a691c30
SHA1 333264a4010ffc56e71d7d969eacbc00d792a106
SHA256 2a7e63a4936e43b0e85d0803a8eff196e138ee08c8eb337d80c73dd49b825895
SHA512 2573e77fd052402cec3fd8bcdcc14435d680ef56f6c1f4b6737032753d454c658b8b26a6aaeb39f412765159729f6d129c575bee428c175353dd360f682f03ec

C:\Program Files (x86)\Pivot Animator v5\Animations\tween_infinite_zoom.piv

MD5 e91c14d26679408d6d0bf7a4408f6ec1
SHA1 0c8ec865b6c530dddafb7e2ca6a4998d9deb48c3
SHA256 4820460534d37a46e5714f5aec130320cab5e4bd6a59fc670a3f6a19d177780c
SHA512 69b24e7e59a2c2d784eb06d410227b84d4b65bc272d86b7cb8e3c4a6ee25441cbd2248fd8c1f88f421a1487993de15d4b0c534350deef272bba0ce36cb7048a2

C:\Program Files (x86)\Pivot Animator v5\Figures\archer_man.stk

MD5 e1a8a087812e4a1f5cfd61a14254c8c7
SHA1 36ab08c6bbcd35e900fa27a2a7956c30d0b8fb73
SHA256 230e0ed1dc21c2f8fbd878fb3c190a549fb73c15c2336e89a521b3dfc5c1795c
SHA512 9a962f649c7180eddd763820a173ea338aebe9caeaf72d8c7451dcb1c4ad94ba1c926bc6fcd8fefc337e216e5f276f2674348d7d17bc9e5b798e1cd059bb6fb1

C:\Program Files (x86)\Pivot Animator v5\Figures\dino.stk

MD5 fe75a23b8ea25a62edb48bb06d586398
SHA1 a0ffdbef6a999c22a8db12595387799b1ca32cd9
SHA256 f0df8bba81d23f0321746ce67e90b000e36d4e89e7b224ed2239f2148ceb1716
SHA512 248b1a48b2e8dc7653f8d772b1a377c53fc272ee20de20c75379e3a5752ff1a6cf43585ffb649bb66be87807980e46dcce28ac150788001c4180717acde41b8d

C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\clock.stk

MD5 bf204760449e39d33efa312a2f027ecb
SHA1 c57203280b902425c6b9243a7f645b74d2a9bd00
SHA256 93babe694a9e14b3aefe3a900ddc8623d4a8fe938a671323bf5cfdf68bd81afa
SHA512 85d4ac1b80e2c31dca3efb2a1a920649f410a38cbaab4e623761eca0cbcfc74eacf55fbd894d484f03715d491472343f1422da218ec459fa7f37326965d6a29f

C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\cowboy.stk

MD5 44207f61be6cbecb2e942fa214ab7ce3
SHA1 f05ecf61b19ce943513916aba67823d8e6ac63e4
SHA256 2914177d015fb201b423485522df207efe680fabeaf811f1cd59362374344563
SHA512 4393917897ab29024919a03702f397f73deb38c0ced1576d74b32e751a3d9bc4f0ccc19c69a5ebd97346759df25df5f22cf4408403ad17b096bd5bb6d9d415de

C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\default_pivot2.stk

MD5 8d61ed789696fb6fc57460c903f6bcd1
SHA1 8fb0ac3f02cd1d5a1430f6c892b23779d2362af9
SHA256 91a2d8f040f4566f8c50ccbe7faf800463cfab72b77315f112170db0fe953dbd
SHA512 07e063e56a68a19b5faf9df56ef0eb83a36bcf94674e03f5d9c1ea7606e7624be850ebb8caccfd1b192cf90f180112841b17768413c882f3f0b67dbaeacb0768

C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\elephant.stk

MD5 4003994633de0353b135ec2117f4cfbc
SHA1 b637213dfdd99aea0eeedd54818c713d4543bed6
SHA256 7f58987b2a7fea67ba767a67519e23408001755ec11b764304f41ae86b47d8a1
SHA512 71579e0290b7f72fb7a036f1b9b3bd69bee55977152069bfcaf8298e9cc00b0c71f6a80e95923cbb2be8c012ea7ae651d19b1442e3cf48e6c9c392ae6f8784e1

C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\horse.stk

MD5 e7bfc2164ed2cc976eb0e6a03ba1666e
SHA1 2f07b80e72d9efe4f2be07d66376149b88d84162
SHA256 1e92f7a981c1530ae9d779505c37e663f13b487fdf3e76e39a380c815ca653ed
SHA512 aa56543ff08b2239abeaa5616be67270aeb415b5d6bb4de96439b4cc9de139529872411dd46fe7d06f0f9a32efff6c26029e5ea07c096a58ce33397d1f6109ec

C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\ladder.stk

MD5 890e0b71d7bb2ecc2e8ab582142a6dea
SHA1 9df816c4b27c9d3ebd8efa60105b286e18d55817
SHA256 928db977e9d6403467a28f3b27daf6e8d5d014b7cc24da5a49bad32a71f7b521
SHA512 9844dbf4fd4d1338c65e036bbe79792dabaeb1a0be1044d52d80ecf0c30a14473b8a028244916dd39c7ce4008008b0e5190696e898184ebb302b920d1dcf8174

C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\man.stk

MD5 bc38e45306c140bfd2cca0f0e429a711
SHA1 51b71da52da155bbfe36a31aab59f4ac6c54de03
SHA256 402482091dc89f95a39e4114b2051d0b62b51b23436d984604fe722d816cedff
SHA512 62b80f1860573cdcd63f9ad604a5b073f7bb39c244a348a3c5b3eab800c4c0086b2c6d5fc340faace6c4eeae50eb2c411546ebdc4e2d4d4cb67fff9ae442c55b

C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\man_evolved.stk

MD5 43c05d8c2be77c118572b875abb9b062
SHA1 96799226803a2c1e4adb0b3524a42bf4b92e6b3d
SHA256 e829d27438a81d7d81581853ba2cf01393257151aedda00d19bbb5d154f3bc46
SHA512 2b618f17376503474981e4f70a79683780b49542920996692b10aedb55b1fa1f2a88e0317f1b08c7fcc382cb998742af415fcdb7c782c157c590937e772e9a61

C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\man_rotate.stk

MD5 64e43db5b1accf836f361ec1f1b552dc
SHA1 ff09eefd7153d73fc05b09f10e78a1dc989b0ef1
SHA256 b58b11b3aeda16a1d8b03dcdd00a90b1ea4551e55a9063cc5b197034f65cef1e
SHA512 3f6a48c17ca813c77e27e7f24a4d9a457503c51a2f834783e67b88538cbcfdb1d7e811cf88f91209e6664b7a7ee673fd4dd8052ffef27c97092913d8aa853adc

C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\realistic_man.stk

MD5 1a1c27977e828b5791821dbed308939b
SHA1 ceb455f00c1d5c81c4391f35a3b22cf3df55816a
SHA256 37d2d982ef098dc2a0f04da28cc155132d9350693db9b593107370da1d643a4a
SHA512 2142ebc80fa6d8abd5a22f4304713a64ab9ce459b5722e8ddeead91f4a1e2e84dfb8ac2fefbc6d1f995b9724c806aef6a9316546166bb0ea84dcc771c657520f

C:\Program Files (x86)\Pivot Animator v5\Figures\outline.stk

MD5 67466293e74baedf75f3d5fdc4c08688
SHA1 8d18148240f507f98e43b6634b3fcf1f044454a1
SHA256 7a12852655abde3227b5c81dce1d1c1e9c20227a24e40c8dcadf2852b0a01ba9
SHA512 b493236a840ec9584faa75e2e18360de84fffaeebfb9ba753ec5e3ed7bb16e7230862772bd9a5c1e0722e5421f449af7e8fcb3359506601df3e1e8594248b223

C:\Program Files (x86)\Pivot Animator v5\Figures\poly_skirt.stk

MD5 e791a9f7be703bde42039b2af8e62695
SHA1 cf4c3f295f5b61dab08338286ed142466f824890
SHA256 e405b5b49f4038628cb81c08fea740f062f3f5c63a42496c778e3d3a86439485
SHA512 247a4a758d67765bcf7b8bf3c8f218b408ff91140cbbca8e03e4618d6d59b2ac883e75bbcb702541457393fdf12799662dedc8fbcb6bf8aefae990334b622e93

C:\Program Files (x86)\Pivot Animator v5\Figures\speech_bubble.stk

MD5 3a2b48a8ef460ad903cda4e9ed848a5d
SHA1 2437db80ab776fe1e362df0228336cceba0a15ba
SHA256 6a27b3d4c34264feb12fad3030933227ad9f4130a87d9aee2a3e27fd4b4d76a7
SHA512 42ecc719620f202445540170f7ac0b6cdf2e21986122193db8905a0a1110f27af50738369c7677b801ff4eccb9b16a7cb6ccad2776b00f40036bc9fdd837fbf9

C:\Program Files (x86)\Pivot Animator v5\Figures\sprites_pete.stk

MD5 6640003c7850cd3d6e55772e314a8573
SHA1 0f95311d7224a6cd45f2f7567152de7cac68d7b5
SHA256 c8dc70b37e3e756d972b441cd7894f195074d04aee49701382764c5e24d1b7c8
SHA512 a47b2318a1d68d0dd2a5b423bb6336fda45f2465ab84cf24c7651278db0cd5c29b7b6b96dba0b926b42e13cbfb1e27f6be37b91aed5c9b972a9a386a87dde240

C:\Program Files (x86)\Pivot Animator v5\Figures\thought_bubble.stk

MD5 d139c79626f7b8235c0c12adbaa5eada
SHA1 2a538c99bf72defbb29900ecfa4b1c75c8abd39b
SHA256 74259c84cb6638a71d7567b5bb162d85e37689750449532a0a897afd1011596e
SHA512 3d249150baec42e1b81540ff7ab7a080e21e3feef58170822c77984171d57a64f9904fd14cd4fc3a8289d1a6035b94cf4f5c7bb66920574aa3fb4c1421bd8ee4

memory/560-578-0x000000007EF80000-0x000000007EF90000-memory.dmp

C:\Users\Admin\AppData\Roaming\Pivot Animator\Pivot.ini

MD5 803d46ed61650aa30d4ca4ba8bcbad90
SHA1 4a30078e23358809e0c067ac872e49fc01aafc8d
SHA256 f022958d46e5ffb2a716600057b18988dd762d8fb64b688b114e6aa4038ba057
SHA512 7998af503ba90bb4065c123df9e28964df80c8c2a8a68aabe7ab95fb588cd2865aa3ad1d3e44b51c94964eebc91a58b2b064844730d177c33fdb3b3bc9508c0e

memory/560-648-0x0000000000EA0000-0x0000000001BF3000-memory.dmp

memory/560-649-0x0000000000EA0000-0x0000000001BF3000-memory.dmp

memory/560-652-0x0000000000EA0000-0x0000000001BF3000-memory.dmp

memory/560-653-0x0000000000EA0000-0x0000000001BF3000-memory.dmp

memory/560-658-0x0000000000EA0000-0x0000000001BF3000-memory.dmp

memory/560-659-0x0000000000EA0000-0x0000000001BF3000-memory.dmp

memory/560-660-0x0000000000EA0000-0x0000000001BF3000-memory.dmp

memory/560-661-0x0000000000EA0000-0x0000000001BF3000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-10-16 23:44

Reported

2024-10-16 23:55

Platform

win10v2004-20241007-en

Max time kernel

599s

Max time network

450s

Command Line

"C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe"

Signatures

Suspicious use of NtCreateProcessExOtherParentProcess

Description Indicator Process Target
PID 7884 created 7604 N/A C:\Program Files\AVG\Antivirus\avDump.exe C:\Program Files\AVG\Antivirus\wsc_proxy.exe

Downloads MZ/PE file

Drops file in Drivers directory

Description Indicator Process Target
File created C:\Windows\system32\drivers\aswe340784156e0e94c.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\aswbfe94bf67ea0e292.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\drivers\asw1197d138421f9264.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\aswe44fa0af54f75066.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\drivers\aswbb57666d49dcaa3d.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\asw3c23dc36d8f2a861.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\drivers\asw86814e7336f248fc.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\aswe8b0ec6be4651911.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\drivers\aswf323da0cf5a61e2f.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\asw3a6a2880e7c5f2ad.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\asw7673d69df6930707.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\avgElam.sys C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\asw96df8350da4ef136.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\aswe340784156e0e94c.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\aswf323da0cf5a61e2f.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\asw1eaed098ab6521e3.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\drivers\asw4a17f82b6d96620b.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\drivers\aswe8b0ec6be4651911.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\drivers\asw3c23dc36d8f2a861.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\asw41ef05eef883ab38.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\drivers\aswf7213e8486571f61.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\aswbb57666d49dcaa3d.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\drivers\aswe44fa0af54f75066.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\asw4a17f82b6d96620b.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\aswf7213e8486571f61.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\drivers\asw7673d69df6930707.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\drivers\asw3a6a2880e7c5f2ad.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\drivers\asw41ef05eef883ab38.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\Drivers\avg3DEB.tmp C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
File opened for modification C:\Windows\system32\drivers\asw1197d138421f9264.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\drivers\asw86814e7336f248fc.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\drivers\asw1eaed098ab6521e3.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\drivers\aswbfe94bf67ea0e292.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A

Sets service image path in registry

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgStm\ImagePath = "system32\\drivers\\avgStm.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgArPot\ImagePath = "system32\\drivers\\avgArPot.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgRdr\ImagePath = "system32\\drivers\\avgRdr2.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgElam\ImagePath = "system32\\drivers\\avgElam.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgKbd\ImagePath = "system32\\drivers\\avgKbd.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgMonFlt\ImagePath = "system32\\drivers\\avgMonFlt.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgbIDSAgent\ImagePath = "\"C:\\Program Files\\AVG\\Antivirus\\aswidsagent.exe\"" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgRvrt\ImagePath = "system32\\drivers\\avgRvrt.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgStm\ImagePath = "system32\\drivers\\avgStm.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgNetHub\ImagePath = "system32\\drivers\\avgNetHub.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgSP\ImagePath = "system32\\drivers\\avgSP.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgbuniv\ImagePath = "system32\\drivers\\avgbuniv.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgArDisk\ImagePath = "system32\\drivers\\avgArDisk.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgArPot\ImagePath = "system32\\drivers\\avgArPot.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgNetHub\ImagePath = "system32\\drivers\\avgNetHub.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\AVG Antivirus\ImagePath = "\"C:\\Program Files\\AVG\\Antivirus\\AVGSvc.exe\" /runassvc" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgbidsh\ImagePath = "system32\\drivers\\avgbidsh.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgbidsdriver\ImagePath = "system32\\drivers\\avgbidsdriver.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgArDisk\ImagePath = "system32\\drivers\\avgArDisk.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgVmm\ImagePath = "system32\\drivers\\avgVmm.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgSnx\ImagePath = "system32\\drivers\\avgSnx.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgRvrt\ImagePath = "system32\\drivers\\avgRvrt.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgbidsh\ImagePath = "system32\\drivers\\avgbidsh.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgSnx\ImagePath = "system32\\drivers\\avgSnx.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgMonFlt\ImagePath = "system32\\drivers\\avgMonFlt.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgbuniv\ImagePath = "system32\\drivers\\avgbuniv.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgKbd\ImagePath = "system32\\drivers\\avgKbd.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgRdr\ImagePath = "system32\\drivers\\avgRdr2.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgVmm\ImagePath = "system32\\drivers\\avgVmm.sys" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgbidsdriver\ImagePath = "system32\\drivers\\avgbidsdriver.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgSP\ImagePath = "system32\\drivers\\avgSP.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avgElam\ImagePath = "system32\\drivers\\avgElam.sys" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A

Uses Session Manager for persistence

persistence
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000000000 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000006900630061007200750073005f0072007600720074002e0065007800650000000000 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000000000 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000006900630061007200750073005f0072007600720074002e0065007800650000000000 C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000000000 C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000006900630061007200750073005f0072007600720074002e0065007800650000000000 C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000000000 C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000006900630061007200750073005f0072007600720074002e0065007800650000000000 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Control Panel\International\Geo\Nation C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Control Panel\International\Geo\Nation C:\Program Files\AVG\Antivirus\AVGUI.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\avg_antivirus_free_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A
N/A N/A C:\Windows\Temp\asw.723735a0cf498ca4\avg_antivirus_free_online_setup.exe N/A
N/A N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\installer.exe N/A
N/A N/A C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
N/A N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
N/A N/A C:\Program Files (x86)\Pivot Animator v5\pivot.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\wsc_proxy.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\avDump.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\Common Files\AVG\Overseer\overseer.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
N/A N/A C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus.exe N/A
N/A N/A C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
N/A N/A C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
N/A N/A C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus_ui.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\wsc_proxy.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\avDump.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\Common Files\AVG\Overseer\overseer.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\AvDump.exe N/A

Impair Defenses: Safe Mode Boot

defense_evasion
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\avgSP.sys\ = "Driver" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\avgSP.sys C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\avgSP.sys\ = "Driver" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\avgSP.sys C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\avg_antivirus_free_setup.exe N/A
N/A N/A C:\Windows\Temp\asw.723735a0cf498ca4\avg_antivirus_free_online_setup.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
N/A N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\wsc_proxy.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A
N/A N/A C:\Program Files\AVG\Antivirus\afwServ.exe N/A

Reads user/profile data of web browsers

spyware stealer

Windows security modification

evasion trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{4FC75CA5-1654-5411-7CFB-1893D506BCF4} C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\SECURITY CENTER\PROVIDER\AV\{4FC75CA5-1654-5411-7CFB-1893D506BCF4} C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AVGUI.exe = "\"C:\\Program Files\\AVG\\Antivirus\\AvLaunch.exe\" /gui" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AVGUI.exe = "\"C:\\Program Files\\AVG\\Antivirus\\AvLaunch.exe\" /gui" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A

Checks for any installed AV software in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\wsc_proxy.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Key opened \REGISTRY\MACHINE\Software\Avira\Antivirus C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\AVG\AV C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVG\AV C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Key opened \REGISTRY\MACHINE\Software\Avira\Antivirus C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\afwServ.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast\properties C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\afwServ.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\afwServ.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Key opened \REGISTRY\MACHINE\Software\Avira\Antivirus C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\afwServ.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Program Files\AVG\Antivirus\wsc_proxy.exe N/A

Checks installed software on the system

discovery

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Common Files\AVG\Overseer\overseer.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\avg_antivirus_free_setup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.723735a0cf498ca4\avg_antivirus_free_online_setup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\Common Files\AVG\Overseer\overseer.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\icarus_rvrt.exe C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
File opened for modification C:\Windows\system32\asw81ad7816dd9d368e.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\system32\asw81ad7816dd9d368e.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\system32\asw3bd7c2af30b9a0ae.tmp C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
File created C:\Windows\system32\asw3bd7c2af30b9a0ae.tmp C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
File opened for modification C:\Windows\system32\avgBoot.exe C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
File created C:\Windows\system32\icarus_rvrt.exe C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\McAfee\WebAdvisor\MFW\packages\builtin\white_timer.png C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\jslang\new-tab-res-toast-nl-NL.js C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-sstoast-bing-nl-NL.js C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File opened for modification C:\Program Files\AVG\Antivirus\setup\asw29f09f40ac02e756.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\product-info.xml.to_delete.1729122462 C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-ss-toast-variants-pt-BR.js C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\eventmanager.dll C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File created C:\Program Files\AVG\Antivirus\gui_resources\default_av\firewall.js.ipending.1b2d7630.lzma C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Program Files\AVG\Antivirus\locales\lv.pak.ipending.1b2d7630 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-handle-l1-1-0.dll.ipending.1b2d7630 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\AVG\Antivirus\defs\24101612\asw8f7d4ff194f7e6ca.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
File opened for modification C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus_ui.exe C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\telemetry\events\handlers\searchterm.luc C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File created C:\Program Files\AVG\Antivirus\Licenses\mhook.txt.ipending.1b2d7630 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\AVG\Antivirus\Inf\x64\avgElam.sys C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\AVG\Antivirus\gui_resources\default_av\core.js C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Program Files\AVG\AvVps\gvma64.dat.ipending.adc20534.lzma C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
File created C:\Program Files\AVG\Antivirus\defs\24101612\aswa9bd0404f6fd07db.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-webboost-pt-BR.js C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\analyticstelemetry\context\contexthandler.luc C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File created C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-console-l1-1-0.dll.ipending.1b2d7630.lzma C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\AVG\Antivirus\gui_resources\default_av\antiRansomware.js C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Program Files\AVG\AvVps\db_w6c.dat.ipending.adc20534.lzma C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
File opened for modification C:\Program Files\AVG\AvVps\db_dh.dat.ipending.adc20534 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\MFW\packages\webadvisor\new-tab-toasts.html C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\telemetry\serializers\toastchecktriggered.luc C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\telemetry\dimensions\handlers\sequencenumber.luc C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File opened for modification C:\Program Files\AVG\Antivirus\aswW8ntf.dll C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-uninstall-da-DK.js C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\analyticstelemetry\context\wpssubscriptiontype.luc C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File created C:\Program Files\AVG\Antivirus\event_manager.dll.ipending.1b2d7630 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\AVG\Antivirus\OobeUtil.exe C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\AVG\Antivirus\libGLESv2.dll.ipending.1b2d7630 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\AVG\Antivirus\defs\24101612\asw6320d7a10e0c9641.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
File opened for modification C:\Program Files\McAfee\Webadvisor\Analytics\aviary_client.js C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
File created C:\Program Files\AVG\Antivirus\x86\ashShell.dll.ipending.1b2d7630 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-1151d5ad-04ad-4637-9cce-f3a38d9a6949\icarus_ui.exe C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\telemetry\events\handlers\sendimmediately.luc C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File created C:\Program Files\AVG\Antivirus\gui_resources\default_av\tray.js.ipending.1b2d7630.lzma C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\vcruntime140_threads.dll C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Program Files\AVG\Antivirus\defs\24101612\asw6d7116e889d8745c.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
File created C:\Program Files\AVG\Antivirus\defs\24101612\avg.local_vc142.crt\msvcp140_atomic_wait.dll C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
File created C:\Program Files\AVG\Antivirus\defs\24101612\db_dns.map C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
File opened for modification C:\Program Files\AVG\Antivirus\libcrypto-3-x64.dll.ipending.1b2d7630 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\AVG\AvVps\db_o7c.map C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
File created C:\Program Files\AVG\Antivirus\libGLESv2.dll.ipending.1b2d7630 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus_product.dll C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus.exe N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-UIGKL.tmp C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A
File created C:\Program Files\AVG\Antivirus\Inf\x64\avgbidsdriver.sys.ipending.1b2d7630.lzma C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Program Files\AVG\Antivirus\AVGSvc.exe.ipending.1b2d7630.lzma C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\vcruntime140_threads.dll.ipending.1b2d7630.lzma C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Program Files\AVG\AvVps\PushPin.dll.ipending.adc20534 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
File created C:\Program Files\AVG\Antivirus\locales\pl.pak.ipending.1b2d7630 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\AVG\AvVps\db_js.sig C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
File created C:\Program Files\AVG\Antivirus\x86\aswCmnOS.dll.ipending.1b2d7630.lzma C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Program Files (x86)\Pivot Animator v5\Figures\Legacy\is-EU590.tmp C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A
File created C:\Program Files\AVG\Antivirus\Licenses\zlib.txt.ipending.1b2d7630 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\AVG\AvVps\certs.map.ipending.adc20534 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\MFW\packages\builtin\mcafee-logo-2024.png C:\Program Files\McAfee\Temp4265655246\installer.exe N/A
File opened for modification C:\Program Files\AVG\Antivirus\gui_resources\default_av\locale-fi.json C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Program Files\AVG\Antivirus\RescueDisk\aswShMin.exe.ipending.1b2d7630 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\AVG\Antivirus\gui_resources\default_av\ras.js C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Program Files\AVG\AvVps\db_wat.nmp.ipending.adc20534 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
File created C:\Program Files (x86)\Pivot Animator v5\languages\is-J90SE.tmp C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\Fonts\is-TQ3A7.tmp C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A
File opened for modification C:\Windows\TEMP C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus.exe N/A
File opened for modification C:\Windows\TEMP C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
File opened for modification C:\Windows\ELAMBKUP\asw817d0e56217bac7c.tmp C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
File created C:\Windows\ELAMBKUP\asw817d0e56217bac7c.tmp C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
File opened for modification C:\Windows\ELAMBKUP\avgElam.sys C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
File opened for modification C:\Windows\ELAMBKUP\asw2d7f2f51006e1ae3.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File created C:\Windows\ELAMBKUP\asw2d7f2f51006e1ae3.tmp C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
File opened for modification C:\Windows\TEMP C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A

Embeds OpenSSL

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Temp\asw.723735a0cf498ca4\avg_antivirus_free_online_setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\avg_antivirus_free_setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Pivot Animator v5\pivot.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\afwServ.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\wsc_proxy.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\afwServ.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\AVG\Antivirus\wsc_proxy.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\afwServ.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\afwServ.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\afwServ.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\AVG\Antivirus\wsc_proxy.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\AVG\Antivirus\wsc_proxy.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\AVG\Antivirus\afwServ.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\AVG\Antivirus\afwServ.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\AVG\Antivirus\AVGUI.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\AVG\Antivirus\AvEmUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\SetupInf.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\AVG\Antivirus\SetupInf.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key deleted \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\INTERNET EXPLORER\EXTENSION VALIDATION\{B1435FAE-811C-4D50-94EC-A02A259992D5} C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Validation\{B1435FAE-811C-4D50-94EC-A02A259992D5} C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\EXTENSION VALIDATION\{B1435FAE-811C-4D50-94EC-A02A259992D5} C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Validation\{B1435FAE-811C-4D50-94EC-A02A259992D5} C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\INTERNET EXPLORER\EXTENSION VALIDATION\{B1435FAE-811C-4D50-94EC-A02A259992D5} C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Validation\{B1435FAE-811C-4D50-94EC-A02A259992D5} C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\EXTENSION VALIDATION\{B1435FAE-811C-4D50-94EC-A02A259992D5} C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Validation\{B1435FAE-811C-4D50-94EC-A02A259992D5} C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Validation C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Validation C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Validation\{B1435FAE-811C-4D50-94EC-A02A259992D5} C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Validation\{B1435FAE-811C-4D50-94EC-A02A259992D5} C:\Program Files\AVG\Antivirus\RegSvr.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{64644512-C345-469F-B5FB-EB351E20129D}\ProgID C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\avglicfile\shell\open\command C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\00avg\ = "{472083B1-C522-11CF-8763-00608CC02F24}" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B1435FAE-811C-4D50-94EC-A02A259992D5}\ = "AVG IExtensionValidation implementation" C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B1435FAE-811C-4D50-94EC-A02A259992D5}\InprocServer32\ = "C:\\Program Files\\AVG\\Antivirus\\aswAMSI.dll" C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFigure.stk\shell\open C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.stk C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{472083B1-C522-11CF-8763-00608CC02F24}\InProcServer32\ThreadingModel = "Apartment" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\avglicfile\EditFlags = "65536" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.avgconfig C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.avglic\ = "avglicfile" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C52A311F-4B4E-4C5D-80A0-31F0DDE260AB}\ = "AVG IAntimalwareProvider implementation" C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\avgsoundsfile\EditFlags = "65536" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C52A311F-4B4E-4C5D-80A0-31F0DDE260AB}\InprocServer32 C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\.stk\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{64644512-C345-469F-B5FB-EB351E20129D} C:\Windows\SysWOW64\regsvr32.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B1435FAE-811C-4D50-94EC-A02A259992D5} C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\STKPreview.stkfile\Clsid\ = "{64644512-C345-469F-B5FB-EB351E20129D}" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C52A311F-4B4E-4C5D-80A0-31F0DDE260AB}\InprocServer32\ = "C:\\Program Files\\AVG\\Antivirus\\aswAMSI.dll" C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{472083B1-C522-11CF-8763-00608CC02F24}\ = "AVG" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\avgthemefile C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\avgthemefile\ = "AVG theme file" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\00avg C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B1435FAE-811C-4D50-94EC-A02A259992D5} C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFigure.stk C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\AVGUI.exe\FriendlyAppName = "AVG AntiVirus Free" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C52A311F-4B4E-4C5D-80A0-31F0DDE260AB} C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFile.piv C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\avgav\shell C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG\ = "{472083B1-C522-11CF-8763-00608CC02F24}" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\avgconfigfile\shell\open\command\ = "\"C:\\Program Files\\AVG\\Antivirus\\aswChLic.exe\" \"%1\"" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.avgtheme\ = "avgthemefile" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA} C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\avgthemefile\EditFlags = "65536" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFile.piv\shell C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\avgav\shell\ = "open" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\avgconfigfile\ = "AVG config file" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C52A311F-4B4E-4C5D-80A0-31F0DDE260AB} C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}\InprocServer32 C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.avgtheme\ = "avgthemefile" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\avgav\DefaultIcon C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG\ = "{472083B1-C522-11CF-8763-00608CC02F24}" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.avgsounds\Content Type = "application/avg-sounds" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.piv C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\PivotFigure.stk\shell\open\command\ = "\"C:\\Program Files (x86)\\Pivot Animator v5\\pivot.exe\" \"%1\"" C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\avgthemefile\shell\open C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B1435FAE-811C-4D50-94EC-A02A259992D5}\InprocServer32\ = "C:\\Program Files\\AVG\\Antivirus\\aswAMSI.dll" C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\avgconfigfile\BrowserFlags = "8" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B1435FAE-811C-4D50-94EC-A02A259992D5} C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B1435FAE-811C-4D50-94EC-A02A259992D5}\InprocServer32 C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B1435FAE-811C-4D50-94EC-A02A259992D5}\InprocServer32 C:\Program Files\AVG\Antivirus\x86\RegSvr.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B1435FAE-811C-4D50-94EC-A02A259992D5}\InprocServer32\ThreadingModel = "Both" C:\Program Files\AVG\Antivirus\RegSvr.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\avgconfigfile\EditFlags = "65536" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\avgthemefile\BrowserFlags = "8" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\avgav\shell\open\command\ = "\"C:\\Program Files\\AVG\\Antivirus\\AVGUI.exe\" \"/%1\"" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\avglicfile\BrowserFlags = "8" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\avgthemefile\shell\open\command\ = "\"C:\\Program Files\\AVG\\Antivirus\\aswChLic.exe\" \"%1\"" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\avgav\URL Protocol C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\ContextMenuHandlers\AVG\ = "{472083B1-C522-11CF-8763-00608CC02F24}" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.avgconfig\ = "avgconfigfile" C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{64644512-C345-469F-B5FB-EB351E20129D}\AppID = "{534A1E02-D58F-44f0-B58B-36CBED287C7C}" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\avgconfigfile\BrowserFlags = "8" C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 190000000100000010000000787d09f953c59978ecd8d6e44b38e24f0f0000000100000020000000489ff6233f3d3c5da77604be230745657fe488cb05257da551bfd64c1f179e720b0000000100000052000000530053004c002e0063006f006d00200052006f006f0074002000430065007200740069006600690063006100740069006f006e00200041007500740068006f0072006900740079002000520053004100000009000000010000004c000000304a06082b0601050507030206082b06010505070303060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030106082b0601050507030862000000010000002000000085666a562ee0be5ce925c1d8890a6f76a87ec16d4d7d5f29ea7419cf20123b69140000000100000014000000dd040907a2f57a7d5253129295ee3880250da6591d00000001000000100000000d48ee33d7f1af8f4b002527f82a344a030000000100000014000000b7ab3308d1ea4477ba1480125a6fbda936490cbb2000000001000000e1050000308205dd308203c5a00302010202087b2c9bd316803299300d06092a864886f70d01010b0500307c310b3009060355040613025553310e300c06035504080c0554657861733110300e06035504070c07486f7573746f6e31183016060355040a0c0f53534c20436f72706f726174696f6e3131302f06035504030c2853534c2e636f6d20526f6f742043657274696669636174696f6e20417574686f7269747920525341301e170d3136303231323137333933395a170d3431303231323137333933395a307c310b3009060355040613025553310e300c06035504080c0554657861733110300e06035504070c07486f7573746f6e31183016060355040a0c0f53534c20436f72706f726174696f6e3131302f06035504030c2853534c2e636f6d20526f6f742043657274696669636174696f6e20417574686f726974792052534130820222300d06092a864886f70d01010105000382020f003082020a0282020100f90fdda32b7dcbd02afeec6785a6e72e1bba77e1e3f5afa4ecfa4a5d91c457476b18776b76f2fd93e43d0fc2169e0b66c356949e178385ce56eff216fd0062f5220954e865174e41b9e04f4697aa1bc8b86e625e69b15fdb2a027efc6ccaf341d8edd0e8fc3f6148edb003141d100e4b19e0bb4eec8665ff36f35e67020b9d865561fd7a38edfee21900b76fa1506275743ca0fac82592b46e7a22c7f81ea1e3b2dd9131ab2b1d04ffa54a0437e985a4332bfde2d655347c19a44a68c7b2a8d3b7caa19388ebc197bc8cf91dd922842474c7043d6aa92993ccebb85be1fe5f25aa3458c8c123549d1b9811c3389c7e3d866ca50f40867c02f45c024f28cbae719f0f3ac833fe112535eafcbac5603dd97c18d5b2a9d37578037222ca3ac31fef2ce52ea9fa9e2cb65146fdaf03d6ea6068ea8516366b85e91ec0b3ddc424dc802a81416d943ec8e0c98141009e5ebf7fc50898a2182c4240b3f96f38274b4e80f43d8147e0887cea1cceb5755c512e1c2b7f1a7228e700b5d174c6d7e49fad0793b6533535fc37e4c3f65d16be2173de920af8a0636abc96926a3ef8bc65559bdef50d892604fc251aa62569cbc26dca7ce2595f97acebef2ec8bcd71b593c2bccf219c8936b276319cffce926f8ca719b7f93fe3467844e99ebfcb378093370ba66a676ed1b73eb1aa50dc422132094560a4e2c6c4eb1fdcf9c09baa233ed870203010001a3633061301d0603551d0e04160414dd040907a2f57a7d5253129295ee3880250da659300f0603551d130101ff040530030101ff301f0603551d23041830168014dd040907a2f57a7d5253129295ee3880250da659300e0603551d0f0101ff040403020186300d06092a864886f70d01010b050003820201002018119429fb269d1c1e1e7061f19572937124ad6893588e32af1bb37003fc252b7485903d786af4b98ba5973bb51891bb1ea7f9405b91f95599af1e11d05c1da766e3b194070c3239a6ea1bb079d81d9c7044e38addc4f9951f8a38433f0185a547a73d46b2bce52268f77b9cd82c3e0a21c82d33acbfc581993174c17571c5beb1f02345f49d6bfc19639da3bc04c6180b25bb53890fb38050de45ee447fab94786498d3f628dd87d8706574fb0eb913eba70f61a93296ccdebbed634c18bba940f7a0546e2088717518ea7ab43472e02327775cb690ea862540abef330fcb9f82bea220fbf6b52d1ae6c285b1740ffbc86502a4520147dd4922c1bfd8eb6bac7edeec633315b723088fc60f8d415add8ec5b98fe5453f78dbbad21b40b1fe714d3fe081a2ba5eb4ec15e093dd081f7ee155990b21de939e0afbe6a349bd3630fee777b2a07597b52d8188176520f7da90009fc952cc32ca357cf53d0fd82bd7f5266cc906349616ea70591a3279790bb6887f0f52483dbf6cd8a2442ed14eb77258d3891395fe44abf8d78b1b6e9cbc2ca05bd56a00af5f37e1d5fa100b989c86e7268fcef0ec6e8a570b80e34eb2c0a0636190ba556837746ab692db9fa18622b665270eecb69f4260e467c2b5da410bc4d38b611bbcfa1f912bd744075eba29acd9c5e9ef53485aeb80f1285821cdb00655fb273f539070a9041e5727b9 C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D89E3BD43D5D909B47A18977AA9D5CE36CEE184C\Blob = 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 C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8 C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 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 C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D89E3BD43D5D909B47A18977AA9D5CE36CEE184C C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Token: 35 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A
Token: 35 N/A C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3604 wrote to memory of 5052 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp
PID 3604 wrote to memory of 5052 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp
PID 3604 wrote to memory of 5052 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp
PID 5088 wrote to memory of 1352 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\avg_antivirus_free_setup.exe C:\Windows\Temp\asw.723735a0cf498ca4\avg_antivirus_free_online_setup.exe
PID 5088 wrote to memory of 1352 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\avg_antivirus_free_setup.exe C:\Windows\Temp\asw.723735a0cf498ca4\avg_antivirus_free_online_setup.exe
PID 5088 wrote to memory of 1352 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\avg_antivirus_free_setup.exe C:\Windows\Temp\asw.723735a0cf498ca4\avg_antivirus_free_online_setup.exe
PID 5052 wrote to memory of 3792 N/A C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp C:\Windows\SysWOW64\regsvr32.exe
PID 5052 wrote to memory of 3792 N/A C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp C:\Windows\SysWOW64\regsvr32.exe
PID 5052 wrote to memory of 3792 N/A C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp C:\Windows\SysWOW64\regsvr32.exe
PID 1352 wrote to memory of 3692 N/A C:\Windows\Temp\asw.723735a0cf498ca4\avg_antivirus_free_online_setup.exe C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe
PID 1352 wrote to memory of 3692 N/A C:\Windows\Temp\asw.723735a0cf498ca4\avg_antivirus_free_online_setup.exe C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe
PID 1680 wrote to memory of 1696 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\installer.exe
PID 1680 wrote to memory of 1696 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\installer.exe
PID 1696 wrote to memory of 4308 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\installer.exe C:\Program Files\McAfee\Temp4265655246\installer.exe
PID 1696 wrote to memory of 4308 N/A C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\installer.exe C:\Program Files\McAfee\Temp4265655246\installer.exe
PID 4308 wrote to memory of 5500 N/A C:\Program Files\McAfee\Temp4265655246\installer.exe C:\Windows\SYSTEM32\regsvr32.exe
PID 4308 wrote to memory of 5500 N/A C:\Program Files\McAfee\Temp4265655246\installer.exe C:\Windows\SYSTEM32\regsvr32.exe
PID 5500 wrote to memory of 6468 N/A C:\Windows\SYSTEM32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 5500 wrote to memory of 6468 N/A C:\Windows\SYSTEM32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 5500 wrote to memory of 6468 N/A C:\Windows\SYSTEM32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 4308 wrote to memory of 6816 N/A C:\Program Files\McAfee\Temp4265655246\installer.exe C:\Windows\SYSTEM32\regsvr32.exe
PID 4308 wrote to memory of 6816 N/A C:\Program Files\McAfee\Temp4265655246\installer.exe C:\Windows\SYSTEM32\regsvr32.exe
PID 6084 wrote to memory of 2336 N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe C:\Program Files\McAfee\WebAdvisor\UIHost.exe
PID 6084 wrote to memory of 2336 N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe C:\Program Files\McAfee\WebAdvisor\UIHost.exe
PID 3692 wrote to memory of 864 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe
PID 3692 wrote to memory of 864 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe
PID 3692 wrote to memory of 1144 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe
PID 3692 wrote to memory of 1144 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe
PID 4280 wrote to memory of 6472 N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe C:\Program Files (x86)\Pivot Animator v5\pivot.exe
PID 4280 wrote to memory of 6472 N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe C:\Program Files (x86)\Pivot Animator v5\pivot.exe
PID 4280 wrote to memory of 6472 N/A C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe C:\Program Files (x86)\Pivot Animator v5\pivot.exe
PID 6084 wrote to memory of 6020 N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe C:\Program Files\McAfee\WebAdvisor\updater.exe
PID 6084 wrote to memory of 6020 N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe C:\Program Files\McAfee\WebAdvisor\updater.exe
PID 6084 wrote to memory of 6500 N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe C:\Windows\system32\cmd.exe
PID 6084 wrote to memory of 6500 N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe C:\Windows\system32\cmd.exe
PID 6084 wrote to memory of 6548 N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe C:\Windows\system32\cmd.exe
PID 6084 wrote to memory of 6548 N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe C:\Windows\system32\cmd.exe
PID 864 wrote to memory of 5240 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe
PID 864 wrote to memory of 5240 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe
PID 1144 wrote to memory of 10064 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\SetupInf.exe
PID 1144 wrote to memory of 10064 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\SetupInf.exe
PID 1144 wrote to memory of 10192 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\SetupInf.exe
PID 1144 wrote to memory of 10192 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\SetupInf.exe
PID 1144 wrote to memory of 4500 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\SetupInf.exe
PID 1144 wrote to memory of 4500 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\SetupInf.exe
PID 1144 wrote to memory of 4140 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\SetupInf.exe
PID 1144 wrote to memory of 4140 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\SetupInf.exe
PID 1144 wrote to memory of 4420 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\SetupInf.exe
PID 1144 wrote to memory of 4420 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\SetupInf.exe
PID 1144 wrote to memory of 5504 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\SetupInf.exe
PID 1144 wrote to memory of 5504 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\SetupInf.exe
PID 1144 wrote to memory of 9720 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\AvEmUpdate.exe
PID 1144 wrote to memory of 9720 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\AvEmUpdate.exe
PID 1144 wrote to memory of 9972 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\AvEmUpdate.exe
PID 1144 wrote to memory of 9972 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\AvEmUpdate.exe
PID 1144 wrote to memory of 7728 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\x86\RegSvr.exe
PID 1144 wrote to memory of 7728 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\x86\RegSvr.exe
PID 1144 wrote to memory of 7728 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\x86\RegSvr.exe
PID 1144 wrote to memory of 4476 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\RegSvr.exe
PID 1144 wrote to memory of 4476 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\RegSvr.exe
PID 1144 wrote to memory of 7644 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\SetupInf.exe
PID 1144 wrote to memory of 7644 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\SetupInf.exe
PID 1144 wrote to memory of 7604 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\wsc_proxy.exe
PID 1144 wrote to memory of 7604 N/A C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe C:\Program Files\AVG\Antivirus\wsc_proxy.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe

"C:\Users\Admin\AppData\Local\Temp\pivot_v5-2.exe"

C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\avg_antivirus_free_setup.exe

"C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\avg_antivirus_free_setup.exe" /silent /ws /psh:M75AarZWOYdUOfMs32s4HVjd6gzJvEB6EN9pBLrIKo8BLakM2HLU6KFsdcaY3tWoplavlIlL5loS8ANbP6bp6Zr

C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe

"C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe" /affid 91082 PaidDistribution=true CountryCode=GB

C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe

"C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe" /VERYSILENT

C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp

"C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp" /SL5="$3016E,18433013,58368,C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe" /VERYSILENT

C:\Windows\Temp\asw.723735a0cf498ca4\avg_antivirus_free_online_setup.exe

"C:\Windows\Temp\asw.723735a0cf498ca4\avg_antivirus_free_online_setup.exe" /silent /ws /psh:M75AarZWOYdUOfMs32s4HVjd6gzJvEB6EN9pBLrIKo8BLakM2HLU6KFsdcaY3tWoplavlIlL5loS8ANbP6bp6Zr /cookie:mmm_irs_ppi_902_451_o /ga_clientid:1151d5ad-04ad-4637-9cce-f3a38d9a6949 /edat_dir:C:\Windows\Temp\asw.723735a0cf498ca4

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\Pivot Animator v5\STKPreview.dll"

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe /icarus-info-path:C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\icarus-info.xml /install /silent /ws /psh:M75AarZWOYdUOfMs32s4HVjd6gzJvEB6EN9pBLrIKo8BLakM2HLU6KFsdcaY3tWoplavlIlL5loS8ANbP6bp6Zr /cookie:mmm_irs_ppi_902_451_o /edat_dir:C:\Windows\Temp\asw.723735a0cf498ca4 /track-guid:1151d5ad-04ad-4637-9cce-f3a38d9a6949

C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\installer.exe

"C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade

C:\Program Files\McAfee\Temp4265655246\installer.exe

"C:\Program Files\McAfee\Temp4265655246\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\win32\WSSDep.dll"

C:\Windows\SysWOW64\regsvr32.exe

/s "C:\Program Files\McAfee\WebAdvisor\win32\WSSDep.dll"

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\x64\WSSDep.dll"

C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe

"C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"

C:\Program Files\McAfee\WebAdvisor\UIHost.exe

"C:\Program Files\McAfee\WebAdvisor\UIHost.exe"

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\icarus.exe /silent /ws /psh:M75AarZWOYdUOfMs32s4HVjd6gzJvEB6EN9pBLrIKo8BLakM2HLU6KFsdcaY3tWoplavlIlL5loS8ANbP6bp6Zr /cookie:mmm_irs_ppi_902_451_o /edat_dir:C:\Windows\Temp\asw.723735a0cf498ca4 /track-guid:1151d5ad-04ad-4637-9cce-f3a38d9a6949 /er_master:master_ep_57273189-a83d-4844-9fda-55dbc0b69525 /er_ui:ui_ep_999003bf-8b9a-4b05-9635-b1e82773e416 /er_slave:avg-av-vps_slave_ep_353d17a3-ab54-4e65-808f-3cfb0034c065 /slave:avg-av-vps

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus.exe /silent /ws /psh:M75AarZWOYdUOfMs32s4HVjd6gzJvEB6EN9pBLrIKo8BLakM2HLU6KFsdcaY3tWoplavlIlL5loS8ANbP6bp6Zr /cookie:mmm_irs_ppi_902_451_o /edat_dir:C:\Windows\Temp\asw.723735a0cf498ca4 /track-guid:1151d5ad-04ad-4637-9cce-f3a38d9a6949 /er_master:master_ep_57273189-a83d-4844-9fda-55dbc0b69525 /er_ui:ui_ep_999003bf-8b9a-4b05-9635-b1e82773e416 /er_slave:avg-av_slave_ep_f076aa1c-e843-496a-a65f-dceba6d716e1 /slave:avg-av

C:\Program Files (x86)\Pivot Animator v5\pivot.exe

"C:\Program Files (x86)\Pivot Animator v5\pivot.exe"

C:\Program Files\McAfee\WebAdvisor\updater.exe

"C:\Program Files\McAfee\WebAdvisor\updater.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe

"C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe" /prepare_definitions_folder

C:\Program Files\AVG\Antivirus\SetupInf.exe

"C:\Program Files\AVG\Antivirus\SetupInf.exe" /uninstall /netservice:sw_avgNdis

C:\Program Files\AVG\Antivirus\SetupInf.exe

"C:\Program Files\AVG\Antivirus\SetupInf.exe" /uninstall /netservice:avgNdisFlt /catalog:avgNdisFlt.cat

C:\Program Files\AVG\Antivirus\SetupInf.exe

"C:\Program Files\AVG\Antivirus\SetupInf.exe" /uninstall /catalog:avgRdr2.cat

C:\Program Files\AVG\Antivirus\SetupInf.exe

"C:\Program Files\AVG\Antivirus\SetupInf.exe" /uninstall /catalog:avgHwid.cat

C:\Program Files\AVG\Antivirus\SetupInf.exe

"C:\Program Files\AVG\Antivirus\SetupInf.exe" /uninstall /catalog:avgVmm.cat

C:\Program Files\AVG\Antivirus\SetupInf.exe

"C:\Program Files\AVG\Antivirus\SetupInf.exe" /uninstall /catalog:avgRvrt.cat

C:\Program Files\AVG\Antivirus\AvEmUpdate.exe

"C:\Program Files\AVG\Antivirus\AvEmUpdate.exe" /installer /reg

C:\Program Files\AVG\Antivirus\AvEmUpdate.exe

"C:\Program Files\AVG\Antivirus\AvEmUpdate.exe" /installer

C:\Program Files\AVG\Antivirus\x86\RegSvr.exe

"C:\Program Files\AVG\Antivirus\x86\RegSvr.exe" "C:\Program Files\AVG\Antivirus\x86\aswAMSI.dll"

C:\Program Files\AVG\Antivirus\RegSvr.exe

"C:\Program Files\AVG\Antivirus\RegSvr.exe" "C:\Program Files\AVG\Antivirus\aswAMSI.dll"

C:\Program Files\AVG\Antivirus\SetupInf.exe

"C:\Program Files\AVG\Antivirus\SetupInf.exe" /catinstall:"C:\Program Files\AVG\Antivirus\crts.cat" /basename:pkg_{af98c830-528a-46b9-a60e-2db5d9a76b77}.cat /crtid:E89476E7569FC7413EA11A4461D6E3E784B8B699

C:\Program Files\AVG\Antivirus\wsc_proxy.exe

"C:\Program Files\AVG\Antivirus\wsc_proxy.exe" /svc /register /ppl_svc

C:\Program Files\AVG\Antivirus\avDump.exe

"C:\Program Files\AVG\Antivirus\avDump.exe" --pid 7604 --exception_ptr 000000C69010E960 --thread_id 8980 --dump_level 21 --dump_file "C:\ProgramData\AVG\Antivirus\log\unp311378293156919419i-manual.mdmp" --comment "Cause: VectoredExceptionHandler Reason: sd is not loaded Dump contains a C++ exception, its pointer is stored as Parameter[3] of the exception record. Use .ecxr to see the line of exception instantiation." --min_interval 60

C:\Program Files\AVG\Antivirus\afwServ.exe

"C:\Program Files\AVG\Antivirus\afwServ.exe"

C:\Program Files\AVG\Antivirus\afwServ.exe

"C:\Program Files\AVG\Antivirus\afwServ.exe"

C:\Program Files\AVG\Antivirus\afwServ.exe

"C:\Program Files\AVG\Antivirus\afwServ.exe"

C:\Program Files\Common Files\AVG\Overseer\overseer.exe

"C:\Program Files\Common Files\AVG\Overseer\overseer.exe" /skip_uptime /skip_remediations

C:\Program Files\AVG\Antivirus\AVGUI.exe

"C:\Program Files\AVG\Antivirus\AVGUI.exe" /silent_welcome

C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe

"C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe" /avg /get_latest_ga_client_id /get_latest_landingpageid_cookie /get_latest_pagedownloadid_cookie

C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus.exe

"C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus.exe" /repair:avg-av /silent /ii_reason:FwSvcRecovery

C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe

"C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe" /silent /ii_reason:FwSvcRecovery /er_master:master_ep_d201ca2c-0331-4c3d-b8fd-8b1abb63721d /er_ui:ui_ep_ca9140f1-7188-4d31-908c-b119fe1178c5 /er_slave:avg-av_slave_ep_83db804b-677c-4676-a5f0-4246b7460eac /slave:avg-av

C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe

"C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus.exe" /silent /ii_reason:FwSvcRecovery /er_master:master_ep_d201ca2c-0331-4c3d-b8fd-8b1abb63721d /er_ui:ui_ep_ca9140f1-7188-4d31-908c-b119fe1178c5 /er_slave:avg-av-vps_slave_ep_f5e9e670-3dbd-4105-a6ca-60d29b51a3f4 /slave:avg-av-vps

C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus_ui.exe

"C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus_ui.exe" /sbr /eid=7afcd995-c89c-40e7-b83a-b75e016bd71d

C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe

"C:\Program Files\AVG\Antivirus\defs\24101612\engsup.exe" /prepare_definitions_folder

C:\Program Files\AVG\Antivirus\SetupInf.exe

"C:\Program Files\AVG\Antivirus\SetupInf.exe" /uninstall /netservice:sw_avgNdis

C:\Program Files\AVG\Antivirus\SetupInf.exe

"C:\Program Files\AVG\Antivirus\SetupInf.exe" /uninstall /netservice:avgNdisFlt /catalog:avgNdisFlt.cat

C:\Program Files\AVG\Antivirus\SetupInf.exe

"C:\Program Files\AVG\Antivirus\SetupInf.exe" /uninstall /catalog:avgRdr2.cat

C:\Program Files\AVG\Antivirus\SetupInf.exe

"C:\Program Files\AVG\Antivirus\SetupInf.exe" /uninstall /catalog:avgHwid.cat

C:\Program Files\AVG\Antivirus\SetupInf.exe

"C:\Program Files\AVG\Antivirus\SetupInf.exe" /uninstall /catalog:avgVmm.cat

C:\Program Files\AVG\Antivirus\SetupInf.exe

"C:\Program Files\AVG\Antivirus\SetupInf.exe" /uninstall /catalog:avgRvrt.cat

C:\Program Files\AVG\Antivirus\AvEmUpdate.exe

"C:\Program Files\AVG\Antivirus\AvEmUpdate.exe" /installer /reg

C:\Program Files\AVG\Antivirus\AvEmUpdate.exe

"C:\Program Files\AVG\Antivirus\AvEmUpdate.exe" /updater /reg

C:\Program Files\AVG\Antivirus\AvEmUpdate.exe

"C:\Program Files\AVG\Antivirus\AvEmUpdate.exe" /installer

C:\Program Files\AVG\Antivirus\AvEmUpdate.exe

"C:\Program Files\AVG\Antivirus\AvEmUpdate.exe" /updater

C:\Program Files\AVG\Antivirus\x86\RegSvr.exe

"C:\Program Files\AVG\Antivirus\x86\RegSvr.exe" /U "C:\Program Files\AVG\Antivirus\x86\aswAMSI.dll"

C:\Program Files\AVG\Antivirus\RegSvr.exe

"C:\Program Files\AVG\Antivirus\RegSvr.exe" /U "C:\Program Files\AVG\Antivirus\aswAMSI.dll"

C:\Program Files\AVG\Antivirus\x86\RegSvr.exe

"C:\Program Files\AVG\Antivirus\x86\RegSvr.exe" "C:\Program Files\AVG\Antivirus\x86\aswAMSI.dll"

C:\Program Files\AVG\Antivirus\RegSvr.exe

"C:\Program Files\AVG\Antivirus\RegSvr.exe" "C:\Program Files\AVG\Antivirus\aswAMSI.dll"

C:\Program Files\AVG\Antivirus\SetupInf.exe

"C:\Program Files\AVG\Antivirus\SetupInf.exe" /catinstall:"C:\Program Files\AVG\Antivirus\crts.cat" /basename:pkg_{af98c830-528a-46b9-a60e-2db5d9a76b77}.cat /crtid:E89476E7569FC7413EA11A4461D6E3E784B8B699

C:\Program Files\AVG\Antivirus\wsc_proxy.exe

"C:\Program Files\AVG\Antivirus\wsc_proxy.exe" /svc /register /ppl_svc

C:\Program Files\AVG\Antivirus\avDump.exe

"C:\Program Files\AVG\Antivirus\avDump.exe" --pid 5068 --exception_ptr 000000F8B98FE820 --thread_id 2332 --dump_level 21 --dump_file "C:\ProgramData\AVG\Antivirus\log\unp311378293470669365i-manual.mdmp" --comment "Cause: VectoredExceptionHandler Reason: sd is not loaded Dump contains a C++ exception, its pointer is stored as Parameter[3] of the exception record. Use .ecxr to see the line of exception instantiation." --min_interval 60

C:\Program Files\AVG\Antivirus\afwServ.exe

"C:\Program Files\AVG\Antivirus\afwServ.exe"

C:\Program Files\Common Files\AVG\Overseer\overseer.exe

"C:\Program Files\Common Files\AVG\Overseer\overseer.exe" /skip_uptime /skip_remediations

C:\Program Files\AVG\Antivirus\AVGUI.exe

"C:\Program Files\AVG\Antivirus\AVGUI.exe" /nogui

C:\Program Files\AVG\Antivirus\AvDump.exe

"C:\Program Files\AVG\Antivirus\AvDump.exe" /unregister

Network

Country Destination Domain Proto
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 150.171.27.10:443 g.bing.com tcp
US 8.8.8.8:53 14.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 10.27.171.150.in-addr.arpa udp
US 8.8.8.8:53 69.209.201.84.in-addr.arpa udp
US 8.8.8.8:53 d20ozt0ryq20yh.cloudfront.net udp
CZ 65.9.94.187:443 d20ozt0ryq20yh.cloudfront.net tcp
US 8.8.8.8:53 www.ssl.com udp
US 44.207.196.218:80 www.ssl.com tcp
US 8.8.8.8:53 187.94.9.65.in-addr.arpa udp
US 8.8.8.8:53 218.196.207.44.in-addr.arpa udp
US 8.8.8.8:53 66.209.201.84.in-addr.arpa udp
US 8.8.8.8:53 crls.ssl.com udp
CZ 65.9.95.42:80 crls.ssl.com tcp
US 8.8.8.8:53 135.223.24.100.in-addr.arpa udp
CZ 65.9.94.187:443 d20ozt0ryq20yh.cloudfront.net tcp
US 8.8.8.8:53 42.95.9.65.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
CZ 65.9.94.187:443 d20ozt0ryq20yh.cloudfront.net tcp
CZ 65.9.94.187:443 d20ozt0ryq20yh.cloudfront.net tcp
CZ 65.9.94.187:443 d20ozt0ryq20yh.cloudfront.net tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 analytics.apis.mcafee.com udp
US 34.117.223.223:80 v7event.stats.avast.com tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 142.250.178.14:80 www.google-analytics.com tcp
US 35.162.13.213:443 analytics.apis.mcafee.com tcp
US 8.8.8.8:53 82.221.23.2.in-addr.arpa udp
US 8.8.8.8:53 223.223.117.34.in-addr.arpa udp
US 8.8.8.8:53 213.13.162.35.in-addr.arpa udp
US 8.8.8.8:53 sadownload.mcafee.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.210.31:443 sadownload.mcafee.com tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 212.20.149.52.in-addr.arpa udp
US 8.8.8.8:53 31.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 shepherd.avcdn.net udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.160.176.28:443 shepherd.avcdn.net tcp
US 8.8.8.8:53 133.66.101.151.in-addr.arpa udp
US 8.8.8.8:53 28.176.160.34.in-addr.arpa udp
US 8.8.8.8:53 honzik.avcdn.net udp
GB 2.23.221.82:443 honzik.avcdn.net tcp
US 8.8.8.8:53 shepherd.avcdn.net udp
US 34.160.176.28:443 shepherd.avcdn.net tcp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.210.31:443 sadownload.mcafee.com tcp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 home.mcafee.com udp
GB 104.124.169.75:443 home.mcafee.com tcp
US 8.8.8.8:53 75.169.124.104.in-addr.arpa udp
US 8.8.8.8:53 analytics.apis.mcafee.com udp
US 35.155.87.150:443 analytics.apis.mcafee.com tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 shepherd.avcdn.net udp
US 34.160.176.28:443 shepherd.avcdn.net tcp
US 8.8.8.8:53 150.87.155.35.in-addr.arpa udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
US 35.155.87.150:443 analytics.apis.mcafee.com tcp
US 35.155.87.150:443 analytics.apis.mcafee.com tcp
US 8.8.8.8:53 sadownload.mcafee.com udp
GB 2.23.210.31:443 sadownload.mcafee.com tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
GB 2.23.221.82:443 honzik.avcdn.net tcp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 29.243.111.52.in-addr.arpa udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 ip-info.ff.avast.com udp
US 8.8.8.8:53 ip-info.ff.avast.com udp
US 34.111.175.102:443 ip-info.ff.avast.com tcp
US 8.8.8.8:53 emupdate.avcdn.net udp
US 8.8.8.8:53 emupdate.avcdn.net udp
GB 2.23.210.21:80 emupdate.avcdn.net tcp
US 8.8.8.8:53 emupdate.bav.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 emupdate.bav.avcdn.net udp
GB 2.23.210.25:80 emupdate.bav.avcdn.net tcp
GB 2.23.210.25:443 emupdate.bav.avcdn.net tcp
US 8.8.8.8:53 honzik.avcdn.net udp
US 8.8.8.8:53 honzik.avcdn.net udp
GB 2.23.221.82:80 honzik.avcdn.net tcp
US 8.8.8.8:53 102.175.111.34.in-addr.arpa udp
US 8.8.8.8:53 21.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 25.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 s-overseer.avcdn.net udp
GB 2.23.210.8:443 s-overseer.avcdn.net tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 8.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
GB 142.250.178.14:80 www.google-analytics.com tcp
US 34.117.223.223:80 analytics.avcdn.net tcp
US 8.8.8.8:53 shepherd.avcdn.net udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.160.176.28:443 shepherd.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 honzik.avcdn.net udp
GB 2.23.221.82:443 honzik.avcdn.net tcp
US 8.8.8.8:53 honzik.avcdn.net udp
GB 2.23.221.82:443 honzik.avcdn.net tcp
US 8.8.8.8:53 shepherd.avcdn.net udp
US 34.160.176.28:443 shepherd.avcdn.net tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.160.176.28:443 shepherd.avcdn.net tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.111.175.102:443 ip-info.ff.avast.com tcp
US 8.8.8.8:53 emupdate.avcdn.net udp
US 8.8.8.8:53 emupdate.avcdn.net udp
GB 2.23.210.21:80 emupdate.avcdn.net tcp
US 8.8.8.8:53 emupdate.bav.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 emupdate.bav.avcdn.net udp
GB 2.23.210.25:80 emupdate.bav.avcdn.net tcp
GB 2.23.210.25:443 emupdate.bav.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.111.175.102:443 ip-info.ff.avast.com tcp
GB 2.23.210.21:80 emupdate.avcdn.net tcp
US 8.8.8.8:53 emupdate.bav.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
GB 2.23.210.25:80 emupdate.bav.avcdn.net tcp
GB 2.23.210.25:443 emupdate.bav.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 ipm.avcdn.net udp
US 34.111.175.102:80 ip-info.ff.avast.com tcp
US 8.8.8.8:53 s-overseer.avcdn.net udp
GB 2.23.210.7:443 s-overseer.avcdn.net tcp
US 8.8.8.8:53 7.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 210.143.182.52.in-addr.arpa udp

Files

memory/4280-0-0x00007FFEAA393000-0x00007FFEAA395000-memory.dmp

memory/4280-1-0x0000000000DE0000-0x0000000000E88000-memory.dmp

memory/4280-2-0x00007FFEAA390000-0x00007FFEAAE51000-memory.dmp

memory/4280-3-0x000000001C6A0000-0x000000001CBC8000-memory.dmp

memory/4280-4-0x000000001C320000-0x000000001C370000-memory.dmp

memory/4280-5-0x000000001C430000-0x000000001C4E2000-memory.dmp

memory/4280-6-0x000000001C070000-0x000000001C082000-memory.dmp

memory/4280-7-0x000000001C090000-0x000000001C0B0000-memory.dmp

memory/4280-8-0x000000001C0F0000-0x000000001C122000-memory.dmp

memory/4280-9-0x000000001C0B0000-0x000000001C0CE000-memory.dmp

memory/4280-10-0x000000001C0D0000-0x000000001C0EA000-memory.dmp

memory/4280-11-0x00007FFEAA390000-0x00007FFEAAE51000-memory.dmp

memory/4280-12-0x00007FFEAA390000-0x00007FFEAAE51000-memory.dmp

memory/4280-13-0x00007FFEAA390000-0x00007FFEAAE51000-memory.dmp

memory/4280-14-0x00007FFEAA390000-0x00007FFEAAE51000-memory.dmp

memory/4280-15-0x00007FFEAA393000-0x00007FFEAA395000-memory.dmp

memory/4280-16-0x00007FFEAA390000-0x00007FFEAAE51000-memory.dmp

memory/4280-21-0x00007FFEAA390000-0x00007FFEAAE51000-memory.dmp

memory/4280-35-0x00007FFEAA390000-0x00007FFEAAE51000-memory.dmp

memory/4280-36-0x00007FFEAA390000-0x00007FFEAAE51000-memory.dmp

memory/4280-39-0x00007FFEAA390000-0x00007FFEAAE51000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\saBSI.exe

MD5 143255618462a577de27286a272584e1
SHA1 efc032a6822bc57bcd0c9662a6a062be45f11acb
SHA256 f5aa950381fbcea7d730aa794974ca9e3310384a95d6cf4d015fbdbd9797b3e4
SHA512 c0a084d5c0b645e6a6479b234fa73c405f56310119dd7c8b061334544c47622fdd5139db9781b339bb3d3e17ac59fddb7d7860834ecfe8aad6d2ae8c869e1cb9

C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\avg_antivirus_free_setup.exe

MD5 26816af65f2a3f1c61fb44c682510c97
SHA1 6ca3fe45b3ccd41b25d02179b6529faedef7884a
SHA256 2025c8c2acc5537366e84809cb112589ddc9e16630a81c301d24c887e2d25f45
SHA512 2426e54f598e3a4a6d2242ab668ce593d8947f5ddb36aded7356be99134cbc2f37323e1d36db95703a629ef712fab65f1285d9f9433b1e1af0123fd1773d0384

C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivotsetup.exe

MD5 a52c104395773710fab7f6264aced388
SHA1 87bf5c40fbac501bc272cb5343e7ae09b13bfdb1
SHA256 2852267832c4338f9ab2488add87c71be9e9b6fac50f3395915e7b9b6ab5cd11
SHA512 47eb7a1bd1c78961a8ab5a90896df6be0d57e253798033ba6caafaef6826414a08f6f8fe085faee7601d06acc00bec26c8c9e8da0da97168370e69fa27cf829f

memory/3604-57-0x0000000000400000-0x0000000000415000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-4MCLV.tmp\pivotsetup.tmp

MD5 1afbd25db5c9a90fe05309f7c4fbcf09
SHA1 baf330b5c249ca925b4ea19a52fe8b2c27e547fa
SHA256 3bb0ee5569fe5453c6b3fa25aa517b925d4f8d1f7ba3475e58fa09c46290658c
SHA512 3a448f06862c6d163fd58b68b836d866ae513e04a69774abf5a0c5b7df74f5b9ee37240083760185618c5068bf93e7fd812e76b3e530639111fb1d74f4d28419

C:\Windows\Temp\asw.723735a0cf498ca4\avg_antivirus_free_online_setup.exe

MD5 f09798c668ab48b3c69278290e971cfc
SHA1 28a88f8c2a11eee6200198d4c1ff85ebe7ee5be8
SHA256 1e628a18b0e339dc6f72441cd3fbe0f43248ad63ba2b8f8c648a2d450e5ba529
SHA512 8f42cad525d25f1df2a66be6f663c4a0a5a9fd001a54918eed1df9cff26518082a046bec9f46331338f306c3c0e4ed6f5a555ae6b4e5ad5bf70c6b03b7ceaf58

C:\Windows\Temp\asw.723735a0cf498ca4\ecoo.edat

MD5 3f44a3c655ac2a5c3ab32849ecb95672
SHA1 93211445dcf90bb3200abe3902c2a10fe2baa8e4
SHA256 51516a61a1e25124173def4ef68a6b8babedc28ca143f9eee3e729ebdc1ef31f
SHA512 d3f95262cf3e910dd707dfeef8d2e9db44db76b2a13092d238d0145c822d87a529ca58ccbb24995dfcf6dad1ffc8ced6d50948bb550760cd03049598c6943bc0

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus_mod.dll

MD5 b58aa1772b0da86313ea07903be02002
SHA1 2e3cf5b6c6b575633b687de9463e247460d9c833
SHA256 801ff2ea4307cd3a1f6a6f3744f7510c3de7e9ddac1db863859ee7d3207d46ff
SHA512 075ab7db5632dd2ca6a63cd7d7e7df905c1348269b3f0e8e3bd2efff1663950b4c50f22ea8f1ab5286f55ba0d3eb1d234a631425c4578b27797f15ac88a6172d

C:\Program Files (x86)\Pivot Animator v5\pivot.exe

MD5 ab3c884e603de1d2d9d4bb9edeac8762
SHA1 123e87c326a39d641571c5f5d54e9b1f42926cc3
SHA256 af38da271a7fb34617b094b3832af8f016168d0923dabbfb297633fb22e49036
SHA512 ecf3474372d1af6f4e93fe655b188b03744f07166fe2ae3947650fec8afabd2bb721270d8e3ef97d52cd4071e6a94ca1c1f5ecf304ed0711bb932bfce133982f

C:\Program Files (x86)\Pivot Animator v5\STKPreview.dll

MD5 2c639820b502df57891e7c4ee805f4b7
SHA1 d90ecab78c86152c31f6963096107fbb115f7bae
SHA256 dcdaf630b7a42bb9d6b1693e159175d68569f20f3ab034af4124d3c775436458
SHA512 afd96af844d30256e9fe1983e82317ace56d6741bf3f2647fee6ef6870b610a4b71560aca95a62ed5b54a2e1ab0ef1487a536124328f4ac327a0b86b1c1900a4

memory/3792-260-0x0000000002340000-0x00000000025CC000-memory.dmp

memory/5052-267-0x0000000000400000-0x00000000004BF000-memory.dmp

memory/3604-268-0x0000000000400000-0x0000000000415000-memory.dmp

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\icarus.exe

MD5 4e824521a083138869fa6246cb33ccde
SHA1 7228689c5088a6d4faf4f7dc5fdf4389c56f76cd
SHA256 6a16511aab82faa51440197bddd11c1cce52ddd20160a630ee191eb9f626ce6c
SHA512 a7af2652d1a5c810845f3e0f6115477fb5e47cf1db645a7d8567c100277d213103fe6418a52a71aa8c83ba5a47d2f81a98b429456293f58ef9aa730811b29c5f

C:\ProgramData\AVG\Icarus\Logs\sfx.log

MD5 c2a465fd96e25c089b3f4d890a248046
SHA1 293530ba61e0525c8c362faad28b500e320fd7ae
SHA256 64c2e3f029b9a9946b592d1aa85afe25eb0623eca0b2a74805e9791175bfe73b
SHA512 2f3e0e304ab0ec58419f31d65a132038378864d8a0e63199f7579b73baa12bc8815ab81a5808c7f6f3fd80e406dd4b03d2b66110a5c4fee4336af7a314486505

C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\installer.exe

MD5 46c50dc50d9be92829b9d6fd4678c11d
SHA1 3c0b0493b9e6269a1a00c48720c7fd97c04ddd4f
SHA256 d9c15d4a7e2b1a320154a5c61af012242e3408a5c5519cbb4e93a7843692cf50
SHA512 340fdbc7618e86ef4178142aa9012ab9317869b85ac148fcd31c0c2fff007114eaccbf60ee829be99890d36b7d5e1a78c4617e40a538735a8b01002d4d5e41e9

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\config.def.edat

MD5 0ebc6555ec72edd10d3af993d6c2c646
SHA1 7177762bd74eb4eb0b9954cd7e576a28f2b90ab8
SHA256 6cb1bbff5f93c6b7fdcae067ce6e49c8cbc6cee7343aac6e0915b2a101933e35
SHA512 f4f12da80499353766c82b72feb39f777f2e63e5b0de770ef930cf35a26e1b2119aad8720176d955f288afcc48d221e7062919ab89b1fd1ee8d528029a69ec12

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\icarus-info.xml

MD5 4b1f7d94f71982c8b71e1d5a9408afeb
SHA1 1fe087b1156a8fd576965f4e24a3cad3740a8b9a
SHA256 07ae85474d6f0cb5b44fa51db5584147471517b2fed7dd44d452a7c9bf5924f9
SHA512 2de5d632219acd6d6a254540a52cf401bf6f045d8256a8973921c23ca713a84db8d1fa1aabb29f359befc5b5bf7f802a2f8d7a8d3ad1f5d42d2b36a172f8a470

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\product-info.xml

MD5 d7e8b97d50765365e6793fade40742dc
SHA1 78229d4731a07f3efe18c6eb9bc36de380a98b5e
SHA256 d8780ee84985530a785f07c6f959de5d0835d7ee4db536bef5acef1379602e75
SHA512 d311d33f3b412132bf20e0f7773d32efbc4e71f5c19fa176cb6c994390dc5ce32ccaad2eb9081cb7bbcbf23cd0ddc916951781f83af68ba3c9084667a68b7e87

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\edition.edat

MD5 9bf31c7ff062936a96d3c8bd1f8f2ff3
SHA1 f1abd670358e036c31296e66b3b66c382ac00812
SHA256 e629fa6598d732768f7c726b4b621285f9c3b85303900aa912017db7617d8bdb
SHA512 9a6398cffc55ade35b39f1e41cf46c7c491744961853ff9571d09abb55a78976f72c34cd7a8787674efa1c226eaa2494dbd0a133169c9e4e2369a7d2d02de31a

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\common\bug_report.exe

MD5 d51365da191d9548b76fae6cde050af2
SHA1 8445144dce25fe03dce30e0ec8099e2b926c2a43
SHA256 8c273c61324efbc3a773588dbbba308a6b148ea77cdc3703104dc4808655fc21
SHA512 4ee64c1c174971b7f7ea53cde92f2007bed50799140e164b93b03b86885226a0bc813686c4003b0f6b7e2c1f8b60db4fc66b96baff4bab860412c100bd7a4502

C:\Program Files\McAfee\Temp4265655246\installer.exe

MD5 334fa47551d6016754a0b8611537bd5e
SHA1 4801af5f24f1a145f6ae686b37b193a06647571d
SHA256 299be448a125439f745da9f4ad875150549449eea0d61975e5ed0907e0b24563
SHA512 4f15711d5ceffcb93d0f02deb66e0f82c41c91c4a4bab8d06417057cf1348e06d1ac35137b52f9981137c65c1b180be4aaec9b64f5d4e2921e07083144822c03

C:\Program Files\McAfee\Temp4265655246\analyticsmanager.cab

MD5 b9b8a94357c6d3d24189914deca63daf
SHA1 14dfac9a562bb000eac24d5c621551b806f38a23
SHA256 290aeb9fb5484d8c72057c6d46684946e3bc05c63f5cacaceb29167245c7dfac
SHA512 5044dac2f2c9302f25fac241c0d5784f5ff5283889784860fad747923edae92132cdf9bbac3bcc1dfda27e00c56c08ce31d5249611e84884108a7efd6c610ca4

C:\Users\Admin\AppData\Local\Temp\mwa1C4D.tmp

MD5 662de59677aecac08c7f75f978c399da
SHA1 1f85d6be1fa846e4bc90f7a29540466cf3422d24
SHA256 1f5a798dde9e1b02979767e35f120d0c669064b9460c267fb5f007c290e3dceb
SHA512 e1186c3b3862d897d9b368da1b2964dba24a3a8c41de8bb5f86c503a0717df75a1c89651c5157252c94e2ab47ce1841183f5dde4c3a1e5f96cb471bf20b3fdd0

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\setupui.cont

MD5 b790cb82fe208a019358579c9c610021
SHA1 98810354ed887fe4d5d83d379bf0776e51d71d4b
SHA256 175b34fdca1a4b61c1c95d4f27f2ca408eaf7607a7acbe51edd6484f01df2ba1
SHA512 2d58422aa465fdf2f5846516aa393bd1c47f6b46d6e37999de466fd48f8b4607bd0942d8a136ab48a6f19301df5b3a1374b73c6f516cc597c5637cfbf6410169

C:\Program Files\McAfee\Temp4265655246\browserhost.cab

MD5 14abf3fff7093c935df671811e7f1e9a
SHA1 54ba1165ad813620d38a94ceb34b0f5317683f40
SHA256 69632b49eda20d98db292d887d82c9a301a8e8c3cf021a246ae84160da9903fb
SHA512 6932ebc11cf5b5b8ac5cbe9d7e2f12b17619b2b41c32f692ede23546774c3c4045f90167fdb9ea9c693278feefec4c69cd897a828d69372c811a48cd24f003aa

C:\Program Files\McAfee\Temp4265655246\eventmanager.cab

MD5 f207919f8c6d0dcc1dfe9025dd6cc554
SHA1 cb84f96e2d16eeb44793e2ce072f3b43e02a49f4
SHA256 030fbd43d6ad2c2061f4ea6a15e24bbdb1ed82cd055de7775e60ed68596a110d
SHA512 15ef9fc8587c458725eeb59ea74de4088c5da1fdad0c697bc62557c96e0b32cc9f46afbb39086a589983ca01db763e420a5de18da6acca9b1ca41d3aef28325c

C:\Program Files\McAfee\Temp4265655246\l10n.cab

MD5 c2d175243672dfff880ce75b3f1c02d5
SHA1 58a4ab9b24202933207b5e5f3639897e7140d49f
SHA256 edef28c0d290de18f8cc55577e4183b137ebb24d0aa8cf564b8d4c2486dc80e0
SHA512 8e0b13d2c2bce6b2fc109a528cb6fe0cea084f9ede813dfb3a611d83aca56531a931bbcfeaffc27dd871e185cdeaab0ae18547c2c2b4562884b9708220c9cad6

C:\Program Files\McAfee\Temp4265655246\mfw-nps.cab

MD5 4e2e7ae3763f1a18d5b9ab881d4f0754
SHA1 fdd8130cc002662d38053a11d8a3b3fd9408e9e5
SHA256 00d583993ff4fa06959bc20727781d9e40bc6a699d97e041635ac3c88e3da7d1
SHA512 40cc120d1f773f1053f591ca8c4afe3d72b982240f467e217ccdeba39f4be3308e61f8d2741201007751831b57a3fd30215254e721295883f7b5ef4f70b69330

C:\Program Files\McAfee\Temp4265655246\settingmanager.cab

MD5 dd7ab73cf8de306984f476c58b41473d
SHA1 e6f86ba97f369d3d43b19603f8ad20220c3f3a47
SHA256 6d82409eceaad6d092cba603bad51c56e150f54f5803bd3709e190da0a120bb4
SHA512 c8567e86b2200aef114df6f2bec609a660912fceeda417723dd49e3d42594839f4131a48b3a3326804c0efaf121523033eb033da5a6dff4769314d7d88c0f23f

C:\Program Files\McAfee\Temp4265655246\taskmanager.cab

MD5 e3ef854f388583802502964354599f1a
SHA1 0d71a4f7ab5e482244afe8cd8a049ef757268dc4
SHA256 908bf0d9af1a0eb44a45e7709e8e242c995ec4f7c2e758317087dd7f148cb06a
SHA512 879b86a53cd9b4578dc49cfbff7aa69a33bad304dee2256d4e9f1aca1b617f25f892f25ba7242e5c4ab7dac6c04be6ef49a255ef57dd77d1f646378da9dc90a9

C:\Program Files\McAfee\Temp4265655246\uimanager.cab

MD5 75f6b1d5c49286de0624bf3d7069be2e
SHA1 79d9c41dcd34ec9784d23764e0eec6d269e266fd
SHA256 d88e0a470cf4fc29522e614287b59544bd253c44ffe347dce39b68510f16e931
SHA512 8bb699fee4ec6475f81e2eaa0cc6d41464152641d0ef93fb0e5d3b962c8959d030c4b82b58695def9cb5629c8115c6883597824eda2841cb5237877f52fed920

C:\Program Files\McAfee\Temp4265655246\wssdep.cab

MD5 f11044b07b7942a712522270c1b0a158
SHA1 dc0e843b9794734d2b767bd2167ee67734fd6074
SHA256 f95c75852c20f696c1d048f440aca5d1d9d555d9d02152fda86c1597e19bc068
SHA512 97a705bced3a1a47a02797224eb449448257fa9ede39cc8fb2bd5069588781e12d489342703127ec5e0ea89283b0fb8d177212003b13715e09de2cd7ddbc3fbc

memory/4308-535-0x00007FF69E270000-0x00007FF69E280000-memory.dmp

memory/4308-674-0x00007FF692530000-0x00007FF692540000-memory.dmp

memory/4308-685-0x00007FF684200000-0x00007FF684210000-memory.dmp

memory/4308-714-0x00007FF684200000-0x00007FF684210000-memory.dmp

memory/4308-713-0x00007FF684200000-0x00007FF684210000-memory.dmp

memory/4308-711-0x00007FF684200000-0x00007FF684210000-memory.dmp

C:\Program Files\McAfee\WebAdvisor\x64\wssdep.dll

MD5 9b8aa7c575bba19ffa71ba5dec8a7dd7
SHA1 8e861b4864c5445e8323538863c751977713f7d8
SHA256 2040a429975a862a45d19e65e39647f092bf0906b4dac8314f7005880ed2a93e
SHA512 27446e92856ff229992054e1ef5b6bfc87878e0c14fb58ebe00ac51e8a8c47686d19d12fd89b91715ca1ff597de1525eb91af2499ef0999910982dec84e15777

C:\Program Files\McAfee\WebAdvisor\win32\wssdep.dll

MD5 867cfbaa33a126b38f3a835d5a1d9fe6
SHA1 d20d6521358196da3c4c5dbdc1d6ca8237d03143
SHA256 70c16ed827453a204cb12ed0e161c220782c24866e0c53f527b3b81f77108823
SHA512 ea8aa9e8fb16c7a947b8dac65e4cb88556c090deed75c9c44b8f472101597ba705570860ffbedd9be5e7c0f625fea61d70bd5c19b6244f9c73529c644dc37d9c

C:\Program Files\McAfee\WebAdvisor\SettingManager.dll

MD5 68751b0d9a2afb3e5193e0b14e478ee8
SHA1 d4075de7c82dc500e1a3fb6a96583d6385b6fa43
SHA256 50fb6c8d800ebf731e40cad220dbe222f9aae0d4d2694d3ab280c8d920ba4fbc
SHA512 ae0cb7291340bde8fa9dbdf08a936c7de883f24a0354721f7932c8ac0e3ca03770554d572a5d630fa25495c2bae15822b3cc5ca8e903e63c2175b76ba3865177

C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe

MD5 423cf31e68b64374eed4930d75ae589f
SHA1 cafaa3f1ed30f84afe423a0f53b0d7869899476c
SHA256 dbaad406d79d76c91b6b8fed5e08f9ef569ad55e5929ee62e4a5a327421f57ca
SHA512 36c94b9b0d52d11100d6d7365304d60eb7f37d4fb5a61309d28d30d5ee5dca07f772696fff70025030497d968023bb086cdd06a4c97136918d5df8c88b8c0c6c

C:\Program Files\McAfee\WebAdvisor\AnalyticsManager.dll

MD5 c74bf4478b01440c0503c08e1a496127
SHA1 265d2db5c57a33c0a82ad2d15e79674c2712566f
SHA256 c122a172d85a5a8884320ad2c81ae1c5108baf8115836747d0d8a428d6abbe31
SHA512 a7604276099d9769fb050effd057598e79b30dbcc7ab1a15397af3c8162923e223ac18b63b1d69e31c1a595d699b07ccfda80322a09aeacaf598c5cd91ecf4b0

C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt

MD5 060fd3ba16f6d4556faff44bd7986e85
SHA1 8a0d7ba8e4ccac9883e407512328586c4aaf9dd0
SHA256 3d0f00c7d5d78551e701ee7fd3e7ea58c47ee67737f922c83bb34a2ea92fb92c
SHA512 8a431c6fbd74a73cd6b17f50db32274ad189963f5369717e075cbdbdfa56d1b6ec213683b37eefb5e19493ad4c7be8adfe011572834937c85db3633c80c3466a

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5 e9d8069818740d5e45b9e0786e9fd79a
SHA1 459fb79a000cab5df01cc3fbf700ba67b0461bde
SHA256 fc450ffb026182a1601074a3e36ba70bf03de9f2f5d12b24d27e7805275690a4
SHA512 be34a5871f3f1f79b8d002f09de086c717735f5734fe66de6009c3053d7fbaa6edae74f9d4c3e33c9f536ba52134704ef25fa34fa9f9ceffebc2772e19935da5

C:\Program Files\McAfee\WebAdvisor\Analytics\dataConfig.cab

MD5 bd38ea5ccd891a08af20f1a1305deebb
SHA1 6237639c4b35f85fa7fda83babbf6530153a83ed
SHA256 3e902920a51e303c9e269366643542154b1d90d7b408f86251701a5b90304533
SHA512 fecc9c8984828918fcd6a6431d7695a8dfad854ba32cb49a546537cf96fb5b67912b870fae343c0487a9e7016806717d0be3cb40bd92db34c3e17e0bd98eb42a

memory/4308-709-0x00007FF684200000-0x00007FF684210000-memory.dmp

memory/4308-702-0x00007FF684200000-0x00007FF684210000-memory.dmp

memory/4308-671-0x00007FF67E1B0000-0x00007FF67E1C0000-memory.dmp

memory/4308-669-0x00007FF684200000-0x00007FF684210000-memory.dmp

memory/4308-647-0x00007FF684200000-0x00007FF684210000-memory.dmp

memory/4308-643-0x00007FF6DA350000-0x00007FF6DA360000-memory.dmp

memory/4308-631-0x00007FF6DA350000-0x00007FF6DA360000-memory.dmp

memory/4308-625-0x00007FF6DA350000-0x00007FF6DA360000-memory.dmp

memory/4308-623-0x00007FF69E270000-0x00007FF69E280000-memory.dmp

memory/4308-622-0x00007FF6DA350000-0x00007FF6DA360000-memory.dmp

memory/4308-620-0x00007FF69E270000-0x00007FF69E280000-memory.dmp

memory/4308-619-0x00007FF69E270000-0x00007FF69E280000-memory.dmp

memory/4308-616-0x00007FF69E270000-0x00007FF69E280000-memory.dmp

memory/4308-609-0x00007FF6DA350000-0x00007FF6DA360000-memory.dmp

memory/4308-606-0x00007FF6DA350000-0x00007FF6DA360000-memory.dmp

memory/4308-599-0x00007FF6C6EE0000-0x00007FF6C6EF0000-memory.dmp

memory/4308-595-0x00007FF6D2290000-0x00007FF6D22A0000-memory.dmp

memory/4308-592-0x00007FF6DA350000-0x00007FF6DA360000-memory.dmp

memory/4308-567-0x00007FF6D2290000-0x00007FF6D22A0000-memory.dmp

memory/4308-563-0x00007FF6775B0000-0x00007FF6775C0000-memory.dmp

memory/4308-546-0x00007FF6DA350000-0x00007FF6DA360000-memory.dmp

memory/4308-533-0x00007FF69E270000-0x00007FF69E280000-memory.dmp

memory/4308-532-0x00007FF69E270000-0x00007FF69E280000-memory.dmp

memory/4308-530-0x00007FF69E270000-0x00007FF69E280000-memory.dmp

memory/4308-529-0x00007FF69E270000-0x00007FF69E280000-memory.dmp

memory/4308-667-0x00007FF684200000-0x00007FF684210000-memory.dmp

memory/4308-528-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-527-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-526-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-525-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-524-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-523-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-522-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-521-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-520-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-519-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-518-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-517-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

C:\Program Files\McAfee\Temp4265655246\webadvisor.cab

MD5 4a797d18d6836200ee062caaca9005ba
SHA1 13a973bd000eedcd566b7a396d9d77268436c56e
SHA256 18ce35c066a6f7e5dc99f881b81c2932b7bb15af11cc79055be1d7c30d3f0ad0
SHA512 1bc11b41f0fd7879f2e35bad129aad26f9580f32d6282fbc1da214aef2de0bd20cb669793b679fa79d868ffe750ebbd68c65abd8c7fe2b8112557cbc00dceb4c

C:\Program Files\McAfee\Temp4265655246\updater.cab

MD5 da529c3a8b1d47018c3795da58981c69
SHA1 589efd189b1b6e9aa023ddec58e0346e89c2039f
SHA256 d8b78e3bd2caadf24d403dfafd8abfc3b9c12e9c77f68309ac30ce704cd2b677
SHA512 5f9e1715847e3023b2979c2852f90c8c1d8d78068ed47bf138b3155a7a3abeb73626e1822a3a7a963a9ec374e787a786fe7c0c52c96bc8d57398f6a9022eae54

C:\Program Files\McAfee\Temp4265655246\uninstaller.cab

MD5 a85b96a7cdbbd7c286cab521571e59bd
SHA1 b9e5ea0ef5f36704b1e94b4ac53d0fc38801aa29
SHA256 729613c6d15d93788b3fe3097e59e4bdb7a10d3be09d96f50f26a65cb1fc164d
SHA512 94fd6e21e3908c75873211dd3154257d5d7e148230419a1bcae1153f2af1159494713d5325e2897c34582a9aaf69eb1d603fad1ce9596f952decf8244c93134e

memory/4308-511-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-509-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

C:\Program Files\McAfee\Temp4265655246\uihost.cab

MD5 61a017693fb8b1296297281ca339777e
SHA1 9085d019051cc3bb797122337360d61a51df4378
SHA256 3409210fc78b97fbfe4c477108ee1a7c38864250eed648ad7d396b981ca77173
SHA512 80d5771830b1879b778a6a8b2625fd43f2c36f1f752e4c9c8f87824e6f0608a31bb51aa769e95d256d7d0e472f5dba6ee6fc6e9c636683cc5aeedd900f9210cf

memory/4308-507-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

C:\Program Files\McAfee\Temp4265655246\telemetry.cab

MD5 694936ce0f52b93f4bc9d87263c92f8e
SHA1 b070026f2408eb800a438b69816c5051f3191e98
SHA256 e3c91667e776bac8603627d04b736e54ca6d9bef236d2e14d658ce18f3b90419
SHA512 230fc17f938db1b6687a019881b6c989f1eba45b9edc5f69a0c851f61817ab8e4362d2a4be423e5824984f89fa07cd0842b84496324361648fc0a5a6c5456791

C:\Program Files\McAfee\Temp4265655246\servicehost.cab

MD5 ea95e61d8d1e638cc1790d1152f922d3
SHA1 f00c838582ffc39f9c41875cfcef7f2a6b12f8cb
SHA256 3842aeb59e1ea57731805ff01eeee8201dbd7e4708c8de43d7041d6a4fa846d5
SHA512 f3163452758ffd4b43b8e336ebb3ec77d7c81b827a6f9c18874d7f2ffea4894de11cc130f846c42fa8c895cd319447062c86af94c076bcbeef4d128874b9b0a3

memory/4308-502-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

C:\Program Files\McAfee\Temp4265655246\resourcedll.cab

MD5 822933594b051d6de1ec1534c7499ade
SHA1 f9d3d4c16d3b460249d724fd5df64d932665d36f
SHA256 5ce2fc860c1f7f0b48ffb21d112278530b3da5ea01a30325b0179bc0f2679654
SHA512 1e9c58ef6d8fc1a50910f7b30322bac9ad8e628a0ce032e945c52a2017c5a44aa154693c09755a91af7c2ac130430a210826dd00a7e343300e7c876708a73722

memory/4308-500-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-499-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

C:\Program Files\McAfee\Temp4265655246\mfw.cab

MD5 33918256db4935fdda50d9614331e2e0
SHA1 f27a4bc921a7744ecb40dd7394323b3d2911fa9a
SHA256 b9c5f3c3638a6ff98c16e2ca940625d0b7c71354e64fdfc36ff3a637390be0b7
SHA512 2ff8cc361d8f8ebdbb78e1509141e098226fc692e1e82cb31f5ab64ee1bd857643572d29f06037f65149608d98985d97d8507dbc94903ba93205d73a9aef8db4

C:\Program Files\McAfee\Temp4265655246\mfw-webadvisor.cab

MD5 60d062ff1a406b35d7a3b00c1e9d3d71
SHA1 9e99cf34fda6bc6066353a96d7dfd731fecae464
SHA256 0ce8fd7924a9e6aa7e4fc20e163ce6b836084e57ce812344e74e71ff92e2d362
SHA512 a1b97c3ea0579e63e16d485f6d5c0ab0a558210b78bb3c04efad4e070c3236a0ed226b82eb99ea2b890c28400956951e8b3e94b4c6de80d8b91d67885cd33ea3

memory/4308-495-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

C:\Program Files\McAfee\Temp4265655246\mfw-mwb.cab

MD5 5af7df8dfd7fa92630555d4b33b27617
SHA1 9ce4c7058f8574c55e7ad79a7cf014a7a349cfee
SHA256 f199205805f10dbdd781b3d452f62fcba245a3404df292cc5a9a13fe622ab160
SHA512 cdba5d9fac0549f451ff4ce176a6d06ed241964c6800c33ef5f9bc560c46ddc16fbfbf4719c4303d35ba4457101b325ba5fcf14905bb382f68e637b7b81a86be

C:\Program Files\McAfee\Temp4265655246\logicscripts.cab

MD5 de6bd6d9fd8f911feedae1db4747e4c9
SHA1 8f9ee319a3809c8b41ad35d0327f9e2348b36d8b
SHA256 ff1a5de5dde09fabe260692bdb2db4d0b0bcdb3b4aa5f4c46f48f139e5f2d010
SHA512 c070aa7d3c296eac336f456329b34a6d61aba142dc0c1b97b764436255493b410be0b9ed1e4a1b8618d698d4c73e82ad354e9dd5e6d39ed9331adabc8fb26a31

memory/4308-492-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

C:\Program Files\McAfee\Temp4265655246\logicmodule.cab

MD5 887ff24e7ccdd4987534c50f2532162b
SHA1 49883db6cca85b5f0856469d652a4fe95d01e42d
SHA256 220db12aeeccb0753995e7f1e4dd2ae0f113329122d24bc27e5406b2c90bda9f
SHA512 7500c5bd47446cd2377936b5f018ff1432e7f182c0a01c8035b0ae7ca8fec481fd4f77adf4c77c8e56113b4c75083ced4a43ed7bf129fca34a6d0cda8e01c5d3

memory/4308-490-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-488-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

C:\Program Files\McAfee\Temp4265655246\browserplugin.cab

MD5 dbfe29fb57fae933f025d93ae162b496
SHA1 652265b30e574ab8852fedfa5c7b369d2ad42152
SHA256 87da8c203c2129d654eff9bd08c0b2b80a18d91c27e15f50a2e27579ddc503dd
SHA512 77805ea2bd73ed1e7e50766f08d3c905d6fd051968690d09aa0a6ea50101a72a9444ccb57553d20800e24298973cf9321ef934fcfc6f0dbc2cb1360b155015fe

memory/4308-485-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-483-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-482-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-481-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

memory/4308-480-0x00007FF6B04D0000-0x00007FF6B04E0000-memory.dmp

C:\Program Files\McAfee\Temp4265655246\analyticstelemetry.cab

MD5 5bec53b2f25721df7953fa971dc28342
SHA1 d30872e2eef4f45fc08be466d6f5dbea205bfc15
SHA256 02bb4fb1f03829da4a7a73428dfd6985bad23a7d22aae5bf566dd9d366563019
SHA512 d7d741abbeaa4974e99ecc1ef5ea8ebfba111e64596a0be2aa985c521198365e8589af81df6e1d2f7596dd711647963f7cf8fa446d22836001909d59c4dba353

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\product-def.xml

MD5 0cbe03f2a4315fd99a2d7c1b3434e392
SHA1 542cdee4a6013afc88710b73bdb9f7bc73890bfb
SHA256 5ddc8de2bfd97b3e5ef529b3f340145bad10c122b6f00669d09e6ed6a8f22b43
SHA512 e72836cb99da8c0d14f5da9db02e0a855e231adebbd0255d56c1b05216e0058c443e2795e87868e85e18335231232ec75888f3722560e4835c14000edb73d5e2

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av\icarus_ui.exe

MD5 630f299a07c056d3ccfd8b6499304af4
SHA1 bb06310b3cfbe95069e37d389655b4616369c3e4
SHA256 5a717caa148a79724d65f72b437b7d169fef26cfa676ac8bf7fb59354cf489a0
SHA512 e68d70727e51008a3b7438b65e921be69e17eadc0b3e86b7010d4900ca50988d4a1e20ca869efcc5d3802bc22364aa7714d7a18592c736f18ea6bac822ae4035

C:\Windows\Temp\asw-cde29860-1aa7-415a-a6b7-49d305cd6ded\avg-av-vps\dump_process.exe

MD5 5190cf05ae2e298cb94e85dc83f2e161
SHA1 6701689a71f7de48fc9bc990774d8d9fcee8bd4a
SHA256 e80d3f009fb029dbc537e9967bb00d8362d3e1ad6378cce6beeabf231cf86c0a
SHA512 63eb01823e15a7ec1e4fbf8eda944264db9c14fde404889312f0189a7559a3ea2ea93d216b78492ab2194923a056bea3f083d72c1650576823ef98091f2ef568

C:\ProgramData\AVG\Icarus\avg-av\icarus.ini

MD5 c043a3beb23cc43cb3e9acae2ad9d8b4
SHA1 f8a300a14643d9d2ef708839d882fa8fae274f73
SHA256 3df024f72a0bcdd90a7c140591e224492481eb7f32a940bfb9af1cdb6472af9e
SHA512 e5baa81e296b7f06360ed20d9484a137ca49c0505d2c94947b978b09b277f13184e540098e21daad0a72d8ddd831a57d6ac0e67c0aa860d87a051b55c3c9fff2

memory/4280-1986-0x00007FFEAA390000-0x00007FFEAAE51000-memory.dmp

C:\Program Files\AVG\Antivirus\gui_resources\default_av\locale-it.json.ipending.1b2d7630

MD5 3807bedec9827f55f2ef18383be09d83
SHA1 a5e53fc452571df000c0adca5d0f7022bc7d5140
SHA256 90ecdee83ba6d3ee9f4a47c01ff6000317ea686549cef1f2a82a7d3745aa474d
SHA512 f0fa8c0078f47d2931c94d6f2149d9bc51e2a92c3ea63f0a06b38e80ec1c155a9c7fee0a8f1ddf876e9d0ba5063807cb6766d49d84c20377f838ba8b5254355e

C:\Windows\System32\icarus_rvrt.exe

MD5 97f5d0caaa1988c95bf38385d2cf260e
SHA1 255099f6e976837a0c3eb43a57599789a6330e85
SHA256 73ee549578ded906711189edcef0eedbc9db7ccbd30cf7776bd1f7dd9e034339
SHA512 ad099c25868c12246ed3d4ee54cef4df49d5276a5696ca72efa64869367e262a57c8ff1fb947ad2f70caef1d618849dbab2ec6161c25758d9f96733a7534b18f

C:\Program Files\AVG\Antivirus\BrowserCleanup.ini

MD5 4957ed73d5e5e303e351c8f8b7b53e1c
SHA1 e61238f49e44237c56d4d5b41aeb150160880b74
SHA256 59727f7a256b7a70971f2e62b43b0a923937f85689fc3aa4ae50e4fbfbf83499
SHA512 db4854667285bb1cd8d07ab189607ec5bc489afb2d0a5b5a3388f91cefd012feca689787452901e0eb1de6e8792e69c0097c38b89bba0d977d0b29e5e5ef2feb

C:\Program Files\AVG\Antivirus\libwaheap.dll

MD5 404cf3eb416af7c6f29b9020f9749e0f
SHA1 f7871850de658c3c24c8a298d0a446ba6296b1b6
SHA256 3785f576b8d38ee4c51bf4af6603f51c5a69081605aff4456630b1c6eaf3ab6a
SHA512 9fe013734042bad4f66b9770a563b9604283ede906feb42393c421fb230ee4c2cefcfd455825a3be8bd1c8f400d6cd29dee77a72936a287b1b6be9231ff77f68

C:\ProgramData\AVG\Antivirus\fw\macaddr.db.ipending.1b2d7630

MD5 4d0a40f5714712c5f1175769a93666ac
SHA1 2c57f1bdebe1bea9ccfa06bf42c967154d35dd41
SHA256 397c21a562d5824dd87e2c34a60f2b3e8b678d52a7bc7297ba5828e4d7b9cf4b
SHA512 953ead668e3f48e820209674dd894a1fc6482bc53d3143ddd45a37ebf416982f126825eeb7f8a9f43644d53c2c47b420f95c95289427765ab14b28ec476f1e89

C:\Program Files\AVG\Antivirus\x86\aswCmnOS.dll

MD5 8d5a9c82915f35db753e81db2dd8e10f
SHA1 6b18b4d2b8cdec42d685ff36d4d14b887561d2a4
SHA256 4106c2e92ae39fc461ebc966e2f2300b88250a6509836c71b5b8d67aa203f516
SHA512 220d51cbc97fa10938c14e513091a19b39e9b68693adf66a7194a05b8a897945fa5579fc203e7b11be785d0ce1c1555a02634f82baa48bafe58d92aea1206241

C:\Program Files\AVG\Antivirus\Licenses\intel_asm.txt

MD5 4cddb654fe704264c203b4d9c7c832c0
SHA1 9d236e8f305b4bc8c486de24549a706a3957c210
SHA256 634788199f33637e3cc36c61e5272f72ccbdab87be0c07eaaaf487c5f4f1ce82
SHA512 1933696744c8a95bc6c82ef0d19e99f1d4291f6e0aaf8570e45bd74065ec076ea9b3e4b030ebc8df52903f4f98aef6a9727d3370834efb9187e4ce24ab9a0180

C:\Program Files\AVG\Antivirus\event_manager_ga.dll

MD5 96087a9b4f4cb3fe024d79d7af39ce1e
SHA1 71877e055a998ec8334863efba4d7df6bd33a42f
SHA256 10c9e971aec4db39a8559d55eb32a08da19558f9ee49ecc54087a9884cdacecf
SHA512 e83b43294da686c72adca12c85a6309a7a58573417f531edd72a775bf572587d64123b776e8991f277c4501f791dc326cec331652381b575d82e9221949121d7

C:\Program Files\AVG\Antivirus\event_manager_burger.dll

MD5 e255127de2f3ef39a5293181b9acbf69
SHA1 dc7deaaf8ee19692432187ffa49ec071c392ea72
SHA256 091bc8344b92a261fc26f385147c902d4e558217bf60dadbe0f38ae6ce79523a
SHA512 81a5d145f247dad4fd9ab6798211ffb5a1d45b754c898c2890df5b1500634bb93a0c4dc6856ee3c7e9dd55544e864146e84abed76278a31b97cf3e0c2c2d2051

C:\Program Files\AVG\Antivirus\AvConsent.exe

MD5 c7a40673344040c55bc588c4ad275644
SHA1 7d0e8aa7481be3745a62fb4de06b331c82c3a0d9
SHA256 a04f9672d5f093fdaaa615af6280cf6f4b95f425de66171bbbf3dea31317bcea
SHA512 108cae7609030264f2b0d6dd3f18cb54d0a5d2d65f8d272ef742d2fb09ed6dc6cf9db4437fd120133a4be5278dad6f82d7da2cbd73078a10b882ef10d11fb601

C:\ProgramData\AVG\Antivirus\HtmlData\image001.png

MD5 c69e876c8bc4f3bca56ba333eaae7a71
SHA1 d00ac516dadf10b6a9fbaa8b6fd7f7800511d36e
SHA256 d1e88cc6880e3667b06b2d006f5fb8516f28467dd1153453c1bf954571fc4f00
SHA512 3453ec35e83ed63f2e88326c1a3f4ee23a6b979d272243131c37bb06ce8d2467585e311a3c01198f3384d852ee9fe525434f8a6eb58b7698c0c8c56b7a8f3b40

C:\ProgramData\AVG\Antivirus\HtmlData\Blocked.htm

MD5 94aa8569ec9b33e05f3088b136dda05a
SHA1 2e7779731351517e2e6df18b313e5df28079160b
SHA256 179fcd4c70b0e5958c56387c7849e4b49e695a284b75471a15a8e6c8637eeefd
SHA512 52cc30da7dc6e6ae7266bf171e4e9c9e16c0d8bf72abda793a0f03e2889eda6171044ed65960fd2c40251b135015a0fa62132c76cf16065ef6fa47476b6d8ff2

C:\Program Files\AVG\Antivirus\gui_resources\default_av\webCam.js

MD5 cdfd88ad81348fe87096d89c6b035e09
SHA1 4fa7886374124538e5a69793ab41c590439a7c7a
SHA256 a806d79e69b7f373f1dc1fd09edb3e2ff05f7d59a2522425d766edc62d2ad01e
SHA512 b8c89bda6e4cf9396227d9becac882e3f3398bed73e10a1826f4ccbaa0d9e3b31c03895908e6a12cbaacadb0442a4710714feb368b9357b0c96c4fb274138b4e

C:\Program Files\AVG\Antivirus\gui_resources\default_av\virusChest.js

MD5 2fbee758d5655d41b8e44fa418a7d26c
SHA1 3d054a108b8b20642000f0456d3b6c581b385ff3
SHA256 538a236d8269472bce8111352574d08a65a8f1a5036e0b70a1f173bea73be89f
SHA512 7e73d0827514bebddd8fa0e1026d0e87717395b7a6f936d691a0163a7b2cde48bb808e541b3b0cbc001df70b1c5d4d6b6618ef4ea37d8b428c23973fa357b0f0

C:\Program Files\AVG\Antivirus\gui_resources\default_av\updatefile.json

MD5 4d4be34e16fee1787f787ce1ca543f38
SHA1 3e4040c3c37102ba9b6970304ba0d7a6cc41cbe9
SHA256 514223be3c377f8e4768b9b6ce53a2463f5908a3b3a444e9484f99f298907eb6
SHA512 d28ddd7b11b125c05b3d36c52347e8af9f1ac4904b13dcc48d12335d7bdb9abfc187d76a922926c9dddeda0e7b23cc2514f2fc1472640d084e301b2170cdf219

C:\Program Files\AVG\Antivirus\gui_resources\default_av\update.js

MD5 f0c8d9397d3d6261b85213f3db10f24f
SHA1 6d2c8e52aa53c478867b6304c9b0c33e71e7e624
SHA256 99e4184df0efaf73a4a23fa322af17eadee822f1f44aaccdd9c30d6d1384ac7b
SHA512 2b69972dac435ce91d68a10bc6f86990fb7c42e0ce340e78c6bf230d71368b039a1c335f87bf512a50e0680c44782f7b2c914d5d456f8f6ab15cb741aeb62d26

C:\Program Files\AVG\Antivirus\gui_resources\default_av\tuneup.js

MD5 1c2b32e875f410d172c4cd169c4a6144
SHA1 eeeca5ec19b2f93714ec5b5842d19157333bc697
SHA256 600daad68327401f5f326e21f1f17631df594eaac6bd618998904d7887d8d097
SHA512 aee49a43e5f12d53352a88479973b9d5740fb4a4d884a9c6a73d5ddc199f984c6e9dee5fcc891b7c1ce001d8f7475893524c5b119a1373f51055084fde669a08

C:\Program Files\AVG\Antivirus\gui_resources\default_av\tray.js

MD5 57a62cc31ded540b0a2872d8bb1a3ec0
SHA1 e98b470beca0ed8acd4851f27466e42c1f2539cb
SHA256 36110a6899c341f54501cf3834e3c2b2df7da34803b75a8b8cbedf10fa65761f
SHA512 5bec92dcfb19ae06a4b3f2f380a29315eb0fb26217ad06eff6504e1670ac8cc882f3c4553c65db72a5c5e791219d49ec08b1904e832095266425d789a3a05d9a

C:\Program Files\AVG\Antivirus\gui_resources\default_av\threat.ogg

MD5 7490b7798417364db18a28945a941db6
SHA1 ee2468aead06205e8aaf986ba9d428627fb4a713
SHA256 3dd397ac6148d654f8e4469234d8c71ef9a9192eb21ae6da4b9aa214b70f8127
SHA512 3362170f92fec1e24d05de0f72fa39c120ff9f48e67ad03981e9ba1eddcaed366228159ee622af3726646c4d74a7bd88d36f4515af47213f9e0e6207c89a8bd5

C:\Program Files\AVG\Antivirus\gui_resources\default_av\system.js

MD5 9b0cb1857a9114368d8b2842eaef146d
SHA1 9c24ce6a73c58be8e08623a76338ce259a007767
SHA256 b93e40e7e27385ac0c34634a9f0783435a7db28d67f7808ef0cc1d50a10222be
SHA512 2e393d982828ae3291d1356e8c3d131dad0c38508a3ccce8ab7c6e3fbd17450980a0d96f3ec2bed40de1d1bcd8d4c22f7682297050e3f5dae8aeae206996c7e3

C:\Program Files\AVG\Antivirus\gui_resources\default_av\svgInline.svg

MD5 14aa5e59677c68ade7bfbc7d2345ddc2
SHA1 b69e4408467e46a1f5438800b6b301ff149c8bd5
SHA256 b36cbb590cc5110ce14de497fb11a315b035ca11d2631e7c48b36c66d4e7fe8f
SHA512 e8d1d27d47ec26d0117e0f16bfe5582b752050b2648b3fca88282d263fab455d4d2b94ec859b5bc5c0d2dbdc91d637610348633e69b806dbca31a44fa04421d6

C:\Program Files\AVG\Antivirus\gui_resources\default_av\svelteInternal.js

MD5 1a0b94b7fc4f2c366647d3306c8d5575
SHA1 641ca99b76761469aa476f7179ebd995ccd5d3f5
SHA256 b9bea6ea149905ebbd3a768b156c2524f7b420eaf7ef7168740a76ac8196d027
SHA512 c9b62a08e83ff73a4ce4162cf595395f05e1ab2cad7739c7ba06a8da431958a35eb375abf1b7d0f12bea346b391852c8834564d9f2cd075663784ab71d8740f2

C:\Program Files\AVG\Antivirus\gui_resources\default_av\svelteComponents.js

MD5 c085b8662d742ab15b366cc41d74fcdd
SHA1 2b8ce12f6612c3c518062c5c08bb9fa03846d1cf
SHA256 936399322b4c1777038d2b4c1b267c7cdd221995087544a511bcb0d78cff2719
SHA512 eb64a26c0460b4cee623a3c0b921fa7a678306e8f518aecc706e5d441bd5ff1dfb01e755505aeacbe637891dde01553e34c5b8bfb366b8d13b125c8861826bc6

C:\Program Files\AVG\Antivirus\gui_resources\default_av\software.js

MD5 8e6cf27fd8c131f969b735ffa13e2db5
SHA1 b2d2ea4c4fc20a282b80df5a695111db9c57a184
SHA256 602454e23b4fed73f1d76223df578a84832865f2c8de8ef8297e2b42c8f933fb
SHA512 ccda260eff55c13204d98f9eda04bb0597888e39e051bc255bdbaf3cb5338f25c254f068efb99a6374c0bc5728b0e289be991ee4a9a679b532978f0c8ff5204d

C:\Program Files\AVG\Antivirus\gui_resources\default_av\smartScan.js

MD5 58759af5f6751119c7ab590f3bde1ff0
SHA1 a716844440b28af454508915c23125d59427740f
SHA256 da64a4092247043b27c3f38797fcc3bdec212e4ad3a0f30a5b58d87ad36fb1d9
SHA512 8bed851c46ca51e9a566c861ee448b4b046b9851dca083b78dc9ae94b69a578f12b3f86ad31b094c32542b4125613e2fe0d14e1f47c598ce906b630eb5788809

C:\Program Files\AVG\Antivirus\gui_resources\default_av\shields.js

MD5 afffa4ab85032f2df1ffc7bd959d997f
SHA1 a9c7c70b47c25c2b320e8c7a1f67e6ed33280fb1
SHA256 3eac9e87493057d2447598f7944f70d27025e5d885c9ffd5bdfa27d8a6ca829b
SHA512 9014b9fcefb6bc995af53330b145c08183e28893d584a7bc2b49702a90721d49d08eb0eba03c4c779aac746c0de3e1093a507ffe91450d6c8b84070f003be64b

C:\Program Files\AVG\Antivirus\gui_resources\default_av\settings.js

MD5 dee6194ee98d778666ceffe6535aef33
SHA1 8fb9dc0eaa2462d44149407a01ff3750fce4a057
SHA256 1737c534b9648401ecac4b6a9135b783a1021f297c9a232c7444b1c33732ec52
SHA512 79a9236d24c74258b9ca875058b8e95a37a63c253ae787cfb1dce546a39edbae955b9b23119606fb05cbaaa4d6de8dfa7c38b3693ce88d65543c76157bfca7b2

C:\Program Files\AVG\Antivirus\gui_resources\default_av\sensitiveData.js

MD5 e359ddfaec238d7650287ab5098b6d25
SHA1 124831bb3a51ec7d8000c79d966e20466269beab
SHA256 76172e00479a41418773d7e0c64cbcd7c7d090b2fcc67817ec0ddedcd76883e3
SHA512 907d78840b05310be514aa842a4355551ce04cd83136aab431ececef7bbc8dc036daebbbacbd2a02bb0259854c615cb3e7fbcfb48177d5d4136415391516641c

C:\Program Files\AVG\Antivirus\gui_resources\default_av\secureDns.js

MD5 2461c95d96c4ca7feea37e8c5beae518
SHA1 34a76f64455a9b307a1573db0a930d0d26024060
SHA256 f913f3c13737566c4052ee9fd59daf76b5094b8bebd5c9ffb250a6fb4125c361
SHA512 f8cfe282acc59950d2c811fd1d1def2082957faa332ba91cbf92672d869cd20f4aa7190653f121732d8bb5de84a5f0f05b29b01b07ed41723cc475f1ba52a16f

C:\Program Files\AVG\Antivirus\gui_resources\default_av\search.js

MD5 123519252c28113ab6db82af47c824b8
SHA1 ea6a14b2c0249a576e0b8f035ef77f79b1388b0b
SHA256 1b82026d509ba78646178abf1679dd9a2c0dbc04e804adada0843d524fe2c6e8
SHA512 afa8a3ebc14db39a982e177260164feba1bf94c6b939120a31a603592af4ee45f88810de226ff205cbbe4a500d63e61961b6b1693f9069b7d45209e45bc99818

C:\Program Files\AVG\Antivirus\gui_resources\default_av\scans.js

MD5 2efb7f0ed10843b62cb20f05c22b17aa
SHA1 d46ce207a52b36f6cc6c66980221a998579dc6c0
SHA256 a5dcdeab7163c14b85fb265c286f1a0a05f146a8e915b8e93be4263c625d8037
SHA512 4912aa8745b4dc20cd8b8f12f6f269bd631167eba56dc12c0bbcf31c9dd3a0d7fecc747c2a7146d344f79dde13f7037ab234fa06902b1737b0ff34e482100309

C:\Program Files\AVG\Antivirus\gui_resources\default_av\rescueDisk.js

MD5 6ed15b85bf5372a319e17183caa2cee3
SHA1 364a7ec326e6b6f6102cab475da6323867c09064
SHA256 e5d832d3449faa8b2a779ca6cd8dfe810cbacfb896a28fb14af313d1f2a60c82
SHA512 cd166cabbec8209c3af200b0822a8fa3cb0fcc92d50783adbc767b9bd7b01f2b6908e2131f46a54149be74a87a5f00dfeaabbf0860fa5e6c7609f1f6d8ff8a6f

C:\Program Files\AVG\Antivirus\gui_resources\default_av\ras.js

MD5 5371f51b479f0388be0232c13391623f
SHA1 269341d5e897042af7a198868d1ba58962dff347
SHA256 7c3f34e3c1cc11533872220b6c4d8054149765c92dbd51c4b3eade1ba22185fd
SHA512 e80b951ee9876632018317bcb39cee50d68c3c531fb414898ae99096a0e3aba4c4d55ed46fce86158852f53d6047e858819ee150c1a3e5c3f0197a27f34b40cc

C:\Program Files\AVG\Antivirus\gui_resources\default_av\plugins.js

MD5 0dfb32df5ace60fe68d33f063cf04f9b
SHA1 2c5d4e1aad7d0517720ee491226289bd866bf6f0
SHA256 a2a201a78ef0721e839352f38126062f20338ba9988149d29a3c3eb49bcad021
SHA512 8397b09a7c3a329b785aeedb3f59b7f842ba0ea116a89124a7db782caa82653ea0d7f27bd4dd7a42bd412f7daf4c1ce4ac1bdfd9f4e1a7bc70086a84aa27c469

C:\Program Files\AVG\Antivirus\gui_resources\default_av\passwordProtection.js

MD5 5b80a944621da0e9388bfd478c60789b
SHA1 8361d8bc48fee7be3a8c090862f98dd087d279a0
SHA256 893f8b6c5da936438763edca09be6d7397371342c2c81f12ebd95eaa21ff148f
SHA512 7155a6b99f8e89093555f2669b95a874ef7811f572fde977348f4d712f278df66fb713ae871e8f6f0f2bc0bb630fe9c28af0b8feb015d4baeed5c7fd57de1097

C:\Program Files\AVG\Antivirus\gui_resources\default_av\pap.js

MD5 8f437d85eb63db4c55b47eaf36456c73
SHA1 41e322023acccee2d618bad093f19adc7386fbae
SHA256 ccb152ad2d68a5df46ac352d0ac979ec0aaf1cbe15d5a4deffac35e6c4bfb3b0
SHA512 528958240920b37e9dcc0cef42d80ee8de1f432e883f01fc4c61699be84a4b44ac27b4daa45db8dc5f4f473b1d808e20e6990eedfb34b03b318ecb61dac2724f

C:\Program Files\AVG\Antivirus\gui_resources\default_av\overlay.html

MD5 74047eedc155440e5d55b4a8932f82fb
SHA1 a50d46ed4025ebeb44588c2a7c85e62dcd9bb16f
SHA256 b4812c1f202e598d3d26c3f08ef960ffa9e533f658865d1e1765df565b253058
SHA512 a37b6f1b7c5d2ddb03775982466c734d1e759d07f38a693b72f65dd29f6585be221229b92341eec0eca171cfdf81a60ac5197951856e3d9bf69348e7825ef849

C:\Program Files\AVG\Antivirus\gui_resources\default_av\offline.htm

MD5 920d58ec9ce2375c262ef1273bcbbc07
SHA1 6dfc670b315512c2a5877d42eaa9206314d64600
SHA256 ad2e117c5171824aa0e8413b7223ecff415351347ba29bc4ac618775c58e9490
SHA512 271eabae910368383f6d908d7e43ad3ac030c4ede8717926c6d45c11c85588395a101f3300e1db7d36dae3fcc1724bd3df06dec02be0a29b6545cdaacc5c5f00

C:\Program Files\AVG\Antivirus\gui_resources\default_av\notify.ogg

MD5 5d21827de75ec11edbd54e38f153f288
SHA1 b85da53e3f8f5ed450c167381f00c807969444ca
SHA256 e851d3c62177df95503f1615e8a07b9d61ca9250784e2d00e0a325d76563dbc5
SHA512 d75ab0e9043a2fd06f14834cde7578f014fa4266a4ac05804943bd1b2880da37b56c00f4803b90aeeeec692ea40032f55d5ae4d5b9ece9cbaef3d3d0edae9a63

C:\Program Files\AVG\Antivirus\gui_resources\default_av\notifications.js

MD5 5269ed6386ed58fad6b28344800bd42c
SHA1 fc0574b5ff7a327fa24cc29475ab7cea093215a7
SHA256 bca3d38dfb7a717fa83097d39322e1ecb873f8295e0bef9e4169373af83e0ebc
SHA512 8f908f4ad2e74efb768dfdb2cd249cf83eb6d0483e86e6a42461269e8d2b1b7e0b4332fffcade093b7fc8a1ab3d3da80c677da01ade02e21627e58c61d443682

C:\Program Files\AVG\Antivirus\gui_resources\default_av\network.js

MD5 cbc2ab3a6e8f83d1806fdf90ffafe3e4
SHA1 4ac385bcd00a1d0c547a9869372f8204fc319aad
SHA256 22d221e68916fe1938bce528f63cc4bc1a88a6c0e84baa5440ced869234d756e
SHA512 ab0abea38b87cae3574b155dc7334c98b93b5e73d7fd152dbed414371cd358aab5dae81a8ac6aa532b39ca34853793a505e2a703563744ce24863bff67056a17

C:\Program Files\AVG\Antivirus\gui_resources\default_av\napiExtensions.js

MD5 d6b0dbb848c35be79e898139d5f69bc9
SHA1 1dff7ca9b7f2f8ee5c29f8072417f7259038ffc0
SHA256 7082dcbdc5d538b7eefeff3577affb87db84bbd278c083001aa05cc59eb9c1a7
SHA512 add4d25830894eede8a0993fdd1cc044a3290b66976fcdc934f3adb3ede6af76d2ca057afa0aae38de5ef94884966ffe79faf87926f50a092274d814170d4483

C:\Program Files\AVG\Antivirus\gui_resources\default_av\napiAdapter.js

MD5 3c0539b16ef834fbe7a8826321dfa28f
SHA1 8013e7be318d22e2a70747c19a4dc6d7c6b1af89
SHA256 170de6bc4c2889d1e910d43dd5d4f7a8c5395332ed8b01aa3f1a29212e1a8c6d
SHA512 1d22e39ce1ffd7589bef25556b95cf8500484c7824daa9b144e38bdc20c6263afc6fd0fc8ccf8826a5d52ebc57f32b995ec782bbf245495c3cbe1349d6e3b1b6

C:\Program Files\AVG\Antivirus\gui_resources\default_av\napi.js

MD5 c11a698c4f0df510ba04065cfe9fee59
SHA1 45244b8ac3c1eff89ffac7992d13f042b5670e8f
SHA256 7ad6d47d475c7a6a36ad24b07570b88dd63a71617c028c15eeff811d1baea594
SHA512 a608407b271fa3e8065884769bc0b7081887d3864f7b4c3453ef085749a4a1b569e61ec9a5fb02a1c6160be761a1b92fdec940e5130dfa518c7aabef78248be6

C:\Program Files\AVG\Antivirus\gui_resources\default_av\myLicenses.js

MD5 21dc8836089dfe71b23b6c4ac6f3339b
SHA1 260b154c2dbddeb75694b83bb003a50df433c204
SHA256 7a8fbcd16ae0f7436078f6bcd5dfe37c5bf6d7b3644afc4f5f41fb6072324ad6
SHA512 66d5fb1fe908a44d3c0baad4b5d6213b4404913e176879314453d6e716943fe8de385e1ae49e7cb6aa23ffe2437beafedc8aed7fd2c4e514b096e8eb32e235b4

C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainWindow.html

MD5 4f4ec4b7f875dbae19f5061036312e0a
SHA1 a01f3bb4fcd43ea4913e06089f172f52877c7646
SHA256 17f4e037807fcdefed01acd09a475a3c79fd42cd07e5f80163a98b7f0fdf861c
SHA512 cb437843d18c5edb6cdfcb5cd7b2c658b4c1e2a93be32bb12c87ccff60e4f0b95d3618503751fde5277257d42548615690eafa3f4b07fe705da48112066826a1

C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainVars_test.json

MD5 ec9d21d22b84a3e54debaf67aa7cbd4b
SHA1 00d1d14241d1e918957481611cfd2e225fadc62c
SHA256 6a943f92785de9cb4619aa592fbcfe913802afe9620af14ba4dc04217f583aed
SHA512 a185df132acca590647ffc8794f02c0f8869a743d979bc620eb11b7e87d1154bd6dc1fc84d6e5153ef68d8981b327c5d888a27794a76d1c87ea23eb71c29c91a

C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainVars.json

MD5 cafb9c7fc9aba63917dfc2349f792479
SHA1 1732f063f7e779480abb9bf9a5ab6a7ca61ca1fe
SHA256 bebcee43aa864c5e538db7dfe03389200a24c8d3139004e5a9710971e64e2c58
SHA512 4df61f491b3229799fb41cf9caeb2a1040c06a68c4a724cd2fc343cff85a46292e1281ccca49110c4fdb746a88b8a1d893ec353f008f42ddf564196384e85cba

C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainSprite.css

MD5 d47e42acc8b6c69ee2e49f4889a21f73
SHA1 64d218cc7cc3a3783b2942a1c5633c8afb7ebe20
SHA256 0d2c72013281756741f339c485484ce8b50f5997ad2d6e8e4d8d3da41641ab57
SHA512 3b6056580850d1cb73718f117df8972244a5341a36e4a4da8e15fc86ab3ff41aef46be8b2e7b93d055683b177ed14ccd30f492ba1ddf2b4d940641cc0e43beb2

C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainLayoutCss.css

MD5 a6c4202704a11c079634809483ebede0
SHA1 9c0cd64afb1134819a0c501ecd64a3e050a6aa50
SHA256 26883b07d3b65680eb7eb947a9897d6b8962c92c223d539a275eca0712d6cbb2
SHA512 49741d650153c3378dc8537499bb53411a87cefa496cdf795ad73740ea3accd2024a5ce66f834a173fe77b16c39e38134c59f2ee014f785e59b114d7be7df3e6

C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainLayout.js

MD5 3bf0210958e5156274b936d62edd6231
SHA1 3ccce2b3d40972ab8f5444d740184e46392f7228
SHA256 5948a24de2b41974b41ba38aee48766f2e51ada54c7845889c42ef40d92bdf66
SHA512 eb3909130d85813c6fb55074801bb8de36cb6ecf7af5d8bcc37e0e13c9719005f667bcc3592004fc2544e9425d07500c973d63b57f4051da21c093657e5b2936

C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainFont.css

MD5 5d024714e51e018de534090600d8020c
SHA1 30f0ec09aab286e5ff9055f3157c914f1153537d
SHA256 0029b0e55a066e06d1fb13a57706266b3f6c7a7e78cbad1a7f47f0f510992b43
SHA512 03e7b548f0959f5bad1f8b630161d37366a921b11621211b84bdc2013e9fb8920f5d2304e264499856f553e0e1115e3fc401f6c8b05321c6416cd4048470dfc8

C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainCss_light.css

MD5 5c94eda40c46714f46a2ab1e1ba6c4ea
SHA1 2a3b37c1d840bcdf09dc4cd00447fc7f25653a7d
SHA256 d367b4b08452644ee76432a6ab7df799a4ca43517a3eb23bc08842351dca927f
SHA512 751f2cfb00336a1b46d6f39f39c4f3d3fb2c894f3b2b73eb5265456134a8b6a21b0f63b6e1422b4210c9a71b203520322fac1fbfc22abe1acd1769351c6549c4

C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainCss.css

MD5 e878c230fad08b2266fe8f33204d1d20
SHA1 562688007406a84129292c9b49fb79efb1c565d6
SHA256 cbe7204244be1f6173f25eab893254b5c95dc3fd587139851e239dc0828d5338
SHA512 40e02fc7d715eb377060740f72fc0877f6b96c743f79ec03b495f15df842b8af38d9f4b05b137aec65d64b490abd4e24a8f6d9a3d94df3b25148da4223c5834a

C:\Program Files\AVG\Antivirus\gui_resources\default_av\libs.js

MD5 123e49b87a48b6de63e70715584e34b7
SHA1 7727c4ec17e79018c43cd109a5bd08ad1a86446d
SHA256 17d01ab476bc47fd600c1ca21b360717e12c390d06217d28fd767358f292371c
SHA512 103321106a10058b6bdaf4a48ac93bc8dad1b482cd69af8321da267d14f0ee1ea7db474c0ec689eb6319bb09195e500442316b5df153b860a6e7015d87def759

C:\Program Files\AVG\Antivirus\gui_resources\default_av\kin.js

MD5 e72925802f365d309d3181923c24ef27
SHA1 92073a0557fba32fc3d135ca7bd7ed4a5d8abda4
SHA256 dcfb363e39cea7314803fa530646ebd6c5c180fda5b3692fead499b70b611f39
SHA512 189ea649ba6c2184dd5a7b8ee120fc3870b0971b6b25f12ffc40e670fbde22fa1cf5d4ae5fb97cc11a6ca155ab15dda79a529858b6952a3b074047153e150300

C:\Program Files\AVG\Antivirus\gui_resources\default_av\i18n.js

MD5 66441a4ea5d2d175b050340eceb34543
SHA1 15fed0e6ec5925b5820babbd239e182948875367
SHA256 ad590c76f96dce482265c8f11e60f05d10329fdb479939dfa0dab94a147a6270
SHA512 30ce5ac2af31aa93f347c57b825fb7f8ed772acc3a89b0c221c0bdfefb47a4d66d66f01c38aa38ffada79d354ddcd07827823c81bae15588f78cb2dca1fe846f

C:\Program Files\AVG\Antivirus\gui_resources\default_av\help.js

MD5 1cfb1768affb9207fce4231a2164ec95
SHA1 f700bfc45adb5e3df0c11cf605ea595dc37c975b
SHA256 04361eaf0131b15892ea45a0925ad61f09df8c5ef5b0b3aaad501d206c5569a2
SHA512 bbd28791781852fb08884489dd0c17051c710287af2188356adfa39cfddbdc3f78cb63af24c764e56790509b458eabfe25bfdd846bb9eb33033159297835270c

C:\Program Files\AVG\Antivirus\gui_resources\default_av\firewall.js

MD5 bd45fdba3f0de51f7bd388e30842348b
SHA1 0a04f86e8118e11812d073a0402d26470cb734bb
SHA256 7eec725f72d48ef327795543202cc2252ec35074c55bfc209a5ed99187785cbe
SHA512 6f107829c3ec0749c9daf885cf3bc333bb883b9eeb415385fcd69630b19c322e266c3e42f3479ec1b6e32bfae007c2b250f5111eb55fb0150c4c85bf2f5fbab9

C:\Program Files\AVG\Antivirus\gui_resources\default_av\feedbackForm.js

MD5 3f618d565be5fa04874ecd1e575e05d9
SHA1 a14e470fabea3d1a0deb6e9cac6db2ed078bea8c
SHA256 fd96375982c1e41295e58001d716cb1828de68964e2bab5bc6eac69b9640872b
SHA512 4890295ffd8aff75a5be80f2fb19044e736a48f7fe05796e9e52a43c210e31a9f7e8e114333aec3fc88a366d6c99152797dc9fe4d8e6d7175cbd1d19cd497f26

C:\Program Files\AVG\Antivirus\gui_resources\default_av\driverUpdater.js

MD5 5b42757c3decd4bde9d5c158442543da
SHA1 0234fdb2967ec3141d6b0635a75ffd6e1f777376
SHA256 e44377b8884252491f179d431b7f7e0f0cb2546790e13d1506cfceea6aba08f3
SHA512 e711e2a0834f1004bba9bbde38ecc2755d36c8188f94330c930b4c2758a903b7583057f75d54ac2c55f740d46dc3641496eef1989fbbf134ec3d9dcd93a5df64

C:\Program Files\AVG\Antivirus\gui_resources\default_av\doNotDisturb.js

MD5 fcf9fc5c18ac1e3b6e4608b4944a71b4
SHA1 e5af65ee0b1f38694227bb01506fce8f6748b123
SHA256 a4e82d9ffba1b3930054084bf88cc5a8302f843b9f4a4d9d76cbbda4335287cc
SHA512 d63b0539985becff65ec14458ecdb31bded1ab4b662af2ee795a953c1590ba0cb5f4f592e210d1cd3ecfc1ccd9dfc7b0d7c331aa284130052e6a2ceace6e9d0a

C:\Program Files\AVG\Antivirus\gui_resources\default_av\done.ogg

MD5 dd771017a31b4b6b88cba564b6b4c86e
SHA1 63f12d6e8d2fad5bd8e3b210cc20cc5fce8da930
SHA256 bd6a50e8b30dccf4575c91596b2b85875b236fd2b1b8fd1de5fc714f0b673804
SHA512 6958f2aca7a95f28f181febd9b09ae60e6c4f336d30155433cc506fd1147dbc43125bafc39e7f4cc06c68f90566fc957c92a3ed540d4ca830a8e11e7df2c5969

C:\Program Files\AVG\Antivirus\gui_resources\default_av\dataShredder.js

MD5 afaa1df59011ff085b15523a4913d54b
SHA1 a9ad86e69ce8065311e45064bcb59a3a76c76fb5
SHA256 32f806ab36a34fd34379b4e3394d8de8e4e0a0975978fd1ce45c6975b26a03bf
SHA512 594312affc81bcd634fad4e4392e6e7f24d1e3a0821d69cf78dc0a63d8154abc4b4f6f39f7f7713d99f484be007619ac83b0f79527305d7dc84a06ebf4ec9d5c

C:\Program Files\AVG\Antivirus\gui_resources\default_av\dashboard.js

MD5 975efd28d11c799222bd233bf8352e81
SHA1 d912eb73b926b6255fd192b09ca364597c10fff2
SHA256 57f0c10878855c2346267ea2a486946597328577e8d064de02418a77446d4c31
SHA512 754d46d7552eea9d2428bd445bc664fef6b11ec502ea4fb8035ce9e96a18790a9f256060ef527e3d60f7a8cc5ca62312b0ae4efc9562de3e03c14bc54c51e927

C:\Program Files\AVG\Antivirus\gui_resources\default_av\darkWebMonitor.js

MD5 0e067f0f8e5ab57d5a23ee0708b1fee6
SHA1 81595ddc3011eafb42569f2895d4c470da3fa907
SHA256 b8c4742dd8c6f29f8e4adc9d97fe1421098be3da8163fc7e65cecaa8e801ba07
SHA512 0dd9d339eb61d5cd3cabbd6dc762bbdd50ef380359f56c07f5363e696972b5988442a5a32e419ced8cc3b9936c5bebc2aa25163125baf442f9908dca7fb34181

C:\Program Files\AVG\Antivirus\gui_resources\default_av\core.js

MD5 bb32bdf6e5cbaee433e2a373ac621d88
SHA1 27a7771ef6d2b09f5e9da242a83ec459948bf3e9
SHA256 15fc40a922712b8294d1f6e0079d9ee3a0fa981262137bfb184866e16d2b8e14
SHA512 2f1821030bdb7877979a868d158a43ab5a3eca89c29b904f07961fe754ed2dc41ba51c88d58efea27aad1af678758fc432694f91c7d74c1e3b765a50d5f6f7c7

C:\Program Files\AVG\Antivirus\gui_resources\default_av\browserExtensions.js

MD5 bd237f8d902aa509282eee6b91899b3f
SHA1 053491b040e5bdfe5a7a3392b97c7bc491d31aac
SHA256 7e616aa37a60865987428a0275a377c75e09d45a1533d6c0f595312c6348d542
SHA512 fd7a295c48f9bca128caa25b7aefc2e7e3d7c8591c5e5898dd25a91f532ec4ea9ba3144d4958efdd7d25aca81caeb1c43db4c22b8e17ca275f0bd6f1b6584ec9

C:\Program Files\AVG\Antivirus\gui_resources\default_av\browserDetectionWindow.html

MD5 91ce39a264c74f8638112282be9664ab
SHA1 9bddd0eb43fd64ea04ae383e4232819cc537514f
SHA256 4fe75e1f04a9cff36d45b3f8879e65d5aefbac61e20534936ad72c5c7d94392c
SHA512 c1b9084b91da6be8be560620af801f89e6000fcf8c72206a8838eeddd78bfe3c33aaf111076aa26371daaf1ed5f750d7b505ea9554f1345cbc0ab8316dbed9d1

C:\Program Files\AVG\Antivirus\gui_resources\default_av\browserDetection.js

MD5 002588f26a1770bc35679bc49cd42eec
SHA1 171bfe16ead34ec110c5efe8f8f03f1ff0bf95e4
SHA256 041a9da1f38980d288d1323d0afd731d81c319a1b432b5aca33704e1d2e81e1c
SHA512 8792861102d649c2192b92da060bd980f9082ac5bff9a1ca5b12a6ac19ad2b8cb3f8a9c28b18625137ebf74547a1b736468452dfaf16a18d27d8f4af5ed87b02

C:\Program Files\AVG\Antivirus\gui_resources\default_av\ask.ogg

MD5 a3b4b5563b0714a5f86b6558ee703d9f
SHA1 d21280d0c8b593257a7ca10f41c73e49f7424b5a
SHA256 4a2c37cbecf92e6bf0ff463759fb5034391091edd58508a44616883ea524d50b
SHA512 3aec734a34f580beec9b33cfa5b94bf979aa73abeaedadf8d03e82ce98dfa7cb0b4fb987df15e1707c9b14b458233ab28f471d3c786253937af7b0484580794c

C:\Program Files\AVG\Antivirus\gui_resources\default_av\antiTrack.js

MD5 ff054d80baec2b967b77c7a705ed6307
SHA1 12aaf10d4461c4a410bc64c6e2abb01c1433cd07
SHA256 4341cf9bf18a84da2aaa18edd9afc53ce4db361a14ecfeed30fd98285b6dec08
SHA512 6ff653260d35b9cd46de5cc9ac5a64c47d36b292cbd0d5e5f7774bba446bef3a415cc05f8f56bb6a26604998f2117f68b67173a2864061432b8f9c486e229240

C:\Program Files\AVG\Antivirus\gui_resources\default_av\antiRansomware.js

MD5 74cc8741774df7b7408f09d38c4e6044
SHA1 88588ebe973ee63168321d6fc01330ad52b7125b
SHA256 3cebb49dd3488273ae0b79f9a00d6ea6c58ba6752032784e87ebd967a6756479
SHA512 cdbf0fdb81bdab9c59f1defa885086114b593ee52cee5c8dbb6b3c6489002c93d4ddc1e0511808d6e4d8ec55580bc33b7cfca99a37d3ac26c47dbed2a6083d8b

C:\Program Files\AVG\Antivirus\gui_resources\default_av\about.js

MD5 9cca996bfe5226c554058486eec8dffa
SHA1 9135835d0b4f39b2c66f97ce00f62c053e53f75d
SHA256 39c128f907625a6fad301ea3b236cce1517bffaadbe0fb34eb8411baa09f2461
SHA512 e018f8e7e420c7586e42fa47e07c3b0a189d3a221d0bcdc8c98f61e0e8a1528c9b648081d5a99211da0666008fa34070a5f39e4823e2629c92b5fb5c98883efd

C:\Program Files\AVG\Antivirus\v8_context_snapshot.bin

MD5 652a0ec5b9d98955bffbcba3ee8eb3a4
SHA1 2d7c8d85b0059df2b429e40f03da604c72761c22
SHA256 13f67a42aaafb7c1f6dadf60387b2769c8344299607b074870dbd6837ef7b2ed
SHA512 1a8968de3874006c0dd56e417ee381191bd275eedfbb83d665ab84997824a532ab44f8e32880ab740a7e15034b8ea53da4312729adfc2c213b795be594558e8b

C:\Program Files\AVG\Antivirus\snapshot_blob.bin

MD5 4bfac8501c72cdd860ea754d1d580cc8
SHA1 1afb2418f3f31e924519eab2b172ceb41dbe15c2
SHA256 67062dee20934c4d297aaf1dd96d97a7bee8bca5c9e3cf3c6a18cae60e6ab191
SHA512 d622736ee5ebe22dd48ccd81916a400f4ed519bdddab1fa9b466e5b7012cb15601a63cb0ba5bd897ccf33aaba917e7338a0cb4339000e5f002d266396fd22511

C:\Program Files\AVG\Antivirus\libGLESv2.dll

MD5 6cb160bc7da5abcedd71c8695ec75a2f
SHA1 6c35c8fa19e02f81c7a5401492c45239d91a38dd
SHA256 f3d6b13a23a6a032838f75255ed506051504e09c77121bfcf59cc570529f6c4a
SHA512 213749b77e811b5c379bba9451fdab17b091ea513a86b2b92e2dd8fc2eda5eab7856eb2e88d4768fef70cfd775b803ba6cca58094942bd0007c1d5878740d39e

C:\Program Files\AVG\Antivirus\libEGL.dll

MD5 2060cdb437dcdfff0c5a2a581980ad2e
SHA1 a9498ac53f77feadce4524b7bb47018d5e7b96a9
SHA256 de26ad77d4f163eb7d659e50bcc7227da271ba959e6969ccfd20ae2b54db38cf
SHA512 78157004423eaf6a6d7772132fccf1ee80367046e9535c4c3758e1ccf7900d1445f68320a448138a83c3a16b305217c179f415284133c737b1b5d53240f46b83

C:\Program Files\AVG\Antivirus\d3dcompiler_47.dll

MD5 f192b3b5ee05bdb0afe890a09f69abdd
SHA1 b2194d97f7a25348eeb714552c89a29a75165613
SHA256 901c70df9b9714b22d264375bf5c91ef469edafc25c6762e7b0112bea6f07378
SHA512 9ab70152cf0e3214d539a59b135f95485fd770d0c5693469045a8e3e70e48b5d1f7c2dc690b2f7eb9094cf2377199624890f2f0789b2abf81393cb2b5765780b

C:\Program Files\AVG\Antivirus\chrome_elf.dll

MD5 39a3d833e0e786905fc8b3bf153989a5
SHA1 716c1968740c69d9e5639a72aaac709eb2e0024e
SHA256 d0447e595d85098fecc0e0bfa51c93506f9e218ed10d0a916ee0bfef511ac0df
SHA512 85896f4a58a66317ee67319e1d68269aba84fa81e8a5833f88b55a52f705f6516a27a50afb55baa4735a9736c01d90ab2a2ff71869dc8f5524ea6d2a6e297ab4

C:\Program Files\AVG\Antivirus\swiftshader\libGLESv2.dll

MD5 a7e8c182da0331fe22b69da756bb8387
SHA1 e018f3693b6bbd281cf894f37039bb8ae8e09b0d
SHA256 26b30de37e4a069b39863290fe2bb59b61aa6e54662b7f9557173ccdd4ff0dab
SHA512 b92de4b3c547256e20b758aaa93c320f9f404800d009a56697cf2f08d634918d46525e7df2ff85f69d663a1e7fbf1b4532d1d48f65880b2e58cae03eb0c7de01

C:\Program Files\AVG\Antivirus\swiftshader\libEGL.dll

MD5 227af943a451da44e1920791a84a7975
SHA1 e7ca54eb3eb82e47cc692a2874802ae246d9eb62
SHA256 c86ee36ea5f2052c968bfea4c69b60f533639cf3601e7d4015d5c3b5e06f57cd
SHA512 9f1868aee4164611e05b35c62a6a58c0636f1270f32da0f73cc64fcbf6731580b631d236998881293260a18d5355dd2dbb2ec9812c5410ba2ba84e24d6237e27

C:\Program Files\AVG\Antivirus\locales\zh-TW.pak

MD5 c41412769245d56fbd7d1f114f238700
SHA1 ff3ec93946677884128267d2d84869e5c6b63afe
SHA256 70ea00381aa8ae93ce9f64ae29ad3de0263ee5991861120c8df7603bac540b84
SHA512 13ca3d0fd0b4158f2bb751791870bc0a2199af3c39e66c1f971b2cfd6d536d9642ecab82bbe814908020330eb351b4a045e0958a22bdaec330e161b8a3f6087a

C:\Program Files\AVG\Antivirus\locales\zh-CN.pak

MD5 56c3b32e97f3c52cebe29937806a5325
SHA1 25f4295535a90c26fb9bc476bc915d5805803db7
SHA256 70070d44c9e5ec62c57b574837423f849ed363c0167e8019afd49a93c74c7e3a
SHA512 207bf51c44900e25d7d2d5a128e11b11f972490221d7c3f8a28b77d0921860f059dc92ab96f687da4a7fa6defc87a1896b1fdbbff31a9bf45dd2864cb78c1cbf

C:\Program Files\AVG\Antivirus\locales\vi.pak

MD5 c31f5ba58a8a0b114e1061c7c2a8f43e
SHA1 beeb19c5164c2ca5bd63a60c0499262ce8467d75
SHA256 66468ec740624dc5ca9988e2aea145bbe915333db3327653f130ec4a426baf17
SHA512 784f0426e303639e7174bea1ffe83973bfaaf18c7d61544cd4ee92e417442b085f6a5065593d608326ec8bb7374efe1c44c5c6d15811ef2449baa5597b502cbb

C:\Program Files\AVG\Antivirus\locales\uk.pak

MD5 49aaf394d0376e4bf0639fd928f0008b
SHA1 ecfb3e22c86323f5571c502f020ddda2d2c680e3
SHA256 23752a372251b782f35f6fca4a17dc260159eca4620ddb610f5ff7720d496a18
SHA512 e414936a5b36926f9bb4f01c7271c38d6d868c1c0341585b5c73e848928d0a03b5849ae088f964df1d77478a739edd938680b98bf75f10f0a23944843eb2607c

C:\Program Files\AVG\Antivirus\locales\tr.pak

MD5 d32db9a61c2f11de5df3fe64153a48ec
SHA1 9d9c5731e0c17600ba62ff1bb9a833602e4eeacf
SHA256 f25ff7a18aebd6ecaf56c2b125aaa22a1699fe2ee9cc6f190f6525d824992f11
SHA512 43c939ab2fa18bf7009ed3594de3bcfe0455797aaa2747841957678f31410a4b368c5f5fec684d9ee1487bb40bfd8395edabb97312d97be317653df9cfb58a61

C:\Program Files\AVG\Antivirus\locales\th.pak

MD5 0b8590d79fddc502679b69005576584a
SHA1 37c6907483849773784652835ff5184ad88107ae
SHA256 a06797086a3ae1bd42bd93fdfb239a787d521cbabdda56a0c15aa255def81e5c
SHA512 c9f9ae0c139b9866e568246701473d01fd8d190024411c63859574c004befc59b8e2477a3ab9ab48b92f425744ee5e523d0f05625605dbce95d3449acb201ea0

C:\Program Files\AVG\Antivirus\locales\te.pak

MD5 facf3ab50cf9fd9a08f951a3cf3d42b1
SHA1 44f9874dc0bf80907ba5f1189350ef741f168cbb
SHA256 3e19980886a66ca92ea762b86ab44fac8e71fb16fbf4dd13864840923c9bfd19
SHA512 1a32a1f82d92f2db9556a50b05329415d995a3038fad7e21e82526b976e75bf171367eefad6dfab2ebf388862c5f0154de2c7772f6ac617577e61ea1a99bc7f6

C:\Program Files\AVG\Antivirus\locales\ta.pak

MD5 35b454a9361898f148f056d02e1adbd9
SHA1 c3b0dc8dffda8ceecd0f43d3b6845e5c2e031284
SHA256 7f047181c386fceb204184cf02d1ad1859e5293db04122c5c6585ce7bda8da0f
SHA512 11d18f6d5ad0cb7ce3b9a4cf7aecd5ffd2fd8a72a65ce48afe034f7b11269cbc109f1fdb9448021218b31cfd64f52c53875cb3f0cee5ce2243938f449ccd7201

C:\Program Files\AVG\Antivirus\locales\sw.pak

MD5 8c427fc5a5eda451f60c0e4e6a2c6034
SHA1 752eab30cfb87e90ce5cd887786e115f15a8a178
SHA256 178590c5a7fcf0d41d93724de8aa04f4bad7b9cec119a54a4115f96f9219ef3c
SHA512 e09599a47f5f5a2295fc13cf0ad0aa45006852eec5956092677b212a5cdb6a787349a12f78c2af0529329b51a87fe0cd614e8b452b2a049af7ba51b893f1c7ae

C:\Program Files\AVG\Antivirus\locales\sv.pak

MD5 335c90be59afb384203afbe08a9d5d48
SHA1 30e945993e943e1e6840b8020bd78a845dc3b745
SHA256 eca3cbaceb77840c7d861b559ee3ceadafa9f7777856112c9bd30b5a8d517b9b
SHA512 5bbfc5404f330b047365b2fb73403f5598c696eee0659fe987c0fbacab5a949f38ce5b288bb32702cfb57e15502426a3efc373932da2d01e68bf031f57251af2

C:\Program Files\AVG\Antivirus\locales\sr.pak

MD5 d13a44314bcd033fc50fc608ad1ab91e
SHA1 7abb6cee31c4873b717910fa9c0669130343ec5e
SHA256 6615bd59f0759e6af09309b8344c0e7f0c2dc2bec55beaa0afd1bbe09af7596d
SHA512 5efaf765533e2bbf3095a05c55b3a144c32cec14812d743a5b7de47b7ebc7429088b7b94bbd498568189ee0c4cf1056f2766ff341d46303e23410cc84574c798

C:\Program Files\AVG\Antivirus\locales\sl.pak

MD5 dbb839665d4d78d71c9d49b85a0ec0bc
SHA1 1b8662843a1acc58ef120d62ffcd19c764f8613d
SHA256 80ab358cfdafe9533005571d832377a08e5df4801a6f61be7aeb2afe626691b9
SHA512 86f7e656d140e03f68b0d7ad8c7d9168029e3fa1c8d75cddb2101dbbcebd772dfdab1da3c568effc41c1bb6b3ed0a588f4be50ff307ae14be356ccd101025950

C:\Program Files\AVG\Antivirus\locales\sk.pak

MD5 0ac44c1ad8985cda2e3ef0bc2082fef9
SHA1 66f721bac3f1ff5be9fb7b926b87341d303a60b2
SHA256 ae4a8e4e3706626f7ba53cb395e2472389bdc1319fbbaaca608ee1ae3c918e0a
SHA512 5ca7d91b3ac747241acd8b76176b19a62cb44c62d991e2db6631097df9276c277d19d3ca6713e382ee69f61550b5d40daa03da838d80f04727a03a97a0b28da7

C:\Program Files\AVG\Antivirus\locales\ru.pak

MD5 dcbcbf5867918c54c5f8f267664056aa
SHA1 f3b706adb3c222a84cdc92bf97ce26f8aa0042f2
SHA256 fb9da2895730be8d82924d01d5e0dc28c454d8b91a1aab556d255462c374bf16
SHA512 429896d3e774eeb6f447f9f80f1c148685df728b343899e12e58bd4d58caa70d3b38e264037a720a2074e909e3e3722c8393a21b4f4ced2157da554bdfe40f37

C:\Program Files\AVG\Antivirus\locales\ro.pak

MD5 de48484707e8770f47d27f0f5e2358e6
SHA1 014295dc0215191606e40b2fd757a5a637164571
SHA256 5fe258168978f52d2b3c6f063c7a7c381a70ac06e128ababe6656375025fc088
SHA512 653da7faf9f75477c084267e30a288f52fd1260b77f7d1552981034b033d796b7ef18a6f77214179521213375f4b43a7daf69e4977e487cda90c9d7e96e82e52

C:\Program Files\AVG\Antivirus\locales\pt-PT.pak

MD5 4fbebc23d7a0aaa6dcd426777898bfe6
SHA1 959ce4fa97c24143c3dc28e9420e6d6c76a7266e
SHA256 3cda10980a23de97163a2c06b31829cca1ec3da63b0bb0a246126f402c19b16a
SHA512 a1c4052a40059dd5a417d87935c9700c3cd127b63ab9191ca62e448b09109762906638c5d80abc0565711425f52c5ec3fffeed87aae70c0888199c45a4374880

C:\Program Files\AVG\Antivirus\locales\pt-BR.pak

MD5 3a4f9d62b91bc0eeab11f0865d4be286
SHA1 c56a98f46b9f0ef8c5180d176cfb7773a05ce941
SHA256 3051442a3e905dfdfb8f17f49d12a3722c511faf9aba0fc86d577dac90e3b654
SHA512 39a81774c90476e4e8ab80b0784a8923c698040f51cd6acd08a50b5d2f90a7a22242296ca5793ce39ccc93120df3f40eb2abaf6317ffed8aebb986ff28946081

C:\Program Files\AVG\Antivirus\locales\pl.pak

MD5 419e3f381b0e0f080ec230a9f1b80e66
SHA1 c279ff058f3f3ef086715ea2206f24cf7aa75818
SHA256 a5fdcd13f711d4665d1960f512f1bd229dbbacb24c86bbb3773a905e2dd24b33
SHA512 d7896ce61b64ae92f5af2774f3a996516d24e89d7cc6f84429cbf3f70aa3d87404fca8c6d242b5a088bdc1a7a73e229628ca7dbec81d6976734632cb5291e9b7

C:\Program Files\AVG\Antivirus\locales\nl.pak

MD5 cdac79ea10a58cf43ec1e5452c5faef5
SHA1 35bee3062c54f83cebd26c50718081186023c0b8
SHA256 ad97f1708909ba1c2d6119de7536448805f00275273a8b33e743dbf2e7ab2456
SHA512 d9b907c229742808561e87fae306b8e65948ed60b21e90981de1761f162cefdfb95705edf375bf686cec15f7766ada2969fd7428f5ac4334ee83d7d1fa8b4947

C:\Program Files\AVG\Antivirus\locales\nb.pak

MD5 4795132dc7086e139a2af75a69fa4f63
SHA1 e8acbd586ccb9ca0686c7cbf90f0be5cda48228a
SHA256 8ef002c7ef1d7207b5b41038f16fef198d2343c0539f14090960d6f1295d8c7a
SHA512 466f4a0eb01d2f8d8359016fba96189f152fddcf5c041b05a62c5a7b14b3d93b3f2a4c7eba7e292eb8acacb65afa68b9e9adf4843ef78c410f3d5296656911de

C:\Program Files\AVG\Antivirus\locales\ms.pak

MD5 a5d5cfe69299d29812c9dc473c9ceb72
SHA1 768d505ea7678aa2d7f7aba46822de231f1a94fa
SHA256 26457724f3431e3383ac833cbd990834dda8e5e76b961ff931d171aca4221626
SHA512 c8a8e30e67e003720c2fd20150140370e9e8498e2c385bf7e6cce8406b7abafc20fa249f7c3ec92deb5d86145d59717d17d758350bb732f8196129ca82b1e110

C:\Program Files\AVG\Antivirus\locales\mr.pak

MD5 9aab1dc6721afb63ada134d9d1bc2dc0
SHA1 f0e309e0570e1595709cffc570a799e013a2431f
SHA256 27baebb27c345e367f27b2ea8eb5895c2dadadea282a0fa94a1b2057859736a5
SHA512 9e04ad79a36fe4142544b6d360c0a5227cd7c48e2b0b091085e8d3a011504522da4584460e5234d705d1a9e1fdf695902102e005a30ed2cb2e021b19cd58a708

C:\Program Files\AVG\Antivirus\locales\ml.pak

MD5 5434e2c549029aa898a97f78a65ab13f
SHA1 0361686f5d38363fdc5f67aa5980b6729fedd4a1
SHA256 990b6559fb32e86df8045cdf8687fe7176fb810c18b2032fbb1a093d9b2c901a
SHA512 d05d6e89e0f313622692b2173f715c4c84f80a7fae2ca9bc8b1ecdb02b090e5189d40f5777b647e97344ac65a84c284209256a7e1fb45016d170fde0eb7270c9

C:\Program Files\AVG\Antivirus\locales\lv.pak

MD5 a9f1ffb1e215b45afffe7e454dcc082a
SHA1 bcc32731f6fd700496d4445545366cbaa2565220
SHA256 a9cff7d778289b25bca696ff4873e45f098be21f8f4fa3105ae7e2b9b1ef95da
SHA512 c8e692b0ade3dae78b1bcb7d8e3c821fe4d5fe0759180f6f44e603ecda341a8a925cae5986584e98829007bc56a4744ef0082d1feab42781261a6ff7b7b65676

C:\Program Files\AVG\Antivirus\locales\lt.pak

MD5 96406518a17835d2c08ea09f6a4f5269
SHA1 63f2b8ac41adabfc0f58bde2ea02af3ea830cee4
SHA256 336b6bfe35680a19b02d583f332df5d0f5dc6fa5729c2910fb1aa6659e6aaab6
SHA512 342a9d97fa6747b52e462e302cc865e8ee6018aa65ac3d517d4625cd31cef68412e4df9d28ac10e39ed73801342455635ab99a6e167bf7527ac7acd62bab733b

C:\Program Files\AVG\Antivirus\locales\ko.pak

MD5 d324469bd2d6e373ab875328c95322ee
SHA1 8c4d3d7e0bb3df9d4028a49b64182d016b47443f
SHA256 549b190c3722d4774cc7a8a2730f858dba66f063840469799adb449184056f9b
SHA512 10a2e751d95422fbc24f5618edac8589d033f19106ee500c83830fb839d639d30f25f2b49ee017767325dfdf833a6e1f9eaaf0c1081c1d339233dfeda9876ae8

C:\Program Files\AVG\Antivirus\locales\kn.pak

MD5 3a998b7d9c41dac3b2896685116ab994
SHA1 8c7a3272e79fa27017c24905f2b598499a62623b
SHA256 5eaca86a3792d40db18e7d1ce39683471bed1e8b169d716101808930728e1ea0
SHA512 e1e7e49d4f47c6338e9530b0089c1b78f96fd8e088d7ef2edb013c8a503b86f803ec074dcb8ec3998ca981a5373fc37936c102c9d8c971abc66c6233c6758eb0

C:\Program Files\AVG\Antivirus\locales\ja.pak

MD5 017796cec4dcae8064f6303f2e3174ac
SHA1 1709c22b0a24a74b690deb61dace383484c08bc4
SHA256 8b8407ca872711857c1efe032f0c71df17fbe8d82107a09953e812a20497e582
SHA512 e469f0a63bc649126e0a191dd17c1f5db6e1bbde4b4cec63fe4dfe7c821ff5f1919980ba5bd4962095c0f8c4698ac659693b6ecf1a5feb2832936bc3c47a3af5

C:\Program Files\AVG\Antivirus\locales\it.pak

MD5 ab258570cfdde79a3595b9deeb6cff01
SHA1 4563fc47d20d0a2ad81e7bd9298a5aecd11ddcda
SHA256 5fef05d02e5c971e8d3f6b5584720ebeed7c7e6e5214320f09ca6f7d84ffa993
SHA512 8a7ef6aff2682a96511e2130de62989e5e3a9ae35b8db66173f7ee0102b1e5f5e0ee7ce2a6f06588ba6e4c577c6d5d5767d0a23f1fa1bce3c2d4b08f7bcc90cd

C:\Program Files\AVG\Antivirus\locales\id.pak

MD5 556874df87f3e62bc9f2baa6353c5d73
SHA1 6e79085ed28fc54399bf7b91a09e69aec0e21e2d
SHA256 60e0f7533dd163da804ac5445f2a80fbda26bc58ce26d8d2de7e2bfd4e5d039c
SHA512 884045476c84c3c18cf41c7a0f4ef98c9df5333284a8d9f27757fa5c19a8c8f07a821b613f7d0fcdfd594fc23fc78ed5d133e2e1e5c965794376e69903f20f8b

C:\Program Files\AVG\Antivirus\locales\hu.pak

MD5 ae54cf32c7e5bc9b75615225c5faffea
SHA1 25c6ecee303925f6a273a8d0818a79ff80a74298
SHA256 12949111bf85a2236f071a294a508d99c90587a97b9ba7f61dc8d70e36f5761b
SHA512 eb12669cef9fe09d8f53094aa5df2ac71c8ea334be474a2dacb5f2e8ab56bb56bbb188aac10509873fb7dd3ebb6278d69a050a700cef6388a5caa22736813932

C:\Program Files\AVG\Antivirus\locales\hr.pak

MD5 5ab62a807b85bf1b75c741abba0e9f98
SHA1 641b2360699dfc465a86c0e10b51b4739bc3c770
SHA256 b967887c6313fca79a82168645c1febe43c949f01e0eff3bb8413a04b590e16e
SHA512 d53895053eb4aa230bf9285e1cf0fd46704a9658065f35a265496610c951d09c2436071f421217d3dbe54423624d216d357471763bbec069d3d0d938557fa291

C:\Program Files\AVG\Antivirus\locales\hi.pak

MD5 e7506ea783c56cf5432618080371868d
SHA1 91f7c1c26a7eada6af72089252c2a0153066fc03
SHA256 2418a772d39e45fbea52182965a901364ddcd5459a920c8dcb56c2844954e536
SHA512 4b4d90e2fcc913c061da046b4ad7256c1dba78959d08dee67a471690177dcc8561650e3e0397446fbcb4b9bec89a345b4f2911bbba6a88444ee9b135fecb49b2

C:\Program Files\AVG\Antivirus\locales\he.pak

MD5 ea6c8dd5fb4007b5b5a692b857693d46
SHA1 e142738f399bf5aa7c19d478a7def3d270e61851
SHA256 7652d063f1630e33228809834f71e6e2ffec75c472ec66b6ed767bd98886f928
SHA512 a77fec4ea0fcea2de4863eed319abe2f4143b5fd345aa951c94068f862bceccfe16575271bd423bf09b7116c6bbf7faf4daa59bfd0025797ae9202a311637e1f

C:\Program Files\AVG\Antivirus\locales\gu.pak

MD5 349ca76d987c9e2c7fb00966aa034357
SHA1 3bba7ea00e4f4d9768dd2311ec1ac59cc8239652
SHA256 79fa0f068f09ed239a8e0c3f1da0b35fa1f86622f9fa47721e13656696184e88
SHA512 330488349b8a7d9503df180611d97c4d449788284304f4bd231ec97c77d5c2221adecbf6a9486d2a8bee37b6e2c72ad22cea3937e95c1c3178c9dc6c522a52d8

C:\Program Files\AVG\Antivirus\locales\fr.pak

MD5 39df7277c2854d60b4b61bc11add4188
SHA1 865db185756772df35af31dcdf78dab7fb9f8549
SHA256 1ffb04ba6986f4a25f5191da50939cfe48d1581388148b7f64d3c10a124439d8
SHA512 de627a69981b4a4604a587a610b59a022f6fc4715cbad7be59cb444db7b42e0337cbbc42e9c0a5fea84bff066be3273a8eb251c578e5457a9ddf19f90a8c71e0

C:\Program Files\AVG\Antivirus\locales\fil.pak

MD5 2dc3f1409e7f6a3fdb3aa55c1bceafcf
SHA1 76fdde6ee054a19f7c76046bd41390004bc6ac41
SHA256 fab8b112187fcf9ba5102ff0aac2f5eec63a646c8bf808fc5a2e4e08b9c62a83
SHA512 5ee1981ac59456a623297de3257219b69bc053aea71fa4ae1486bb6f0689f7adb5e78daa17d8d338755eadb7164b7d7f50bd6bbc004c80d00ec4fe56603750c0

C:\Program Files\AVG\Antivirus\locales\fi.pak

MD5 59d49ab548b74d85bae165b8cc15b073
SHA1 d1946469ab92270bc99b7ed863ac723cf676f050
SHA256 fa171dcc44baf46cd4331d0a833172185ff6a166a31ab4f9890eb0832e15cbf2
SHA512 40b9018eac2f55828f3ce3b50e6428ed545f8453c51b193614137c035ab9853f63ae9c82c2ed1d6f9a4aee265238478bb46f468b08442d6cd4d0d49c9e1576bf

C:\Program Files\AVG\Antivirus\locales\fa.pak

MD5 78c7adf045b3d8a05c6f6519154cdef0
SHA1 694fd63b612fba0267e1deab41b8a87ee0649dc6
SHA256 05a98b8dc3b6d5e3a224e17c144d873c3b84c6e704fd2b8dd659e2099789f9a3
SHA512 cea96bd1621550c6108695d51a317bad4054bac9b564e45f2b0a16cea328be15475cf2ec033c33106a184215fe7180fdbbbfab709b782f43919f68b976d8cb99

C:\Program Files\AVG\Antivirus\locales\et.pak

MD5 d045af9a8b85c6ac73f60e9fdc16590e
SHA1 874293f1b5d1b6e2641d9dbea59b4e1b8f377752
SHA256 241f3e5286b25864081f50edb93c4693bf001f04d7c7b98f5c4921f768cd7e94
SHA512 b8f9f59f6519c5839d4da668a16062100be75317c4275bbb50e1afc4b6b66ecab7268054682bfdd63c5a71dae8ae00e80eff3eaab161c2e35a3651988ad38413

C:\Program Files\AVG\Antivirus\locales\es.pak

MD5 44c080e276c1c44cde4dee4c576a4358
SHA1 217c766a2ed03b9a9f2f4d1e2c148f10d836cca3
SHA256 85862323a3128490a2c1be66a36480f7eb73a2294d62ef4ff38ae868c034db4f
SHA512 333acd81c4b1fb5f24f0b0b2f5192175586fdd455895bdfd7092425cd877a844aebe3e74aa37060c849c5821fc5174a2471d7db95a6e7098e43e177db70ef92d

C:\Program Files\AVG\Antivirus\locales\es-419.pak

MD5 4861cfbe34644b1aa3a62e0b8a955b28
SHA1 66497635946e50bb17483db226d9d9fa0e80db7c
SHA256 ef0a523bcfa4d3a1b7472947a1f2a0a68e24c628386f7f0056ca4404d82481f1
SHA512 162069b7b670d7bf68ba8276d2ce0b042a4cb0f19f2f66edbc8af00dbd97e084ea9a755b817a82d77e83e63d97e79d7e50eabaf67c880b4aa85b3b6af0cce20d

C:\Program Files\AVG\Antivirus\locales\en-US.pak

MD5 0a70bdd8c0efc740818bdb82993bab85
SHA1 d84b6092664894f42e1afe042abc946a3e0d2e65
SHA256 21fa942a5f4f26996396f0d84807b6f8c01afd5809e2da33487bbecd0a6d13ef
SHA512 085c21045f8fea63a80678069af61e4273420bb6645a833319d58248e61adeee3cfca23edcb7adfc2dd59621184035e3f9e252db8d5840e6f6727e0e05b5fd63

C:\Program Files\AVG\Antivirus\locales\en-GB.pak

MD5 314c49194e366808b2b36253fdbd7714
SHA1 e9e8ba1fcfe91b80e232899c69844282d39d0d23
SHA256 411a729d9288a62780c32d6bf5f4cf0fd8d221ff341ce79c2eca25dfa03c9821
SHA512 5c24bcfb043ec09f31e5c8e640d1bed4932f9560d68256d4409d5d51a8948af3381e2bbf164515a2e35cd7e6ab5349d9fcfb4916bd8d11453da9d69e7cd8f5de

C:\Program Files\AVG\Antivirus\locales\el.pak

MD5 c6009c7b038068b61aa6275b4cb9f860
SHA1 4b77f7f822f4ee15c57dbe873c6f7549fb608028
SHA256 efe6a9d8dcf76f5286bec0496209f59da3de6ab6e355a183b69a7e4bd5d36cc2
SHA512 d3d5eb21caaf361bb92e0453ee1db4ef9349e071be2736589a8d2f5cd587e85d33c7d65f01342758dede0ab0a037b294d7e263d82f60c29e583ea1c30c9f3fa8

C:\Program Files\AVG\Antivirus\locales\de.pak

MD5 6932a8734c0ef9949fe0dc3b2282e16d
SHA1 817c17d5592129b6277075845557148e1e59cc78
SHA256 88581d49e6c83ef74fe4aeed438c0380f321d9eaf3b8ef210d39f8378836a1c1
SHA512 076f2741f28f76fb0da8fa35bb55418874db7e2304dd09afc0cc818b0c5e645831cb0c3ebf97eac474339c584e640f562b4699f54496ebd761e3733777490b6b

C:\Program Files\AVG\Antivirus\locales\da.pak

MD5 f1e5e7dc819670c061902a3daa17daa2
SHA1 583ca07af55f3055ce127b81fd825fe45cb722ca
SHA256 cefdaea7b486364291fad01ff402ab8098e2e13bc73b2bbeac25c8a9daba8df8
SHA512 b8e8e79f052d5165446a8392a4836fd6915cb87cf199c499e9b4e767e6e60e4e94d601420e798ed3b7354c8ca91304b1d062332cfd5016614705aa57462aec83

C:\Program Files\AVG\Antivirus\locales\cs.pak

MD5 0161995c04f022922e5c036d374eceb1
SHA1 5294111882537c10e4ea4df72b3508fbf2d2bc30
SHA256 3f2e5a65ebf8938ff4e9676b12573b23c72501761f1bff4d5ae466b68c85130c
SHA512 c04c549e23d2ff33cc424746f1a1a6d70e4660612d857070810c7ad9c7021aace09acf62e0248f139acfa2369fc511b4f329e14f3d6126813ff66ee7d44b3611

C:\Program Files\AVG\Antivirus\locales\ca.pak

MD5 8fcb9f17f850f0dcffa2512236e25790
SHA1 429b36872ed7b655d745fd8efba6b5239ad340a0
SHA256 c79b92ba066cf5414fc37795e6a76e966c23143bd3c48c0cf5f61aedd5cdafef
SHA512 1553cbd7fa4fc87341bfca39cf58e8834d6c3100571e34bcd5a1961884776abb69592c627cef414b918e8cd4bd709a83c4af2bed5d5c4a84b9509e896b8fbf42

C:\Program Files\AVG\Antivirus\locales\bn.pak

MD5 c7b9e899ee655e2cec7a49b9cb2300a2
SHA1 5c471604d1a755a393f1ca2f1acafd6e014792be
SHA256 522e7a2e1f7d8e49b5632759cb5dae269578edc522689bdbcb23b74750f53e77
SHA512 b56e1afb9c3f67ce891eb0215a68cb3588a82fe51e0dd2f9b18335f2312bad156cb3be032caf641a7a39ddc0a41038f96f7b36469ca327051bfcda620145f6df

C:\Program Files\AVG\Antivirus\locales\bg.pak

MD5 dec816e6e65e705be74917f249e43fd9
SHA1 6f90b68e6b1d904b3e41892cdab1923f4f868376
SHA256 ea323024091753a5576a343e46d19bfbf9939122bdde53d91d7dfdbbea5a9c68
SHA512 d21fcaf4fe07f4cc6c369d7cc5a1bf06de5ddf7e2433310b45b53aac340259f5276e1e86e15591ede8d4d5c05d719871d586942664ffc76eba1712ef3145395b

C:\Program Files\AVG\Antivirus\locales\ar.pak

MD5 98230353d1463eee93d64a4856f7008a
SHA1 10d98e7d0e095dcd947fbe0b8d771ed1574e3ca0
SHA256 36f41a346ed07708ce12d54e5a4c4612f49a375155d1655a23c52256838617cf
SHA512 53b9d1b50bb79e245d74dd30cf66da4715c81ef63af3d569eace6329eec00356eacb7357271778e837b60fee08deba2ba445b8ea74619a955bfa2b8e5c05358c

C:\Program Files\AVG\Antivirus\locales\am.pak

MD5 ad4acdfe76c998b945642b9af2756ea8
SHA1 025ea273d63fa71f3c10c578b1a3f657dbdb3f96
SHA256 4dbde72ecf65ac84b6c01251d37c425c4cedc00e3cd9cd40c0bd5a6081359b64
SHA512 81f71679d2ee24ef8124e81f39f49b113a157c88af093a6f571c34b67d19933c200d095ab65ce099000f132fd2a04a44829047816c1e53a42ed4c5b517e90fc3

C:\Program Files\AVG\Antivirus\icudtl.dat

MD5 80a7528515595d8b0bf99a477a7eff0d
SHA1 fde9a195fc5a6a23ec82b8594f958cfcf3159437
SHA256 6e0b6b0d9e14c905f2278dbf25b7bb58cc0622b7680e3b6ff617a1d42348736b
SHA512 c8df47a00f7b2472d272a26b3600b7e82be7ca22526d6453901ff06370b3abb66328655868db9d4e0a11dcba02e3788cc4883261fd9a7d3e521577dde1b88459

C:\Program Files\AVG\Antivirus\resources.pak

MD5 bad3a80c0bbbda22c237407afe0a82a4
SHA1 00cfd3358c40c549d4709f4530de277ec349edda
SHA256 59a0ad87f4aa0bbfc2d1462ca7d5e760e2f6f2911c6c31f0fd450a9bea7dc684
SHA512 110a39d7c26745167d31edfbb065818afc68cf6bab273f967852024bbf7c4566920f93eb207c4f17105386f18cd9289d35ac66eef3c1ed5f90e5628568222fb7

C:\Program Files\AVG\Antivirus\chrome_200_percent.pak

MD5 8f6d29ec5f29c02e8d7188366f0ef3ae
SHA1 7451e3cc4a7de1a53987c5cadf2a759269d99a40
SHA256 3e116ffe2f55faa2c2b96aee4da637e6424cb48bab27d9f94a958530f840c673
SHA512 418be962c4dcf92423b2bb780d3a7476756e16aa1b670167ed3631bbf7ad4edb1d35a04c5f8f685c5eb79edfe5a247403d25c6ef18f43eadf1192603ddb2b386

C:\Program Files\AVG\Antivirus\chrome_100_percent.pak

MD5 8ebb97efd9cc5bd6c500ef6c7a9fa406
SHA1 8e285f1ffd650c87dc4a0ec26df418acc1fc8821
SHA256 aaaff8d6c9f0307c4eb3dda812f566300073414de002bcefb273a7be57f9e69e
SHA512 f93b72eb950d924b66bdd44713b631409003feef26f6146ef366f05312459ba2d2c4c720b3ad13594c8ee6c3734c53e4d1295eea064c03be313ae2f541105c89

C:\Program Files\AVG\Antivirus\Inf\x64\avgVmm.sys

MD5 82aba52357a10649a60a1f3d33a4fd73
SHA1 c157cbeb4e4f50460c7c6fa5e898667734fb7ae4
SHA256 dcc6f92e0960cfc8b1726f30aa6c50469497a528f50906fc110c4b324d27d042
SHA512 4d90df2da59f41bd17ee0b295dd4b8483853fa343a23e67bd1d8e55a44e9c1f2821ea37b23421d1caf3106b8d2fa528025f719defdf527f907a415c1d95d24b7

C:\Program Files\AVG\Antivirus\aswVmm.dll

MD5 f69c01326711899217d782540148ee80
SHA1 ec37e301e2cea24f491518f4e72db12cabb0cd20
SHA256 3238a23a18e7fab8eccb2006f9e8b5291e1440e64aa6d0787b88023d769e1797
SHA512 69b5e46ec9819fdbe0659f5da581d8218cb3ada5115333e1326c756e2e0f56037dd1e1175224247edcc2f16f294907d9623a826e76284a97bcdf80949d440d63

C:\Program Files\AVG\Antivirus\avgToolsSvc.exe

MD5 6dc3ca53831036b4faeae30287c9c3fc
SHA1 6ccbdc7bf8e05ba53b6246badfa6161c8c485b97
SHA256 13970e11f277953dff517a70518ecec15a793cfdf4ee971090258d2ba5a6ff90
SHA512 bca294131ec1e248b8e7870ca0689cd1a64ea99640900074224aa849610db4f59520f5b342a9f4316a5a192cac656c86da7048edfc0593cd1a79891d295a5180

C:\Program Files\AVG\Antivirus\overseer.exe

MD5 c12dc4ebfa2065cc07afc6b8e7d73511
SHA1 e92bfa2b220e812015696b35e800c708be6dd726
SHA256 71ecd224d0dca8bb8a86703cf577a3f744a83013375aec2bcd760a9be56ee82b
SHA512 aed573d618c7f1a99feca672b4b3c91c259aa6ec0e31ff889d6a33406ecb2d6c49b54a88b9e5eb1b1cddc0ac375081379134731a9486c2801151073bc97a2233

C:\Program Files\AVG\Antivirus\SetupInf.exe

MD5 56177f7cab3f1f1e90529cdfc545aea9
SHA1 4e0d1115d284ca94baa5d65e70102d43b7e84d10
SHA256 5ff510799d23779a8571b0178345b76c908d3447354663e53fb31528268dea27
SHA512 6860d23b010614ad45a71ae0dfdd732c283121a82e754bb10b88afb6ac34584e90ce5e50726889a1f8d150160e1fff8ed69cab65781d201ee33b66bc6ce1b612

C:\Program Files\AVG\Antivirus\AvDump.exe

MD5 3f7f506ebacb648a89cf026606178aa0
SHA1 e063c73315ace3e0a7d19c3eb81450d59dd822b0
SHA256 779f0d3b683e75c8e8129acd0b9a0f5b1aeca6577401273180bc6390cdb65b37
SHA512 911bd06c4a53dbcc7ae12b85d9e080bfcdf3329199ea44806f0254c03819f5b10bd2035dc1dac233d4bc24a6fef0771085b33bb7a6909f25ebd682cf85d91bf0

C:\Program Files\AVG\Antivirus\AvBugReport.exe

MD5 cc5cc076ff004d3bc0868a50ff1544e5
SHA1 f61c8855a748beabc981ca2799de575043a1ad2c
SHA256 d57e25e87e03ee81f287ef68f012c1c0b106d0f917565db4aa570664994145ab
SHA512 e2528262ac3a69bd6a1e14572e3382e0f830ecabadbc465efc5aa7e66b66f63e803aa91b08d146e31f613236b7ba51cca825e70502ec1fa012899fc1f5b9ab57

C:\Program Files\AVG\Antivirus\RegSvr.exe

MD5 33b10188df2dac65e565fc3ec9624690
SHA1 6237799dcc12cb2c4ee47cf404538bbc0d062a3d
SHA256 ccce0fadd75a9a8e1fef54a34c2ff9c415980dda015c7d14fe8ab8b0a049dbfe
SHA512 72cdc3029fe6c99e8829dcd007f27898b8ae25a1a276a7ae6df44fa68eaa659880943e2a00a31d581243a8eb7f04ffca3c96e6243d2f7c7adeec76862b95a49c

C:\Program Files\AVG\Antivirus\aswRunDll.exe

MD5 86d2bc4668bda438e467dcbfe52059d2
SHA1 d9b9d1294610fa1d9c3dcf22d145682c49da3855
SHA256 3308dea3ab1ec94ba37958306858ad7597d6057a32eb480774d5866a3e5ad117
SHA512 65cfbe15ded78822a4da83f14ae40d2b5737353b27a0fcf8d505613cce67ea7c9d803f01117e8e43460a5dd8e9fa965dc33d25451a3ec8acd8fbd2b3eab7ba4a

C:\Program Files\AVG\Antivirus\x86\AvDump.exe

MD5 e2b679d1cba4a1514396c27ede2049ba
SHA1 f40a13449d3dd90a39b220202cd8bbd1913d5e57
SHA256 7859ca7f7dffde9f6ef338568a37f3eb3a794c235e41776b767c5a6c7a36efa8
SHA512 311d57ff49442305a146c43bf9cfc87490389d1719f2f07fa1420a00e5b56f174e398edb1d463ba4e92697ec370d4b769f4823d9c0d99cea59533d00ffca347a

C:\Program Files\AVG\Antivirus\x86\aswRunDll.exe

MD5 681e8c02f3042e06107834bede0f940e
SHA1 78aae7d1abe455a4a1ca9c252f07a5e32e3bc405
SHA256 fdbe4f821cf2d4cbf5b0a428d8f55be42f37a654e119164b8a84ce08400be633
SHA512 496e5c404bdafb60d0d29f1bf295b6269491b619495fac7774fa7ed05b6cf8bc2d5d006fbe95cb249ca126ca2abf7af5c56443ba12f5ef484112f69b5ea1d0a7

C:\Program Files\AVG\Antivirus\x86\RegSvr.exe

MD5 ee90fb4b41021907bbe5b773a70e2605
SHA1 e85fa5e8cc80e084ad6f844590321087417e333d
SHA256 f6aacc95a43feb1e2c5ad6bc5ab39df65e3587d4abef306d4785b18165b8ba5e
SHA512 d78954d4c737fa84eb301cf9aab4a18060d604c79764a8826674e4c47abc80846b54b7a96668ca4d6e3fab5563d836e34391d2eb5aeed157acd5f7dc537164af

C:\Program Files\AVG\Antivirus\Inf\x64\avgStm.sys

MD5 051242c5593c91fc99039eb589c35763
SHA1 685a19062d55644d3f4b375bc150dcb07673b8d5
SHA256 9e4adbc6c1613de62eb3a2b916a49e4867c8ba4b8ee3df1bb21138cf7a4467b1
SHA512 15e57bbf3fd47852d8f684797440bf40e9cae8e30b3b5939f5eb9b0f82494897616ddac436dafce6b2c326fa2d7a4f4de601f743c953109bb47a25b5505cec0e

C:\Program Files\AVG\Antivirus\aswwinamapi.dll

MD5 4b2aa3f145cd24fe5c449778bac4d589
SHA1 06909f3382d15ed88a952d526ce93cfccf2f4338
SHA256 93b762726f6bf2cfe1cb5706ed7a83dcadcee95de2baa05af93923293e361e87
SHA512 254c632b694bec3be3b0a16a3b462cd33456f6a3ff5f91df823e5f05aaae5a88568f10f61fb13218bf49bb83f0168514edc0ce7778e35c221817546447a1556c

C:\Program Files\AVG\Antivirus\aswsecapi.dll

MD5 a507ece37d3daff4d675d21e42479f1c
SHA1 a04d3d3e4f8ec9afe391f14b8e5853818926f775
SHA256 13c70d940d443fef346c0921299aaf570776024c072d03a8cfd516e35b48a49c
SHA512 bd9430298fe51064396ead70c980e1413640fd3eb72be50e56e5c9b8a2db235afe0711a8c1c38899b8a6762add914b6dfac78045186c2976b7a16823ef3e8e85

C:\Program Files\AVG\Antivirus\aswremoval.dll

MD5 eeab4c445a733c7a48bab3d8f3a2d702
SHA1 503155c240c57af6ddc393501d0e00201e927f62
SHA256 5c4247fcb26a9941fb2e00f07b4effc535a248bd0ec7181f6467ba71b87682c0
SHA512 4c81c37ace738172bbd25cdcaf17c421c31fa28584bd034e70ab62baf6d650f9ce4d07520cf202ad5f9cf6ba6f5d5c3f4b2d1a30a5ee200af5832671487c13c1

C:\Program Files\AVG\Antivirus\aswpsic.dll

MD5 78d0b63528eacc2b0c1c9a233b08c711
SHA1 4f71763f62df6771070889421312880846f45243
SHA256 9a10ca35d64f158a3df76a34b7d0e74a66e14fb3131ee12a0fd0e77f8949c9f5
SHA512 f2fd67c2feae5e984afdf7841f616be5706c1f3a96a8eda1046cd92664ccf8ac1417312400e7c253f571d9d16b2b2443f842616ed69998676f02c0cfda464cbe

C:\Program Files\AVG\Antivirus\aswntsqlite.dll

MD5 522945e6ef68ad6674b530b1e72669f4
SHA1 676d9767f43de97b2e587bfc190d4232800f915a
SHA256 b5f69be854e7caeca640497eab64e4aa72f6cf0f7a3605a25ab8bbdec587783b
SHA512 0cb0f28adbc4a24ca5d36af4d44b647874e91ea9d03872ab188efaed35d8b48cd7ff465fdda6227f098cc3009878ed9287fd10bc4e2c01c15d7066bff3ebdb89

C:\Program Files\AVG\Antivirus\aswdetallocator.dll

MD5 0424809c645caa4e3684374798211bc4
SHA1 acf18e2bce1ebb02de312c8a07d6a43d642f6412
SHA256 e305f53ee3e1b1165118a51af91a05933b46b19e2c4c7c0c256a7ea9dcbc8be6
SHA512 4687254ec97dfab7da7786544c0083d9bb7299a977343111fa9698f3d861b23f016d613e116ec5afc09a55705f1f8da49ae11ab0c33aa288e69f8df1a1de329e

C:\Program Files\AVG\Antivirus\aswcomm.dll

MD5 b211133549c6c55b81f3476aaca45fda
SHA1 cd547cde3b31341dfdf09b8e24eed688064f5a8d
SHA256 3bc9341d21756d2469d796d2a8537aaff8a7dc37916634b4242f01456d9ab2bf
SHA512 476b12a44ff0b31b02a41715e4d070eca16056107b037933223b0c951e38ac5da2a2f70f8d32b7bc049835457a956aaa1b7fbebc9b789a061fd3643aa262690e

C:\Program Files\AVG\Antivirus\aswavdetection.dll

MD5 ca118c8fccf3dbe64c8bdbbbf6024352
SHA1 c02fda5bede70f7b15b3497aed5e9470c1e2012c
SHA256 914f3e019ae77f7734d730f5193fad1adaffd1ca61efb14397018a7b3247946f
SHA512 55d0c3ee0bedde12f5ed0c1efe8f0aefbe8fceb4e254a503fbb60c6c57c08e4391a25418f844a5aa04834c45c649f81409008ac6816f420d6ee725a113771e6a

C:\Program Files\AVG\Antivirus\Inf\x64\avgbuniv.sys

MD5 4e3a26e2a064258bd9ba89e2bb5e2084
SHA1 e15d8cd2ae6473cf7a7d0ef961e82ae1bfde7b5e
SHA256 360020b9c634f37690eb6dd6838b5452b8b6f9c5f3d9d6bde80cbfa06092086c
SHA512 57e303a83d0ca0ea719fd96fc8cfdb5860ce021be7de14cd0a50b02d2cc099b6661286d85f5564207e5b093fae2536e99ff903277f953ebf5b205ce4099b98bb

C:\Program Files\AVG\Antivirus\Inf\x64\avgbidsh.sys

MD5 0ca5ac279ab4eef3d288ac5e57cc1bd1
SHA1 5d525250f11b0b2beb39eb4a82018faad33e80b1
SHA256 b658ec1c537c7b4ba9278e1d7e7c93b31236ab4697eba7f6612918d5b9c724d9
SHA512 6b3da553276ac2328d6072f4e18a16f894aa95d793a9c0506b21c5f115b252de8a8ba5d82d2d4a58bb6cf22267195456f372d3e8ef08ad36b48a66a3f902f932

C:\Program Files\AVG\Antivirus\Inf\x64\avgElam.sys

MD5 06921382dbbba9a6096f8defd402a904
SHA1 29850227cc31941efaa10a9d5d3f69efa41c8363
SHA256 ba8fe3a5bd8a2e6cccb8a4c95f2e0898d64946106a1785fe3d1b9a23827816fe
SHA512 a51ae4ea30193ec00ece7500c6e5a6e491e7fa2aac9a553424ab02939a7e19a6f31bba8d00246c4728778c5e656b4bc3d66d6eecc1beacfe89611846c1567ff1

C:\Program Files\AVG\Antivirus\Inf\x64\avgRvrt.sys

MD5 a7e327b842a110a99a8fc6619057630e
SHA1 697906377777429c02e8c76400b5c154fa2831a4
SHA256 b246724e4313366d971eb7b492fcb762f5efdb32f57f9160c3cc3d7af18ca1a5
SHA512 0104946c0eb622957b4604febb4a5188d4d2dbe64c492783a49b1012886905af88babafa10b48efddde142c85914f48e0cccd21b8e8182f7d3841d94ed700919

C:\Program Files\AVG\Antivirus\Inf\x64\avgSP.sys

MD5 b335126e0a7bbc939c8e14bd0d4579ff
SHA1 e93c114490a1b0665dbc67cb62c7e5872ea8e8ba
SHA256 87453d604df7a800eb6fa4317f79f48fcad37608b2bcb331d128f8a0e1e24023
SHA512 f89c97d27b8f8629e3d4ea5b07279017e46a0e6c772cb6df699808dfaaa3d3d01ceab1e2b09c76cfa1a3037ffce053b75f4bb53144b104f28a92bb9492b84098

C:\Program Files\AVG\Antivirus\Inf\x64\avgMonFlt.sys

MD5 c5325de86dfec4735ff5a9f737ded4e9
SHA1 4c4cfbd7bc71462d7db72fd2dc784e1c4196226a
SHA256 3d2a172db1bcb089f610b84d26f131168e301f4230d051cd92749dd8f81e944e
SHA512 f7b00a213d93e5cda8331aff5adaec39314e3388d515a94c9bc25bbedbef000501a36bcf3d5bf21db0575aca5bc6bccc99dd4e487f59f888f048c1592c389ef9

C:\ProgramData\AVG\Antivirus\overseer_unattend.xml

MD5 1a90bc8644262cd79e806a222f38e95e
SHA1 0b9dc24a50654a32e0d5974f9f4370bac30a90f1
SHA256 1210aec78a7a836e56e94accf4eea74d5c0f26c2dbb25ae4d6023886ed3c9d64
SHA512 4f67699dc93ee7df09c4657a9fffbeb1f34ac615eea55d169ac03f7f58c50640c968f4215ede9dc59b5660166a9e2392fe10b8f2f68f6b067e9631c94c805941

C:\Program Files\AVG\Antivirus\Inf\x64\avgRdr2.sys

MD5 f2d0a9e9d057a14cc519a1c432da6289
SHA1 b6201cff200c586ab78821b6d9183d01d2a2ee0d
SHA256 db16c9b36067631c4896f064566125bf50ab94ccc3892dcf31c40464d6d95c6e
SHA512 eab693c8eea5accfc8c63b440115b5cff8ead72b415c8156e42c752e59c9e0a32a058a96d66c7e6d4a1d68c77ede07a42797921cc6cbfd0cb3299a35b67d6f1c

C:\Program Files\AVG\Antivirus\protobuf.dll

MD5 6736faaead16ee33f80815d3e6bc2a28
SHA1 54cf9621a63659b609f0ca0c1f7e51d65a73b0a3
SHA256 c43a0d08811e7145bbdaa39548144312d20f6296b7f5fe9ba0b6c414c7279428
SHA512 43bc785e0684f7854997ad3ba99a907a0c95c459eea2c9708062d4944152e42ac5833ca15b762d87341e78dea9f3e05d82b0227c14172d98c7de744e8349b607

C:\Program Files\AVG\Antivirus\libcrypto-3-x64.dll

MD5 cfa0d81774cb0258d4206300c6e7df25
SHA1 9a60645119b22261d6657e4ddf2a76f03f4ac21e
SHA256 7a84cc660cd73891b48710719b2aeb8a7c3fe3146722db96251037623d3738dc
SHA512 6c1e64bcaddcf5b6179ec8877462f11656d38242bcb61d1a96b9bfca7feb09adb86e2545633aa8bd4e39379c01236d663f6c41f868f613fc4d523ffdb7c4d1d9

C:\Program Files\AVG\Antivirus\libssl-3-x64.dll

MD5 4c7c6cdd80e7a6b6cfa875c40d09975c
SHA1 f8c9b049aa6e5c5cf2833104ad648abca8501b34
SHA256 c1e57682c0015bff1a749ddd613e88af05ab7fea0c31e5712227e294db456d5d
SHA512 7b66c1ee01b10db6f259e66a94a6a0b90f1a12a76877ae5966dcbdd28a54595babd3544aa2c8b7058c5625552514673df431cee1458b36118b9c9c48c6e01906

C:\Program Files\AVG\Antivirus\Inf\x64\avgNetHub.sys

MD5 70c5f4f61f4a48348d37a57af54b8f54
SHA1 03950e0631159d413f83dd2d6e26907c84759d40
SHA256 019c1f98ce8d5edbb6252243b25782c1f1472c5c10d6564c7cc60750f878c413
SHA512 ef0d77fd8965ac79f51bb038fd19a9ebb1b3e7f3bc7dd307ecc5ba2ce7d8d3ec98546ccc0bc272c32c9129b525fd5756b1a55c3e5ac2146207b1329a05165af5

C:\Program Files\AVG\Antivirus\Inf\x64\avgKbd.sys

MD5 72c767a940dbffcdf845aa34deab327c
SHA1 af6a4d9d13172d0c8b2828b83d7812bb683c86ee
SHA256 fa59c78091d04643947c7d7fcd25a0c5cd5f8667aff0d44cb12a1a24bbd1d1a3
SHA512 b7e8c474460f2478e1d243d0c2b58222aa7c3c370ac6f16700eb6930a77156a41769949168f08724e08ef6211c38b1aefea0dee397ae15d42d75479daf0da2a6

C:\Program Files\AVG\Antivirus\jsbridge.dll

MD5 e80adb5927eaa9109cd83ac2fad0210e
SHA1 67c3e9ce6543bc27cc36a7051a821dd9e9b01176
SHA256 473ef3f18666af299fd0fd7a24ee3b7cde0fa1f528773c091e056cba0a18dea3
SHA512 73130e84d39a158a77cd95d7dc79ab797ad339754f58dfb7da9fdcf79ad063e41c5bbde7074b81513bad91b2e53416eb7c07cb403b0065b9e6c8f41f6d78323f

C:\Program Files\AVG\Antivirus\AVGUI.exe

MD5 7ed464b50321093a1a629ea066a8d25d
SHA1 b70639fc9a40180d0a85b310aa01e14a6236225c
SHA256 ea5c48e02feb63a036f9e362a2d3bd26ccd6fc89314e7b1025ed5c88ddc20b50
SHA512 b0292ed43dd68579146b8c79cfe63e0328a74f8714d809cf8ebdc38cfe553a05d51d74ae9c175437712f874d96717cf4375b20526248068778d40c56c38008e3

C:\Program Files\AVG\Antivirus\AvLaunch.exe

MD5 0a9511c64618426ad0f77733b181835b
SHA1 36f8019cb20fafa9b64f9674f467dfe196011caf
SHA256 51c0ade267ce65e351b2abf86e2c86a472187b07f2a4af2ee2bb120484a2dd37
SHA512 e93391cd756ea20d803e4a0882b8e2fb1245f0435054448a95ee954182e93603d8b6cb58e640f2db882c264376c644c735925eb12d9c60270bb2e3676e0b968d

C:\Program Files\AVG\Antivirus\HTMLayout.dll

MD5 b39614a52de7353db442a5e990d8b007
SHA1 6b9e95a06905267729e721167f99982033a3fa11
SHA256 22a35a503c3060365c5107bb0f6b17113cca77f9c76993904140f616858ea10f
SHA512 5ad0217ef70eb3baba368ccb5d05c54a479351be706ac95b268ee7dc1aa24ea00674134dc60c143bcbe5cf21d6759c18e965a6bd89bef7d0cc20f77967f56b7c

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\vcruntime140_threads.dll

MD5 7f9531927e58fe32981d195625a17e2e
SHA1 c2831c6c980e9ffd05f450302cf81af11050c300
SHA256 88241636a8d3b8ab2af9d3b3b9e40cad4a17896f87c468ce5f177724656b7340
SHA512 92bab7dd259a9509ca2cb7ed82dee4de77a95780b9acbf36f657666630e9790dcfae51b3efe8a10563edd0ca8a29ba9c9c8138a740240ea106cbdebf61a10bed

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\vcruntime140.dll

MD5 8a090e342a1cfc590b468b61e0c6e23a
SHA1 2ce5c404d0e926d3829565a819142657374271c7
SHA256 c432d3c6a02d636c4e66cb97bb738655efb1786a89d2ef446cd0aaedc7f6fb7b
SHA512 50ea6a9241dbbc52f93703cf29d2024ad49efd8f69f8552e493039640f2d0e625bd5c038e942079c0e291784674d531ea256c2556c637ce292ec6de8c417292a

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\vccorlib140.dll

MD5 8ff7f31d203d158ca42f0bb4fa077587
SHA1 721443995a06600be6db636dbbd44767f2d2a349
SHA256 a5aad3483ab030cce01bf33f5a72da627755f13596bf3fe72db766463d9acc57
SHA512 a65478de5e6fa74723f66af35c3c24762e0ebddfd575e4bd7e868233a846e7813454d0542670159b91c74978a1db667d23229d4605080cbf6e96c3227ca2d7e3

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\ucrtbase.dll

MD5 b65aa2646529e9c1de570d28c2e37c2b
SHA1 0c0516631b589a6d87ae53442a7ecb8b277127ee
SHA256 783aad71c976972def8a34579123439cfebff071901d97bc91033a05d9c2068f
SHA512 4cc7496c2c0e18e10c0d3783892b0ba15c1241fabb2ffd168e981f60e3993fcc4cda07f2ae9afec4869f7d06928fa606be53544a109a3d78067cfeef033ba009

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140_codecvt_ids.dll

MD5 0c94dee60cf90c0950680ab6aa2c2b91
SHA1 d7051e98366d14a440111ffcd5b28379f8c67806
SHA256 ed53b64f64fc8371f8ef39b4366449aa764eaae971de628aa2b09b3a6847216b
SHA512 0cc66c7f194ddc4c0bdc9cff0709c75455a35b6c5ba78ab5d3e7093ab9388336755850f3567a93c96cc66d7376126a45ec8e0cce370518346647d1b18dbe67d9

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140_atomic_wait.dll

MD5 cc556ffc1ee06111ba305967b089779b
SHA1 9b515a2f8e7dcf570f040b19a64b36166e17d93f
SHA256 be242784fa947e505ab9d79a23d7ae96e5979af03bc51297ae840517942f8675
SHA512 51fdf6c92ac6cc06b04092a0b1f9d391ed36d8ce0b2b123fff9d228875bd91b55dc218615f757f06f34c11d2527344f21c7db48a7b0502685bf6f77650d240a2

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140_2.dll

MD5 1b73cbc1a51c5c2e61072729535e3148
SHA1 52f3494af0555caeaae477173dbd7a8c171997ee
SHA256 4279fe19e9d88988a93f5d334518b204a8956543f84467168d5c63d490337593
SHA512 9898d2952dc3cadfafdacd6d281d8e1614f6a8ca88448e52d393fc540e543f810d434e8eb74a640232f83c4ee2a07e8b37184f59adcfc9c8551cd0e061cb4460

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140_1.dll

MD5 8ecd8aea1af9dcb3bff28b1d4e0795d4
SHA1 acd125327614726c4069fcc4cde256d276f57ef4
SHA256 ec4743a6044224132ffc5f20c25bd7e36dea25f7ea9baecec7db40b0904dd7de
SHA512 33ba68e27fc769f0166e72da458244981622ffbfad33ae1015ec73ff83751eae9aebf1aff991247ddc31f0223888f8f03fa9b2b1d6069112ad8e1689e519057c

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140.dll

MD5 0d3e750f8b8882470a74db90de94f814
SHA1 cb07462263379d3f5dd89e2b62ac31a2f7538821
SHA256 5b858fe4a054adb9461cfd12a5f3b8a9622a2eae88bca8dbd7d84a9f972a20b3
SHA512 b5ac0039428d844db36327ce6637d207ab02ad4cd89e0eac361d61393d396d6e2fff76d1007985889ec88d20e9c62ad29363b984b77d791feba588c1ec64f084

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\concrt140.dll

MD5 2126db527717014c6695f9745a480c2e
SHA1 3d564a111a7f5a2a3e9b06ace066931fbecdaf68
SHA256 50c864c13306921277e9c43f0133c754938e96cfa6982879d106b32b4551d984
SHA512 a47423d6ce322d297b0ec222ab8fb7cc46a31f840f412f6da0bd4ee9c40080ce4dcd2b00267de53721e61ba8ea02ee99d366a1047e41805f7feab8c43e4babbf

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-utility-l1-1-0.dll

MD5 b52238936bdf50ab985435a176281f68
SHA1 7bd2be0808c538b6f15f20a9a1228cf4a20adbdd
SHA256 3a23171aac49453f931d69cd55f6ec742243f5835386d9e6b18efad96c2be450
SHA512 36999e6cd50e26b1620fe24ba2dc11a40b25d1d77cc7a0337c7a3f65b16383fdb224e179392a215e6dae846e8bda6acb3e027445fd334e26e34278a397452f6e

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-time-l1-1-0.dll

MD5 0713775484e95e5bebcbe807d53488f8
SHA1 222dcab5f38d72971fad641201ba3ff9a2a0ecdc
SHA256 e63a096b1ae68a774b1f1afc51b5dbef1a5ac2d79dccc1104112c22841e3e378
SHA512 f19d30d37718de3edba15358888b13afd9f9dfe4bdf37bdeb3204fb6cdeec3f249e388d06a89b21dd4a0da9d1cd70bc4f5244f287a4d907dc0a786df7ee97097

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll

MD5 841e4ff9bb531b52218392db1d7cfbe4
SHA1 5607c2a987436195f1e241a0b29e8fb1f734102f
SHA256 4da31e582dc47d46132cc73ad34d5b87dddd2338495ceb2772f7e103a9a32ebc
SHA512 93232073d95870043994c752318f9b319db508fff452e4aa0b8e42e66d13623803be4537e1798dd05177b7427175d989c8e49a379fd932297e161d461bae268b

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll

MD5 85444893a6553a4dd26150a68fd373d8
SHA1 ad9b46da45366f13a22173b06e22a45a211e99ec
SHA256 65f2a93490c845833541de1376d5bb65e6e864a1a9232f58f86a7a84408508c9
SHA512 ad56f71d0dc6d2dc5dd46eaa00247bd209403014648fb9c8f98937fc8e36fc85c0107365d2f6ba4f6d530f340278e0205d94bafebc78d10201e71dbb5d4c36d6

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll

MD5 90340ac74d22b9a67237ea52a4dc1c75
SHA1 75d44b240afd4198b0f3b7256a4a9533ad1ba73f
SHA256 fd48da616f2d17054bcab961239431d99c247586f96bac69aac5b704ea694352
SHA512 6f52ae85b4d9ab8516d72bb1662ac9cf602092fc61ea78bd85af05047c70a0adc5edb67266032f12a86601c983015276f15a457935f5b6143dc80d335351e5ec

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-process-l1-1-0.dll

MD5 0444624f30e8030d84bb169fc2410444
SHA1 05c1cd844368ae2c113585b477f91507430d72a0
SHA256 0b87358da7882fed313facee92bb8f4e45299c63ca557fdfba1478b364575fc5
SHA512 648a79fd30a73582907c7ca008be5ef78e6e72aa22478448721c4c5bad45a45bf76570d24e061dfae5e535666e79154f5f9f66a08746313620a17582e3998304

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-private-l1-1-0.dll

MD5 3b07abbe272e9b9e2989e2d6a400fa53
SHA1 f925e5e58377dcdc13b6d80ff22c775e2334e372
SHA256 a170d9851a1427066d1fd61c32a9ae4b9545aa926be55da7e7d94275be281dc8
SHA512 14762c984aa6736b1330b1f0b296622fc1ce3ac79108c0bfee793a51131deacd09b494e8c851c6e437a84871a864dd65389657df8b2256f931e3c60a61fade8b

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-multibyte-l1-1-0.dll

MD5 7442e7059f712705d4b97699bf56de35
SHA1 f924088428eda3b76030091cf59ad38afb590118
SHA256 f822289ea5a9b0ccf9777a72bc8b73ce68b596fcca811e0cff0adc4031056b20
SHA512 dec6228063bbab561ae0c02cbcbab3d08c15f261758405d8a709707a180a09af9c462b0b382b700177f285a1ce3bf7e71e093f9031d15f932120fbfd396aa851

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-math-l1-1-0.dll

MD5 46aaecdb8d337980c82cb2714a985986
SHA1 22104d2272b592a344df5b575fcff83ca0e4b161
SHA256 34457a002e90a590b516bbf58530cdddbb618a46bb3e764e18167c44934917dc
SHA512 33c91058a693b82f1457d49bba2e209a90b825927be89e38523671ac16f4fef208b98efa980a3e11185baa4df6d7639d447bf30e19dc91b76f04ee61b6169bee

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-locale-l1-1-0.dll

MD5 592a65b922d4cd052bae1957be801a4f
SHA1 8371486ce1b38e692c0abc4a2a9e0c3e1945bb89
SHA256 d78e74087d151454365adf6239967c8ecebe85b1c6c6d3f59e70f0980028b1e7
SHA512 0837209e518d5db76ceb8128dd49cf03b8f0d11526630ad20c716ade1e02df1b39a8440d20ee20b488c6d6180c155d00a9cbbd311fc50f4803a8b95d4a545726

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll

MD5 0651bcd9acadac1d50653be35378a82c
SHA1 5d1b2233c7acb3915d33f7b29cc2f0cbf34ea1ad
SHA256 fcf66176b6f7ab86f98f38d5662f61fa61ad3f1e59740d8a1df0e1072248cf6d
SHA512 1ce05989181faa8d291bb0df34bb4e93f2f576187cf2d0c5110988ce17e6a682d815297fcc9fd174bc1791713fb07b616ed952729923abf8c06b8b8f6d71d82e

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 d1f28f796bacea3d58eca271fd128758
SHA1 934efde030a54a441c342af18ab5275e5facd0e8
SHA256 b8d3d45141ad57d917b25d2491a07f20c77b1dfd047e203e26dad591c40b225a
SHA512 4b6ada7f10a4a660c3b6ac0fd81a41c680bd6752eb1a70da08510feb10fbf2b7d5ee177a94d5093239914eea79114097329a64067a72068a8baea8a9963e3901

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-environment-l1-1-0.dll

MD5 490c63e6b1aba9a525404067ce3c20b6
SHA1 04997f8a146284f8369c7db6204949658d6d7180
SHA256 c5131d1abd188d009e72b8c6474c74a262b7b8ec504470385f7f69428e7ae0e7
SHA512 245c4e2545e7eb5462e20e12d8092cdaba24d48e6c53d02f3eec586de17eb9cb6c15cea204a18deeea3cc8668c8afbe9f35b0fc1e751d2f515edd18ae149d275

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-convert-l1-1-0.dll

MD5 03c2c3d48cba89a77a8c06158056aaa8
SHA1 3cf294991250721c2100288d4dbcb0343cc04bf2
SHA256 43e0c37da7bc6b2786f95765f14177651bea534ca4d1d966c79fc301a55ad5df
SHA512 bd9787ec2cf87f8c790db18724a5cc10d1a6de005fa8cc6a74733521bb11251bd0d026af9468e98b616a6d8212cb41c3da102248e105a4b312d7b068e9c407d0

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-conio-l1-1-0.dll

MD5 410fb7adfc54094b95609747a5376472
SHA1 e2e79f589a2e71009d9947bb02f05b877e208266
SHA256 77f2e7e09fe542ea78f4f6f23440014461074b993e50bf75d02b2c6571f5d696
SHA512 57fc04e4c770766ee9c2cdf7ec166792fb4164d7657fbbb6a6ec74a5073de953860b7c1d5754b28b61a83b7bb1cc0a1417a2f13c246aa06044045687b207bddc

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\API-MS-Win-core-xstate-l2-1-0.dll

MD5 b685358b3d0f37b68a24a6862f2ab63c
SHA1 b98d6706b7c922a2c93a75280e599361502697d1
SHA256 7cf73e4f69b3dfd89f3b24167f2f421b17537f3a4e707c63c675457b4fbf850b
SHA512 965580bfab334a217625e64dc5ab8622dcd18e5377453252b0c40c8e171040411a8916145f98e1bbe7476ad140562ea52ba148bf584d3389a07c2654d122e9b4

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-util-l1-1-0.dll

MD5 b179b9f02a2a42a92c8eee8722d03745
SHA1 86021ffb09e59a781e96158c8f5fd7b63ef950e2
SHA256 9c57a5fbaa0a57530b988a4aada32e378b1cbd1fe368b90e147f12069c8ae7bc
SHA512 4fa0ba86b83d4d3ee041772cc59c17407d02eef04385ad9c6d63547fd9e039a90d5a161b9acee7af9defce761ff47e288207f60b2b81a28cebe73ee1d68f0482

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-timezone-l1-1-0.dll

MD5 2a21692ef3a54e5f4a016a3a1767a7d9
SHA1 9890261f7cc42d660371c1b9d3a96c09b1e48783
SHA256 01f6b2760031ed0d521e8d972a6e7b4aa05393934a37266c3f9374042cc97b3b
SHA512 7ee03077c29867a717245bbcc1f4c7afc425c5e248c7c70f884e3ad0bc0267f95b94ea2f47e3554b2d189160d56ba4a6924399bc80201fde24cbc943894e60af

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-sysinfo-l1-1-0.dll

MD5 7ebb75a1000e52570ca55c35dfc7bd6c
SHA1 764dc860173990e451f6aeb6fd9b0164a86e447e
SHA256 2b151cce07a4d9c8507a1c547fdcb6ad904f9ebeeee71439d6151eeee287984f
SHA512 6d9c127cb35c122cb028eb9e8e7cdb466dc7b429ae8a13ec818df96917120f5e1f47902ecb3ecce9ddb1379029c63db3b6504d83dac8b6342484124902672c09

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll

MD5 364d65fe7f976fd00702f5bd63eea9b3
SHA1 e40359ed2e2deb198caefedc27acf8c7715fc80e
SHA256 85fd25863a60e7c627494dcf14b169480023c0b8e4682a0e495f4f7389407149
SHA512 dfbc7b8660a7b96135ce0b35c8f2f576e536e8f8bfb53ee268611fabb4ddc4c53fe06a1a9e81ff26a8e10dafc40eee5d579a2bd1e19d7517bf6f089c605ece6c

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-synch-l1-1-0.dll

MD5 c748312b0f6dfa5440bfecbd094f9180
SHA1 d991110deb52177634630ab6165e195ea62ab1bd
SHA256 7966a70a6113a131c563914f8cc7acfd8b8922d8ef1ddb2a18caede076f1eca5
SHA512 c5554ea1436d27ff336d7e25f6f68d485c65d916389213cb9c33df2622cf08314411ce941482c03a251e214e2faa72abd266e2ccd444c95c65f12f78eda5a830

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-string-l1-1-0.dll

MD5 796e70f25faf0353eba92c001569c976
SHA1 2b427d0ad6e6ada06c012860a532da24e3f1a8c0
SHA256 9e153dbf1c157a910dfc62d1f1ae6c728ae3d5f2b767c5659a6881cecd35d8f7
SHA512 e0a2b6716add6542de78d409a4986a57a7d2e7d10672a57bc5a44fce3e65e365727cc64e9fb34deceeeec96b544d22b0901605985f5cce7f11341a00f898b56b

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-rtlsupport-l1-1-0.dll

MD5 f04d8cd1c228b2a9321429bc9d72599e
SHA1 6695fc5cbee5c73077c59ef514353a4e2d6485f8
SHA256 498d2f02f5fe0a73cdaa1617be6bf7b2b550ada0537f8b1673c590ea99429c30
SHA512 afa2baa1a7344e795e325cf3b757371978d5e1c2288c31354095f4c30a4d308f2d405fd00b4efa86fef5830930a247dced395f11cab49e6a620df2241abbd069

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-profile-l1-1-0.dll

MD5 5e50911343631e123b2de2d19ad5e2ef
SHA1 48f0330e58e1a17a72bfc9b1283c8eadc96e1ccf
SHA256 b3caf7155167f5d1d4ada4df4764bc78b85032bb769e5ef586fcab27fd681cb5
SHA512 eb6e19b6b51a4422a861615d1f1d0742473e49eb4ff4a2a25c84bc485b9db336f14e3ee83afe8d221d91466ec7ae436b1210288ee3328a2ee0f66addae3be953

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll

MD5 51b851eb7b58ca2c3280def9722a9602
SHA1 75aa3331eb7da58868f700158df56fb49e3c4507
SHA256 9f0d6efb48c7f8c0f001ec30d45558c5d8675c06573eca7c8125a7d5a1db2634
SHA512 e9b0c683b58ecdba5d5132f6808ea2dd85a3db3b0d9690efb54aeee92c29b8b2b4535437d861d2fa2a8033e623aeb4ee0661dd01e17527a74d6002c9926e8783

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-processthreads-l1-1-0.dll

MD5 fc776a56634728a146211939d14187b5
SHA1 f8372701ba9ee1a51ecf4649c74e27d1e996a45a
SHA256 ca2b5493a6699756b3bf63d9bd807b0204419ec3087d02f4bb5c7b01e8fffd4e
SHA512 dd468a46c62e8a5a2ee64332522d5ca5f8093b13722e13cfd996b32b6efc74cc2a8502b44cada19ec0c30027dab400c8567c84937f08ccd989d8a0b75b470a75

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-processenvironment-l1-1-0.dll

MD5 9c46e030383d0f85a113a1f3b7477a77
SHA1 7f762360a7cb9881fa9c153f42f3a39be89db946
SHA256 d08d50eff27e71af2e72655edf22dbdea85346cc14be53c48988a3c039fdf17f
SHA512 6ab0490d9eb82f010dc4bdea8e54b9b760a417a44bb88a7bc74ce7d61833e355cef54712f3340b37fbdf07dbcd83e17295ab546d864ac06e84e0bbb7d8dd8649

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-namedpipe-l1-1-0.dll

MD5 4ee09ce90a33fc4f885539370d3ab11f
SHA1 023fb903cb6ddd95e25f18fd72e1b57b4a5ccff2
SHA256 4b00d5be82d9eae3445b559f4eb1c62eb192f5554b9edad50b09f98fbc65c126
SHA512 afdd5f50fecb5ada09a4d8217f1db396a2501b4ea14db90267ce51e964536a9e7c32cc55b5a8239c357f9146a7f4fa601181b7b8222670550667fae95d55bcf4

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-memory-l1-1-0.dll

MD5 2b3eae5e560be8c87a246d0e8fe3f593
SHA1 8f9563bb72fbea30d37a27c353daceb552279603
SHA256 b858256aa6a926f89714f21790d25e90b7dea5096bd9935454a8b4c7abea736c
SHA512 e33e50380d37f075b8d7fa283d5b4005ccbd7c35af1d11dc6ea4f4529c39571f50114d2c678061daa47f6b36bda9c948ca724acb9aaf9595ed7caaef2b0c0359

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll

MD5 c542c43d910dd6ae2f4a7cffebccf613
SHA1 02086fd8e53fcb3ac20cd4aabd730d46458d698f
SHA256 230da452a8068ff5be158d84618c9d291bf9b8bc878ed5d56318558d52e4966a
SHA512 364aa5a59c10d95c6a93024a443972a06dfaa1693c942bca517700bcddb9372aae1c76bdf35453a5ea256179fa61586922cae7d22f4623135fe7168b5bf04153

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-libraryloader-l1-1-0.dll

MD5 ae1eb2e7a5de49e2950cd2f7892d5513
SHA1 ab7ea36f3c4232f0b3f6036edecffdd4e8603936
SHA256 23fbe7263ca595af627fc37e774fc6fd5f66daecb54e38d48486c9df09e438f4
SHA512 ef919e89dbfe93ea2f45e01913c9b7d1695520f3d0073f2b578ef814e3dd6443bb506e5766d09d41e802f9c2cb4d35778c87f86faa89baf7dce66da787b85418

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-interlocked-l1-1-0.dll

MD5 f6f0270f98f5cf857d1e0667819fc9d6
SHA1 959209e5e068aa2564f4f777e1c8616a9d4cb6a0
SHA256 616ac120e3b9abb6f245a09fc17398bef10c5e6aa617849fe68a89efdcddb7fe
SHA512 1ef69bcf037e2ead4b4c3518a8e8e3c2dd3065049649a6973aaed9300ff6fef4bc2bc25f7d0b92dc4ab5f6a576850537ce9d6e00090af86512d080417eda42c1

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-heap-l1-1-0.dll

MD5 e36e88531f284b1135617b91f73e5ec7
SHA1 dac7d7984c7f906f66a2eadec395207a4fd9a599
SHA256 0c25f2284aec3aa7dcf6432ba9416e2fb289e08bbd996bcddadaabe42e361b46
SHA512 7e2f7095bba85a3d6aa21cd7371b73d9aea6b07d89a82c448a65f3188d9365a0070cf8b5312a3ef0eac1e4a2d79eb3d34dfbd7a16a7d9da19545ea216c195c4d

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-handle-l1-1-0.dll

MD5 0e37f414237e14f395f8914ac2532581
SHA1 2b06c81103d7c94075dd63a8df33b72ffda75d2b
SHA256 3ab7f3707a380352c5aff32c0761c5ff86f358f3683b1dd273da8be18f6521a1
SHA512 3e226dd4a8c2aba7fc81132840e8087bc2fbc11096098345051d6eb1dc724f3960789f7f958d362c6cbf7d58904bf5ec7ac84945730256a50583c41dd2135bda

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll

MD5 320629a907048b64a99ef484417df721
SHA1 0de1886eae33bb5f16de27d647048a92586259d4
SHA256 b5823ce2d6e600eaf4e2b1353600dca0351c46d014f97ac525c3ee9dafb2bf4c
SHA512 6567cd36297cb05ed301e5f7eec87a5f796aeb9fb63ba30cbe73087bbe9539e2dc47a11947c8461cd79ead01052999913143d32ecf4cbdf5833a970e61d5bfc4

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll

MD5 918b087149a2571d9db1eb04878c3603
SHA1 aa1d2c7550df6eddd2e99b44ac9de925888281ad
SHA256 b2546e21336714858d2b03d2532b6955dcd7ff46b30435f6d309d8c39d0dc957
SHA512 07c0d13e505c69985d6354c450887260345dc59468eb82b9b0534d1bd13f5f960d2d56932b204b300ac7e5f0ff7234c5e459de06d0e466fbc3f710fb9551793d

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-file-l1-1-0.dll

MD5 4d0399f0050b13586b8b04f62e95b16b
SHA1 407ca079a3bbe2837203beabf41516fdba776a16
SHA256 420395ac9ab87accb00fa478be0b73b583a42d406d1341d98a77f6189b556998
SHA512 8908cbf7cb7b87fc78a2baa1eb2aef52303e733987891361db07098fb70d776fe936d48221a846787d67adcfbaf30ad93b867d5578b7dd566fe8addc480cda18

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-fibers-l1-1-0.dll

MD5 38646cd15ac25a8d71bab09d5b077338
SHA1 4c153622a3f069480a194bf98add276f9138e168
SHA256 cb9f01af9ba4b50c604633073e4003652f1e99faff93daacd4502d4c08177688
SHA512 43844f5e82c7bf6a485a5411ce19aad3bb0f418852b86bb479f41170d85e04d02eaa76092b84ac7a1abf14b285d66fa2ff891cc9c97bbc18633af14ec44cebb5

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-errorhandling-l1-1-0.dll

MD5 b2eac5c213cc442820167617d568e179
SHA1 9e61baac12e1a536be5e553530db8957ac606d37
SHA256 8b4a9ba2855247adddb4ee1e7f503dad5674ea7bb45015bd69cc83a3332f696b
SHA512 af7a8e6e16b86d4e2aa3141fd41a8c897957486b4d87d8ed14210590e86577e030b4b7c419ed988d22851c5fdf75236c23560fd855ada97a76459c9c93802c83

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-debug-l1-1-0.dll

MD5 1c76698d36fce20d2919e67e3f08bfbd
SHA1 eb85df5d35cad00ee7eda50e8a4eceb2490f9245
SHA256 d95f01fc571294b128d0cfde5e68472b8f6a0b3dd5f0c18b676e3a077df80cc7
SHA512 7b0a9de7a2fab1b969b469f7e7edde93b9ede530080f4090ca0066642ce6bba28023bdb8ac5bd85eae38d918549be7066981a08263a3fe2a657a5cec15c62487

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-datetime-l1-1-0.dll

MD5 bb66dd4c715754bfa99abbcbee3a4449
SHA1 21a9bef9112c1a614bf3d5f6eb2d2f0f17b58531
SHA256 55804126146c7c575add104eec386f161672cb740e765eaaf7ec8707a7cd2af6
SHA512 aa3b8ec6c34ce2d162783595ff3902cc1e8812ead15f2e723feb82fb0202f654d7e1138e4b3f83c7cc0204e15c41a34ad0b1d07fd3bfa609e97c01241271d136

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-console-l1-2-0.dll

MD5 4228b8901e130b70052da8562dc7b5b9
SHA1 5007d4da77465c38d66689312418acbef9c7aace
SHA256 67f4d89f85a61b18ac1f5d6d04f625d64bedb252c219ff9785cd1508876bc718
SHA512 cb42b5a184fe08df207ac391c3e87d44dba15008efe2caaa0774439e8f7df2ec35f63e981d080fdb8fe2f46e8a43ff58a332d6cd241313ce419fa2ea0ac2f40e

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-console-l1-1-0.dll

MD5 cd3ab89fadee9d9ab307f55390798102
SHA1 7f5646953d2a90c1033cfee8d2e6d394b05d0a5b
SHA256 915c296fabf88b9e3b43b5a570a6e8e642071678ac443c555f6e95bee7925bc5
SHA512 5b68fbe6456897695fdbc683dd703c286531e831fa3039ba19bc376ac5f363cd0588a815156b18139b82e64ae5c9d87bee025805658005e46d3fce915a9f332e

C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\avg.local_vc142.crt.manifest

MD5 4dfa6db968c4c50fc1f1e41036572358
SHA1 1f281bdc5210640735775ae1b9e4a70ecee8329c
SHA256 14ad3b0d76e581de26d6516965fc2ff28162cc2027c2b7e18fcd18aef77d8854
SHA512 1c95f5f3da8184e66927ab238f2a533222442be10ff712c095b50b007ba0f8af584f28cc509ccecfd480c03fac47082dfdc4dc27131c2de4ee61afe4aa8ff642

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\vcruntime140_threads.dll

MD5 268036dfa28320d2186b9b21631d443d
SHA1 96fa44f2214af9ede1160e043c7cd31b890b437a
SHA256 edb3ff7cef28496d535e40769625e542dd3e13110c38ce2e3dc1caa8687b892a
SHA512 99ce4bc5798320dd7f736725eb85a98553e277ab93353e1675fb7842bd258bb408a5df7bc530a161d91c1eccfcb510138f98085a80e892c3f54e2e8a723bb841

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\vcruntime140_1.dll

MD5 9410ee0771ff1c2007d9087a8c316a4b
SHA1 3f31b301b5a99a13486ddec08d25646d5ad510db
SHA256 e4e85eea1106d361923995e53a0b961a28d4fb58555f40945003f35e5bf2c273
SHA512 434a32ca6c4fdd8ffeb45d1bdb4d9f3c1b1259a1260ae66eb241f8bd63524cd1a3ec29d5eefa2d2f266dd740273e69b6bb8a7771badb77e781dc789dc18de2c9

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\vcruntime140.dll

MD5 699dd61122d91e80abdfcc396ce0ec10
SHA1 7b23a6562e78e1d4be2a16fc7044bdcea724855e
SHA256 f843cd00d9aff9a902dd7c98d6137639a10bd84904d81a085c28a3b29f8223c1
SHA512 2517e52f7f03580afd8f928c767d264033a191e831a78eed454ea35c9514c0f0df127f49a306088d766908af7880f713f5009c31ce6b0b1e4d0b67e49447bfff

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\vccorlib140.dll

MD5 22a66d8309244779b8a7f275a3ff5cbb
SHA1 195e58fec7a5d39fe7a6275dac37295777da1352
SHA256 aca79a9c1f6d664d99691fd0d3d84a8819993f784b2ff6d7baf8e8ab2e15e7b0
SHA512 b39eacf78b9b97d968e96e357725bd6cbad7592beef5e0e5b301189cc76847be49f8a5299a16d68bd5c1c2d0e86d5263f865b29b66df8360cb1d4725b7b00ac2

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\ucrtbase.dll

MD5 932dcb8d7d06f4b89fc3915726c418b7
SHA1 33a1fdbfc3dfa0a1b7d2fa3b2e8bad8e8c71e961
SHA256 a73bd7d75f368ab2fe949dcddbb25cd5d5975ff9091761a01b98f5e26de543ee
SHA512 fa24b5f9a4192fbfe737506899dc052c51f48980992cbdda878deef01ed0280ca455bed0c813089503da3ccac92a0289dd8fdfe64cbf6babdf70d7bab531540d

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\msvcp140_codecvt_ids.dll

MD5 0f4e5f6c68c514e63c4cdae9eb9e40f5
SHA1 b755c91cb14e9f22c690209d0b4c3661ab20770d
SHA256 945225e01a65e5199aa7372b893da3b42dbd99f315c345f0e7c136af88e897ef
SHA512 8962e7f92446c535151b38a7e34bacbfb9f0f48ab57d4c2c8f2162dc2f1cd9f15be70742032192b41aa368c97a149e1e6fa6991e29077b7b7d7c1708f1a54f9b

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\msvcp140_atomic_wait.dll

MD5 f9c7a19dfc5fa60b1405c81208bd959b
SHA1 4eb70df0a412d79fbd8011fa17ef815e10189c0d
SHA256 2f9cdd965650440cebaf2349140a7dde9b587829b7753de8cd051933a777f499
SHA512 2ea1e4d7d63af427a0c764b4a9a646421dac1f1eba15c1d43bd040b284fc611c8059d889c48edfca56e745abb996939d8f430ff3e249a5c6455e81b520307a55

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\msvcp140_2.dll

MD5 718e5c4a63d2f941eeb1b4e9d6d85a8c
SHA1 deca5196d35d43c7abb35d9ad4b0ac0756585fd9
SHA256 f3117e3445945a872a35e91371e2a6c9f7b3fa5e74e5985f6ab12ac101b280fe
SHA512 61694ff307bcf3869dc14dac45e74b0cdd5a661d40e8483cfe96debe4727ec45ceef867d18e972d25a6b294c43ba0569562392b6752e068f2ba7c15407fad975

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\msvcp140_1.dll

MD5 11d5d26552c1730ccc440f13a1fce188
SHA1 4c534eb613cb05455809b6471d38e1e0976aa919
SHA256 edfbcb2ced712f23842525cb076ee2c09cc7b811a389cf37922d04ef1985e10f
SHA512 2428c4257ac8349035ebb286dec236a25acdbf23178aaa80fd5461b2ed3101c0a67574bf7db8728d0c101d92f45dc72e7bc578049d5b18fac367bdfb44ecfbf2

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\msvcp140.dll

MD5 ebf8072a3c5c586979313f76e503aabf
SHA1 2fd9609f099a8f42b1b7ae40ad35be1569c0390e
SHA256 a030dc2dfd2eca28a9375c92989adf4daf161f988db5e16b9e10678eb0dff4c7
SHA512 438c2db953606818b843e42c04240d510b5e398617e8e5539498264f93cf1893ae9a6b6b02ee35b169ae60b0e3b5621d7d9f7e2945d0f1e7c2e7e0c1e9e3c1de

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\concrt140.dll

MD5 e6d7ff1c7c1311a9011f1039639adc3d
SHA1 d47faf7b6f8af8ed67546e75693200d022ebeccd
SHA256 993af3de5e1fe2e3d0954cf06254fabb91a5a3aa513183fe0841b897eafdaeee
SHA512 35eae324dc30a6bf652cf571daefa8d34d12c09361b248d8931ce721940347ed50a2d51222adaa655abbf9c5a0ab58d57cd91cb1cb26dabd487ed721790378eb

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-utility-l1-1-0.dll

MD5 7b7f4484966036ff86a7e4cd303d3871
SHA1 18a789e9d1e9df0fdf22e94d71a18c483cdeb611
SHA256 7d3d88332d4744c9b6be81e2ba8d42ced7657ce7879a26f5b8a8d3bb2331ada0
SHA512 39e986994a99361fadcccbf5bd861ce9c4c6de65ce5e3da4d390b234fff34d7c561637ec012ccdb2757794adc222bc80de19a60a8917fe65fc221fdb3054149c

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-time-l1-1-0.dll

MD5 6aa7b1323c5d8e314f2fb42f855e9b12
SHA1 044cd0167de5e9c1b014e07287c90473c96944a5
SHA256 9c5880c395b4e7db4b8d6de49c75909abdaeeef0b041c1703c7339b05d7d2866
SHA512 e99a14c8772662dbabcaa504bc61ef616590bb6f7384adf8ae0637e0a365f94c67fe4222b978605b7a2eeeaa62505e57c32857b17b51f4b2e9a0d8a033f0a204

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll

MD5 d7164ae82b7332432bf2eb7fc7774e72
SHA1 221d79c77a8a80068621a0eb8688ddb86224408c
SHA256 08d811ff57efe50d9f365c76ec29e095474e0679e06bb4d0d4d0134b0120b40d
SHA512 d1a4cfc0a21509382606f4650a67556b0616283231e71bb1870ccaa5deba42fd77583c3130d60d632e98f5acc4763f57a2ed932aa2eeef49601618761acd9429

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll

MD5 58a8c2d2404ad7bf6fca8bdfbb8a5b3b
SHA1 6e834364437bfd23b48e66d8d891966860528d08
SHA256 eb7851e182a4675bb34633869938ff3579779a92a6c094194efbc970f3765dcc
SHA512 d44e3b47dabd29621a3fadaed16074a46b646e1190ffcfffb7ec835b8cd6eefac88570812e41a490daae485a1d71fb2d035c91e73b65c2fbde649fda8733ceb9

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll

MD5 80e80532239aa8929ec0fddedb7aa8af
SHA1 312e743535e66735d782cbaffacf94c6c791edab
SHA256 d3641bbaeaa5a7e7d4ee0ee0ec64ccee0327cfba3d10b89094144eb70a0867a9
SHA512 87e7a5496bb2dfb9bed4e9b9913db2656b335b916eb1277ebebc33ac9d6622bed50a22293dcc02193f846be5e0b4b0f032dfbcc673955aa90f04cf81b47a9305

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-process-l1-1-0.dll

MD5 dc3fe259a9b778480c2405fdd7405c9c
SHA1 d28a588217738af932fc43b809add215eb932856
SHA256 b33a762f0eb072033044e7ee89505b695f357c958d4107ce6f1c4d68f88d3277
SHA512 54f58f5a0d1aecfb9a6c8f12b5aac30e26ec427dccc097f8015d690a0a2244603e80810c19fb8eb2ee7ae9122d14829b3aaa81c69c77b6b4c5751d040c3849f7

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-private-l1-1-0.dll

MD5 533b418afd2ef8e423f42d414cdaf5ef
SHA1 09d3a595bad8f0e7ab5604fc02ef832d11a26b88
SHA256 66f910721f4477ea238603e5c14c858d1e26fc2ceaab3b48294cac069790202c
SHA512 eb73c82a91ce67f8d0265ac4f0739849e5696ec0069ab6508660368b8d382a230dc88eeb89aacf8bc9fc6b7e31c009521fdeeb979f4ebe6e80cfec083129ccf1

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-multibyte-l1-1-0.dll

MD5 4847091828ad3b0734418343c712cffe
SHA1 24e69b32dba65631b92493b7aabd68d141cf21e3
SHA256 d9388848ebfe27138998518332bb507e5dbeb1d8851e9ed0300f15e14b6958c2
SHA512 5e8061cc226f3471e3964c04cdc5fbd3a607c9abd22a11a1e818eaec42b20ae873fa80cfce7f47b8f8844f3127ce98282c737f25666d20ded47704e0db6f29e3

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-math-l1-1-0.dll

MD5 bf69d049653e504a7a1f8b55a6dde7bc
SHA1 737a1cbf1fddc0ae93a0a99d2feddd474f4b85bf
SHA256 e6e839c6d205f91adaa3d980f843bab3131b8a25e06d152d0f70a6e98fbe0fb0
SHA512 a8d834d46fcaf03aa53bd48b4cec816e0fd599b06b16a14006e402bfaa5a470f47dc6a55c1a94314d635af55ff2322eb242b0c535a02fc830dac83e375adc6a2

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-locale-l1-1-0.dll

MD5 152925be0e3a0ff77b0979bcae7a7583
SHA1 4ac4bb649b42893a8d5ba345a1c92ab2ddd1ddde
SHA256 2e23b53441ba6b0779b222c120d44eb9a156d55cc3648f76216017ef06f9a16f
SHA512 17b41057b82b1eb037a59715970496d402ac00a59fcbe67245203f117fc38f1b7e7f5b78872850ac4fd7a5dcf4a3ec561dfdb3fb0e827ec7043978b535e9ee26

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll

MD5 374d505ced3719d875ac316ce365b1d5
SHA1 24da4d65eb7a9116c626bf16c3bc95b563f10176
SHA256 1edf013e890072987b8957b77baecc37140bc01581e5de6b020ae454bb57f8bf
SHA512 d9b82d1679afd85c660ea985d6f57cc13fd35b4d7b8104c6d9ce1f182789b615a573b68d5f1da6c25682cb35068ae0aad3c1c9b4509f339fa1a83a9eeb7f74ca

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 e4fcbf91666504c1eb70644dc4c5f479
SHA1 bf96622c082eec928920a052bff477cb0c9e0573
SHA256 58d9a9b2442c10140db98ba705e8c7b7b9ac5a2c030d3286a66debf63b615c1b
SHA512 9dd34f36144010b3c1400ed1b1db8ac8e97997a0d2c803858abeaca75e26d19dc56512714b566edee581ca20c813c3cafd47a3f774a1596b31e23208b1eee4f5

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-environment-l1-1-0.dll

MD5 6e245fdd89bb6f88f56784adbdca0b0a
SHA1 9ac5d68ff969f984f74e6a8cded8e683b98ffa36
SHA256 0e195a8d013a329a06df877a4569a3ec772f112ad29295f086c6d3e53f322fb5
SHA512 601248c38540dcbddd61fd26203df39ef5d450827570f01cdf0e415873e098913d82ca6e3c7b21a9bcae267b4cb67e970237cbd1c6320b8ffab58c9fb675a3cd

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-convert-l1-1-0.dll

MD5 b9d80efa3f5b0b75c523d4ced4da1fd2
SHA1 f493358454a273d0ddc6467c9ad82bf460dcebc2
SHA256 44ebde7f2681c0b8518e55ca242261b24f326994f089a4ef6c060f8dda04d62d
SHA512 d597c0e7c5309b9631966b01fff7e166c0dd0fc9d63534d588d47f9deee593cb2cf79cd490145aefd472b9493dd65144e875d5870742c8d09fa4c7d459259feb

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-conio-l1-1-0.dll

MD5 a1bee0af7bd944fae7f14174d9dfdffc
SHA1 ea699130cd63857569bf34826b9cbcb5ecfa1a21
SHA256 2c557f6a21db6c99af6184637b5efb57e44b40fae892230a43e96ab05ab27d40
SHA512 c6e9473ec6cdfc0bdd1b8f9f42bdcf3d31855b6e106b811ca52d2eca895328889451726fe12ecaf0af9a238d74c10e79bcf0870f056e7e85ccdb9be49f4515a8

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-util-l1-1-0.dll

MD5 d91e6c55a2304aa59d24e76f34884535
SHA1 04ebc0bc4932c09c3dc7d9259fe7c9a6166b7233
SHA256 8875816a3809753c04acd961244608e9a47127523c1d5e50cddbd83a4627821c
SHA512 19c1e2458c5475de2b41013fb18dcf3d149c88c0b3816596b67c90f7bdced3d5214fea97dc3782f56f8a276f93fd28cf519018257bf432c00435ef6bae60a8b9

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-timezone-l1-1-0.dll

MD5 70f8acde94e2c3952b7ba7f56a4ebfb4
SHA1 955064391f0c9b41362cddbff7a070ab3888ad3e
SHA256 91decddc6e80d742755a1f65261d10c3c0d059aaea6389bb2da6fd3aa7ec5289
SHA512 71087a283d560f08e43b1a183258f1153ab5091d5d318cf4ee0fc8385285592c377d8e68a0f06d3f0be84202aad6dc7376b56057e23b6b3753a445323580f287

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-sysinfo-l1-1-0.dll

MD5 177009944ea3860b58c09da1871db999
SHA1 01cf9cab3aec3a1ea89111269f8cb036e73916d6
SHA256 f353bfe02e30f4fd5cdc89bd7f44703257f229a09f0d815d7794df902f67d1a1
SHA512 279d1e663ecc151dd2dd15462191ef41e668c7a2bfcb7930b8d568facf7695a030948c3af7f9907226b00dede255a7f30169083ae2ce544f2381548db31c9981

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll

MD5 5dedf9f86ba1366d9e920f33eb03721c
SHA1 605312ce6d623889a1d404354ee653414a7e4920
SHA256 0ced53f1ac2adc9525047d2c2a7592300dc48a5f52ad8b740ce22e3f3aad85ff
SHA512 bed8c7a74e57f4cd44bd0edbc1bbb1f528ce261d7ad6a5545c33974c223ba910d648f0cbea8bf0736deb5aedd3b257f373cbbc4f9765d12c56a78e823d05d4b0

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-synch-l1-1-0.dll

MD5 afc4db1ae7eb74d1b43eda3d7ea5b43c
SHA1 f31b2c1161024ec2f89c72631631e11fd5ceac60
SHA256 fb4b382e2dfa80b3427a98c51d3270b1e80b5c2a10fdae1a72b7c464e57fc6a7
SHA512 a014e4bbe207fd707a87aaa0228241fa7c414062af8922f51e46210b958284096357b21f89e59141fef28039a999dc6ac832ec7fc38bc4895e88fbed6b9a45a0

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-string-l1-1-0.dll

MD5 1862f49d5c2ba7c2bbc78bc517cb0b38
SHA1 dbdca39d6d9d166f9cb5b8855d456653419136c2
SHA256 90ba9da43d6705d76905e630505bd1fd097d1899c9bca3241ad0de5ab08ee366
SHA512 c9c85ec2851f5b793de07e672365e6db28f1150ed6b6057d15be828a36029f4ba9e0d4cce12c7d424da4c94713c18ae256d9ecba9e59ab88af639adf56ed6a3b

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-rtlsupport-l1-1-0.dll

MD5 57745a06849d90cd5c79ccbec559e7b5
SHA1 71d3d3c0998e648ef6b061f7c65850c6a2a8593e
SHA256 890dbb72c4c35266bd658c663c1242cfa3b50cf51e2873e986b7ab2e055af4a4
SHA512 ca28053575e40eb805f366a7363257b3d40a6fa8ef46ffb5b58ff17cfb0ea2668f5cdf2661355e94866b73b914950c09940f5c32fef5f9a22439932e35391dca

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-profile-l1-1-0.dll

MD5 948e3c479e87ad905a3689bc94cbf86b
SHA1 c9b2dcc45feb9b0bcd52122b51adf98d7fa5b0e5
SHA256 982fcc32d7614cb921cc5203970e3997a33b31aa1d91f14db5db25a582dcc3af
SHA512 6f15478ba5e7b403580b4b52924866e52adcd112d82900dd17a2ce67efa10306a5a86e1ba5cab76bbe3577e2497b83adafd6cf6c39a81c35b53b528e8bf6b440

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll

MD5 31f60bf9a22a86cb8879fce5c1022254
SHA1 23cdaa4d6ae0e953d083b968558a2af49bf95a4f
SHA256 53afac76a7124a132a7c11261f3b6ba8d6a5466e7e8f683c8d12ac370b7d6b62
SHA512 c41ebb39cc0939b38d788b692e75c10c78a806cc8844d8526ff25869777eefd086518cfd817ebb700e20b3937401d6c0f7f506bcd479fafe1b801507376f4ba6

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-processthreads-l1-1-0.dll

MD5 9ac788a87032640e046f305413585503
SHA1 41b74cecf0f78134204dd3d8aaddfae34d6aacbb
SHA256 363825adb27d5a5bd249fe58460a977077f823e50dac7509e124fcbac1512128
SHA512 cc725796af3f7793ce6e6faa96a201ebf5e77ed00dfac3211a66a95ee071e559c9efb8e47ae0287d9cc1feded559000a582a2138736ab8c628325428c78e648c

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-processenvironment-l1-1-0.dll

MD5 772d6c07e47e77a4479c7a9eccfeac4d
SHA1 b88db71fc80eb57182db6dc6ac00b022e1e47cb3
SHA256 2c9a8f8d47b49d04a82e8e689ae9f6552482b1861eb8398f3733e97327191c2a
SHA512 f87bb803e818372f57319af97227834673cce9988c81ffd4a3d1c6d7038c6f7398e06a7133a17f063cae152ad27666a6d18f87ed77bb46dbe141c1272bc3ac84

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-namedpipe-l1-1-0.dll

MD5 9ad2e67f2b1f04b760deb00b889fab53
SHA1 465314c9bdd359840f7da11a619ad0b409c271d8
SHA256 5662035361e37f6c5e4a5a19de134df2ec20bd4c0f1be803203b37c95ee61265
SHA512 cdb358848d48cd3913e7249eaa45470bee4ba9f9d92d975215018477a57db930c16b349541da2d82a2f9131220ec3b3cf9ff471ca411c2f705bfe916e8736be5

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-memory-l1-1-0.dll

MD5 714e850aa29e808568933c5ed8c7df5a
SHA1 ad84833bcac69b5217705e1c4d33d54c856525e1
SHA256 4a244eea4596ebde0f9094cc6dfeeb5abb3c4385225bb0630ef55a431fe1c4f2
SHA512 3a220ad4e2fd49f40f7fe5fdfc53608b114661f31993c0329e993c5d733b6d6f3a366eb46f93aaa9d5cad90766b21d85e5ccd09cb9c5ab905118d70702a3ed11

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll

MD5 d4bad006e413ace7d729b1249c49b92f
SHA1 cf0dff1b371316c8517619fdeff81c583268bad3
SHA256 245d48bfce5cf6e9c5093e995d6ab5988e2401d32530fd6863bd5f8fd688d780
SHA512 d1a5001633f1cce60db2687da28706f66644613672fa8487b065e3aa8d77ddcc96d9272c665d894b243e222e1c104be10be1dff8e5d007490e50f2bd2a708d0f

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-libraryloader-l1-1-0.dll

MD5 6337654372aa9adf6a8fc97d9676a33d
SHA1 b790f4828e7aa18cd0eae77e78c67ddd66f3ec5e
SHA256 6fc551cfbcaa0f90ed24dd09fa117e9fb3b6755a3fc0251d33ca64862a9a3414
SHA512 4a888d71747c64cb4a964d8df956c5ed9e3de9e8cf30d804e3ba76e8c35502e1802423ce527a419935b0d8c8e4c0f6168657b2734ab79d01afc946521a88d528

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-interlocked-l1-1-0.dll

MD5 d8999e328af5ee1eb23c216336637cb7
SHA1 a7bde6c833e4d6ddefcc4050997b1583ff1ffa42
SHA256 4ea02b683513a157e21824b1c1e9ebb782d22f14209b67961f97b1f79673d3ed
SHA512 4f041ed2daf781b7f86b4459e74330650b2687ee46dfb961ed7a0716ac7ad2082a631cb619cc6d3c7d19f550bc030553b9656aeba14f969dd52df0b40a0e418f

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-heap-l1-1-0.dll

MD5 892e47390f34aac7d20afe63ffa92f20
SHA1 4a78a77ae1d5bdba55534167f781a3c8675c7ed3
SHA256 6070ffb5e20ed032d460d323df981d369fa68045fab130fd100803a00ab88c23
SHA512 8b37866ebdca5047673d984bd779b1df052e3d44e3fabc3a4ce2e747489baa2bd86add629d95c76cf08150f74281d89d46372ef64266b90304cf7dd581af3a93

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-handle-l1-1-0.dll

MD5 1902b85a588178857e9637902e5a1b85
SHA1 31ae4cf76a34ccbd92fdbe60bee080998741ef4d
SHA256 5e48c99dd6318b017686bde507cdcb9d6ecf25f4f78f345845b865e443f1ee66
SHA512 0755e9c0adc9e374060c851d4f7fa62633ec07dde0bbfd56ffc9bc8ecff5b9efd6fa8418c43e838770eed43a54a48fd61a41226d9ea84834275a4a36c7796472

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll

MD5 7f0ef1cf592d04b082b65f75584652cd
SHA1 f7b9a2851a66a6a8eb509f2541b6ccc3b551f2fa
SHA256 9f496e181b1c862c7a7d03c09d9b0a5361535c98acbb1a9d50a27bcfb0a2bcc5
SHA512 30d2d695773e7bfd67de8691c40e571b3b91858e72eab3d78c84902b359108e9988247bf81689ab15fef6ed0a9ef62031f1937c6e7ce4ce8e1a34970ba23e727

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll

MD5 e334f2fe1e0e6d5d6966f139ed328d97
SHA1 68b2cd826f3dfa59531397ebb3f382dec9af5fe5
SHA256 d56eae93c55abdc8eb77d132777049634e28a9b59fd4b2101d51351546b984d1
SHA512 fb6ee02f06447c906a4353d93ce247e14a9a1ea4255819a88e395afe2e3775fe3aeb622b7a97d86086d88c739ba4d2e2fba9e8fd6467e167fc75d595c9182327

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-file-l1-1-0.dll

MD5 817f9a76b7eadc1226b006ccbdd38a11
SHA1 8b81897cdd4d48befa389c1df2d0b887ffeb58cb
SHA256 99ed148ffbb35829480412dc64da6ad24dfabe2f9a0eff9ba1493455d7127677
SHA512 53d8b2561862c6b2465665d761612aaa8b7adc887058260fbf970aac0fb006317283ada01468b1e042fd9dd44def90451793afee297ed787086645cebce45cd2

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-fibers-l1-1-0.dll

MD5 9fa3992f5dac5ea5dfa15b9669c68154
SHA1 a453fb6c4064da8c01ad03a4ea3c0434efe82635
SHA256 9057131f628e547c14754d545140ad6544e64606358104da50841e9a1b03f442
SHA512 ad73f3952dda55cfaa6a0d6a0233df785650f5965caa4859b6c1577e3fbd6020e60b4b26338387690cc48b16a186d2b530708a71d2671ab17ee8904399de292f

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-errorhandling-l1-1-0.dll

MD5 059129bae1776f03c59d3ba66a6f6dee
SHA1 33b1dbcaba1d16eaf5413f1378119cecc1298724
SHA256 a83af0f79abb5e5c818c6f38a38da80e531081f3255cb006ed4c29635cc0b9ce
SHA512 6a7da7e58620bc1ce4b6d3cab1e0b746fc9fcf05a84d85931f845412301880786fbc63b31611d9442b5a1cfa72558966375ef14edc749473e2b7c988dd20b675

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-debug-l1-1-0.dll

MD5 607703b245d9b4fc69a8b5363ff626fa
SHA1 dcf4626787ea220b19e08cc5bf9e55553a3a2aef
SHA256 f65b1b3ea2767f98f0c29118e85b06f4e61654bec34b60b3abb593b24ec29af4
SHA512 92d761f733f2c678946894ca72459b0e6dc62cd3abe1073653104689ab48c19603e6e1109c07b2f110822b424430f22d112f87c629b99d0b3ccc16e179549628

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-datetime-l1-1-0.dll

MD5 2b4a3a51e075ab9819c6d6bc40efb4b5
SHA1 bc52c10ded8b087c73229dc2f98714b5a368f521
SHA256 d718e1b6c352112c2f8e36b4ba5ed28e6179257fd2fe944c4a0d404b5c15b5ae
SHA512 13b07dc2247d51dad1ab9bc7df93e0d3e1bd6cc4fd16f9aff87ceffd40a56933d569a5fb82177dea7b6ea04ebf9f909f95451d123126155a13de6a85f747c592

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-console-l1-2-0.dll

MD5 6b33e6f1d77cec0901ea8e91473bc18b
SHA1 a397d2c6aead0b3e57d413a8d4af7f28e67f4166
SHA256 449631a3f5fadef72acc2c2f84765208d0ca014ec1fe93fb9ad805eec1d40eae
SHA512 8f5214e38202719f6a7549b2b97ad24288974cfb6cf0da1e9eec5b3b2092220f2330a260b17e28afa90b90226666a765a4e64fe91107e2063cde8e285f64773b

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-console-l1-1-0.dll

MD5 0909e61c8c9c717976828f65c987e5f9
SHA1 b5affabb8afda55ebb1f404edab69c6c239affe6
SHA256 03ffdb036329a25beacf905d62611a13e3dfdda6cbd2d13af830258e8cf40ec0
SHA512 7f78746e40da64631c08d0e173fbdeb40beed180932b42382d9f3ac0cdb4348d2a5b1c29770bb98f5d4823cfd66ecac2285afbcaf109f82c8b75c7711f10c49d

C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\avg.local_vc142.crt.manifest

MD5 b5dc4cd84e001abaf9167d3970a5300f
SHA1 612bf55fd5a43b7da96268a541148bdf3e0ef333
SHA256 5cbc4bdfc8ae2b5e9d2ecd8370dc50123b9e6a7870ae6e0ea4c937d8ed6890f2
SHA512 44ebdd8956aa027985be8a58ebce8badfb039a563dfc333b6d1743c6316834444851a065c9d73830a90362027ec7cbfd3df3cc51dfb2b8ca9e79a7f930daebda

C:\Program Files\AVG\Antivirus\crts.cat

MD5 477255e0a760041d38c98bccb99a403d
SHA1 2bcdb96bbe2dbb6d85db7cf50d0345b72959ad00
SHA256 d4113f0402d704e9a0ad29e696e4d142838c0c5f0ac349c6e9af106890528e97
SHA512 0564fcddf1d01925ae7d8ff93f338f197b67994efd9f7ee39bc5ee0d09b72c29054bdca198b03e873572dc9b07cafff96bba31da3828caa78728b2bf2c005c89

C:\Program Files\AVG\Antivirus\mfcm140u.dll

MD5 cd97b86463a7755aa6902a18625993b4
SHA1 3cc6675550719994b237635a62d0874d4f3d604d
SHA256 05f3d04060880d09a4c4f03fa8a17cf15b04e9f7f764fa346e11ce4e98d2b777
SHA512 c454dccc466e10a10ffb7161398eec473b70336527063a18e353ab25a5d7a2576176c2af2a7096c47cb98acd826fadc0bf6c1e0e6b7cf7421528c8be07d00a35

C:\Program Files\AVG\Antivirus\mfcm140.dll

MD5 e0f0d9c1ea05cac4bfbbe7c2247aa61f
SHA1 ac73392983afb5a55c245c79b55d5506db6fe8c8
SHA256 f0e82a2f1290346217138b3d892cd916d8ca69855f63977d9561f5278d350332
SHA512 bbf3d0db25821381ece3cfa161447513f28c2ffbf107ff6c8752cf61cbe2c497d7e5c154533a35da95505472dc475ce83ac89baff5762ef9cae7d83c89b14ce3

C:\Program Files\AVG\Antivirus\mfc140u.dll

MD5 575634e4b6719eb8600605a31c32750f
SHA1 f327886d113db53d209d9896f0cc8df1f0295efb
SHA256 9e6d05d9b6d8bbe66c647a1f07b3be2234f070c9938a10724dca1ce3fc05ec12
SHA512 0da85512e6ac5673e51ef32e4e95a60416c80f76c4612194878f64b6a70ff3c026717c0708480d6141f4ffd8c881157e67ce703936ac5529d2bc225909f00e5a

C:\Program Files\AVG\Antivirus\mfc140.dll

MD5 cad16fe5795c362b05905bed436b5e1f
SHA1 20b845f469e94e533b545bfe05fe5ede0a3fe32a
SHA256 706583f44a797afc17d2c394eb792a33f2aab0829a1f5867cc36fd94f00dcb74
SHA512 b2b1ebda861ee710700bca22c38ae33043717036c3cc07a236670b6c9c2f006a20b28c2eb98c4151259bbb670ce159e3d346a0854f73fe37ac1124487c29aced

C:\Program Files\AVG\Antivirus\OobeUtil.exe

MD5 7ef41af5163ef109482c8b54a8361f82
SHA1 4c017ec55ce7bfbd3f9b5043d349c2c7d8a3575c
SHA256 1903a32522de3c333a0187ce9a029419a35d93ec1a9750bf4d323df6c8b8ffaa
SHA512 ebe343f95c3ca98e41bbf2d968cf085d46a261a16cb18a96282c6ca1391c4812c33dcb113cfd0dd8dc321489337483ab14ab3ca0dc5796c09211c7c2d8304a34

C:\Program Files\AVG\Antivirus\aswAvBootTimeScanShMin.exe

MD5 e683d15f1eb9db3e44e99b67264ce460
SHA1 b922ff3a150b5527ce9ea6fe5f6c4655ecb79d80
SHA256 a2b30a41ece6ddad3acc7c03f4f82335413ba758c8c5f04f8187acd558b9a69c
SHA512 933488681db69c9ff788bb193b67f8d0f602a3f85d2543663943ecd1eab3028abc2d903662537d7a4f83519e424685048ce12a991a689d4a5345c69fe2db2b09

C:\Program Files\AVG\Antivirus\nos.dll

MD5 80ad5ffb207bb711b2bc815a4ca0eb65
SHA1 216428491dce6c8d6ef98cf17b23db330c35adc2
SHA256 58b926cd42f0b8b1772f8365dc4e444def05e9f36ce516456035a07b53c00536
SHA512 eb984c8e11645c42757e0094b09d8a38b12d9265c26f4b5446818643ebaacdf9286fa273692996ca8e612892da40ad2cf16917183c3c2b15a221b8aa201a87fa

C:\Program Files\AVG\Antivirus\SupportTool.exe

MD5 9d6a97a364dfc7b1c83a68ca185f99ec
SHA1 ea74dd1fab0ae68d9eeb1e4dedf2dc3516aae191
SHA256 4e0f452837284400be182dd99a69ddfb8da7538501286d1e2fab5100fbd2ec4d
SHA512 ba6d581b7192cda4bb0bd7a0f82f1aca921581d14973945e2550f5af0f350dd48d5316f406a8bb59cc965c534192ec263cabf96bd8147eed3544580ff583f07c

C:\Program Files\AVG\Antivirus\AvEmUpdate.exe

MD5 a35b6878322a961449e85c1e0b649eb7
SHA1 6ee6cd422669a1ead844034c863078f6886b93b1
SHA256 70c1a227c2b4468662073ad2ea60b3e8654a7ab7405bdf835c20b7fdee6eea8c
SHA512 d0e33e4257ba030c498408c9624d871cdd848c542a679ddfbaacce36eb0072a9591f36a31d68688e1b2190190e3e263b36384773a61caa397f0b56ceb845021b

C:\Program Files\AVG\Antivirus\wsc_proxy.exe.manifest

MD5 7cefa19bb1eaa218e139641afe5f7ebb
SHA1 a7e9779e8638eb304f6ed251c598bd49d050bc2c
SHA256 1e7fef380e3b0a873ec4f19e089af82d40e1999163f4018c316e93efd725a8cd
SHA512 0336c0984f01fc432442a12a5d3084dfb05c9b1e44a253d1073288cfd5ce0da4a0841ca6989047697107d553d7a04f354a6898f1d00f2f7efd6469dd50a49f1c

C:\Program Files\AVG\Antivirus\wsc_proxy.exe

MD5 75ca8458d560e6f26a7ee0475e650458
SHA1 208c3669b1cf9fcbd514d71d95e4a905cc908989
SHA256 cf9c722de59b6a7ebba99620e45693f6f9affa8be26a361fb5d6662e539dac3a
SHA512 4af84fb6ff1bc9d1469b6afd9f7c0de7a8401fadf72551939e3f0ef150b30e3187d686c900c9a0afcbe35049ef37aa0d278ba895bbaa5d7e27fea4b08aaf2cc1

C:\Program Files\AVG\Antivirus\aswBrowser.dll

MD5 d30604e0645f7e39254fc7dee3d4d59c
SHA1 5d69b9faa40135dc98e1ae98af689611849a160a
SHA256 f7864032240f26fee03f9123dcfad323b17d6896fc79bd9cf6850f4c89432073
SHA512 b51bfa04104010cc0e4add3f618b394bf9cd34b16880330efd636970bf0fdaebf91b8520a37fc29fcabfe44ccdc989b77de346181e871de7e8e0da936dfc4886

C:\Program Files\AVG\Antivirus\aswAMSI.dll

MD5 5e81187d263427ac37e8a89784422f4e
SHA1 891b644ded2deebddf0fe387121bdadaf03a34a9
SHA256 dd3f64b03a654aab9539e2af43bc31b28e69a89e7a9b57227f28056cde381126
SHA512 00facf032300f9050e75739e698e8020b6a6fa0e34b2070dd4cee331066e2cf0ad8929c2ee402d5d81fb4cebc2e43e32c6bcbd79c9c128843fd087b69d6dca0d

C:\Program Files\AVG\Antivirus\firefox_pass.exe

MD5 319e0cb8ea7debeac79064c5fc3c6c79
SHA1 21dfcc5478c1ebb5ea6aaf8b5ddf0a657e991ae1
SHA256 ebb122f80d87cdafef89cc2ccb2d0505fef4375935132edaf6be8f8299932547
SHA512 744d037b56f15db4932f75ee0bcb1955db0974b62502838bb1e069a8c694e45ad8e5e4158bd8bd4d25ea5642a73743ce1fa18847b972a4b972a3cbee7b958ee2

C:\Program Files\AVG\Antivirus\wsc.dll

MD5 b3b2ca5161e38784de9b33c464b0e223
SHA1 1630dab894e81b7b957037c3a79c23ef23e7a881
SHA256 7c2bd16f3d9c4c0c817b4bd0d2b118abe928d5251a7031e9832a7fc187fc660b
SHA512 2ce1d596f6312c3cfae3e2f448ec5d51c2fdabdbc61ddca945ee5632784e3e56d6a8c512a85e820313105fb11368c4ff5c17def240e67aec62af7e442d0c7d57

C:\Program Files\AVG\Antivirus\Inf\x64\avgBoot.exe

MD5 148a3a92019f0c8bd24a2571bf9fdf61
SHA1 cce867705f31f7415e80b2be7376ef2a21d795b4
SHA256 03830e87cffe059e94cfe9c34b31828d4b76ccf6a1d2f2a02d63cd3661857203
SHA512 33092de59210eb7fb6e369853eee3b9ef0369b13ef1643b6ee367fca67aca11d596d21c28f5dc31696e126b663dacb77a44ff0279d6e0f82e13a65b059e12e79

C:\Program Files\AVG\Antivirus\AavmRpch.dll

MD5 be2c22f4697aa7f585888da225098b95
SHA1 6fbb7bf6c303526e4887cb21bd9e197ca9f458a4
SHA256 cbb0b8a37ff69e20d64093bf8db3c408c4c1d035e27f5fbd2d25ac0cbd9d9c2e
SHA512 6216879248d2b1512446b156c36f2f1666732f30901becd9b358c6d0717d657cde901ecffa038ecd1cef06ff1f1d5d61316fa0156b81344fdbea014bb827e1ab

C:\Program Files\AVG\Antivirus\AVGSvc.exe

MD5 c9f92f3c9dd6c00df88f8c5089c16aeb
SHA1 3bb45a7a85681fe5c7e8ccb0fc5d8edb108bad93
SHA256 0bb5685ab539597aa90e110074836163dafd9323dacd6e5be217baeb292fb713
SHA512 7aff174bc7bf955e1b9e147d5a3e64749841285799b629bf5df76cf517c202b011122f15f9834708bcb392adb6d0da9fbc3540629a1a18c79c76c7c1fd85ac62

C:\Program Files\AVG\Antivirus\fltlib_wrapper.dll

MD5 0b2a97222d692ad7dc1c3e91c1720618
SHA1 edb75c39c7da1f4d93551eb63c38aa06e89e8688
SHA256 4f7c4e92e270c820e4cd7438c9d4898bea372d2232ea039de0a82a3377ca02b0
SHA512 cb6d8a79172cc55b3ac586a6dd9de6a15c85b44f9541ea87cd711f5f040f0dc10e2c9794fba8ccaa214156224cb7896f89c8735ffec5add6dcc26a6bd4dc9018

C:\Program Files\AVG\Antivirus\shepherdsync.dll

MD5 55514b226f21f94e048ef68dd6c9aa6c
SHA1 ceb8768240b3d9ccc8f1336ac6862043243815d8
SHA256 f958a13a97b337781e805490153ffb75e3ee7903a038d232fd91b01f0081a37a
SHA512 fe236d48c1e0f0785ac97d15b06fb48a255c095ff46b42f549d01f39652e906acedec4ab895da592ef757695d22aba858a47c289f8e1c77911ff153c7584fa1a

C:\Program Files\AVG\Antivirus\dll_loader.dll

MD5 242b1f8b4d33125347f3337372a28d07
SHA1 ce553b545bd09c7717b63c1378a83fff9ff639be
SHA256 0a332bc529fe530ae863ff27c9dbc21847aa18261a344f281be4f6f134d99b2f
SHA512 e867b0fac37c2588fab7cff3339cb8d66ab0c819f31b6a9514096cc9601c9dc3f693c456fc0942983249f6916983648425ee092d77a9ad4cee15a5f1884844a2

C:\Program Files\AVG\Antivirus\module_lifetime.dll

MD5 931a35b5910bab80cebb455a096e99af
SHA1 95216b556cf4b6ea48afb763e12aa416be9bb271
SHA256 965eadde5cac2ff71d08366756e12d11857ca035af8d6b326c560e8eeb0197ca
SHA512 8c2a45c68084a128c553347d3f3eea9809de3fac08baeb83fd90fadce3e144d6d0377f87ce8d923ce66ef6342cb52463e557146bf78a60cc3429698c8f86a53f

C:\Program Files\AVG\Antivirus\vaarclient.dll

MD5 e72ed788214d65853bc2b0eeed56debe
SHA1 3ffacaf616cc3350743fd726c4b3210a3393a795
SHA256 f52754846ebf6ad31d3bf47918100efa99a3ed97c0f233bb10b4f8d824be510e
SHA512 7f6bc01a63f0217c61d2e2ae3f97958d6dadf91504d32067393a7f8f26eb1e7a97daae5d32cd1428f282350183670e25b87601901d7dd4f087dd6b031ec6484a

C:\Program Files\AVG\Antivirus\browser_pass.dll

MD5 8491c3da5d7e0660d5c142f71659aa22
SHA1 ac6425e0e61d8b840d05ef7cd36dcb05994d3f9f
SHA256 431a4b162718893012898fa8b2e4ccba14235f05e20b7036ffb82d09864a0d42
SHA512 4774b6efbbf2b9548588233ca5dc551cd7fc7e0f4f53a1c7198a43fe36da2f7eb6352f4ed620b0e878a5b14c73b30df62dc5c03f42675bcf3502f218d3594a05

C:\Program Files\AVG\Antivirus\ffl2.dll

MD5 fe6315e24f5e8441b3a2513b34b3e128
SHA1 290f6e03940d4dba4f3e28ead8fb256f8172e89a
SHA256 f6c670b6097cdded3ec4756f660c1a432df7a23d0fdb3e2304f69b0356766dfc
SHA512 4729cfae2dcee623168c61597872e4218cc286961c94bf099c627914b520c14ea1b3692f0871d86232dd72db7bcd9cfffff2917bc1c73c75fa980f93842f92bd

C:\Program Files\AVG\Antivirus\event_manager_er.dll

MD5 a025760a47b9b718ad72a0bcea2684ba
SHA1 e0c27aa477abdc64d6f6b37f631db660cce87ef9
SHA256 4fa4a9c3e5fceb3db51e1486786a9845f33b68a892b735f924cde4bec640d387
SHA512 561dedcc46af73b1a28772d47c8b2c6642e94b9476fc19bc783e9ddcea5904a44782a6f91bf87fa8ad13105fd9d7739e25958ef208866e359f1966dac513ae8f

C:\Program Files\AVG\Antivirus\event_manager.dll

MD5 1224df0d8ecf257d0ad9b4225e435d46
SHA1 4359be562a830a96d113354951346ab811418b14
SHA256 ed3d34b0b7a5ef0aae86b10db9b3a4bde1681c10d5949e1eb9ef8272512ea071
SHA512 c7191244a56778aecf5066fc98d944e3a3c679fb6a1f5fc4d874ac5b976e9e2a45dc5d66dea96c31104ecc675277e2a11f3d35bc6f0ba1a87f432f709598059b

C:\Program Files\AVG\Antivirus\event_routing_rpc.dll

MD5 b3800c53b168982ce7a77ab984ee1b33
SHA1 b1f8f64d33f1499e92d7a0e64d51925b7dca6dbe
SHA256 92d34fb67e846362e88c75bc41f36aaac77d40fe6182986a8ee051450eadb3b8
SHA512 f77d4d05f8cfc496025ece52a56a0f30bc0617a8d556f756b85074bc60d8c38767f70e465020ff97a0e9d392e3f0c0c197be7fcb5985c319ab043d4a53362132

C:\Program Files\AVG\Antivirus\event_routing.dll

MD5 3954a0495ea7d0c80f627407af286554
SHA1 3c39d846650ebe5293d98530d943d88e73292af9
SHA256 fecd96d9610ba82c3ab33e6369f95f6f9ac4e40784c740c435f759c42dd2ccfa
SHA512 d2750e3d3ef516018af33cc9f7e5d33bcd2149ae0c22cd8cf7cc81af9ab37f6863fec9eb3e79d3498e77e39df67538f5f3fd60ec7e1ff5f6e1019fc31395364f

C:\Program Files\AVG\Antivirus\serialization.dll

MD5 5defef33384876468b040fa55865a6ee
SHA1 5b4f5b1e1715f8dadcf587ec3fa6896916950594
SHA256 f908e590f38c66def0aad8073468270fa6fe0051e19643c3e4aade29a8a6d7b7
SHA512 db9785906b71a54d8c330f2c033cda3a4462891e6a6d0e129be0d91334a3de55cb6671284b234320973f6e84bf9b66541326614ef7790f77e62eb33efeb0458a

C:\Program Files\AVG\Antivirus\process_monitor.dll

MD5 ae892029a5423de917b92d117b0fc0ca
SHA1 567eb8495d16cf6fe37305c6da03890322f2bbd7
SHA256 12380357ec094b90a295d33792be81d98e226c69af1e353e52066dc913cd514d
SHA512 6aa43894346c9884fc688cb39e09160fc8a19a420e8fc05a7a5d835a3e6bfa842783f913fef3390832ff00d0b50c671ef88f39ad3b2efa8913006260febb0849

C:\Program Files\AVG\Antivirus\task_performance_logger.dll

MD5 cf045f02b7206bfec68d31a20a44eb77
SHA1 0be2305b052d0fb095fe5493789db25cade78b2d
SHA256 7cfa56f83bc018daf0e06db9edd9adab249e8148f4eb1f123151fe95bdbab3c6
SHA512 8a00ee4faeb8ebbced66e025df9bd77572724fc4489e950c5b2fe11852732530646bf04557ae219642a33efbe4fb3486510858a3d29f703cf7b259d23341d8f6

C:\Program Files\AVG\Antivirus\tasks_core.dll

MD5 a93360448ccdd2ad434f65ceff79af85
SHA1 fef37173ca33972ab4c17867145343d69e130f37
SHA256 0ba4dd50ccfbee4f10660c9bf856fd5d8bf6c0d25c3e1ebe5cdad31526a8e050
SHA512 2f94ff36f9e604e8b56bc05c31c209843719521e330c165ad368124b3d5fd1d712e881b0c47aec1b76931557ccaa980c9e958259b762c574e26d26bc139cea0b

C:\Program Files\AVG\Antivirus\burger_client.dll

MD5 e1d67264d427762c9f7b37a9f8b1f3d9
SHA1 b383c422ed96eb0df4bc825acaecfe86f9e04b17
SHA256 9ce5208d303e88888e40532aaee45ed345b26b599c241884a38cb1c781ad23a5
SHA512 746caf0e51450a690bc8d515751bbb24b4f4ef95aa57f0237f323306d7aee2566dcd14661ab3e4de34843519aab737d568f6cc06771a1526fdc4983b65c90eb7

C:\Program Files\AVG\Antivirus\log.dll

MD5 0b37f09df3c4a12068b8657f03adedfb
SHA1 911f7b67190ec01f9d690c2ece92f88e3fdcc2c7
SHA256 4938ae7910464e60cb785296e2e614fd66c94aa66734425d9a473dae049711e0
SHA512 8d396cf49553707ca3bfc8d8dffeab19b5bd9c01e0be136b8dcacea2321c8f3b6e4db0ac1e21673480c63c94a162a889ca34a5f441d3491363d6f8a0c89e1f5f

C:\Program Files\AVG\Antivirus\aswRvrt.dll

MD5 f159c7ae44083bfbbf0f282a71d3e2ac
SHA1 2be58ecf045c195c59468e6f1ead61d75a6b1e03
SHA256 98985cbb774d98e3b1e846f45e92f8acdba353d8269d1dd6f342ee3d82d929ed
SHA512 2ca2c99f9bcf7650004efa1ba38ea8012acf5984bb5a5fe141f1eddca168f55e1c839f49fedabc3cb7103e6cacea31ae47f103296c9970b54bf769007d2780eb

C:\Program Files\AVG\Antivirus\aswIP.dll

MD5 9b6532db60a8c8cfdd38e6d80817d7d1
SHA1 c91dd08d27a9444776254f2bb5610b9234adc3e9
SHA256 4cb0781ce757b2745d670c7e456eb141412187804426d51c879c98b0e844d59d
SHA512 336ce8b1c9ad0b7128e2a8a3a0b5b2bdc3745a18d0e21cbf2e9ca34adf09196e29efafafbadd64ec7f38fa08d1f2c2e104f1c68d802447088ab58a101508607d

C:\Program Files\AVG\Antivirus\aswChLic.exe

MD5 0926e40910e2e80d2bf1b06c03868047
SHA1 4c1377f2ff3abc9ab0d34b347104cbe59e57a8d5
SHA256 e2c8f8d87076a7980d0ab0303cb67c04a422f5cd31283d669aa5d0105249a10b
SHA512 d791347891b3050f213ba647b3506f95c35573e52578b9e4d9e99c0a298d50a436fae2d0f6a037f8894dbd0b2b579ade4da4794e037235a66d8b301f5ac06c8b

C:\Program Files\AVG\Antivirus\VisthAux.exe

MD5 b9026d7faf78103630a929e25c1232ac
SHA1 55bead44955189270c893724d7aed4ed5b460d8e
SHA256 ea4c783a6509110538245e3cb01a1b2630660a51c98a70f41da3d9b33af72690
SHA512 de49661468e3e0d495207556a99e805ad5e356f436ce01d9695d26fb18d1d09a8e8a89aff81ab2d2712612fb22912fd143473c7b6b6fa17930b76fb54b176b76

C:\Program Files\AVG\Antivirus\aswSqLt.dll

MD5 dffec70efeda4d5994a7817f8959228c
SHA1 eeb2afaeae6a1d94963ef23ba7a2d2468ffc2e55
SHA256 16f9eb275b8bdb65c2248942b3dd00bff55607c541ae4993c501bddc70bbcbde
SHA512 2cdcf58ce041a253e5b605ba17ec0f1cad17122550d70e09c36a399e0979bf56c80bb5dbc67c7720e6b4383f0880223e77a8ec157fdbaa1e54194152118841e8

C:\Program Files\AVG\Antivirus\CommonRes.dll

MD5 a39aa165203605a4b571879706d75804
SHA1 3f4ebb00a8db84a1bd62cfe834b4c592cb5b8a84
SHA256 134c7e525ace3c462ba2377e2f5649d83674758fb34964c31f13d9ad15ee5675
SHA512 00d0dc02942ce21d1bd0a577c49af151c8704936a125ab302ec8d4e4c30f067d1a1fe1d97e44cdcbef84f34d92fe0938d2c9ae82fc8ffe5a7c7a424012ada6a3

C:\Program Files\AVG\Antivirus\perfstats.dll

MD5 a938970c668814f484147bd5df192034
SHA1 966b8b2e7a464d68dc51d25fcc4ea757f251017b
SHA256 e7f3f84167a0d6bd0109ddd6c2aebfd92d9ed707faa63d6c86a983c826d4210f
SHA512 b3e350769cf997db3e9030e7bc5ba0db70248ac839bbe8bb024aecb567b74b90f5105dd4bc7623f7bc90a8a44efb527228001af49542616dd363d9ba79917953

C:\Program Files\AVG\Antivirus\anen.dll

MD5 cea065dc6bd9c2f3e269b19ce26f3c65
SHA1 7f6518742377b8965c3d83509579ba26b976d34d
SHA256 53ac3335c948957c754e59e39975a7cd84a05f4b8aa452fee618dd008b8fe25e
SHA512 207258eb7e22886320edd253324926e2b43fe1b8989b999d134a005624d61553b866fafbd7f13823081b4af7f257843ccad84779aa2c5213bd53bd2121d9ba2f

C:\Program Files\AVG\Antivirus\uet_client.dll

MD5 51b063f5833a5b918ed4e978d4da8f5b
SHA1 f6e9723689ea3ebde63791a65bd1eea9eb061bf0
SHA256 de4ba2d74f17acdbf632312f54e8538f3453b8aa419af1418dec5383b7ff584a
SHA512 7a558ee5f1a26e6067a202a378a61e8e5623c49d4e8d207ee8af7f6567f6b9a426f83543d564a50f4a76995263bdbd745be50f7ccb6d62b0cca359aae41d9c4a

C:\Program Files\AVG\Antivirus\aswW8ntf.dll

MD5 ee069f22e3a51b916023aeb3231cdbc9
SHA1 276097d03a60a47a9458ee0a78078d80e302a62d
SHA256 4648378448fcd6c07d58b00fa35efaac3796c4f4774ae108f6a934d9aa99a90d
SHA512 58288cfddd0e794cbea9028e248d22dc9ff83b1f9b82197da74f810a804a0902161f1d9452bd283f126c5729e712b2552c8abd04b0e7386109dddc747bf19ede

C:\Program Files\AVG\Antivirus\aswPropertyAv.dll

MD5 a7a478be377fb8d61dc9541bb55b57ed
SHA1 b8bab4dedb21cfbdb37333261588bafbaa6d5275
SHA256 db5a2ae9d3dc2fbaee1f40fb77755e2909e98af8efd5f30374afcf0dac97dc9f
SHA512 97d7790c21122ccec3c29988876dc00324a2a046ab1bbb31bc47be8d041998d8d4166a08a4026696aced1513b41f82caf02aec951ff1fdaf92c20c7af447e0bd

C:\Program Files\AVG\Antivirus\aswProperty.dll

MD5 b505ed4dbc92fbcf8e9788b5da4d74be
SHA1 34fb968fcaf59d26b0274458773682c859b2f1bc
SHA256 e991132dc38556a7692d4ed1aaf710893cfd948008bb8291b9a9e1f76e738854
SHA512 26da568d9954391cacdb69932bbc83e44125dc3716067c8e09ca377cbf639de1fa0edcde9c594f2ea523248f444aafda6e1ee21452dc69941146fe8ed973d865

C:\Program Files\AVG\Antivirus\aswLog.dll

MD5 4a8d8c5eb07722cc934e4541fed37555
SHA1 89220b443bd8e4bda2c85c710b332ac80b60ff09
SHA256 183e5e38d745ae86ed12e085a0992187f258ea48a41962259df108a0a64e2621
SHA512 09fa708c25926eabfc5427703274bab03ae96063b8c604580e1b9c55c39460c32ddfeda0d9baa1928b8c1366ec199062a884a1be70536d90b91131e69419eef4

C:\Program Files\AVG\Antivirus\aswEngSrv.exe

MD5 8f5b5c84347e659bb39ed662c1d923ac
SHA1 eb972f4e6941e18b859acf2b3ac37a8a847e3bbc
SHA256 a10ca955285a3f3413a2b874637faebed735d87c328781d05e60c94e2f5fbe22
SHA512 990edc115c4e2562d32752054a699c70bcbdb6ed15373763c2db55d4fbe25e92733e1758b2303b13ba42b15937bdfc0578c312e9975e2d9c5ffb8707f1694343

C:\Program Files\AVG\Antivirus\aswEngLdr.dll

MD5 bca15e9e585795b6f4ddadf3c6746701
SHA1 b35b09c5597bc47e17ce2df31e9c38a7fc2b6666
SHA256 b145f2e4a689e8a3fa47698849398cc630bfc1b5f6326b1cdea9a59bc3cf754c
SHA512 e78d4c540cb7d68f420e55cbe99c24faf2e98d90d470bce5966ea02a31c2c4c94c9c78e638d8ed4b0390182242c3ba56ea90b5ec112dd6acf6f785c4492272dd

C:\Program Files\AVG\Antivirus\sched.exe

MD5 2ec5d8572a2d2f0afcbc0cd5f8ba5108
SHA1 4b13a286e7a6400bf50b84f4d1e021e4d4d43dfc
SHA256 760e94fae7aa0967f9180761fec24a9610735364bf34fd2737e2c6da1adf613c
SHA512 8f342a04ada7247e110401b13d172f158b514977e11a22f468428cba4d5dec95681e7e7b25305a0d23739c4a48940160747f353c7a3df363a4aabe8f931cbb16

C:\Program Files\AVG\Antivirus\ntp_time.dll

MD5 2af5259abfd1eef83f513f0478bb7be4
SHA1 aa05c596287124062cf34720a87fdac6fbdb4809
SHA256 53de4901e5c57d38b8708fb9e1eefc1dd11df88fa6e32d8f74aa5c411ed908e7
SHA512 ef1184e744e7576124811220c8e886f7840267747ecb671fbc48eba304c37eeab7b3583dc12943ea8542b1cb71bc67da5e908b72eba4419825d89a3b666f0e83

C:\Program Files\AVG\Antivirus\streamback.dll

MD5 db742bfc6bbf2f9f99c6b9e260dd37bd
SHA1 7e2a1733d898021811e98d773c07d13ddf670531
SHA256 347edf6d09d770e450b77a32fcc4122373f0fca6864a9bffbf228b5a575039ad
SHA512 f7eaf3b4d07ebca91011acf75b82ead2619d4e25e20c0470ebe9675968b70e981d14cd172ff3ac49a398f0a72b3f3bc17ef712579f724e1c9f0e2ac31cdada7a

C:\Program Files\AVG\Antivirus\CommChannel.dll

MD5 e02e9ba63aad8502a44a8e0ec9fff3a3
SHA1 cccbfecf447f80bd6d917affc00ce69e0f29a890
SHA256 1874a0e43355712ac83c5bc76f7b935decb86a242ae486ebc89fcf3cac419bba
SHA512 e3fc6ac584a6a37a99c15a95efa972055a6a304f17faed70392a1bfdb68d188f148a517c220d003533cd4c308dfc9ec5722e12d5b7f9531623d46a0992f8ff02

C:\Program Files\AVG\Antivirus\aswDld.dll

MD5 45dafc8e5695fe3c21e6923515f09768
SHA1 94489569c3d6d9b54f7f11f5203101ee827932f8
SHA256 da8d202dc215217e9f5782f32106a06e1baf3459f903385ffe16402e30ae27c9
SHA512 5f733e8005e8570fefbebc0002f36456f520058efec34d7f8739a0dd9615c0ea3f9aaee6654448193b72fd36bb058bdc34fcc61e7f134fd8c99ba7b0070a7881

C:\Program Files\AVG\Antivirus\aswAux.dll

MD5 59d4cbcbb83ef03810de1a7391266e8b
SHA1 5d509ee5591e106f0b8e24ab5a8acb52aba473e2
SHA256 8c24fc17cf50009f344b8f0e479c7ae70cd18bea515a45b60df79446db6d8c85
SHA512 6183dc7377a0b80591cbf7c03c44a852cd738497280c25cf98a11cf1cf447140fe44a25a5684da571eccb802a1d6d7466f9d2e871cdb887ee2700cc55950bbfe

C:\Program Files\AVG\Antivirus\ashUpd.exe

MD5 a0e965ca98d946982d0bd29f64d8325b
SHA1 179415c819aa195daf702853955c6d817dd56a04
SHA256 1fb555652646307fc9481180ba7ca045e4ae54c2f8dbf49d413efae83f0a928a
SHA512 e987884974b7620c4750c789051fa85e8cf1de0702a9b72e65b55b44f3c334f1fd9cfff46cf1688d6de188810baf15ae2620d5eaf4cc6a1d4b72a6f2c5febc60

C:\Program Files\AVG\Antivirus\ashQuick.exe

MD5 cac2cc593316c53672aa184a5247f71d
SHA1 4fa544516d01d539357743ed450175614a22900a
SHA256 80dd4fb02b518551fb2a8c52ddec86b548c8ec55cbbd7f95c0877c2e11db99a2
SHA512 b6d2795891981d0108a743059b43c3f43d12d1f59f96b48765306b44a7143cedfc69183eae529778756b8522b7f7213a6607227a290758872f6f08e56a484f4d

C:\Program Files\AVG\Antivirus\ashTask.dll

MD5 2d00577752cbc80a9a2dfa71527e9b7d
SHA1 76a283e0bf973d31728851331047e19aa529cfdc
SHA256 78d5a80e6c729d93bc277e908e9300f8d5f5da4bf8ed5de0e73699cefc9d354b
SHA512 beb80112b92e8fa751cee1ba1573b07d365e0580b62f3b15291cedb68519868ac5b2ecbea61b3abd6c27497008e16d8fdfcb3ffaba88a7fadbf6e1ed30362842

C:\Program Files\AVG\Antivirus\ashShell.dll

MD5 1f3247338569d28a92d61e86b20b19bb
SHA1 680fd2942c437d25b495d2139fe5804be375d0ee
SHA256 c21de8226a674843777fc9fb862ebc076cfeacb7ad6b55865e3e5b56af125dc3
SHA512 434dfda61caf1c1020176d43dc959dbaf293b56c23fdfdd9b32e24bb1fe5ba0e6b8697c58af0fbedac39d3de049e9c5af36faa2b2fd59322f35f9525a6e0ca86

C:\Program Files\AVG\Antivirus\aswAv.dll

MD5 52843402c5f06c0b9ce8c1e32a5133b3
SHA1 29168c37e5e4f18b7472bdc4d788a5e825153be2
SHA256 609668040c469e3685f191ad4f7c17c9aba1fe2acf3e5dab3d6a4c47fcc74ae4
SHA512 38cdf9972b704175881f5b02039b54ec615d56088314475d451a9897af7d4eab1a2efbff0347baacbc97420fa8d9727cabd21032330a4eaccdf7ebcd0c1be68a

C:\Program Files\AVG\Antivirus\ashServ.dll

MD5 03b5516d83dd4cad2cf0ad5ef1f1a957
SHA1 08e7e5dc557cbf236ea132ff957f8e9f01b9d337
SHA256 0487f09aa0d9b37df35aab24a0833f9690405697ae93d2b902f9880ad25a219f
SHA512 85c12ac4ad65f74c8f749a0730b79b4e7839f1ef5f485ba21946084913b72ce710147d3d8797387446723fa9528de4f3305d7572dc922946d71f49e6c00cb28d

C:\Program Files\AVG\Antivirus\ashBase.dll

MD5 226ea3d30c246b5bd1560c627b6a2549
SHA1 b53fce8db7ee69fa61ce9cf752ef9e2a296d4c11
SHA256 9a4d187ecc56ab4203b92b5c6f861839ec020a2f366c26c0890e80bf632df819
SHA512 c2a280f0eaf7ebfbab99a365ddf40f9251530a5335b8e9ebc0a2140ec88461e7edba5e760ee6283228a843566942c8513bdb5c1766b288c64440c965409decd4

C:\Program Files\AVG\Antivirus\aswCmnIS.dll

MD5 5b92d49373b11899c91485226a76cdaa
SHA1 69ca66946214f3ca66146ab6a3da3e8f5108fedb
SHA256 08bbc7d0ec494eb88e02df67e7defa2bacd214cf1a5b1f19024a17f91b26810b
SHA512 672e70561de39e984c1964f6406bcb60c947208e56637856a7317b1e2a2855e4c06a5565fd24e4961c047bccd3f74a0cd6bb37ee3c17c5dcda7349ea0e4ca56c

C:\Program Files\AVG\Antivirus\aswCmnOS.dll

MD5 7e592b9a5b8cfda4fc98f9567e56fec1
SHA1 ae7ce23f2e05680686bd1fbc865d196c50657480
SHA256 0015b420792d6601da0592dba308be09cc1f6d1ac248627d302c455226cbead1
SHA512 2ce05d178680b8174a165561f9824ccbec041657f40f6de3d996ba2f332a4f673cc38955ffc4763c604f86f3274d1955236e2c4a94f7844072d61e67c2c55869

C:\Program Files\AVG\Antivirus\aswCmnBS.dll

MD5 f965927fae77ce537c72f771597a2a1d
SHA1 94553430ace409c264d99372f8b82cb8e0e3da2a
SHA256 6270e5df4390d4668a682e9e4f9ae2ba4d776804cce7aa366a5e681ceac7627f
SHA512 6bb3c90bce531c0a6856786df813bf6695ff35e41914f2dbac465fdf880e6e080eef3c73d9d2b84306518c9225e4aa796a76dfdcf1c61411a9ba381227d91e7d

C:\Program Files\AVG\Antivirus\Licenses\zlib.txt

MD5 8041053262bc492837749777c930a791
SHA1 e8cbe20136c6d1627d40932dc4398d2053be5228
SHA256 d988d5362ea432d8c8ad9f05af876ba9409eb1ebad8c34b899fc9cc8c7ea5311
SHA512 0f321a821b1ab36a5e60a5d5e94dc26564a2cb03347b54279b5530f7b50ab3105d537637f338553dfc4ef800d28be103ab0ca50f77da3b4627fb6d7c558bd3ea

C:\Program Files\AVG\Antivirus\Licenses\yara.txt

MD5 4bf27a810f9a1f9e7c76b029b3b457cc
SHA1 8edff1174e110de6aec218a8d9ac56dbea27a1e9
SHA256 1e5a5eae04b378d12f93a3acf56dfdcac7005bdd67fe22d71c855f4e994e9928
SHA512 d818fe6f1905f46445fdbed9ea63751441fdd69651ac532aae946181fc28da8d2aac98146fb507d3df9720b24dcd2f05a20735f32e113503253fd85defa2870e

C:\Program Files\AVG\Antivirus\Licenses\xxHash.txt

MD5 06cdee91812ddfaf4cf3916f7a5309c4
SHA1 00397115d379f863279d13e823d33ed9c8b51be4
SHA256 7a9555c822ed30fcbf6832004edac893ba10bbcdb8e12d9a3662ddf1b52bd6e7
SHA512 cf22a889618b15fd40dd82809c2c8f5003fd40236798d8738fd3c56cf0f27b52e4157f834e5339bf12388dedb96eab1dc3e9d01968e1a4aa155e60cea9c96694

C:\Program Files\AVG\Antivirus\Licenses\xmlParser.txt

MD5 a3e6629906286395714e96dc4ac8edf4
SHA1 e1faf4917a367e29be497afc8ca14bb7b4493efe
SHA256 bdd96967d9b60683a91e086651ec03eed0d4ba142b37993111a0b1a608f8a05d
SHA512 c9be16142c2d45b9e81b2e33840b58837eabf94b3659cbce65e18d1501ac85cfa35fa087a467cbd55d633f1dfe370e61abeda2ed1e6db4e8b65826b7c41a4ccb

C:\Program Files\AVG\Antivirus\Licenses\Xerces.txt

MD5 b2feaa6a26c0149af9c4fbe2d6b692b1
SHA1 23df548394b0b16e6d5c733b427307288e1b359b
SHA256 d7e3eaf9a5ec61dd5f4065d252a2b0130c0e300ac3ac9cb307469e2a86ebbca7
SHA512 156e4cb2a1ae146cee9cd25258b299fdfab716866eabbab3e01f23a0e063e4469537c0a1e497d36f829e710211fca7db58608ae6bce87cacb75c66c8a57483b3

C:\Program Files\AVG\Antivirus\Licenses\vxWidgets.txt

MD5 7c3860ffbb2e3df660f4762e02a28a4e
SHA1 9a689135294896040420ead4e5a05038d0ce8cbc
SHA256 803b8b5aa4151030221b3c3f71a645da6241938421e49901444a79e5cca75fa8
SHA512 393e4077221420b1a1d73cb1d89ad264b65e36dde03271959699260e8305ff8715ab1a7535c356f2bf961f316ccb1ef1ff6e13da1708e7b53a9b6e12ad7066d0

C:\Program Files\AVG\Antivirus\Licenses\unrar.txt

MD5 7cf65040f98baf1ba15f488d76f31e6a
SHA1 c9e9e12d8d124bdc38b63a1c832bf36890ddf046
SHA256 64578d53633622b31d19024184265f01d045b637da98fbd15ca81e39acfba63f
SHA512 4ffb42ad75204da6a288aa2d748754eab2a94386c33c9981ab1edb6f848e02fbe4590baafd81f5349a4c09bb913aedd7f57d49c43d96b8ad6e63c0e44d0a8ca1

C:\Program Files\AVG\Antivirus\Licenses\sqlite.txt

MD5 bdc36270610932ff0c405f7dbec4f1aa
SHA1 36ef609b122ccde100fa096a4703f3433af6e2d1
SHA256 8c109e1d8394fd4557d916d75ef61fb406319106cbeab77736d7c666befd1ab6
SHA512 83f1346cbc0d4e49b0e4cc338fa12813661eafb00acba39d350e28c54c86d6d19317545dddae562763e6794e5268731cf4d1d8f24db42a0cf8d9ab9165970beb

C:\Program Files\AVG\Antivirus\Licenses\rapidjson.txt

MD5 cff54e417a17b4b77465198254970cd2
SHA1 a2922ac9caf1914313d4117dd30f4f1de71c5e14
SHA256 60ab263d1868282cb8262199edf648c21e45b729a78c6768bc9c27214a673da0
SHA512 a8cbf26c8babcf722623a709d5810baff798448a969000c36bfb7570d6ad388220066973783d7e162c1968fc42d0418a1c7ae15f51eea2ef2a2e843fdd9cddfb

C:\Program Files\AVG\Antivirus\Licenses\pugixml.txt

MD5 ae1fcfd0aa84b946bb9fc04ba39dafcf
SHA1 e1391ab3bcdbdd0fb6e9169ffa1d72c1650f839e
SHA256 e9c108afa89f5f9ef50484bb1c64a8d07d0c0bfce171df01840702ceeaec1e34
SHA512 bb9635487def64130a10ec3cd4106e5018ce17d9b979124d9f6674ab1fc7fa549c32c0602aead88cfa78f6900ada5a1776995fe4b864b466d6dfbf1cb53d942e

C:\Program Files\AVG\Antivirus\Licenses\protobuf.txt

MD5 ce79a5e699943b3a132c0deba1777ac6
SHA1 57919d5bf210193d05ba496a870832582f475559
SHA256 f4df8b2457697851385d9ebb93267832c1dfa24e0e61881952f6b0c452663dc9
SHA512 82cda6f61e3dff94228d3eefe4e1f65dc483aca9c8597e482c1d6584d2f70ab7327af6461080447649dc4986b9932025dbcae5c078a2dbcca82c3a985d118f4c

C:\Program Files\AVG\Antivirus\Licenses\PCRE.txt

MD5 347dfef587108750fa72297199fcc986
SHA1 0e34d7cd8afeb7e3a17bb25f371262a1ddc564df
SHA256 08bebda80b178f4b558faed4e52930f66e855614e4dfae15a436733b4712e041
SHA512 defa096320296c640a94a6abead06698a7682bf522dc1f216bd6a3fb70519d789b83ac061a518672987f6cf2d5fe5f7e60d1f9dccfec5b74c9b387ed591339ea

C:\Program Files\AVG\Antivirus\Licenses\OpenSSL.txt

MD5 97aa3aafa51953d4ad591398b916595e
SHA1 a849084b5239438f44c43b52576171f660576e2f
SHA256 ed72ce2b51ee58f117e5a021e2e04af158857f40269fbc03491f0b2a99dbcc96
SHA512 0b54f6b692ee9c92e0a867361b1601459cf6bcbd653b902e1dafacf3ec445af11023e8a5f7485e4513d351ec662ba39dfd52a9e84858128e512e68ace970c18b

C:\Program Files\AVG\Antivirus\Licenses\nghttp2.txt

MD5 ae3f3d4fd356269cb456df973156650f
SHA1 4f58ec889575f422dfe25fe14f22eeb5d009a4c9
SHA256 d0a9c5d1e40d1179f0669bd93e079a518b3067fad240410804170f05d1ba04b6
SHA512 ac1c0e7d7020f7ae091bb53e4b5d1afa8e9a669bbed4f7a418b8cb9975eace1c8c6eaa840f1248ea4f607f87ba8765d61ea0f05fc0e586ee21275633c8f1c3c8

C:\Program Files\AVG\Antivirus\Licenses\nanopb.txt

MD5 c58efea00b9a80527a4eb1edf3b48d42
SHA1 7a9460def676dec00affda16aba1e93f0fb26f74
SHA256 a9c42b959825bce9b7c72a7b0797a41580cb21f407b73e08168fb1ed1db438c4
SHA512 6cbcc440792e05c8b73755acb329e2961a1991b730fc468d7483b1c005bdc664271237de634c3a1969967f8feea03b36ee8d2dd58e94dc61f553c4d728ff9d2e

C:\Program Files\AVG\Antivirus\Licenses\mhook.txt

MD5 d273d63619c9aeaf15cdaf76422c4f87
SHA1 47b573e3824cd5e02a1a3ae99e2735b49e0256e4
SHA256 3ddf9be5c28fe27dad143a5dc76eea25222ad1dd68934a047064e56ed2fa40c5
SHA512 4cc5a12bfe984c0a50bf7943e2d70a948d520ef423677c77629707aace3a95aa378d205de929105d644680679e70ef2449479b360ad44896b75bafed66613272

C:\Program Files\AVG\Antivirus\Licenses\mbedTLS.txt

MD5 d229da563da18fe5d58cd95a6467d584
SHA1 b314c7ebb7d599944981908b7f3ed33a30e78f3a
SHA256 1eb85fc97224598dad1852b5d6483bbcf0aa8608790dcc657a5a2a761ae9c8c6
SHA512 e2f81cb44129e1bc58941e7b3db1ffba40357889bace4fd65fd254d0be1bb757625bdf36bf46d555eb3ca4b130dcd1c05225caec28d8472dccf52a63dbd6e185

C:\Program Files\AVG\Antivirus\x86\ashShell.dll

MD5 d2540d1bf4c730baaa8420257de885b2
SHA1 c34fcfbc183893ec492bbffb46eaecff048519f9
SHA256 1700c3880179cac21dd8a636da05074887430d3e3fdf5e84a5212467b8371fda
SHA512 820756a36d8e33c276972438343300c56999d4763d60e13d586990351f71723139325bbe3d19cfb9731a56b8cb1e1033a6356fb72cadf8e640deb30bbdd644e2

C:\Program Files\AVG\Antivirus\Licenses\LZMA.txt

MD5 d774c7a88d7b41d7c73490067b54e3a4
SHA1 661206b3d45d9f6836915cb266f8536ef8ed39d9
SHA256 6182268f7c8c37fef81e83f722d1ac9bd1ea4307f16005a6900bc1aa473828e0
SHA512 7f9bc6a96e2cd7a1b8522edbcb72be141a5136dda654e0e8ab5ccf39a216b23478c64bb4fc68a71ee303237e6e9e063adb84873bb786e235e9a039d914e7b762

C:\Program Files\AVG\Antivirus\setup\config.def

MD5 f4315c0aea6fb108cd0b8a64e1dc8f15
SHA1 672bcca227883bbcd53597d5dc629d0aba4fcd6e
SHA256 5999c1834a02f5e133d18c5554f07d9da43a23cc504504d68db0dd02e2bb585e
SHA512 e9217b5120278f3dbbb2ea0316554fb35748be60a771e6507d7538f0d4392d9664c13496156515216777e2d8e6fbe09ee33707d24df2a6a9659b7aa0a0c40b74

C:\Program Files\AVG\Antivirus\Licenses\lzfse.txt

MD5 fe680362852389fe7a16c47aae27bc92
SHA1 377ea1b96cabe859af78bb561ca4171544ab0152
SHA256 e89251cdaaf385d93f74b819412217e47a7a06cd65115a1f87eedda0dffb2947
SHA512 8bb0e1ae7fc66e12581b43c0823e82011ec88d714eb244a840a46272d9c04163893217b6ae6c42d07ef72c88ea154950282ef09f0aef2dd44a3e42de709135ef

C:\Program Files\AVG\Antivirus\Licenses\libsodium.txt

MD5 dcd04d4748467021571f4a01f797ddae
SHA1 c59d498fa113b09406389f8828dde6407f5a651d
SHA256 7b8c5dbc64e5ce65c94d31b5690a0e30ff83222bbbbb859df2a56b9dfef14326
SHA512 7ae6a19fdda606f467c15e97ba08620838961bf64d9c5b6843cd877a23f0697bde8874842b12e3c317e18b4f8609531bb05414d5ed4ec68337ce8e1c73aae64e

C:\Program Files\AVG\Antivirus\Licenses\libPNG.txt

MD5 9c08c5872a3314661e37289d53a846e4
SHA1 ddad81444c937f22e749ab9518058682953b1cdb
SHA256 0ad3bfee8be10e5519949e7af492e36bc349376b75fbeb412229a5967e3e9434
SHA512 dda85f29349e7222a6487f91e42e798c6d93a091fb01ed08d7caff5b906a2732788fea763d3e8fd10084361af8531ba2059e2410e845390c937aff659cd0fa36

C:\Program Files\AVG\Antivirus\Licenses\libevent.txt

MD5 d6913685a013829414179d17903310af
SHA1 d665df4878ae79173751d5a8a4346c1e2567f232
SHA256 8dd48e57572d33854a835ba6bb045d9a01321bae43377934fc08ce642992206b
SHA512 228fa37c918f781f3151b7cebfaa2575c70e515193adcae66a25c5de0035199ba935e677c1df1b2acf6951b43ad4e253a5277ccd72aff9bc60cf6f1bbf444eaa

C:\Program Files\AVG\Antivirus\Licenses\lexbor.txt.ipending.1b2d7630

MD5 513ea4bce55c427e58b1b6d40d087d24
SHA1 d2f6cc5490d34da9fd15e6edee4995d6eeb42892
SHA256 7732fa42ebc8652ee3300a086a068f6aa5008cfa0d14948b144e4b06c82efda7
SHA512 0c9f8d90f4ca229b5f175384d0cf348cdb8bccc062ba5b2f97d5aba0b9d823b0ebc2a0634041ec70e62715250a238b41b0c31ccd76ac24b8e864508d93251931

C:\Program Files\AVG\Antivirus\Licenses\JsonCpp.txt

MD5 51d2728ac2976fdf6eeb3a02cd58982e
SHA1 3d4af58a6b52ee70064abf68a2412aac2cddd42e
SHA256 c3aed6a54154090685df3bbcd72e7a84943a4f3d5e5491bc6446a0b2d538c493
SHA512 734dae65afc8b551ecbf6665dd0a48de8eff2cb815a079a2bd7e37e19388253e39441a779403cb553d091449ae1eb858ba560726b86b2486220bc694f85cb6b3

C:\Program Files\AVG\Antivirus\Licenses\jansson.txt

MD5 928ffcbe179ca1faa2d4a2747ccab1b7
SHA1 0978fa6a4bb455f6237eca37956d179b7512fc1f
SHA256 c8d3b9240b998223daf58ea16bf2856caa5cdbcb75e93d4fd20c548033d885e2
SHA512 627af0d12924e508694e977823fd6d705700eec590e9edd432605078b007143cee5c70391143ae259cff9287db89fc3e613198c4c586236d71e2de70cbc6d0cc

C:\Program Files\AVG\Antivirus\Licenses\ICU.txt

MD5 a2a0baea9713f129f7d433dcfc635167
SHA1 349e31d4f425c71d5c63e2dcf4a19f5e0edcb57b
SHA256 f155f8f66833bdc8e0479656256bfac1d66a9ec9df4aa56292308f522b4e3fa7
SHA512 87dd90b17aed6c5aaca53baaa3d149c07028f730ca34681842aa9c855817413345af27a0bd27dfc64677ed6d9b2e9013b585bda06130315cbdccf0a27103a809

C:\Program Files\AVG\Antivirus\Licenses\GSL.txt

MD5 598fd6266b820d382b6f1134f56351f2
SHA1 91d5e0457d0b8a0b9c0a2f557e0e2dc4d7f3805f
SHA256 656e11ea18f7fb862f6625469b822583f3c08e986b3a24962d74737ebf6927e6
SHA512 a1de7199ffc3adf0a4679b47ce77ccdd6ebe7ece123d286c58236a08b64c13c707e590fb5a12ad0a72e6a5907356f4d5754151eb7fb45a99d71caa50912c16e5

C:\ProgramData\AVG\Icarus\avg-av\icarus.ini

MD5 4dd845c54aebb8e29c01e075c32c7534
SHA1 75beccc9c16abb2f0daf9cf5fa1eebce14adec02
SHA256 9978842150edf3650f9adb0e18ec3e84f86c85bf0fdcc886d7a43a8dec68547c
SHA512 e7a608501a58b1ba119f9e2955e523274072cf9ba476a4adc520807a233c36927dbe6adfb34ffe0064daf9960c35464f7ba141b79a3d837ccde80c255e5cec9c

C:\Program Files\AVG\Antivirus\Licenses\dnscrypt-proxy.txt

MD5 7eee1933e27bfd222f8ecd48d463c30b
SHA1 506dd04ac3db8729abffd4132294d017b8b1fba6
SHA256 e9bfbf4cd2bb60ea2982dc50dee92466a81a42de9b40e65c4ee17298646c7bce
SHA512 279d059dfa2c81c371000b865fe49389fa911bebf4c4f7e83379598e3e109852b14a185f1bd970dc94ad53a804d7554a4547dbe7bd7902781daa8da1898f7885

C:\Program Files\AVG\Antivirus\Licenses\Detours.txt

MD5 c26b34f5996c7ed7f7bce6aaf6c8a98b
SHA1 553e3a3efec9a07d9b08fcaadbcd88f2099aada8
SHA256 f854ae8aabc0404652b48a2b3bf7f21ec174c69d73f5596934c20884eb0639ef
SHA512 e3c82bfe3bacb07e3a8327a01b2c9772e44bfa1a8012c0f0b363d6e3b2ee2371bc66f9c207611cd6f73d6f1ff1ceb9b2bf2c7d0864ade256d41d533b598a804f

C:\Program Files\AVG\Antivirus\Licenses\cURL.txt

MD5 8915cda79ecb12328ccb33113dc85ecc
SHA1 127e0111a102fb3f6af9ad82d0620f4c4ac2c164
SHA256 7c3794f6aa18b133dc86045d00f3d5894682084692a959ce521982eed4554f37
SHA512 30acf8eb04e4063478c8ce0879c838dd9f9083efb6e239393f4727cea279a171ac4c597f3f1bf855210eed3091acfb50d9d31851cf6a147774f3bf246d6f4d59

C:\Program Files\AVG\Antivirus\Licenses\Crypto++.txt

MD5 15f12037d9859d059c3a557798163450
SHA1 b3609a3d6832159913cc9b8fb128df1383087b24
SHA256 e668af8c73a38a66a1e8951d14ec24e7582fee5254dd6c3dae488a416d105d5f
SHA512 a976ecbe99ab8f29c8290f26df5906326e820eb3f212928cd2b74783716bb6b7b6e75104140b2816408af15a1db30f4f5ab05133baa2c2d3a6e48c6d915fa915

C:\Program Files\AVG\Antivirus\Licenses\cef.txt

MD5 4434d135a9d9631e1741ce7254375a0f
SHA1 e2d2dd3fa7a0f0f7814118af8c03094fc325d333
SHA256 2e69c36a7eaa4fa153426eab635c607ea0356cbc7a68a70f42a49e8ab8eb8106
SHA512 9c59379e08895138e88b588f0ee3c4ab0938e8fd6906ab041484c6ed90da38c7ef9df7843002abe5249b359dac56c9c064f9119e58eeb1fd34bb2b7a35194450

C:\Program Files\AVG\Antivirus\Licenses\c-ares.txt

MD5 128b02ba4177d31ef91600882bb0baba
SHA1 6b98f098fa3f1cab58b9610b0af9c9545d5010e2
SHA256 b87ac954a37f855f6f7199a3154e2e84623558df980e8afccb94c5c93bd4cba3
SHA512 77b2fb5862bd1d999cd9549319ffe492ed20aa63659003bfb48c2426242984f97b6666ba9afbb0cb7d71a46f4f5f7e883e31c248f9b9eec339e3d4d7ffa66a0c

C:\Program Files\AVG\Antivirus\Licenses\bzip2.txt

MD5 9087d9182e280d5a124e844fcf52af82
SHA1 058d1d953744a7ace99b86c97238a3083dde120b
SHA256 5eca2c8028dee3a4728012bc60a763f69205325d0eb75b344cb7e10a788faa96
SHA512 18758d28733aa9db4257db7a18176a8459265021f6cc60e48ee6bbca422411d798bc597a683afefce0045c2b025e65577f6ed085fa8c9acb10b3e23464da6dfb

C:\Program Files\AVG\Antivirus\Licenses\bsdiff.txt

MD5 a5f132cdee178b77dcac80346cc12b62
SHA1 d44350c4d2332a9a30f154f896e88a3e89016825
SHA256 331b34c5d939627eb370fe4250beaec0d0fb5edbf687b0c3631930385026cf7c
SHA512 d3e45ff903524667e40fd06870c957eff349e44eef22a2d9e9e01db9ff806dcfb3082ad5bf974b864944a6c4b2d7d9910d67e440a5bdb50be23600115537588f

C:\Program Files\AVG\Antivirus\Licenses\brotli.txt

MD5 7df5cd81700618ef9926feb32290d2af
SHA1 4763ba7dfa7730d98b190dd8a4a2c6818d301fcb
SHA256 60ae0f13e76cc2eaaa108677eefa4ce16b647f6bbe8cf0a1ac9429d82eca7248
SHA512 92c0bbdc5155d6e218682840dde38697327973b8f45e0c6d100705601449a6f1f8eba74cef8bcadf09ea945602b378bc64e81885f40965fa038d7974a71e5641

C:\Program Files\AVG\Antivirus\Licenses\Boost.txt

MD5 b51058fead1aa71840b79527f5bffd3d
SHA1 bc3c4d41d4cc7753bea8e7a77fdb7cd384adbb59
SHA256 beb8e42e9d6b4284e03304d05a81a0755200a965fc8d0a5e0aea1e84cf805d6e
SHA512 f1a8d21ccbb6436d289ecfae65b9019278e40552a2383aaf6c1dfed98affe6e7bbf364d67597a131642b62446a0c40495e66a7efca7e6dff72727c6fd3776407

C:\Program Files\AVG\Antivirus\x86\aswAMSI.dll

MD5 ea93c8fc020e6b3030b267f01bd70d69
SHA1 bf9be9af58da3fad44c76d59ebb3489997cb8bde
SHA256 c9bc7db152924d5955ee0ea90db43d996d439b971113cf5aeec49f4de456a602
SHA512 e1d8bf2e36d42575763ecb12a8735e69042e8ad3038ff922168901359ce32e4d9a82fff02607561f4b75012e7512e9a694c5f9ef06925305a8d3377486388fd0

C:\Program Files\AVG\Antivirus\x86\aswBrowser.dll

MD5 8c0abdb4703cc2740259c71f86e3bfda
SHA1 6ee9bc765c68c72ac2111641e09d4cb31d1ba6f7
SHA256 05189b540073bc9cbeb8d6eb46f44169fc0a06c16249d16eef11210c544a2a85
SHA512 f5413ae09b719d639ca5bced4034fdde23070a06b27ffc9b1e0765fa976fa6ce3ef051f161cc058ef0ec3e93efe82a735a9a449e4ecb78cd7e9ed6c29c0ce69e

C:\Program Files\AVG\Antivirus\x86\firefox_pass.exe

MD5 1ab4784ece34aabcb046388650d75939
SHA1 c07c950bb794df6f519a77fb064460ae9564a742
SHA256 3ab77f99d440d24345aeddf19961fdc18160476df28f243ee3a97f62944267d9
SHA512 899def5a8307c7add9e28a0e62660fdd0eed13a89f1467c221eedcf5800d14f47a19c9fddcb47e8eeb1d0900d1768bdb494eed77ac30d752e4f99ff47ad7be7a

C:\ProgramData\AVG\Icarus\avg-av-vps\icarus.ini

MD5 3c28e285db12f32a88606f5c0a8c424a
SHA1 3112cba6bb525549022aa28bcf55952e168e4f93
SHA256 226bf72377b3d4a1046984c2ec7ddc12d073c43d48e37448cd5d4d5d5d2aabc7
SHA512 35d923ee1093f3c3090e9baa48464d8866c22d116ac92f0823ef7e98c6409330b06140c1d2b1fb51572ce187f23bb3e9fdca49528b1f0678f4aac413a0df5b7a

C:\ProgramData\AVG\Antivirus\profile.wprp

MD5 ad6bb231d6ca341d585caa0881bbc680
SHA1 249d7ed96bd7368985770fc91243ffc27a6787e8
SHA256 362c8627a8cde159dc2b52d1c3315c4499dafc8a5a6781acb373307453584785
SHA512 70c0943d74381c9b00b59cf28297211905a983c3c5b0203d71d9f28a1367c01d821f329aee1fef6d2b04f2ad6552e32d5c7f7eb8ec053691d2d1f6b21940694e

C:\ProgramData\AVG\Antivirus\settings-24.10.9535.2192.ori

MD5 d6d47f2fc4249066cf91a53c7b920259
SHA1 12fd18a223a52963e0365362cf1e350355d9c8e3
SHA256 1a42bc373998c605dfa8d4df5e2705e1c209326ed578bc67ebe0f3dedd2a2951
SHA512 19cdfe62d19bf5073f28d6693412585843c113d85b4a3e01460fcefe76aa1c85a1e908e8d89016eb804a4a875a9ed5f99499b254e673074e393981482c21d209

C:\ProgramData\AVG\Antivirus\Fonts\RobotoCondensed-Regular.ttf

MD5 0e1821fdf320fddc0e1c2b272c422068
SHA1 c722696501a8663d64208d754e4db8165d3936f6
SHA256 4a7c36df4318fee50a8159c3a0ebde4572abab65447ae4a651c2fe87212302b5
SHA512 948adb943bfae5807e0e88a23364d8e706a8bdfe8c4d00592a95cdd34081a64a8d44c4ba6e33a65874ac8a7117927c3de2b995fdc57c2746aedd7161df727293

C:\ProgramData\AVG\Antivirus\Fonts\RobotoCondensed-Bold.ttf

MD5 52f9b35f9f7cfa1be2644bcbac61a983
SHA1 c348d9f1b95e103ac2d14d56682867368f385b1a
SHA256 28a1d37668b4cf94fff5256e9639f175baf4dd654ec84ba910485d38beefa6bd
SHA512 de48b5e6751134c7fcaa8ee4c734e0f458e86fc59249ef19d9c45b7098eb7273c4119d5944332465080154a3d9c8acdb1aa84ccce011bbe5c7f32251acde6cad

C:\ProgramData\AVG\Antivirus\Fonts\proximanova-regular.otf

MD5 9372d1cc640df70d36b24914adf57110
SHA1 374508b24ea24906f25655de27e854e69cda2935
SHA256 31daba103891abf8b4d0537661117a8689c9ee5d91ee264f74e64ef1bb37a61c
SHA512 8100e80e7c7a6283a348fb0c2f9339600dca96f8db21e49c3c875ca6c0129d87452ca0d678904e40f65404f5c78b37a82718def85efc085d5f2c9d0ff94182d4

C:\ProgramData\AVG\Antivirus\Fonts\proximanova-light.otf

MD5 b7913e898d3cddf10a49ad0dc3f615b8
SHA1 560917b699fe57632d13cf8ef2778f3833748343
SHA256 1e90e49b182c8b5876ee6805ff3cd2e39a23fda79df33d2e8b57020d6f208334
SHA512 baee3e6114fb8b4f946cd85fac7bae19e1cc681820c6c5824092ad955e70ce7253ae471aaa28ad97412e67d4a9c741137bf3ff27233bd94b6d3a654f72adee16

C:\ProgramData\AVG\Antivirus\Fonts\proximanova-bold.otf

MD5 0018751ac22541e269f7c8e0df8385f6
SHA1 541e47f0b29737b74c2758b1f040783485de2a6d
SHA256 9f4d35bd7ca167c7659a872bdae6fde11c306b07eb5c758bae762f7258b39071
SHA512 6b6465848cdc0fb24ff2b1953e71b17c19e5e4224857df761222224778b4659443e8ce21bea15c76abfbcd9e371e607a0c1a94addbe761c2f07c1648971406c8

C:\ProgramData\AVG\Antivirus\Fonts\OpenSans-Regular.ttf

MD5 629a55a7e793da068dc580d184cc0e31
SHA1 3564ed0b5363df5cf277c16e0c6bedc5a682217f
SHA256 e64e508b2aa2880f907e470c4550980ec4c0694d103a43f36150ac3f93189bee
SHA512 6c24c71bee7370939df8085fa70f1298cfa9be6d1b9567e2a12b9bb92872a45547cbabcf14a5d93a6d86cd77165eb262ba8530b988bf2c989fadb255c943df9b

C:\ProgramData\AVG\Antivirus\Fonts\OpenSans-Light.ttf

MD5 1bf71be111189e76987a4bb9b3115cb7
SHA1 40442c189568184b6e6c27a25d69f14d91b65039
SHA256 cf5f5184c1441a1660aa52526328e9d5c2793e77b6d8d3a3ad654bdb07ab8424
SHA512 cb18b69e98a194af5e3e3d982a75254f3a20bd94c68816a15f38870b9be616cef0c32033f253219cca9146b2b419dd6df28cc4ceeff80d01f400aa0ed101e061

C:\ProgramData\AVG\Antivirus\Fonts\OpenSans-Italic.ttf

MD5 c7dcce084c445260a266f92db56f5517
SHA1 f1692eac564e95023e4da341a1b89baae7a65155
SHA256 a54dc8488f8193bf30c3820cf6f261f911f9d328d699e1a1b8042641554cec70
SHA512 0fe7ec4c8eceafe87fbbdb9780519faffb646a23579ce5a4f5170808284c1ed85b9aafdab18cc4ddcaa9a7e6e2559fa6ed984d986ba93d1bbf4bc0551d5661d0

C:\ProgramData\AVG\Antivirus\Fonts\OpenSans-Bold.ttf

MD5 50145685042b4df07a1fd19957275b81
SHA1 c1691e8168b2596af8a00162bac60dbe605e9e36
SHA256 5894a3649b213cf5b2d673b6e7a871815fd1d120fa68a463592f27db14eae323
SHA512 9c995725aade5f126c727faf1c4453344e37b590a14152d31d44dca3c9328a54207bbc7c840695cb55bc1b559097b457888655e11199192cd5197c85aab8b1b6

C:\Program Files\AVG\Antivirus\x86\aswCmnBS.dll

MD5 0a516d7e7f3e337535126e620f74e395
SHA1 1b9688361929822014e0d13a0a7b7581615cb56a
SHA256 2a6c7b0c9b734c3377971b077ef3d69b229abec30928e5fd4517f98d52d9e366
SHA512 32dc32e0dc4008392633e426aabd9be2dcce3d219cdedfa978b22f6bd38fd78a94febc517cc962f906448f61d8e6922467aa983cc1402f196365d4dddee8cdd0

C:\Program Files\AVG\Antivirus\x86\aswCmnIS.dll

MD5 e807cd0fa41861bc7aa2e3eeb92439ea
SHA1 59322a2fda7833c44eb2405cdfff1acbcc37d9b1
SHA256 63071df52e71ac50341950e048fe4dfd5ceb476c1eccd5a1f9b109d3ee1f8afc
SHA512 37a8be197960f701e4375fb633342d6902d5ace9d6d4cf18593de3d1b58b00c66ee760ca77aa75f209c0c63a1bc2f6a13e55136a5aebe98d1ab078247199f50a

C:\Program Files\AVG\Antivirus\x86\dll_loader.dll

MD5 53b638fe5c6fcc92513c0e36fda1ace5
SHA1 18ac25b7e8f4f5c2d90945f736950e71144bca05
SHA256 43ed746df7b951606b3496e33b851761bce6b36f3438f4ba3b0b4120a02d2fdd
SHA512 9d1cc87cf02cde41dd642dba18372671301c3b2af8f2c76c0128a9d0f0bd20cfb6b592e59a2e795d58d06c41a8aade57d9b96701c8284abfc3331963f17ea5e7

C:\Program Files\AVG\Antivirus\x86\AavmRpch.dll

MD5 6763a4e3f1dcee5f1fc34751e1101f2f
SHA1 fa23aa0852f88b7ecfb6ed81ed8aa5c88f978833
SHA256 16f88d227f9e72bac9d1fdd4b799bbd6496e2e47e0822112b29227d91b41c8cf
SHA512 6105ba6add69d4ff549aaffbfbcd20319614bd52229ed1b2fb218413c63fdb2f5bf895f3eb1714d1caeadd81c8686c411d356c8756e180eedb5416bddc78632f

C:\Program Files\AVG\Antivirus\afwServ.exe.ipending.1b2d7630

MD5 f6297f96f41a6e805bdb5363157c7ae0
SHA1 5788894b42002b49db100124bed94c07a11ffda4
SHA256 3425c13ef4b5de91ca5d4de894b87bcff9fa43d65a8c155757a0405a8b09e91d
SHA512 66c340418c5509563de0d998e96ce50931b0243514117fcb06dc3cc53580722074ba0401bdf664de221747a954dfce8f85e10dea1c1bd770b9c9ba67a5130e1b

C:\Program Files\AVG\Antivirus\x86\aswPropertyAv.dll

MD5 456fdf91c1a4e8861b6e5c80f0588c9c
SHA1 302323df21cb12817bcfc5d3dedd6242de34791a
SHA256 697b532265ea7ace962cec10fbe6260c8f796ff56bcb4d5788a8ab345afcdf03
SHA512 7655920078b1b57ea7fa244fb6f60553002a05debe752d6c567308c0338a007d0df45ae9706981b491f6e955bcb53591d02f714f3ca0dd0fcf6e910273a0a077

C:\Program Files\AVG\Antivirus\x86\aswProperty.dll

MD5 d20dbb8832292847403ed4d1b293412a
SHA1 97f78709a9f58f4164ff962c0b286a8ed0bdf7f5
SHA256 c9331cf95e9bfc1a72f17af04f8dcf3cd03e11fe0e59bd69abec12d68f21aff1
SHA512 b07026831dcdb6885d2699b4815cf15ffeeac626e8bb5344ebcfee5153b7498e9f3de75d870b02d12cd5c7a375e7928e962d440cf326aeaa5a91f75282b33014

C:\Program Files\AVG\Antivirus\BreachGuardSdk.dll

MD5 bf0189669549022bfa572a66aa21b372
SHA1 14c82c72da1166f278c5bedfab0ef19b3cfdd88c
SHA256 7e3cb380117e7daa5918e53e778e406e4d5d3ad76b252ca659ca6b277954e4c6
SHA512 21c73aab4139528436a0b3ed66db141d4ca542dafc68ce28a6fe7e574329e49a915837c0978cc1a1703cb2eff220422fbd8b37b97dc5142fdb897770bf39c54f

C:\Program Files\AVG\Antivirus\Inf\x64\avgArPot.sys

MD5 a8242346859de4ded994a387d2023d4e
SHA1 2caaa9d1254b1a034986786b476de00c0b88d436
SHA256 56f7e07b61fbbb19ced81ded24ed51c539a0db7ef87c1fff9abfbb0e9ddaec94
SHA512 f46dc95d30bd45bd783fd64303a14e12464c6436da33d58fc78c81ef8638e08cbcea80c92aa3a42d10dcc1aabecefb7343b38f7d05244fedeea51685cc6e1e80

C:\Program Files\AVG\Antivirus\Inf\x64\avgArDisk.sys

MD5 db4ea47352a6b5243de43932cfd7c3a2
SHA1 16ac14cf62fcd244ca3692c63aea01baeff8b4a0
SHA256 882790e340589eacee1d14103c07c70cc9c3078aee8b16bc34cebbe351e66396
SHA512 a516eff9c6b03c75edc1f03176129e16ff5fb23d859153b32e94079244bad5237cbaa5dc9fd20cfacda515cf61f6d146118f91611e2f8b3d41679bd155e81efb

C:\Program Files\AVG\Antivirus\1033\uiLangRes.dll

MD5 43dcb140465461fed184deade327fe61
SHA1 01ff28b8d1052f940f6ade4e8a546045946db684
SHA256 97b4202637a8162cf438533dcda9039a63d809618e31205a3daf64be1409c433
SHA512 f3f5655266d242795eb50909938b4a77246d397b431f95b863e184c8b3b6cd1663765c46836487904908d53ac73a9d4707d7476ac03153b8f663911debd120f8

C:\Program Files\AVG\Antivirus\1033\Boot.dll

MD5 49dc610aad7ae035f380786ee8048b5f
SHA1 32b0567595229cd7ce96d7f7d34ae04c84d13848
SHA256 063bf3f1771532281abdba569e21543f3fc22fd474ccd81bd2e04f307bef4ce7
SHA512 77ec87ffcc38ec4b7d0f4206caffc7620e0a482a02c15325a7764737e1d063b1f9d9d008a262ed8d12494544c0018a36ea2bea70c483472bafbac2d7995eb607

C:\Program Files\AVG\Antivirus\1033\Base.dll

MD5 27fb01df6e6606fd68a3c16bd4898b6f
SHA1 7d6fba55ef3424d0ecbf9e201842e6d8126a118e
SHA256 aa4cf1091bfcfacb501830e6cb50b8424356332c830f0be3deb8204ae357b47f
SHA512 19e6406b520e5b5dda88742783a366ec3a985dde8fa9bdaaecb49ea72234da5014235610c5bfaf4f0b3365661755d82cefa22022344c3e99da83f1a66757d329

C:\Program Files\AVG\Antivirus\1033\aswInfTg.txt

MD5 20511513a692ace563587fd8119f022e
SHA1 a3a058154b7f3370ab07026bdf9c61d0487663f0
SHA256 f0215ceabc6e0fa003e8079879956603c35466b7e5d998cc84789ade5cfb9119
SHA512 189efac592953ec4fd30263613e67abb7412ef11ac3a5802bc8f27b01a24e593493700226f012d43999e9f53e43623a209d230741327021946d8e79d62db2b7a

C:\Program Files\AVG\Antivirus\1033\aswInfTg.htm

MD5 7db7dbd7815bebd69c5005b16f191731
SHA1 94d9ca774f6e0c153666e7179bedddc1d0771d3b
SHA256 14d52b2db6114ec914d5a43b0d8dc285911da75044b19909c914af874ee54a90
SHA512 ff6052349bdc78d96aa1491d8ea8c764e53c9ef02ea1f2a446d90c153ff9f921fd301afe83a6f5c65fa03eee23a76c7a0cab72f73e41b5bfdced0ca2ea6adcfc

C:\Program Files\AVG\Antivirus\1033\aswClnTg.txt

MD5 f27e56279b0de10cf9330dd15c36f997
SHA1 3aae430d7f3248afe29a4e70919570005bc4743a
SHA256 f49a2735886ec0a1199973160b88ac88dee576588f4c0a211ed5ebf44c566067
SHA512 bbd01eae02dacd6452a1edb191d1aaf00f2009789676cedbb5e50d39627ad7d86176763294c63c48a8e84bb77074363c5855aa42c4e601584748318751f6b7cc

C:\Program Files\AVG\Antivirus\1033\aswClnTg.htm

MD5 4ebf04faf20dff03f5d62d5af5f32151
SHA1 7088e12344219071c118ddc11415c7a8643e52da
SHA256 c27d162c8c40c816e09a3a0093e7fcf30df436e3266065633450595ba156ed53
SHA512 b784cdcc2ec75da2faf00ccafc211cb3fc874f085000bdb6bbd2e05fb1d11dd966cb04e5a1c8f4c91b0720e3caa7a8a82c753c87546005a969d27ece581af163

C:\Program Files\AVG\Antivirus\Inf\x64\avgSnx.sys

MD5 8033a433d217e25dc8ac96d2d9b5a426
SHA1 8cf21d3a4068660c003e1eb62e18ebfbdca68a0b
SHA256 b5cb6c222242dea57d80427051d2542ca2402411b75cc95e9a7601679cf8f8b9
SHA512 cd4e7b0717d585ea1be73b47ad826652d78ee831d56f3a870606388dc8dd04e3a78d00d240ac6e603438ad45264cbb7fb74844b4b004db94432d4dfc10ce22e7

C:\Program Files\AVG\Antivirus\snxhk.dll

MD5 4357838a31a368b3e35fab567d67af9e
SHA1 cc4f1a9f42dedadb3c076f4f53d8b83ad5ddb4cf
SHA256 2adf5c0b4d69fe1a187e149357acd0ce54b6dfff8e0e6b4845c9b8e53d727db0
SHA512 29e3a38873d8f5997aae1df5a9126bc6818690dc4d40a4aa01fae9c0718d82ba4039d6900cf4fe04ab18bb45761cec5e4cba84e6c273a455fcd54fee310f2c68

C:\ProgramData\AVG\Antivirus\snx_gconfig.xml

MD5 db89473157a2109d2cc065b9c62acd27
SHA1 d903a0ed7c5aa5a686c883a597894657a8c0beb9
SHA256 2b8d115e38b1ac4ea4fe0ea24006e4e2d7e6429f469b4ff0f1ea45fee4e7e8d6
SHA512 41486f90632e52127358b7a6046b347d47ffbdd62970ed67980b56c247f68ece4d7d0250e19c28c7045ab3d4c9d7db40e1aeaf2a4ab33d6ae4b591f05ebe3d3b

C:\Program Files\AVG\Antivirus\x86\snxhk.dll

MD5 99075c925659b1f1933c54d3a6684c7e
SHA1 00164f72c31bdc7b9bb40a72e73aba68261c4d25
SHA256 f30ef0859cfd2106cdfcb27bf077c7d69084b10853e94b1907df9abb8ead75b1
SHA512 ed09e26560b0d50ea398298d7bbee5b18fa805f793ff03f978183c7fcd62f85da7ffbab653929be28309ee4fa64f17ef92a5c5fa132615d015b3ba5a0814543b

C:\Program Files\AVG\Antivirus\shred.exe

MD5 e8823b04c4f55819affb6119d94468bb
SHA1 646004fa20a5494fd3237095c24218943ec4fb56
SHA256 41031c0951fa5696bc8988a33f17f86b9cdcba9a0f85a889676024612a864c54
SHA512 370d8300bfa89eb6119e42229117f52815e10ebec0ebe957035a2a32c8f720b1f0626ffa7ba1aca90b0763bc0b4ab44d23f614c42298af0a8b4782f25d682d0d

C:\Program Files\AVG\Antivirus\RescueDisk\wxmsw315u_core_vc.dll

MD5 2242fcc9038b6751388ea5c3d3fe7c4d
SHA1 7bee974f4573d2e718e6b3274b59b054ed89d847
SHA256 bf6ddc8da511cb35e7390d35072db0c4a1d1d4504adc1d669482d0f826831646
SHA512 fe9c31bdb5a029268bcadfc260408bf39565ed7c20957ef5ee87c8b094f80757038e2a4ac6654fbbea0e1bc68ed576fd94d2697d1811d5d6dc96f1cdda80f8d2

C:\Program Files\AVG\Antivirus\RescueDisk\wxbase315u_vc.dll

MD5 6be3312340beb58df3c490f717ec4b36
SHA1 1e45f5d386260d8a232e7c990802db2c3c2fa233
SHA256 19bb793140d369fdc1e94e79aad0afe90a442eeaa4945b978232b86254b38642
SHA512 a1aa942bbfd3773f7ec1ce027f6f9a7296711bf27f96eb4a5398bd9fb510fe95ff9bd00f41d767b3982a2fd1bd1442368241e6e336c1249a030c31e6535d30e5

C:\Program Files\AVG\Antivirus\RescueDisk\aswPECommander.exe

MD5 459a2cb935a4bc0aa5f7e31c8cdd273e
SHA1 e943de565221112b2563c1eb467faf8eccbc2949
SHA256 8bf8429b84831cfce7615052db30b68ac8c977d2425fde11de1c5f9a6064b125
SHA512 92bec86dbc983c895c17b511dd5df18c4b2a18b7c58aa43d0ed1c6e2970fa316c5e5f281b9151b0e4b1f9374f9393db945dbb05e9f5e623653f93b27ac14fc4d

C:\Program Files\AVG\Antivirus\RescueDisk\aswPEBrowser.exe

MD5 9803de01e3271eef99941255869de0b4
SHA1 ca60679968bb4383960d9073b8c781b84bacdef6
SHA256 1dbb22e633d8250a7ddbbb381f69b7a2f75cade49e76fe785f68243aae299612
SHA512 84bcbee9e20ed77add485faeb5bf0d28836e9396eb1501fc25e3e10e7c29fe0347fff795b75a97e09ce7e4e9308cfcff5789a80fa5f05fa1cb07830c563c0c5d

C:\Program Files\AVG\Antivirus\RescueDisk\aswRegLib.dll

MD5 fcb1b5fb1f625be5f48a3583be1b5d84
SHA1 b810d17d97b9097b659efb5345c2c49ede8132ef
SHA256 476191e1aeb46ac1afe5d65d981cb2c9064613102d200b383c7ca14f56d983c3
SHA512 6591bba6585bd376a9568fe43e1b7df8a81f799aad6e932f1d32b462721965a1fd8fa936511096ea38c06eb482681b54fcbc791af32189077a0364708771bba6

C:\Program Files\AVG\Antivirus\RescueDisk\aswPEAntivirus.exe

MD5 c32c0a91f8d567d4573822ffc5a41409
SHA1 0f7bd8db47c204d7b0d19865d3b5d7fed3153c3e
SHA256 a80563cf3e2d49ee7c2bf6ff2d37ebc4f36488b22a32b994b875f0217e9732d2
SHA512 f276a1e786a6a29c64ddbc6ca99e7c2495cb7c342450561f3d6be5ed3f0dbcb8de8963a74393f76acc3a46d2d503cf24e5bcb946617df1775bb0df5de99e64e2

C:\Program Files\AVG\Antivirus\RescueDisk\aswPEShell.exe

MD5 769d4b72f1cde3067dcbeb6f4ef6fac0
SHA1 dd7ae0b6d80ae8762352545d885f344e445c0fa3
SHA256 b05f0051b6e2df09f695edf07ba876eafcb28bf46100d3590dee91afa2ebaac5
SHA512 446c2b98e8769463bbe7c1b3e3e22e023459e6c173237dbe9b89483ce1f1d97c186ebb6795d7a9bfa093ec3b39f72d7bcbe80db2207556bbfe75f5a1790c3444

C:\Program Files\AVG\Antivirus\RescueDisk\aswShMin.exe

MD5 5f8e0c84341e7ee6d4dfb34e6258ed24
SHA1 03e99e1c9e55128b6643dd2210e031f780e1e27d
SHA256 5ea58c3349de7c479d1d8d1b8273d36e54e71f10a2a147a3613c2372345e4220
SHA512 ab54ee21c525114dbbdf99589f968b3d56d31da195b1e958fe1ec41a34162b04e90d39a92e1fe83c42b5970831d06c47925e7f9c05002c93bf544760f7628055

C:\Program Files\AVG\Antivirus\RescueDisk\waikamd64.mst

MD5 ec82d1081d31554e75d7e72b30d31d78
SHA1 ff5615640cda8cec9fb0ad3fb8a4e441bcc8e398
SHA256 0823905ce46355fe514ed547d5c639af39b2b3d28a5bcabd1846997c7a4208b7
SHA512 2f36323db92f1c1d4e3b8f18f8258830a6200bc7061eaaeadcd0a655e30276592376fa4c4f706f497d5fcd00a1e5c5649e20407d3860910a184ccbe4b36547b9

C:\Program Files\AVG\Antivirus\RescueDisk\background-loading.png

MD5 ead968e4266725709fc170ebd749f760
SHA1 bf99c488beaceff8ecf7734bf1a9fb481d3ec434
SHA256 5f0799aa26c5ee902f26875c02bf0ca3cc884e0a2722dfad89624659e03c4b9c
SHA512 cfa46409bf381e4c52e35c9f2369b9b4f377ec68c62609829992b9bd46e440c66643a8b457a98834336d1ce3c7828fbeb9c2ccb4b9ddfb75ad2b74d77702df6f

C:\Program Files\AVG\Antivirus\RescueDisk\background.png

MD5 d681f59276007a55650501ca31715f8e
SHA1 5156ede5ffbd33946dcc2b23b2c1d53e8e7bf702
SHA256 f800f6f5e01405b463ed0cf798029354c405fa54c0d8da59cdcf38a2ce9d73ab
SHA512 c1be5415b87fe1c97dd1315035034815c1cb4eb08f71c2e0e9141eae7628d25045829330207fe4cd745e3e42bdb77cff7db09cf0e2e982665b59a7493f026d6b

C:\Program Files\AVG\Antivirus\aswhook.dll

MD5 f8163e38f558e16fc1297b7c673f92e1
SHA1 d9d435722c1331f0dd06ad8addb0dee87d69c6f8
SHA256 a08a96842746b9e23e777aa6c1cde56e46a7801dce22b31e3450d90b2f33a77a
SHA512 c5219730bc5741265cec691b7ef0a558b54374b0b3695464df868cf82782df9460c0b8cd21f69936807c5609b69ffbce74f1a4f3f12cd349df693407ffac3211

C:\Program Files\AVG\Antivirus\aswidsagent.exe

MD5 38d324bd95bf276e790417001c574e76
SHA1 8dfd837c25b14f5fa71288c5c3dc7c519fb0226e
SHA256 a7f3ea7629cd8e9eea43d261bcc410e68e43b10164d782adb8726e12ffd4f1b6
SHA512 bf9bb91536cd7d29357cbc1fb1bffb956b13508e7d7a0b53e20c46f3e06a2a4d58513d3ecf6896157ec0d8d32417baf9bdef6b49435b16143d39fda8343b05f6

C:\Program Files\AVG\Antivirus\aswidpm.dll

MD5 8c55fec46f81d7ac8464aab6a33dd619
SHA1 bad9d6534805ecb20addeda04bfe8ee152ad2cce
SHA256 529e07a84702640e29114ee4942827c0870b0fd0e978574c7e0330aa98f9ba86
SHA512 4ff33c36d2ebd813a04b06b9233bb55685ff88a1180126b9f6b6aa6a066435fdc37f00fc4152be8828ed39aa26a36a7a00618b14cb8cd69169fda9cc7631417a

C:\Program Files\AVG\Antivirus\Inf\x64\avgbidsdriver.sys

MD5 5b1a474ea72d29a9cc81d6993b4d814d
SHA1 f358d6dc26a8c47d7533920e5173a1727f5e1c20
SHA256 a7b9a82a23707cd2f257ea339e7f5967a584306cc9a746344aeb4ba44ddcbf58
SHA512 003737b8568211d5aa821cb952ffe4c0ae7446b2b48c4d91690cf41b6f31f4ca6aa3bf9b23ac6e1a8758ca9894d099589f24d3d0062bbf30692bcf2626c054c2

C:\Program Files\AVG\Antivirus\x86\aswhook.dll

MD5 7233052268fe084cb83252f28d151e86
SHA1 4897e3cc3aadfcb2463f3974368b9773687027da
SHA256 9be2f0dd692a2e00a34ecca5dcd695a66c4829e61944cb78522446e41a5a59a8
SHA512 b9ad6da61cf2706b659edc3a00eb4783b99ae1f0eca66b4ad866ffddd6205c38ff15acaa87b1adc2e1c5e65e556ca985e246650874677da98169e36408e2d682

C:\Program Files\AVG\Antivirus\hns_tools.dll

MD5 ac32c3024b46b8cf10021d7ba31975d2
SHA1 95b0e9f4e08e34250b44f17a5cdf66552a549eb1
SHA256 1990c5f71461d84d44afc6e94ac5825c9b615a8bcd9829d8dc42e0711ee4cee8
SHA512 3ebcb12270370095f02f5314de800654d916379e60a9b01ebb449fd1ac9f66ea7e4f0c5edab597a68093464b1761e36c8233bdee1301266faf2c50ab07deddd8

C:\Program Files\AVG\Antivirus\dnd_helper.dll

MD5 8bfdbacb3c348e71cfadca3c7be29741
SHA1 59898389a2a186dd5f975b4b09afe404c6e0d5a3
SHA256 3e42b4766dc3e66813862e3f35bf083c3a4841b85773ecad26533ac3bfaf82ff
SHA512 427907ca912305f64b342fae20f1b395214dcbf4a608d55924491253e1fe4836ccd0a153581c674baca38625c6b04f0f3092597761d66f89de950cf92c1ff2f1

C:\Program Files\AVG\Antivirus\gaming_hook.exe

MD5 a3bc3dc09773b6f9f3a53c27c1f0aa08
SHA1 9486906fccda29011f4a107696d6b54e573d09be
SHA256 80994b0bd461cc1dc51946b5979674fedd65ce48482bbc8e77656608f1d57f54
SHA512 e85d95adf372215ffdf5d66d058204fe2ea0c813f039475239bb63d8437914b5be717d71169b5935528bc1888dc8a646d5834aa35ea93e9874206c37ffee83a1

C:\ProgramData\AVG\Antivirus\gaming_mode\dndrules.dat.ver

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

C:\ProgramData\AVG\Antivirus\gaming_mode\dndrules.dat

MD5 1527c1fd5da898c3bdb68b8a105937a4
SHA1 d0f9fd4a698f91f54f78dd2043c1349a7e4ae7f3
SHA256 c269c9e66b2acdace62e8ab631f39c24801c4644193bb3934a8dea3c43f669df
SHA512 d574498392a55b47dc81276d63a33e9870232e77f60ac0d78c9bd29e3d419d015a19241e86a7963191643f6c0d0fd2db613ca5290d559c3801358a60fd5cd27b

C:\ProgramData\AVG\Antivirus\gaming_mode\dnddetection.dat

MD5 0bd42763975dc54ad5efdcd321c750cb
SHA1 24202455a58c7ced31240a90603c6489728bbfce
SHA256 4845a0d7b287399933536c12ad5549fa4f4d49f42500c7311dc2c3c108480a7c
SHA512 9204678ddef894657c0f6bd5451294e104ffdea90dae12fc3f642547debb80435b0cc9d08680f50482bc1236daf5ae1cd79c322eadcde7765e9e251231753e79

C:\Program Files\AVG\Antivirus\x86\gaming_hook.exe

MD5 60c38b3b2809f862a71db52e0005a48d
SHA1 73955a3635a9a99af8260300fab2315bea012351
SHA256 154a1adf8c8ca0e34658be3c4bc93a027f4c29beddf02bc9ff8229cf95605205
SHA512 ff1ef2c9dc02b92e85016b976fa024cc01170919d99b8b92aac74cec2a8d883be4e26fd98375047babc20debf5f3ed3532aa4add96cd1f9046a1ecd4719940b1

C:\Program Files\AVG\Antivirus\x86\dnd_helper.dll

MD5 4d714f67b63b5e09bf4f7e3891d236fa
SHA1 d3acbdd823a0e4ccda1577105b6499a643b018e9
SHA256 02c47858ffcc17225aa0f01b570d4b8f432ce2c8d8b16b553d6b74fc119b92c2
SHA512 e548608789449f744e910068af5502c7167e4c168b277b9328fac57f490cf76c630c42b2c019226e0f8f9fc823d55bfb9f6f17e6ee10794bfe42f6f8c89d3705

C:\Program Files\AVG\Antivirus\afwRpc.dll

MD5 cbddca89fd2fc3e545d7a9dd80f554c5
SHA1 04ed1d84d73d79f7d463fff90b346191a1d02ed7
SHA256 9c84ae7ba2b56010ed9e15eb6b28e860d912f995c68160b3b43a9930982f6a28
SHA512 a89c03da750ce55e520012a0b8b215e49c273b62dcd7ad2f1d55c25130712bf203f5ce0de1fb73bc670ef55e48c05392cfff27a90128f498508741c959f73280

C:\ProgramData\AVG\Antivirus\fw\templates.xml.ipending.1b2d7630

MD5 57c48534cb09fa5c69cc50f9dee38780
SHA1 7f79a4c14ac785168ab952df20bbfdc3cb8b4daa
SHA256 6981c6ed47732dcb649950f4a51b17ff3d366ccf14a51009f0b92d3f210b047c
SHA512 35727437e3baa2d23d178303989b0bd7d7338c656c7745496899854275df36011546f4b7f93109d6f2e639c92fa14787b5014736aac8166caa16b50d8f610077

C:\ProgramData\AVG\Antivirus\fw\rules.xml.ipending.1b2d7630

MD5 7eba85dd566b2e05c6c517ce674b4502
SHA1 a16ab1abec4e1038c7c9063e07ee1467667aed73
SHA256 b5b5e84fd000dea87637ea59a7a20747cb0030270b986b4403a470673235339b
SHA512 c98fa54cf1f84ae3b87939fca976c61dc088b38c45885bdb415152cbc8e7ff6626c286fa35764f031f3ae03a8a51f45ff75d045d78b928f41c178c0c6a6c9894

C:\ProgramData\AVG\Antivirus\fw\ports.xml.ipending.1b2d7630

MD5 b27bb54e1fce83e05eb13c960c19b357
SHA1 5b7931054732cc7cea414b90cb37aa329122d7a7
SHA256 6c26bf93abfd6f2878b608f6169e46be2365644e9de78c0b9e3177f3d0aff0af
SHA512 82a5f72ebe55e79a6cdd7449aede0945db9734146c4b6d08249bc31010393bdbeb65de861e6cf24168dd25519db7d55498e34eb3c85c6bc5a1f707e2a0149e90

C:\ProgramData\AVG\Antivirus\fw\networks.xml.ipending.1b2d7630

MD5 75128eadc720b56babb24ac629172155
SHA1 83bc1da43e4f51326713e43a44625987507b4467
SHA256 130a4428ee45f3a17252aa797cfaa35d8e71070dcccbc6059b31eaa087c5f5f8
SHA512 da45704247caf68c7deb59f587f392eb431a1ad89a653b78b7d6af286f6c6af7676575fcbc310679e4043040038f5ca3e0ef0167f6f6aa199bd4007291a39c57

C:\ProgramData\AVG\Antivirus\fw\config.xml.ipending.1b2d7630

MD5 60424032333d4723d7f4ff7543a7aa76
SHA1 1fa9fa26b21439adcd5258727f9cd0b954d0f5a1
SHA256 be79affc10f1d93f9ae438c6320feed7846bcb0950cd32e8a564eeb59203b6ea
SHA512 859a800dfd2de9f0bc0f5e81a8f0ab80eefcb56fe0a9e634ab8cd13881ffd26e13448529d9a0d096a61d5f1e410eead06dac75a91b09faf7f692d8884a41456c

C:\Program Files\AVG\Antivirus\wa_3rd_party_host_32.exe

MD5 78c05689ef9ad55ef2c38413e4e51a65
SHA1 42fab75a44ed7c6f0e6741039750707f3f4ad29d
SHA256 28025b1a146fda5ef832053819be3313c437bb8cc6161a5af9802c998b559945
SHA512 a6430693d779ef9f4a78a9c19f13db3352c8715f4d5709e85902306f88c1aa17a6cfa3c223b182bce0a07b9be4c0ebdf1bb164530b5a96d8d2426a4f5767971c

C:\Program Files\AVG\Antivirus\wa_3rd_party_host_64.exe

MD5 33ef74d82cbcf803ff73e102ac59b4dd
SHA1 d11235d81aa79bd9c12825cb697501373792333a
SHA256 12f4ce89ae94f7c81739058ffedf993fde990b749c86a036208682030a84ae7f
SHA512 0237854fb140487496a170f4b13ddcbca341a0583da50ea65d71b347a22281f1d43fd9a903e7a1120c7c0bd484355316562c5a699ad301fda1b4d1174e21d359

C:\Program Files\AVG\Antivirus\su_worker.exe

MD5 529a18881e58c127dbce5784584ee1b6
SHA1 c9fcd5386a06c1d342c2160db450f6167addb469
SHA256 37c443fcc54f75c06c9440bcf2400dbec2ca3fbfbe8905d91a66a7ef8848ef47
SHA512 02ebdc5115ce966f91664a5d7ecff4fd88a701f0b88dcbc7dffb13a8d92de75d7ebf6a437d6bb8fa0f0d952a0cd7a3ed8f4f01dcc961f68943253481b2c2fa59

C:\Program Files\AVG\Antivirus\su_controller.dll

MD5 1d2aceac23d0f67c8fbc8baaaaa18e83
SHA1 497b478720bc091330d370dfbcfac39596d65383
SHA256 e764de14cbcee1f78c63ab72d1d2b8c36712857f6709ee21e0e1fed7640efa08
SHA512 54b654cae6b6ae2c2badf8a03cce311dfeda30b48d18e2b26b51dd131e6b401d039307442129fc5ffeb3aa1239f35c732caa5d25631ff31c3b815e3eb4c60673

C:\Program Files\AVG\Antivirus\su_common.dll

MD5 7f34484545f070adfce3e3ce13c039bb
SHA1 c82e6b343f204cfc4293967c873fb019d129713d
SHA256 8129a1059a784faf510eec396343bd289b573c0eb28c4f08a545fa72d0fed3a0
SHA512 4d13bfc6d4f650f0266502651563f51810879a7bc9c2c8d514aeb893208de1a621b7d4194abcfb19bd1d383d52fb2bc2ada7a58a02736d257a79222f52262aa1

C:\Program Files\AVG\Antivirus\su_adapter.dll

MD5 eac7bf3824680a666d17985230381af6
SHA1 cc562352d85c0fd1b89f6d7b99250b8774c10aaf
SHA256 75b2de0799c3bb7fc22d3ab5b07a32d49e140ca590dded7360e2a2bd615d93b4
SHA512 aecbd7ff42a090a33052785cffadb23645124ce2c63da931d9597c4364857d9ecb03d235b9593991735356039fcec4a9cacdafcab2d7e6e0dffaebbfcc053c9a

C:\Program Files\AVG\Antivirus\libwavmodapi.dll

MD5 e34e3a41c15ea2574a194816a5c1c8ca
SHA1 b72a397092c1d7c87f9ccfdcd2db196202cc9b66
SHA256 5b51af659e5a7a00460309dc721013c90184606e314a8167d836e5984025d546
SHA512 90568cc6c1b9c28ef4b3df86bc70925f61f89cf0e629e7da132926529c62c2126a5adce2dacbd691923c910dbe561e75f0bbb7386b1b6b95f60a7abf698f70f2

C:\Program Files\AVG\Antivirus\afwCoreClient.dll

MD5 102a19b6fa26f9d0eaaac31a822a6849
SHA1 c64578cf009d8f9fe70a8e98d74e34f8f2679c5c
SHA256 45bcbb343bd824652c521b567e1569204a094da65357f920a1c96266ca80bad4
SHA512 c93b1838c13e3424830246ce6531a95ecbeb642844d9d7b2d148bc3bc93fb0c2fbba9bcfe732f117c4deb78af6e926f23204e72ec290dc14ff8946c17002d7dd

C:\Program Files\AVG\Antivirus\libwautils.dll

MD5 307082ae5503d87056d32f9bc5fda136
SHA1 b2877a997fb788f4136b276908e487c4576529a5
SHA256 4541697a8b48e6c05de973eb5f74c3ff6b4794d6a71e97d6d69c1816cf4e8385
SHA512 7a8fc17af572d784e20aea0b773d594cce578e0d5a04c3db5c1704b32844c0d8580a8eaad19aea96e0c105ab539637033fa53e43b336fdee094279a826e35ea3

C:\Program Files\AVG\Antivirus\libwaresource.dll

MD5 c3946b1b1790a4bdafa3b5b07e381568
SHA1 1321d50ce58cf643448d8cf6b5bb8ef1946c648f
SHA256 f1fc2d67c0c4ee50aa5c3ae19ce097ae31bc2b0e8340381d5963613a74a865ba
SHA512 600cbb41ee3815b89945b3f45653d3d6af3c7b8ff0f50546856f8d059c9d13a9aa9d6259934d83f95395d8d1575877c49573b7fef27ee81db0de45cc9b3831bb

C:\Program Files\AVG\Antivirus\libwaapi.dll

MD5 c5ca8d81f65441863f1e10822acc58a1
SHA1 2eaf1611667ed6bd4239a7b4727e5bbaa48e2a23
SHA256 0153dd81e9384d16495fb0f134335f482e3c44f6e3e020cd41fcccacf886585c
SHA512 a21dbd8f665ddc0b628a4092c1cb355fd89b60dff90f3b6a3da293ca3d29798ac1d6313c538741da69a3cb272db8dc1aa47413248d8ed14124e99bcf0ea66c11

C:\Program Files\AVG\Antivirus\libwalocal.dll

MD5 cc14bdf25e4c320460b0301de088f5fb
SHA1 df95b8c1cf91f16f9be18bb1194015e107656c2d
SHA256 5cee8828ef3b92ee1d40921a008ff1e7cc921b83a6e712c505f2ab07c401d2a2
SHA512 ea51f4d0cd484e6cd88bdf26e598cab7bb74409166064e33e8a063a342c048272c2675e13a639fffadb28d7ba1f6b904568e6a3658f17440c212817789fd4527

C:\Program Files\AVG\AvVps\aswJsFlt.dll

MD5 df8e369282867a9057c5d404e4818079
SHA1 8e68264f853a2f183d55800d42842ff1fa0a05c3
SHA256 6f3991e490381372033c629be20cb56f9ef204adb74b41c89b697655e0c63990
SHA512 37da2421722f801bb2ca408ac2dbaad4c2666258cadda70519e418341f455e0b6337db201d4a3baa458c2f1348b62d354de861b840fcb65e65f89d2e6041ee78

C:\Program Files\AVG\AvVps\Sf2.dll

MD5 c073a5dd4bf1e0799b77319c2ad1c46e
SHA1 2892e28251e4c7cf9a2b2dbe58056b6767fc72f7
SHA256 63afdfc7f0ab5d391a001de59e2e2f38c26c89003d18e0f197bc3c1f3f5ea429
SHA512 d327a22c4be238f6378912982cc83fc35753628d6e228941fee2e4108bba5477a5a7fc0526bbc9c168b8cc14fdc5c88f40e65546f7a3142d3cded8fa974077b1

C:\Program Files\AVG\AvVps\ArPotEx32.dll

MD5 93d7252d9accd27bd7d23ba8d162fe6d
SHA1 6e270f7fb37ddabdf9f9147420f69556fc1d53dc
SHA256 ff28f008a1a75f7972165ae7bb62c1a2eba1b78d7ef1fe194ce6d98c2de8b4fb
SHA512 41cf96c4c73dc9abaefedba71b35911084c9d58ef78bcaedaa177a43fa4782efaf267fb16f1508099e89438e3b60d2cd19a9674bd91bdedf973e2582a1b2047d

C:\Program Files\AVG\AvVps\algo64.dll

MD5 633f0cdc0303b25d8e348238733d84c9
SHA1 d0accb6ebe50c66896e403f2a2bc556daff604b7
SHA256 60b63a1d5d04fe15bf0b8d879fdd0cc9adbd0aeacb2ca6b059b3aaffaea27930
SHA512 ec906b0784a18f3359ef8dbf3dc832790689e7a2e2e8dda50f3d0a410fe37ee37dfffb74fc1467d406941b230973dac0db72ab3270bc048cbbedbaeda0644214

C:\Program Files\AVG\AvVps\BCUEngine.dll

MD5 bf71fbd7f7e81d1d7e6d8aaa7ba33735
SHA1 cac0836e4fe65428c976e87d9889cc606042a3a7
SHA256 102fd8c057349f78830289c602960eaa46b627893a700265d8df20a264f301ea
SHA512 f955628d1e2872cdf5a06a3c8bf7b6a91d2d438055ab0027fada474e97b1bdf4c31c87c8e6a55cd8d47b46bda4d2f8aa34887565455aabf58a1dfc01e5986469

C:\Program Files\AVG\AvVps\aswCmnIS64.dll

MD5 4cdaef1e79ea02f54d08c15579f0b0f0
SHA1 a40710d4835778f7af53be7a9ef937a15e9899b4
SHA256 940298e947a1722e5da28da05069ca726262d441460252e2e91151cbdfb57e3b
SHA512 d59f455f4923eca2e9f27a6e05f2080f93cb07a2c190045c1f3c9bfb819f77fab83304e2addebf9957ccf5d73bf5c14f92295732cdc63dc6a738a85c58aee662

C:\Program Files\AVG\AvVps\aswCmnOS.dll

MD5 83e2928c82225ddf2a54c8a5b78b9886
SHA1 7209a4fe836720522490a0dabbb7d6de56d4b0fd
SHA256 b52762db8025653744b51c0946eb291207edfcfaa8023ab8eba7c0fc89882c71
SHA512 ce3e6d40197b6f4e25a9948ae173e4a2f72a6cda5428093ac148420264d46cb7d9613144e2309a4ecff0c0b85e0ef6ad959f8fdd9ac410dd6ccc7dbdc5923e74

C:\Program Files\AVG\AvVps\aswCmnBS.dll

MD5 2e00f249d3905f8f8118d0e244aab3be
SHA1 b78f7d5bfca30c3407fbd68d6490df13cd0f02e5
SHA256 cead05d25dc387f9211ff66a84415f6e14a6aa24088a4ee40f4a0c2a48d02400
SHA512 1545f6104b0ca76875924f05260ae2083f180ce53e098beef6ac7856213ec0d7a387ca1a5bb6e9ed4e337e54c65126e0af9f5c7e2c39fdc1fc504be89a6f0853

C:\Program Files\AVG\AvVps\aswCleanerDLL.dll

MD5 f28c2312a5979f11ad80f5b2a0dacc8e
SHA1 e1db99d8f6f29280e44f6a39f6d30c52677e5133
SHA256 631d418b17b20fdee526773b725bb09e4df12683fef7e9e21e351e73496651b9
SHA512 b34c66ba2e1cc56993e27f37ff040f55d3894bd16444c246dd0ff180003d8261b69c6356fe4d0323bc000ed62b63db93aa07aa4f25c063bf66400adb5b35f787

C:\Program Files\AVG\AvVps\aswAR.dll

MD5 d4778e41d7d224ff3c66eea01152c34c
SHA1 d232ead78c56a486b462d02b81430301b46e29b3
SHA256 e7e40f4d3b196f22a2023e3eb1eda05b718d97602e6cabbb927339b1f2ca3326
SHA512 32d1fb9eaba7860fc72d0cfc26da8af12613b4f42647f8662fc922a582c5eaf89fa13cae868090ef6818e33e53b1e4720f1fa15cda7c5c271b13645a44825add

C:\Program Files\AVG\AvVps\aswScan.dll

MD5 c2f3b878e5478067f1e678446e204f23
SHA1 9e880039d62d6d25702792d5929128c378f3cb0b
SHA256 083d214399132ad7ed73018d61b9765e529b13baf7d425ec7c0fc4f67112ad2a
SHA512 eeb1e8993eac07f4165bdbf5400cfb7a092ce919251d83aa4975333f41af8017be65dafd21a8b08c5b9fda3ad7adf77879b740199c483bfc125032a451b98be1

C:\Program Files\AVG\AvVps\aswRawFS64.dll

MD5 e9b2780127b110b51d524190f14eab13
SHA1 fb39f819c2ddb1ff9894d2a2e9134dee088b5ec5
SHA256 2eda4fdd50b4f9574534c4a67a6adf5d2bce2bfc1ebb1748133e6cdc8fc5cfb0
SHA512 9f38d0afada191802fb57d507ebb4b5a5b1d511c5bceac6ea5513ef6bd62b31d5cbc5742b36edf8db0777a7b38ed37767b043dc38be6285a4a777e884bcba196

C:\Program Files\AVG\AvVps\aswEngin.dll

MD5 faca32d5f600198e407305eb865d59e2
SHA1 6cf60029cbe1959b6a63fc32f1a10c3e0d42dd0b
SHA256 c9b56729b9f90ebd53ec66a8774f722083e7c2a390a8c386405b825507a0bba6
SHA512 87c0046a33a95a637dbfc0c3dfe77c092f386f15bb33d3398c16e77e2e80c03e4d0d2b7cddf31490a00a8467d72af296e731d2c9412a58a49b38149c15fdac70

C:\Program Files\AVG\AvVps\list_d.txt

MD5 783ae6269cbc9326348bfe967ef5e310
SHA1 03f63bef9cb9e0a81dd8a5e9965019b12f3a4691
SHA256 666c48a2bbc1442f4a88c52e54f45d149e585b853984f7032daec9a8f9f38d14
SHA512 574ce809be1801447f2ecf08b85ac1527b4ac0fcf1565d1df42fcaef406378f69c7741d6486b1e8c3e2817374747e078093cf7d564391ec6f79a856c162ab65c

C:\Program Files\AVG\AvVps\fwAux.dll

MD5 afa2e1b098c39d26ba913afa57313cd5
SHA1 cf1fea06e7f2e67e589ec64ac27964bd69b37544
SHA256 1483cbda0b5debe0d4603421a39a336b4116b2f169c379547962cd56eccc5bcd
SHA512 1b7555f0edec106fba9c23ca81e4ebfde2d1694ceecc69ceae66f0e3929a4a3a89d195ecba570ae40598268f8d9f9114223bcf26265728c3b19f6bd90089533f

C:\Program Files\AVG\AvVps\ArPotEx64.dll

MD5 42f3d9b426d5760781b9f3e4a4e66e62
SHA1 ca972764fbd787dcc0f8fd60c27cf8fe08fe6888
SHA256 42352a39f7315c322909110d02ecbd2978b4593750c42b6127eb7312616154f6
SHA512 c507052bb20babd44c64e964bb55778df9442c77e96dcb3a07e1b5dce8a03d48d38fbd35f48e36d6d15e6fb3606b4007a3673e2d8efc72f9c3048580dba2bff0

C:\Program Files\AVG\AvVps\ArPot.dll

MD5 d449f77367cdae3dfe0430bcdea5ffcc
SHA1 953931a7d9f6e805c80ef1732ec8a575f1aac230
SHA256 e8a5560a05c6919f4dc2d85e714c4754a5c292b1fdd1485bc0c3b7e180bef398
SHA512 1564ef077d198e26553f5ce7617903ed9ab139b76d262307aefcb5331144feb2c4c172dd2a5f832e33c83a582db6310251814b98b808e6e29e9affcdd629a3a3

C:\Program Files\AVG\AvVps\exts.dll

MD5 578ffbbb69fd9bfd164f187598921f4b
SHA1 ab235aee0da88163cf49f77cfeb55e16498f961a
SHA256 cae17dbfd3916a60d8e65b1cdafe5051d6667ea2e76d243fa3ad99eee6684b6f
SHA512 ceceb67de2f552f81315549f9a4c222ce0db122f28c4d8a9bb9597009a3151e92cc37d9a1fe3f76831f8107a17310b914c73ce88cfd213998c7c820579674950

C:\Program Files\AVG\AvVps\aswArray.dll

MD5 0fc521eaacc157326f245096389d9e31
SHA1 a73a9a8b999b7a058661291c3ebdcce24a22b4c6
SHA256 3062d0a1194188e7d32f957bf2751c07ea1fb16c92c5d8b35582bc7b2e92d4f5
SHA512 3c059a70faa91e19886e1e1471aed787896620022600e863c5ee574bec20bff98098fd558aafec8838aef2df4f9247ec11b52ff4890115d14ed0de608e1b0bf2

C:\Program Files\AVG\AvVps\aswHds.dll

MD5 c2efefa4f821406719c86626f4a0beb5
SHA1 338f18dd455016d3c21e8605c35e5c1e79517a9c
SHA256 b25f087a41adc5044d298329e51b1c457ebe33bcad1c7e06cabf2c76783003e4
SHA512 4cf920738d446227ff29d7eb8ab21e247754f8021f69672bf83bc4b543ab01ba81bea64c147cb0b7fb65ec5c1429186dcabcf8c4a5b00950fd2b76b931218dcf

C:\Program Files\AVG\AvVps\PushPin.dll

MD5 929a2a547171b2abcfd766b76070be7e
SHA1 24c9c55ca3b9996f616c334569f17be2b5bdfb11
SHA256 5ba893a9d2e520fb6aecb426798f380254983170e411147276b08723c2e4dc2a
SHA512 a36cfe0bcf6c3ff20e59ca719b5497c3918edd98ed3c304015bdcaf095dee6b33cd25e6bee099467c9860c1e892c889926433f4ea187bf24082904e5cc8d7fdd

C:\Program Files\AVG\AvVps\swhealthex2.dll

MD5 b055afc25fa68acb7fb20114e8a1fc12
SHA1 b20b5e81a957c90c4a211a9bb8c2c51f97bff9e9
SHA256 3a14537ca4e6f39d47cb8cda0fc81e2970eb3a112cb64c5ac4dc5bd0bfe53372
SHA512 bfd3e6122858691b27f67dcce0b84a2f5032b5c83bbc68f2f1a5d2d2f411fb0ac06d7e2a7f99beee1671902dba1f05960dee9f6c22308af0befda4777cf25704

C:\Program Files\AVG\AvVps\aswFiDb.dll

MD5 6e9eceb1e79e1da603fb9003bfed01aa
SHA1 cf922ea4280177d602a9f84c1859c05a3186c6a1
SHA256 ec63f5eb400e7c11ede22b9543c487357e1ee91a18c4b7cacf265caff87015a8
SHA512 f7f49589ade6a71f70f7d443a767d692939cce2b8c39ad5f31aa4caf08d1e962c7109854713f3487b9d4b050761b885f540ee86dc6993731cf3b7e769c95c5fc

C:\Program Files\AVG\AvVps\uiext.dll

MD5 c4e186d67fc6f7e12aac0602f85d26b8
SHA1 efef3cd48566ad7c85cd2ac89a690700812611be
SHA256 708c3ddcc9c928882d7b7e183becae68b0077d896aeb3d62aab5fcb98c21b4a3
SHA512 aef7b09190e931db1cc242b393e77763e1a60276b16c256ab528a2c22b3af80158159de6b226ff5baa5f89818fd6bff96240b1f12cf1d3677f96a6ea0faea6a2

C:\Program Files\AVG\AvVps\aswRep.dll

MD5 65700bee5c77d775eb98a9fe7e91ca50
SHA1 108248a6a1f4ef9ab11cfffb150516f6f855435d
SHA256 c854f666cc5810531858c66837de8a8225354de21728aa90098df446f1907e9b
SHA512 4f9d27d03fdf69aca93ccfb576f87bbe6cf770012be180b92e55291dde83cda2e9f091df96560feaaec5e7eb3cbf0fe1727ee7426e47e1143cb0d3ee42571d22

C:\Program Files\AVG\AvVps\aswJsFlt64.dll

MD5 ab3c142fdf8c6fb275f504777d39cd72
SHA1 ac4c0571522fc5c43c89f5eafb92a628a6883733
SHA256 a88853e2288b9655e8e2d6d4c167a7b5877cc706c7cf46d228a0af0cd4d5c44a
SHA512 1d929c53078d285a85d6003620e2e6a6f8c6788f66c6eda8998c6f3ed762502626da922db1d62399e1d222e0d45e0dafc01e0f95ccc4c8bce700eba38ee477d4

C:\Program Files\AVG\AvVps\db_bank.dat

MD5 a65d7854311248d74f6b873a8f83716f
SHA1 d091d528b2e0e9264a0d377487880607ac870155
SHA256 68484e75c86aed8c948d83a9c55ca4d0b557987063f5e47493142d8e09837e4a
SHA512 fe87aacc0be8e6cc9c05725f7be3392ba850171e028f157ce786eb1ab6b5f06dac99b21394967253b6a7d0148b0013a2fd91d6d55afaa7ace52b066c60d4a79c

C:\Program Files\AVG\AvVps\db_dex.sig

MD5 356c23d152a8f7d15ca5f43117dd8c0a
SHA1 381c2f056169bf6519913523c7ddaa02b7795bec
SHA256 0ce640a616025ba84bcfe4ac0e632667b82f9749ffd7a50d8356cfd924f3ce7e
SHA512 912211b35aa8a1884f8d82f93c3e2f989b10f206d4a345c8a3762441c6d4540275f1ecf3f5e3e145a00260cc60081c902186eb25ffb2dde0b22173411f7bd60c

C:\Program Files\AVG\AvVps\db_java.nmp

MD5 901696e9194ee7217e573f3458545153
SHA1 a4eb003e214cd6cb41d56044403dcac569ec87b4
SHA256 cfe06e2af8d0dd4e3bec700de29343ae0128ab503ec2ff3adefe97dcddc0409c
SHA512 39e7586ea820effa481419e89b0ac7bc880c244a2f3a18a74e11f9fa73eb5a815e9ec6848f21323f552980100e2893d19121eff85f25b135997dfab487340898

C:\Program Files\AVG\AvVps\db_java.sig

MD5 2147bf74409245f2838e8cde3dbcb115
SHA1 25d0d18b00191dffd465c46a559ad02b09469af7
SHA256 d220230c1404615b896f15d790d91975c066fd8289ee4b6bf3f3d005b8ca0918
SHA512 c8c6813f487f8c208f24de18c7e7c6b913c58b9c8a5dc3ff36fc72bdc9128cd015d4ec9e6845642d50f0826ad9f29aa1995f9e736a9c070df61fe458d71b8027

C:\Program Files\AVG\AvVps\db_el.dat

MD5 af0b80fb8a97bd02b5af0fdc838bd05f
SHA1 c2587ede6f3fe3ffb62f7d2944e5ca8b900088dd
SHA256 232867c4cffd5d252960f7b8a87c084fde65ea9edbb377231202f8f060a6a53f
SHA512 3b7f32567b36240a271bb4d99815c9416c94bd9b1549e5f96dff8bc00546ba054f102f00cd6ba0fef23820afde46bdf68de11771dfab27e1b0262f748e064de4

C:\Program Files\AVG\AvVps\db_as.dat

MD5 ced1bced491069f3b1fe35cbfb91bb6b
SHA1 836bf0342531aedcd6866c8a19d3e2599c576916
SHA256 be36bd28ccf235743e6a8dd8a8b944956c520d56ad7503f31a157e6876694fc5
SHA512 e882ef19b90843cd483bf44826f4b8df22e1a44df2ec83ea529902280ed532d287ff132701c3acf1b207492c9a8e55f738aa88902c936829d3e8b30d6ba85d72

C:\Program Files\AVG\AvVps\idp.dat

MD5 7a5ee98d4341a7ee9de01bb65c441729
SHA1 cb4a6d27888437b2f753fe6a78fbe3b3f830e698
SHA256 baac216dfb6f6fe79859ef07173c4facbe11861cbd01bc37007ce385595934dd
SHA512 a72ecc72743658a34a9c5c52aae63173e56d69fe004835a1c097b761558eebcee6e340b8dd336675989d73a32ce29ac5f36ea6540b8cc9ebcf502bce00161649

C:\Program Files\AVG\AvVps\aswQcr.dll

MD5 7fad098e93cc7397a5fa4dc2ae323f5b
SHA1 662e5b20e2c0209112f4606d8d69b06094b8f0c5
SHA256 e45a26af15783419b2c14b16cb3d098c1eef3374cf9012c40e27f5aaea057206
SHA512 1c897cf5796697d0e9f57b8bf34cd78de8b94a2c244ade00ca7fc21c7673fad5da3e4f107a590a327d9494b951db429eb69393e69d93ddb275f0912512438a4c

C:\Program Files\AVG\AvVps\aswBoot64.dll

MD5 2f95d7b9ac22203bf5a49c6544d5ca41
SHA1 b7fb2e58b2367a70b33f36e6fc1a8e37b56b13c7
SHA256 c04cf54ece633f9e59e184b7a297112322c472ae665c0ddb6a7451d7a4320031
SHA512 4e44d76ce137b5656a821dda210b2716dbca78ed35096ccd8ad537632c5adf72fdd9e27db898679e231976c172213335a7bb2a804483db489a468f597bb81e11

C:\Program Files\AVG\AvVps\db_dex.nmp

MD5 112b66c22bfd9516f498200f88411d1e
SHA1 427a9ca96b15c19df0b3e65a5f74fe3cd9a752c3
SHA256 ed43cf13194378572618e7f1ae689a68dbfe68914c7838a189d9a643da8c4bce
SHA512 493a397cf0bafc88df61ada543017ddabc092ffbfa9326c87e1cb43c7f687ba1630a166f5c195ad166e808d4ade596e826d51de216fd314fe53d6345f22a652c

C:\Program Files\AVG\AvVps\db_dsign.dat.ipending.adc20534

MD5 3682c72c24cb3605404d1455b814a938
SHA1 88bf28e1b7e5600210057b0a5933bb9eb221fd12
SHA256 cbed9e69fa3935889fab4fbd963bfacba5a0e582c4602cc06ee60b66c884b8a8
SHA512 0cfeb69b4ab2ebe0bf7e10baf174e3870b383fb4ac175dd968c7c94c8e5a10bfb7ad22c657987ccc9c36632309a22dfd1e32201aa6a0c47581dcabfd4bc8b9c1

C:\Program Files\AVG\AvVps\db_dyna.sig

MD5 6cb48302be07d53519e35e8a24a083fb
SHA1 f98c73f49250f59f012513eec929485259a9cbd2
SHA256 0071302045cbbd4a5068f05c580f389f3ee5ebeb156cb21aefba56fac401df4c
SHA512 e72bd80cc3d21e4073a995f0a2ad7a741883e4b97778af6139748bc0211a7377ceb7881d4138f67d15e9926091779de2bf1251cf6b70f07561084ff7c0516408

C:\Program Files\AVG\AvVps\db_mx4.nmp

MD5 ea802c74d5eb1517f055ffae70bb2117
SHA1 9c0bde8b500a164d3d2b55196d850d68caf62499
SHA256 6fd2366e48058912846e12c1bbce494621f73ceece3f679d820c68c15f3324e2
SHA512 6d7fe215056a0248b9927522642eaed8f56df1dd10c842d6dade00e1aaff5cf00adbb69752a2785bd70ce17fd5a5fc9a281c2be276f66c892fd49a5e28808862

C:\Program Files\AVG\AvVps\db_w6.sig

MD5 5eefb5d015efc73a9f19e8708089fae4
SHA1 e77753ff99aa71331a58b25507456036ee334209
SHA256 515a9a9fad1f676530d0b6c1d3c5a705631ba5730bb88f9b61ed063f64a6cf14
SHA512 4fbe394089b1a3a20f621186551bbc4442e3d44ae50e364560a53feaa407d1c5ba1614dd2e9530688493da32070a6cfd21dcb524364805bd1eba505384413987

C:\Program Files\AVG\AvVps\db_tx.dat

MD5 457542be611ed33ca84a807902a26256
SHA1 36e2e0563ee3d30996768d20ab296d2eb13ba378
SHA256 8e4c3fa0cb7367bbab85eb0d34afabb2ee9ea77bf1f275258fda9c0706b8054e
SHA512 56fed8fa34e48a68c6f0202df9013b194d64a7ee1a624070cc0553d77fe6096012b96dfdfe73a88c5d264d32187327829c55a028f49f98be4446de7a9eff55da

C:\Program Files\AVG\AvVps\db_symtrnl.dat

MD5 9e8d3d87825897f301fe7f31651374d4
SHA1 53a40c4bf1fdfd4a74e4f0ffe648e92153780c49
SHA256 85f9a442c054695f46d566b783bc97947cef4a4f9525aa438299910d51d36581
SHA512 f0cd3d2c909d2a09d8f17d92a8c7516e13b1d0c40baf45c37cf9fa9d319c3ac12d6a34de9dc0587eccf987cc05932eb80b922cacaedcbd9f8c9100c4fc4ed57e

C:\Program Files\AVG\AvVps\db_swf.nmp

MD5 e5698baaa4599d6ac5f20bc31007af83
SHA1 ab21d87d7e0e789c483a4a4f1759fc186efff834
SHA256 150d190a875df22c1d7c5c237745987ac7c79cba34e24242f70b74f8ca9d6c67
SHA512 8c5f33763077cb6aca6cd8ebe5c27eb6baf0f077f2fc74139dc4692d4702a4f10ef2f8c0ade7e79d9a505591cf3582263e44740754d6f963457d9834bffa58ee

C:\Program Files\AVG\AvVps\db_swf.sig

MD5 72d18dc46df6455210a4baa3e65b7124
SHA1 ed39c0688845626b18968475658fe8915c67096a
SHA256 f1272295cc1ffc65f92bea6afeff70c8c8b389d3d4b96d462c31e4e045854f53
SHA512 5fd75c6bcd8de7f3ea0424875726b00ec19e14414581a353be859efba0348cb492f0a60f56da7c3acf68a0a40b9bb0db1649f042bb2e8fcd88b2099685e9626a

C:\Program Files\AVG\AvVps\db_sn.nmp

MD5 5875900164e298fc2c04baa6eec53d43
SHA1 dbdd499632dbf7b9b3d99008044c453bf3e23420
SHA256 27961bfea9ddb937be78ba1751e944ff2c668fc4af3f09c0e1a6a6af127b1e0a
SHA512 399ed9bd579db54f0211dd3a6d2377d284b29aabcfbfb13b961e03c39267f2f70e7349842fdf4161a013c87338cf880825fee93d658229b24bf0078cbc973a25

C:\Program Files\AVG\AvVps\db_sn.sig

MD5 54f03ab66351545eb32090c83c045ee1
SHA1 170650ebc4702ca1b678599826a3f5614cb4defb
SHA256 ca79729ad12d8e6e0dc04ca70021e9c5f399cb648befbee20627d33464c5e4c0
SHA512 2e977a659c45f3f94efb4621b2f6aa872969644e73d05386c55aeababe54fe79975d658447ef649533c341ed7c6bed91ecd81ea77a9f740f123c7f229e562a92

C:\Program Files\AVG\AvVps\db_sl.nmp

MD5 6eafc6b178ba81a9b4794176cd2445b3
SHA1 dd5fcdcd18df2d7652dabf500545578fde57f829
SHA256 c3b8286715f98d76d611069d806d881afbf72e5ba139c6f3807080a9fc885389
SHA512 ebe7338c733d2307c7a4b542249eba4588bf47439c3d012794d1700b4e5f805292514126a044b96733904175add8777763bbe254d7590f927e2ab333cb9a7663

C:\Program Files\AVG\AvVps\db_sl.sig

MD5 c838d5e46b10619ee43d1d203666ec21
SHA1 a041f513f7c76590f2a92329d75b8bff719de375
SHA256 deec78885e387a05b5d98ae9e218ee0be3b72793787f19f95e1521727d133743
SHA512 a7713021c04df99c4cc8ffbd33122f4d9b45698dd2d4329ec05a787340766a74cdff9a1834da13403986706ec30e35ff06f43153a1b1b491db277fe2abfa16bb

C:\Program Files\AVG\AvVps\db_pe3.dat

MD5 f41c6532d037c4c223b3743a4c1de487
SHA1 e58c31c88182693017e277c705ff81d0c60ae6df
SHA256 5ac02059ef208128a0d67b0bd3d860338ab6e758f21680f897fa1a80b7d1dba5
SHA512 15a4c5f866e8a20439cf774e46d236c0eb68dc6949c4879509b67369b1a0adbefb7d08085593c04245a2fa33184fc4008604890f7674d4023eaeffcd473d7f9d

C:\Program Files\AVG\AvVps\db_ob2.dat

MD5 6ba3b04fd7a9675b9657d629c281b428
SHA1 80a6fc0c8ca6a9f71f2d787bc2415de75d12bc58
SHA256 4ea42641a8a1decc43c305ad98d3395a20d5cecf32409a1704ef893640e0c4e5
SHA512 997bb7ba67634902c943b3c64ea9ac2410cc28411928a852b8b712f7818984fd1d88a9a85affa299761dc4fe3f8e6f28cc3cda4b8483a88f38978aef25907db7

C:\Program Files\AVG\AvVps\db_o7.nmp

MD5 09c849794f51dabf065612ea6382f291
SHA1 83c9efb9a2222237892dee31299d73ecf3101fc6
SHA256 f64aace035eaa2d5a931550a6cb155872d3b3fb1a7c25d984bfb67d82203e106
SHA512 ef9084146d08d9ddd8d5d9764a5dc97a5af6384d6c5bf60099220d9733f73dbf6b6fe41fe8cac2fb9b2ce85336ab6251b4557ad17812e86a065df761afb5f799

C:\Program Files\AVG\AvVps\db_o7.sig

MD5 609e30646a81086e58c79b97a266af7d
SHA1 f648970673c04aa022253e2b629d119f946b766d
SHA256 3d1e7aec21f5c291cf14c0e38ff9e3639778f7c2fc6dc61808d51bedace38227
SHA512 e5621d025d7537b2b42dffa651e90534884bab53446ac2b2a98718cf606b1e8f34a2aaa5f58db8164d21bad16319070912ec169e5bfaca2ad13fc76df6edfb7b

C:\Program Files\AVG\AvVps\db_mx95.nmp

MD5 e63feaf6eea20ef68fcafaa41a87b767
SHA1 d900eb07df530d6c205e6375e631c5539115c4d5
SHA256 4915654af5eeafb236bb318084868d6cf1c5270c007a3f25f0fdb3b706be1d29
SHA512 777fbd21e01ffb94477598e1ad9a15860a950dfd21a15e4684ef6eda1ad74ccd398d1e76a6476853ba298e16c465c66c09cbd5c6ef723e2a5361d75959b8d1a0

C:\Program Files\AVG\AvVps\db_mx95.sig

MD5 24d03ac439427c92e75872fd5784a07f
SHA1 461176b2cd23857319a9477de65c4088f82054a1
SHA256 1377386fdd053c9f4e5ade47cc5638c38b120cf9f3ecb9d3eb15eda7013bcad8
SHA512 7ea9dfb35bbdcb52132b51d7903121a82069e1fcec9bfdb6cd4b544291e176779048efe4061cc5196510a8fe0f01decad51427cdb11f73aee22ba3ca7aeac0db

C:\Program Files\AVG\AvVps\db_mx4.sig

MD5 f9462e7e35b201deb95928f21f1a9150
SHA1 aa77715aeb457278e10053bb37e4d01c8e1bb5a5
SHA256 41027e20fae915ace8c91b132d0945ea61c9c682b81efc13ddaabb84c1466c57
SHA512 6de3a26cd3087a5837d49993be3911050cdc970eb652ca05e3e0b17ce298cee9001b8a27322f5be6254587baa5209eaa8f06600aa19893dd10e4309d49c78481

C:\Program Files\AVG\AvVps\db_js.nmp

MD5 c06d57e169fc5b8c0cb80eca1dc4ca03
SHA1 8386bab083b52200bb6c5dc50bfe93ec5dfe6d21
SHA256 20c7e70239f00757de77d3c09fe9e4f54d9e65983f9cb067e288863cd8b1fee6
SHA512 6ce55dad2e808c19e530290a1d96183ad40b4405e4aefafeb362b297832066166df75609a87f3dd634b0c3965e685ad0aba0ce4fa86eb4ab33dfb502935513fc

C:\Program Files\AVG\AvVps\db_js.sig

MD5 d5d8d3a8927ed0d14412cf60c6d25acd
SHA1 6744e79500f438aa2ae43198beb131604c900443
SHA256 c37af8cabf72dddc7de87a4d5ccabe2b70eed4f979d2b71bef0f0682ba39fdce
SHA512 33fef3c354800c3df3fad302c8c66a2d6eac88e809fd3d8cc529cb6c8ee3e58494aca8c7cf61716ec6b44961980a6d0d10770585bd46b34490d65bd6c687d705

C:\Program Files\AVG\AvVps\db_dns.nmp

MD5 86be9e219637a886943cce93741beb01
SHA1 0e3c42bcab50c93b584b8a258ee6ef6107a6d03c
SHA256 2814bd0cb372999d3f755b523a610aeb32c752c40889683f209e0f488a2b43d4
SHA512 b13afbdfe3e09ef344665272dc52f9e674b4cfc23bcd0fe5cbdc25ac811f58b30807cd6d778565e5664cba7e49eb3bfd6f8160d1be96aae3aabc8a6911bb79a6

C:\Program Files\AVG\AvVps\db_dns.sig

MD5 635c9711906a4abb96543db6dad5533e
SHA1 249fc5bd1997e0e387a80513fd1190807628765f
SHA256 03d66194a9f6a99a4562e582921286f7e5240078409d39817efea7a9a51fd6c6
SHA512 7e14081c760b93971bfc5a9a20398b1940ad03f73c1a82a02324008142ac451c12011b58bb16c9fc59deae26ae21f276d83c3b022a625c527c9f55d7572fbcc7

C:\Program Files\AVG\AvVps\db_fn.nmp

MD5 a599df49b94a0724a7ae20e56fc5a7c6
SHA1 5f39d8392030030837a6d8e2a498ab213e04236a
SHA256 2c843dfbcd0857d8bef403ff3e8c92a966498249bdf0b034c82ef2d01ae7c70e
SHA512 3df1cc49b176c19ed936b83c77437703c307df0b28c97e7404e62102517b92d40b4b5f371f73184cc4ef75950db76b2d73df7aea08ec8d27aaf5f8460b596d82

C:\Program Files\AVG\AvVps\db_fn.sig

MD5 9407095b6602d0b216803e843282fcbd
SHA1 09760833e6d9d4e8448a6d574488d9119bc08a53
SHA256 80ad0629a37c70a6a0e8c22118f64bdaddbeb133af35ee8596495e20f2ed08cb
SHA512 3490eb3a69f91c2e66358e45dab96b5d4ab9ad21fc0c0b3a9e3443b3f5caf06d0e15b110f2d071570824116dfbc2a813e35d2710bdf6f2aa50840ad3b83be6f1

C:\Program Files\AVG\AvVps\db_evope.dat

MD5 37cd770e2e46a64537d2445816d49370
SHA1 448062394ff04249f11f4254f03ca29dd485880c
SHA256 6043db2e1288d9bde838899f397048018ecedb4b151c027678a07edcfefbcb0d
SHA512 cbc0167ba4491412de416bb0c52a9e56c9553e0b8d6db3603f9bfabe544ed5e93de5c0f7345d280db32d040851ae0cc53d66c8939d09c3a75534849dc63bcf3a

C:\Program Files\AVG\AvVps\db_dyna.nmp

MD5 4baa98cd9e21b381d73dbf69d8488e4f
SHA1 68cdfb57be7ea2a1e261fc0c60630fae9149b4f8
SHA256 49b147cde7e049b0f9735e4751e39340dfad50aa4e7ae238a07d2712e7753b4a
SHA512 e5290b81e69d265f6a8917cea278d3cdcb3a88e4e2d43cd93265470d087abd06a3b53223b99e530da944bdc5ae626c970bcc8ca41c07dfa9ad9ebfbaf0bbc761

C:\Program Files\AVG\AvVps\db_wh2.dat

MD5 2171fb22810e4d42ff3366f2c479bb1f
SHA1 33a48bd1dc873ec50b87453cb160cd5ec2e4daed
SHA256 0611caf2949c47ecd537b9bb2e04b1bccf9e6ddf4f0b16df743a677993e09fbe
SHA512 3f586c68433710a375c74ea0c06b606f0d40a9a3494a7f3ae74a7acf73537b3592052eccf4cdae6cb0fdfca305e0e6d1d09567d4b04b57f8a6051862d5c63ed3

C:\Program Files\AVG\AvVps\db_elfa.sig

MD5 4356b221743a7e9185a44b145ae96f72
SHA1 e5ceff43f89046abc52f6491b2d306bc690335da
SHA256 62d3569f1b143429c15d47ada5535d523069d96305edffcafb540665020d6316
SHA512 f4b67d5cb47e6ecd66eacc07611a981e9c1a912ec74f3917fca023e4306323c3e07c59cc2caa36c1fdcebcd471ec649eab02adc86bf07abe92a7ed96495cb455

C:\Program Files\AVG\AvVps\db_elf.nmp

MD5 08a439a1a3dd91d5b35eba561c052b47
SHA1 960a1fb1eaab6c92524f65763dda68dcd183a148
SHA256 6da598a19aa9ed08e2bf831f1d545faa612c1dab87c712abf20b68bf36143d74
SHA512 078e3473abe414a67e31ac25787e97ead3acbc493d9e1c7477359690a03fbe4c89eac0f96b552d16556ef32502be705f3f7d858e714bb10a3c220580b1d6b793

C:\Program Files\AVG\AvVps\db_elf.sig

MD5 eed941a55dab4633918059fa9257592b
SHA1 2e6e9b471c51b37ced7f1b7760cf2b27dae2940a
SHA256 016eac6c42d0c0f7cf28cfa8318733f3d7f7801bb1f071a0ddfdee449e79f232
SHA512 0a1e8b722d73fb084ad4381054ebf20a3b6722568711828c9f392d0bc4a3aefc46581f2b4ccb9cd721de5467ea1b22c1ddc7e28d7f948af9495e1d0734e01835

C:\Program Files\AVG\AvVps\db_xtn.map

MD5 315d472d14ab2b92a7da627e6d953f2b
SHA1 888b0b688824b9a246b28a4593fb1d282b250adc
SHA256 f910607a085f675f706ce452209be7039644ab48d53fb83e551b74a45af87d2a
SHA512 fdc6b477ffcbf68f91a940385be7a0e0e4c3882d234057fe58ee95e2833f2a873e55646cb3f725c73892f195faed3ae5ccedf21861d9587cdae26e5ac401505f

C:\Program Files\AVG\AvVps\db_w6.nmp

MD5 e1fceaa7b200b46a86bbd7e5c3111be8
SHA1 410fe1eb7fd54f5f560cda1ee2a4dc9a8ed05f1c
SHA256 4939633881194048a0aa861dc4a058570c6ecde60031cb215b52a4ef96aeaeb5
SHA512 1e8371c6e76f033bd54cded42222cfa2d4e03be5bcb93c5b7e7b3a69d325e242961f3a1535510da396e89d2b188b03216d37fa1c381b9964fe8dcb5b32b23bf0

C:\Program Files\AVG\AvVps\db_str.nmp

MD5 7e22ce26558c418dfc187105ca9a72d3
SHA1 08d3897c9f9cc22128165c2881822f4c65c45f84
SHA256 519cb40a8184b727ac9429382fd1593ebeb5e7bb5531ed1af280007c444d005b
SHA512 f898591afa6929b7cee1b0a81ff722bee4d3234fb128c825ddd3a27d0b41e3461a0db12137150a5951132c77f1f5b1ac3102411a4eff2ac7fb7985c02625e6c2

C:\Program Files\AVG\AvVps\db_ext.dat

MD5 d9e702b0770fcde0e8972ef908f407c1
SHA1 1dd133a49bdbc660555e6b1817e7f32b86cea207
SHA256 80462d9f317d92d6a30859cc7dec5eee5f0831ae3314a6028ad75363e64dfeb0
SHA512 eb1beaba3e6acf231e24ed339b505ec9fcfd5391f5e79b2328f612212b01e281dd17538f74e9b2601dc157da57f07c963fac5549e6c23c92571d42f182ea886e

C:\ProgramData\AVG\Icarus\avg-av-vps\icarus.ini

MD5 5a7126ef89e64b9a7408173321157990
SHA1 208c71ae4b6be89fa4cfd8a8bf59832e32a448fe
SHA256 d0e637201a41c95e2c8a2ae144ddc1a8f7d339e5958c68e8d66edf79f783a5ce
SHA512 3c41777982a3758334202527a6a70112b2009bb81fd787bcb7c397c7ef5d96a42da55e214fb9df0b14d593977398dc682940ac673b98ecf084d31f8e4b9be675

C:\Program Files\AVG\AvVps\engsup.exe

MD5 a35871f5d405a12a77eeaa8402c28122
SHA1 b31be60d7cefb6ae841da4458340e78fb3dff913
SHA256 0aa7253535d2f36440cbea65e7a8a1a489ed96d16223b3c550a09e442e64a58a
SHA512 9d7915318b7370551b4337a69cf2b6f3196a338036147bddfc3b552e966741b8f4515b7b30c94be6fd7ffc96fef243fc9097e31e2cc861cdaf325191b387b643

C:\Program Files\AVG\AvVps\db_cf.dat

MD5 b7f0805b1a40410353c6466bdc96dc07
SHA1 29f4740661b3925d5196a0eab6d9946bfb6dead5
SHA256 895a2fa18f24b7b013becf511672caa50fa0b2fa6bb68223cf08a2afcd33d218
SHA512 fc31d067241a770fe93aa92ba066061b11c15b68a52fc4e89b5ae4025b66baceac1c7768b75c74b826637d113760dd2c56750921a66d140f4cce08d916c0ecee

C:\Program Files\AVG\AvVps\db_pay.dat

MD5 13cc2cc12b2752bf14d49188a1195da6
SHA1 8adca3a81e9a7748881d73f0d35a93f93fa0775f
SHA256 e24430528a9707173f08c5a2a4b327b7d790fca2fa44b7be58d8e3fb31d9d8f6
SHA512 baebfeef682a0f8cee62b5d3fd1af0c0aa64b9a93f07db8e2364cdd39efa424d5c49baaac66def8d137bc4c74c8b8cba0986b16466d75471ef9db6f2a9f76066

C:\Program Files\AVG\AvVps\gvma64.dat

MD5 1ec7c4feed230426245df226f55ff5af
SHA1 86cd49511bae8209a98689e9be55036e35c12554
SHA256 0d280884fb0a08c0e62dd5299df248501c9d94d9714b67990833bda5d592104d
SHA512 39b09da401b99360a9c404f46cbe2ab6d87a944d13ae367ae5aab0b768963fbbf9df66616dde11e53e12ce9216f3434332a7e8aa451e6c5cfe385a15f086b4ce

C:\Program Files\AVG\AvVps\db_agdx.dat

MD5 ec31008e738eb8b36da94dabaa2dc3bf
SHA1 ff9a10d2a5117fc2067b95eb061d4d7dec95b329
SHA256 c3897b5dd4f05623650d14fc1dea1dab1beb4cc648c094a832707b8f0cffc035
SHA512 941e40d58624a9742848895ea011e7aaaf85e2b7c4553df779cc040193003fde245c219609f7754aa927fb5311f82cc1a73aa5e732dbcb2da8b5adae9a1faf2e

C:\Program Files\AVG\AvVps\db_qcr.dat

MD5 d3d61156aa25a967b01827d5d478c7d8
SHA1 1e35afc1fc55c587d2b6a0dd0b1fa5a3d21e476a
SHA256 2086e21de1cdf7a16bdada153364053ad5efbe4ec5688fddb9111ad2dc7c2876
SHA512 b9651703d1ad7b7b065f430835e5196d864b9c464b3544dc01583d45550298447277d95bedb661c45a03dfe3b67360629f53b0ccbf9b1f92b578f67dc8e2440a

C:\Program Files\AVG\AvVps\db_sp.dat

MD5 c70e4cf463040617399831312a8fb8d2
SHA1 ba0c62abfb363a56f6980723047bac143376a660
SHA256 d6166578f94d88bf006bb9ec2ee175c846eecafae7661edeed12e4964ae525d5
SHA512 ce0c76dd93070e849aab3bc89f1e7d856496de317fce3c22cde79978ce6b9900975c6bd259086042769a37bc9669bb4204cd2ef9a0a6beb442e74864256b0241

C:\Program Files\AVG\AvVps\db_dh.dat

MD5 2396c5a9956aba0b31da42fa85dfb61c
SHA1 bea563c29a9abc2e2c2d0127b0a0c76a1926e158
SHA256 470216cb9bfcaecca3869082ab8fd293b2191a90c147c9b735cd0fa37010ac09
SHA512 51f139c1794e05b11caddea62d704e68beec3aa0ba9749885e709fa03ebbe2b17724b3ff154a6c6f827194f154ecb79dd33eb4fe7ca3290ea93c49015b48b47a

C:\Program Files\AVG\AvVps\db_conb.dat

MD5 2417dbd3fcb88b6d4ee2755e6e3e29e2
SHA1 80907784bde14a5a8173081bf5f60a379294cd4d
SHA256 e4fb1883691b94916f5c8aca3244911dbf32d5e68d5138fa4d5b4cb83a753b48
SHA512 aa110605877acf5763c628b2268e1ee9e432f8c62472f8311e8b9058f47768a64ad043d620af487fee1bb1001f853d3a26e5bdbc538b3c7922b2befe05dce2c8

C:\Program Files\AVG\AvVps\db_array.dat

MD5 7732e403b7a9d018e07af6984874dcde
SHA1 254d7b0d3355a8f20cd3a62fd0efce21bf68072a
SHA256 36d6da4b2c780fd2d0b869ad62a36c78f97329d1c94fac466a70ce9417dcc7e1
SHA512 a4d31672dae988ac1edd966b8b0691e860aacb9951aee4e76b196695b65c68c6be48efb22475a9ca6c8991da4b40b03a7ccffda9050b445cb198e0a22978eb59

C:\Program Files\AVG\AvVps\db_pph.dat

MD5 c2417912b06de2b1cf91ab089620621f
SHA1 fdd0e9b132476aa4fe0c164af1137f2534e2e815
SHA256 78d065820aef9a4d85ce50182b653d4b68dc087cb996efe721420df8fc6a5c10
SHA512 9a986e6ec11c205719591dfada2d7fd6d1edc6736353e05587ecfa23b0090d1bfbb47fb489b367cc48dd998404d4768d67b1b559879b5838b6d1371d4ddccd7a

C:\Program Files\AVG\AvVps\db_ap2.dat

MD5 fd40600e220f33166508b7507e966550
SHA1 6c481f0a8cb6a020f8477f2afdc808cd6eb532ff
SHA256 b25d1bd6727f295c60f2dfd04a887f9d6afca6cbfdfad60d92ca3518d70fa724
SHA512 47fe04feabb0ce92bc3d7db6de27af4348a87073236bc8cccd49f50a0dd562a3efa0456ab2ea2f4c2af705fbdf59ef34a991a0416b73b62f9eb51af57c5ea9c4

C:\Program Files\AVG\AvVps\db_cmd.nmp

MD5 12ede5b675ccc70669de6bb2cb522ff3
SHA1 948b0a7da959042ac7d331ef20ac70923c924305
SHA256 e64877facaafa5fd5b1d4a079fcb30a63dd63ef60bea72dd621e37bbdbfbe5b1
SHA512 906b683c9c50458ede1cdea51fbcd251cab129b67241714d6ef703fc847996c7724a62248ff172c58b00d652e614bbf08c4cae1c84ead3ac6e0ce8c255fbe8b6

C:\Program Files\AVG\AvVps\db_cmd.sig

MD5 ecb06f78ff859cd02b1092b97968a400
SHA1 71af2b32ea52eeb82e77d8bb8e4b16eb4b3f1f45
SHA256 396ba12f96dac48158178a4831f33afb6c4ef89b664caa6f7a1443da6c73d639
SHA512 fc9e86941e576141d8fbe286682504bea223ab54682282943e2a4033efad5ca6b29e43b465b72a14645373e3a6b6e3e8173f67a216e3dcda0b32ca86c265fd0a

C:\Program Files\AVG\AvVps\db_snh.dat

MD5 03253ac2b30711cf48ef420e5bf5c4f3
SHA1 7ba1e398696d5f2cd2309b977a89042844594f91
SHA256 befef3d2ac62485b9569f91329548cc9b65dddc89e9d8784847f654c504d1601
SHA512 720696647b3d8384613802c5e381e4441e1176b3242ae32b804ed2fbbcd2b5300681804d8f4ea3ace2becc5684595d54cf490741383be353602047bb236061cd

C:\Program Files\AVG\AvVps\certs.map

MD5 e313d197ec1df3b60a574400612be433
SHA1 3a10a4c66b4f000da03d869251e6f60b3a96726f
SHA256 ce4f3d580f5b291af4cf3777cc9abc861e6759b0c66794b0bc3feeb90806a61a
SHA512 1b9753792798a1ab31fba60a3955d41eba153b7711d9ae5232cf90effdf1593d3bb283fc6ea560f0fdfe4de9df6f2d704e595c069fc9f277e642a1ec1091dabe

C:\Program Files\AVG\AvVps\def.ini

MD5 c667e3b6cf3f13f935ee50cd877ef7d2
SHA1 c33a51bbc099d08c536ca02a1d84fb8e73920e7e
SHA256 93886aa81466f4b5261beb2795f772051792688e8b6f7d9e29407353c474283a
SHA512 ca71e38a7d1fe9fbd2aa4937c67857f388220780771ad08a97ec737fe633c6fb6ed01e2a698556012f026aeddf4c9d873d2733d567c50f1b455704d487afed1d

C:\Program Files\AVG\AvVps\list_i.txt

MD5 32baa42b4979472f42adac5d01ec170a
SHA1 4829966ef2b72d27aa06f381365961459ec85d02
SHA256 a81a4f06be1a08015dc3793e90161b6009cbd8715b6b3bbb89fed7b1dd994f82
SHA512 0acc21d45e780ac650c8e8e0ccbfc825a562d2b89791e23b6643c99d654c7271ca9ae49e1dcd71db63d349544cf576f4f9d398ef26c6a60b6cfaf59778674b94

C:\Program Files\AVG\AvVps\db_pe.nmp

MD5 a2920e1d96c8390bb98b693d45bc1102
SHA1 e5f63e22d49ac1733005de35423a6bf9a22b8cc8
SHA256 f4e49bce6a5056dca4cad2461791dae111a861c62d38e7917b5e0a45e27c830b
SHA512 cbe9d245a944ba5120c403155b5f35aa547d57ca7251e988cc8eede98c7cf57cacce044950eba905d58c3926b04689c6fdf6dca043627ae90416704c510b6667

C:\Program Files\AVG\AvVps\db_pe.sig

MD5 92c80e89ac7f4d6310f4c42205ff3c25
SHA1 cfeffb18bdc170646eca2a063e7f761ddde5a391
SHA256 1ed0e5cb3788e31809c7a25bab6f5835f02425037fa06313a64b48f06067e44b
SHA512 7b2b67b98da8fb28b9890af2f1f501f8aa9f5adbe20f305cf02d6bf99baba276f158ac855a2aa33780d1a6ffde2e1704a55b97adfda747a2bdc9e6abc9cc10f5

C:\Program Files\AVG\AvVps\db_wat.nmp

MD5 4a6580a61062b3b262ac49ff93d0a4f6
SHA1 ac693579414cfec883e69cd656795af099321e3b
SHA256 a83d050a35a20b10addf01155121e067e247e1954b31025cf8763091b137bc0b
SHA512 ce5bcfa2e422d80e1ba03c8307fb17245c527244b5cf2c17760038b6b2b78fe23dce046f1ec68b14ba10553397a641fd3c8f8dad0792d41c47627bc56f9370d8

C:\Program Files\AVG\AvVps\db_wat.sig

MD5 9c992053f73713876194d54a95b7cb2c
SHA1 c2fc1a30d6445c0bcd8f23e3854a63ae66535716
SHA256 03a7be1fcf854a397d1f9a405369c5d4212d09bcf943a4005a4f3bd083878fe2
SHA512 7e3f700982e2f74db87a039ed368a3649fc22b896343515e4f78aa3c52b37ed4d2f9b4ae1e5c5807961494420e7c1048be881c3a52d731d3fda87f59cdcbc83c

C:\Program Files\AVG\AvVps\db_str.sig

MD5 5cd9c06d6a991bab9d088eee4029c538
SHA1 5ae19f12fb3f86ab88e146bc55b58a62860c8295
SHA256 285254d9b32dcc24d414a82962203dee9e07f17d48b2e17a6abbb251df6a5d45
SHA512 6bf27e13d1de60adf161fcfc68e21c43a58b4b0e665d2ad7742b7f58e7162dc44eee703f010abdb877b7aea90240ef0b7c380e7c6829d89c2d9cb95a3b10a8a6

C:\Program Files\AVG\AvVps\db_w6c.map

MD5 fede58c5e447d2fa7d39b9340d72ef0d
SHA1 4f258d23692d795e2a78d73ff299063a0abfc33a
SHA256 cf52174b647373762150cd11a50eb0ebf1383caf6f641e3f79cbc713959d2a2d
SHA512 d51a55e7475d2d78cc7f79915729e05075b4c24484f60ce89149d1a5a4c598fb260a766b9b5e255d414d8adc3f3d19da1cbbb89a18601ca313f1cefd226d10cd

C:\Program Files\AVG\AvVps\db_w6c.dat

MD5 525f4fe527ca7c09d4ee3cf687547757
SHA1 8332ab48a2ef07033b97d2178442d8c6ccf6649d
SHA256 aad3b0a87587ea79ceb4cfda51ac5c93c565357f1c62b21b653ad5ce916244d3
SHA512 6763281d8aa1a985e767d4d7b8c22ce361ceec646022bfe33c66452548cc519aec23e9afab61c12f5c3e6bc7ff191554f226f3b8e94edc2458b8190056a38fed

C:\Program Files\AVG\AvVps\db_o7c.map

MD5 534fe68a98dd9a38b72506bbda9a9daf
SHA1 8b33da97ba8a55c28745536ec46cc3fa22876c96
SHA256 847756a48e1371ae2a6008772ec5e7993db907c2cef716740e67c71aebd89bf2
SHA512 8495e8c23b463d84513b25d472e31cf8b0be902d9a4f24bea11e4f39f8745d6b6a7f5d26b5e211dfaf9570ca9f16174217a6ef4365c846b1650b0fda0ccdf6b0

C:\Program Files\AVG\AvVps\db_o7c.dat

MD5 cb4a7a9c9143d12d76f5367ab3c612d8
SHA1 02997965cb84d64a8146bd6e47bd79026157a826
SHA256 de92f02c0a0e4dc70196682fcb2e922a43d46958049fa4540ab1b681b2d4784f
SHA512 fdae5e9718580a6245561d9a09f72dfa63cb833cc77963e53aa7492d4d746a1f3acf40e2d263ff1417802116766330f9fad8a2992b9b376fb5374301f6e0759c

C:\Program Files\AVG\AvVps\db_elfa.nmp

MD5 d699f935f65d0a647e1b7e7b0b13c7f0
SHA1 3ead575ca0e0ed7e02cf386c5a87b11af560697e
SHA256 d3656e2d2c57a1e013cbbcdf39c17085f614f48e17f3488c567476059a4cadcc
SHA512 f9615374d3cfc39948d7be971b0b23de19a877b2112cd31ca5acac049e08a5f37acfd58fce62375313f1e344a319347b783fa552c52c343e72ba533a8374df7f

C:\ProgramData\AVG\Icarus\Logs\icarus.log

MD5 33e3057aa60fcd883055a9cc6419d223
SHA1 e9928202d3793135f34ec0dcbb475d528fa7cedc
SHA256 4bd339da38bb1f30fdf7085f1c06610350864ff8771ad54c9ee0ad4cb421f68c
SHA512 0cdad0dac0ea35763ab6869d354ecf86cd42aad75badec0ac9ec545d55905312080fd7c9ed4ab4fbcbfbfe0250fe711582b20d857b81f2feada2a73303e92a1b

C:\Program Files\AVG\Antivirus\SecurityProductInformation.ini

MD5 dbea8d26deec1713dd53b40056e9ddb2
SHA1 01d234ab254c45906dd1d8b89de9ba1e4887fa30
SHA256 3fa42d28963d3ab6f8485976e9276eba2b04fed3d064355f4e9861609b83888b
SHA512 1ff1a21e66b747cf77b0a4730592692cef9fef286f46800f63b428db13cb950740b29dc2688f6baf1200a0fb4da65f61a2924aeb1a81e9f8de3eb1a82f1b601b

C:\Program Files\AVG\Antivirus\gui_resources\resources.ini

MD5 2bd6034189730b25487d68b1b2d4425d
SHA1 25bbd5559e327ebe9e3e71173036091b379e431e
SHA256 81154d3927d7a415a35fb1f18e5ee0f16ff1e5e92ccd3cfd1e15abfb7913dea8
SHA512 10f2fa511d12338531041fcc60e11300394b0c27d7fcf25d50dc7c6201ae78671b53ac57577568ac1396035d1f83688e8997d2fe829007847d49dcd3c7add6be

C:\Program Files\AVG\Antivirus\setup\setup.ini

MD5 7f8698e3d39bea0473079a23e531f34e
SHA1 0e2dcefe0231a9a4b849cc934972651a7a80bd04
SHA256 9d204264593d40169b162639ac84ee2bf094e168474e3a855305ee4c595d44f3
SHA512 b1d28425aea3dff41a1e39adfac72723c14d535e1612f655ed2e2d032d02b7cc09e06fb0a5586baf4334773304326db393c1cf8a7a8844f0cd3044d28ae6af08

C:\ProgramData\AVG\Persistent Data\Antivirus\Logs\AvEmUpdate.log

MD5 26ea7bfc29e01643e87b53f6d108ae05
SHA1 1193749bc689330794bb3fe1d9909a5da93441ff
SHA256 82d8f8155c0a4099a6c116459cb61c06d065b30923be299a6eb98b4f9fe81313
SHA512 3a1ee9cd848aa9212c76acdbf93b7787668fad5e15670f94fdee93dab4578248c1aa6c14b285cdafa6cba987cdff741f81e3d5dd34f15565fe53d0e27e73ef16

C:\ProgramData\AVG\Persistent Data\Antivirus\Logs\AvEmUpdate.log

MD5 6f6e88d224d88ea621828c81a1d57949
SHA1 ad737b30f9fd2244dde846e8a8dd56e09704ff4a
SHA256 c6c9975679126d603d8a20e75714d4a39a0d6391e3b546b8c7c5909da7a40014
SHA512 6386fa3b3b584f9d01cbf9ec2721d6547f81f1c122903262bf497c92f4f75980200db9e4d180b830467719f61148058256c02662e6a3193346b8a3d5aed06981

C:\ProgramData\AVG\Persistent Data\Antivirus\Logs\AvEmUpdate.log

MD5 505633dbbcf10c8b6c60f0555ba41957
SHA1 627932ebe66c7afc82e8bc7d4e6859b922192ac0
SHA256 818c053467f1df6f0462b572b1dcdb17d682b6a2446016a584d72bf3d3dfa2f2
SHA512 2ec67035625345700aeff22735888b06386142155f8da2af3a1361276f19d8da0039ee2bab83da637cc9639bb96fe85beeac57f11b64ba829db113eaa1dac471

C:\Program Files\AVG\Antivirus\setup\58a86308-4db6-48a9-9101-f4000344c4c1.ini

MD5 81051bcc2cf1bedf378224b0a93e2877
SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d

C:\Program Files\AVG\Antivirus\setup\ba4d6421-f07e-4cfb-a70a-b113f7244688.ini

MD5 12876284cd618d55e4d5ade10e3a82c1
SHA1 207b3a7e6a8d72072a5f56a138ac8e991305441d
SHA256 249fa9d0d30a35e02c9529c323773f6e3d22a5ef30dce1e79b1aebddd6b259bf
SHA512 6c7a5fa16d331210585578646a74424b4e8671f5bd5dffe92e086604bbab88defb167f10449563d47872122cc3ed6aab998ae2917da5076836db688b2cc64735

C:\Program Files\AVG\Antivirus\setup\563713e4-2527-40d0-a439-a62182a4fd23.xml

MD5 b6a15f5b0b5b62cbaa6e66f6e06c0d88
SHA1 9bc37c728814cfbaf75ac772b26020be47dfaf06
SHA256 9e350fad96d9eafb8131ebdbe1b96fe7ce294ff739c4f2d378c759eda56be039
SHA512 c8407df480c4a130356c94270120114eaa9d23137f2888a752266938b40ada32cb78dcde2ad923d40bc97342d7c32315260e620134936aaf4ee8945f4b72626c

C:\Program Files\AVG\Antivirus\setup\fdde3048-19d8-4b46-9385-cc52afe2b56c.cab

MD5 dd2b6a873f841f6f55fb70ab2586dc27
SHA1 4c0f51fa386b8ce17383627974304aec72db1e68
SHA256 e6321577cc693700407b28e5a7fd067e8ef23d2b5c0c33d213134e77a7fefb1b
SHA512 25b44a462e80a4cd3f9c3777c28fd56efb7a908f46b828717a059165eb41e4a39406f55eeab33e46dc1ff385ea4e4e0b2d3d77fab7139fde7b8a859884e82244

C:\Program Files\AVG\Antivirus\setup\d89a9e07-0dec-4e43-b7d5-3cdfee55ea34\update.xml

MD5 384756241482c4b508e64c180da04514
SHA1 5265bf1d33ba86c1f1c511af3db2e9bc9e47f53a
SHA256 43f233fe1f1582767be0c454eda4c55aaf3f562b0a49fe03cbb199a264163084
SHA512 a3fc7c1148791b44d6c5836a1fe844497bc1c60da2d7627a366a0533d9366b32f5b51170aa233929eb3c16de6eca1688e00333ad5923555f146e1be27a243b05

C:\Program Files\AVG\Antivirus\setup\d89a9e07-0dec-4e43-b7d5-3cdfee55ea34\13BF653A6EF56929BBDBB26A1513D79C.rmt

MD5 c946e78695a97f0a1da91d321ecd1ceb
SHA1 8ee4886176f859b66325324d77df1c3256405b80
SHA256 04277ee07a9cea8c623f98e9addd50934d67138445fce08a6d002977df747142
SHA512 bb33e55b66a21d6a50e3e550b7e84eebd7783e5900eb9dd5f07a9e00ba99691c432e1696803ffb2e3ba6fc5f71ba297e9766d01903e247d5c9866b94d00bce2e

C:\Program Files\AVG\Antivirus\setup\d89a9e07-0dec-4e43-b7d5-3cdfee55ea34\6496900B6AF2D18F00DAB32F70C6CADFD12DE3A237E41E6FADEDAF89C5DCB273

MD5 3aa9b5076b7ed19ae75df7caa7311f69
SHA1 15b91ec4b6c3477eacb8f7599c834fdb9a7c28ca
SHA256 6496900b6af2d18f00dab32f70c6cadfd12de3a237e41e6fadedaf89c5dcb273
SHA512 701d8774963b5a035137182fccfa4eb1d8107dab122f7b04009e1330395be48294273c7f2795dcd2f5d1f41a4b6829c21d8219fd57e91467e002c19579fe0921

C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-1151d5ad-04ad-4637-9cce-f3a38d9a6949\aswOfferTool.exe

MD5 498c4328e67a608acc86012c6090144b
SHA1 b64b1d9308b38dea42926e1560050d5e6163fd97
SHA256 db20ddb442f8212bbc8051b6d32c24076c458705a9d878fedd393d171a7304ca
SHA512 cdfe21fd161cf64fbacaa623b319376321303a011fa97e73673122474c6e8229a42aa36abb022619b7968736351c3fccc178b0635a420832f470e3655834a427

C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-1151d5ad-04ad-4637-9cce-f3a38d9a6949\config.def

MD5 7f4e744fd9e79159cace879a9e6e04df
SHA1 2735b64ff03d0b5086865b59ecf795bd60ee072a
SHA256 26bd6950866b9668b3fff122f24ab483ed1932d4cc3ad9424aa32d5a9d99b264
SHA512 6ee3e9d7359ac9a971b4adf26fa2416b6622bfc992c382881c486f3d52a45d53a698412bc019e930fd3e07aff0fb2d4fb7227cc24f96f8ce457d851366c37644

C:\Program Files\Common Files\AVG\Icarus\avg-av\temp\asw-1151d5ad-04ad-4637-9cce-f3a38d9a6949\icarus_product.dll

MD5 7ff07f1d86a7b8c1d28b5de1760f9a71
SHA1 affc73ee9828bb2151a6c88b84098f9b8c0df1b5
SHA256 3024ac600d3b29893cc17f7615af081654930b55c356fdd9fbb51b2b17acd105
SHA512 cdba8696cda67582d769db58a28ac87d30fe9bc869f7a0f718d9149b6edd42622d5fa83e5b1f5c37e0433a244a3b020c9d90b8708927926c2480a7ed5bcc894a

C:\Users\Admin\AppData\Local\Temp\appdae947221738bb5e.tmp

MD5 87659e005efcaecbdadcbfd9ed72c98b
SHA1 e8f7b617048e341745c2b7a812bacb10a227821c
SHA256 4d61f767ea0685fc3ffda7500fcb6c1db626dc8f47698f505c6ece4525b6ee6e
SHA512 b7a4aa53c48517dac9fd50f164c84753953502492fe66f8655042fe08d78d4891729e9754ffeb5067aa149446248ea9916eafd1e04f2b89745902eb21d1a24bf

C:\Users\Admin\AppData\Local\Temp\app7e516e818c723087.tmp

MD5 40f3eb83cc9d4cdb0ad82bd5ff2fb824
SHA1 d6582ba879235049134fa9a351ca8f0f785d8835
SHA256 cdd772b00ae53d4050150552b67028b7344bb1d345bceb495151cc969c27a0a0
SHA512 cdd4dbf0b1ba73464cd7c5008dc05458862e5f608e336b53638a14965becd4781cdea595fd6bd18d0bf402dccffd719da292a6ce67d359527b4691dc6d6d4cc2

C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\icarus_product.dll

MD5 264df24da7afca448f922f625c1b8ced
SHA1 7cf8f98892aaa7a57920f7ff4fffe8b344e63f5e
SHA256 305a51e4f4c05a8e0332d039c7e5f36c0d9b75097754aa67f43153716c0d728b
SHA512 d73359b290ac3ed119fd208c58e983d74bc4d96fcb03b53d4f4c63330428e8f07e11931409655aa3070bae44accf1a4d9255b41b5db3b99219f27ddf5e61b929

C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\config.def

MD5 3e9c87ef79aec6ef3af203b32b003198
SHA1 82d9dbecbb20ff8160439d9f7d8b87466bcdfbef
SHA256 e3e8cbe0a09239f7c977bfc7d283c32e1a8dacd5fadc2f6643724e4e68cb8489
SHA512 88e65718a1d7b538c14822cbfe1eea21dd8c102c9b3c0c4b6dff719ec0f74e3c5c5b83b630f4c8506049b1e793ec2a1f4aed279bc44f904ca8355a0e1c4bfdc5

C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\temp\asw-409ccbe1-fbf3-4711-bde8-2b0da657923a\product-def.xml

MD5 9dd1d1ed9eee06f590c3fc8ac4fb2be0
SHA1 3785f09c5aa98e45bca2617bcfd8177ef459d7a2
SHA256 8fb57c81a5ed4bb2ec668706575e89c0c078fa3d9882c66b1e82b50ab87114d8
SHA512 50c5553602a3e9580b5a1fe5f81d0843934d4a9566963a5322dd868c4cfeadabf6638e4576940601f575ef65d3eeabbc48d60878129ec85296a951278cc107ad

C:\Program Files\Common Files\AVG\Icarus\avg-av-vps\product-info.xml

MD5 315b7fa7dfb47c2435854ce3cdc098ea
SHA1 8b1eb83b03f97cdb22d89b72c604d2b9bf6dc272
SHA256 4e456cbb1bc811aa21e3792a647fe1957b434e60cdf18c6978a1f23a9dc35abb
SHA512 c38d29b8e4ffbeb5c28d55c471d0e46c5193fa5066777f6946417a8fc23a528aee383cd91f70da1ff52240712d98a573bc663cf41da9c5ffb6526ace516fa610

C:\Program Files\AVG\Antivirus\setup\setup.ini

MD5 aea7cffb63184afa000a40ea4a425ab5
SHA1 4430fbef59bacb2fb6d819da2d2e606b853c91cc
SHA256 e4fc756319f8b132cd8967d52a94d58229340c93f4ec95a7b21ff3e46fb411da
SHA512 6e7b982f38eaa5a8f889e1cd4abda9b5f2135cea0951fc5a377a67f59a5832e3d3bd148fc283b3b8c9c55e77a487d6980c9987028a6bb451f478c6a9e57197b4

C:\Program Files\AVG\Antivirus\setup\61a36b73-aece-4ff3-969b-008eef12c66c\update.xml

MD5 79f0dc1b8df718ad5e1078f6a3a294e6
SHA1 471e34c7cade525c80449a11c26c6ae1dde10ef7
SHA256 8ae1465b894d45a133363fd23a148910ae20ed578fe0eb4fe015bb4ba464a5a2
SHA512 f341794344ab8ddb5c9f80dda43bfe2f84fff3aff45bb62f64686e487b31dd43fe6ca6e5f369fbdcf5324ca5ba8fca9e788e99df1937eb979dcef05ced71a7b0

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5 62e07cf1b321136638d4ed7583acfa3a
SHA1 2cf488b24164f11635252ec9456944ab6525690c
SHA256 30eda0f34f9f2fde8f5eb28dc6d99379b0a93bbf3e0575e849abaf96275f6e6a
SHA512 7961b454bc7593743c791768fb31b5ab3a47f5610e5cdc6f1011e0509f17a7b3e7624cdfd699076dda3e723ea94eb1ce2ab90f89138019f8a52a84d36f9cff5a