wannacry | c30acd35cb22792bbdf12369ea8d5ebb54ffe284e6eff501e0d0d39e1c5d2b85

Analysis

max time kernel
211s
max time network
220s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
17-01-2025 12:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

sample.html
Size

3KB
MD5

ed3cb4479cf421f3703ee371f834f3ab
SHA1

206a7c9f4904005c3ceab0000a22336f6959b31b
SHA256

c30acd35cb22792bbdf12369ea8d5ebb54ffe284e6eff501e0d0d39e1c5d2b85
SHA512

bdfabaf44af7ca19565820d35dff52fe4e478f4d344abe21da8fca3f9c53d7d6589814fab82d9e84fdfbf228d6d321d12c3fd799735f19cce24e6e60ccc66d23

Score

10^/10

wannacry bootkit defense_evasion discovery execution impact persistence ransomware spyware stealer worm

Malware Config

Extracted

Path

C:\Users\Admin\Downloads\!Please Read Me!.txt

Family

wannacry

Ransom Note

Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 15zGqZCTcys6eCjDkE3DypCjXi6QWRV6V1 Next, please find the decrypt software on your desktop, an executable file named "!WannaDecryptor!.exe". If it does not exsit, download the software from the address below. (You may need to disable your antivirus for a while.) rar password: wcry123 Run and follow the instructions! �

Wallets

15zGqZCTcys6eCjDkE3DypCjXi6QWRV6V1

Signatures

Wannacry
WannaCry is a ransomware cryptoworm.
ransomware worm wannacry
Wannacry family
wannacry
Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Downloads MZ/PE file

Uses Session Manager for persistence 2 TTPs 1 IoCs

Creates Session Manager registry key to run executable early in system boot.

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000006900630061007200750073005f0072007600720074002e0065007800650000000000	icarus.exe

Drops startup file 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\~SDA5B.tmp	WannaCry.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~SDA45.tmp	WannaCry.exe

Executes dropped EXE 13 IoCs

pid	Process
4428	Rensenware.exe
4696	Rensenware.exe
2008	WannaCry.exe
3192	!WannaDecryptor!.exe
5068	!WannaDecryptor!.exe
3076	!WannaDecryptor!.exe
3316	!WannaDecryptor!.exe
5720	avg_antivirus_free_setup.exe
5840	avg_antivirus_free_online_setup.exe
6048	icarus.exe
6096	icarus_ui.exe
5648	icarus.exe
5656	icarus.exe

Loads dropped DLL 4 IoCs

pid	Process
5720	avg_antivirus_free_setup.exe
5840	avg_antivirus_free_online_setup.exe
5656	icarus.exe
5648	icarus.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Microsoft Update Task Scheduler = "\"C:\\Users\\Admin\\Downloads\\WannaCry.exe\" /r"	WannaCry.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
122	raw.githubusercontent.com
178	raw.githubusercontent.com
83	raw.githubusercontent.com

Writes to the Master Boot Record (MBR) 1 TTPs 5 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	avg_antivirus_free_setup.exe
File opened for modification	\??\PhysicalDrive0	avg_antivirus_free_online_setup.exe
File opened for modification	\??\PhysicalDrive0	icarus.exe
File opened for modification	\??\PhysicalDrive0	icarus.exe
File opened for modification	\??\PhysicalDrive0	icarus.exe

Drops file in System32 directory 3 IoCs

description	ioc	Process
File created	C:\Windows\system32\icarus_rvrt.exe	icarus.exe
File opened for modification	C:\Windows\system32\icarus_rvrt.exe	icarus.exe
File opened for modification	C:\Windows\system32\avgBoot.exe	icarus.exe

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\!WannaCryptor!.bmp"	!WannaDecryptor!.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\AVG\Antivirus\BrowserCleanup.ini	icarus.exe
File created	C:\Program Files\AVG\Antivirus\setup\config.def.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\locales\bg.pak.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\locales\hu.pak.ipending.2e1421a6	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\Inf\x64\avgSnx.sys	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-math-l1-1-0.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\avg.local_vc142.crt.manifest.ipending.2e1421a6	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\AVGSvc.exe.ipending.2e1421a6.lzma	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\aswBrowser.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\Licenses\bsdiff.txt.ipending.2e1421a6	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\locales\ja.pak	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\aswntsqlite.dll.ipending.2e1421a6	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\gui_resources\default_av\dataShredder.js.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-namedpipe-l1-1-0.dll.ipending.2e1421a6.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\locales\ml.pak.ipending.2e1421a6.lzma	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\locales\bn.pak	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-processthreads-l1-1-0.dll.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\1033\Base.dll.ipending.2e1421a6.lzma	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-math-l1-1-0.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\libcef.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\aswavdetection.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainCss.css	icarus.exe
File created	C:\Program Files\AVG\Antivirus\Licenses\ICU.txt.ipending.2e1421a6.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\protobuf.dll.ipending.2e1421a6.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\CommonRes.dll.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\gui_resources\default_av\locale-id.json.ipending.2e1421a6.lzma	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-locale-l1-1-0.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\vcruntime140.dll.ipending.2e1421a6	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\event_manager_burger.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\BrowserCleanup.ini.ipending.2e1421a6	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\locales\gu.pak.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\ashQuick.exe.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-string-l1-1-0.dll.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainVars_test.json.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainWindow.html.ipending.2e1421a6	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\protobuf.dll.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\CommChannel.dll.ipending.2e1421a6.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\locales\pt-PT.pak.ipending.2e1421a6.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\Licenses\sqlite.txt.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\1033\aswInfTg.htm.ipending.2e1421a6.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\gui_resources\default_av\i18n.js.ipending.2e1421a6	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\event_manager.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-memory-l1-1-0.dll.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\locales\pl.pak.ipending.2e1421a6.lzma	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-processthreads-l1-1-0.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\ashServ.dll.ipending.2e1421a6	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\event_routing_rpc.dll.ipending.2e1421a6	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\libcef.dll.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-console-l1-2-0.dll.ipending.2e1421a6.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainLayoutCss.css.ipending.2e1421a6	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-rtlsupport-l1-1-0.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\anen.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-private-l1-1-0.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\Inf\x64\avgbidsh.sys	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\aswVmm.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\aswcomm.dll.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainLayout.js.ipending.2e1421a6.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\shepherdsync.dll.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\gui_resources\default_av\svelteComponents.js.ipending.2e1421a6	icarus.exe
File created	C:\Program Files\AVG\Antivirus\libwalocal.dll.ipending.2e1421a6.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\locales\da.pak.ipending.2e1421a6	icarus.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 4 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Rensenware (2).exe:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\WannaCry.exe:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\avg_antivirus_free_setup.exe:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Rensenware.exe:Zone.Identifier	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Embeds OpenSSL 1 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

resource	yara_rule
behavioral1/files/0x001700000002b13b-5142.dat	embeds_openssl

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 16 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	!WannaDecryptor!.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	!WannaDecryptor!.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WMIC.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	avg_antivirus_free_online_setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cscript.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	avg_antivirus_free_setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WannaCry.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	!WannaDecryptor!.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	!WannaDecryptor!.exe

Checks processor information in registry 2 TTPs 23 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	icarus_ui.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	icarus.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	icarus.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	dw20.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	dw20.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier	dw20.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	dw20.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	dw20.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier	dw20.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	dw20.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	dw20.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	icarus.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	icarus_ui.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	icarus.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	icarus.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	dw20.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1	dw20.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	dw20.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	icarus.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	dw20.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	dw20.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1	dw20.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	icarus.exe

Enumerates system info in registry 2 TTPs 7 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	dw20.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	dw20.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	dw20.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	dw20.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Kills process with taskkill 4 IoCs

evasion

pid	Process
1060	taskkill.exe
3600	taskkill.exe
1220	taskkill.exe
1188	taskkill.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F	avg_antivirus_free_online_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\7CCD586D-2ABC-42FF-A23B-3731F4F183D9 = "65F115A51CCCDBF623206AEDE3B3D8A4"	avg_antivirus_free_online_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\5E1D6A55-0134-486E-A166-38C2E4919BB1 = "AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAwcdz1CCYB0uD+7TMyQjOHgQAAAACAAAAAAAQZgAAAAEAACAAAABlKRaJkbX6rjtHAHSB7JfFq9jj3hwWyLkvz92YHGV/vAAAAAAOgAAAAAIAACAAAADpj2JJMbbdsxvJCrn2G55R7Kd1qgHQ1MhBj0IrledemjAAAAALspMT/SgwVxevmrGMAd+YJ9A0TzUGPPH31fXMc7+AAwTS+PZuH7yOuwbGP7RpNqhAAAAADTsh0N5FD7p4zCHOFWeCPiozjZYYIKy8eQ8U+P3Z5Wli7Rw50cUK4SmWB23uqi5AbKal65/cJ7FdUUIvT4XThA=="	avg_antivirus_free_online_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\56C7A9DA-4B11-406A-8B1A-EFF157C294D6 = "525ef005-fac5-4fce-8f2a-9a9b58756ee6"	avg_antivirus_free_online_setup.exe

NTFS ADS 9 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Rensenware (2).exe:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 358381.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\WannaCry.exe:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 669019.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 593243.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 29146.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Rensenware.exe:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 98155.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\avg_antivirus_free_setup.exe:Zone.Identifier	msedge.exe

Suspicious behavior: EnumeratesProcesses 22 IoCs

pid	Process
3568	msedge.exe
3568	msedge.exe
4900	msedge.exe
4900	msedge.exe
2556	identity_helper.exe
2556	identity_helper.exe
1712	msedge.exe
1712	msedge.exe
3948	msedge.exe
3948	msedge.exe
4756	msedge.exe
4756	msedge.exe
4968	msedge.exe
4968	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
5544	msedge.exe
5544	msedge.exe
6096	icarus_ui.exe
6096	icarus_ui.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 37 IoCs

pid	Process
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeRestorePrivilege	2008	dw20.exe
Token: SeBackupPrivilege	2008	dw20.exe
Token: SeBackupPrivilege	2008	dw20.exe
Token: SeBackupPrivilege	2008	dw20.exe
Token: SeBackupPrivilege	3212	dw20.exe
Token: SeBackupPrivilege	3212	dw20.exe
Token: SeDebugPrivilege	1220	taskkill.exe
Token: SeDebugPrivilege	1060	taskkill.exe
Token: SeDebugPrivilege	3600	taskkill.exe
Token: SeDebugPrivilege	1188	taskkill.exe
Token: SeIncreaseQuotaPrivilege	4340	WMIC.exe
Token: SeSecurityPrivilege	4340	WMIC.exe
Token: SeTakeOwnershipPrivilege	4340	WMIC.exe
Token: SeLoadDriverPrivilege	4340	WMIC.exe
Token: SeSystemProfilePrivilege	4340	WMIC.exe
Token: SeSystemtimePrivilege	4340	WMIC.exe
Token: SeProfSingleProcessPrivilege	4340	WMIC.exe
Token: SeIncBasePriorityPrivilege	4340	WMIC.exe
Token: SeCreatePagefilePrivilege	4340	WMIC.exe
Token: SeBackupPrivilege	4340	WMIC.exe
Token: SeRestorePrivilege	4340	WMIC.exe
Token: SeShutdownPrivilege	4340	WMIC.exe
Token: SeDebugPrivilege	4340	WMIC.exe
Token: SeSystemEnvironmentPrivilege	4340	WMIC.exe
Token: SeRemoteShutdownPrivilege	4340	WMIC.exe
Token: SeUndockPrivilege	4340	WMIC.exe
Token: SeManageVolumePrivilege	4340	WMIC.exe
Token: 33	4340	WMIC.exe
Token: 34	4340	WMIC.exe
Token: 35	4340	WMIC.exe
Token: 36	4340	WMIC.exe
Token: SeIncreaseQuotaPrivilege	4340	WMIC.exe
Token: SeSecurityPrivilege	4340	WMIC.exe
Token: SeTakeOwnershipPrivilege	4340	WMIC.exe
Token: SeLoadDriverPrivilege	4340	WMIC.exe
Token: SeSystemProfilePrivilege	4340	WMIC.exe
Token: SeSystemtimePrivilege	4340	WMIC.exe
Token: SeProfSingleProcessPrivilege	4340	WMIC.exe
Token: SeIncBasePriorityPrivilege	4340	WMIC.exe
Token: SeCreatePagefilePrivilege	4340	WMIC.exe
Token: SeBackupPrivilege	4340	WMIC.exe
Token: SeRestorePrivilege	4340	WMIC.exe
Token: SeShutdownPrivilege	4340	WMIC.exe
Token: SeDebugPrivilege	4340	WMIC.exe
Token: SeSystemEnvironmentPrivilege	4340	WMIC.exe
Token: SeRemoteShutdownPrivilege	4340	WMIC.exe
Token: SeUndockPrivilege	4340	WMIC.exe
Token: SeManageVolumePrivilege	4340	WMIC.exe
Token: 33	4340	WMIC.exe
Token: 34	4340	WMIC.exe
Token: 35	4340	WMIC.exe
Token: 36	4340	WMIC.exe
Token: SeBackupPrivilege	2932	vssvc.exe
Token: SeRestorePrivilege	2932	vssvc.exe
Token: SeAuditPrivilege	2932	vssvc.exe
Token: SeRestorePrivilege	6048	icarus.exe
Token: SeTakeOwnershipPrivilege	6048	icarus.exe
Token: SeRestorePrivilege	6048	icarus.exe
Token: SeTakeOwnershipPrivilege	6048	icarus.exe
Token: SeRestorePrivilege	6048	icarus.exe
Token: SeTakeOwnershipPrivilege	6048	icarus.exe
Token: SeRestorePrivilege	6048	icarus.exe
Token: SeTakeOwnershipPrivilege	6048	icarus.exe
Token: SeDebugPrivilege	6048	icarus.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe

Suspicious use of SetWindowsHookEx 14 IoCs

pid	Process
3192	!WannaDecryptor!.exe
3192	!WannaDecryptor!.exe
5068	!WannaDecryptor!.exe
5068	!WannaDecryptor!.exe
3076	!WannaDecryptor!.exe
3076	!WannaDecryptor!.exe
2652	MiniSearchHost.exe
5720	avg_antivirus_free_setup.exe
5840	avg_antivirus_free_online_setup.exe
6048	icarus.exe
6096	icarus_ui.exe
6096	icarus_ui.exe
5648	icarus.exe
5656	icarus.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4900 wrote to memory of 2212	4900	msedge.exe	77
PID 4900 wrote to memory of 2212	4900	msedge.exe	77
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3428	4900	msedge.exe	78
PID 4900 wrote to memory of 3568	4900	msedge.exe	79
PID 4900 wrote to memory of 3568	4900	msedge.exe	79
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80
PID 4900 wrote to memory of 3408	4900	msedge.exe	80

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffdb03c3cb8,0x7ffdb03c3cc8,0x7ffdb03c3cd8
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1956 /prefetch:2
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:784
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4968 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4064 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5712 /prefetch:1
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3124 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5504 /prefetch:1
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6040 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4068 /prefetch:1
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1864 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6928 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6540 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6576 /prefetch:8
  2⤵
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6804 /prefetch:8
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:3948
- C:\Users\Admin\Downloads\Rensenware.exe
  "C:\Users\Admin\Downloads\Rensenware.exe"
  2⤵
  - Executes dropped EXE
  PID:4428
- - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe
    dw20.exe -x -s 856
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Suspicious use of AdjustPrivilegeToken
    PID:2008
- C:\Users\Admin\Downloads\Rensenware.exe
  "C:\Users\Admin\Downloads\Rensenware.exe"
  2⤵
  - Executes dropped EXE
  PID:4696
- - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe
    dw20.exe -x -s 792
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Suspicious use of AdjustPrivilegeToken
    PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6380 /prefetch:8
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2876 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6968 /prefetch:8
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6396 /prefetch:1
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6492 /prefetch:8
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:4968
- C:\Users\Admin\Downloads\WannaCry.exe
  "C:\Users\Admin\Downloads\WannaCry.exe"
  2⤵
  - Drops startup file
  - Executes dropped EXE
  - Adds Run key to start application
  - System Location Discovery: System Language Discovery
  PID:2008
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c 240831737118883.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5060
  - - C:\Windows\SysWOW64\cscript.exe
      cscript //nologo c.vbs
      4⤵
      System Location Discovery: System Language Discovery
      PID:4932
- - C:\Users\Admin\Downloads\!WannaDecryptor!.exe
    !WannaDecryptor!.exe f
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:3192
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im MSExchange*
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:1060
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im Microsoft.Exchange.*
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:1188
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im sqlserver.exe
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:1220
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im sqlwriter.exe
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:3600
- - C:\Users\Admin\Downloads\!WannaDecryptor!.exe
    !WannaDecryptor!.exe c
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:5068
- - C:\Windows\SysWOW64\cmd.exe
    cmd.exe /c start /b !WannaDecryptor!.exe v
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1216
  - - C:\Users\Admin\Downloads\!WannaDecryptor!.exe
      !WannaDecryptor!.exe v
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      Suspicious use of SetWindowsHookEx
      PID:3076
    - - C:\Windows\SysWOW64\cmd.exe
        
        cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet
        5⤵
        System Location Discovery: System Language Discovery
        
        PID:4952
      - C:\Windows\SysWOW64\Wbem\WMIC.exe
        
        wmic shadowcopy delete
        6⤵
        System Location Discovery: System Language Discovery
        Suspicious use of AdjustPrivilegeToken
        
        PID:4340
- - C:\Users\Admin\Downloads\!WannaDecryptor!.exe
    !WannaDecryptor!.exe
    3⤵
    - Executes dropped EXE
    - Sets desktop wallpaper using registry
    - System Location Discovery: System Language Discovery
    PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=4108 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1132 /prefetch:1
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6816 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7360 /prefetch:1
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7200 /prefetch:1
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7748 /prefetch:8
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6500 /prefetch:1
  2⤵
  PID:5400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7680 /prefetch:8
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:5544
- C:\Users\Admin\Downloads\avg_antivirus_free_setup.exe
  "C:\Users\Admin\Downloads\avg_antivirus_free_setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Writes to the Master Boot Record (MBR)
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:5720
- - C:\Windows\Temp\asw.8a4f391451faae08\avg_antivirus_free_online_setup.exe
    "C:\Windows\Temp\asw.8a4f391451faae08\avg_antivirus_free_online_setup.exe" /cookie:mmm_bav_013_999_a9a_m:dlid_FREEGSR /ga_clientid:606b752c-6205-4bee-a2c3-b76deec47754 /edat_dir:C:\Windows\Temp\asw.8a4f391451faae08 /geo:GB
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Writes to the Master Boot Record (MBR)
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    - Suspicious use of SetWindowsHookEx
    PID:5840
  - - C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\common\icarus.exe
      C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\common\icarus.exe /icarus-info-path:C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\icarus-info.xml /install /cookie:mmm_bav_013_999_a9a_m:dlid_FREEGSR /edat_dir:C:\Windows\Temp\asw.8a4f391451faae08 /geo:GB /track-guid:606b752c-6205-4bee-a2c3-b76deec47754 /sssid:5840
      4⤵
      Executes dropped EXE
      Writes to the Master Boot Record (MBR)
      Checks processor information in registry
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of SetWindowsHookEx
      PID:6048
    - - C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\common\icarus_ui.exe
        
        C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\common\icarus_ui.exe /cookie:mmm_bav_013_999_a9a_m:dlid_FREEGSR /edat_dir:C:\Windows\Temp\asw.8a4f391451faae08 /geo:GB /track-guid:606b752c-6205-4bee-a2c3-b76deec47754 /sssid:5840 /er_master:master_ep_743f6708-e780-4044-9f12-70d2fbbfa0a4 /er_ui:ui_ep_96e1ee5c-f393-4aaf-b5d4-dc2795c1046b
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of SetWindowsHookEx
        
        PID:6096
    - - C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\avg-av\icarus.exe
        
        C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\avg-av\icarus.exe /cookie:mmm_bav_013_999_a9a_m:dlid_FREEGSR /edat_dir:C:\Windows\Temp\asw.8a4f391451faae08 /geo:GB /track-guid:606b752c-6205-4bee-a2c3-b76deec47754 /sssid:5840 /er_master:master_ep_743f6708-e780-4044-9f12-70d2fbbfa0a4 /er_ui:ui_ep_96e1ee5c-f393-4aaf-b5d4-dc2795c1046b /er_slave:avg-av_slave_ep_4b7094ee-ce29-4074-8a07-ad0d890c6315 /slave:avg-av
        5⤵
        Uses Session Manager for persistence
        Executes dropped EXE
        Loads dropped DLL
        Writes to the Master Boot Record (MBR)
        Drops file in System32 directory
        Drops file in Program Files directory
        Checks processor information in registry
        Suspicious use of SetWindowsHookEx
        
        PID:5648
    - - C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\avg-av-vps\icarus.exe
        
        C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\avg-av-vps\icarus.exe /cookie:mmm_bav_013_999_a9a_m:dlid_FREEGSR /edat_dir:C:\Windows\Temp\asw.8a4f391451faae08 /geo:GB /track-guid:606b752c-6205-4bee-a2c3-b76deec47754 /sssid:5840 /er_master:master_ep_743f6708-e780-4044-9f12-70d2fbbfa0a4 /er_ui:ui_ep_96e1ee5c-f393-4aaf-b5d4-dc2795c1046b /er_slave:avg-av-vps_slave_ep_24968725-8239-44db-92cf-a3ee7d7905ca /slave:avg-av-vps
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Writes to the Master Boot Record (MBR)
        Checks processor information in registry
        Suspicious use of SetWindowsHookEx
        
        PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6580 /prefetch:1
  2⤵
  PID:10444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,12340340007680195248,5058737354042008737,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1308 /prefetch:1
  2⤵
  PID:10452

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4668

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3996

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2932

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
1⤵
- Suspicious use of SetWindowsHookEx
PID:2652

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Pre-OS Boot

T1542

Bootkit

T1542.003

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Defacement

T1491

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\AVG\Antivirus\AVGUI.exe

Filesize
12.9MB

MD5
9ed90c7f4b0ed80daf4a9a17f08e7615

SHA1
ada5b2c02eb80ba8c73e5a11d616adfbb7123ffc

SHA256
55da601bf3523bde16e6dbb76c6dccf7ddd7d47c239bf10e1db6eb962a8dc66a

SHA512
2a008fb5e93a24416e33493e1dc0dc87a2bff32aafbd1fb1c4908382c056ead577b11b4aec3368fa8d728eec13d90ce813f6666621d4ce3fdbcc40604f0c838c

Download Submit
C:\Program Files\AVG\Antivirus\AvBugReport.exe

Filesize
5.7MB

MD5
7d321c84ec77d15d22463c6656eac45f

SHA1
adbf124e31b1b3e5b1da9efce2554cfa45b6fa3b

SHA256
2defa884a817f2b3208de7d83f0218cac77f83d91970d0e083d6c2b75c6c4e7a

SHA512
8a1e2997e638556c2ce7bfeab34b3fd42d8f24460d9af5e37e2a0abd82f2196e5a9b8e1969b86fdab550cf0bd3029286b5353560faa464eb86ba4a9f85dc9fb8

Download Submit
C:\Program Files\AVG\Antivirus\AvConsent.exe

Filesize
769KB

MD5
de894dd30232dea7dbcd202a31cf5df5

SHA1
b3fe1f93ce9d99f4d4e29bf09f9de3a91fdf9a29

SHA256
22fd159bec98295367db2d626f082cec7a8e250f1c4488f207be3ac8318765af

SHA512
7d137dc1aa96f447896522f5deaf3a23324f5e3406f68f2de88309b2472f3f492fb4194ca8cd46295aff79d2b033ad714565ecc1a75b002a042c2ec071d81460

Download Submit
C:\Program Files\AVG\Antivirus\AvDump.exe

Filesize
3.4MB

MD5
bdebe600fdead322b65d31fb1624a688

SHA1
658676177f4b8ba6680e49aaa6a102d411bcf0fc

SHA256
054b03988ee038722ea8ff73eae66dcc2e014c8bc370d88c98926bf153b542da

SHA512
0cc7ce3f27ecb29cc596c1e06b01bc2c596e85f8a06f901898d4018868ca8fac3fc96d9e1c388982df0994b24178e2b21df099cc4d0a46196ed4aa28626a86b1

Download Submit
C:\Program Files\AVG\Antivirus\AvLaunch.exe

Filesize
453KB

MD5
6a809d0772d272b5c39c29a40e0a5d7b

SHA1
1eb77b6b84d0de25a0438155c11c1b65b73b685e

SHA256
9726711c1e8445781d335198cad67beabc24f04b36140efdcb817620e152b8b0

SHA512
2fff5918bd2a70f34f53a464c5cbdf8ab1665d5140b61376af7b98de9983186120ff90d6cc41cb76b7fe90f179ea12011a11504acbe549bf84ef00ec64b3c91c

Download Submit
C:\Program Files\AVG\Antivirus\BrowserCleanup.ini

Filesize
42B

MD5
4957ed73d5e5e303e351c8f8b7b53e1c

SHA1
e61238f49e44237c56d4d5b41aeb150160880b74

SHA256
59727f7a256b7a70971f2e62b43b0a923937f85689fc3aa4ae50e4fbfbf83499

SHA512
db4854667285bb1cd8d07ab189607ec5bc489afb2d0a5b5a3388f91cefd012feca689787452901e0eb1de6e8792e69c0097c38b89bba0d977d0b29e5e5ef2feb

Download Submit
C:\Program Files\AVG\Antivirus\HTMLayout.dll

Filesize
4.0MB

MD5
df784735317f80fbfa121d23d2da8e22

SHA1
c57ba78bc59ed067b051e89d190459c17ccfef47

SHA256
8fb0c66d8039c724dac86ae2effe1fcf55a9870131dbe1601945e09d5d1f5ff7

SHA512
cbdfc9b3d5ccb37ca4d31e99b71d69f201b91c0a959eb895956f464852fd80808093296c13b056d26dbd27c3fc81a7624d3e24827e96a68c8ffa2ea20fc6e220

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgElam.sys

Filesize
27KB

MD5
66f3f6caaaf57adb0f430362fd1a265e

SHA1
a2869324311368df8a9a1db7b0c5ca9c198926d6

SHA256
7cf01839a3d7d7150f6f6233fdb3f43eb4c61f440fdfcb49f7c9d1a3e2a88290

SHA512
2ab4a59ff1891e4a086f00711b3c1c80ef6b0a1e88c467c153e3ee11bf4c4a3456c62a52c3400c38f97182a52056ffd353f7f6e0eb4cf933a734c1433c0a7c5c

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgKbd.sys

Filesize
28KB

MD5
79bce742f8fdce8a2b0e80520bc7eae3

SHA1
e2061bc703bfa374f797be5cae6101bfb363e8ea

SHA256
8e70f686869a272be1410370325be4a4cef314e77bb654e4ba2891f466806c8a

SHA512
88d783bc7792e9cd4e4f15eb77bdeb90ff0776116cca1f35c0d3fa733252b8fa1f8c21a9767a192d6c1ad61eb07faa5fd93355d90c0ea76f924eb857e08fd65b

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgMonFlt.sys

Filesize
268KB

MD5
d4979004d77c38bdeb9c382179a97d6b

SHA1
fad47895f8b8b4508c54fb4c0c889353d1d3e8d5

SHA256
8629e0bcefef974a242a4390c131d9b10a540edabf472ef012b585068303167a

SHA512
b329c0257e4f22fd7647f9a03a84d40c4817503e940d293be5e447c918ca2a24957f809d39296958cf4ec700ee6c2432b697d9b6cedf0ccfdf0a8d0c78c0e6c5

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgNetHub.sys

Filesize
538KB

MD5
a1c54597d19b46e74c7e74155f63c306

SHA1
cb60e8c334b020cbac3efb9637a43f09ecc24e54

SHA256
b66596b0804a5b55cf96e2b264ae78e5c9401106486f082c2f4dd87f134b9c52

SHA512
8b6ecf1ac6d323319daad88759dcc4dd0ae8f2802e252d525cf9e92adc96c9e1ccce67b1b52f3127b84f29297a6069b4d6377c8d77348c26e51a8e680b24eda1

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgRdr2.sys

Filesize
96KB

MD5
4006efa7d40f721ee1d2da8512a2fcd3

SHA1
28974e18b5c3bd2971f2a0ef5761de338b690cca

SHA256
362c6fd2823fac2811b97f54fef8b088d5a6853538e3e1bc6df04738ec668687

SHA512
9f0b157dfcee165ebf7509425fd4cb056ad60cc9c51e5042e657c0c781b0b5cb273e10ce6c839cc648ac7c02b62afd9f319e6b128bb744f2d6c6f5f1e8790bcd

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgRvrt.sys

Filesize
68KB

MD5
e157719ade21d22a29db6ea69e3cb6fa

SHA1
b85caa427bbfc6d00970e243dcb7d625ff3cbdab

SHA256
1774acdfa8300704e38dd8b1b7d688fa4d48b76ab9c4387bcda6bb538e597327

SHA512
075a01e40e8b859903ee520c700c05da8e245e9876f0fbf78fd4bf13e3a8332bc268e4aadb955cbca9d9d21075772b83f59fd5ae338bf648a2f58d6243727efe

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgSP.sys

Filesize
1.4MB

MD5
102aa2f446092eceec00f44993a962d9

SHA1
198504d23ec935fd19e5d7ced5b1e585db68fca5

SHA256
eb19c86eea559310fb5d32c13cebba3d9a3e99c24b333a3cef25a7a7ba73eea1

SHA512
e08669a727d7acbc79ec9bd6226bdb1fb104ee776b4cf0bac1f4509eeafbdf99a38dd1979c96206deb0bd038761fda39abfd875cb0f920beb7e748fc1e753c84

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgStm.sys

Filesize
199KB

MD5
0f6296a4ddd816fe340804ddb41f8921

SHA1
2941e1392dee2692437a48b66a19c47ffcd700cb

SHA256
6c2ff78df35cb37eddbf8518f5a181cdd8cfd0a2a3130357c06f8874191a9a9b

SHA512
1995f1f5efd986e9062b4fa7bbd618bb09bb0a7d7eade05ff84a3957621e156367d014f1edd19300852e56ad7f1ab3c22680326f948b9dbd23d2abfc8d6a4df8

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgVmm.sys

Filesize
372KB

MD5
da7523666b8ab25b39a43449a97c1ec4

SHA1
e933da5475435db4e0682801fb15cb14413d4511

SHA256
9c4df710b8e6d45ac42874cfeb14f02e863ebdddd6562b054f529273a2575a3f

SHA512
d628690d95a0424fc48254066b8f52cbf5a2c91a7826f1a98e3adb085049d6671ef68427e0b837551be364450fe30f32cc612776f62333df7b30601759f005fb

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgbidsh.sys

Filesize
289KB

MD5
0ef97a0284706a42800608fb73286724

SHA1
56a4facaafefb1a5a55e7402bd224f33e2639b2e

SHA256
b654c95ffdcd6013e5ec7da2b1f7e28662243d500493d752672dcf577bb6b70b

SHA512
1ed3542a5d11536d2bae85b3d5fe3378f90d70c5e7e142404992c8c3218ca24138a030c14118d40c98880c00bc033dad9cd9082d5ced7432355cff26c49e2b50

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgbuniv.sys

Filesize
82KB

MD5
3c2631e53ffd2c7a27304327621c5563

SHA1
224503fcaff28b5c29acb7257d4253a887ad8439

SHA256
aaad3972996417cf97f0d790759c02f9eadc4baa5a4e2f68dcadb6f44e9e8ae3

SHA512
547282c69a93ef85b175f57096021043545355e75b7e063931655f4026e3145e75e2c2f3458cd9d349c6c50f746612fc3cd4612c669707c660ede82058b6b91c

Download Submit
C:\Program Files\AVG\Antivirus\Licenses\mhook.txt

Filesize
11KB

MD5
d273d63619c9aeaf15cdaf76422c4f87

SHA1
47b573e3824cd5e02a1a3ae99e2735b49e0256e4

SHA256
3ddf9be5c28fe27dad143a5dc76eea25222ad1dd68934a047064e56ed2fa40c5

SHA512
4cc5a12bfe984c0a50bf7943e2d70a948d520ef423677c77629707aace3a95aa378d205de929105d644680679e70ef2449479b360ad44896b75bafed66613272

Download Submit
C:\Program Files\AVG\Antivirus\RegSvr.exe

Filesize
3.8MB

MD5
c07c69772f5b1ffe3b9111fe57a83a43

SHA1
2d41af07bfc4c61c526ad047ec1a421be4dded7d

SHA256
cd0956189106d1891e7754d6831dce21f6b38231a14b29bf4cfb7ac48a443bcb

SHA512
810e3be0b85a1123f4e6f04455112806d3f606d33267f7fb6152fa1e153f1dec4649c4977eee12dc710e8d299eee9d9fe555f1710daeead10fe52238214a7f58

Download Submit
C:\Program Files\AVG\Antivirus\RescueDisk\aswPEBrowser.exe

Filesize
3.2MB

MD5
e721f60c9dde65c740089d67e328e147

SHA1
02a3692ff7407e4db309af98019d45309d5b7f26

SHA256
f005566a70ea38f1dc874869804a8c45b51e96920e205d79d347cb668271558a

SHA512
8f90cfcb041c5a3541cbeb483e4588ef07361a9a78d5e254efda93ca4c72016b58dca1211fb3ab5ad4c41a3026bcd80df17018a22126784eb7321250bda6fe68

Download Submit
C:\Program Files\AVG\Antivirus\RescueDisk\aswRegLib.dll

Filesize
359KB

MD5
135cec23016025dd818712204fb1fbb5

SHA1
af8dcdcea97897094f55a24a0a851b4547014fca

SHA256
4da0037dac08cab59a84fbdb25c562aaea0a8e9019a2ec6ce2888fb56de4a41d

SHA512
179391f56c5c198368bc2a335f9625557160d056aa98d0d78cd14cfdd3554325ede712e1ea503e598325cfd11b8c2110e029b742275d686520e764bedf4d4a4f

Download Submit
C:\Program Files\AVG\Antivirus\SetupInf.exe

Filesize
3.9MB

MD5
afd17e14e1c6388ee83a9d52a4ff5a90

SHA1
2c1a301ba90d383fafe3218e532b0120049a766e

SHA256
5b4b7c3b23944a422ae145a0ed524aa90bb287bcfb6a53ac49a211b788829740

SHA512
94ab037302d411e1b88bdc336d2096b489118356156dfa50781a6206f8a5caa4c4a6771cae4c069a6db5282cd11c6a3faa1ad98f57adc0bb473b9bd7b1423d44

Download Submit
C:\Program Files\AVG\Antivirus\aswProperty.dll

Filesize
1.4MB

MD5
3782e432babc80033a2e59c5440f5863

SHA1
7ad5354874704cfadb29b5cebbe8c9681edc5b78

SHA256
eb3be3214679b6606c9337239c1ff376a56f63b421b9cc702f0b0037ba4affa2

SHA512
b50a9677009fdd5923cfdc47b90410df8f88c267520822b3a5d1b5e2e9024b681e57a8ceb32c468ba2ca054abd279e52ff31fd67f5874bc91a301adbf2c51a7f

Download Submit
C:\Program Files\AVG\Antivirus\aswRunDll.exe

Filesize
3.9MB

MD5
ecff2c97e379ac883f3ca631401ad9b3

SHA1
b732a31d86dbd10e9e68cbed0fc84bcdfc09f551

SHA256
492c572fa5882358140ccbde6b7059137177a8ce15097c72c35be59ad73a3939

SHA512
e017d33f4db9c0fed75aa67a441ffd19ef4b2cdea37c3f5c0aa2781012c485f2f8fe416249743acff2c1a1df914938340551b9d45433548c95744481a94d0d29

Download Submit
C:\Program Files\AVG\Antivirus\aswVmm.dll

Filesize
263KB

MD5
111447e190fe88dc452269239c52fdca

SHA1
316552ba1b83a9ca10127c44a6e0e3cdb4614e4d

SHA256
113eeac5c47446b8276725c564ed21947f08b8cf5f31628194bc2898d3c51072

SHA512
82c11923a656d2e5ee9b911811b1b92b567f2895ad25b4439392a04582a46eadf2f9b248e47f2fb801adadc9456e8402e912000bb226769d8e7414e7393fc22e

Download Submit
C:\Program Files\AVG\Antivirus\aswavdetection.dll

Filesize
1.7MB

MD5
c56712b3e53a4138e00afec97405cce0

SHA1
d61f1a265d295bb55a636fb5ec315972522d0968

SHA256
e146ec6910a222652e8d8a24b248eab7f93261db7591770ea833fa42a0bf8cf2

SHA512
534a48e8dce6d6e8de73daec808c13f0290339fbfd4b6a5ec37a8212b417e52b48345ed57b529e1d87b150faf06fc8ade0f79521a32bc1ae3f5739cdadc91560

Download Submit
C:\Program Files\AVG\Antivirus\aswcomm.dll

Filesize
928KB

MD5
74282f12bd961a33f01b6e8fe2fadb65

SHA1
fa81a3947e15cc4ed5908cb852169e511fe2acaa

SHA256
64cdc658ced5aff758e376b5796e5550d859d191dca397958532a4bfb20426d9

SHA512
b09ba1e77986231551926f13c282a602ae81d61456af3d716fd45067935f596fd1ea11c8867638b78e5db903931c96536dbafe4a504af1404b9c0bc3a1ecfe8e

Download Submit
C:\Program Files\AVG\Antivirus\aswdetallocator.dll

Filesize
186KB

MD5
a083fb470bb98ff6b0c6dd35ee3a9b25

SHA1
7bee07c7c2b09d70a9a0c2aabcaf70ebb4a79f88

SHA256
3c45441696c6af1a6fb761e6f079dfbee08680a82d227d7975dc6032ac879c86

SHA512
8ba45ff10b6e79fc6224a71cac2f72ea5c0b3366607b9c9de981ccbe1973b6ac498b6df51d3139e347b7fb9ff0e2347be4fef96d20d499c7dd17102296c17731

Download Submit
C:\Program Files\AVG\Antivirus\aswntsqlite.dll

Filesize
881KB

MD5
26bfe69a081487f4d2bd2ab9d971a039

SHA1
f62002b13d50120594d0bf4fd3bcba3f7cb1d0f6

SHA256
a746978d076fa3a1918e32c8d1b15ca5e17e8d78b4a9abdda81a7cd80fca1de1

SHA512
8ae611b400628db14cf4a4cf8e347718b2d27cb043a7ef19bfa0f7fa44e79dc60f3ba74b075236f5f9b2d9d6e7354fea89296360b06f5d5a0c0155b6ef011a18

Download Submit
C:\Program Files\AVG\Antivirus\aswpsic.dll

Filesize
561KB

MD5
b18cddf8d159f98d8089f7a18ba4d8af

SHA1
442222700c872b63dfb7d9cb0f8ffa09944648a0

SHA256
98a5c4a34789e8a01bdfffdbe8322594b661eeabc24046c869fe53015fd97b4d

SHA512
fecce9d1abe5fa14e1bad5f63756a76f8092bdc2475b3eb7763dce42f6e34026ad7ac0a5a3dda9b353a944dc08400ebf1ab1e84d90c37986a6c6ab091114dea6

Download Submit
C:\Program Files\AVG\Antivirus\aswremoval.dll

Filesize
3.2MB

MD5
9ddec4498547ffa8fc8ff07ecc78b47c

SHA1
db2aac0ab3d783aba6b827c659e4af54e971ffa9

SHA256
ebd1bf103c874572c5716db56247c91e17f39fcb6f8adba4bb6a473675ddb642

SHA512
65b2e1f9306e76bf246c0d1560c7de41c45c6a642a85e7f369a4c751679aa1006f0e92372a4c041841e439b976db6a4b4c27b417083d4ae52a4db9180a512fa5

Download Submit
C:\Program Files\AVG\Antivirus\aswsecapi.dll

Filesize
1.8MB

MD5
c966f4a1f3526617cf22c0d5168d1d4f

SHA1
3df4ae567e25598dad677dbcdc51f5c1955ac6b9

SHA256
088c5d946bf500e0598745b25296df500a7e6a090a5e0d336bc90432418bb50f

SHA512
93385127b9f886915b0da8173f870e4f5c0a59adc2dfbe6c3d4286087129f6895daaea7d319b16e6d9d4860214823c684b7a5f81762f0fe248b490280477e824

Download Submit
C:\Program Files\AVG\Antivirus\aswwinamapi.dll

Filesize
124KB

MD5
9e124eafcbedcde49581e954bcf70cf2

SHA1
81518034633feafad339151fadae273907bd5102

SHA256
6982472274a3560dcabc1f8b990ed24e1922c54b0f7b1faef3df4bd6077339d8

SHA512
1407b76a6f2dc931e990e5fb2c2aa46fe4bdce9359916e76dee8ef998cc306199a0c5e7140332dc520dcfdce264a5ca66f4da9339a3e98c125129f3a0f879b57

Download Submit
C:\Program Files\AVG\Antivirus\avgToolsSvc.exe

Filesize
1.2MB

MD5
99fff559fef8ed9a7dc6594a26cb02bf

SHA1
2ecd770be2daf50fbecc51f706226c3170625cad

SHA256
5a9d4a1bde1f5179fd638b637012a7ea0e4a1c1cc851623056b4adb9031d92c1

SHA512
6ceb4343897819e4ec4589e2366dae7ec65c8959d6fc191133d16a825cce7843ab40c0325917e562b4346a66ca6634ac55514648ce57e682e6075bad74d51926

Download Submit
C:\Program Files\AVG\Antivirus\chrome_100_percent.pak

Filesize
768KB

MD5
8ebb97efd9cc5bd6c500ef6c7a9fa406

SHA1
8e285f1ffd650c87dc4a0ec26df418acc1fc8821

SHA256
aaaff8d6c9f0307c4eb3dda812f566300073414de002bcefb273a7be57f9e69e

SHA512
f93b72eb950d924b66bdd44713b631409003feef26f6146ef366f05312459ba2d2c4c720b3ad13594c8ee6c3734c53e4d1295eea064c03be313ae2f541105c89

Download Submit
C:\Program Files\AVG\Antivirus\chrome_200_percent.pak

Filesize
1.3MB

MD5
8f6d29ec5f29c02e8d7188366f0ef3ae

SHA1
7451e3cc4a7de1a53987c5cadf2a759269d99a40

SHA256
3e116ffe2f55faa2c2b96aee4da637e6424cb48bab27d9f94a958530f840c673

SHA512
418be962c4dcf92423b2bb780d3a7476756e16aa1b670167ed3631bbf7ad4edb1d35a04c5f8f685c5eb79edfe5a247403d25c6ef18f43eadf1192603ddb2b386

Download Submit
C:\Program Files\AVG\Antivirus\chrome_elf.dll

Filesize
1.1MB

MD5
39a3d833e0e786905fc8b3bf153989a5

SHA1
716c1968740c69d9e5639a72aaac709eb2e0024e

SHA256
d0447e595d85098fecc0e0bfa51c93506f9e218ed10d0a916ee0bfef511ac0df

SHA512
85896f4a58a66317ee67319e1d68269aba84fa81e8a5833f88b55a52f705f6516a27a50afb55baa4735a9736c01d90ab2a2ff71869dc8f5524ea6d2a6e297ab4

Download Submit
C:\Program Files\AVG\Antivirus\d3dcompiler_47.dll

Filesize
4.1MB

MD5
f192b3b5ee05bdb0afe890a09f69abdd

SHA1
b2194d97f7a25348eeb714552c89a29a75165613

SHA256
901c70df9b9714b22d264375bf5c91ef469edafc25c6762e7b0112bea6f07378

SHA512
9ab70152cf0e3214d539a59b135f95485fd770d0c5693469045a8e3e70e48b5d1f7c2dc690b2f7eb9094cf2377199624890f2f0789b2abf81393cb2b5765780b

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\about.js

Filesize
24KB

MD5
1e8400b0cd70213f1d35f1c4a861072b

SHA1
d52d24bd105cddcc8121ac5a27b1498d37f73bac

SHA256
05a8ae930d83f091e9f30e20f23ed4c8ebc0b7ea0749e851060a9db56cb924cc

SHA512
b48782b573d455b9a05c0a58f7294f7cfde1bd6b8c72008163b9908e22e9dceb40bada808bb33b08fedf150c697d0e05e57bc55b8683de1f539745bd7b9cbf97

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\antiRansomware.js

Filesize
44KB

MD5
8cf7321f6330e8c5761ed227adaea4c5

SHA1
be91a8d9bdf42882e3994f6139ef94cbbeda6829

SHA256
485abd5967836fc78d916756d22066871f75f41b927597e2e36e5de549b32177

SHA512
7b372537e88aaf8cef263667ad9042c69406d23ab1b7a81f75096f81ccf16c2c12848b88d5426308991a413bc6744ad7a01d58ef397cef38fa88b38d968ac90a

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\antiTrack.js

Filesize
25KB

MD5
a329ea55cc694cc7b1674b28a7c3ca52

SHA1
059b3f4016cadcd0cbfa9e618c6e4d6ecd58bcc7

SHA256
6cfaa651a3ca2f3088230699e0a96ee67fd585305648d29dac75820061a46806

SHA512
a6eae2b4ee2bb9884fb78f65c87bd4cf741b6938ce691e9bdef32fd47847fee4b023e5069b5a8c2e15728a47947e675f51a265876827bd210d92ca8d14a78160

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\ask.ogg

Filesize
23KB

MD5
a3b4b5563b0714a5f86b6558ee703d9f

SHA1
d21280d0c8b593257a7ca10f41c73e49f7424b5a

SHA256
4a2c37cbecf92e6bf0ff463759fb5034391091edd58508a44616883ea524d50b

SHA512
3aec734a34f580beec9b33cfa5b94bf979aa73abeaedadf8d03e82ce98dfa7cb0b4fb987df15e1707c9b14b458233ab28f471d3c786253937af7b0484580794c

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\browserDetection.js

Filesize
80KB

MD5
06ac7c53a6b5916af01c1a857a040afb

SHA1
9cea5fa36f1b62bab0bae42799453fee2ee03a6c

SHA256
3ceaf727db696093e2f4024f5328f7b2445835eaf5ca838d47ec18c786624eee

SHA512
b9bbff9b5066395963905206957d554476d44b6e56cfdf613215c6616d46f420c472b4ccf6a62eea930bac6f6b09d8d86650768c2e744b836ffd4019bcca24c9

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\browserDetectionWindow.html

Filesize
692B

MD5
91ce39a264c74f8638112282be9664ab

SHA1
9bddd0eb43fd64ea04ae383e4232819cc537514f

SHA256
4fe75e1f04a9cff36d45b3f8879e65d5aefbac61e20534936ad72c5c7d94392c

SHA512
c1b9084b91da6be8be560620af801f89e6000fcf8c72206a8838eeddd78bfe3c33aaf111076aa26371daaf1ed5f750d7b505ea9554f1345cbc0ab8316dbed9d1

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\browserExtensions.js

Filesize
18KB

MD5
1a190bd5ae32dd35505d2fbb4e7d3489

SHA1
e371c6e82810c0efa4ae4095ae97a625a605eafe

SHA256
6970983dfb06a851c06146bb8192b4c9f80323e896ab5c5febec268c4b869230

SHA512
f94b424f75f21e91fc66638e0d0f167aa494c7e56f264bc4a464f74420da7275413a6fca2790c1557a51b83b6efb7387f832f3e5b00b84b33fb542aa4de40954

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\core.js

Filesize
18KB

MD5
be42ff74f523d009159ae864bb218056

SHA1
843d4d8472500edb02fef2577e886334543672f0

SHA256
bb4747d7920491bb0eb5530e11934944acc0930d8dc64539c235f3148aa1748d

SHA512
b4374698e7f3d24455d0dfefada879272349eb6db0e72c0981a1752fe56b4f5358e7a32e11e7f6945029ee7661ac31f2d7db083b1596697e324aa73eedea5436

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\darkWebMonitor.js

Filesize
44KB

MD5
d4beb4d58c0a0e29e5153de3694f29dc

SHA1
97a7913440a997fa32ceff981d77e32b4baa9270

SHA256
32aa49d3ab5915e34a37daafcb148724ea9c523497eb5c21a5ee9851a6876451

SHA512
51f9f47e40087683c608342aba42118b10fea0b96bd7d4ea52a39252687d864bcf4a2698a65eac0766397f143b0261d34ba8463eea127da223b48df604e90287

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\dashboard.js

Filesize
101KB

MD5
fbbb5c4e9c262a589d1b45cfc332abe1

SHA1
172be3eaca53c64396f66c1b0cbbf405b0059930

SHA256
e00d5ee9eabe158c82791d356a93ae9c4b3dc353849db6afc7a4f34bdcb0dcf5

SHA512
92d2392ac2f29f3f098c0af1591c1301167134371176f71b1582ba76b38d9dba56c96046b7ab36c209681d92981118e693414fedc63f4cf36c82192cd708eccb

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\dataShredder.js

Filesize
47KB

MD5
e55a88ad3c9009041d653f68461072eb

SHA1
586d4e97084fc95a29558602dd89eb2711dd3d36

SHA256
6eabd7bed1ec74e85aa655c608003f3b920988b26bc3d2df2a76065acdf61b73

SHA512
04bcdd0b3eadd0d159fda1e5e9342908e2ee3b5a2a408e335f961c202be6a246daa8c69f943cd5bcdbcc27933cb7412937003ba6d5a6f87481bfa6beb8e6dfcb

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\doNotDisturb.js

Filesize
42KB

MD5
ab8b2452086345c83d0942c3ca2db7aa

SHA1
f3a19a4db0e926df4e281efb247d3b3a3103caf1

SHA256
ff8ddb4ee78316620f77ee9d27ca244cbf6b691f8f194340e7a775fff6e386f2

SHA512
e1c19b2e3fc799ebdc62b573958597b92a3bc1eb9d0328684726f09b57a70db58eab1bebf5bd153dac5ad02fbb60f3f9beda6dc37eb8405ac1cc7172709ac160

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\done.ogg

Filesize
22KB

MD5
dd771017a31b4b6b88cba564b6b4c86e

SHA1
63f12d6e8d2fad5bd8e3b210cc20cc5fce8da930

SHA256
bd6a50e8b30dccf4575c91596b2b85875b236fd2b1b8fd1de5fc714f0b673804

SHA512
6958f2aca7a95f28f181febd9b09ae60e6c4f336d30155433cc506fd1147dbc43125bafc39e7f4cc06c68f90566fc957c92a3ed540d4ca830a8e11e7df2c5969

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\driverUpdater.js

Filesize
10KB

MD5
e833b59e8e9762a2e01fde0ab5cf8d6a

SHA1
c82a102f94fe6c748836912d081dced9d3cdaf59

SHA256
f3d1b9b5bd03934943cc8a7340317cd769e71737479ddc5997c506ecc196f473

SHA512
cec1b6f5ec235b4a2cf658771f4840e4a3b82f2500096367bc5240334667756a9e41cfa685f0d2ad5152a90acfd0ef4716cb683f18099c2a351128364db45ad8

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\feedbackForm.js

Filesize
57KB

MD5
32d9c2ae387399694abd4e27ebe6e4f5

SHA1
714a977a511ef5f5de5d8c2cbf892f25f081c2b6

SHA256
fdd0bf1f17cd07ce966ec04f40fefb95e8a4656af675e28e748257191c365eba

SHA512
e88e9e2b2ce7c1f78756ed5bb6c6c3f1f4da652900a4d2314652e0ad018ef62d99c401c8686b6158d254ea1896a2f7fecf93775025eaef631aa093c11ea5f855

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\firewall.js

Filesize
246KB

MD5
316011ac1bb3104c98a24cc739e5020f

SHA1
146e8ebe4610192cb0a028a84db5c4934eb7eb17

SHA256
53d94b6ff928b2b20bec95e82413974dd1ab2f878760fef41e201288f00af37c

SHA512
95be345c1dff1e0844a29e7b40228e8804fff38a863467dd372693bcac3b9f28024d7e7a031b7d7a4ce785536ee2756b70a8ef0bb2a85031bc867c18738098f0

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\help.js

Filesize
3KB

MD5
1e603b35260fae1149014809661fdfec

SHA1
59df70c770390af0e7b341f9118069c9d5c2aae7

SHA256
d351b0d200223bb852273a0aac745810a5b8858a4f37769cfac1f943a2032734

SHA512
d2a551a223ec97d1cde5a7e91b1466aa7908bd71af4f7d2758798813b82ccc89fb51b6783261b47dbb70967ff5fcbe14672d0d8967e67c969fabfeba2b6c416b

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\i18n.js

Filesize
189KB

MD5
5ed024429f32c5c5a57f73ea4d44a7a0

SHA1
8b823f112504c56a89c25e3de83cea631322cc7e

SHA256
ec8b45d710bea88b102cd9cfeb5342da54dabec58f1a0f2bc8ec9b75f5489a9a

SHA512
44d753877ab4212f330e7af585576ec1c40d1df290d8ab21d55786855ceaf0ad1862a51a8ed0ad2fe5d5117aa0d830d8a98cff9a1786e83bb2064f71db11b286

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\kin.js

Filesize
260KB

MD5
0aa13578e63db84528e7e61de7305727

SHA1
a72d6ce2225b06e92868079ecec8d82b47630804

SHA256
923c76016a602fb31d750954ff2df3df1e1b2ef8f2c1d2d94e92d95ed65e2241

SHA512
455f1a15bad59fdbe8c7a57723a4dbc6ddf827aa00efb062c6d76df72246c5d3d7b468e088db694892a8c2a30ed5e2e8efea482bb1a451f76fe4f3144d6612c2

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\libs.js

Filesize
16KB

MD5
6044e7dd0323639d9e9660add81df6af

SHA1
8268e3b5162c43438cf3609fc9f6df3cde51c61b

SHA256
53fe53c54dc2c8299ca03add1f0159215b626b52304f204ca4c6f1ac1cfa8851

SHA512
da1ef4c3016c39ed2779a4a0c4da1d6a0711c0f32635676849ad127f0f3952020af63c5d7591ab6d86a607efab8d44999c0a52e25a8136c5dc9dfd963a7c05dd

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\locale-fi.json.ipending.2e1421a6

Filesize
434KB

MD5
44ed6d059b3efaf8d834a5b48846ad3a

SHA1
6043c19dde4aca8b5e4c983aa008a8d6d0144b6e

SHA256
6e348a36ed668f2af586eaeb8764f57be118811161c09dccb011fca6fce6e3cc

SHA512
672c4c641bf0fb95df7f8f1d80c142f4bafaad8b7f8def9da6e47649b7892e6368ded71b12ae6688be2f5a2d24179da2f08b16449745ae49a5f20e9d245ecd54

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainCss.css

Filesize
388KB

MD5
238b71bf45f64a1252b6496d712f647e

SHA1
fc84f78190a09cba68b4ac42514fe24482e0ecc4

SHA256
a06ccae1597cfd3ce8f713c78ac0a2611bcb2e0a33bc249e8b4ed8a12251fb21

SHA512
915fdf78e14baa2b8cc7098f3fbb0eb61e516fd9c4c86eb66423c0feae0cdc7dd31e67dbeb0bf1df0ed7993e388eefdc2097d7241903bb928247dd4b4b2a4b37

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainCss_light.css

Filesize
80KB

MD5
d11159c5b26bc123ffd50aa2020bb88a

SHA1
c9bc915bf0ed397b5c80a49065052def66b42b8d

SHA256
73f07e14381ddfb7bf765e0f42d909ce151a40cc64d411a827a2370b14b110f3

SHA512
07554c7381a2dbfaf89e7c80ef814b898ee5d28af661d847493e879f278da354f4c7f8a9aefbddf2d90bdc9a49dcf9e1bb8b90d53ea0e2a6064685c6a349dd73

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainFont.css

Filesize
165KB

MD5
31e52e2a43305a18f96b702c8c9bc453

SHA1
7d33284651114b4b243b0580dfdce8792c506ebe

SHA256
df0acb8d72ab38967ce870e7364157d85ca87f6c3064f862e9bbc643ffba6d85

SHA512
543c82371db76332c5386594be2b7a7ed25cb9fa0e0c24da5de9a3045843bfb670d11f5ae10a465b6e037604d3689a1369c3e04ba0dea5fa29e54b86bc3c21f4

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainLayout.js

Filesize
216KB

MD5
192c5a8caf7fd61ee9222d6538c95f82

SHA1
d58f7fd5744d546f7b158635262f8367694f4c25

SHA256
9a5bec9b4e973f61de000620f2399b78c4c08c6006f0f32b481b89a94ef4274c

SHA512
381c370a93448843eacd00cd3f779b878b0ebd1195a593ac952a81d845a88a8d9588da8aad809b01b2f71d4d9d4e0e9a0b3983dabb0797cea82677ab4a5ec99c

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainLayoutCss.css

Filesize
26KB

MD5
190b40bdf651b230c9351895bced2bdc

SHA1
a1f5231a6c9bd3e0e33a0714eaafc4f318bed0aa

SHA256
e9b68a6f47561e0e6e2d290b937aa4e778867116db10c3a8c56e445eec8d563c

SHA512
649de5bd63d0471b1de249a5b68e4e5248669d4abb348692fab8e89ceca0829045566fbae089e91cfa1d4ba4336473b06d6726b12ef91bcf7b33b6af534d7b93

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainSprite.css

Filesize
276KB

MD5
4940d69e085a16681ec7cfc44ef11a65

SHA1
98a1412e5cadbfd69ea372579bdca362ce25f73a

SHA256
e1de207c45cc8ff7a7929fefce4e513c9b4824ae6d12b3dc60815feec2df6cbf

SHA512
ac9b0c116452f7ddb6d3abcbc29032cb62c9abf0734f5f6435f5aa615c8a3db1a7ba957f09ee6736ea00080ed38ca6eec0e075383bd48fea924f3539371379ea

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainVars.json

Filesize
4KB

MD5
cafb9c7fc9aba63917dfc2349f792479

SHA1
1732f063f7e779480abb9bf9a5ab6a7ca61ca1fe

SHA256
bebcee43aa864c5e538db7dfe03389200a24c8d3139004e5a9710971e64e2c58

SHA512
4df61f491b3229799fb41cf9caeb2a1040c06a68c4a724cd2fc343cff85a46292e1281ccca49110c4fdb746a88b8a1d893ec353f008f42ddf564196384e85cba

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainVars_test.json

Filesize
24KB

MD5
20201acaba518b589ae9b4cc15624403

SHA1
fb85ddf732b32cc65afe173a3afe5c60852a78a3

SHA256
460d063a4b4f603af81ca26721a8511e3f788ab67a36f98dfcd5dc555c9500f5

SHA512
123fb4fc3be2009f4b5d6a18a02a99debe2a94f985fb226c81cea08ad2555382f64039f58671b2cc1df8f1bbbfe09f7ab6cc5be50cdf5f44e26953a05793663e

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\mainWindow.html

Filesize
1KB

MD5
28024b4e7f4ad2b44c5ba6bee5c70758

SHA1
94f7fc488d91f69a3afc0cf477d3a9eb0beb4df8

SHA256
3ff0a9c9a63207004696f9993f5e234e520325adc8385605ef0f782e0d17f354

SHA512
bdfa46ded6fb1c741bf88f825b3e06f499092173622f2e6ee8d86d3c2eb79046463c2ddc60e0a6e0e5dbcb48f405eb45ad3331d1509f276068f55e65a3429cb0

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\myLicenses.js

Filesize
2.3MB

MD5
234abf507aa16bae71bdf829f1332990

SHA1
5274e1cdb86a9854002dd6865f61f61a23a75161

SHA256
97ca6c60ba9a9c6010a8e57c6bb25e1dd9ab8784c345f1c5a640bc1915696cd4

SHA512
da39a055a6d2fe704c8fcc1c6df2f64b312b5bcf49b2d35cc08c3e3bf1e81c714d2165845c5cd6d965074af84435b98c7eadce1aa15105ba09afa7bbaab33fa9

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\napi.js

Filesize
37KB

MD5
1b4d3060da055d914f9c1d0a8418b97f

SHA1
bb59ee1d36ff8acfba3f770e9df075ddc1ff3dd0

SHA256
aa60da93bf4c9a9f038e7b1fc6eb19db3d16f26b202ef8c9b41217facc3d0d63

SHA512
79eb0f1569ee58b1f4780fa840716d597906847e1077ec25c302f7c815735d2dfd4541172ce7c3b976903e6f71c2fed99d51603bf83f8a4fc078e12b9d448fa2

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\napiAdapter.js

Filesize
1KB

MD5
7b3d26bc627789ed197372a27b02c67c

SHA1
97ec945c859114aa17485f3569d526c17cb2cbfc

SHA256
791c940788f5839c2ca881e47d43d958152c23214127eb478d0c46bc4a33aba6

SHA512
2367ae3ea9ec4b03767f1660f5a62e91d0188802b96728c38f0b32e0480e5077d7f8a92515f9d26e87333531c64533c0aac9686b4a4451135a559e8732c0e68a

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\napiExtensions.js

Filesize
174KB

MD5
93c11a582869664b053fc6baefbb2b7b

SHA1
53ef672272147830e837c855edcdf3bc2e7805a2

SHA256
790f816e6e85bed5161e325ddd54e9880c32845b5f3976d72dfe7893e543af57

SHA512
e24036f24186603fe6467c9f4b489a1b387a79f1a8372a178a00a6f6818941e281499f4b1f49abd8c20d38ecef8bc201e263bb29d297e6fab68e0a50cb22c315

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\network.js

Filesize
322KB

MD5
859079c2fcec3b5afe65092c99b76212

SHA1
9cb63faa9e27ad106ae8b8f05132c85026e6f6cc

SHA256
76a8bc7cde4f9db8c5a5a9533012efb25c6437f0d8fd3e2f8b10dbac8f1e1b89

SHA512
02f0b252109573408a9469490a9144a60c7c6d4a510dcaa5d44f3b38bf785fe485ff8950335a84552d5a24edf2f0dcbef3e23637e496d5d36bc250e7898adc22

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\notifications.js

Filesize
22KB

MD5
96244a54fc458e4e56185be7c69183ce

SHA1
ce16add999a57cef15dc5105bcec6a41da9017ab

SHA256
af9606a0eb10483352f753ca7279ffab41dc1d58ca733d7a3a86fc2c59e3805b

SHA512
62f3b00916afecfa29d5032316965d1b737c1f27e76567c6b9f444f8c44b2255abae3c174d52f7d2cb991331b8ed8e09a51baf239692fb8aced8d5e0e57e7eeb

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\notify.ogg

Filesize
16KB

MD5
5d21827de75ec11edbd54e38f153f288

SHA1
b85da53e3f8f5ed450c167381f00c807969444ca

SHA256
e851d3c62177df95503f1615e8a07b9d61ca9250784e2d00e0a325d76563dbc5

SHA512
d75ab0e9043a2fd06f14834cde7578f014fa4266a4ac05804943bd1b2880da37b56c00f4803b90aeeeec692ea40032f55d5ae4d5b9ece9cbaef3d3d0edae9a63

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\offline.htm

Filesize
975B

MD5
920d58ec9ce2375c262ef1273bcbbc07

SHA1
6dfc670b315512c2a5877d42eaa9206314d64600

SHA256
ad2e117c5171824aa0e8413b7223ecff415351347ba29bc4ac618775c58e9490

SHA512
271eabae910368383f6d908d7e43ad3ac030c4ede8717926c6d45c11c85588395a101f3300e1db7d36dae3fcc1724bd3df06dec02be0a29b6545cdaacc5c5f00

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\overlay.html

Filesize
561B

MD5
74047eedc155440e5d55b4a8932f82fb

SHA1
a50d46ed4025ebeb44588c2a7c85e62dcd9bb16f

SHA256
b4812c1f202e598d3d26c3f08ef960ffa9e533f658865d1e1765df565b253058

SHA512
a37b6f1b7c5d2ddb03775982466c734d1e759d07f38a693b72f65dd29f6585be221229b92341eec0eca171cfdf81a60ac5197951856e3d9bf69348e7825ef849

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\pap.js

Filesize
305KB

MD5
3328206f65ef8b4315f30226c756b0eb

SHA1
5c23def8cb8cecea3a207a7ec581c645b5135e27

SHA256
0766cf8e133368f0b4853b6116958c1e04391dbc458ba623d38a27a833c1d741

SHA512
62d8485166d1a5844f4f8ba4f5c090f4d7c8e8c2902f7ce4ad00bf677ac99d3afcb9927e40b2ed266da4d6d3592b9aa49dcf86d6a01980e94f5ccc20aeaf3ffb

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\passwordProtection.js

Filesize
19KB

MD5
84394e228347dc45c5213961a50787e5

SHA1
50b5564122fcd9a75b4947e341d4aa0b40347781

SHA256
b95b2fc5402588af876708974258ad499844258926100e39252a8de5af8d381a

SHA512
c8ba0022a283b8b77ea024c7c8dd17e5f2ec3b7ceeae37923c01d3386f3a6bdd4cff2fb9150163c5228a2e1a647a27677d52193f753b0c5faea8c113fbc12d59

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\plugins.js

Filesize
9KB

MD5
81504db702ea4cdc7074b5ae05a313c2

SHA1
4819a73fe9d7976d7851ea252ced6afc8e06d7e4

SHA256
2a45c997c25c2db49700643cceb21b1eaf6257bcbf17893b2fa403772f2e213c

SHA512
5f458f2dfdd33211a6189601550276caaa8ad2cd088d27ac3614f59c719a2bc06d3560db6b5807bab763556213f4c024109da47394f04751b02c572c755a917c

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\ras.js

Filesize
24KB

MD5
c015eb5d49bec9d881fdce74186edefa

SHA1
2c06b67e1610d268533a28559a54190e9fa925d9

SHA256
6500956b49e4aa334007ba6ba7a17d5c5e95b4bedc08a0777aaa3349848b4f19

SHA512
95fc66597127ce736c0ed634b8146b69565ff91f84a98e4f95722dde003060f5d71f4634fd294ccee1b11fb19a969d28b716576ba2cc92e2c4973b387206f2f1

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\rescueDisk.js

Filesize
29KB

MD5
5cf70402b7403188d49b1751dc863404

SHA1
73c4dc666b50211f9a19fae3752a0ff35096f4b0

SHA256
76501a2a658d60e601381bb3fcd83498ec13309d3ce85c5611090bd30c93083e

SHA512
96f938ec7da490d983df286504dd76aab62fb859f71c41a8df3d000d34aa0f154642171c56856cb53cd74c88e0dda37997093c4b1e200dbd51ed0601a0fea3ca

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\scans.js

Filesize
315KB

MD5
acc6aaccb9cd0cb7a9c9e835fc5884ce

SHA1
6c0514c2c9785a1f26ceab89db8f931fc3b3a91e

SHA256
edaddde6c5a122fa76738069ae5d3b11f6f9f3a8054e6125946560c0a26a53bf

SHA512
57e75050ed9b5530ff971d66d3d8144140d83d86bf157358b62ddadcd3469d3f2ad079404be2ff521d0dd337d41435bb45c826c37765905d14113007b2c6de6d

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\search.js

Filesize
12KB

MD5
ec6b58fe7f47afdba709a7d9ef50a698

SHA1
369939e5ecae3cf43661bd1cb57fc7de5a22f7e9

SHA256
90be5d34f36dd020870f8198c1e5bcb1e444fd5f7e02093379b5acc861405be3

SHA512
254a205fe99adc90f897415b972696675fa87f533503167535747173a8ee25f824125101d2f3e3be4c377d2123b1a5feb9a6f488bfb64ae65b031b7469213289

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\secureDns.js

Filesize
3KB

MD5
09e4de802019282d26f4495172b49c72

SHA1
50f99ee54f1952c2bb2cf84efa5e1bbc8d8a6b48

SHA256
a95b8f2b481d4aedf7dfa0ba2f0314e6bf5ef13d18c989f59bf17cdb9f002952

SHA512
774913d947df3cc490522fa01e34a81e44ed6a6a8718167d14c1fe6869ab6831b3b57591251bc92df05c163485b33402121a1ff8b3c3c9cf63348434e5d49f52

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\sensitiveData.js

Filesize
42KB

MD5
70404c5929ba4ca11169f376de299249

SHA1
c4180281fa6ccc10b54dd8672ce204f365972865

SHA256
3a6dd615b68a2cc6ac872d62f8959622d5b47d11b1560ff78a99a371d9bfc7de

SHA512
6cdfbfff37e98fde788d2b2398e43554e813039ba958d3c593d3b79703b6902d599f7a97cdf70d96ff2e068a2eb378c0e8a9b126607fdadbf8d15e9cf1dff627

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\settings.js

Filesize
198KB

MD5
cb1b47e13ff72562cd7ffe0637e9f9df

SHA1
ad0bfd9e59ea1bbc9da7699203836790bdb366e0

SHA256
b41a3e45a7a11494e911ddab67c6de92f202b2954ef07ab7bd7f87d4f3613547

SHA512
35ea5b01f299f4c890ec0f3d1986f007cd6e83e5ae30212c85423cd7badba5da26123a4094d5d585ab5066d4cb0888ac46b480bbbe5b2416868eb794df4935e0

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\shields.js

Filesize
82KB

MD5
fbd8904c746b0af5f768a3f86a221db5

SHA1
59f4c0eb92ff2c7abec498b6be117bd6f891a743

SHA256
a5e93647e4508cbce16f22023870ac4c0dc1f42a53b3f3e45b81ae3fbf224fe1

SHA512
e91c28fd2be9a0ef0bfbf85c59e2a6b98f227bd5dea6f53305d981eb54d847b99d5d94ef5c48f02e97adc26e506996ca3afb68e12d0338992071803b4b9cb191

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\smartScan.js

Filesize
257KB

MD5
0375a946c178ff646b9104555282ac7f

SHA1
3a92261e30851cc65e74601a17df9b032db0c2ad

SHA256
3843f6b9bbe487a0cc3ddbf9389d57992dd699a8c54394299f9fcd15ad017d2d

SHA512
f5c2d2bb5140f8db4f2f5b57b6bc21134b3a35459ad58f3e0daa20bdafd570d1d937fbd17396f065fad4ad3ea2ed6e0d5812437f9f4182cec234bffef7b23c1a

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\software.js

Filesize
59KB

MD5
0c07d776b4cc431f4cc2b9af40ce95ee

SHA1
aacd4d700117d7df5c33bc483792fe2e4cc75988

SHA256
2f9cf14c3d14da43f8e1d0368f1aefeb23be5dbd00392330198acbb24f3bc60b

SHA512
9398172883914e442556ec83e7dc5c42c4bde7a736116f5b620760a4e43fd89c0ec17ddbdc42123e08b901115241857cf45af6f891cd099f65ad6c7c0653a237

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\svelteComponents.js

Filesize
266KB

MD5
7817ef7607e84faa6943edcbb968ed5c

SHA1
7145dc0e01748f00914b26f5dd8929f359bd9c99

SHA256
6fde8fb4b8aab5729db0dbd0f2d04d0b7d5720d88b8052bff4a1487d7b65b52e

SHA512
3fcc40845d371b35ea95f92079c473cdb643e1b5eec3cd83a9b54858bd4d27ba07c611b0b2e99ed2152cd843b68e96de76b396a791700d45cf2bf41dd276392a

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\svelteInternal.js

Filesize
34KB

MD5
c97e1c9a8cd61b1abd214228a2e9e40c

SHA1
105139c65f3776b8f5d832c795ce098c561dceb0

SHA256
ed862b090e132ffc1497b5ffbac1b9a112fd8c263b3084751f7654946b0912e9

SHA512
73a5c991b1e4b77daeca359d624825e2e2858ac7a308f58c26929adcc1786682150c7d29bce57a59c2616c9c9ed285aeea2bb670deacd42db5b74680637079d7

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\svgFlags.css

Filesize
1.1MB

MD5
3fb4daa1ee83a0f81ae434c22f2d76f9

SHA1
9c661f88291b266de8797a1453105834a7b89348

SHA256
11552e25c2575274f6a67dcd146e0f4dd559a4b88a46472d695e47b716d9cab3

SHA512
0cddb76ceb949b837b2d12ea7dccf54d1333b6400c932404cc58c38469e741b3b9afb1f8521cc8586a71de2515a6a609c31db20695d04f76685df050ae0687a3

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\svgInline.svg

Filesize
970KB

MD5
b6379220108c722535fd405fa371fe1c

SHA1
c91763db27837277f72d1924a4d70f04d8dc29db

SHA256
c6ee45982c92ba279e5f232cb17440acfc85b993975348cde2dcc73bb0c3e433

SHA512
e8b41cde458f8a801353ba062d019e8e49d430c340026f7d04e18a987c37c5a348964dabe3efadb812dc75ea58bbcceca7ab0f83c13f47ef841a94053275661f

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\system.js

Filesize
28KB

MD5
8c6eac242ab87914ba4ea2d178ebc6c2

SHA1
c02b7a640b48fc1f5f938e1c95eba48e26482cb8

SHA256
0ecc48f6c0f1070a30e7b8543ea2d8db3658f3bd2f69ec02c2d90ce0e5eec892

SHA512
37d5c7ab795200ddd0c14e87091c2a488fa1f04933dd7be0e517dc71c9a430af9a241a18835a33de6a240e8b0aca32cafecde7b65815cde901dffe17217be611

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\threat.ogg

Filesize
21KB

MD5
7490b7798417364db18a28945a941db6

SHA1
ee2468aead06205e8aaf986ba9d428627fb4a713

SHA256
3dd397ac6148d654f8e4469234d8c71ef9a9192eb21ae6da4b9aa214b70f8127

SHA512
3362170f92fec1e24d05de0f72fa39c120ff9f48e67ad03981e9ba1eddcaed366228159ee622af3726646c4d74a7bd88d36f4515af47213f9e0e6207c89a8bd5

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\tray.js

Filesize
6KB

MD5
75ebf0657127398aeeae04b4d1a2d56b

SHA1
0c33bb0883171303a05e867f72b6abe2c65a7b53

SHA256
7b99f1bb0217f71db27c52ce3fff62d9e0a5a1e2ba3efcb68c245df089ba986a

SHA512
3962dd41867ef685f1a0d623fb1c99006c700f6810f2efd8caf0b1a4323d9465b25ed300bcacf7228383a747c08a21c4be355588e10f1b243e3b02b66f30feb8

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\tuneup.js

Filesize
47KB

MD5
ba821433a5b97cb07ea1d5064afc943d

SHA1
6d15208b12f3838a05f6ce1ca938ebbf07852476

SHA256
f8675f148942e417fd171437d78a0b99ac3033ca8021d6e62fb87504450ee7c3

SHA512
e4519669ad7f8a8487679f78819dcddca87c8d8c5a3e11fde45475b997f76d30ce37e52ec70faa935faecaa44f2974e4819d323d6b9fd52f28be365ee7d4a39f

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\update.js

Filesize
36KB

MD5
b8676dac88966d52dbe7640a7f421a0d

SHA1
ffc9090a5890d7bc99ab33b1384886d427634b23

SHA256
379e3499a2400ce2055b943a1abcbd5202110511e0c3fa18a873398a5ef3c877

SHA512
4f515f355044c42ccd1260f87908b89d27bc7f44e4b0552d3a752f23e239507169dda08a5521fcbfc9a7a46bb29ecc62d3ec2851d00f16780bf3c1002cb3a66e

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\updatefile.json

Filesize
25KB

MD5
ebad6ad1dd93661bec28e95687a09a8f

SHA1
a88ac2bfe5ec14e4a2f919aba9dc78ea14f00f3e

SHA256
d0e28ca74b6e0da0ac1fa285885efeb24a6c47ba3d13542f1347b365230c6f61

SHA512
64aaa01376d9795713cc966d2251c2db9dc411794e29364e4a417514f29d85c7da3c9de3f13b977f81b977ccc34f7706a9a29968043c16479025d43d29265c86

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\virusChest.js

Filesize
43KB

MD5
84a5dd1fe7e799ea4852f7ef1f03d6f4

SHA1
fe6301ea778d6be7a357fe478d7389fe06907c2b

SHA256
afc746986e41b22dfcdb2e73952c9901c2129990c918821ab7fed29ad7601b1c

SHA512
09c0da845c48e7db4eca8814e8e1c3fa0304c506a6b7b59da2697bd99cfc599a0858e32e820446ebf5e0ff2307a20be7d492b0ef993543ec75d49d9d1e3ccad2

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\webCam.js

Filesize
13KB

MD5
89a8f1c4f2684f1f863b2a3c9955a4c3

SHA1
c84a72902b5b290fb93aeb44217a7ffaea33e98c

SHA256
6681f5625f238f84b530c4facd88f6194bd78fd0002d32b0b83cb3d7a391201f

SHA512
9f7f88a9558afdeaa2a4ecce214cb60afdc457af4dffeefc2f737c64ae2fc5ce0ae838100bc9088edeb862a62445ee550e3292e54dbe9bbb729cad410ca71edd

Download Submit
C:\Program Files\AVG\Antivirus\hns_tools.dll

Filesize
718KB

MD5
cb401aead703118f57bdd91b38f83704

SHA1
50c3a7a5e77bd18fb14065469aa46c78043fae0f

SHA256
25b9d5c299f8923880792c5ab34c84fba91175a195a65bb8d2d79841f3083dc1

SHA512
7081d4e6810c4748af7fafb042e851ac850685a781e48e4669dcc6aef430bf90e55720b8a37cc3cce754dce6cefec54b1bf661a83c84e2676591c8fa752ab291

Download Submit
C:\Program Files\AVG\Antivirus\icudtl.dat

Filesize
9.9MB

MD5
80a7528515595d8b0bf99a477a7eff0d

SHA1
fde9a195fc5a6a23ec82b8594f958cfcf3159437

SHA256
6e0b6b0d9e14c905f2278dbf25b7bb58cc0622b7680e3b6ff617a1d42348736b

SHA512
c8df47a00f7b2472d272a26b3600b7e82be7ca22526d6453901ff06370b3abb66328655868db9d4e0a11dcba02e3788cc4883261fd9a7d3e521577dde1b88459

Download Submit
C:\Program Files\AVG\Antivirus\jsbridge.dll

Filesize
32KB

MD5
70c697e437105c145859d16d298ff953

SHA1
afd7d585de759cdefeb8d6f7987080b772f70264

SHA256
1db0e3035be7f2f3f6df8240470dcadec2bd539a7b589abd4ab07060796c75b8

SHA512
11f3b8aa69699785b34349568d3d969328fa8a9adfb9b1fc5693767acafc2e64789fa4c6f79d021b1e4fdd63cacf55e4d8679b346eb2bf6b233098dd1cda0a6b

Download Submit
C:\Program Files\AVG\Antivirus\libEGL.dll

Filesize
404KB

MD5
2060cdb437dcdfff0c5a2a581980ad2e

SHA1
a9498ac53f77feadce4524b7bb47018d5e7b96a9

SHA256
de26ad77d4f163eb7d659e50bcc7227da271ba959e6969ccfd20ae2b54db38cf

SHA512
78157004423eaf6a6d7772132fccf1ee80367046e9535c4c3758e1ccf7900d1445f68320a448138a83c3a16b305217c179f415284133c737b1b5d53240f46b83

Download Submit
C:\Program Files\AVG\Antivirus\libGLESv2.dll

Filesize
6.5MB

MD5
6cb160bc7da5abcedd71c8695ec75a2f

SHA1
6c35c8fa19e02f81c7a5401492c45239d91a38dd

SHA256
f3d6b13a23a6a032838f75255ed506051504e09c77121bfcf59cc570529f6c4a

SHA512
213749b77e811b5c379bba9451fdab17b091ea513a86b2b92e2dd8fc2eda5eab7856eb2e88d4768fef70cfd775b803ba6cca58094942bd0007c1d5878740d39e

Download Submit
C:\Program Files\AVG\Antivirus\libcrypto-3-x64.dll

Filesize
5.6MB

MD5
cfa0d81774cb0258d4206300c6e7df25

SHA1
9a60645119b22261d6657e4ddf2a76f03f4ac21e

SHA256
7a84cc660cd73891b48710719b2aeb8a7c3fe3146722db96251037623d3738dc

SHA512
6c1e64bcaddcf5b6179ec8877462f11656d38242bcb61d1a96b9bfca7feb09adb86e2545633aa8bd4e39379c01236d663f6c41f868f613fc4d523ffdb7c4d1d9

Download Submit
C:\Program Files\AVG\Antivirus\libssl-3-x64.dll

Filesize
1.0MB

MD5
4c7c6cdd80e7a6b6cfa875c40d09975c

SHA1
f8c9b049aa6e5c5cf2833104ad648abca8501b34

SHA256
c1e57682c0015bff1a749ddd613e88af05ab7fea0c31e5712227e294db456d5d

SHA512
7b66c1ee01b10db6f259e66a94a6a0b90f1a12a76877ae5966dcbdd28a54595babd3544aa2c8b7058c5625552514673df431cee1458b36118b9c9c48c6e01906

Download Submit
C:\Program Files\AVG\Antivirus\libwaapi.dll

Filesize
1.0MB

MD5
3eee4838b06924d5e499164a1de20a3e

SHA1
a6f3d3e2a9cb292772f1c7f4c237718b4a2bbdaf

SHA256
1a78e88dcf5eedde1f27233959f8294b69b28ccf5439bd65abb64d94b681da61

SHA512
e61899534fee47e694ab34728c132dc9cc55729bb28fd9b857a793e671985d935d7077aa0e2ff0d176166256ed41acde2184a1f2605a99df1c0ae9f959376383

Download Submit
C:\Program Files\AVG\Antivirus\libwaheap.dll

Filesize
101KB

MD5
cd50e16876c1f6c9d298e6701542c98a

SHA1
8e610be20057d3d47827b29e9d0e47590c35c5a2

SHA256
4b3ebca714db750deaf104f45f3a235731091669c4e0f8dcba96afad2271ccdc

SHA512
aeceb71551d9cad04a404d0d56bad5fcedce7ebbfa2069287090bdc2e3d2ee63c579aa434ec5e05af50d2e3a44b8a14b22b900479b0a74d4a26f479ad4e5d12e

Download Submit
C:\Program Files\AVG\Antivirus\libwalocal.dll

Filesize
1.8MB

MD5
560e15436650cd78ff67300ac11e6906

SHA1
4f791757aa5f8c87901fa73c22730bd007d73372

SHA256
32a00811469303853d0db51c5f51623667e8d9f142f8f96bb7c1de8013151ce0

SHA512
8bf2834adf14245296c50d9f3b7f0c4ab42babcb155bd43588b9b192ff284bf06d5a0a13c0bc46ef37051dce7aa070397accb84e22ce957fd4ce3be930b5ba5c

Download Submit
C:\Program Files\AVG\Antivirus\locales\am.pak

Filesize
453KB

MD5
ad4acdfe76c998b945642b9af2756ea8

SHA1
025ea273d63fa71f3c10c578b1a3f657dbdb3f96

SHA256
4dbde72ecf65ac84b6c01251d37c425c4cedc00e3cd9cd40c0bd5a6081359b64

SHA512
81f71679d2ee24ef8124e81f39f49b113a157c88af093a6f571c34b67d19933c200d095ab65ce099000f132fd2a04a44829047816c1e53a42ed4c5b517e90fc3

Download Submit
C:\Program Files\AVG\Antivirus\locales\ar.pak

Filesize
479KB

MD5
98230353d1463eee93d64a4856f7008a

SHA1
10d98e7d0e095dcd947fbe0b8d771ed1574e3ca0

SHA256
36f41a346ed07708ce12d54e5a4c4612f49a375155d1655a23c52256838617cf

SHA512
53b9d1b50bb79e245d74dd30cf66da4715c81ef63af3d569eace6329eec00356eacb7357271778e837b60fee08deba2ba445b8ea74619a955bfa2b8e5c05358c

Download Submit
C:\Program Files\AVG\Antivirus\locales\bg.pak

Filesize
518KB

MD5
dec816e6e65e705be74917f249e43fd9

SHA1
6f90b68e6b1d904b3e41892cdab1923f4f868376

SHA256
ea323024091753a5576a343e46d19bfbf9939122bdde53d91d7dfdbbea5a9c68

SHA512
d21fcaf4fe07f4cc6c369d7cc5a1bf06de5ddf7e2433310b45b53aac340259f5276e1e86e15591ede8d4d5c05d719871d586942664ffc76eba1712ef3145395b

Download Submit
C:\Program Files\AVG\Antivirus\locales\bn.pak

Filesize
671KB

MD5
c7b9e899ee655e2cec7a49b9cb2300a2

SHA1
5c471604d1a755a393f1ca2f1acafd6e014792be

SHA256
522e7a2e1f7d8e49b5632759cb5dae269578edc522689bdbcb23b74750f53e77

SHA512
b56e1afb9c3f67ce891eb0215a68cb3588a82fe51e0dd2f9b18335f2312bad156cb3be032caf641a7a39ddc0a41038f96f7b36469ca327051bfcda620145f6df

Download Submit
C:\Program Files\AVG\Antivirus\locales\ca.pak

Filesize
319KB

MD5
8fcb9f17f850f0dcffa2512236e25790

SHA1
429b36872ed7b655d745fd8efba6b5239ad340a0

SHA256
c79b92ba066cf5414fc37795e6a76e966c23143bd3c48c0cf5f61aedd5cdafef

SHA512
1553cbd7fa4fc87341bfca39cf58e8834d6c3100571e34bcd5a1961884776abb69592c627cef414b918e8cd4bd709a83c4af2bed5d5c4a84b9509e896b8fbf42

Download Submit
C:\Program Files\AVG\Antivirus\locales\cs.pak

Filesize
325KB

MD5
0161995c04f022922e5c036d374eceb1

SHA1
5294111882537c10e4ea4df72b3508fbf2d2bc30

SHA256
3f2e5a65ebf8938ff4e9676b12573b23c72501761f1bff4d5ae466b68c85130c

SHA512
c04c549e23d2ff33cc424746f1a1a6d70e4660612d857070810c7ad9c7021aace09acf62e0248f139acfa2369fc511b4f329e14f3d6126813ff66ee7d44b3611

Download Submit
C:\Program Files\AVG\Antivirus\locales\da.pak

Filesize
294KB

MD5
f1e5e7dc819670c061902a3daa17daa2

SHA1
583ca07af55f3055ce127b81fd825fe45cb722ca

SHA256
cefdaea7b486364291fad01ff402ab8098e2e13bc73b2bbeac25c8a9daba8df8

SHA512
b8e8e79f052d5165446a8392a4836fd6915cb87cf199c499e9b4e767e6e60e4e94d601420e798ed3b7354c8ca91304b1d062332cfd5016614705aa57462aec83

Download Submit
C:\Program Files\AVG\Antivirus\locales\de.pak

Filesize
317KB

MD5
6932a8734c0ef9949fe0dc3b2282e16d

SHA1
817c17d5592129b6277075845557148e1e59cc78

SHA256
88581d49e6c83ef74fe4aeed438c0380f321d9eaf3b8ef210d39f8378836a1c1

SHA512
076f2741f28f76fb0da8fa35bb55418874db7e2304dd09afc0cc818b0c5e645831cb0c3ebf97eac474339c584e640f562b4699f54496ebd761e3733777490b6b

Download Submit
C:\Program Files\AVG\Antivirus\locales\el.pak

Filesize
566KB

MD5
c6009c7b038068b61aa6275b4cb9f860

SHA1
4b77f7f822f4ee15c57dbe873c6f7549fb608028

SHA256
efe6a9d8dcf76f5286bec0496209f59da3de6ab6e355a183b69a7e4bd5d36cc2

SHA512
d3d5eb21caaf361bb92e0453ee1db4ef9349e071be2736589a8d2f5cd587e85d33c7d65f01342758dede0ab0a037b294d7e263d82f60c29e583ea1c30c9f3fa8

Download Submit
C:\Program Files\AVG\Antivirus\locales\en-GB.pak

Filesize
260KB

MD5
314c49194e366808b2b36253fdbd7714

SHA1
e9e8ba1fcfe91b80e232899c69844282d39d0d23

SHA256
411a729d9288a62780c32d6bf5f4cf0fd8d221ff341ce79c2eca25dfa03c9821

SHA512
5c24bcfb043ec09f31e5c8e640d1bed4932f9560d68256d4409d5d51a8948af3381e2bbf164515a2e35cd7e6ab5349d9fcfb4916bd8d11453da9d69e7cd8f5de

Download Submit
C:\Program Files\AVG\Antivirus\locales\en-US.pak

Filesize
264KB

MD5
0a70bdd8c0efc740818bdb82993bab85

SHA1
d84b6092664894f42e1afe042abc946a3e0d2e65

SHA256
21fa942a5f4f26996396f0d84807b6f8c01afd5809e2da33487bbecd0a6d13ef

SHA512
085c21045f8fea63a80678069af61e4273420bb6645a833319d58248e61adeee3cfca23edcb7adfc2dd59621184035e3f9e252db8d5840e6f6727e0e05b5fd63

Download Submit
C:\Program Files\AVG\Antivirus\locales\es-419.pak

Filesize
312KB

MD5
4861cfbe34644b1aa3a62e0b8a955b28

SHA1
66497635946e50bb17483db226d9d9fa0e80db7c

SHA256
ef0a523bcfa4d3a1b7472947a1f2a0a68e24c628386f7f0056ca4404d82481f1

SHA512
162069b7b670d7bf68ba8276d2ce0b042a4cb0f19f2f66edbc8af00dbd97e084ea9a755b817a82d77e83e63d97e79d7e50eabaf67c880b4aa85b3b6af0cce20d

Download Submit
C:\Program Files\AVG\Antivirus\locales\es.pak

Filesize
315KB

MD5
44c080e276c1c44cde4dee4c576a4358

SHA1
217c766a2ed03b9a9f2f4d1e2c148f10d836cca3

SHA256
85862323a3128490a2c1be66a36480f7eb73a2294d62ef4ff38ae868c034db4f

SHA512
333acd81c4b1fb5f24f0b0b2f5192175586fdd455895bdfd7092425cd877a844aebe3e74aa37060c849c5821fc5174a2471d7db95a6e7098e43e177db70ef92d

Download Submit
C:\Program Files\AVG\Antivirus\locales\et.pak

Filesize
282KB

MD5
d045af9a8b85c6ac73f60e9fdc16590e

SHA1
874293f1b5d1b6e2641d9dbea59b4e1b8f377752

SHA256
241f3e5286b25864081f50edb93c4693bf001f04d7c7b98f5c4921f768cd7e94

SHA512
b8f9f59f6519c5839d4da668a16062100be75317c4275bbb50e1afc4b6b66ecab7268054682bfdd63c5a71dae8ae00e80eff3eaab161c2e35a3651988ad38413

Download Submit
C:\Program Files\AVG\Antivirus\locales\fa.pak

Filesize
457KB

MD5
78c7adf045b3d8a05c6f6519154cdef0

SHA1
694fd63b612fba0267e1deab41b8a87ee0649dc6

SHA256
05a98b8dc3b6d5e3a224e17c144d873c3b84c6e704fd2b8dd659e2099789f9a3

SHA512
cea96bd1621550c6108695d51a317bad4054bac9b564e45f2b0a16cea328be15475cf2ec033c33106a184215fe7180fdbbbfab709b782f43919f68b976d8cb99

Download Submit
C:\Program Files\AVG\Antivirus\locales\fi.pak

Filesize
291KB

MD5
59d49ab548b74d85bae165b8cc15b073

SHA1
d1946469ab92270bc99b7ed863ac723cf676f050

SHA256
fa171dcc44baf46cd4331d0a833172185ff6a166a31ab4f9890eb0832e15cbf2

SHA512
40b9018eac2f55828f3ce3b50e6428ed545f8453c51b193614137c035ab9853f63ae9c82c2ed1d6f9a4aee265238478bb46f468b08442d6cd4d0d49c9e1576bf

Download Submit
C:\Program Files\AVG\Antivirus\locales\fil.pak

Filesize
325KB

MD5
2dc3f1409e7f6a3fdb3aa55c1bceafcf

SHA1
76fdde6ee054a19f7c76046bd41390004bc6ac41

SHA256
fab8b112187fcf9ba5102ff0aac2f5eec63a646c8bf808fc5a2e4e08b9c62a83

SHA512
5ee1981ac59456a623297de3257219b69bc053aea71fa4ae1486bb6f0689f7adb5e78daa17d8d338755eadb7164b7d7f50bd6bbc004c80d00ec4fe56603750c0

Download Submit
C:\Program Files\AVG\Antivirus\locales\fr.pak

Filesize
342KB

MD5
39df7277c2854d60b4b61bc11add4188

SHA1
865db185756772df35af31dcdf78dab7fb9f8549

SHA256
1ffb04ba6986f4a25f5191da50939cfe48d1581388148b7f64d3c10a124439d8

SHA512
de627a69981b4a4604a587a610b59a022f6fc4715cbad7be59cb444db7b42e0337cbbc42e9c0a5fea84bff066be3273a8eb251c578e5457a9ddf19f90a8c71e0

Download Submit
C:\Program Files\AVG\Antivirus\locales\gu.pak

Filesize
644KB

MD5
349ca76d987c9e2c7fb00966aa034357

SHA1
3bba7ea00e4f4d9768dd2311ec1ac59cc8239652

SHA256
79fa0f068f09ed239a8e0c3f1da0b35fa1f86622f9fa47721e13656696184e88

SHA512
330488349b8a7d9503df180611d97c4d449788284304f4bd231ec97c77d5c2221adecbf6a9486d2a8bee37b6e2c72ad22cea3937e95c1c3178c9dc6c522a52d8

Download Submit
C:\Program Files\AVG\Antivirus\locales\he.pak

Filesize
397KB

MD5
ea6c8dd5fb4007b5b5a692b857693d46

SHA1
e142738f399bf5aa7c19d478a7def3d270e61851

SHA256
7652d063f1630e33228809834f71e6e2ffec75c472ec66b6ed767bd98886f928

SHA512
a77fec4ea0fcea2de4863eed319abe2f4143b5fd345aa951c94068f862bceccfe16575271bd423bf09b7116c6bbf7faf4daa59bfd0025797ae9202a311637e1f

Download Submit
C:\Program Files\AVG\Antivirus\locales\hi.pak

Filesize
668KB

MD5
e7506ea783c56cf5432618080371868d

SHA1
91f7c1c26a7eada6af72089252c2a0153066fc03

SHA256
2418a772d39e45fbea52182965a901364ddcd5459a920c8dcb56c2844954e536

SHA512
4b4d90e2fcc913c061da046b4ad7256c1dba78959d08dee67a471690177dcc8561650e3e0397446fbcb4b9bec89a345b4f2911bbba6a88444ee9b135fecb49b2

Download Submit
C:\Program Files\AVG\Antivirus\locales\hr.pak

Filesize
313KB

MD5
5ab62a807b85bf1b75c741abba0e9f98

SHA1
641b2360699dfc465a86c0e10b51b4739bc3c770

SHA256
b967887c6313fca79a82168645c1febe43c949f01e0eff3bb8413a04b590e16e

SHA512
d53895053eb4aa230bf9285e1cf0fd46704a9658065f35a265496610c951d09c2436071f421217d3dbe54423624d216d357471763bbec069d3d0d938557fa291

Download Submit
C:\Program Files\AVG\Antivirus\locales\hu.pak

Filesize
336KB

MD5
ae54cf32c7e5bc9b75615225c5faffea

SHA1
25c6ecee303925f6a273a8d0818a79ff80a74298

SHA256
12949111bf85a2236f071a294a508d99c90587a97b9ba7f61dc8d70e36f5761b

SHA512
eb12669cef9fe09d8f53094aa5df2ac71c8ea334be474a2dacb5f2e8ab56bb56bbb188aac10509873fb7dd3ebb6278d69a050a700cef6388a5caa22736813932

Download Submit
C:\Program Files\AVG\Antivirus\locales\id.pak

Filesize
279KB

MD5
556874df87f3e62bc9f2baa6353c5d73

SHA1
6e79085ed28fc54399bf7b91a09e69aec0e21e2d

SHA256
60e0f7533dd163da804ac5445f2a80fbda26bc58ce26d8d2de7e2bfd4e5d039c

SHA512
884045476c84c3c18cf41c7a0f4ef98c9df5333284a8d9f27757fa5c19a8c8f07a821b613f7d0fcdfd594fc23fc78ed5d133e2e1e5c965794376e69903f20f8b

Download Submit
C:\Program Files\AVG\Antivirus\locales\it.pak

Filesize
308KB

MD5
ab258570cfdde79a3595b9deeb6cff01

SHA1
4563fc47d20d0a2ad81e7bd9298a5aecd11ddcda

SHA256
5fef05d02e5c971e8d3f6b5584720ebeed7c7e6e5214320f09ca6f7d84ffa993

SHA512
8a7ef6aff2682a96511e2130de62989e5e3a9ae35b8db66173f7ee0102b1e5f5e0ee7ce2a6f06588ba6e4c577c6d5d5767d0a23f1fa1bce3c2d4b08f7bcc90cd

Download Submit
C:\Program Files\AVG\Antivirus\locales\ja.pak

Filesize
380KB

MD5
017796cec4dcae8064f6303f2e3174ac

SHA1
1709c22b0a24a74b690deb61dace383484c08bc4

SHA256
8b8407ca872711857c1efe032f0c71df17fbe8d82107a09953e812a20497e582

SHA512
e469f0a63bc649126e0a191dd17c1f5db6e1bbde4b4cec63fe4dfe7c821ff5f1919980ba5bd4962095c0f8c4698ac659693b6ecf1a5feb2832936bc3c47a3af5

Download Submit
C:\Program Files\AVG\Antivirus\locales\kn.pak

Filesize
748KB

MD5
3a998b7d9c41dac3b2896685116ab994

SHA1
8c7a3272e79fa27017c24905f2b598499a62623b

SHA256
5eaca86a3792d40db18e7d1ce39683471bed1e8b169d716101808930728e1ea0

SHA512
e1e7e49d4f47c6338e9530b0089c1b78f96fd8e088d7ef2edb013c8a503b86f803ec074dcb8ec3998ca981a5373fc37936c102c9d8c971abc66c6233c6758eb0

Download Submit
C:\Program Files\AVG\Antivirus\locales\ko.pak

Filesize
319KB

MD5
d324469bd2d6e373ab875328c95322ee

SHA1
8c4d3d7e0bb3df9d4028a49b64182d016b47443f

SHA256
549b190c3722d4774cc7a8a2730f858dba66f063840469799adb449184056f9b

SHA512
10a2e751d95422fbc24f5618edac8589d033f19106ee500c83830fb839d639d30f25f2b49ee017767325dfdf833a6e1f9eaaf0c1081c1d339233dfeda9876ae8

Download Submit
C:\Program Files\AVG\Antivirus\locales\lt.pak

Filesize
336KB

MD5
96406518a17835d2c08ea09f6a4f5269

SHA1
63f2b8ac41adabfc0f58bde2ea02af3ea830cee4

SHA256
336b6bfe35680a19b02d583f332df5d0f5dc6fa5729c2910fb1aa6659e6aaab6

SHA512
342a9d97fa6747b52e462e302cc865e8ee6018aa65ac3d517d4625cd31cef68412e4df9d28ac10e39ed73801342455635ab99a6e167bf7527ac7acd62bab733b

Download Submit
C:\Program Files\AVG\Antivirus\locales\lv.pak

Filesize
335KB

MD5
a9f1ffb1e215b45afffe7e454dcc082a

SHA1
bcc32731f6fd700496d4445545366cbaa2565220

SHA256
a9cff7d778289b25bca696ff4873e45f098be21f8f4fa3105ae7e2b9b1ef95da

SHA512
c8e692b0ade3dae78b1bcb7d8e3c821fe4d5fe0759180f6f44e603ecda341a8a925cae5986584e98829007bc56a4744ef0082d1feab42781261a6ff7b7b65676

Download Submit
C:\Program Files\AVG\Antivirus\locales\ml.pak

Filesize
784KB

MD5
5434e2c549029aa898a97f78a65ab13f

SHA1
0361686f5d38363fdc5f67aa5980b6729fedd4a1

SHA256
990b6559fb32e86df8045cdf8687fe7176fb810c18b2032fbb1a093d9b2c901a

SHA512
d05d6e89e0f313622692b2173f715c4c84f80a7fae2ca9bc8b1ecdb02b090e5189d40f5777b647e97344ac65a84c284209256a7e1fb45016d170fde0eb7270c9

Download Submit
C:\Program Files\AVG\Antivirus\locales\mr.pak

Filesize
631KB

MD5
9aab1dc6721afb63ada134d9d1bc2dc0

SHA1
f0e309e0570e1595709cffc570a799e013a2431f

SHA256
27baebb27c345e367f27b2ea8eb5895c2dadadea282a0fa94a1b2057859736a5

SHA512
9e04ad79a36fe4142544b6d360c0a5227cd7c48e2b0b091085e8d3a011504522da4584460e5234d705d1a9e1fdf695902102e005a30ed2cb2e021b19cd58a708

Download Submit
C:\Program Files\AVG\Antivirus\locales\ms.pak

Filesize
292KB

MD5
a5d5cfe69299d29812c9dc473c9ceb72

SHA1
768d505ea7678aa2d7f7aba46822de231f1a94fa

SHA256
26457724f3431e3383ac833cbd990834dda8e5e76b961ff931d171aca4221626

SHA512
c8a8e30e67e003720c2fd20150140370e9e8498e2c385bf7e6cce8406b7abafc20fa249f7c3ec92deb5d86145d59717d17d758350bb732f8196129ca82b1e110

Download Submit
C:\Program Files\AVG\Antivirus\locales\nb.pak

Filesize
288KB

MD5
4795132dc7086e139a2af75a69fa4f63

SHA1
e8acbd586ccb9ca0686c7cbf90f0be5cda48228a

SHA256
8ef002c7ef1d7207b5b41038f16fef198d2343c0539f14090960d6f1295d8c7a

SHA512
466f4a0eb01d2f8d8359016fba96189f152fddcf5c041b05a62c5a7b14b3d93b3f2a4c7eba7e292eb8acacb65afa68b9e9adf4843ef78c410f3d5296656911de

Download Submit
C:\Program Files\AVG\Antivirus\locales\nl.pak

Filesize
296KB

MD5
cdac79ea10a58cf43ec1e5452c5faef5

SHA1
35bee3062c54f83cebd26c50718081186023c0b8

SHA256
ad97f1708909ba1c2d6119de7536448805f00275273a8b33e743dbf2e7ab2456

SHA512
d9b907c229742808561e87fae306b8e65948ed60b21e90981de1761f162cefdfb95705edf375bf686cec15f7766ada2969fd7428f5ac4334ee83d7d1fa8b4947

Download Submit
C:\Program Files\AVG\Antivirus\locales\pl.pak

Filesize
325KB

MD5
419e3f381b0e0f080ec230a9f1b80e66

SHA1
c279ff058f3f3ef086715ea2206f24cf7aa75818

SHA256
a5fdcd13f711d4665d1960f512f1bd229dbbacb24c86bbb3773a905e2dd24b33

SHA512
d7896ce61b64ae92f5af2774f3a996516d24e89d7cc6f84429cbf3f70aa3d87404fca8c6d242b5a088bdc1a7a73e229628ca7dbec81d6976734632cb5291e9b7

Download Submit
C:\Program Files\AVG\Antivirus\locales\pt-BR.pak

Filesize
309KB

MD5
3a4f9d62b91bc0eeab11f0865d4be286

SHA1
c56a98f46b9f0ef8c5180d176cfb7773a05ce941

SHA256
3051442a3e905dfdfb8f17f49d12a3722c511faf9aba0fc86d577dac90e3b654

SHA512
39a81774c90476e4e8ab80b0784a8923c698040f51cd6acd08a50b5d2f90a7a22242296ca5793ce39ccc93120df3f40eb2abaf6317ffed8aebb986ff28946081

Download Submit
C:\Program Files\AVG\Antivirus\locales\pt-PT.pak

Filesize
313KB

MD5
4fbebc23d7a0aaa6dcd426777898bfe6

SHA1
959ce4fa97c24143c3dc28e9420e6d6c76a7266e

SHA256
3cda10980a23de97163a2c06b31829cca1ec3da63b0bb0a246126f402c19b16a

SHA512
a1c4052a40059dd5a417d87935c9700c3cd127b63ab9191ca62e448b09109762906638c5d80abc0565711425f52c5ec3fffeed87aae70c0888199c45a4374880

Download Submit
C:\Program Files\AVG\Antivirus\locales\ro.pak

Filesize
320KB

MD5
de48484707e8770f47d27f0f5e2358e6

SHA1
014295dc0215191606e40b2fd757a5a637164571

SHA256
5fe258168978f52d2b3c6f063c7a7c381a70ac06e128ababe6656375025fc088

SHA512
653da7faf9f75477c084267e30a288f52fd1260b77f7d1552981034b033d796b7ef18a6f77214179521213375f4b43a7daf69e4977e487cda90c9d7e96e82e52

Download Submit
C:\Program Files\AVG\Antivirus\locales\ru.pak

Filesize
513KB

MD5
dcbcbf5867918c54c5f8f267664056aa

SHA1
f3b706adb3c222a84cdc92bf97ce26f8aa0042f2

SHA256
fb9da2895730be8d82924d01d5e0dc28c454d8b91a1aab556d255462c374bf16

SHA512
429896d3e774eeb6f447f9f80f1c148685df728b343899e12e58bd4d58caa70d3b38e264037a720a2074e909e3e3722c8393a21b4f4ced2157da554bdfe40f37

Download Submit
C:\Program Files\AVG\Antivirus\locales\sk.pak

Filesize
330KB

MD5
0ac44c1ad8985cda2e3ef0bc2082fef9

SHA1
66f721bac3f1ff5be9fb7b926b87341d303a60b2

SHA256
ae4a8e4e3706626f7ba53cb395e2472389bdc1319fbbaaca608ee1ae3c918e0a

SHA512
5ca7d91b3ac747241acd8b76176b19a62cb44c62d991e2db6631097df9276c277d19d3ca6713e382ee69f61550b5d40daa03da838d80f04727a03a97a0b28da7

Download Submit
C:\Program Files\AVG\Antivirus\locales\sl.pak

Filesize
315KB

MD5
dbb839665d4d78d71c9d49b85a0ec0bc

SHA1
1b8662843a1acc58ef120d62ffcd19c764f8613d

SHA256
80ab358cfdafe9533005571d832377a08e5df4801a6f61be7aeb2afe626691b9

SHA512
86f7e656d140e03f68b0d7ad8c7d9168029e3fa1c8d75cddb2101dbbcebd772dfdab1da3c568effc41c1bb6b3ed0a588f4be50ff307ae14be356ccd101025950

Download Submit
C:\Program Files\AVG\Antivirus\locales\sr.pak

Filesize
488KB

MD5
d13a44314bcd033fc50fc608ad1ab91e

SHA1
7abb6cee31c4873b717910fa9c0669130343ec5e

SHA256
6615bd59f0759e6af09309b8344c0e7f0c2dc2bec55beaa0afd1bbe09af7596d

SHA512
5efaf765533e2bbf3095a05c55b3a144c32cec14812d743a5b7de47b7ebc7429088b7b94bbd498568189ee0c4cf1056f2766ff341d46303e23410cc84574c798

Download Submit
C:\Program Files\AVG\Antivirus\locales\sv.pak

Filesize
288KB

MD5
335c90be59afb384203afbe08a9d5d48

SHA1
30e945993e943e1e6840b8020bd78a845dc3b745

SHA256
eca3cbaceb77840c7d861b559ee3ceadafa9f7777856112c9bd30b5a8d517b9b

SHA512
5bbfc5404f330b047365b2fb73403f5598c696eee0659fe987c0fbacab5a949f38ce5b288bb32702cfb57e15502426a3efc373932da2d01e68bf031f57251af2

Download Submit
C:\Program Files\AVG\Antivirus\locales\sw.pak

Filesize
296KB

MD5
8c427fc5a5eda451f60c0e4e6a2c6034

SHA1
752eab30cfb87e90ce5cd887786e115f15a8a178

SHA256
178590c5a7fcf0d41d93724de8aa04f4bad7b9cec119a54a4115f96f9219ef3c

SHA512
e09599a47f5f5a2295fc13cf0ad0aa45006852eec5956092677b212a5cdb6a787349a12f78c2af0529329b51a87fe0cd614e8b452b2a049af7ba51b893f1c7ae

Download Submit
C:\Program Files\AVG\Antivirus\locales\ta.pak

Filesize
761KB

MD5
35b454a9361898f148f056d02e1adbd9

SHA1
c3b0dc8dffda8ceecd0f43d3b6845e5c2e031284

SHA256
7f047181c386fceb204184cf02d1ad1859e5293db04122c5c6585ce7bda8da0f

SHA512
11d18f6d5ad0cb7ce3b9a4cf7aecd5ffd2fd8a72a65ce48afe034f7b11269cbc109f1fdb9448021218b31cfd64f52c53875cb3f0cee5ce2243938f449ccd7201

Download Submit
C:\Program Files\AVG\Antivirus\locales\te.pak

Filesize
710KB

MD5
facf3ab50cf9fd9a08f951a3cf3d42b1

SHA1
44f9874dc0bf80907ba5f1189350ef741f168cbb

SHA256
3e19980886a66ca92ea762b86ab44fac8e71fb16fbf4dd13864840923c9bfd19

SHA512
1a32a1f82d92f2db9556a50b05329415d995a3038fad7e21e82526b976e75bf171367eefad6dfab2ebf388862c5f0154de2c7772f6ac617577e61ea1a99bc7f6

Download Submit
C:\Program Files\AVG\Antivirus\locales\th.pak

Filesize
599KB

MD5
0b8590d79fddc502679b69005576584a

SHA1
37c6907483849773784652835ff5184ad88107ae

SHA256
a06797086a3ae1bd42bd93fdfb239a787d521cbabdda56a0c15aa255def81e5c

SHA512
c9f9ae0c139b9866e568246701473d01fd8d190024411c63859574c004befc59b8e2477a3ab9ab48b92f425744ee5e523d0f05625605dbce95d3449acb201ea0

Download Submit
C:\Program Files\AVG\Antivirus\locales\tr.pak

Filesize
306KB

MD5
d32db9a61c2f11de5df3fe64153a48ec

SHA1
9d9c5731e0c17600ba62ff1bb9a833602e4eeacf

SHA256
f25ff7a18aebd6ecaf56c2b125aaa22a1699fe2ee9cc6f190f6525d824992f11

SHA512
43c939ab2fa18bf7009ed3594de3bcfe0455797aaa2747841957678f31410a4b368c5f5fec684d9ee1487bb40bfd8395edabb97312d97be317653df9cfb58a61

Download Submit
C:\Program Files\AVG\Antivirus\locales\uk.pak

Filesize
511KB

MD5
49aaf394d0376e4bf0639fd928f0008b

SHA1
ecfb3e22c86323f5571c502f020ddda2d2c680e3

SHA256
23752a372251b782f35f6fca4a17dc260159eca4620ddb610f5ff7720d496a18

SHA512
e414936a5b36926f9bb4f01c7271c38d6d868c1c0341585b5c73e848928d0a03b5849ae088f964df1d77478a739edd938680b98bf75f10f0a23944843eb2607c

Download Submit
C:\Program Files\AVG\Antivirus\locales\vi.pak

Filesize
360KB

MD5
c31f5ba58a8a0b114e1061c7c2a8f43e

SHA1
beeb19c5164c2ca5bd63a60c0499262ce8467d75

SHA256
66468ec740624dc5ca9988e2aea145bbe915333db3327653f130ec4a426baf17

SHA512
784f0426e303639e7174bea1ffe83973bfaaf18c7d61544cd4ee92e417442b085f6a5065593d608326ec8bb7374efe1c44c5c6d15811ef2449baa5597b502cbb

Download Submit
C:\Program Files\AVG\Antivirus\locales\zh-CN.pak

Filesize
265KB

MD5
56c3b32e97f3c52cebe29937806a5325

SHA1
25f4295535a90c26fb9bc476bc915d5805803db7

SHA256
70070d44c9e5ec62c57b574837423f849ed363c0167e8019afd49a93c74c7e3a

SHA512
207bf51c44900e25d7d2d5a128e11b11f972490221d7c3f8a28b77d0921860f059dc92ab96f687da4a7fa6defc87a1896b1fdbbff31a9bf45dd2864cb78c1cbf

Download Submit
C:\Program Files\AVG\Antivirus\locales\zh-TW.pak

Filesize
263KB

MD5
c41412769245d56fbd7d1f114f238700

SHA1
ff3ec93946677884128267d2d84869e5c6b63afe

SHA256
70ea00381aa8ae93ce9f64ae29ad3de0263ee5991861120c8df7603bac540b84

SHA512
13ca3d0fd0b4158f2bb751791870bc0a2199af3c39e66c1f971b2cfd6d536d9642ecab82bbe814908020330eb351b4a045e0958a22bdaec330e161b8a3f6087a

Download Submit
C:\Program Files\AVG\Antivirus\overseer.exe

Filesize
2.5MB

MD5
a3c2186139871d1efa2050f744a61e62

SHA1
b435591679aca1ae8acd28f498b936951274070d

SHA256
f455c2d2e17302db27e09dbf51006bea6e02af0d49f1390575e68c57f7877a2f

SHA512
ca6f08dd3e675e0c8c6882928c61576dbecf95e011d6b4c6668dce3bf11f55e07eaacdb851d1c7b90431b4f882886dfd0d302bae6b0df63c883b74a96ab89960

Download Submit
C:\Program Files\AVG\Antivirus\protobuf.dll

Filesize
3.5MB

MD5
6736faaead16ee33f80815d3e6bc2a28

SHA1
54cf9621a63659b609f0ca0c1f7e51d65a73b0a3

SHA256
c43a0d08811e7145bbdaa39548144312d20f6296b7f5fe9ba0b6c414c7279428

SHA512
43bc785e0684f7854997ad3ba99a907a0c95c459eea2c9708062d4944152e42ac5833ca15b762d87341e78dea9f3e05d82b0227c14172d98c7de744e8349b607

Download Submit
C:\Program Files\AVG\Antivirus\resources.pak

Filesize
6.7MB

MD5
bad3a80c0bbbda22c237407afe0a82a4

SHA1
00cfd3358c40c549d4709f4530de277ec349edda

SHA256
59a0ad87f4aa0bbfc2d1462ca7d5e760e2f6f2911c6c31f0fd450a9bea7dc684

SHA512
110a39d7c26745167d31edfbb065818afc68cf6bab273f967852024bbf7c4566920f93eb207c4f17105386f18cd9289d35ac66eef3c1ed5f90e5628568222fb7

Download Submit
C:\Program Files\AVG\Antivirus\setup\config.def

Filesize
21KB

MD5
e9865c49efcc70c08b60ab5a99bfd76a

SHA1
12ff40ac0ed120d246bb7c1db56066682bb60c4d

SHA256
267481c5c3ff66ec6dda02134b1216d85c12470555581f92b423a29c91db547a

SHA512
e9185e7b2622e03b158c6991f7de414319ee499b7a4b01aa82c36d193d0432392d89fe4678b48fc53edf3d4905f314f0ac67f93812162bf8dd445be6ac647f8d

Download Submit
C:\Program Files\AVG\Antivirus\setup\config.def

Filesize
21KB

MD5
17350aba41d2c78fd53e1aba7982d84d

SHA1
c3344f0238d3b06a64f14ede84295466ddf7d26c

SHA256
37b163f2526b3c77ccac2cd8ac0b2e40777f707ae0cdf1751fa39119962c0b6f

SHA512
65382f1e5bae277668dd0196dbb2690861364328b79755223050baf401ddf0c2a44a9a54a280c0a4ee147f5f5a20a4ab02c807e2ebf5c37ba949b25f1f0bdfbe

Download Submit
C:\Program Files\AVG\Antivirus\snapshot_blob.bin

Filesize
47KB

MD5
4bfac8501c72cdd860ea754d1d580cc8

SHA1
1afb2418f3f31e924519eab2b172ceb41dbe15c2

SHA256
67062dee20934c4d297aaf1dd96d97a7bee8bca5c9e3cf3c6a18cae60e6ab191

SHA512
d622736ee5ebe22dd48ccd81916a400f4ed519bdddab1fa9b466e5b7012cb15601a63cb0ba5bd897ccf33aaba917e7338a0cb4339000e5f002d266396fd22511

Download Submit
C:\Program Files\AVG\Antivirus\swiftshader\libEGL.dll

Filesize
421KB

MD5
227af943a451da44e1920791a84a7975

SHA1
e7ca54eb3eb82e47cc692a2874802ae246d9eb62

SHA256
c86ee36ea5f2052c968bfea4c69b60f533639cf3601e7d4015d5c3b5e06f57cd

SHA512
9f1868aee4164611e05b35c62a6a58c0636f1270f32da0f73cc64fcbf6731580b631d236998881293260a18d5355dd2dbb2ec9812c5410ba2ba84e24d6237e27

Download Submit
C:\Program Files\AVG\Antivirus\swiftshader\libGLESv2.dll

Filesize
2.6MB

MD5
a7e8c182da0331fe22b69da756bb8387

SHA1
e018f3693b6bbd281cf894f37039bb8ae8e09b0d

SHA256
26b30de37e4a069b39863290fe2bb59b61aa6e54662b7f9557173ccdd4ff0dab

SHA512
b92de4b3c547256e20b758aaa93c320f9f404800d009a56697cf2f08d634918d46525e7df2ff85f69d663a1e7fbf1b4532d1d48f65880b2e58cae03eb0c7de01

Download Submit
C:\Program Files\AVG\Antivirus\v8_context_snapshot.bin

Filesize
161KB

MD5
652a0ec5b9d98955bffbcba3ee8eb3a4

SHA1
2d7c8d85b0059df2b429e40f03da604c72761c22

SHA256
13f67a42aaafb7c1f6dadf60387b2769c8344299607b074870dbd6837ef7b2ed

SHA512
1a8968de3874006c0dd56e417ee381191bd275eedfbb83d665ab84997824a532ab44f8e32880ab740a7e15034b8ea53da4312729adfc2c213b795be594558e8b

Download Submit
C:\Program Files\AVG\Antivirus\x86\AvDump.exe

Filesize
3.1MB

MD5
b1a50521b94ea53ac0f9c6a2a888229e

SHA1
bfe75fac5ac5dff11748e79c0034e428a5cc03cc

SHA256
fb9ba3f7be27b10794edfbc5b8ee177d31e0ab4fab15ce2dc6e7896f5da0eb67

SHA512
748753366134dbbb4ce4cab6dcd7694c1b19809912672ab369868b82ea60c8090f2b361e3da1addce822b3672b0e20f01338484e7402396ca2c4d401bedcb26b

Download Submit
C:\Program Files\AVG\Antivirus\x86\RegSvr.exe

Filesize
3.5MB

MD5
450fcc34f8d20d154dde51b230480d9c

SHA1
1ed93c0e232e4c4a5f1890c3fd77a584f84df3e3

SHA256
c37916a13fd7720b11a662296af6e85a71a65723b7cbf933620a03cf4a5aaa5a

SHA512
6b086d9991823cd780b2692660ea9a7ab479bb21c80ce383764d0c609e4b189edf3b7a35592d4b34f67575b66baf1100f6c3b300a5a042500611b5b01a26d379

Download Submit
C:\Program Files\AVG\Antivirus\x86\aswRunDll.exe

Filesize
3.5MB

MD5
95ebdcb5f8b103787e2271d31fdff232

SHA1
2343ee3e83ef4cb63ce2a51471572c4339d88c50

SHA256
27f7efd8b4e2dbf6ead7eee9c46f730cb3a4bb7f9d2aed3e577ad8445f40ca77

SHA512
7a071bd880b5bf240367c241da63eac783af492336f8be72a1af04773571bcf404fb10a70b549bbe8693a51fc3cf62370582d661b288335e02f34b364e6c72ca

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-string-l1-1-0.dll

Filesize
12KB

MD5
796e70f25faf0353eba92c001569c976

SHA1
2b427d0ad6e6ada06c012860a532da24e3f1a8c0

SHA256
9e153dbf1c157a910dfc62d1f1ae6c728ae3d5f2b767c5659a6881cecd35d8f7

SHA512
e0a2b6716add6542de78d409a4986a57a7d2e7d10672a57bc5a44fce3e65e365727cc64e9fb34deceeeec96b544d22b0901605985f5cce7f11341a00f898b56b

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll

Filesize
13KB

MD5
0651bcd9acadac1d50653be35378a82c

SHA1
5d1b2233c7acb3915d33f7b29cc2f0cbf34ea1ad

SHA256
fcf66176b6f7ab86f98f38d5662f61fa61ad3f1e59740d8a1df0e1072248cf6d

SHA512
1ce05989181faa8d291bb0df34bb4e93f2f576187cf2d0c5110988ce17e6a682d815297fcc9fd174bc1791713fb07b616ed952729923abf8c06b8b8f6d71d82e

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-locale-l1-1-0.dll

Filesize
12KB

MD5
592a65b922d4cd052bae1957be801a4f

SHA1
8371486ce1b38e692c0abc4a2a9e0c3e1945bb89

SHA256
d78e74087d151454365adf6239967c8ecebe85b1c6c6d3f59e70f0980028b1e7

SHA512
0837209e518d5db76ceb8128dd49cf03b8f0d11526630ad20c716ade1e02df1b39a8440d20ee20b488c6d6180c155d00a9cbbd311fc50f4803a8b95d4a545726

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-math-l1-1-0.dll

Filesize
22KB

MD5
46aaecdb8d337980c82cb2714a985986

SHA1
22104d2272b592a344df5b575fcff83ca0e4b161

SHA256
34457a002e90a590b516bbf58530cdddbb618a46bb3e764e18167c44934917dc

SHA512
33c91058a693b82f1457d49bba2e209a90b825927be89e38523671ac16f4fef208b98efa980a3e11185baa4df6d7639d447bf30e19dc91b76f04ee61b6169bee

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
20KB

MD5
7442e7059f712705d4b97699bf56de35

SHA1
f924088428eda3b76030091cf59ad38afb590118

SHA256
f822289ea5a9b0ccf9777a72bc8b73ce68b596fcca811e0cff0adc4031056b20

SHA512
dec6228063bbab561ae0c02cbcbab3d08c15f261758405d8a709707a180a09af9c462b0b382b700177f285a1ce3bf7e71e093f9031d15f932120fbfd396aa851

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-private-l1-1-0.dll

Filesize
65KB

MD5
3b07abbe272e9b9e2989e2d6a400fa53

SHA1
f925e5e58377dcdc13b6d80ff22c775e2334e372

SHA256
a170d9851a1427066d1fd61c32a9ae4b9545aa926be55da7e7d94275be281dc8

SHA512
14762c984aa6736b1330b1f0b296622fc1ce3ac79108c0bfee793a51131deacd09b494e8c851c6e437a84871a864dd65389657df8b2256f931e3c60a61fade8b

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-process-l1-1-0.dll

Filesize
13KB

MD5
0444624f30e8030d84bb169fc2410444

SHA1
05c1cd844368ae2c113585b477f91507430d72a0

SHA256
0b87358da7882fed313facee92bb8f4e45299c63ca557fdfba1478b364575fc5

SHA512
648a79fd30a73582907c7ca008be5ef78e6e72aa22478448721c4c5bad45a45bf76570d24e061dfae5e535666e79154f5f9f66a08746313620a17582e3998304

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
17KB

MD5
90340ac74d22b9a67237ea52a4dc1c75

SHA1
75d44b240afd4198b0f3b7256a4a9533ad1ba73f

SHA256
fd48da616f2d17054bcab961239431d99c247586f96bac69aac5b704ea694352

SHA512
6f52ae85b4d9ab8516d72bb1662ac9cf602092fc61ea78bd85af05047c70a0adc5edb67266032f12a86601c983015276f15a457935f5b6143dc80d335351e5ec

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
18KB

MD5
85444893a6553a4dd26150a68fd373d8

SHA1
ad9b46da45366f13a22173b06e22a45a211e99ec

SHA256
65f2a93490c845833541de1376d5bb65e6e864a1a9232f58f86a7a84408508c9

SHA512
ad56f71d0dc6d2dc5dd46eaa00247bd209403014648fb9c8f98937fc8e36fc85c0107365d2f6ba4f6d530f340278e0205d94bafebc78d10201e71dbb5d4c36d6

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll

Filesize
18KB

MD5
841e4ff9bb531b52218392db1d7cfbe4

SHA1
5607c2a987436195f1e241a0b29e8fb1f734102f

SHA256
4da31e582dc47d46132cc73ad34d5b87dddd2338495ceb2772f7e103a9a32ebc

SHA512
93232073d95870043994c752318f9b319db508fff452e4aa0b8e42e66d13623803be4537e1798dd05177b7427175d989c8e49a379fd932297e161d461bae268b

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-time-l1-1-0.dll

Filesize
14KB

MD5
0713775484e95e5bebcbe807d53488f8

SHA1
222dcab5f38d72971fad641201ba3ff9a2a0ecdc

SHA256
e63a096b1ae68a774b1f1afc51b5dbef1a5ac2d79dccc1104112c22841e3e378

SHA512
f19d30d37718de3edba15358888b13afd9f9dfe4bdf37bdeb3204fb6cdeec3f249e388d06a89b21dd4a0da9d1cd70bc4f5244f287a4d907dc0a786df7ee97097

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-utility-l1-1-0.dll

Filesize
12KB

MD5
b52238936bdf50ab985435a176281f68

SHA1
7bd2be0808c538b6f15f20a9a1228cf4a20adbdd

SHA256
3a23171aac49453f931d69cd55f6ec742243f5835386d9e6b18efad96c2be450

SHA512
36999e6cd50e26b1620fe24ba2dc11a40b25d1d77cc7a0337c7a3f65b16383fdb224e179392a215e6dae846e8bda6acb3e027445fd334e26e34278a397452f6e

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\concrt140.dll

Filesize
251KB

MD5
2126db527717014c6695f9745a480c2e

SHA1
3d564a111a7f5a2a3e9b06ace066931fbecdaf68

SHA256
50c864c13306921277e9c43f0133c754938e96cfa6982879d106b32b4551d984

SHA512
a47423d6ce322d297b0ec222ab8fb7cc46a31f840f412f6da0bd4ee9c40080ce4dcd2b00267de53721e61ba8ea02ee99d366a1047e41805f7feab8c43e4babbf

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140.dll

Filesize
436KB

MD5
0d3e750f8b8882470a74db90de94f814

SHA1
cb07462263379d3f5dd89e2b62ac31a2f7538821

SHA256
5b858fe4a054adb9461cfd12a5f3b8a9622a2eae88bca8dbd7d84a9f972a20b3

SHA512
b5ac0039428d844db36327ce6637d207ab02ad4cd89e0eac361d61393d396d6e2fff76d1007985889ec88d20e9c62ad29363b984b77d791feba588c1ec64f084

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140_1.dll

Filesize
32KB

MD5
8ecd8aea1af9dcb3bff28b1d4e0795d4

SHA1
acd125327614726c4069fcc4cde256d276f57ef4

SHA256
ec4743a6044224132ffc5f20c25bd7e36dea25f7ea9baecec7db40b0904dd7de

SHA512
33ba68e27fc769f0166e72da458244981622ffbfad33ae1015ec73ff83751eae9aebf1aff991247ddc31f0223888f8f03fa9b2b1d6069112ad8e1689e519057c

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140_2.dll

Filesize
244KB

MD5
1b73cbc1a51c5c2e61072729535e3148

SHA1
52f3494af0555caeaae477173dbd7a8c171997ee

SHA256
4279fe19e9d88988a93f5d334518b204a8956543f84467168d5c63d490337593

SHA512
9898d2952dc3cadfafdacd6d281d8e1614f6a8ca88448e52d393fc540e543f810d434e8eb74a640232f83c4ee2a07e8b37184f59adcfc9c8551cd0e061cb4460

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140_atomic_wait.dll

Filesize
45KB

MD5
cc556ffc1ee06111ba305967b089779b

SHA1
9b515a2f8e7dcf570f040b19a64b36166e17d93f

SHA256
be242784fa947e505ab9d79a23d7ae96e5979af03bc51297ae840517942f8675

SHA512
51fdf6c92ac6cc06b04092a0b1f9d391ed36d8ce0b2b123fff9d228875bd91b55dc218615f757f06f34c11d2527344f21c7db48a7b0502685bf6f77650d240a2

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140_codecvt_ids.dll

Filesize
29KB

MD5
0c94dee60cf90c0950680ab6aa2c2b91

SHA1
d7051e98366d14a440111ffcd5b28379f8c67806

SHA256
ed53b64f64fc8371f8ef39b4366449aa764eaae971de628aa2b09b3a6847216b

SHA512
0cc66c7f194ddc4c0bdc9cff0709c75455a35b6c5ba78ab5d3e7093ab9388336755850f3567a93c96cc66d7376126a45ec8e0cce370518346647d1b18dbe67d9

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\ucrtbase.dll

Filesize
1.1MB

MD5
b65aa2646529e9c1de570d28c2e37c2b

SHA1
0c0516631b589a6d87ae53442a7ecb8b277127ee

SHA256
783aad71c976972def8a34579123439cfebff071901d97bc91033a05d9c2068f

SHA512
4cc7496c2c0e18e10c0d3783892b0ba15c1241fabb2ffd168e981f60e3993fcc4cda07f2ae9afec4869f7d06928fa606be53544a109a3d78067cfeef033ba009

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\vccorlib140.dll

Filesize
278KB

MD5
8ff7f31d203d158ca42f0bb4fa077587

SHA1
721443995a06600be6db636dbbd44767f2d2a349

SHA256
a5aad3483ab030cce01bf33f5a72da627755f13596bf3fe72db766463d9acc57

SHA512
a65478de5e6fa74723f66af35c3c24762e0ebddfd575e4bd7e868233a846e7813454d0542670159b91c74978a1db667d23229d4605080cbf6e96c3227ca2d7e3

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\vcruntime140.dll

Filesize
89KB

MD5
8a090e342a1cfc590b468b61e0c6e23a

SHA1
2ce5c404d0e926d3829565a819142657374271c7

SHA256
c432d3c6a02d636c4e66cb97bb738655efb1786a89d2ef446cd0aaedc7f6fb7b

SHA512
50ea6a9241dbbc52f93703cf29d2024ad49efd8f69f8552e493039640f2d0e625bd5c038e942079c0e291784674d531ea256c2556c637ce292ec6de8c417292a

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\vcruntime140_threads.dll

Filesize
35KB

MD5
7f9531927e58fe32981d195625a17e2e

SHA1
c2831c6c980e9ffd05f450302cf81af11050c300

SHA256
88241636a8d3b8ab2af9d3b3b9e40cad4a17896f87c468ce5f177724656b7340

SHA512
92bab7dd259a9509ca2cb7ed82dee4de77a95780b9acbf36f657666630e9790dcfae51b3efe8a10563edd0ca8a29ba9c9c8138a740240ea106cbdebf61a10bed

Download Submit
C:\ProgramData\AVG\Antivirus\HtmlData\Blocked.htm

Filesize
1KB

MD5
94aa8569ec9b33e05f3088b136dda05a

SHA1
2e7779731351517e2e6df18b313e5df28079160b

SHA256
179fcd4c70b0e5958c56387c7849e4b49e695a284b75471a15a8e6c8637eeefd

SHA512
52cc30da7dc6e6ae7266bf171e4e9c9e16c0d8bf72abda793a0f03e2889eda6171044ed65960fd2c40251b135015a0fa62132c76cf16065ef6fa47476b6d8ff2

Download Submit
C:\ProgramData\AVG\Antivirus\HtmlData\image001.png

Filesize
11KB

MD5
c69e876c8bc4f3bca56ba333eaae7a71

SHA1
d00ac516dadf10b6a9fbaa8b6fd7f7800511d36e

SHA256
d1e88cc6880e3667b06b2d006f5fb8516f28467dd1153453c1bf954571fc4f00

SHA512
3453ec35e83ed63f2e88326c1a3f4ee23a6b979d272243131c37bb06ce8d2467585e311a3c01198f3384d852ee9fe525434f8a6eb58b7698c0c8c56b7a8f3b40

Download Submit
C:\ProgramData\AVG\Antivirus\fw\config.xml.ipending.2e1421a6

Filesize
2KB

MD5
60424032333d4723d7f4ff7543a7aa76

SHA1
1fa9fa26b21439adcd5258727f9cd0b954d0f5a1

SHA256
be79affc10f1d93f9ae438c6320feed7846bcb0950cd32e8a564eeb59203b6ea

SHA512
859a800dfd2de9f0bc0f5e81a8f0ab80eefcb56fe0a9e634ab8cd13881ffd26e13448529d9a0d096a61d5f1e410eead06dac75a91b09faf7f692d8884a41456c

Download Submit
C:\ProgramData\AVG\Antivirus\overseer_unattend.xml

Filesize
3KB

MD5
1a90bc8644262cd79e806a222f38e95e

SHA1
0b9dc24a50654a32e0d5974f9f4370bac30a90f1

SHA256
1210aec78a7a836e56e94accf4eea74d5c0f26c2dbb25ae4d6023886ed3c9d64

SHA512
4f67699dc93ee7df09c4657a9fffbeb1f34ac615eea55d169ac03f7f58c50640c968f4215ede9dc59b5660166a9e2392fe10b8f2f68f6b067e9631c94c805941

Download Submit
C:\ProgramData\AVG\Icarus\avg-av-vps\icarus.ini

Filesize
158B

MD5
3c28e285db12f32a88606f5c0a8c424a

SHA1
3112cba6bb525549022aa28bcf55952e168e4f93

SHA256
226bf72377b3d4a1046984c2ec7ddc12d073c43d48e37448cd5d4d5d5d2aabc7

SHA512
35d923ee1093f3c3090e9baa48464d8866c22d116ac92f0823ef7e98c6409330b06140c1d2b1fb51572ce187f23bb3e9fdca49528b1f0678f4aac413a0df5b7a

Download Submit
C:\ProgramData\AVG\Icarus\avg-av\icarus.ini

Filesize
166B

MD5
c043a3beb23cc43cb3e9acae2ad9d8b4

SHA1
f8a300a14643d9d2ef708839d882fa8fae274f73

SHA256
3df024f72a0bcdd90a7c140591e224492481eb7f32a940bfb9af1cdb6472af9e

SHA512
e5baa81e296b7f06360ed20d9484a137ca49c0505d2c94947b978b09b277f13184e540098e21daad0a72d8ddd831a57d6ac0e67c0aa860d87a051b55c3c9fff2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
aad1d98ca9748cc4c31aa3b5abfe0fed

SHA1
32e8d4d9447b13bc00ec3eb15a88c55c29489495

SHA256
2a07cac05ffcf140a9ad32e58ef51b32ecccf1e3ab5ef4e656770df813a8944e

SHA512
150ebf7e37d20f88b21ab7ea0793afe1d40b00611ed36f0cf1ac1371b656d26f11b08a84dbb958891c79776fae04c9c616e45e2e211d292988a5709857a3bf72

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
cb557349d7af9d6754aed39b4ace5bee

SHA1
04de2ac30defbb36508a41872ddb475effe2d793

SHA256
cfc24ed7d1c2e2c6585f53db7b39aa2447bf9212487b0a3c8c2a7d8e7e5572ee

SHA512
f0cf51f42d975d720d613d09f201435bf98c6283ae5bc033207f4ada93b15e49743a235a1cfb1b761bde268e2f7f8561aa57619b99bff67a36820bc1a4d0ec4a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

Filesize
47KB

MD5
0d89f546ebdd5c3eaa275ff1f898174a

SHA1
339ab928a1a5699b3b0c74087baa3ea08ecd59f5

SHA256
939eb90252495d3af66d9ec34c799a5f1b0fc10422a150cf57fc0cd302865a3e

SHA512
26edc1659325b1c5cf6e3f3cd9a38cd696f67c4a7c2d91a5839e8dcbb64c4f8e9ce3222e0f69d860d088c4be01b69da676bdc4517de141f8b551774909c30690

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

Filesize
64KB

MD5
d6b36c7d4b06f140f860ddc91a4c659c

SHA1
ccf16571637b8d3e4c9423688c5bd06167bfb9e9

SHA256
34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

SHA512
2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022

Filesize
67KB

MD5
69df804d05f8b29a88278b7d582dd279

SHA1
d9560905612cf656d5dd0e741172fb4cd9c60688

SHA256
b885987a52236f56ce7a5ca18b18533e64f62ab64eb14050ede93c93b5bd5608

SHA512
0ef49eeeeb463da832f7d5b11f6418baa65963de62c00e71d847183e0035be03e63c097103d30329582fe806d246e3c0e3ecab8b2498799abbb21d8b7febdc0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

Filesize
19KB

MD5
2e86a72f4e82614cd4842950d2e0a716

SHA1
d7b4ee0c9af735d098bff474632fc2c0113e0b9c

SHA256
c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

SHA512
7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024

Filesize
65KB

MD5
56d57bc655526551f217536f19195495

SHA1
28b430886d1220855a805d78dc5d6414aeee6995

SHA256
f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4

SHA512
7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025

Filesize
26KB

MD5
5dea626a3a08cc0f2676427e427eb467

SHA1
ad21ac31d0bbdee76eb909484277421630ea2dbd

SHA256
b19581c0e86b74b904a2b3a418040957a12e9b5ae6a8de07787d8bb0e4324ed6

SHA512
118016178abe2c714636232edc1e289a37442cc12914b5e067396803aa321ceaec3bcfd4684def47a95274bb0efd72ca6b2d7bc27bb93467984b84bc57931fcc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000048

Filesize
96KB

MD5
60335edf459643a87168da8ed74c2b60

SHA1
61f3e01174a6557f9c0bfc89ae682d37a7e91e2e

SHA256
7bf5623f0a10dfa148a35bebd899b7758612f1693d2a9910f716cf15a921a76a

SHA512
b4e5e4d4f0b4a52243d6756c66b4fe6f4b39e64df7790072046e8a3dadad3a1be30b8689a1bab8257cc35cb4df652888ddf62b4e1fccb33e1bbf1f5416d73efb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
7a5659a8155f0ba6abf9e1394de12b7c

SHA1
6f2b6dec0241fb1438ba2e7ede2c3f5623af27c6

SHA256
9a6481c4492dade0ec5b8ec8c5e727e244d3b02aeb2d3b1374382dfa00587300

SHA512
9f3c35bad11e642349e01e99fd3a1aa19742da4880e87f88a7728a7f237a9a9f4326975a7bd8e5b73b6f69a5384bfd957fb2524e0b6976a70891000f042749e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
e4aea37a87cdf98c8a246d0e32a901ca

SHA1
145b7b50464edfbff60b68e5cd95a522c6573036

SHA256
df9e5f46072a82fd6de090acf27c90566e6b00a11a270a56fce82be59ff6322b

SHA512
c50a6cbe1c2f641d4f45601709dbef39f380cd2052cee7acdf02a4605710b3a42470636299d301c177d04e18ac4842829b3006457d91cf1cfb9ccd84928fe71b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
7KB

MD5
d3654e853c20e973f66551407c296543

SHA1
84e5cd6c13fa614426717874abb0faa5011dc9dd

SHA256
c44dc907abaad523e7734f218735d2f29ae7094512efeed5e0c9b6ccfda70827

SHA512
96f54d00d712afb38ce63485890bca0ca68fa2dbea68fb020f4e4a52c98494036ba345e7cfd2402ad6fe3088a09d33feae6d7c0528553c008ba8f26927f4b71a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c39a1a5cc22a7f4880c88fc0e41bba2c

SHA1
8ab9f8e090093b0feffd0a62883e7cf23c88ffa9

SHA256
588274f240df3aead8adb5c3010eec5e31580ef8930b05acf3f00d7ca11c2450

SHA512
9817833920e11432e14099b7ae5bd078d0ece1e8b75086bd48f37c8078d5ceccfadc379a63fb07f760796feecafb9d74099ed84cbd2c1bbe7e308c1036f22f9a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
11KB

MD5
7ca8d403082ce0d3da70cbc06d595759

SHA1
08ffa454ce5aaae7b711fd3460743165ee452715

SHA256
e64b093b31cee386d5a67a39dd21cfe64d30c647b373a80e276b5c1bb98727e4

SHA512
6e1c5fc36a34ea6fe2b4498f7861248ab62fa53db5baeaeae37bc4fe7ab105492efcd1ecec1210472de99438aa77c64dc94c7d201578a32404d12e314a429251

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
4a04badd9cb4ac0e65cd186c993d2c91

SHA1
d5cbbcb3517f55158de096522c0a44052f75dd8d

SHA256
9b0650b74c95f1ad4421ee8c3581b6c936a4477d11c5e85f272fcd52c25eb629

SHA512
8baee866e1336bb6b0ed383111653d7b6f5606b5b645ee1036b2c871faec1bbd6b5661e76c0abd52235d237dde6496ba96358e6be99c39d4140c9ab13d4ed3dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
12KB

MD5
730b354e9afc35d22e7f2c75c0f488ef

SHA1
4d925f09d89cac07b70a191c68342fca9ff4e808

SHA256
f60d17149568ec6843f1370bc61ff2f09b9cda5601fcacb2cb5a03df82bc4561

SHA512
657bcd420f9dbe428034430b4077535923f169580c25357f8dffdba7a4628ddf0647e377f0ffb4e6c6261e3ec71bb6d642210ffa00ed1d65d1eb5607c383dd0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
11KB

MD5
6c3d7937f35882a2b5183587733bcc32

SHA1
565fd774fdb7e347c569afa1ef24b23bfc2b00d6

SHA256
1ce25cab1f5ac210ff5ef6e470f9b1b7705837a9c9949dd51f735d9c87ba948b

SHA512
95476d595dd03a95c6eea794ed4a610ea55575415beec556fea1dc71946b2d369258f77b5d9456531dc7b92bf65c5143a607327d8679c235a99d80b6c0047d96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
11KB

MD5
a91e24259bda2afb25a907c831db6e83

SHA1
2d4bf24b60de44b005e73a5c959e1406795eab87

SHA256
7589a36644a47a051fa36cc80b59c96a4d50e47a065b6ccc6f0881001a6e6ac0

SHA512
0827f077ec800a4970897e5d6304f5f0537e78690f2b436974c380c94cd9d308f8580da4e58e5588ec25c135a9f7b6113db770641d0fbe71938b8bf8a325859b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
12KB

MD5
dc0fbe690468b87205a204e2dc4c56a0

SHA1
957d391ebaa5bbc1d76e0838119ed7f9b7620e0b

SHA256
371138fb9901b6c07cff2bd7075b52b3baa6938f432c1af1480947f2d7ace6bc

SHA512
462bc69f1853f5ea5105d249fea2fdd05a14a4d6c1e4cdbd1ba701e1ba50b3259ce1f7c9d28d6e9844749e15f0c41c1d9e81571bc7b9b5e717e0db224d908f6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
6aea0af89513b1d7d15aec33f4c13fdc

SHA1
d187bd6a025bf92c05716f78d262f1909cd8182a

SHA256
d147c5b78839873c840be236b04213512c00729ab6cc847453c33f45d364861f

SHA512
66e91d6503a092172db96e80bf3d0b1eb2ad94979fd97a2d88e70e9d9c3e5f7b22b76fd6cf2c482230b9d6780d1c85455bdd85b608231cf2692da20b4f8ef73a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a2694.TMP

Filesize
48B

MD5
ac85ac57ec08540fdd2fba4f463c84cb

SHA1
800f3360ed1855874b15c674e27edb9fb87197df

SHA256
4f9211368e7dc7e7d0587627a2da24c54a98e347cfb35cabf61bc77c594167b5

SHA512
33cd400ebe8f079163df1bc955c7b71ff7e74a7e705afe353d584339184132460a8e7a91261f7bd0312de4814bd13318256de8f6677a4f547bcf70e7caf3448d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
83f85b9ea4a8d7c7f457157f31dcc2e5

SHA1
3a9df59facabb7bb5d1ec79862444bce12351215

SHA256
6ad172889891a2db2ab5cd08f86a1400cf628851e4509a199dd4f0c960d4bb0f

SHA512
6bb0133e080c10b2ca46f3a47214bc62d725dcbbba142f6a7fc713017ed0e33da09213fa82cc8cc3cb5440f338b6d8eccab28d90213f8609c4b1d4957cf155b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
5789683f550643ae0f6e8b3bb6be1c82

SHA1
b044b9eb45f8fca3255d77a1feb1d325a51dfe85

SHA256
8153ebf9d8913329c24f2da2b61d01ae9dfbfa96be623e2278f42d3084c12077

SHA512
f1147461d8ae9c1d6fdd1157eb894bd7d71fa39c390076f6b20ccaf318855e47c21502055508eeaff81bbfdfc286b269acb501c6268bac90cbc943ca1580b24e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
f3241b2a409f9d90ca2c5a71ba94368c

SHA1
9074d087be26611cf882309bbd23736db60e5b1b

SHA256
814fabb7c561b4f25f11e1a733f6204facfd868cc3fe250abf6cdde2aa914834

SHA512
4c90ed2c70a4dfd0f027c5501679e9a367f09c10832cc3428624fa03c817ef674903651e49f4fc1d59e716559d1131fbbb18dc093747811b3adef0df70bdac6f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
c1a065f2e7f7d2216200ab2ba34e0e2e

SHA1
54c8e8e0f1b50139e54a01e01bdb72e0fc107c67

SHA256
40648e0dda3a7d03ea52c7e3c8a2654bfe5e1440d80c38c02257cb62b00f50cf

SHA512
75e47b42be504b1d87507a7235cb8202887da34d163606b3989060a62d58d0ad99942d0fb44f6212401927feb6e6de7d3c80c3404dcf58cd315e636182e16150

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
e50d2901a115b52f54182adc83f705bd

SHA1
11ad2d01901ef5ff49ba4ffde74bc34d49227f82

SHA256
46107135cfc3e28d5c99ca1698581ee7876395753b4d02e36ebd794bf5781486

SHA512
040f07a956de65512fe1b357a5a88882073422439a719da6421fbfeb02743db62fa0165b78d57534e9698e386fa6dd412a95ebca79825aa7ec173ca6cffa1fd9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
2a81055a8cf6d8479fa0571989d17433

SHA1
64175a037a4abbc152444c14a55a11c0aae39270

SHA256
4ed5b3bdc40262bdcaae28922378a9df33eec0bfee532b44c8b52c750f4e20a4

SHA512
622704bd04023d5bed2ac5d282f1437aab0495e006cae1d9e4bb87d8a6fe1ca3b162292a47c09c87952d1e3626d8b7fcb8ba48b30a6ef16223fb05d0fc062df2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
f6ab27624a0c3836ce4acb5793b41340

SHA1
b1f25ddb6ab57be9057ab5182951827e09c0cd5f

SHA256
80771cc53b5221c3fe0639f1a9e4d23fa7c5239896833528f9dbdfdd1d9bc2bc

SHA512
90fffd8d4a53f3dfe9475ae102f3eafa6c310b1b7a18dd2d88c77c8e60e21b1f83fc9de33d20640dd764187f204e81508b62cd45b84758c84f956201a8e8a0c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
5e08aea99c22fca68f4974c63809476d

SHA1
731b1c8ebecdc1ec78d05125c4bc92f576a6a2c6

SHA256
ea39dbbc07d01bd1b7df4bec8375d0e4fc417af9b0cf81d6b02ff1b331f52022

SHA512
e8532e832176ea5d2fb09e7f5c9d4b3d1d89b35c9da9cbd08fff439bdd47513a769eb5e903fb5262dff25ecf5b4343ddfd1da6692e167513f72fd1d205c18619

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
48e1e6e8b056e88702274b1204aedd4f

SHA1
244715969dba2c1516a96946759ec086abaf7d39

SHA256
49f26271c4bd217461ca1817b3fbfd1e874d167834a40a598794ce8cf3e35530

SHA512
953ba030ec7b66c0a91fbf349c6e48be1c074e2414ca85238012af90470abad44b05ed9cdc2725cdad123fc19c32dd341b7946cec22e81c303d93f83214c7ee3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57bfc6.TMP

Filesize
538B

MD5
c5d45597975721503229cc094b2fdc4d

SHA1
b3be12915f4cc7fc086816632779916b94fc25a1

SHA256
f5324067b0e7e4c1f64321959e643c5d24094968777f423297244e608a172569

SHA512
eb5785ede505732f7e56d404faa921900a6ba1a4ad9cfef0628f2383d9a07d1cb3c7c4aa61dba2b81d5160d364851cf459d302b950e371edb1f367d7c97c8ee9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\databases\Databases.db

Filesize
28KB

MD5
02e63f9dda664051c5f8e5f8825885c4

SHA1
73b86a36f30c94143b60f599d73898c02d33093b

SHA256
1c57909ca621ab927b31aca493155754d389daecb5713f027d0e1bb54aeae860

SHA512
754b1142320db002599c458ffab80d97ca7a4602fc405cd08423639284af06a966ffdd65147fa84fc31055d49d36b22ff08ec849349769497c00b5fc7704febb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db

Filesize
16KB

MD5
9a8e0fb6cf4941534771c38bb54a76be

SHA1
92d45ac2cc921f6733e68b454dc171426ec43c1c

SHA256
9ee9211a57c3f6fa211fe0323fa8cd521e7cbffcd8ff0896645a45795dc472be

SHA512
12ed22537dcc79d53f6c7d39e92a38f8fea076d793198928f5b7a5dd1234d50a3c0b4815632f3fadf8bc4ef0499773d22bd83f961d2d0ffd8afacf471bd3a5ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db

Filesize
88KB

MD5
921c8f82f170e3f6b40041acaab11e29

SHA1
60ce39eaee82d26499dd15cc770790c27d301c41

SHA256
3580e224c987d746569c51423c7d963fd37792d155c193c52babca39959c3bee

SHA512
4a0b439c3604497b09b41adf4eca0fce655763e15b7cb3d3c8cbaee5a0c7c56c231ff5f5064296917aab6fab6a199b5aaafc8a467b4b321c178f43eba2a144fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\previews_opt_out.db

Filesize
16KB

MD5
d926f072b41774f50da6b28384e0fed1

SHA1
237dfa5fa72af61f8c38a1e46618a4de59bd6f10

SHA256
4f7b0e525d4bfc53d5df49589e25a0bccf2fcf6a1a0ca3f94d3285bb9cf0a249

SHA512
a140df6ec0d3099ef374e8f3ece09bf91bc896ac4a1d251799a521543fe9bdea796ba09fa47932bd54fa939118495078f9258557b32c31d3d4011b0666a4723f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
c07da5c12c9409bccfea32ca6982cdde

SHA1
9a8a91ea33aee7516d630398cb59e5113a21b311

SHA256
b974c6cd1e3378abc66aa0344ee2618b76ffe0d69fa1ebc16e5bdd0c999e3988

SHA512
1c93feef435cacae570d31a49c781af9e59ddda853a8c0c9052dd857a1d9a19b3fa34880c0fe5b6f2e81b3b1292a480e485680253c71093cd6d3dca4759edaf5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
dd566f271650e59cf45c46c8cb639a91

SHA1
2441b5e5f854b2e088be746f8bc694e988014301

SHA256
85d5616d92f02583a5e1772cfebe4146060db80113d5efb35e3e4f395ff4c22e

SHA512
0e5519cf23024f0848a3ca39af3fbe09c881cbda9c1c2e72105446dcd4c8b951e462781d9d652c3582051d357d09c6dab56b25d82ee9a5d59bb80a6b430d9a15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
2b7a15b8663046d5440abe2fa01bc651

SHA1
1f2b815c2ba8ccfa986d8296e6ebdb9ad400e59d

SHA256
6bc56ffcb729137d505b9fcaabd0f345be11cc3026c52b07a7657f43123a9cfb

SHA512
d152e3100da63eee2fea4fd2667b99434473ac79e4f6a828f3f92f0278e0a1e29274bad2681a0dc86a7b5a48e8ea1eee6e1119308aeca3310d89f4283e10dbd5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
04c4f35a9e8a2ec28704a27cd8422c25

SHA1
d8489a70dbf6483c8ec189065895fd979255aa8f

SHA256
7b9b4441d44f120828683b5f760c1bf1c2702770fa91fe7a125ba71c76951d89

SHA512
12e0f3cd9a5d1da92e25d36518b769e8d51a4f18ef7e833b4aee8fb32225229f3fecef674c9bc4db92aa2582dafe659f0d553fd2aaf3045ed0c2c90b8b03276f

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
12KB

MD5
b165ad6cd38e0fbea899e7a516f15ffa

SHA1
1ec320c51a074bc0fb4d8453720fd8a1f2fb2704

SHA256
ed6378ef6ddc2a9b3d04137fd2bdb02f7ae17efd093d92902330dcae576bd295

SHA512
5ac9f9ab1fcea7a029170900f0b581fa3d4cba994afedd55e6d675396a854538c9f978228788774dddebfae0eb4fc08074b1bc638a20a9925f97f59b477db0d5

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
14KB

MD5
5626895263c2bc6d4054107b69d34625

SHA1
198bfa00f3bbbe719a150c96a3e5f314aaa738ce

SHA256
d2139a1ab0d78820ad32ec1f6679591332c8f78f0727c4e9a230d1e6a737913e

SHA512
7916e28a979540a27591a94f5d53973bafaa6bb0fa66c28f2961fcdcb38e08ac5f1282a57fb0f58f3efbc0a8fa70ae9be55b2285c6ffc61ead1dd5f44e8b0c38

Download Submit
C:\Users\Admin\Downloads\!Please Read Me!.txt

Filesize
797B

MD5
afa18cf4aa2660392111763fb93a8c3d

SHA1
c219a3654a5f41ce535a09f2a188a464c3f5baf5

SHA256
227082c719fd4394c1f2311a0877d8a302c5b092bcc49f853a5cf3d2945f42b0

SHA512
4161f250d59b7d4d4a6c4f16639d66d21b2a9606de956d22ec00bedb006643fedbbb8e4cde9f6c0c977285918648314883ca91f3442d1125593bf2605f2d5c6b

Download Submit
C:\Users\Admin\Downloads\!WannaDecryptor!.exe.lnk

Filesize
590B

MD5
e4ad5e9bbc05770b69fbb0aeab0c197c

SHA1
591f70d1ba6bfcfdcc25550e371c6f37f452a681

SHA256
981b78ace2e01fb2ad884e781629d808c4ee3aa5a63b04a749f931abf45bc2c2

SHA512
4db038c6d4ddb8381fe3ef58e07f1504ffed6828a046231d5db7b916fab22ac2e0088d6e7b61fdbb473856436860266f39856a359ca2645fb721594405501bfd

Download Submit
C:\Users\Admin\Downloads\00000000.res

Filesize
136B

MD5
b5f910c6815cc94fbf552b5a5202d7dc

SHA1
58db09b9312064492fd97328f758e41256326f79

SHA256
b15c81e57d74ec3d98dcbb4f2bcdff92403a8cab8d36f779762a90145494686b

SHA512
c37844c98f060ca5a02925cd05278482d0d23a0eb5188d7dc133a59f8ad9db46ce268cb287c826fbb71d305fa5fa1430010f4aafe4ea7dc74dd167c7b2f8a152

Download Submit
C:\Users\Admin\Downloads\00000000.res

Filesize
136B

MD5
2b5a5bd8ee989783a5ec6f0825641a86

SHA1
c3ac5b701f383ed27bc8ba6f49a800e755285b1b

SHA256
e6de9560fa7d0d363a015a09cf11af091beac184aee39cbcec1e1a1dc9a140a7

SHA512
a37ebb95eb3c45297c3366cd08f81ea9d676365d037abfe7ab2dda7840307eb3b441f8ea8f987d9908adf1db4e1fd12b379a85230c1f27a4f1de65cbd2a40926

Download Submit
C:\Users\Admin\Downloads\00000000.res

Filesize
136B

MD5
eceb176510fa802d906c7ff66f5dd277

SHA1
2452e94f493a68a4e72c3eaa6f0623583435efde

SHA256
ab02ca2dc595d91e12a6afc8974799412c17d152bf503fd17cff49bf14923aa4

SHA512
b030ccbad6091cd0e8f4b843210e6c7efec74aafdb14d1320ac4d0cc56ad2b2a7b0941a5003917559a5a050cd0a66deeb240b757d520adf743b1ce50dedbdabe

Download Submit
C:\Users\Admin\Downloads\240831737118883.bat

Filesize
318B

MD5
a261428b490a45438c0d55781a9c6e75

SHA1
e9eefce11cefcbb7e5168bfb8de8a3c3ac45c41e

SHA256
4288d655b7de7537d7ea13fdeb1ba19760bcaf04384cd68619d9e5edb5e31f44

SHA512
304887938520ffcc6966da83596ccc8688b7eace9572982c224f3fb9c59e6fb2dcaa021a19d2aae47346e954c0d0d8145c723b7143dece11ac7261dc41ba3d40

Download Submit
C:\Users\Admin\Downloads\Rensenware (2).exe:Zone.Identifier

Filesize
55B

MD5
0f98a5550abe0fb880568b1480c96a1c

SHA1
d2ce9f7057b201d31f79f3aee2225d89f36be07d

SHA256
2dfb5f4b33e4cf8237b732c02b1f2b1192ffe4b83114bcf821f489bbf48c6aa1

SHA512
dbc1150d831950684ab37407defac0177b7583da0fe13ee8f8eeb65e8b05d23b357722246888189b4681b97507a4262ece96a1c458c4427a9a41d8ea8d11a2f6

Download Submit
C:\Users\Admin\Downloads\Rensenware.exe:Zone.Identifier

Filesize
235B

MD5
bedba9207bb0d7d89d2ccc539befd33c

SHA1
f4db228a87d7f00133238f1c2ea3933d077c3a7b

SHA256
69ddf31c76d460433e11db97dfc4a03447a8ef9d34ab9a8ba9753d067dca56e3

SHA512
2bb969d32576432fb654bf074fc8d0b1bf1816b42840a912b26a338534c72d4df2266029cf9854a5441bbd2b316a2efe686a169144f4838ae1f5a707cddc7dd7

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 358381.crdownload

Filesize
224KB

MD5
5c7fb0927db37372da25f270708103a2

SHA1
120ed9279d85cbfa56e5b7779ffa7162074f7a29

SHA256
be22645c61949ad6a077373a7d6cd85e3fae44315632f161adc4c99d5a8e6844

SHA512
a15f97fad744ccf5f620e5aabb81f48507327b898a9aa4287051464019e0f89224c484e9691812e166471af9beaddcfc3deb2ba878658761f4800663beef7206

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 669019.crdownload

Filesize
248KB

MD5
8efa32470ef7af37b3d3ad565c427930

SHA1
c885cfbd5f4af6de296787d0864d2db2e320c03d

SHA256
ab2c0725e6a2b8c91673c6a1319a1da4e4515a4ef4ed1cbc1f4352f6efc25621

SHA512
a58f945d6ead06aa2b8447c85c288e4cd345b6c3b3a79bad62df7dccdad92acaee291a704fa08dfae10d828b8b8d1ca400030627d1ae751b4ccd99ad2e6aad29

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 669019.crdownload:SmartScreen

Filesize
7B

MD5
4047530ecbc0170039e76fe1657bdb01

SHA1
32db7d5e662ebccdd1d71de285f907e3a1c68ac5

SHA256
82254025d1b98d60044d3aeb7c56eed7c61c07c3e30534d6e05dab9d6c326750

SHA512
8f002af3f4ed2b3dfb4ed8273318d160152da50ee4842c9f5d9915f50a3e643952494699c4258e6af993dc6e1695d0dc3db6d23f4d93c26b0bc6a20f4b4f336e

Download Submit
C:\Users\Admin\Downloads\c.vbs

Filesize
201B

MD5
02b937ceef5da308c5689fcdb3fb12e9

SHA1
fa5490ea513c1b0ee01038c18cb641a51f459507

SHA256
5d57b86aeb52be824875008a6444daf919717408ec45aff4640b5e64610666f1

SHA512
843eeae13ac5fdc216b14e40534543c283ecb2b6c31503aba2d25ddd215df19105892e43cf618848742de9c13687d21e8c834eff3f2b69a26df2509a6f992653

Download Submit
C:\Users\Admin\Downloads\c.wry

Filesize
628B

MD5
0d95044b8d0071cae5b95f57922e1cc6

SHA1
7cce3d39e95bd8788d994640c2f44321ba8899d0

SHA256
dc1e498d362e93c0e63c2f00beb2adbcf638e370388632e2f4587e788742d618

SHA512
9db1173e92491e80e0e2815ecc139b66f717a3f149e58b97442ae6cc5579a6c1823acf987462f47fb5593893a30a83483a79ecd5c227c4a4643223292a24b863

Download Submit
C:\Users\Admin\Downloads\u.wry

Filesize
236KB

MD5
cf1416074cd7791ab80a18f9e7e219d9

SHA1
276d2ec82c518d887a8a3608e51c56fa28716ded

SHA256
78e3f87f31688355c0f398317b2d87d803bd87ee3656c5a7c80f0561ec8606df

SHA512
0bb0843a90edacaf1407e6a7273a9fbb896701635e4d9467392b7350ad25a1bec0c1ceef36737b4af5e5841936f4891436eded0533aa3d74c9a54efa42f024c5

Download Submit
C:\Windows\System32\icarus_rvrt.exe

Filesize
51KB

MD5
b7d7665142fffea10744503b184cbe1d

SHA1
1d649481483540d4c08a537a0ac05a1db55ab59b

SHA256
dce354f23e841a0a92242b0dca5d692b00071698a891d7228049c76c6824357e

SHA512
cede5360bc1b565ca4e351734ed47ef161cd0593d7c5edeb191e3b54237c305750549b54e36e5bf7a97d071402da22cd4d639f0ccfb25ffda32808f8e45eb65b

Download Submit
C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\avg-av-vps\bug_report.exe

Filesize
5.7MB

MD5
088319bbb8483a4ab883b3eaa6d322a3

SHA1
8f99be88aa96d5f31e2408779c2082a586140c0f

SHA256
aa901643995c786c0598ce59c6edc19d0202ef4a3a8a0cb0c1a22e961735099a

SHA512
baa4842408362b600c6f6bdd7f66dda9f4690f95844ecfca12ce8619fb0c6c0407c1188c76d414f4006dbd9bcbd6e490da6637f7383dbd156a493b6cb33035e8

Download Submit
C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\avg-av-vps\dump_process.exe

Filesize
3.4MB

MD5
621737307656f95ee47a8fd88f653dee

SHA1
007eab8401237c014eb2a3942220ad83c6ac9a23

SHA256
2f8a779d146017868e5dd4e67083675da9aa5b94a174d8b56c33f58f1ee4fd08

SHA512
9d9b29f28b203d371ce65e9395ca67856e5d7952be46f5c54f05b13545fdcef7c8c4fc084e239f78b0c4bc21680986d313bce32eddd07157fef7386d601be24f

Download Submit
C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\avg-av\icarus.exe

Filesize
8.0MB

MD5
a1fffe3e9589ccfe629eb653f704a659

SHA1
667dd38f434b7e7b334c203e06b87892002aa3b0

SHA256
3ba8fbac3885aa994b335c77d2f1544c6a87420edc8b0f047b3e46cb527223b1

SHA512
c5e67816fc905836d178a8cfce7585e383f822987e45bf9078e834bb625ed745918615db8b83da34ffb7ee46004f579b4cc2b50bd544249e775bf88d4836385c

Download Submit
C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\avg-av\icarus_ui.exe

Filesize
11.8MB

MD5
151364f07cca741f9e70d2222003aade

SHA1
21c6749d1563fb01a99218b37c8bdaf449bc72e7

SHA256
e9e9a93a90fdacb5677472fbfeb58dfcea5047e1d044cae69fe1fac0378f6d60

SHA512
d1be3b425cd9bb0321ef33b881e3a6740135b86f7e3041e34add38933a5d9e819ff7ccc994c21fb1c306e4284b6c5d86260d54b454a0ecd5ffb3974c053fe52a

Download Submit
C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\avg-av\product-def.xml

Filesize
1.3MB

MD5
eb07df8dd82f53102e8d11bbbc710bb3

SHA1
27496abc3727699b049941d8d601f4c3d3942088

SHA256
6b80fa1f82216a58bdc872de1a8e2cf9d2c485d135cf3414b797d58ea9354fa4

SHA512
25a4d798601a7cdde6869b3b8bc01258f4fb98e11dc49a0a531fe7cce39ce1fbcfe609ac0b67c849e2ba37a558c7dfa7b600e39dfc8f7318bffe3509a7efd406

Download Submit
C:\Windows\Temp\asw-eb9fa4d8-ac6e-4aa3-b9eb-c38cdca0a47f\avg-av\setupui.cont

Filesize
379KB

MD5
76344db87a002e2f8a2d60d4d6ec96d9

SHA1
ce2a7412e2cdb002ab70d14af4bd25e752b6fec6

SHA256
f6c29c470a756f71f14ad40453e27aa8e141bd3443b84483c733c282eacc8f7f

SHA512
638b7f3854d5ed38924ed5e6c953f986d941460bc5dc3a45a86f741473221473e25988d8dca0e62d5eb34254ca8e55b44249d86ffcdad95028dbc18183cca23e

Download Submit
memory/2008-909-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/4428-790-0x000000001BD50000-0x000000001BDEC000-memory.dmp

Filesize
624KB

Download
memory/4428-789-0x000000001C310000-0x000000001C7DE000-memory.dmp

Filesize
4.8MB

Download