hxxps://www[.]bing[.]com/search?q=install+virus+on+computer&FORM=R5FD1

Resubmissions

28/03/2025, 18:53

250328-xjpgws1q16 4

28/03/2025, 18:49

250328-xgjtma1qx8 8

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20250313-en
resource tags

arch:x64arch:x86image:win10v2004-20250313-enlocale:en-usos:windows10-2004-x64system
submitted
28/03/2025, 18:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.bing.com/search?q=install+virus+on+computer&FORM=R5FD1

Score

8^/10

bootkit discovery persistence

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
302	3460	msedge.exe
318	1564	avg_antivirus_free_setup.exe

Uses Session Manager for persistence 2 TTPs 1 IoCs

Creates Session Manager registry key to run executable early in system boot.

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000006900630061007200750073005f0072007600720074002e0065007800650000000000	icarus.exe

Executes dropped EXE 6 IoCs

pid	Process
1564	avg_antivirus_free_setup.exe
5416	avg_antivirus_free_online_setup.exe
6088	icarus.exe
5456	icarus_ui.exe
2592	icarus.exe
5212	icarus.exe

Loads dropped DLL 4 IoCs

pid	Process
1564	avg_antivirus_free_setup.exe
5416	avg_antivirus_free_online_setup.exe
5212	icarus.exe
2592	icarus.exe

Writes to the Master Boot Record (MBR) 1 TTPs 5 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	icarus.exe
File opened for modification	\??\PhysicalDrive0	icarus.exe
File opened for modification	\??\PhysicalDrive0	avg_antivirus_free_setup.exe
File opened for modification	\??\PhysicalDrive0	avg_antivirus_free_online_setup.exe
File opened for modification	\??\PhysicalDrive0	icarus.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\system32\icarus_rvrt.exe	icarus.exe
File opened for modification	C:\Windows\system32\icarus_rvrt.exe	icarus.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-errorhandling-l1-1-0.dll.ipending.a666d464	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\x86\snxhk.dll	icarus.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5248_1246337978\_locales\ur\messages.json	msedge.exe
File created	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-conio-l1-1-0.dll.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\locales\he.pak.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\libcef.dll.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5248_1246337978\_locales\hi\messages.json	msedge.exe
File created	C:\Program Files\AVG\Antivirus\RescueDisk\aswShMin.exe.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\CommChannel.dll.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\aswavdetection.dll.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\aswdetallocator.dll.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\AvDump.exe.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\vccorlib140.dll.ipending.a666d464	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\Licenses\Detours.txt	icarus.exe
File created	C:\Program Files\AVG\Antivirus\Inf\x64\avgNetHub.sys.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\locales\ta.pak.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\locales\it.pak.ipending.a666d464	icarus.exe
File created	C:\Program Files\AVG\Antivirus\locales\sl.pak.ipending.a666d464	icarus.exe
File created	C:\Program Files\AVG\Antivirus\d3dcompiler_47.dll.ipending.a666d464	icarus.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5248_1246337978\offscreendocument.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5248_1246337978\_locales\lo\messages.json	msedge.exe
File created	C:\Program Files\AVG\Antivirus\Licenses\ICU.txt.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\browser_pass.dll.ipending.a666d464	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\x86\aswBrowser.dll	icarus.exe
File created	C:\Program Files\AVG\Antivirus\aswCmnBS.dll.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\mfcm140.dll.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\Inf\x64\avgVmm.sys.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\locales\id.pak.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\gui_resources\default_av\locale-da.json.ipending.a666d464	icarus.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5248_1246337978\_locales\fa\messages.json	msedge.exe
File created	C:\Program Files\AVG\Antivirus\event_manager_er.dll.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-locale-l1-1-0.dll.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-utility-l1-1-0.dll.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\AvLaunch.exe.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\AvBugReport.exe.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\gui_resources\default_av\antiTrack.js.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\burger_client.dll.ipending.a666d464	icarus.exe
File created	C:\Program Files\AVG\Antivirus\aswW8ntf.dll.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\vcruntime140_1.dll.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\OobeUtil.exe.ipending.a666d464	icarus.exe
File created	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-file-l1-1-0.dll.ipending.a666d464	icarus.exe
File created	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll.ipending.a666d464	icarus.exe
File created	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-synch-l1-1-0.dll.ipending.a666d464	icarus.exe
File created	C:\Program Files\AVG\Antivirus\gui_resources\default_av\help.js.ipending.a666d464	icarus.exe
File created	C:\Program Files\AVG\Antivirus\gui_resources\default_av\tuneup.js.ipending.a666d464	icarus.exe
File created	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140_codecvt_ids.dll.ipending.a666d464	icarus.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5248_1246337978\_locales\mr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5248_1246337978\_locales\th\messages.json	msedge.exe
File created	C:\Program Files\AVG\Antivirus\x86\ashShell.dll.ipending.a666d464	icarus.exe
File created	C:\Program Files\AVG\Antivirus\gui_resources\default_av\threat.ogg.ipending.a666d464	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\libwavmodapi.dll	icarus.exe
File created	C:\Program Files\AVG\Antivirus\locales\de.pak.ipending.a666d464	icarus.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5248_1246337978\_locales\cy\messages.json	msedge.exe
File created	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-math-l1-1-0.dll.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\gui_resources\default_av\software.js.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-heap-l1-1-0.dll.ipending.a666d464	icarus.exe
File created	C:\Program Files\AVG\Antivirus\locales\nb.pak.ipending.a666d464	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\aswhook.dll	icarus.exe
File opened for modification	C:\Program Files\AVG\Antivirus\snxhk.dll	icarus.exe
File created	C:\Program Files\AVG\Antivirus\Licenses\Detours.txt.ipending.a666d464.lzma	icarus.exe
File created	C:\Program Files\AVG\Antivirus\RescueDisk\waikamd64.mst.ipending.a666d464	icarus.exe
File created	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-fibers-l1-1-0.dll.ipending.a666d464	icarus.exe
File created	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-interlocked-l1-1-0.dll.ipending.a666d464	icarus.exe
File created	C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-processenvironment-l1-1-0.dll.ipending.a666d464	icarus.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Embeds OpenSSL 1 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

resource	yara_rule
behavioral1/files/0x000700000002471e-3747.dat	embeds_openssl

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	avg_antivirus_free_setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	avg_antivirus_free_online_setup.exe

Checks processor information in registry 2 TTPs 11 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	icarus.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	icarus_ui.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	icarus.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	icarus.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	icarus_ui.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	icarus.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	icarus.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	icarus.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	icarus.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133876613820381480"	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1279544337-3716153908-718418795-1000\{64C0D74B-623D-4448-A4FB-ECDBEED6501C}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F	avg_antivirus_free_online_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\7CCD586D-2ABC-42FF-A23B-3731F4F183D9 = "65F115A51CCCDBF623206AEDE3B3D8A4"	avg_antivirus_free_online_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\5E1D6A55-0134-486E-A166-38C2E4919BB1 = "AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAbVy1WAIVTU6+ZjApuNtfDAQAAAACAAAAAAAQZgAAAAEAACAAAAAEj/AK08crI0AAvlHm7zyGnFzuUvvp3FG1mwZfU3d3zwAAAAAOgAAAAAIAACAAAAD1qB1chUrFqZLqLzNn1k3WfFuquIxPS1rQVB+FhD+rRjAAAABu/jlA2O1Kr3w1l6qqtDVbXhXwOhtqGCX/Pkag556AY/ibuZCb/JuNDDs3dLHs8cFAAAAAufzn6912XfvvNAkWWgpi/ZD517K7/NdEVRzkld2ef4w7DEAS6mzDTLzmFUtgM8vmldTZdQNTKyr7B2kviIYCZw=="	avg_antivirus_free_online_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\56C7A9DA-4B11-406A-8B1A-EFF157C294D6 = "12a6475c-3fa2-46a5-bd21-97d36ac20195"	avg_antivirus_free_online_setup.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5456	icarus_ui.exe
5456	icarus_ui.exe
3716	msedge.exe
3716	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe

Suspicious use of AdjustPrivilegeToken 28 IoCs

description	pid	Process
Token: SeRestorePrivilege	6088	icarus.exe
Token: SeTakeOwnershipPrivilege	6088	icarus.exe
Token: SeRestorePrivilege	6088	icarus.exe
Token: SeTakeOwnershipPrivilege	6088	icarus.exe
Token: SeRestorePrivilege	6088	icarus.exe
Token: SeTakeOwnershipPrivilege	6088	icarus.exe
Token: SeRestorePrivilege	6088	icarus.exe
Token: SeTakeOwnershipPrivilege	6088	icarus.exe
Token: SeDebugPrivilege	6088	icarus.exe
Token: SeDebugPrivilege	5456	icarus_ui.exe
Token: SeRestorePrivilege	5212	icarus.exe
Token: SeRestorePrivilege	2592	icarus.exe
Token: SeTakeOwnershipPrivilege	2592	icarus.exe
Token: SeTakeOwnershipPrivilege	5212	icarus.exe
Token: SeRestorePrivilege	2592	icarus.exe
Token: SeTakeOwnershipPrivilege	2592	icarus.exe
Token: SeRestorePrivilege	5212	icarus.exe
Token: SeTakeOwnershipPrivilege	5212	icarus.exe
Token: SeRestorePrivilege	2592	icarus.exe
Token: SeTakeOwnershipPrivilege	2592	icarus.exe
Token: SeRestorePrivilege	5212	icarus.exe
Token: SeTakeOwnershipPrivilege	5212	icarus.exe
Token: SeRestorePrivilege	2592	icarus.exe
Token: SeRestorePrivilege	5212	icarus.exe
Token: SeTakeOwnershipPrivilege	2592	icarus.exe
Token: SeTakeOwnershipPrivilege	5212	icarus.exe
Token: SeDebugPrivilege	2592	icarus.exe
Token: SeDebugPrivilege	5212	icarus.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5416	avg_antivirus_free_online_setup.exe
5456	icarus_ui.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
1564	avg_antivirus_free_setup.exe
5416	avg_antivirus_free_online_setup.exe
6088	icarus.exe
5456	icarus_ui.exe
5456	icarus_ui.exe
5212	icarus.exe
2592	icarus.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5248 wrote to memory of 1112	5248	msedge.exe	86
PID 5248 wrote to memory of 1112	5248	msedge.exe	86
PID 5248 wrote to memory of 3460	5248	msedge.exe	87
PID 5248 wrote to memory of 3460	5248	msedge.exe	87
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 2712	5248	msedge.exe	88
PID 5248 wrote to memory of 5552	5248	msedge.exe	89
PID 5248 wrote to memory of 5552	5248	msedge.exe	89
PID 5248 wrote to memory of 5552	5248	msedge.exe	89
PID 5248 wrote to memory of 5552	5248	msedge.exe	89
PID 5248 wrote to memory of 5552	5248	msedge.exe	89
PID 5248 wrote to memory of 5552	5248	msedge.exe	89
PID 5248 wrote to memory of 5552	5248	msedge.exe	89
PID 5248 wrote to memory of 5552	5248	msedge.exe	89
PID 5248 wrote to memory of 5552	5248	msedge.exe	89

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://www.bing.com/search?q=install+virus+on+computer&FORM=R5FD1
1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x23c,0x240,0x244,0x214,0x24c,0x7ff80de5f208,0x7ff80de5f214,0x7ff80de5f220
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1752,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2272,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2596,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=3496,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=3568,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --field-trial-handle=5004,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --field-trial-handle=4836,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5092,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:8
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5112,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:5400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5528,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:8
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5816,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5816,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6040,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6364,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=568,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6360,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5896,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:8
  2⤵
  PID:5324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5072,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  PID:5632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6376,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --field-trial-handle=5848,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:1
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --field-trial-handle=6296,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --field-trial-handle=5248,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:1
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --field-trial-handle=6668,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --field-trial-handle=6136,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:1
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --field-trial-handle=6828,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=6924 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --field-trial-handle=7052,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:1
  2⤵
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7260,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=7280 /prefetch:8
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6980,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=7224 /prefetch:8
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --field-trial-handle=6728,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=6964 /prefetch:1
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6348,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  PID:5072
- C:\Users\Admin\Downloads\avg_antivirus_free_setup.exe
  "C:\Users\Admin\Downloads\avg_antivirus_free_setup.exe"
  2⤵
  - Downloads MZ/PE file
  - Executes dropped EXE
  - Loads dropped DLL
  - Writes to the Master Boot Record (MBR)
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:1564
- - C:\Windows\Temp\asw.6e405fb29634c519\avg_antivirus_free_online_setup.exe
    "C:\Windows\Temp\asw.6e405fb29634c519\avg_antivirus_free_online_setup.exe" /cookie:mmm_bav_013_999_i9c_m:dlid_FREEGSR /ga_clientid:5ca8a9a6-dfb6-4c6b-942c-c97fdbfa437a /edat_dir:C:\Windows\Temp\asw.6e405fb29634c519 /geo:GB
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Writes to the Master Boot Record (MBR)
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SetWindowsHookEx
    PID:5416
  - - C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\common\icarus.exe
      C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\common\icarus.exe /icarus-info-path:C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\icarus-info.xml /install /cookie:mmm_bav_013_999_i9c_m:dlid_FREEGSR /edat_dir:C:\Windows\Temp\asw.6e405fb29634c519 /geo:GB /track-guid:5ca8a9a6-dfb6-4c6b-942c-c97fdbfa437a /sssid:5416
      4⤵
      Executes dropped EXE
      Writes to the Master Boot Record (MBR)
      Checks processor information in registry
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of SetWindowsHookEx
      PID:6088
    - - C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\common\icarus_ui.exe
        
        C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\common\icarus_ui.exe /cookie:mmm_bav_013_999_i9c_m:dlid_FREEGSR /edat_dir:C:\Windows\Temp\asw.6e405fb29634c519 /geo:GB /track-guid:5ca8a9a6-dfb6-4c6b-942c-c97fdbfa437a /sssid:5416 /er_master:master_ep_7cb05655-68eb-4184-9125-d00d00fe45b9 /er_ui:ui_ep_cb395280-c36f-41ea-8a23-76f6b283ace8
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of FindShellTrayWindow
        Suspicious use of SetWindowsHookEx
        
        PID:5456
    - - C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\avg-av\icarus.exe
        
        C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\avg-av\icarus.exe /cookie:mmm_bav_013_999_i9c_m:dlid_FREEGSR /edat_dir:C:\Windows\Temp\asw.6e405fb29634c519 /geo:GB /track-guid:5ca8a9a6-dfb6-4c6b-942c-c97fdbfa437a /sssid:5416 /er_master:master_ep_7cb05655-68eb-4184-9125-d00d00fe45b9 /er_ui:ui_ep_cb395280-c36f-41ea-8a23-76f6b283ace8 /er_slave:avg-av_slave_ep_fea7d750-8d5c-44fb-bb0b-03c68753bfb4 /slave:avg-av
        5⤵
        Uses Session Manager for persistence
        Executes dropped EXE
        Loads dropped DLL
        Writes to the Master Boot Record (MBR)
        Drops file in System32 directory
        Drops file in Program Files directory
        Checks processor information in registry
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of SetWindowsHookEx
        
        PID:2592
    - - C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\avg-av-vps\icarus.exe
        
        C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\avg-av-vps\icarus.exe /cookie:mmm_bav_013_999_i9c_m:dlid_FREEGSR /edat_dir:C:\Windows\Temp\asw.6e405fb29634c519 /geo:GB /track-guid:5ca8a9a6-dfb6-4c6b-942c-c97fdbfa437a /sssid:5416 /er_master:master_ep_7cb05655-68eb-4184-9125-d00d00fe45b9 /er_ui:ui_ep_cb395280-c36f-41ea-8a23-76f6b283ace8 /er_slave:avg-av-vps_slave_ep_8d7f33b8-c276-44b1-8ee2-afcf4407972e /slave:avg-av-vps
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Writes to the Master Boot Record (MBR)
        Checks processor information in registry
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of SetWindowsHookEx
        
        PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7344,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=7244,i,14359614042557789363,17199734436318092759,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3716

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:5680

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
  2⤵
  PID:4908

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\AVG\Antivirus\AVGUI.exe

Filesize
9.4MB

MD5
e877a8f5519e622b46b1f8f1697e2b54

SHA1
4bd4fedc6812f1b84b72235942b65c53b9749d22

SHA256
7ee4e4d4d81ebbd2a66adb93ca549d86cb41ff1540a32d1bba48a888852e8c72

SHA512
25c1ab96868b7d28a84bfa043b6bb621ff4b5e8655dd78406a226a42e03e2864625ff7e99a3114fb93a8f76aa87b14616cb5993daf7887d6cd3f432a6230ad31

Download Submit
C:\Program Files\AVG\Antivirus\AvBugReport.exe

Filesize
5.8MB

MD5
957525918ad2976491655197fd47e494

SHA1
495fce70cb53ca8d605b6105446385178571a937

SHA256
28aa3caac7db5e3cf824f1f7636028829784805a7d97ddafd547f515f44bb042

SHA512
d6f917699e60d674bb675bcad23973e4fac6cd6d9fd4d49f75d745f7cc1ed196b67a1e89aab1c4193a88eae27c853f48d3804cb95e6ef69ccf068a59663c1205

Download Submit
C:\Program Files\AVG\Antivirus\AvConsent.exe

Filesize
803KB

MD5
6f7ba1d2d34c89f490f1377d3b10196c

SHA1
348c86c7f5ea9d25cdebd942356668bc472204c7

SHA256
4b84dd6c021faeaf75682e52da57e14d4ea737093b19b477450acefc74b35561

SHA512
93494cf57ad5c6a30791aa28fdbf2e6c08c6413999ece1dfd937cce06f3a65c0590e843a111f3970cb6544f2e84d91c159b7a237dc28902373dfcecd36192922

Download Submit
C:\Program Files\AVG\Antivirus\AvDump.exe

Filesize
3.4MB

MD5
4885c2624830b352ebc62476d25b08db

SHA1
9c929f109cc9ba45435a42dfd2a19460baf835a4

SHA256
d816e6f25ace487e40a185988d4acb93e0af53602d2c59d6f1adc3cf7d82520c

SHA512
2837dc32b6455adfd0eaa6811037108fce156a78ba2dffec7a5fc9b01fca57c9f3f0b6341266eeae42cb04ad89c6d7d488130aae8938d80d3e935b51a4cdef31

Download Submit
C:\Program Files\AVG\Antivirus\AvLaunch.exe

Filesize
481KB

MD5
2c6b9d59d6fa8c822e2431d60ccd90d9

SHA1
929cadca0561a222e5c6c07491b8fe0fd697f5ae

SHA256
d34bd4659c9704a69676149a8f0aad50241e0452ac6d69811b8e714bfa350390

SHA512
07bafe17fef2b9b40fd9198c04b6440665b133d7f6a18bba5f50ae719b1e529368588181a9a55046cc1ef619184d96db93ad4631231f0536bf983c4747a89b8a

Download Submit
C:\Program Files\AVG\Antivirus\HTMLayout.dll

Filesize
4.0MB

MD5
e764713413d8f229bf6c52e9dd123765

SHA1
4638dc95a007654fd94316f84c3649f3a834fef1

SHA256
dea0ea3f84e70b06316a8ec6cd76ce1caa14f15e8754007eb6971256cfd45a70

SHA512
78d6b4249476726e29204c86b11dff6ea7ed0e5672ef9a4eb373fd2943e22fa3b6ef2a131e30545176a58f9979f7e3cd49c88a1457099f4c85cbd6003a78d11e

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgElam.sys

Filesize
27KB

MD5
66f3f6caaaf57adb0f430362fd1a265e

SHA1
a2869324311368df8a9a1db7b0c5ca9c198926d6

SHA256
7cf01839a3d7d7150f6f6233fdb3f43eb4c61f440fdfcb49f7c9d1a3e2a88290

SHA512
2ab4a59ff1891e4a086f00711b3c1c80ef6b0a1e88c467c153e3ee11bf4c4a3456c62a52c3400c38f97182a52056ffd353f7f6e0eb4cf933a734c1433c0a7c5c

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgKbd.sys

Filesize
37KB

MD5
facc82cb021cefa610b5935fa5d8c315

SHA1
45b8f91a9fb645bcfe12232df67029f4585e8db8

SHA256
5c3227784a0af362787b35efa9068185e9ffb3150d7d9af67ccce42ec3ad79b0

SHA512
337daddf1b0313923dd0f94db4547b8b9705c830f0bf38b735f7c3afaf2a7aa8c3feac373adef665f4bc592465dd476c60e29eef14e24b8d352dbe6a0e47858d

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgMonFlt.sys

Filesize
272KB

MD5
2d73f5403c7124e5526b21b29603e849

SHA1
9e3f57172ce082990d805ae7fafa26531dddf496

SHA256
3f1eabf04b2b3d921ff0d76ef7cd3d5ff920fd688f60debfc6a321654d0e466c

SHA512
af9560a2684cf25c524d62ee36473dcb66d85eb62e4b96a2658773d34ed92f99b1c6cee6ebf48d97ede55bc3e0c630f5061482adaf0534118cb104f94f4556bb

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgNetHub.sys

Filesize
540KB

MD5
4909a0efb7e0cab519cad35100b9b5c9

SHA1
207d1232fec1ef800158bddccd98350a0120ab1b

SHA256
c166efcd0229c2fc3985dd490a467c72b86b993b40cbb37ba00bdec46e981930

SHA512
e7fb358ce808a2f077434f863a4f2352c11f41d2cca0698797399810f8790dfee974affa80ee187852966e123ce2df21895c2d3d18f5543a6154d1ba17b13589

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgRdr2.sys

Filesize
96KB

MD5
23c63f84d0188d6ac0d7b00189d26ac0

SHA1
0494699bbc717762f5f488807f8735fc3b1fe509

SHA256
e295807eaadd8def2a112b0d6dde6cdeb2f66916cea1a88511d9d9277738039f

SHA512
8452630d94ba0dd49d50509e48077230bd87f8a7c162fafb9af5d24a8c3e4d84222d36ac4eeaf6a6ca4dbd47f00f2a72ff1977b4f805aeb342c5a9da1a1720f5

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgRvrt.sys

Filesize
68KB

MD5
229153ce11461805416c8056078c4876

SHA1
f6ae2b786d7347793deb91f23bb26b1579e6100d

SHA256
b8adc689896447acd94b76154787bede3f5eb7244e04bb7931655a56d3cf3865

SHA512
e849904e49717e24e23715d8db7cb66f3b9c873ae147539eb207580183718c8098b0904fb1c7aff71b187fef36123071b1c55ca8eeb0904e1074634a75ca96e0

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgSP.sys

Filesize
1.4MB

MD5
763d7b26a214caf4867b5521f7b0b980

SHA1
16760355a5e5154f776ae587b61a56c25fa83349

SHA256
4bb32859fa6fe5bec4fabec794c996a1055064f996155a163750f39a6f28bb3b

SHA512
e3948a1c775714e2de07bdbd5caaf7c211809ce24259fb086a901bfe7c240191857e59aa2f62a005d515b93a96ed0883ee353808bdd0451c621035750b014c22

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgStm.sys

Filesize
202KB

MD5
88c887cf3484efc77c6fc08f67f15f9d

SHA1
bf9d60a4c2633a5150f0c158fe2cad232745fcd5

SHA256
b50d552e1112bf7b7fe8f4b0d962f53c9747ba341369b0f2e63a660b7c37fd36

SHA512
ad93d615d351be49c3973d5682f0ecee14e0dd8c5220103bc24bc81f4668a1fb8d1826aa2ea6be2103032559770d921330235ad725716192d57694823653bf3b

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgVmm.sys

Filesize
380KB

MD5
d7901ff8754148abc873acc3dcfbb2be

SHA1
fe1c1ec5e7733f83f2bd6da32eb0a5f14901d81a

SHA256
f7e75922349963890265b8a5d13e9332d6ee7c4a34c5e9c493a176fe26cc2538

SHA512
a34dd0b1ca5261e3888ccc7fe6886216f6739986fc65ca1dddb416ab5698a39413146a7e3dd571187f683adac880935c4911daabd0ca1b29ce6890247ccc0be1

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgbidsh.sys

Filesize
289KB

MD5
172788db2750e0cae1acd5291572a730

SHA1
c93fab763c470efabab2d2d319c485005f9c66c8

SHA256
d0fa46e9332109c8e8eb2fb8dcbe16f3558b7a47b73c01c212e2d002d93963cc

SHA512
c70d2d5e55fa45014ff9356b9955d2e9d55ebf3f1a0c7696bc7a004bc772db3fc5b60f2d373e091ab0e2eccd39fd9f5aa06cf2bcafb52934f9af2a1892ed43d6

Download Submit
C:\Program Files\AVG\Antivirus\Inf\x64\avgbuniv.sys

Filesize
82KB

MD5
5ec28354ae003625148dd9fede6e4489

SHA1
82460b61d95b29ce2aaa9b1981fb190b724afb4f

SHA256
257ee845f819dd1f9bd224721ee6ebaecedc5373760c8978a14f3e45f4f91a96

SHA512
b7c63907bf2fa547552386439e7a92bb571086307511dd2b055a4a8183e2f0a8a67a1f930ece8c86b29036a720eda44b72be35d98e1d5577498f470831ef13a7

Download Submit
C:\Program Files\AVG\Antivirus\Licenses\brotli.txt

Filesize
1KB

MD5
7df5cd81700618ef9926feb32290d2af

SHA1
4763ba7dfa7730d98b190dd8a4a2c6818d301fcb

SHA256
60ae0f13e76cc2eaaa108677eefa4ce16b647f6bbe8cf0a1ac9429d82eca7248

SHA512
92c0bbdc5155d6e218682840dde38697327973b8f45e0c6d100705601449a6f1f8eba74cef8bcadf09ea945602b378bc64e81885f40965fa038d7974a71e5641

Download Submit
C:\Program Files\AVG\Antivirus\RegSvr.exe

Filesize
3.9MB

MD5
a090b4f5a09b291ebdd49a62f6b407bb

SHA1
42f23e3095e21d319142e79e51b726bf82386ca4

SHA256
f63afd97bfcf617f39d680bbc76f82ea6593ee2d1cfa477ff83537f78bda47ff

SHA512
8bd3a6549b20a59d49c16694e489787622532361fadc60ce679dde9e9aa123d455f55ca20ea0b434f180dede65ee5b282c2b721063b873762abc39cdbd31f033

Download Submit
C:\Program Files\AVG\Antivirus\RescueDisk\aswShMin.exe

Filesize
454KB

MD5
4fd6d06c325cec4a479db9e89228c651

SHA1
d3218743945b3f3d57369e224eb73dc393422b0e

SHA256
b363cb8208620c3baec9963c7f9b2a86ebb0c88ee0762f2ce1614fd7b87319be

SHA512
18b1b88741b40333a71056e844c2244122c74cb3e87479b2a3f638234bbd092a21f6a1bf3fe7555fcbb36e6a0fcb9102ae6a517c70501fa3f6424143f3279d9e

Download Submit
C:\Program Files\AVG\Antivirus\SetupInf.exe

Filesize
3.9MB

MD5
46fb81194f37c2158eccbc8ef1370b24

SHA1
39b2a5da01093a796360ced8ece7cf1bdeae9fff

SHA256
3a739c0674233a2b074e12f8546da27601bd7ac14b28d1174a2c30cefc4bdb93

SHA512
8d3712b8792c5631a12e21145e0aae53b7c341af832f48a3c24910f0a0d8f8feafefb9c154694a31234db435dc8c269b3e11c50dc868a1519b2456950c3cd48a

Download Submit
C:\Program Files\AVG\Antivirus\aswRunDll.exe

Filesize
3.9MB

MD5
2982b7266078a129f62f00a3fbdc328b

SHA1
083634bbd526a243d2961de85cdb7d333ec3705c

SHA256
dce7d8b7fb2581de5c4ec3702648b1f0e69a3c83a561a708e92e21f301d71489

SHA512
a169dc2663a4e4997a7c1190a41490c7424551a059417fd3fe12424fad631af7a2c50954a3b6c10bfc4b025e88b53a037e2b722f6d11e1be51d0179b96d98022

Download Submit
C:\Program Files\AVG\Antivirus\aswVmm.dll

Filesize
263KB

MD5
183e2a2b7c8b3f58eb16471e9e61ffc0

SHA1
57ffb686fbf8ffcccc2ad75a7908dac956f3d5bf

SHA256
f07f9d4fd61b9a28841e1417c886551685a4e7239975cf017e5671a3e72a03aa

SHA512
868426ddfa0b09661a2f4f0ebdf3ca2a385c9648e59d6de3cddc1804f2550098915a9d7ba44d7dad594bfe150352830c7ab4f9e59f76d8e2af9a7c6110764424

Download Submit
C:\Program Files\AVG\Antivirus\aswavdetection.dll

Filesize
1.7MB

MD5
36792492f4b65f96b27a64cea9909aab

SHA1
c5a0db9ff551605429909fd9842cc76dda2d7d67

SHA256
a9d38b28135f5347d5fdf665eac54cbd15c020a7ed1f9c81d4ac4053995e254c

SHA512
a29f3ee52b862acc4aef393e86ba2285f70a6c56d69605670555d90aadc5d79a8597924e4e3ea13d32a20bba05233efff7017f358383dddfc026971247bb451c

Download Submit
C:\Program Files\AVG\Antivirus\aswcomm.dll

Filesize
928KB

MD5
c6035d69de1563d7d8e3c08483692258

SHA1
3ec2bd1924d26efd2a264b0849bc5a6193032525

SHA256
8ed1633a351b13266656ca6595ba619aeb2c60b79736fec26d1b48422f116b3c

SHA512
c6aca41e03b573e5af88cafe6356eceacfe5fd873720baac94ecf24a6a3adc9bb120d7f9d9624268be8d425bbcb777fd3f311d057c4120396193d3e1246a5fdb

Download Submit
C:\Program Files\AVG\Antivirus\aswdetallocator.dll

Filesize
186KB

MD5
bc7880422e26f909094d8afaf7190022

SHA1
dc7a24285d6ad2eb1e3a31c69b5cd792fd84e985

SHA256
c4933dd9cdb5489ea2b5c19867052bdccca0e245b47b6f455a2a0a4113b65c97

SHA512
e25877c32410ff4c3ff25a7fdf6118a99fc69fa3705a527131c076bf803718608e5fcacf8413913228b3d7a4f0f8584c10c9a6ad3079d3ebb6ee6a80f3e29f2f

Download Submit
C:\Program Files\AVG\Antivirus\aswntsqlite.dll

Filesize
881KB

MD5
d285ed6bae46751c4eb8e502e9532a74

SHA1
b50ceefb6c45a84d71e74bfba0e8c633bdec1cbe

SHA256
2a184735ed0387d11a05c0b8b66fbae3a937e01c4302b8fd4d7ac174b7761da4

SHA512
302ecf59cedd2ad7f02bd6d46f40e6a9c3cb03ddd638546cbba2994407203118a284a29e9b5618cef84353d9ca6c9c9e68bbbb0664b6b0e21499637a7cf1b433

Download Submit
C:\Program Files\AVG\Antivirus\aswpsic.dll

Filesize
588KB

MD5
7ff1ac1e17aa36644085c9f57f073ea4

SHA1
22da475ed05f46a4f6878ca27026f263e73f722a

SHA256
e30ba4d8774a9071be04464c7db1a3dd55dfe2b79b8af470a685ce2f3deab665

SHA512
a342f187b43c72738ae342677a2df298751e97ee4ac6ea9fa299cc483fb9f13dc9c27f44c2f7183b569469aee1fd29871d5aa675e10c73603c10abca6d2f9959

Download Submit
C:\Program Files\AVG\Antivirus\aswremoval.dll

Filesize
3.3MB

MD5
0a21fd0632e9954c1508f43c87a8712b

SHA1
a5054cde40bfaab5db73b3122360a6b19627df26

SHA256
aa565841128ca54fe8019523043fe528ad30251974ad02e94c8b4592ca0dff3c

SHA512
f39a4fdead2c17c94d85f24850623069d34c2962b306450f76779e24df75611b3b150a431bce51ebd820ef31a85f272a1f7e263b7c6ac9d2d2de6db78bfc650b

Download Submit
C:\Program Files\AVG\Antivirus\aswsecapi.dll

Filesize
1.8MB

MD5
ed9a2c4e757193f3e4bce781ef264273

SHA1
cbd00c798d0bcf692b3616b231476fd8416c2b72

SHA256
d803e0b0d80101be533d3404eaf6201a59c255452bc60d8eb98c81b9086ad3c4

SHA512
67d2802bcf9aeef1ca8b4e45838847eb14fac9c6321d539f7aa9ed7ad1cc009da7aa78f9b317e42c906cb49aaf0967604c177fd5b94abccc9f86a26a58bdaa02

Download Submit
C:\Program Files\AVG\Antivirus\aswwinamapi.dll

Filesize
124KB

MD5
a661c1f06d5b270c63f9b82a26b243e8

SHA1
8890619e482e18f5f160499094d590edf277d210

SHA256
6bf187c1c5105af7c1a1a39ced720ce660a6d359532f1ea839c08900e18fbb65

SHA512
3c53fe3c93453d5e4e83db67df7effc152200472d51631e77e79ffd25ef1db396dfbff2552ff2c896e699ce6db56e9f7bac8246e039568b0e2d7e6e9323feb1f

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-libraryloader-l1-1-0.dll

Filesize
21KB

MD5
6337654372aa9adf6a8fc97d9676a33d

SHA1
b790f4828e7aa18cd0eae77e78c67ddd66f3ec5e

SHA256
6fc551cfbcaa0f90ed24dd09fa117e9fb3b6755a3fc0251d33ca64862a9a3414

SHA512
4a888d71747c64cb4a964d8df956c5ed9e3de9e8cf30d804e3ba76e8c35502e1802423ce527a419935b0d8c8e4c0f6168657b2734ab79d01afc946521a88d528

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll

Filesize
21KB

MD5
d4bad006e413ace7d729b1249c49b92f

SHA1
cf0dff1b371316c8517619fdeff81c583268bad3

SHA256
245d48bfce5cf6e9c5093e995d6ab5988e2401d32530fd6863bd5f8fd688d780

SHA512
d1a5001633f1cce60db2687da28706f66644613672fa8487b065e3aa8d77ddcc96d9272c665d894b243e222e1c104be10be1dff8e5d007490e50f2bd2a708d0f

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-memory-l1-1-0.dll

Filesize
21KB

MD5
714e850aa29e808568933c5ed8c7df5a

SHA1
ad84833bcac69b5217705e1c4d33d54c856525e1

SHA256
4a244eea4596ebde0f9094cc6dfeeb5abb3c4385225bb0630ef55a431fe1c4f2

SHA512
3a220ad4e2fd49f40f7fe5fdfc53608b114661f31993c0329e993c5d733b6d6f3a366eb46f93aaa9d5cad90766b21d85e5ccd09cb9c5ab905118d70702a3ed11

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-namedpipe-l1-1-0.dll

Filesize
21KB

MD5
9ad2e67f2b1f04b760deb00b889fab53

SHA1
465314c9bdd359840f7da11a619ad0b409c271d8

SHA256
5662035361e37f6c5e4a5a19de134df2ec20bd4c0f1be803203b37c95ee61265

SHA512
cdb358848d48cd3913e7249eaa45470bee4ba9f9d92d975215018477a57db930c16b349541da2d82a2f9131220ec3b3cf9ff471ca411c2f705bfe916e8736be5

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-processenvironment-l1-1-0.dll

Filesize
21KB

MD5
772d6c07e47e77a4479c7a9eccfeac4d

SHA1
b88db71fc80eb57182db6dc6ac00b022e1e47cb3

SHA256
2c9a8f8d47b49d04a82e8e689ae9f6552482b1861eb8398f3733e97327191c2a

SHA512
f87bb803e818372f57319af97227834673cce9988c81ffd4a3d1c6d7038c6f7398e06a7133a17f063cae152ad27666a6d18f87ed77bb46dbe141c1272bc3ac84

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-processthreads-l1-1-0.dll

Filesize
21KB

MD5
9ac788a87032640e046f305413585503

SHA1
41b74cecf0f78134204dd3d8aaddfae34d6aacbb

SHA256
363825adb27d5a5bd249fe58460a977077f823e50dac7509e124fcbac1512128

SHA512
cc725796af3f7793ce6e6faa96a201ebf5e77ed00dfac3211a66a95ee071e559c9efb8e47ae0287d9cc1feded559000a582a2138736ab8c628325428c78e648c

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
21KB

MD5
31f60bf9a22a86cb8879fce5c1022254

SHA1
23cdaa4d6ae0e953d083b968558a2af49bf95a4f

SHA256
53afac76a7124a132a7c11261f3b6ba8d6a5466e7e8f683c8d12ac370b7d6b62

SHA512
c41ebb39cc0939b38d788b692e75c10c78a806cc8844d8526ff25869777eefd086518cfd817ebb700e20b3937401d6c0f7f506bcd479fafe1b801507376f4ba6

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-profile-l1-1-0.dll

Filesize
21KB

MD5
948e3c479e87ad905a3689bc94cbf86b

SHA1
c9b2dcc45feb9b0bcd52122b51adf98d7fa5b0e5

SHA256
982fcc32d7614cb921cc5203970e3997a33b31aa1d91f14db5db25a582dcc3af

SHA512
6f15478ba5e7b403580b4b52924866e52adcd112d82900dd17a2ce67efa10306a5a86e1ba5cab76bbe3577e2497b83adafd6cf6c39a81c35b53b528e8bf6b440

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-rtlsupport-l1-1-0.dll

Filesize
21KB

MD5
57745a06849d90cd5c79ccbec559e7b5

SHA1
71d3d3c0998e648ef6b061f7c65850c6a2a8593e

SHA256
890dbb72c4c35266bd658c663c1242cfa3b50cf51e2873e986b7ab2e055af4a4

SHA512
ca28053575e40eb805f366a7363257b3d40a6fa8ef46ffb5b58ff17cfb0ea2668f5cdf2661355e94866b73b914950c09940f5c32fef5f9a22439932e35391dca

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-string-l1-1-0.dll

Filesize
21KB

MD5
1862f49d5c2ba7c2bbc78bc517cb0b38

SHA1
dbdca39d6d9d166f9cb5b8855d456653419136c2

SHA256
90ba9da43d6705d76905e630505bd1fd097d1899c9bca3241ad0de5ab08ee366

SHA512
c9c85ec2851f5b793de07e672365e6db28f1150ed6b6057d15be828a36029f4ba9e0d4cce12c7d424da4c94713c18ae256d9ecba9e59ab88af639adf56ed6a3b

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-synch-l1-1-0.dll

Filesize
21KB

MD5
afc4db1ae7eb74d1b43eda3d7ea5b43c

SHA1
f31b2c1161024ec2f89c72631631e11fd5ceac60

SHA256
fb4b382e2dfa80b3427a98c51d3270b1e80b5c2a10fdae1a72b7c464e57fc6a7

SHA512
a014e4bbe207fd707a87aaa0228241fa7c414062af8922f51e46210b958284096357b21f89e59141fef28039a999dc6ac832ec7fc38bc4895e88fbed6b9a45a0

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll

Filesize
21KB

MD5
5dedf9f86ba1366d9e920f33eb03721c

SHA1
605312ce6d623889a1d404354ee653414a7e4920

SHA256
0ced53f1ac2adc9525047d2c2a7592300dc48a5f52ad8b740ce22e3f3aad85ff

SHA512
bed8c7a74e57f4cd44bd0edbc1bbb1f528ce261d7ad6a5545c33974c223ba910d648f0cbea8bf0736deb5aedd3b257f373cbbc4f9765d12c56a78e823d05d4b0

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-sysinfo-l1-1-0.dll

Filesize
21KB

MD5
177009944ea3860b58c09da1871db999

SHA1
01cf9cab3aec3a1ea89111269f8cb036e73916d6

SHA256
f353bfe02e30f4fd5cdc89bd7f44703257f229a09f0d815d7794df902f67d1a1

SHA512
279d1e663ecc151dd2dd15462191ef41e668c7a2bfcb7930b8d568facf7695a030948c3af7f9907226b00dede255a7f30169083ae2ce544f2381548db31c9981

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-timezone-l1-1-0.dll

Filesize
21KB

MD5
70f8acde94e2c3952b7ba7f56a4ebfb4

SHA1
955064391f0c9b41362cddbff7a070ab3888ad3e

SHA256
91decddc6e80d742755a1f65261d10c3c0d059aaea6389bb2da6fd3aa7ec5289

SHA512
71087a283d560f08e43b1a183258f1153ab5091d5d318cf4ee0fc8385285592c377d8e68a0f06d3f0be84202aad6dc7376b56057e23b6b3753a445323580f287

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-core-util-l1-1-0.dll

Filesize
21KB

MD5
d91e6c55a2304aa59d24e76f34884535

SHA1
04ebc0bc4932c09c3dc7d9259fe7c9a6166b7233

SHA256
8875816a3809753c04acd961244608e9a47127523c1d5e50cddbd83a4627821c

SHA512
19c1e2458c5475de2b41013fb18dcf3d149c88c0b3816596b67c90f7bdced3d5214fea97dc3782f56f8a276f93fd28cf519018257bf432c00435ef6bae60a8b9

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-conio-l1-1-0.dll

Filesize
21KB

MD5
a1bee0af7bd944fae7f14174d9dfdffc

SHA1
ea699130cd63857569bf34826b9cbcb5ecfa1a21

SHA256
2c557f6a21db6c99af6184637b5efb57e44b40fae892230a43e96ab05ab27d40

SHA512
c6e9473ec6cdfc0bdd1b8f9f42bdcf3d31855b6e106b811ca52d2eca895328889451726fe12ecaf0af9a238d74c10e79bcf0870f056e7e85ccdb9be49f4515a8

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-convert-l1-1-0.dll

Filesize
25KB

MD5
b9d80efa3f5b0b75c523d4ced4da1fd2

SHA1
f493358454a273d0ddc6467c9ad82bf460dcebc2

SHA256
44ebde7f2681c0b8518e55ca242261b24f326994f089a4ef6c060f8dda04d62d

SHA512
d597c0e7c5309b9631966b01fff7e166c0dd0fc9d63534d588d47f9deee593cb2cf79cd490145aefd472b9493dd65144e875d5870742c8d09fa4c7d459259feb

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-environment-l1-1-0.dll

Filesize
21KB

MD5
6e245fdd89bb6f88f56784adbdca0b0a

SHA1
9ac5d68ff969f984f74e6a8cded8e683b98ffa36

SHA256
0e195a8d013a329a06df877a4569a3ec772f112ad29295f086c6d3e53f322fb5

SHA512
601248c38540dcbddd61fd26203df39ef5d450827570f01cdf0e415873e098913d82ca6e3c7b21a9bcae267b4cb67e970237cbd1c6320b8ffab58c9fb675a3cd

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
21KB

MD5
e4fcbf91666504c1eb70644dc4c5f479

SHA1
bf96622c082eec928920a052bff477cb0c9e0573

SHA256
58d9a9b2442c10140db98ba705e8c7b7b9ac5a2c030d3286a66debf63b615c1b

SHA512
9dd34f36144010b3c1400ed1b1db8ac8e97997a0d2c803858abeaca75e26d19dc56512714b566edee581ca20c813c3cafd47a3f774a1596b31e23208b1eee4f5

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll

Filesize
21KB

MD5
374d505ced3719d875ac316ce365b1d5

SHA1
24da4d65eb7a9116c626bf16c3bc95b563f10176

SHA256
1edf013e890072987b8957b77baecc37140bc01581e5de6b020ae454bb57f8bf

SHA512
d9b82d1679afd85c660ea985d6f57cc13fd35b4d7b8104c6d9ce1f182789b615a573b68d5f1da6c25682cb35068ae0aad3c1c9b4509f339fa1a83a9eeb7f74ca

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-locale-l1-1-0.dll

Filesize
21KB

MD5
152925be0e3a0ff77b0979bcae7a7583

SHA1
4ac4bb649b42893a8d5ba345a1c92ab2ddd1ddde

SHA256
2e23b53441ba6b0779b222c120d44eb9a156d55cc3648f76216017ef06f9a16f

SHA512
17b41057b82b1eb037a59715970496d402ac00a59fcbe67245203f117fc38f1b7e7f5b78872850ac4fd7a5dcf4a3ec561dfdb3fb0e827ec7043978b535e9ee26

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-math-l1-1-0.dll

Filesize
29KB

MD5
bf69d049653e504a7a1f8b55a6dde7bc

SHA1
737a1cbf1fddc0ae93a0a99d2feddd474f4b85bf

SHA256
e6e839c6d205f91adaa3d980f843bab3131b8a25e06d152d0f70a6e98fbe0fb0

SHA512
a8d834d46fcaf03aa53bd48b4cec816e0fd599b06b16a14006e402bfaa5a470f47dc6a55c1a94314d635af55ff2322eb242b0c535a02fc830dac83e375adc6a2

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
29KB

MD5
4847091828ad3b0734418343c712cffe

SHA1
24e69b32dba65631b92493b7aabd68d141cf21e3

SHA256
d9388848ebfe27138998518332bb507e5dbeb1d8851e9ed0300f15e14b6958c2

SHA512
5e8061cc226f3471e3964c04cdc5fbd3a607c9abd22a11a1e818eaec42b20ae873fa80cfce7f47b8f8844f3127ce98282c737f25666d20ded47704e0db6f29e3

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-private-l1-1-0.dll

Filesize
73KB

MD5
533b418afd2ef8e423f42d414cdaf5ef

SHA1
09d3a595bad8f0e7ab5604fc02ef832d11a26b88

SHA256
66f910721f4477ea238603e5c14c858d1e26fc2ceaab3b48294cac069790202c

SHA512
eb73c82a91ce67f8d0265ac4f0739849e5696ec0069ab6508660368b8d382a230dc88eeb89aacf8bc9fc6b7e31c009521fdeeb979f4ebe6e80cfec083129ccf1

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-process-l1-1-0.dll

Filesize
21KB

MD5
dc3fe259a9b778480c2405fdd7405c9c

SHA1
d28a588217738af932fc43b809add215eb932856

SHA256
b33a762f0eb072033044e7ee89505b695f357c958d4107ce6f1c4d68f88d3277

SHA512
54f58f5a0d1aecfb9a6c8f12b5aac30e26ec427dccc097f8015d690a0a2244603e80810c19fb8eb2ee7ae9122d14829b3aaa81c69c77b6b4c5751d040c3849f7

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
25KB

MD5
80e80532239aa8929ec0fddedb7aa8af

SHA1
312e743535e66735d782cbaffacf94c6c791edab

SHA256
d3641bbaeaa5a7e7d4ee0ee0ec64ccee0327cfba3d10b89094144eb70a0867a9

SHA512
87e7a5496bb2dfb9bed4e9b9913db2656b335b916eb1277ebebc33ac9d6622bed50a22293dcc02193f846be5e0b4b0f032dfbcc673955aa90f04cf81b47a9305

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
25KB

MD5
58a8c2d2404ad7bf6fca8bdfbb8a5b3b

SHA1
6e834364437bfd23b48e66d8d891966860528d08

SHA256
eb7851e182a4675bb34633869938ff3579779a92a6c094194efbc970f3765dcc

SHA512
d44e3b47dabd29621a3fadaed16074a46b646e1190ffcfffb7ec835b8cd6eefac88570812e41a490daae485a1d71fb2d035c91e73b65c2fbde649fda8733ceb9

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll

Filesize
25KB

MD5
d7164ae82b7332432bf2eb7fc7774e72

SHA1
221d79c77a8a80068621a0eb8688ddb86224408c

SHA256
08d811ff57efe50d9f365c76ec29e095474e0679e06bb4d0d4d0134b0120b40d

SHA512
d1a4cfc0a21509382606f4650a67556b0616283231e71bb1870ccaa5deba42fd77583c3130d60d632e98f5acc4763f57a2ed932aa2eeef49601618761acd9429

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-time-l1-1-0.dll

Filesize
21KB

MD5
6aa7b1323c5d8e314f2fb42f855e9b12

SHA1
044cd0167de5e9c1b014e07287c90473c96944a5

SHA256
9c5880c395b4e7db4b8d6de49c75909abdaeeef0b041c1703c7339b05d7d2866

SHA512
e99a14c8772662dbabcaa504bc61ef616590bb6f7384adf8ae0637e0a365f94c67fe4222b978605b7a2eeeaa62505e57c32857b17b51f4b2e9a0d8a033f0a204

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\api-ms-win-crt-utility-l1-1-0.dll

Filesize
21KB

MD5
7b7f4484966036ff86a7e4cd303d3871

SHA1
18a789e9d1e9df0fdf22e94d71a18c483cdeb611

SHA256
7d3d88332d4744c9b6be81e2ba8d42ced7657ce7879a26f5b8a8d3bb2331ada0

SHA512
39e986994a99361fadcccbf5bd861ce9c4c6de65ce5e3da4d390b234fff34d7c561637ec012ccdb2757794adc222bc80de19a60a8917fe65fc221fdb3054149c

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\concrt140.dll

Filesize
315KB

MD5
e6d7ff1c7c1311a9011f1039639adc3d

SHA1
d47faf7b6f8af8ed67546e75693200d022ebeccd

SHA256
993af3de5e1fe2e3d0954cf06254fabb91a5a3aa513183fe0841b897eafdaeee

SHA512
35eae324dc30a6bf652cf571daefa8d34d12c09361b248d8931ce721940347ed50a2d51222adaa655abbf9c5a0ab58d57cd91cb1cb26dabd487ed721790378eb

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\msvcp140.dll

Filesize
559KB

MD5
ebf8072a3c5c586979313f76e503aabf

SHA1
2fd9609f099a8f42b1b7ae40ad35be1569c0390e

SHA256
a030dc2dfd2eca28a9375c92989adf4daf161f988db5e16b9e10678eb0dff4c7

SHA512
438c2db953606818b843e42c04240d510b5e398617e8e5539498264f93cf1893ae9a6b6b02ee35b169ae60b0e3b5621d7d9f7e2945d0f1e7c2e7e0c1e9e3c1de

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\msvcp140_1.dll

Filesize
35KB

MD5
11d5d26552c1730ccc440f13a1fce188

SHA1
4c534eb613cb05455809b6471d38e1e0976aa919

SHA256
edfbcb2ced712f23842525cb076ee2c09cc7b811a389cf37922d04ef1985e10f

SHA512
2428c4257ac8349035ebb286dec236a25acdbf23178aaa80fd5461b2ed3101c0a67574bf7db8728d0c101d92f45dc72e7bc578049d5b18fac367bdfb44ecfbf2

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\msvcp140_2.dll

Filesize
261KB

MD5
718e5c4a63d2f941eeb1b4e9d6d85a8c

SHA1
deca5196d35d43c7abb35d9ad4b0ac0756585fd9

SHA256
f3117e3445945a872a35e91371e2a6c9f7b3fa5e74e5985f6ab12ac101b280fe

SHA512
61694ff307bcf3869dc14dac45e74b0cdd5a661d40e8483cfe96debe4727ec45ceef867d18e972d25a6b294c43ba0569562392b6752e068f2ba7c15407fad975

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\msvcp140_atomic_wait.dll

Filesize
49KB

MD5
f9c7a19dfc5fa60b1405c81208bd959b

SHA1
4eb70df0a412d79fbd8011fa17ef815e10189c0d

SHA256
2f9cdd965650440cebaf2349140a7dde9b587829b7753de8cd051933a777f499

SHA512
2ea1e4d7d63af427a0c764b4a9a646421dac1f1eba15c1d43bd040b284fc611c8059d889c48edfca56e745abb996939d8f430ff3e249a5c6455e81b520307a55

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\msvcp140_codecvt_ids.dll

Filesize
31KB

MD5
0f4e5f6c68c514e63c4cdae9eb9e40f5

SHA1
b755c91cb14e9f22c690209d0b4c3661ab20770d

SHA256
945225e01a65e5199aa7372b893da3b42dbd99f315c345f0e7c136af88e897ef

SHA512
8962e7f92446c535151b38a7e34bacbfb9f0f48ab57d4c2c8f2162dc2f1cd9f15be70742032192b41aa368c97a149e1e6fa6991e29077b7b7d7c1708f1a54f9b

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\ucrtbase.dll

Filesize
1.1MB

MD5
932dcb8d7d06f4b89fc3915726c418b7

SHA1
33a1fdbfc3dfa0a1b7d2fa3b2e8bad8e8c71e961

SHA256
a73bd7d75f368ab2fe949dcddbb25cd5d5975ff9091761a01b98f5e26de543ee

SHA512
fa24b5f9a4192fbfe737506899dc052c51f48980992cbdda878deef01ed0280ca455bed0c813089503da3ccac92a0289dd8fdfe64cbf6babdf70d7bab531540d

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\vccorlib140.dll

Filesize
340KB

MD5
22a66d8309244779b8a7f275a3ff5cbb

SHA1
195e58fec7a5d39fe7a6275dac37295777da1352

SHA256
aca79a9c1f6d664d99691fd0d3d84a8819993f784b2ff6d7baf8e8ab2e15e7b0

SHA512
b39eacf78b9b97d968e96e357725bd6cbad7592beef5e0e5b301189cc76847be49f8a5299a16d68bd5c1c2d0e86d5263f865b29b66df8360cb1d4725b7b00ac2

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\vcruntime140.dll

Filesize
116KB

MD5
699dd61122d91e80abdfcc396ce0ec10

SHA1
7b23a6562e78e1d4be2a16fc7044bdcea724855e

SHA256
f843cd00d9aff9a902dd7c98d6137639a10bd84904d81a085c28a3b29f8223c1

SHA512
2517e52f7f03580afd8f928c767d264033a191e831a78eed454ea35c9514c0f0df127f49a306088d766908af7880f713f5009c31ce6b0b1e4d0b67e49447bfff

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\vcruntime140_1.dll

Filesize
48KB

MD5
9410ee0771ff1c2007d9087a8c316a4b

SHA1
3f31b301b5a99a13486ddec08d25646d5ad510db

SHA256
e4e85eea1106d361923995e53a0b961a28d4fb58555f40945003f35e5bf2c273

SHA512
434a32ca6c4fdd8ffeb45d1bdb4d9f3c1b1259a1260ae66eb241f8bd63524cd1a3ec29d5eefa2d2f266dd740273e69b6bb8a7771badb77e781dc789dc18de2c9

Download Submit
C:\Program Files\AVG\Antivirus\avg.local_vc142.crt\vcruntime140_threads.dll

Filesize
37KB

MD5
268036dfa28320d2186b9b21631d443d

SHA1
96fa44f2214af9ede1160e043c7cd31b890b437a

SHA256
edb3ff7cef28496d535e40769625e542dd3e13110c38ce2e3dc1caa8687b892a

SHA512
99ce4bc5798320dd7f736725eb85a98553e277ab93353e1675fb7842bd258bb408a5df7bc530a161d91c1eccfcb510138f98085a80e892c3f54e2e8a723bb841

Download Submit
C:\Program Files\AVG\Antivirus\avgToolsSvc.exe

Filesize
874KB

MD5
836d60df35f8f5a8370812e2b33b53fe

SHA1
ed3a482a991335d0c93a0c75b5c7b86a4ad79f10

SHA256
1ec836925b5c93b87c4ee199aec680eb76ac3ad8730cd4586e0098cf2a9b8e02

SHA512
dd8099546a4e865efbe254f134290a37bc15e3dbccf3d5810be8c41ed472598140514a3b2899d1dd2c4bee642d89ed3016d033e0138b5be6b00ed13a5097a9f5

Download Submit
C:\Program Files\AVG\Antivirus\chrome_100_percent.pak

Filesize
768KB

MD5
8ebb97efd9cc5bd6c500ef6c7a9fa406

SHA1
8e285f1ffd650c87dc4a0ec26df418acc1fc8821

SHA256
aaaff8d6c9f0307c4eb3dda812f566300073414de002bcefb273a7be57f9e69e

SHA512
f93b72eb950d924b66bdd44713b631409003feef26f6146ef366f05312459ba2d2c4c720b3ad13594c8ee6c3734c53e4d1295eea064c03be313ae2f541105c89

Download Submit
C:\Program Files\AVG\Antivirus\chrome_200_percent.pak

Filesize
1.3MB

MD5
8f6d29ec5f29c02e8d7188366f0ef3ae

SHA1
7451e3cc4a7de1a53987c5cadf2a759269d99a40

SHA256
3e116ffe2f55faa2c2b96aee4da637e6424cb48bab27d9f94a958530f840c673

SHA512
418be962c4dcf92423b2bb780d3a7476756e16aa1b670167ed3631bbf7ad4edb1d35a04c5f8f685c5eb79edfe5a247403d25c6ef18f43eadf1192603ddb2b386

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\locale-fi.json.ipending.a666d464

Filesize
438KB

MD5
0b8d18096ee56ae69c5421e3be4d3a58

SHA1
77908ca79a887f6793fd447a5bda85862be81c97

SHA256
ca4ea1d0018e98994ea3ad1b599c4fb73e46067ebe0805a28ab03ecdf2bf06bf

SHA512
9c618d764647b6589ce521ce2a38554d120e3ada117170a27c79cdb4f158c6dc1dacb69e824ad48592f32802d1c928764b8bab3a068f042ac9d7988876939038

Download Submit
C:\Program Files\AVG\Antivirus\gui_resources\default_av\webCam.js

Filesize
13KB

MD5
27cf123d1a8302d5c824de472400c6f9

SHA1
6c3bfc34811cd2de90718a54ebde4f60de75cbed

SHA256
bfae4aafb47d781386a0304b9612a7b4de1e00ccea6ff009d55518d4e2d040bb

SHA512
9aacd2a54ccdab56ee8a7c50e6fab284f02e02d37515043f92bed8813f15f72b779d1882f94c966da52b7653b1e78cee4519a55bce502738bac3e186e5d21e55

Download Submit
C:\Program Files\AVG\Antivirus\icudtl.dat

Filesize
9.3MB

MD5
489548effeb7845e06fce866e960179a

SHA1
a2253822ee180b78cdea6646de885e715f57a7c7

SHA256
a312449cdab2bd5af2e8cae2b65e5de052f145376ca8ab4587bad8ed49c95c87

SHA512
687a83c959e14238cd5e15e4a02770fda5b3a108bfe825e740b5d99febdbd57c910a8ddae67c07e3dbcea04c16858cc30162df22a9331ec62ab8ecaee8c48d23

Download Submit
C:\Program Files\AVG\Antivirus\jsbridge.dll

Filesize
32KB

MD5
ef22e49763df14c84cba9ab2d9ee06cb

SHA1
a091ce317daf91ee8b22f34610bbdf6a2f131f4e

SHA256
83c5cba1b339922943285318601f65044c98381590bad5db0ef1ca8957cbb3b9

SHA512
e6da9124c927a12b1baed971a570b8dc882bdb66446b28b50d7826ce8995e4b42ad50f444c4abadf90350322df59bca00a43fb909449ca9c9cceff3f167dd299

Download Submit
C:\Program Files\AVG\Antivirus\libcrypto-3-x64.dll

Filesize
5.6MB

MD5
cfa0d81774cb0258d4206300c6e7df25

SHA1
9a60645119b22261d6657e4ddf2a76f03f4ac21e

SHA256
7a84cc660cd73891b48710719b2aeb8a7c3fe3146722db96251037623d3738dc

SHA512
6c1e64bcaddcf5b6179ec8877462f11656d38242bcb61d1a96b9bfca7feb09adb86e2545633aa8bd4e39379c01236d663f6c41f868f613fc4d523ffdb7c4d1d9

Download Submit
C:\Program Files\AVG\Antivirus\libssl-3-x64.dll

Filesize
1.0MB

MD5
4c7c6cdd80e7a6b6cfa875c40d09975c

SHA1
f8c9b049aa6e5c5cf2833104ad648abca8501b34

SHA256
c1e57682c0015bff1a749ddd613e88af05ab7fea0c31e5712227e294db456d5d

SHA512
7b66c1ee01b10db6f259e66a94a6a0b90f1a12a76877ae5966dcbdd28a54595babd3544aa2c8b7058c5625552514673df431cee1458b36118b9c9c48c6e01906

Download Submit
C:\Program Files\AVG\Antivirus\locales\am.pak

Filesize
453KB

MD5
ad4acdfe76c998b945642b9af2756ea8

SHA1
025ea273d63fa71f3c10c578b1a3f657dbdb3f96

SHA256
4dbde72ecf65ac84b6c01251d37c425c4cedc00e3cd9cd40c0bd5a6081359b64

SHA512
81f71679d2ee24ef8124e81f39f49b113a157c88af093a6f571c34b67d19933c200d095ab65ce099000f132fd2a04a44829047816c1e53a42ed4c5b517e90fc3

Download Submit
C:\Program Files\AVG\Antivirus\locales\ar.pak

Filesize
479KB

MD5
98230353d1463eee93d64a4856f7008a

SHA1
10d98e7d0e095dcd947fbe0b8d771ed1574e3ca0

SHA256
36f41a346ed07708ce12d54e5a4c4612f49a375155d1655a23c52256838617cf

SHA512
53b9d1b50bb79e245d74dd30cf66da4715c81ef63af3d569eace6329eec00356eacb7357271778e837b60fee08deba2ba445b8ea74619a955bfa2b8e5c05358c

Download Submit
C:\Program Files\AVG\Antivirus\locales\bg.pak

Filesize
518KB

MD5
dec816e6e65e705be74917f249e43fd9

SHA1
6f90b68e6b1d904b3e41892cdab1923f4f868376

SHA256
ea323024091753a5576a343e46d19bfbf9939122bdde53d91d7dfdbbea5a9c68

SHA512
d21fcaf4fe07f4cc6c369d7cc5a1bf06de5ddf7e2433310b45b53aac340259f5276e1e86e15591ede8d4d5c05d719871d586942664ffc76eba1712ef3145395b

Download Submit
C:\Program Files\AVG\Antivirus\locales\bn.pak

Filesize
671KB

MD5
c7b9e899ee655e2cec7a49b9cb2300a2

SHA1
5c471604d1a755a393f1ca2f1acafd6e014792be

SHA256
522e7a2e1f7d8e49b5632759cb5dae269578edc522689bdbcb23b74750f53e77

SHA512
b56e1afb9c3f67ce891eb0215a68cb3588a82fe51e0dd2f9b18335f2312bad156cb3be032caf641a7a39ddc0a41038f96f7b36469ca327051bfcda620145f6df

Download Submit
C:\Program Files\AVG\Antivirus\locales\ca.pak

Filesize
319KB

MD5
8fcb9f17f850f0dcffa2512236e25790

SHA1
429b36872ed7b655d745fd8efba6b5239ad340a0

SHA256
c79b92ba066cf5414fc37795e6a76e966c23143bd3c48c0cf5f61aedd5cdafef

SHA512
1553cbd7fa4fc87341bfca39cf58e8834d6c3100571e34bcd5a1961884776abb69592c627cef414b918e8cd4bd709a83c4af2bed5d5c4a84b9509e896b8fbf42

Download Submit
C:\Program Files\AVG\Antivirus\locales\cs.pak

Filesize
325KB

MD5
0161995c04f022922e5c036d374eceb1

SHA1
5294111882537c10e4ea4df72b3508fbf2d2bc30

SHA256
3f2e5a65ebf8938ff4e9676b12573b23c72501761f1bff4d5ae466b68c85130c

SHA512
c04c549e23d2ff33cc424746f1a1a6d70e4660612d857070810c7ad9c7021aace09acf62e0248f139acfa2369fc511b4f329e14f3d6126813ff66ee7d44b3611

Download Submit
C:\Program Files\AVG\Antivirus\locales\da.pak

Filesize
294KB

MD5
f1e5e7dc819670c061902a3daa17daa2

SHA1
583ca07af55f3055ce127b81fd825fe45cb722ca

SHA256
cefdaea7b486364291fad01ff402ab8098e2e13bc73b2bbeac25c8a9daba8df8

SHA512
b8e8e79f052d5165446a8392a4836fd6915cb87cf199c499e9b4e767e6e60e4e94d601420e798ed3b7354c8ca91304b1d062332cfd5016614705aa57462aec83

Download Submit
C:\Program Files\AVG\Antivirus\locales\de.pak

Filesize
317KB

MD5
6932a8734c0ef9949fe0dc3b2282e16d

SHA1
817c17d5592129b6277075845557148e1e59cc78

SHA256
88581d49e6c83ef74fe4aeed438c0380f321d9eaf3b8ef210d39f8378836a1c1

SHA512
076f2741f28f76fb0da8fa35bb55418874db7e2304dd09afc0cc818b0c5e645831cb0c3ebf97eac474339c584e640f562b4699f54496ebd761e3733777490b6b

Download Submit
C:\Program Files\AVG\Antivirus\locales\el.pak

Filesize
566KB

MD5
c6009c7b038068b61aa6275b4cb9f860

SHA1
4b77f7f822f4ee15c57dbe873c6f7549fb608028

SHA256
efe6a9d8dcf76f5286bec0496209f59da3de6ab6e355a183b69a7e4bd5d36cc2

SHA512
d3d5eb21caaf361bb92e0453ee1db4ef9349e071be2736589a8d2f5cd587e85d33c7d65f01342758dede0ab0a037b294d7e263d82f60c29e583ea1c30c9f3fa8

Download Submit
C:\Program Files\AVG\Antivirus\locales\en-GB.pak

Filesize
260KB

MD5
314c49194e366808b2b36253fdbd7714

SHA1
e9e8ba1fcfe91b80e232899c69844282d39d0d23

SHA256
411a729d9288a62780c32d6bf5f4cf0fd8d221ff341ce79c2eca25dfa03c9821

SHA512
5c24bcfb043ec09f31e5c8e640d1bed4932f9560d68256d4409d5d51a8948af3381e2bbf164515a2e35cd7e6ab5349d9fcfb4916bd8d11453da9d69e7cd8f5de

Download Submit
C:\Program Files\AVG\Antivirus\locales\en-US.pak

Filesize
264KB

MD5
0a70bdd8c0efc740818bdb82993bab85

SHA1
d84b6092664894f42e1afe042abc946a3e0d2e65

SHA256
21fa942a5f4f26996396f0d84807b6f8c01afd5809e2da33487bbecd0a6d13ef

SHA512
085c21045f8fea63a80678069af61e4273420bb6645a833319d58248e61adeee3cfca23edcb7adfc2dd59621184035e3f9e252db8d5840e6f6727e0e05b5fd63

Download Submit
C:\Program Files\AVG\Antivirus\locales\es-419.pak

Filesize
312KB

MD5
4861cfbe34644b1aa3a62e0b8a955b28

SHA1
66497635946e50bb17483db226d9d9fa0e80db7c

SHA256
ef0a523bcfa4d3a1b7472947a1f2a0a68e24c628386f7f0056ca4404d82481f1

SHA512
162069b7b670d7bf68ba8276d2ce0b042a4cb0f19f2f66edbc8af00dbd97e084ea9a755b817a82d77e83e63d97e79d7e50eabaf67c880b4aa85b3b6af0cce20d

Download Submit
C:\Program Files\AVG\Antivirus\locales\es.pak

Filesize
315KB

MD5
44c080e276c1c44cde4dee4c576a4358

SHA1
217c766a2ed03b9a9f2f4d1e2c148f10d836cca3

SHA256
85862323a3128490a2c1be66a36480f7eb73a2294d62ef4ff38ae868c034db4f

SHA512
333acd81c4b1fb5f24f0b0b2f5192175586fdd455895bdfd7092425cd877a844aebe3e74aa37060c849c5821fc5174a2471d7db95a6e7098e43e177db70ef92d

Download Submit
C:\Program Files\AVG\Antivirus\locales\et.pak

Filesize
282KB

MD5
d045af9a8b85c6ac73f60e9fdc16590e

SHA1
874293f1b5d1b6e2641d9dbea59b4e1b8f377752

SHA256
241f3e5286b25864081f50edb93c4693bf001f04d7c7b98f5c4921f768cd7e94

SHA512
b8f9f59f6519c5839d4da668a16062100be75317c4275bbb50e1afc4b6b66ecab7268054682bfdd63c5a71dae8ae00e80eff3eaab161c2e35a3651988ad38413

Download Submit
C:\Program Files\AVG\Antivirus\overseer.exe

Filesize
2.5MB

MD5
a3c2186139871d1efa2050f744a61e62

SHA1
b435591679aca1ae8acd28f498b936951274070d

SHA256
f455c2d2e17302db27e09dbf51006bea6e02af0d49f1390575e68c57f7877a2f

SHA512
ca6f08dd3e675e0c8c6882928c61576dbecf95e011d6b4c6668dce3bf11f55e07eaacdb851d1c7b90431b4f882886dfd0d302bae6b0df63c883b74a96ab89960

Download Submit
C:\Program Files\AVG\Antivirus\protobuf.dll

Filesize
3.5MB

MD5
6736faaead16ee33f80815d3e6bc2a28

SHA1
54cf9621a63659b609f0ca0c1f7e51d65a73b0a3

SHA256
c43a0d08811e7145bbdaa39548144312d20f6296b7f5fe9ba0b6c414c7279428

SHA512
43bc785e0684f7854997ad3ba99a907a0c95c459eea2c9708062d4944152e42ac5833ca15b762d87341e78dea9f3e05d82b0227c14172d98c7de744e8349b607

Download Submit
C:\Program Files\AVG\Antivirus\resources.pak

Filesize
6.7MB

MD5
bad3a80c0bbbda22c237407afe0a82a4

SHA1
00cfd3358c40c549d4709f4530de277ec349edda

SHA256
59a0ad87f4aa0bbfc2d1462ca7d5e760e2f6f2911c6c31f0fd450a9bea7dc684

SHA512
110a39d7c26745167d31edfbb065818afc68cf6bab273f967852024bbf7c4566920f93eb207c4f17105386f18cd9289d35ac66eef3c1ed5f90e5628568222fb7

Download Submit
C:\Program Files\AVG\Antivirus\x86\AavmRpch.dll

Filesize
747KB

MD5
d1715657f43447bea9e80bf37bc0bc2f

SHA1
c5735ae0380b1f02ebda0107549237b3467cb04b

SHA256
a1347badc01c438e5772885863eeca272020ca8cfaa20f23fd60ebaf0d0bb9ae

SHA512
32113b338ff834117f3b492c5215874841d54c798f46c912e982783446c7c54379eb709fc71943ac060921152055662482352c80d791cefdbd22139497f3dcfa

Download Submit
C:\Program Files\AVG\Antivirus\x86\AvDump.exe

Filesize
3.2MB

MD5
bfee5a7562ef70bcc0bae946e62be3d7

SHA1
d874a9d6a17fbd879453b00653bf003095d2ceb2

SHA256
07b0575a8f1d23a0f453ab20e7a5bb071a7b69d1a65bb402509d1a459a5c729c

SHA512
7eaf8f2a532edb70384549bd85c74033ec3077681bb3767229b24c3f15d5ad9874b7be204fd635edba4aef51e8cd2b9aeec2a7bfc20c29cf56f8acb49c0a0ae0

Download Submit
C:\Program Files\AVG\Antivirus\x86\RegSvr.exe

Filesize
3.5MB

MD5
2d753a062da7bf8d2046c62b634175dd

SHA1
8955b39db09996e36b5a3e32315fdbdf3bfd85f7

SHA256
f2327c51d73cdce072db48de8ca31dbb231d2fda6f72b01140b33ca24f92dcba

SHA512
07dc620f9b154d26bdd005681721cbec47ab256826d23d97f2becefee32314c1ac0aa055211c0c037881c100fd3fdb3b01a7a4f3a7fac0e87ebe4acab4e04d7f

Download Submit
C:\Program Files\AVG\Antivirus\x86\aswProperty.dll

Filesize
1.3MB

MD5
6d5766d03a825bc73d0f46ffafa00c8b

SHA1
e5fb2ca71bb5e3cb5bcb4fa2572b19684778246d

SHA256
4b21e57a78c6186531b3c00f866e4138833a9af1cfcee7bec7d3859927905888

SHA512
7542a906cc544a560ef931ba76edc9e866cce7099a26b41c985a80c8d05d36e2de6dbdc2d901903cb9793d8962e5e4ca0155df2232c65f454e79110465ff2cb1

Download Submit
C:\Program Files\AVG\Antivirus\x86\aswRunDll.exe

Filesize
3.6MB

MD5
aa8e210e719126aa4f4b2b7fa35f3247

SHA1
28d1f7f9e6d5b1a45b39e0a20359db59aa0246f6

SHA256
7bfc4f168103fb3c4d64ee7cd40ddbeeb5b403531d8dcfe0cfcb2ba855fba84d

SHA512
96b514c46186764181cd85c6094db171ec8c2bde9e1767c8256f267d83fc8e5a2d762011de72ec577232903a13b697926475af852a79a257d8c2ddaf89efc9f8

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\API-MS-Win-core-xstate-l2-1-0.dll

Filesize
12KB

MD5
b685358b3d0f37b68a24a6862f2ab63c

SHA1
b98d6706b7c922a2c93a75280e599361502697d1

SHA256
7cf73e4f69b3dfd89f3b24167f2f421b17537f3a4e707c63c675457b4fbf850b

SHA512
965580bfab334a217625e64dc5ab8622dcd18e5377453252b0c40c8e171040411a8916145f98e1bbe7476ad140562ea52ba148bf584d3389a07c2654d122e9b4

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-console-l1-1-0.dll

Filesize
12KB

MD5
cd3ab89fadee9d9ab307f55390798102

SHA1
7f5646953d2a90c1033cfee8d2e6d394b05d0a5b

SHA256
915c296fabf88b9e3b43b5a570a6e8e642071678ac443c555f6e95bee7925bc5

SHA512
5b68fbe6456897695fdbc683dd703c286531e831fa3039ba19bc376ac5f363cd0588a815156b18139b82e64ae5c9d87bee025805658005e46d3fce915a9f332e

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-console-l1-2-0.dll

Filesize
12KB

MD5
4228b8901e130b70052da8562dc7b5b9

SHA1
5007d4da77465c38d66689312418acbef9c7aace

SHA256
67f4d89f85a61b18ac1f5d6d04f625d64bedb252c219ff9785cd1508876bc718

SHA512
cb42b5a184fe08df207ac391c3e87d44dba15008efe2caaa0774439e8f7df2ec35f63e981d080fdb8fe2f46e8a43ff58a332d6cd241313ce419fa2ea0ac2f40e

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-datetime-l1-1-0.dll

Filesize
12KB

MD5
bb66dd4c715754bfa99abbcbee3a4449

SHA1
21a9bef9112c1a614bf3d5f6eb2d2f0f17b58531

SHA256
55804126146c7c575add104eec386f161672cb740e765eaaf7ec8707a7cd2af6

SHA512
aa3b8ec6c34ce2d162783595ff3902cc1e8812ead15f2e723feb82fb0202f654d7e1138e4b3f83c7cc0204e15c41a34ad0b1d07fd3bfa609e97c01241271d136

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-debug-l1-1-0.dll

Filesize
12KB

MD5
1c76698d36fce20d2919e67e3f08bfbd

SHA1
eb85df5d35cad00ee7eda50e8a4eceb2490f9245

SHA256
d95f01fc571294b128d0cfde5e68472b8f6a0b3dd5f0c18b676e3a077df80cc7

SHA512
7b0a9de7a2fab1b969b469f7e7edde93b9ede530080f4090ca0066642ce6bba28023bdb8ac5bd85eae38d918549be7066981a08263a3fe2a657a5cec15c62487

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-errorhandling-l1-1-0.dll

Filesize
12KB

MD5
b2eac5c213cc442820167617d568e179

SHA1
9e61baac12e1a536be5e553530db8957ac606d37

SHA256
8b4a9ba2855247adddb4ee1e7f503dad5674ea7bb45015bd69cc83a3332f696b

SHA512
af7a8e6e16b86d4e2aa3141fd41a8c897957486b4d87d8ed14210590e86577e030b4b7c419ed988d22851c5fdf75236c23560fd855ada97a76459c9c93802c83

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-fibers-l1-1-0.dll

Filesize
12KB

MD5
38646cd15ac25a8d71bab09d5b077338

SHA1
4c153622a3f069480a194bf98add276f9138e168

SHA256
cb9f01af9ba4b50c604633073e4003652f1e99faff93daacd4502d4c08177688

SHA512
43844f5e82c7bf6a485a5411ce19aad3bb0f418852b86bb479f41170d85e04d02eaa76092b84ac7a1abf14b285d66fa2ff891cc9c97bbc18633af14ec44cebb5

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-file-l1-1-0.dll

Filesize
15KB

MD5
4d0399f0050b13586b8b04f62e95b16b

SHA1
407ca079a3bbe2837203beabf41516fdba776a16

SHA256
420395ac9ab87accb00fa478be0b73b583a42d406d1341d98a77f6189b556998

SHA512
8908cbf7cb7b87fc78a2baa1eb2aef52303e733987891361db07098fb70d776fe936d48221a846787d67adcfbaf30ad93b867d5578b7dd566fe8addc480cda18

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll

Filesize
12KB

MD5
918b087149a2571d9db1eb04878c3603

SHA1
aa1d2c7550df6eddd2e99b44ac9de925888281ad

SHA256
b2546e21336714858d2b03d2532b6955dcd7ff46b30435f6d309d8c39d0dc957

SHA512
07c0d13e505c69985d6354c450887260345dc59468eb82b9b0534d1bd13f5f960d2d56932b204b300ac7e5f0ff7234c5e459de06d0e466fbc3f710fb9551793d

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll

Filesize
12KB

MD5
320629a907048b64a99ef484417df721

SHA1
0de1886eae33bb5f16de27d647048a92586259d4

SHA256
b5823ce2d6e600eaf4e2b1353600dca0351c46d014f97ac525c3ee9dafb2bf4c

SHA512
6567cd36297cb05ed301e5f7eec87a5f796aeb9fb63ba30cbe73087bbe9539e2dc47a11947c8461cd79ead01052999913143d32ecf4cbdf5833a970e61d5bfc4

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-handle-l1-1-0.dll

Filesize
12KB

MD5
0e37f414237e14f395f8914ac2532581

SHA1
2b06c81103d7c94075dd63a8df33b72ffda75d2b

SHA256
3ab7f3707a380352c5aff32c0761c5ff86f358f3683b1dd273da8be18f6521a1

SHA512
3e226dd4a8c2aba7fc81132840e8087bc2fbc11096098345051d6eb1dc724f3960789f7f958d362c6cbf7d58904bf5ec7ac84945730256a50583c41dd2135bda

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-heap-l1-1-0.dll

Filesize
12KB

MD5
e36e88531f284b1135617b91f73e5ec7

SHA1
dac7d7984c7f906f66a2eadec395207a4fd9a599

SHA256
0c25f2284aec3aa7dcf6432ba9416e2fb289e08bbd996bcddadaabe42e361b46

SHA512
7e2f7095bba85a3d6aa21cd7371b73d9aea6b07d89a82c448a65f3188d9365a0070cf8b5312a3ef0eac1e4a2d79eb3d34dfbd7a16a7d9da19545ea216c195c4d

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-interlocked-l1-1-0.dll

Filesize
12KB

MD5
f6f0270f98f5cf857d1e0667819fc9d6

SHA1
959209e5e068aa2564f4f777e1c8616a9d4cb6a0

SHA256
616ac120e3b9abb6f245a09fc17398bef10c5e6aa617849fe68a89efdcddb7fe

SHA512
1ef69bcf037e2ead4b4c3518a8e8e3c2dd3065049649a6973aaed9300ff6fef4bc2bc25f7d0b92dc4ab5f6a576850537ce9d6e00090af86512d080417eda42c1

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-libraryloader-l1-1-0.dll

Filesize
13KB

MD5
ae1eb2e7a5de49e2950cd2f7892d5513

SHA1
ab7ea36f3c4232f0b3f6036edecffdd4e8603936

SHA256
23fbe7263ca595af627fc37e774fc6fd5f66daecb54e38d48486c9df09e438f4

SHA512
ef919e89dbfe93ea2f45e01913c9b7d1695520f3d0073f2b578ef814e3dd6443bb506e5766d09d41e802f9c2cb4d35778c87f86faa89baf7dce66da787b85418

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll

Filesize
15KB

MD5
c542c43d910dd6ae2f4a7cffebccf613

SHA1
02086fd8e53fcb3ac20cd4aabd730d46458d698f

SHA256
230da452a8068ff5be158d84618c9d291bf9b8bc878ed5d56318558d52e4966a

SHA512
364aa5a59c10d95c6a93024a443972a06dfaa1693c942bca517700bcddb9372aae1c76bdf35453a5ea256179fa61586922cae7d22f4623135fe7168b5bf04153

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-memory-l1-1-0.dll

Filesize
12KB

MD5
2b3eae5e560be8c87a246d0e8fe3f593

SHA1
8f9563bb72fbea30d37a27c353daceb552279603

SHA256
b858256aa6a926f89714f21790d25e90b7dea5096bd9935454a8b4c7abea736c

SHA512
e33e50380d37f075b8d7fa283d5b4005ccbd7c35af1d11dc6ea4f4529c39571f50114d2c678061daa47f6b36bda9c948ca724acb9aaf9595ed7caaef2b0c0359

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-namedpipe-l1-1-0.dll

Filesize
12KB

MD5
4ee09ce90a33fc4f885539370d3ab11f

SHA1
023fb903cb6ddd95e25f18fd72e1b57b4a5ccff2

SHA256
4b00d5be82d9eae3445b559f4eb1c62eb192f5554b9edad50b09f98fbc65c126

SHA512
afdd5f50fecb5ada09a4d8217f1db396a2501b4ea14db90267ce51e964536a9e7c32cc55b5a8239c357f9146a7f4fa601181b7b8222670550667fae95d55bcf4

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-processenvironment-l1-1-0.dll

Filesize
13KB

MD5
9c46e030383d0f85a113a1f3b7477a77

SHA1
7f762360a7cb9881fa9c153f42f3a39be89db946

SHA256
d08d50eff27e71af2e72655edf22dbdea85346cc14be53c48988a3c039fdf17f

SHA512
6ab0490d9eb82f010dc4bdea8e54b9b760a417a44bb88a7bc74ce7d61833e355cef54712f3340b37fbdf07dbcd83e17295ab546d864ac06e84e0bbb7d8dd8649

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-processthreads-l1-1-0.dll

Filesize
14KB

MD5
fc776a56634728a146211939d14187b5

SHA1
f8372701ba9ee1a51ecf4649c74e27d1e996a45a

SHA256
ca2b5493a6699756b3bf63d9bd807b0204419ec3087d02f4bb5c7b01e8fffd4e

SHA512
dd468a46c62e8a5a2ee64332522d5ca5f8093b13722e13cfd996b32b6efc74cc2a8502b44cada19ec0c30027dab400c8567c84937f08ccd989d8a0b75b470a75

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
12KB

MD5
51b851eb7b58ca2c3280def9722a9602

SHA1
75aa3331eb7da58868f700158df56fb49e3c4507

SHA256
9f0d6efb48c7f8c0f001ec30d45558c5d8675c06573eca7c8125a7d5a1db2634

SHA512
e9b0c683b58ecdba5d5132f6808ea2dd85a3db3b0d9690efb54aeee92c29b8b2b4535437d861d2fa2a8033e623aeb4ee0661dd01e17527a74d6002c9926e8783

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-profile-l1-1-0.dll

Filesize
12KB

MD5
5e50911343631e123b2de2d19ad5e2ef

SHA1
48f0330e58e1a17a72bfc9b1283c8eadc96e1ccf

SHA256
b3caf7155167f5d1d4ada4df4764bc78b85032bb769e5ef586fcab27fd681cb5

SHA512
eb6e19b6b51a4422a861615d1f1d0742473e49eb4ff4a2a25c84bc485b9db336f14e3ee83afe8d221d91466ec7ae436b1210288ee3328a2ee0f66addae3be953

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-rtlsupport-l1-1-0.dll

Filesize
12KB

MD5
f04d8cd1c228b2a9321429bc9d72599e

SHA1
6695fc5cbee5c73077c59ef514353a4e2d6485f8

SHA256
498d2f02f5fe0a73cdaa1617be6bf7b2b550ada0537f8b1673c590ea99429c30

SHA512
afa2baa1a7344e795e325cf3b757371978d5e1c2288c31354095f4c30a4d308f2d405fd00b4efa86fef5830930a247dced395f11cab49e6a620df2241abbd069

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-string-l1-1-0.dll

Filesize
12KB

MD5
796e70f25faf0353eba92c001569c976

SHA1
2b427d0ad6e6ada06c012860a532da24e3f1a8c0

SHA256
9e153dbf1c157a910dfc62d1f1ae6c728ae3d5f2b767c5659a6881cecd35d8f7

SHA512
e0a2b6716add6542de78d409a4986a57a7d2e7d10672a57bc5a44fce3e65e365727cc64e9fb34deceeeec96b544d22b0901605985f5cce7f11341a00f898b56b

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-synch-l1-1-0.dll

Filesize
14KB

MD5
c748312b0f6dfa5440bfecbd094f9180

SHA1
d991110deb52177634630ab6165e195ea62ab1bd

SHA256
7966a70a6113a131c563914f8cc7acfd8b8922d8ef1ddb2a18caede076f1eca5

SHA512
c5554ea1436d27ff336d7e25f6f68d485c65d916389213cb9c33df2622cf08314411ce941482c03a251e214e2faa72abd266e2ccd444c95c65f12f78eda5a830

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll

Filesize
12KB

MD5
364d65fe7f976fd00702f5bd63eea9b3

SHA1
e40359ed2e2deb198caefedc27acf8c7715fc80e

SHA256
85fd25863a60e7c627494dcf14b169480023c0b8e4682a0e495f4f7389407149

SHA512
dfbc7b8660a7b96135ce0b35c8f2f576e536e8f8bfb53ee268611fabb4ddc4c53fe06a1a9e81ff26a8e10dafc40eee5d579a2bd1e19d7517bf6f089c605ece6c

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-sysinfo-l1-1-0.dll

Filesize
13KB

MD5
7ebb75a1000e52570ca55c35dfc7bd6c

SHA1
764dc860173990e451f6aeb6fd9b0164a86e447e

SHA256
2b151cce07a4d9c8507a1c547fdcb6ad904f9ebeeee71439d6151eeee287984f

SHA512
6d9c127cb35c122cb028eb9e8e7cdb466dc7b429ae8a13ec818df96917120f5e1f47902ecb3ecce9ddb1379029c63db3b6504d83dac8b6342484124902672c09

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-timezone-l1-1-0.dll

Filesize
12KB

MD5
2a21692ef3a54e5f4a016a3a1767a7d9

SHA1
9890261f7cc42d660371c1b9d3a96c09b1e48783

SHA256
01f6b2760031ed0d521e8d972a6e7b4aa05393934a37266c3f9374042cc97b3b

SHA512
7ee03077c29867a717245bbcc1f4c7afc425c5e248c7c70f884e3ad0bc0267f95b94ea2f47e3554b2d189160d56ba4a6924399bc80201fde24cbc943894e60af

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-core-util-l1-1-0.dll

Filesize
12KB

MD5
b179b9f02a2a42a92c8eee8722d03745

SHA1
86021ffb09e59a781e96158c8f5fd7b63ef950e2

SHA256
9c57a5fbaa0a57530b988a4aada32e378b1cbd1fe368b90e147f12069c8ae7bc

SHA512
4fa0ba86b83d4d3ee041772cc59c17407d02eef04385ad9c6d63547fd9e039a90d5a161b9acee7af9defce761ff47e288207f60b2b81a28cebe73ee1d68f0482

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-conio-l1-1-0.dll

Filesize
13KB

MD5
410fb7adfc54094b95609747a5376472

SHA1
e2e79f589a2e71009d9947bb02f05b877e208266

SHA256
77f2e7e09fe542ea78f4f6f23440014461074b993e50bf75d02b2c6571f5d696

SHA512
57fc04e4c770766ee9c2cdf7ec166792fb4164d7657fbbb6a6ec74a5073de953860b7c1d5754b28b61a83b7bb1cc0a1417a2f13c246aa06044045687b207bddc

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-convert-l1-1-0.dll

Filesize
16KB

MD5
03c2c3d48cba89a77a8c06158056aaa8

SHA1
3cf294991250721c2100288d4dbcb0343cc04bf2

SHA256
43e0c37da7bc6b2786f95765f14177651bea534ca4d1d966c79fc301a55ad5df

SHA512
bd9787ec2cf87f8c790db18724a5cc10d1a6de005fa8cc6a74733521bb11251bd0d026af9468e98b616a6d8212cb41c3da102248e105a4b312d7b068e9c407d0

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-environment-l1-1-0.dll

Filesize
12KB

MD5
490c63e6b1aba9a525404067ce3c20b6

SHA1
04997f8a146284f8369c7db6204949658d6d7180

SHA256
c5131d1abd188d009e72b8c6474c74a262b7b8ec504470385f7f69428e7ae0e7

SHA512
245c4e2545e7eb5462e20e12d8092cdaba24d48e6c53d02f3eec586de17eb9cb6c15cea204a18deeea3cc8668c8afbe9f35b0fc1e751d2f515edd18ae149d275

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
14KB

MD5
d1f28f796bacea3d58eca271fd128758

SHA1
934efde030a54a441c342af18ab5275e5facd0e8

SHA256
b8d3d45141ad57d917b25d2491a07f20c77b1dfd047e203e26dad591c40b225a

SHA512
4b6ada7f10a4a660c3b6ac0fd81a41c680bd6752eb1a70da08510feb10fbf2b7d5ee177a94d5093239914eea79114097329a64067a72068a8baea8a9963e3901

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll

Filesize
13KB

MD5
0651bcd9acadac1d50653be35378a82c

SHA1
5d1b2233c7acb3915d33f7b29cc2f0cbf34ea1ad

SHA256
fcf66176b6f7ab86f98f38d5662f61fa61ad3f1e59740d8a1df0e1072248cf6d

SHA512
1ce05989181faa8d291bb0df34bb4e93f2f576187cf2d0c5110988ce17e6a682d815297fcc9fd174bc1791713fb07b616ed952729923abf8c06b8b8f6d71d82e

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-locale-l1-1-0.dll

Filesize
12KB

MD5
592a65b922d4cd052bae1957be801a4f

SHA1
8371486ce1b38e692c0abc4a2a9e0c3e1945bb89

SHA256
d78e74087d151454365adf6239967c8ecebe85b1c6c6d3f59e70f0980028b1e7

SHA512
0837209e518d5db76ceb8128dd49cf03b8f0d11526630ad20c716ade1e02df1b39a8440d20ee20b488c6d6180c155d00a9cbbd311fc50f4803a8b95d4a545726

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-math-l1-1-0.dll

Filesize
22KB

MD5
46aaecdb8d337980c82cb2714a985986

SHA1
22104d2272b592a344df5b575fcff83ca0e4b161

SHA256
34457a002e90a590b516bbf58530cdddbb618a46bb3e764e18167c44934917dc

SHA512
33c91058a693b82f1457d49bba2e209a90b825927be89e38523671ac16f4fef208b98efa980a3e11185baa4df6d7639d447bf30e19dc91b76f04ee61b6169bee

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
20KB

MD5
7442e7059f712705d4b97699bf56de35

SHA1
f924088428eda3b76030091cf59ad38afb590118

SHA256
f822289ea5a9b0ccf9777a72bc8b73ce68b596fcca811e0cff0adc4031056b20

SHA512
dec6228063bbab561ae0c02cbcbab3d08c15f261758405d8a709707a180a09af9c462b0b382b700177f285a1ce3bf7e71e093f9031d15f932120fbfd396aa851

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-private-l1-1-0.dll

Filesize
65KB

MD5
3b07abbe272e9b9e2989e2d6a400fa53

SHA1
f925e5e58377dcdc13b6d80ff22c775e2334e372

SHA256
a170d9851a1427066d1fd61c32a9ae4b9545aa926be55da7e7d94275be281dc8

SHA512
14762c984aa6736b1330b1f0b296622fc1ce3ac79108c0bfee793a51131deacd09b494e8c851c6e437a84871a864dd65389657df8b2256f931e3c60a61fade8b

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-process-l1-1-0.dll

Filesize
13KB

MD5
0444624f30e8030d84bb169fc2410444

SHA1
05c1cd844368ae2c113585b477f91507430d72a0

SHA256
0b87358da7882fed313facee92bb8f4e45299c63ca557fdfba1478b364575fc5

SHA512
648a79fd30a73582907c7ca008be5ef78e6e72aa22478448721c4c5bad45a45bf76570d24e061dfae5e535666e79154f5f9f66a08746313620a17582e3998304

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
17KB

MD5
90340ac74d22b9a67237ea52a4dc1c75

SHA1
75d44b240afd4198b0f3b7256a4a9533ad1ba73f

SHA256
fd48da616f2d17054bcab961239431d99c247586f96bac69aac5b704ea694352

SHA512
6f52ae85b4d9ab8516d72bb1662ac9cf602092fc61ea78bd85af05047c70a0adc5edb67266032f12a86601c983015276f15a457935f5b6143dc80d335351e5ec

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
18KB

MD5
85444893a6553a4dd26150a68fd373d8

SHA1
ad9b46da45366f13a22173b06e22a45a211e99ec

SHA256
65f2a93490c845833541de1376d5bb65e6e864a1a9232f58f86a7a84408508c9

SHA512
ad56f71d0dc6d2dc5dd46eaa00247bd209403014648fb9c8f98937fc8e36fc85c0107365d2f6ba4f6d530f340278e0205d94bafebc78d10201e71dbb5d4c36d6

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll

Filesize
18KB

MD5
841e4ff9bb531b52218392db1d7cfbe4

SHA1
5607c2a987436195f1e241a0b29e8fb1f734102f

SHA256
4da31e582dc47d46132cc73ad34d5b87dddd2338495ceb2772f7e103a9a32ebc

SHA512
93232073d95870043994c752318f9b319db508fff452e4aa0b8e42e66d13623803be4537e1798dd05177b7427175d989c8e49a379fd932297e161d461bae268b

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-time-l1-1-0.dll

Filesize
14KB

MD5
0713775484e95e5bebcbe807d53488f8

SHA1
222dcab5f38d72971fad641201ba3ff9a2a0ecdc

SHA256
e63a096b1ae68a774b1f1afc51b5dbef1a5ac2d79dccc1104112c22841e3e378

SHA512
f19d30d37718de3edba15358888b13afd9f9dfe4bdf37bdeb3204fb6cdeec3f249e388d06a89b21dd4a0da9d1cd70bc4f5244f287a4d907dc0a786df7ee97097

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\api-ms-win-crt-utility-l1-1-0.dll

Filesize
12KB

MD5
b52238936bdf50ab985435a176281f68

SHA1
7bd2be0808c538b6f15f20a9a1228cf4a20adbdd

SHA256
3a23171aac49453f931d69cd55f6ec742243f5835386d9e6b18efad96c2be450

SHA512
36999e6cd50e26b1620fe24ba2dc11a40b25d1d77cc7a0337c7a3f65b16383fdb224e179392a215e6dae846e8bda6acb3e027445fd334e26e34278a397452f6e

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\avg.local_vc142.crt.manifest

Filesize
27KB

MD5
4dfa6db968c4c50fc1f1e41036572358

SHA1
1f281bdc5210640735775ae1b9e4a70ecee8329c

SHA256
14ad3b0d76e581de26d6516965fc2ff28162cc2027c2b7e18fcd18aef77d8854

SHA512
1c95f5f3da8184e66927ab238f2a533222442be10ff712c095b50b007ba0f8af584f28cc509ccecfd480c03fac47082dfdc4dc27131c2de4ee61afe4aa8ff642

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\concrt140.dll

Filesize
251KB

MD5
2126db527717014c6695f9745a480c2e

SHA1
3d564a111a7f5a2a3e9b06ace066931fbecdaf68

SHA256
50c864c13306921277e9c43f0133c754938e96cfa6982879d106b32b4551d984

SHA512
a47423d6ce322d297b0ec222ab8fb7cc46a31f840f412f6da0bd4ee9c40080ce4dcd2b00267de53721e61ba8ea02ee99d366a1047e41805f7feab8c43e4babbf

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140.dll

Filesize
436KB

MD5
0d3e750f8b8882470a74db90de94f814

SHA1
cb07462263379d3f5dd89e2b62ac31a2f7538821

SHA256
5b858fe4a054adb9461cfd12a5f3b8a9622a2eae88bca8dbd7d84a9f972a20b3

SHA512
b5ac0039428d844db36327ce6637d207ab02ad4cd89e0eac361d61393d396d6e2fff76d1007985889ec88d20e9c62ad29363b984b77d791feba588c1ec64f084

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140_1.dll

Filesize
32KB

MD5
8ecd8aea1af9dcb3bff28b1d4e0795d4

SHA1
acd125327614726c4069fcc4cde256d276f57ef4

SHA256
ec4743a6044224132ffc5f20c25bd7e36dea25f7ea9baecec7db40b0904dd7de

SHA512
33ba68e27fc769f0166e72da458244981622ffbfad33ae1015ec73ff83751eae9aebf1aff991247ddc31f0223888f8f03fa9b2b1d6069112ad8e1689e519057c

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140_2.dll

Filesize
244KB

MD5
1b73cbc1a51c5c2e61072729535e3148

SHA1
52f3494af0555caeaae477173dbd7a8c171997ee

SHA256
4279fe19e9d88988a93f5d334518b204a8956543f84467168d5c63d490337593

SHA512
9898d2952dc3cadfafdacd6d281d8e1614f6a8ca88448e52d393fc540e543f810d434e8eb74a640232f83c4ee2a07e8b37184f59adcfc9c8551cd0e061cb4460

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140_atomic_wait.dll

Filesize
45KB

MD5
cc556ffc1ee06111ba305967b089779b

SHA1
9b515a2f8e7dcf570f040b19a64b36166e17d93f

SHA256
be242784fa947e505ab9d79a23d7ae96e5979af03bc51297ae840517942f8675

SHA512
51fdf6c92ac6cc06b04092a0b1f9d391ed36d8ce0b2b123fff9d228875bd91b55dc218615f757f06f34c11d2527344f21c7db48a7b0502685bf6f77650d240a2

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\msvcp140_codecvt_ids.dll

Filesize
29KB

MD5
0c94dee60cf90c0950680ab6aa2c2b91

SHA1
d7051e98366d14a440111ffcd5b28379f8c67806

SHA256
ed53b64f64fc8371f8ef39b4366449aa764eaae971de628aa2b09b3a6847216b

SHA512
0cc66c7f194ddc4c0bdc9cff0709c75455a35b6c5ba78ab5d3e7093ab9388336755850f3567a93c96cc66d7376126a45ec8e0cce370518346647d1b18dbe67d9

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\ucrtbase.dll

Filesize
1.1MB

MD5
b65aa2646529e9c1de570d28c2e37c2b

SHA1
0c0516631b589a6d87ae53442a7ecb8b277127ee

SHA256
783aad71c976972def8a34579123439cfebff071901d97bc91033a05d9c2068f

SHA512
4cc7496c2c0e18e10c0d3783892b0ba15c1241fabb2ffd168e981f60e3993fcc4cda07f2ae9afec4869f7d06928fa606be53544a109a3d78067cfeef033ba009

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\vccorlib140.dll

Filesize
278KB

MD5
8ff7f31d203d158ca42f0bb4fa077587

SHA1
721443995a06600be6db636dbbd44767f2d2a349

SHA256
a5aad3483ab030cce01bf33f5a72da627755f13596bf3fe72db766463d9acc57

SHA512
a65478de5e6fa74723f66af35c3c24762e0ebddfd575e4bd7e868233a846e7813454d0542670159b91c74978a1db667d23229d4605080cbf6e96c3227ca2d7e3

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\vcruntime140.dll

Filesize
89KB

MD5
8a090e342a1cfc590b468b61e0c6e23a

SHA1
2ce5c404d0e926d3829565a819142657374271c7

SHA256
c432d3c6a02d636c4e66cb97bb738655efb1786a89d2ef446cd0aaedc7f6fb7b

SHA512
50ea6a9241dbbc52f93703cf29d2024ad49efd8f69f8552e493039640f2d0e625bd5c038e942079c0e291784674d531ea256c2556c637ce292ec6de8c417292a

Download Submit
C:\Program Files\AVG\Antivirus\x86\avg.local_vc142.crt\vcruntime140_threads.dll

Filesize
35KB

MD5
7f9531927e58fe32981d195625a17e2e

SHA1
c2831c6c980e9ffd05f450302cf81af11050c300

SHA256
88241636a8d3b8ab2af9d3b3b9e40cad4a17896f87c468ce5f177724656b7340

SHA512
92bab7dd259a9509ca2cb7ed82dee4de77a95780b9acbf36f657666630e9790dcfae51b3efe8a10563edd0ca8a29ba9c9c8138a740240ea106cbdebf61a10bed

Download Submit
C:\Program Files\AVG\Antivirus\x86\dll_loader.dll

Filesize
183KB

MD5
af6607bbbcb6040e11c5f7a48e754cf4

SHA1
64b6e94edd2a7897dd1f55741acbca3050a9ac8f

SHA256
699fe1a8c2fac060aa98b4151c30397c63651c43499011d3b2e9a2fef0491bc4

SHA512
f1cfa9ad96d604fde7070fe5c761d28d875593b105b03eefabff02c9fc3f8181dbc87722d0ca60ded3278892d930a628f3eb9a4ea4c4451f0af3919ef57f3f49

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping5248_1042707434\manifest.json

Filesize
176B

MD5
6607494855f7b5c0348eecd49ef7ce46

SHA1
2c844dd9ea648efec08776757bc376b5a6f9eb71

SHA256
37c30639ea04878b9407aecbcea4848b033e4548d5023ce5105ea79cab2c68dd

SHA512
8cb60725d958291b9a78c293992768cb03ff53ab942637e62eb6f17d80e0864c56a9c8ccafbc28246e9ce1fdb248e8d071d76764bcaf0243397d0f0a62b4d09a

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping5248_1249488469\LICENSE

Filesize
1KB

MD5
ee002cb9e51bb8dfa89640a406a1090a

SHA1
49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2

SHA256
3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b

SHA512
d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping5248_1249488469\manifest.json

Filesize
79B

MD5
7f4b594a35d631af0e37fea02df71e72

SHA1
f7bc71621ea0c176ca1ab0a3c9fe52dbca116f57

SHA256
530882d7f535ae57a4906ca735b119c9e36480cbb780c7e8ad37c9c8fdf3d9b1

SHA512
bf3f92f5023f0fbad88526d919252a98db6d167e9ca3e15b94f7d71ded38a2cfb0409f57ef24708284ddd965bda2d3207cd99c008b1c9c8c93705fd66ac86360

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping5248_778971525\manifest.fingerprint

Filesize
66B

MD5
496b05677135db1c74d82f948538c21c

SHA1
e736e675ca5195b5fc16e59fb7de582437fb9f9a

SHA256
df55a9464ee22a0f860c0f3b4a75ec62471d37b4d8cb7a0e460eef98cb83ebe7

SHA512
8bd1b683e24a8c8c03b0bc041288296448f799a6f431bacbd62cb33e621672991141c7151d9424ad60ab65a7a6a30298243b8b71d281f9e99b8abb79fe16bd3c

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping5248_778971525\manifest.json

Filesize
134B

MD5
049c307f30407da557545d34db8ced16

SHA1
f10b86ebfe8d30d0dc36210939ca7fa7a819d494

SHA256
c36944790c4a1fa2f2acec5f7809a4d6689ecb7fb3b2f19c831c9adb4e17fc54

SHA512
14f04e768956bdd9634f6a172104f2b630e2eeada2f73b9a249be2ec707f4a47ff60f2f700005ca95addd838db9438ad560e5136a10ed32df1d304d65f445780

Download Submit
C:\ProgramData\AVG\Antivirus\HtmlData\Blocked.htm

Filesize
1KB

MD5
94aa8569ec9b33e05f3088b136dda05a

SHA1
2e7779731351517e2e6df18b313e5df28079160b

SHA256
179fcd4c70b0e5958c56387c7849e4b49e695a284b75471a15a8e6c8637eeefd

SHA512
52cc30da7dc6e6ae7266bf171e4e9c9e16c0d8bf72abda793a0f03e2889eda6171044ed65960fd2c40251b135015a0fa62132c76cf16065ef6fa47476b6d8ff2

Download Submit
C:\ProgramData\AVG\Antivirus\HtmlData\image001.png

Filesize
11KB

MD5
c69e876c8bc4f3bca56ba333eaae7a71

SHA1
d00ac516dadf10b6a9fbaa8b6fd7f7800511d36e

SHA256
d1e88cc6880e3667b06b2d006f5fb8516f28467dd1153453c1bf954571fc4f00

SHA512
3453ec35e83ed63f2e88326c1a3f4ee23a6b979d272243131c37bb06ce8d2467585e311a3c01198f3384d852ee9fe525434f8a6eb58b7698c0c8c56b7a8f3b40

Download Submit
C:\ProgramData\AVG\Antivirus\overseer_unattend.xml

Filesize
3KB

MD5
1a90bc8644262cd79e806a222f38e95e

SHA1
0b9dc24a50654a32e0d5974f9f4370bac30a90f1

SHA256
1210aec78a7a836e56e94accf4eea74d5c0f26c2dbb25ae4d6023886ed3c9d64

SHA512
4f67699dc93ee7df09c4657a9fffbeb1f34ac615eea55d169ac03f7f58c50640c968f4215ede9dc59b5660166a9e2392fe10b8f2f68f6b067e9631c94c805941

Download Submit
C:\ProgramData\AVG\Icarus\Logs\icarus.log

Filesize
60KB

MD5
6d3e461a625323620ae82a94838687aa

SHA1
81f211f2b85b5a3c44be36c77d38291991c6c2ee

SHA256
fb037aed0786bb0ccdb213425ebf2cd71097af93e463a2821c59e60ed77b78fe

SHA512
08cd5e4fc3590d6d343e44948b8a70f30607987f4664eb6929b0ef5c476bc1687ecbc6031e5998ec99c2d37a262f11219bb5a15167b63913e368fc8cf48cebcd

Download Submit
C:\ProgramData\AVG\Icarus\Logs\sfx.log

Filesize
13KB

MD5
8868e87e4fa5e34e9736cff42924a168

SHA1
e0e7b24c98669ca2793b116cb0cb8c6902a32a91

SHA256
38dfcc843c205864875a82bd5d0c5c3a28e0bf00ed710debad6fa7bc6b114b9b

SHA512
78c3cb3272b3bb6991cc5fdc2d7a3762006cef0177269c63cd1093ea83b1db80ccbc80b0eff58bb0022fc7ff643b9a2def3388732ebc2d0b60ce7d8504068544

Download Submit
C:\ProgramData\AVG\Icarus\Logs\sui.log

Filesize
13KB

MD5
2a5e09607bb04d6953f8ec17f2b809af

SHA1
d23c9318f1f3ed98a138048e10907ea76af1c043

SHA256
24dedf460a3156c944360408e3766f08d43551442404b5bfac45de6ca181fbb8

SHA512
57c5841c19611dabefc1d52860357b86f27e729b19b383174e2c1f7ff958a17da016e074d840b456a66b00fb70d499917f0c180f247619294f39b0dbf599cc7d

Download Submit
C:\ProgramData\AVG\Icarus\avg-av\icarus.ini

Filesize
166B

MD5
c043a3beb23cc43cb3e9acae2ad9d8b4

SHA1
f8a300a14643d9d2ef708839d882fa8fae274f73

SHA256
3df024f72a0bcdd90a7c140591e224492481eb7f32a940bfb9af1cdb6472af9e

SHA512
e5baa81e296b7f06360ed20d9484a137ca49c0505d2c94947b978b09b277f13184e540098e21daad0a72d8ddd831a57d6ac0e67c0aa860d87a051b55c3c9fff2

Download Submit
C:\ProgramData\AVG\Icarus\settings\temporary_proxy.ini

Filesize
278B

MD5
b8853a8e6228549b5d3ad97752d173d4

SHA1
cd471a5d57e0946c19a694a6be8a3959cef30341

SHA256
8e511706c04e382e58153c274138e99a298e87e29e12548d39b7f3d3442878b9

SHA512
cf4edd9ee238c1e621501f91a4c3338ec0cb07ca2c2df00aa7c44d3db7c4f3798bc4137c11c15379d0c71fab1c5c61f19be32ba3fc39dc242313d0947461a787

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.9\protocols.json

Filesize
3KB

MD5
f9fd82b572ef4ce41a3d1075acc52d22

SHA1
fdded5eef95391be440cc15f84ded0480c0141e3

SHA256
5f21978e992a53ebd9c138cb5391c481def7769e3525c586a8a94f276b3cd8d6

SHA512
17084cc74462310a608355fbeafa8b51f295fb5fd067dfc641e752e69b1ee4ffba0e9eafa263aab67daab780b9b6be370dd3b54dd4ba8426ab499e50ff5c7339

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
998db8a9f40f71e2f3d9e19aac4db4a9

SHA1
dade0e68faef54a59d68ae8cb3b8314b6947b6d7

SHA256
1b28744565eb600485d9800703f2fb635ecf4187036c12d47f86bbd1e078e06b

SHA512
0e66fd26a11507f78fb1b173fd50555dbd95b0d330e095cdd93206757c6af2780ece914a11a23cd4c840636a59470f44c6db35fa392303fb583806264e652016

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
a3091c3f3cbbd6bb2126ca04d76c0d09

SHA1
d4b89faeb6c3ec922ec7a5fa02e78c82736df86f

SHA256
82901d3c39093b5d2059e489a76ba4692839791e60dc4657a40e5d409600d30c

SHA512
fc04e46c65774988cc01687ad8ca4911382bd1dfd026f8859608a58886b885e923135935692170307cb2054b232f4c6983fce3be9581e9010839fc3f8a85b787

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
72b87f5019f9bfdfd59451760164c61f

SHA1
ebab6ea469176f25ab3381ba0969778b4919a2cb

SHA256
daca6bcf7a4f797f270bdcfcac837ef121402f2765bb80dec87356f838096953

SHA512
e35e95593456f810ff59fddf8568e80a7b4b6859724432d8343520bdba00f6732d1921b1254c1e9dfbab6ae98aaa29728aae64ef19339cf16dcb51dc89947024

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe581047.TMP

Filesize
3KB

MD5
3476623ceb60f2ea91cd2c4719bae106

SHA1
5c32a61810ef1b51f9f42100fa69467e17787192

SHA256
8cf8bbe4f5d44c85c9d6f35f9646897edd7843ddfb2a39f83ef2e0cd3fbe37d1

SHA512
28240ce13d03addc53b299da1c409e2bfda18e8792d194d900918ef62218a6b135087cb3e55e12028fa29cf16e150d2e8ec9dee8e0273af16cc9b70443c69ef8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps

Filesize
107KB

MD5
40e2018187b61af5be8caf035fb72882

SHA1
72a0b7bcb454b6b727bf90da35879b3e9a70621e

SHA256
b3efd9d75856016510dd0bdb5e22359925cee7f2056b3cde6411c55ae8ae8ee5

SHA512
a21b8f3f7d646909d6aed605ad5823269f52fda1255aa9bb4d4643e165a7b11935572bf9e0a6a324874f99c20a6f3b6d1e457c7ccd30adcac83c15febc063d12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
641071b3b26253ce8ec56fade6a02d83

SHA1
bd00f1de94d4883e5f4b455d3cbb5d6b6ab94b60

SHA256
f055bf3168ef9a28ff404289917fcdb04b496d11fd7509587c9ad44c99f56daf

SHA512
48bf5289ec83de6c589459880fdc7df1436aaf0412eeb02ca6e0538dea0176ea2e59a77268af04199009dd09ec43f03d3e9ed39593c82c3828686f99abe08c54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

Filesize
211B

MD5
fb72960f165770dce36fe6bea059583e

SHA1
688f7a76374e992579fd85f7c2b2ff250076942a

SHA256
cd02e24975fbed3e27adbc9eb7aaca3769879054a7461374ed4c1e91256f6647

SHA512
9fa519054680e9d27f4c70168c5b6d57a37041a4cee6e0a1782083d5334516743aae02345f95cf5a291f2b6784284c1412175d1d77ee48a519b98892c7939961

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
83e097168470649ebaa5640c7667942b

SHA1
2b698e711bd7805417dfcc7f66bc51af402b52cd

SHA256
1894be66403d720375a8f6f8bc19aefe38359c83b32aef20fe28dad20e149895

SHA512
f09e3599a555633291a5d927e3fa5b87fb9257334097d16e57f6e0a6a289c7a8f1fab11ae0fb9b20017ad6e6f544eab1b971de9c347af4317f40b5bbb7d90189

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
9653f467772e2d589db1a68c432dbde4

SHA1
4756d0045d7db89660e4ec93830c3e73e0135c23

SHA256
b00c7f27010053b3f7a6d5fd5bfcdf88d64160fd8f98b52495a751c39686329e

SHA512
97f1719f4a98688eadf6884809e07a3651811b4d4939f8be53501f5c95d1e0c4f45e15e2762d79b0e73e4ad1055b7e3f769bf4bc1923866ffb3159154ea97ff3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
36KB

MD5
b81ad35dce592677e8017fe2d0de08a6

SHA1
db5b91e2572097449a247396d2e75b5c8ec67711

SHA256
20d2d2535aa6532975131bc38f50469f0e95cba211d9a0c2b93f2be3cecc8459

SHA512
6ac530ce4b50d12f02916f7d8f22bdc8477db17c75341cb4762aa85bcbc936d7d96f84a15fe2536efdce13549d746a786048a790e83013f780d4f5c38a02d2a1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
1247c6300bec72c86b1b47b358def4f4

SHA1
eec9109ac39f8779737299e8b863e7d8b9cf535e

SHA256
9f2122c08a661b8d05e1027db66448458fd9f792bbe4cf1eb653d69292fa41c8

SHA512
60fa651a2a569126deea97d3cd38c583c0ab64a818902de712db3b703013eea8cdfc6f55aa90afb2065a92c3188138cb5f1b90d78039cf79372232d1c8560127

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe594339.TMP

Filesize
72B

MD5
cfc2c6cf7860fb59f93e0e29678e9cac

SHA1
3cec2e9377aad869bb61e70397fd399b18773f1a

SHA256
46edc16ca15a799a5331ce65917ef91b677e908b32c0922c965c35a17d032ca6

SHA512
8e9e4588d2c59cf973d2f2b35dff05d6dcf2fc65ad908b79d92585d0346993cb7beefb580888e8fb38792920d7c51e870d320cfec1fce9af7a9143a52cdf1998

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log

Filesize
22KB

MD5
fb5f878082154fa450ea4c94adbdefe8

SHA1
25f45fc5ddb5aa83e280f13d264856adff4d74d3

SHA256
226c4345d24c7f32531dfb440f38b43f810bd57e312ed3b03cdf42e59d531504

SHA512
8d1775b283cd6766d1bd37ef0d45bec82d8633c47be53c81ee7a9482bd2e08a80420a18dc648fb746b06a921d96e48b016485ab98fa1d2a1450f644a5ecd1f93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
23KB

MD5
209034aefef6eb0a827079b37068777f

SHA1
733f2c572e47bbd2fbc0511ee56bf6418df32710

SHA256
cca7a73a0762da4a0c0f1dec6a60a2038f75f047e403a814fc51d219b51abf72

SHA512
92b7a54697a9aae36aa0df988bff75da5228b2a5e08e2315d199d68745785257ab03ccacdca6bf8b433803d5a7935e7b3b205e0958bce36f8bb75fba464637ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
904B

MD5
be8a54f73e10dd7a230bf7222b7ed50a

SHA1
b0e0cf3044bcae4943b372f865a475986d6f64d0

SHA256
bade4f60e3ef38b8a5fea14f853fc764647dac48f1a4c9ed43b48e72800976ee

SHA512
ac296bf1fbf9ffcf1b9bf2128f2ec0b814903e99b83b555abc33c39ef8f7bcd5506b4d4274ad2059516472b791f7d391875f75af94433f455da2274bd7f4cdca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
469B

MD5
ac98f32365a1c92930dc5890a6e7c559

SHA1
cf72eab1f4b822fd3a1047c3301db4266ab405dd

SHA256
b1d3aec1038a944c28911cd5037144cb5f49164f367dc7ecc1342c4c366c14b8

SHA512
9467a9448baf2a9988442cb3a4ba8102ba3bbd4aabb7514326d9bfb84cf390d5338142aad7152e0e29e4a17405fb6373b5483e6f297b525f8c235d34ca1c10db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig

Filesize
19KB

MD5
41c1930548d8b99ff1dbb64ba7fecb3d

SHA1
d8acfeaf7c74e2b289be37687f886f50c01d4f2f

SHA256
16cee17a989167242dd7ee2755721e357dd23bcfcb61f5789cc19deafe7ca502

SHA512
a684d61324c71ac15f3a907788ab2150f61e7e2b2bf13ca08c14e9822b22336d0d45d9ff2a2a145aa7321d28d6b71408f9515131f8a1bd9f4927b105e6471b75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
54KB

MD5
0dac651be4505e47761846930f693578

SHA1
c4615dc195f67a7f242daf5e5cc98c8b531dd894

SHA256
756a550f8021ff39f5a697ab12324abe1a5b693cc48f057586e65acbebe3c871

SHA512
21833658d02196138b15bdd1a762f1cba7b3959684752c4417ed3e8188297b9d966b00166fc4b44762c94d02230d2ca891672c76cf0ed140eeafcd1a3dddd33d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
40KB

MD5
44f3a96838c41082fe29f005827e3e46

SHA1
8ccf7fb5ddd8901388133c129fca830e83802b0b

SHA256
7f38626de689849e211a59c21c32f2bc0f2493ed330ea616d932d2e4158aa2fb

SHA512
0214e38dd1d88cff7a5779c798208cd2bac88d34f64c502109eb1497d49f88a1ea82710ddd7f9fc65c9b31c3bcb2b16a01d6f2d11211d5e4a3259a0dc2141dd7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
54KB

MD5
bece7c9f9aeb14e00d17a1e9243958f6

SHA1
3a54e80940d23eee66ede89ca9c31f902d4887b7

SHA256
107ddd52f6f5c425dbc943ffa630b3560603d0c38feb1bdbc1ec895a753b54ea

SHA512
d51f20c6bff36256cdcbd7fe943e2caa3c6d308ef607f7f042c9a32286b440dfbbcd4bce4acf0a59adb2cbb0775208f4e524ad0af3eb77bab7a56a878ab970d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
40KB

MD5
db1c905ca2582dc29dc5f8902b99d10c

SHA1
8aa16c0c889c448b47377d886e07be8504db3c21

SHA256
da57bba95582d0857f1adbd72e93d71ce5d576927326488d7e9818f8bb268c0e

SHA512
404ab3a28f3a06c7f05a3487f2466c0959e08fb984415489ca0bf126c6b029c11c195a47d25f8c48867c1bf443917fb36a1493aa0ddc7324562abc8e4cae61a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2025.1.17.1\keys.json

Filesize
6KB

MD5
bef4f9f856321c6dccb47a61f605e823

SHA1
8e60af5b17ed70db0505d7e1647a8bc9f7612939

SHA256
fd1847df25032c4eef34e045ba0333f9bd3cb38c14344f1c01b48f61f0cfd5c5

SHA512
bdec3e243a6f39bfea4130c85b162ea00a4974c6057cd06a05348ac54517201bbf595fcc7c22a4ab2c16212c6009f58df7445c40c82722ab4fa1c8d49d39755c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ghbmnnjooekpmoecnnnilnnbdlolhkhi_1.fa2232917a5656ea4f811936561ea6b7c92b3c0004c5e08ecb97636d3afc6f72

Filesize
152KB

MD5
dd9bf8448d3ddcfd067967f01e8bf6d7

SHA1
d7829475b2bd6a3baa8fabfaf39af57c6439b35e

SHA256
fa2232917a5656ea4f811936561ea6b7c92b3c0004c5e08ecb97636d3afc6f72

SHA512
65347df34378c2bbb34417e2cccfb3251a0b2412422cc190eed9df525b6e0a9948e0295ea3c33b3ad873ce81e369e89a138ac41d6eb7229546c3269107e661de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Filesize
2KB

MD5
f0560f0f3c87326ca4830d2706605aa2

SHA1
ddb445a97a1cbc18f5e0ca8e557ba10ef52c1391

SHA256
6bc286a0a31b54b2783b03b78df607795a03d91ffeea51884a5c7c8b5c239176

SHA512
637a5cc0db0844c5812a3599728912bbe893a67d911bcd41b89143f7a4973050038fc681bb92152e2567bceb126b3d9b28f5531b7f2fee24f05429411a2447be

Download Submit
C:\Users\Admin\Downloads\avg_antivirus_free_setup.exe.crdownload

Filesize
248KB

MD5
d40909104614d99887e5688eafb46000

SHA1
de58ab46d8615863207ddbede1ca6cce5480bf34

SHA256
522e6781fded008f7fd79ee946f7ce6fb3fb7fa604ac6fdbe3f00b2137879a8a

SHA512
6ea58716947a2093849e5bcd156abd635cb02fdd500414dd83105c95e8d7e42419c0200d4a19e9b42dff46b54ec7d2abdc1e3bb468416078896f4c971bc2b9c3

Download Submit
C:\Windows\System32\icarus_rvrt.exe

Filesize
53KB

MD5
963f6f9ace0013c1bc6d6e577cdeeb46

SHA1
1d7009b5b086fc78affd5eb5c9398c94271cedb2

SHA256
4312f19be115f1032db281344af1ddc4e683ee01cc66384ec6a0344e037bbe16

SHA512
a205ad7b3234ec56e3183c80bdfefe036ac3c89caf3b4190bfab073e01b8eb94d0ad963eee35e5d67c84a269483908a1b00e7c251fdaed6f42fdd03f0e4b3a41

Download Submit
C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\avg-av-vps\dump_process.exe

Filesize
3.4MB

MD5
d13b1f65640174e78628d31847488cf1

SHA1
4c81c14995450bad5d120b39d7824b3f7603e396

SHA256
c7cc532413b7475c13e3bb110b711d7c8fe40dd5b243a50866a761c21a7f23e0

SHA512
2ca84671fb3cdeaa77ad0f9677968cb64540bf764eede14fa3efb1c50ee8b4de45c65624d8f5d383d455795e6b6e9ef54e5e0e67531ebb7716bed920e4c8742c

Download Submit
C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\avg-av-vps\icarus_product.dll

Filesize
924KB

MD5
70189364278b553677563d326b8e911d

SHA1
5f6060706340469a5a2e27dfe63d28c82c523c21

SHA256
7fbeb192c2595773759a4cd9c176475d795ac6ca16c5238b9273f039ad365d03

SHA512
f834a032e16382be6eb24a275a625c9edaae3ecb3137c636e128700143018d194363ede5ea716c934faa9fc93a34f2895ded57c5eb8a33c8ada202638b23285f

Download Submit
C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\avg-av\config.def

Filesize
795B

MD5
89a36b047c452cd80b88265710699cdd

SHA1
5ddd7cc82716f3b648bd84c14b7d9fa67ced7afb

SHA256
78b6bbb06b5b1553a7b923126dd94c6935cd40660e7ae180e2aa84af64bf495d

SHA512
bd7dfcb9a9f2ddfa78beb9e64be5304f800ac28c25a472afb5c06ee3ee8f7818ebed0fe5985546019a49352e7e7678dc240ddb40b5b443f0da0c4226ef51b6fc

Download Submit
C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\avg-av\config.def.edat

Filesize
21KB

MD5
c2e4318fd044d008e2f693d1468b8add

SHA1
94ba54f9776a3a1b4afffb7a16360c30d4baf08b

SHA256
6a28fda4747254b73003c6ba28283a4911c033ea1d02f1fb270e7efb13eb4f50

SHA512
cf671317be213d173ebc81805f14f859ef1c432bfa6db11fa946415c1d0d7079cb1f1564f714c641ba5c30be1b2d5a45d0d85b3350821ac66e516d815c0c13dd

Download Submit
C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\avg-av\edition.edat

Filesize
2B

MD5
9bf31c7ff062936a96d3c8bd1f8f2ff3

SHA1
f1abd670358e036c31296e66b3b66c382ac00812

SHA256
e629fa6598d732768f7c726b4b621285f9c3b85303900aa912017db7617d8bdb

SHA512
9a6398cffc55ade35b39f1e41cf46c7c491744961853ff9571d09abb55a78976f72c34cd7a8787674efa1c226eaa2494dbd0a133169c9e4e2369a7d2d02de31a

Download Submit
C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\avg-av\icarus_product.dll

Filesize
6.9MB

MD5
3d714597def4279dcde55e5cce1dac39

SHA1
02b42265775a2aa355d86142545da973c23ee380

SHA256
fc00260835d2dbd8cf2a454680f916cbd0c6bd16a2f7995c0d863b632fe09548

SHA512
1aec0a3956524d35ed112bfa029affb1c170f0fc51b552005a282d84fb758c7ec37fced9c90e1cb8039a6f2b0343aada31b5eaf22df2bbea1f40e1e2b0b5020a

Download Submit
C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\common\bug_report.exe

Filesize
5.8MB

MD5
3a350b5eae9b788b70060ee1ed768e0c

SHA1
634ad2699b83e09ab512a3acc53f44d5e0401aac

SHA256
66976f4ed69bf02d2050dcb51f710fdbf8dd63840a76141058b1f0245844b2f3

SHA512
2d08388779eaecb751d991443e9ea2fc6f6e9981776fc681792e6b233c862257edee0250b863e5f96b99c9fae9b29428d30bf1ba0f1a7cac52670f99af7c1324

Download Submit
C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\common\icarus.exe

Filesize
8.2MB

MD5
30d80e98657dadeb58637cc1cd8cc8ad

SHA1
fe1a30af29cb874a3e905aea9e5dd47a346855a0

SHA256
ba4418cd8f94ab5d154e7edf66be900a32b119a02b0f2c9c3abfa8c95097787f

SHA512
63f32c36553d9e08e56bd4f5191f47071914c6aab55da883b3ccd32e028f70048c10df76b23804881ef41137c6ee0041de7e78b48253515094353dd864d00ea9

Download Submit
C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\common\icarus_mod.dll

Filesize
15KB

MD5
e6324c1818aea3a08805780a7e8ed4de

SHA1
eac6cc495bc465c0a64bea8ab25d978752e9e32f

SHA256
759913e0bf8b6d3a8fbb29082a42b10194a3d2fa1aca9d295c4aba0a25bca1bf

SHA512
044d2b2a56050c16140741092d7d4541dddf30f387dda0d482a8b4d39a18b6b0ec2efef97710f61dca6463b9c9dc6303d0e2b4a09a0c37d0ce77d2156c8a30b8

Download Submit
C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\common\icarus_ui.exe

Filesize
11.9MB

MD5
f752cb32e8b1e1efef23c1518b5889ce

SHA1
68c4d89f53e3eeffca1361e7444afb05f39db783

SHA256
809bdc4e35e15d09f7db516a94704f324960600ffde635c3d2d1b0ec0124f52d

SHA512
33559fee4f34923d7236c931982812486eae29ff9ad49bfbf01df53a8839c05dbdbd7395a6ae57f92c548fb082799550d17a961c103059ca2bdaa78279e013ee

Download Submit
C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\common\product-def.xml

Filesize
1.2MB

MD5
5426188376e1d312f38d8b7fe64533e5

SHA1
0086a6a785ec44ced352cf1ca85185ee59c6da66

SHA256
b32a9755e157bc8a6a09480f701e4556bbde96f46aa177e58d48a044406d5fad

SHA512
62fd92e042e9d8b4ab4d33b4bc40b52ce1ecfc66adf776efed56e14536886c5fc216e63db948da1d73dfb10755e7864cb61d55c0af0a578bbeb3ca48e97c56ed

Download Submit
C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\common\product-info.xml

Filesize
9KB

MD5
301dda5042434ea7d62be115bf76e4c1

SHA1
89f45179a0dd498360ffa2e9cd16f8a7600b487a

SHA256
51616e2c3dc3cb7ad759514a60ebe3bd7bf546317aa2da4b869d5aa591f95b85

SHA512
0b58159ae9fd2ac964e89ebfdb71c4f3f8126f8f1664c39ef56728f183ea24ae9a3f149b0d3f79ecf343cd8c84ce748a63bc7ee9007fdbd5682d493093a04888

Download Submit
C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\common\setupui.cont

Filesize
384KB

MD5
33e54b040d7c83607772ef20cdd74326

SHA1
6e51d21515d8e123f666c820062c9f2288a7506e

SHA256
e2680fc2f896efd75842d7cd7616f70805b13fda7cbadf1d8cb27fd869f2d51c

SHA512
2a2487b577d143873e6e50f3199f71b0be834b8e219655025ae9462cb8222996677fe759778d31e287906064e1d0edf014b82619a79de1a1e2b8953ee8bea197

Download Submit
C:\Windows\Temp\asw-2289045e-e049-47af-95e6-5c4f2316065e\icarus-info.xml

Filesize
1KB

MD5
2ef9406a4b5368da75d1d1d58011b88a

SHA1
c3cdaae95ded7127cfd0984f5222ea9616bacf4a

SHA256
d0ea4d1a30f8bdf1eeee98ca14ae5ed01e96fc7d684765073ad13ce6aad49fa3

SHA512
0b73c214a90bda16c8c5da667e0c4a51fff3d5e0709b17f40645ad1b47793d6ac2538455ae144f64a62156c7222694a30e1027a89242f73d959de45a05a660d0

Download Submit
C:\Windows\Temp\asw.6e405fb29634c519\avg_antivirus_free_online_setup.exe

Filesize
1.6MB

MD5
3c54c12295b96e53f121e11c0743f844

SHA1
3b3098d97d714a473bc0bf2e6b7a76da6795f298

SHA256
1a4570cf5f56e6f754fa21be2f7e1094548a1bfb3f80211111e54bdee0f59f79

SHA512
7f0f3f061c7cbbb413dc10d4e89692854004870516c89b63149db2918bdb5b79978009801b1e2e02e8c6e8219725fc6df65417a24883b1fdb728298dd50b1260

Download Submit
C:\Windows\Temp\asw.6e405fb29634c519\ecoo.edat

Filesize
34B

MD5
6fc51e7e73ed90f5f3d4f9fd5a0f6ff5

SHA1
ab67b034dffe53c370b63252342ef2a0c448676b

SHA256
c641c8944d72344744efe8802025feb83ff569280a1e1cbae8f7ec79d595b1c2

SHA512
dd5f43efef737fcd45932e31edf4e9662363ed2050847d5436e85c60f0a2cd1c4fb505317f1079d06d831a29695c57f3306c9cdd2eb3e6e6c343dd0bd267c710

Download Submit
C:\Windows\Temp\asw.6e405fb29634c519\eref.edat

Filesize
51B

MD5
15f75272d57783ee58a7b6dafe653ba5

SHA1
f20c8861f458ab094eb23b8350023daec2439ab6

SHA256
ca463eff28eb4db5d933c116005561791c167851ec7553669eca47276e8b6442

SHA512
2f1f4bb22b5ff5d271ffb047687ff4de3a9713893243fa0e4f4b4db8b55220714b034e690c7c0779754c90eb3ce3aae1c0dd624910fd1ae6ae76666bf5d6aae5

Download Submit