3988557312ceca76bee86e2df0c34f2cdc7b2dc370846ba8390ae1d36d61e900

Analysis

max time kernel
155s
max time network
182s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
12/05/2023, 19:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Setup.exe
Size

693.2MB
MD5

1afd68147ac485753917930116210a40
SHA1

8c8deec48a8a7c3d4e5af8e26e8b3d09decad08b
SHA256

3988557312ceca76bee86e2df0c34f2cdc7b2dc370846ba8390ae1d36d61e900
SHA512

4cd02d60b7f30c7b5e08e312330342c124c9fb4cda01ba99e8d765a4040ee7832760a25c1d9e32a5e5a3a4521a4bd2c2a75a6b48395f32da1959f2117dadeacb
SSDEEP

12582912:bGbk9hNMUyBXnkRSuLBCF8WwX2VX0I/wY3jCMQRoMCb+RSGcYHqEtZF8:lM5XnVTSX2VX0I/fjCpob+RSGdx8

Score

8^/10

persistence

Malware Config

Signatures

Blocklisted process makes network request 2 IoCs

flow	pid	Process
48	4460	msiexec.exe
50	4460	msiexec.exe

Executes dropped EXE 2 IoCs

pid	Process
224	vegas180.exe
4020	ErrorReportLauncher.exe

Loads dropped DLL 64 IoCs

pid	Process
2348	MsiExec.exe
2348	MsiExec.exe
2984	MsiExec.exe
2348	MsiExec.exe
2984	MsiExec.exe
3472	MsiExec.exe
3472	MsiExec.exe
3472	MsiExec.exe
4392	MsiExec.exe
4392	MsiExec.exe
4392	MsiExec.exe
2432	MsiExec.exe
2432	MsiExec.exe
2432	MsiExec.exe
4832	MsiExec.exe
4832	MsiExec.exe
4832	MsiExec.exe
2844	MsiExec.exe
2844	MsiExec.exe
2844	MsiExec.exe
2560	MsiExec.exe
2560	MsiExec.exe
2560	MsiExec.exe
4224	MsiExec.exe
4224	MsiExec.exe
4224	MsiExec.exe
1488	MsiExec.exe
1488	MsiExec.exe
1488	MsiExec.exe
3140	MsiExec.exe
3140	MsiExec.exe
3140	MsiExec.exe
4828	MsiExec.exe
4828	MsiExec.exe
4828	MsiExec.exe
4848	MsiExec.exe
4848	MsiExec.exe
4848	MsiExec.exe
3644	MsiExec.exe
772	MsiExec.exe
1924	MsiExec.exe
2024	MsiExec.exe
2024	MsiExec.exe
4220	MsiExec.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
224	vegas180.exe
2984	MsiExec.exe
2984	MsiExec.exe

Registers COM server for autorun 1 TTPs 64 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E3E4541-8339-11D0-AEBC-00A0C9053912}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00000005-0F56-11D2-9887-00A0C969725B}\InprocServer32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA97FC2A-0F62-11D2-9887-00A0C969725B}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB0F363-3A6E-485D-B39C-00AA006BA2BA}\InprocServer32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{70046AFD-C0B1-4EB0-9D13-00AA006BA2BA}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\mchammer_x64.dll"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B97C0F22-196D-11D1-B99B-00A0C9053912}\InprocServer32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8448721-96FD-11D0-AEBC-00A0C9053912}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfppack2_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{026D0AA0-9BB9-11D0-AEBC-00A0C9053912}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F59DD74A-14E1-11D2-B3B2-00A0C90642CC}\InprocServer32	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8010C341-6D4C-4390-B828-E4D246C3DDB2}\InprocServer32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{607682E0-6E21-11D0-AEBC-00A0C9053912}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfppack1_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{28D9F1E0-6ECC-11D0-AEBC-00A0C9053912}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{D616F3E0-D622-11CE-AAC5-0020AF0B99A3}\InprocServer32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{D6802BA1-A056-11D0-AEBC-00A0C9053912}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfppack3_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F59DD74A-14E1-11D2-B3B2-00A0C90642CC}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfxpfx1_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA97FC2A-0F62-11D2-9887-00A0C969725B}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfxpfx2_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00000003-0F56-11D2-9887-00A0C969725B}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB0F363-3A6E-485D-B39C-00AA006BA2BA}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{413A0975-168F-46C8-AE58-88E8D4D36AFD}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sffrgpnv_x64.dll"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{28D9F1E1-6ECC-11D0-AEBC-00A0C9053912}\InprocServer32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00000008-0F56-11D2-9887-00A0C969725B}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfxpfx3_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3F901A20-79BE-11D0-AEBC-00A0C9053912}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{D6802BA0-A056-11D0-AEBC-00A0C9053912}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23C9F225-40EC-11D2-9D36-00C04F8EDC1E}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sftrkfx1_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00000000-0F56-11D2-9887-00A0C969725B}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8010C341-6D4C-4390-B828-E4D246C3DDB2}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\mchammer_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EB6213DB-08FF-4510-9F8D-3058B0ECE4C6}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B7228EE-4584-11D1-B4CB-00A0C9270A10}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfppack2_x64.dll"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EE38CA88-D78E-4BFB-B05E-577892730C83}\InprocServer32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{260DF3E2-AC77-11D2-9E93-00C04F68BE44}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sftrkfx1_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A6A78627-D619-48BF-AD26-0C6B44B5C7D8}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00000004-0F56-11D2-9887-00A0C969725B}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{E2D7C794-D104-4B28-9FB3-00AA006BA2BA}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A6DF8F41-BAF4-11D0-AEBC-00A0C9053912}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfppack2_x64.dll"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00000008-0F56-11D2-9887-00A0C969725B}\InprocServer32	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5204E8B8-4657-4733-A6EB-00AA006BA2BA}\InprocServer32	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8448721-96FD-11D0-AEBC-00A0C9053912}\InprocServer32	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00000004-0F56-11D2-9887-00A0C969725B}\InprocServer32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B7227EE-4584-11D1-B4CB-00A0C9270A10}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3F901A20-79BE-11D0-AEBC-00A0C9053912}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfppack3_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{260DF3E1-AC77-11D2-9E93-00C04F68BE44}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{D616F3E0-D622-11CE-AAC5-0020AF0B99A3}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfppack2_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00000002-0F56-11D2-9887-00A0C969725B}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8CB69A0B-10E8-11D2-9B89-00104B8D13C2}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sftrkfx1_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{40986922-0F56-11D2-9887-00A0C969725B}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfxpfx2_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{026D0AA1-9BB9-11D0-AEBC-00A0C9053912}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfppack2_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B97C0F24-196D-11D1-B99B-00A0C9053912}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfppack3_x64.dll"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C7B5FB82-1031-11D2-9887-00A0C969725B}\InprocServer32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B7226EE-4584-11D1-B4CB-00A0C9270A10}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{026D0AA2-9BB9-11D0-AEBC-00A0C9053912}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA97FC26-0F62-11D2-9887-00A0C969725B}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{65A0ED34-90A1-46F6-99B7-00AA006BA2BA}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfxpfx3_x64.dll"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1010333D-5114-41CE-807B-4483785EEF84}\InprocServer32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{ED1B4101-93BE-11D0-AEBC-00A0C9053912}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{607682E1-6E21-11D0-AEBC-00A0C9053912}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B7226EE-4584-11D1-B4CB-00A0C9270A10}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfppack2_x64.dll"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{824AFE10-2098-4254-B2C3-00A0C9053912}\InprocServer32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0000000A-0F56-11D2-9887-00A0C969725B}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfxpfx3_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EB6213DB-08FF-4510-9F8D-3058B0ECE4C6}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sffrgpnv_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{7298A3E1-78EE-11D0-AEBC-00A0C9053912}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfppack1_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{026D0AA2-9BB9-11D0-AEBC-00A0C9053912}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfppack2_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8CB69A0A-10E8-11D2-9B89-00104B8D13C2}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sftrkfx1_x64.dll"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2F27D2C8-2AA0-48A2-B082-00AA006BA2BA}\InprocServer32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{026D0AA0-9BB9-11D0-AEBC-00A0C9053912}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfppack2_x64.dll"	MsiExec.exe

Enumerates connected drives 3 TTPs 24 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\F:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe

Drops file in System32 directory 52 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\mfcm110.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\mfc110fra.dll	msiexec.exe
File created	C:\Windows\SysWOW64\msvcr71.dll	msiexec.exe
File created	C:\Windows\SysWOW64\CddbLangRU.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\DLLDEV32i.dll	vegas180.exe
File opened for modification	C:\Windows\system32\msvcr110.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vccorlib110.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc110kor.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc110rus.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\msvcr110.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\mfc110chs.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc110chs.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc110deu.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\mfc110.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\mfc110u.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\mfc110enu.dll	msiexec.exe
File created	C:\Windows\SysWOW64\CddbLangFR.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcamp110.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc110fra.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\vcamp110.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\mfcm110u.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\mfc110kor.dll	msiexec.exe
File created	C:\Windows\SysWOW64\CddbLangES.dll	msiexec.exe
File created	C:\Windows\SysWOW64\msvcp71.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp110.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcomp110.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\msvcp110.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\mfcm110.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\mfc110rus.dll	msiexec.exe
File created	C:\Windows\SysWOW64\CddbLangDE.dll	msiexec.exe
File created	C:\Windows\SysWOW64\DLLDEV32i.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc110enu.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\atl110.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\vccorlib110.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\mfc110deu.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\mfc110esn.dll	msiexec.exe
File created	C:\Windows\SysWOW64\CddbLangJA.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc110.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc110cht.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc110ita.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\mfc110cht.dll	msiexec.exe
File created	C:\Windows\SysWOW64\CDDBControl.dll	msiexec.exe
File created	C:\Windows\SysWOW64\msvcr70.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\mfc110ita.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\mfc110jpn.dll	msiexec.exe
File opened for modification	C:\Windows\system32\atl110.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc110u.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfcm110u.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc110esn.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc110jpn.dll	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\vcomp110.dll	msiexec.exe
File created	C:\Windows\SysWOW64\CDDBUI.dll	msiexec.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\FileIO Plug-Ins\mcplug2\mc_mux_mxf.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\VEGASCapture\locales\da.pak	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\bdmux\BdmuxServer.exe.config	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\FileIO Plug-Ins\mcmp4xavcs\mc_cpu\mc_config_avc.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\MAGIX Plugins\essentialFX\Presets\Compressor\[Sys] Compressor_Master_Mixdown.efx	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\MAGIX Plugins\essentialFX\Help\EN\eFX_Reverb.htm	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\OFX Video Plug-Ins\Stabilize.ofx.bundle\Contents\Presets\PresetPackage.xml	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\FileIO Plug-Ins\mxfplug3\SMDK-VC110-x64-4_0_0_scs.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\FileIO Plug-Ins\mcmp4plug2\mc_cpu\mc_dec_aac.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\sfcd.cdd.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\protein\Forms\UnlockFormMail_fr_CA.rtf	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\Microsoft.EntityFrameworkCore.Design.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\readme\HTML_ASSETS\release-banner_rus.jpg	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\pt-BR\ScriptPortal.MediaSoftware.Archive.resources.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\MAGIX Plugins\essentialFX\Help\EN\23817.png	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\protein\Forms\UnlockFormFax_ja_JP.rtf	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\MAGIX Plugins\essentialFX\Presets\Reverb\[Sys] Large Concert Hall.efx	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\OFX Video Plug-Ins\MagixAiFx.ofx.bundle\Contents\Resources\MagixAiFx.es-ES.xml	msiexec.exe
File created	C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Help Files\sfppack1_x64.chm	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\OFX Video Plug-Ins\Vfx1.ofx.bundle\Contents\Presets\presetpackage.ko-KR.xml	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\de\ScriptPortal.Vegas.MobileSync.resources.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\MAGIX Plugins\essentialFX\Presets\Reverb\[Sys] Central Station.efx	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\pt-BR\ScriptPortal.MediaSoftware.VideoEffectsUI.resources.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\OpenColorIO\configs\aces_1.1\luts\V-Log_to_linear.spi1d	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\config.json	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\MAGIX Plugins\essentialFX\Presets\TubeStage\[Sys] Warm Tube Preamp.efx	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\Online\vimeo.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\VEGASCapture\locales\ms.pak	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\VEGASCapture\ffmpeg.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\ErrorReport.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\vegasjpn.tut	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\FileIO Plug-Ins\mxfplug3\mxfplug3.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\MAGIX Plugins\essentialFX\Help\EN\30449.png	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\protein\Bitmaps\CUnlockVersionDlg.ini	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\protein\Forms\UnlockFormFax_pl_PL.rtf	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\FileIO Plug-Ins\mcplug2\mcplug2.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\x86\ffplugsk32.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\FileIO Plug-Ins\mxfplug\smdkwrap.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\OpenColorIO\configs\aces\luts\adx_adx10_to_cdd.spimtx	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\OFX Video Plug-Ins\OfxStitch.ofx.bundle\Contents\Win64\VrDualStitchCpu.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\e5400a06c74d41f5b12d430bbaa23d0b\plugin.cfg	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\MAGIX Plugins\essentialFX\Help\EN\obook.gif	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\MAGIX Plugins\essentialFX\Presets\TubeStage\[Sys] Dirty Drums.efx	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\FileIO Plug-Ins\aifplug\aifplug.chm	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\FileIO Plug-Ins\flacplug\flacplug.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\es\MediaMgrNgen.resources.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\fr\ScriptPortal.MediaSoftware.MediaMgr.resources.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\VEGASCapture\locales\fa.pak	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\VEGASCapture\locales\hr.pak	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\protein\Bitmaps\CUnlockVersionP3MessageBox.ini	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\fonts\Gloss_And_Bloom.otf	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\sfldsim.ldd.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\OFX Video Plug-Ins\ofx360Stabilizer.ofx.bundle\Contents\Resources\ofx360Stabilizer.ko-KR.xml	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\OpenColorIO\configs\aces_1.1\luts\Dolby_PQ_1000_nits_Shaper.RRT.Rec.2020_HLG__1000_nits_.spi3d	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\VEGASCapture\libEGL.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\OFX Video Plug-Ins\Filters.ofx.bundle\Contents\Resources\Filters.ja-JP.xml	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\OFX Video Plug-Ins\Vfx1.ofx.bundle\Contents\Resources\Vfx1.pt-BR.xml	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\fr\MediaMgrSqlWrapper.resources.dll	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\FileIO Plug-Ins\mxfplug\mc_enc_mp2v.003	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\protein\Forms\UnlockFormServiceCenter_ja_JP.rtf	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\MAGIX Plugins\essentialFX\Presets\TubeStage\[Sys] Megaphone.efx	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\protein\Forms\UnlockFormMail_fi_FI.rtf	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\OFX Video Plug-Ins\MagixAiFx.ofx.bundle\Contents\Resources\MagixAiFx.ja-JP.xml	msiexec.exe
File created	C:\Program Files\VEGAS\VEGAS Pro 18.0\FileIO Plug-Ins\gifplug\gifplug.dll	msiexec.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\vcomp140.dll.B796D14F_AD8C_3A96_B2B8_3D8FF8499DA8	msiexec.exe
File created	C:\Windows\assembly\GACLock.dat	mscorsvw.exe
File opened for modification	C:\Windows\assembly\NativeImages_v2.0.50727_32\index10.dat	mscorsvw.exe
File opened for modification	C:\Windows\assembly\NativeImages_v2.0.50727_32\index14.dat	mscorsvw.exe
File created	C:\Windows\WinSxS\InstallTemp\20230512221324996.0\8.0.50727.4053.policy	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\vccorlib140.dll.AF4EABEE_4589_3789_BA0A_C83A71662E1D	msiexec.exe
File opened for modification	C:\Windows\assembly\NativeImages_v2.0.50727_32\index19.dat	mscorsvw.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140deu.dll.7631C5EE_5656_3421_AE44_00C5FBD84302	msiexec.exe
File created	C:\Windows\assembly\ngenlock.dat	mscorsvw.exe
File created	C:\Windows\assembly\GACLock.dat	mscorsvw.exe
File created	C:\Windows\assembly\ngenlock.dat	mscorsvw.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfcm140u.dll.B796D14F_AD8C_3A96_B2B8_3D8FF8499DA8	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140deu.dll.D6D6A777_183E_3133_B603_785C0E6F235B	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140ita.dll.D6D6A777_183E_3133_B603_785C0E6F235B	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140deu.dll.376F96B6_AD69_3104_A1C3_B0A3704DB24A	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\msvcp140.dll.D6D6A777_183E_3133_B603_785C0E6F235B	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140cht.dll.D6D6A777_183E_3133_B603_785C0E6F235B	msiexec.exe
File opened for modification	C:\Windows\assembly\NativeImages_v2.0.50727_32\index17.dat	mscorsvw.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140u.dll.7631C5EE_5656_3421_AE44_00C5FBD84302	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\vcamp140.dll.B796D14F_AD8C_3A96_B2B8_3D8FF8499DA8	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140.dll.D6D6A777_183E_3133_B603_785C0E6F235B	msiexec.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2486.tmp\System.DirectoryServices.dll	mscorsvw.exe
File opened for modification	C:\Windows\assembly\NativeImages_v2.0.50727_32\index16.dat	mscorsvw.exe
File created	C:\Windows\Microsoft.NET\ngenserviceclientlock.dat	ngen.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\indexd.dat	mscorsvw.exe
File created	C:\Windows\WinSxS\InstallTemp\20230512221322136.0\msvcm90.dll	msiexec.exe
File created	C:\Windows\assembly\ngenlock.dat	mscorsvw.exe
File created	C:\Windows\WinSxS\InstallTemp\20230512221323589.0\msvcm90.dll	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\vcruntime140.dll.376F96B6_AD69_3104_A1C3_B0A3704DB24A	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfcm140.dll.B796D14F_AD8C_3A96_B2B8_3D8FF8499DA8	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140ita.dll.376F96B6_AD69_3104_A1C3_B0A3704DB24A	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140cht.dll.7631C5EE_5656_3421_AE44_00C5FBD84302	msiexec.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\index11.dat	mscorsvw.exe
File created	C:\Windows\WinSxS\InstallTemp\20230512221324667.0\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd.cat	msiexec.exe
File opened for modification	C:\Windows\assembly\NativeImages_v2.0.50727_32\index18.dat	mscorsvw.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140ita.dll.D6D6A777_183E_3133_B603_785C0E6F235B	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfcm140.dll.7631C5EE_5656_3421_AE44_00C5FBD84302	msiexec.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPF567.tmp\mux.net.dll	mscorsvw.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP91E.tmp\System.Configuration.dll	mscorsvw.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfcm140.dll.BC0B92F1_D156_35A8_A565_6689E8DDDA1F	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140cht.dll.BC0B92F1_D156_35A8_A565_6689E8DDDA1F	msiexec.exe
File created	C:\Windows\Installer\{75111FE1-CE55-11EA-8B12-00155D43CFCE}\sfa.ico	msiexec.exe
File created	C:\Windows\WinSxS\InstallTemp\20230512221323246.0\amd64_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_673f7fa2.cat	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140jpn.dll.D6D6A777_183E_3133_B603_785C0E6F235B	msiexec.exe
File created	C:\Windows\assembly\GACLock.dat	mscorsvw.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140.dll.D6D6A777_183E_3133_B603_785C0E6F235B	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\concrt140.dll.BC0B92F1_D156_35A8_A565_6689E8DDDA1F	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIE65B.tmp	msiexec.exe
File created	C:\Windows\WinSxS\InstallTemp\20230512221321996.0\9.0.30729.4148.cat	msiexec.exe
File created	C:\Windows\WinSxS\InstallTemp\20230512221325777.0\8.0.50727.4053.policy	msiexec.exe
File opened for modification	C:\Windows\Installer\{75111FE1-CE55-11EA-8B12-00155D43CFCE}\vmspeproject.ico (new loc)	msiexec.exe
File opened for modification	C:\Windows\assembly\NativeImages_v2.0.50727_32\index16.dat	mscorsvw.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\msvcp140.dll.376F96B6_AD69_3104_A1C3_B0A3704DB24A	msiexec.exe
File created	C:\Windows\assembly\ngenlock.dat	mscorsvw.exe
File opened for modification	C:\Windows\assembly\NativeImages_v2.0.50727_32\index11.dat	mscorsvw.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2021.tmp\System.Transactions.dll	mscorsvw.exe
File created	C:\Windows\WinSxS\InstallTemp\20230512221321558.0\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2.manifest	msiexec.exe
File created	C:\Windows\WinSxS\InstallTemp\20230512221322824.0\vcomp90.dll	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140enu.dll.B796D14F_AD8C_3A96_B2B8_3D8FF8499DA8	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\mfc140jpn.dll.D6D6A777_183E_3133_B603_785C0E6F235B	msiexec.exe
File created	C:\Windows\WinSxS\InstallTemp\20230512221323090.0\9.0.30729.4148.cat	msiexec.exe
File created	C:\Windows\WinSxS\InstallTemp\20230512221324449.0\amd64_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_22d6ba8a.manifest	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\00DB3E6755ECAE114B900051D534FCEC\1.0.0\F_CENTRAL_vcomp100_x64.1C11561A_11CB_36A7_8A47_D7A042055FA7	msiexec.exe

Modifies Control Panel 7 IoCs

evasion

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\Microsoft Input Devices\Mouse\Exceptions	Setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\Microsoft Input Devices\Mouse\Exceptions\1001\Filename = "Setup.exe"	Setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\Microsoft Input Devices\Mouse\Exceptions\1001\Description = "Sony Application"	Setup.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\Microsoft Input Devices\Mouse\Exceptions\1001\Version = "4294967295"	Setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\Microsoft Input Devices\Mouse\Exceptions\1001	Setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\Microsoft Input Devices	Setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\Microsoft Input Devices\Mouse	Setup.exe

Modifies data under HKEY_USERS 5 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\1F	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\20	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\1E\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1e	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1f	msiexec.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F3B8E880-B4E0-11D0-AEBC-00A0C9053912}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfppack2_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{01894669-BF86-482D-8FA2-BC0C7FFB1D38}\TypeLib\Version = "1.0"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{607682E1-6E21-11D0-AEBC-00A0C9053912}\InprocServer32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{DFEF3E96-F1D4-47CE-A429-2CC8C10DFDB6}\ProgID\ = "CDDBControl.CddbID3TagManager.1"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BBF37BA1-2F4F-11D3-B02F-00C04F4C0826}\ProxyStubClsid32	MsiExec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance\{260DF3E1-AC77-11D2-9E93-00C04F68BE44}\FilterData = 0200000000002000020000000000000030706933000000000000000001000000000000000000000030747933000000006000000070000000317069330800000000000000010000000000000000000000307479330000000060000000700000006175647300001000800000aa00389b7100000000000000000000000000000000	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance\{0000000C-0F56-11D2-9887-00A0C969725B}\FriendlyName = "VEGAS ExpressFX Audio Restoration"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79A6E2D9-FE15-47DC-8AD4-53A57007F8C7}\TypeLib\Version = "1.0"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5550702B-8DE7-45A1-A530-ADCB51AE36A7}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F5F6A23D-301B-11D3-B030-00C04F4C0826}\ProxyStubClsid32	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3F901A21-79BE-11D0-AEBC-00A0C9053912}	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance\{8CB69A0A-10E8-11D2-9B89-00104B8D13C2}	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CDDBControl.CddbInfoWindow\CLSID	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5F6A23D-301B-11D3-B030-00C04F4C0826}\TypeLib	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8FEDD91C-AC3B-46D5-9397-6F9F23A217F3}\TypeLib\ = "{B0528CD1-F67E-11D2-8F8E-00C04F4C3B9F}"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{74D54F5E-CE55-11EA-BD9E-00155D43CFCE}\ProgID	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EE38CA88-D78E-4BFB-B05E-577892730C83}\ = "Volume"	MsiExec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{026D0AA0-9BB9-11D0-AEBC-00A0C9053912}\Pins\Input\AllowedMany = "0"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AB7AB3FF-EB55-4B40-AE1D-80ECEFA32E17}\InprocServer32\ThreadingModel = "Apartment"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0000000B-0F56-11D2-9887-00A0C969725B}\Pins\Output	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8FCA01DA-D48C-4B1C-9DD3-6C01F9D3D4AF}\TypeLib\ = "{B0528CD1-F67E-11D2-8F8E-00C04F4C3B9F}"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8B67BD60-1238-11D3-8F9D-00C04F4C3B9F}\TypeLib\Version = "1.0"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F3B8E880-B4E0-11D0-AEBC-00A0C9053912}\Pins\Input\Types	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BBF37B99-2F4F-11D3-B02F-00C04F4C0826}\ProxyStubClsid32	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B97C0F22-196D-11D1-B99B-00A0C9053912}\Pins\Input	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{D6802BA0-A056-11D0-AEBC-00A0C9053912}\Pins\Input\Types	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BBF37B9F-2F4F-11D3-B02F-00C04F4C0826}	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{0B6B179D-6E42-45EE-AAD0-13B0E698799D}\TypeLib\Version = "1.0"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6740769B-689B-42E5-B711-13A083C257CC}\TypeLib\ = "{B0528CD1-F67E-11D2-8F8E-00C04F4C3B9F}"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8010C341-6D4C-4390-B828-E4D246C3DDB2}\InprocServer32	MsiExec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{260DF3E1-AC77-11D2-9E93-00C04F68BE44}\Pins\Output\Direction = "1"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{260DF3E1-AC77-11D2-9E93-00C04F68BE44}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7B34EB93-450E-4BFA-84E5-8999010B0780}\ = "ICddbDataList"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{869419DD-501F-11D3-8CDC-00C04F6B8E4C}\Pins\Output\Types\{73647561-0000-0010-8000-00AA00389B71}	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FB9B3E2A-CCD4-434E-92DD-8703698B5E11}\ProgID	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0B6B179D-6E42-45EE-AAD0-13B0E698799D}\TypeLib	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E3E4540-8339-11D0-AEBC-00A0C9053912}\Pins\Output\Types\{73647561-0000-0010-8000-00AA00389B71}	MsiExec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00000008-0F56-11D2-9887-00A0C969725B}\Merit = "2097152"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F59DD74A-14E1-11D2-B3B2-00A0C90642CC}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfxpfx1_x64.dll"	MsiExec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00000005-0F56-11D2-9887-00A0C969725B}\Pins\Input\IsRendered = "0"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D734EAE8-0810-4513-99B6-DDAC4BC30E29}\InprocServer32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5F6A237-301B-11D3-B030-00C04F4C0826}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8B67BD60-1238-11D3-8F9D-00C04F4C3B9F}	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{11E7B631-8B1D-48e5-81B8-C2C15F39711A}	vegas180.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1EF1115755ECAE11B8210051D534FCEC\VEGASCapture	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{65A0ED34-90A1-46F6-99B7-00AA006BA2BA}\InprocServer32\ = "C:\\Program Files (x86)\\VEGAS\\Shared Plug-Ins\\Audio_x64\\sfxpfx3_x64.dll"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance\{0000000C-0F56-11D2-9887-00A0C969725B}\CLSID = "{0000000C-0F56-11D2-9887-00A0C969725B}"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6E0A000D-0847-4367-883F-8A08C8A2FE86}\ = "ICddbWMATag"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1EF1115755ECAE11B8210051D534FCEC\SourceList\Media\30 = ";VEGAS Pro 18.0 18.0 Install Disc"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0000000C-0F56-11D2-9887-00A0C969725B}	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1EF1115755ECAE11B8210051D534FCEC\sonycapture	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1EF1115755ECAE11B8210051D534FCEC\SourceList\Media\94 = ";VEGAS Pro 18.0 18.0 Install Disc"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB0F363-3A6E-485D-B39C-00AA006BA2BA}\InprocServer32\ThreadingModel = "Both"	MsiExec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{607682E0-6E21-11D0-AEBC-00A0C9053912}\Pins\Output\AllowedZero = "0"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6740769B-689B-42E5-B711-13A083C257CC}\ = "ICDDBControl2"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{D6802BA0-A056-11D0-AEBC-00A0C9053912}\Pins\Output\Types	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BBF37B9B-2F4F-11D3-B02F-00C04F4C0826}\TypeLib\Version = "1.0"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{B2C767ED-0E50-4A1D-AF6E-EAF1F16EB1C2}	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{B4B4E52E-D5F1-47A4-84AE-4F01BF37E1D7}\ProxyStubClsid32	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1EF1115755ECAE11B8210051D534FCEC\colorcorrect_nohelp	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\00DB3E6755ECAE114B900051D534FCEC\SourceList\Media\458 = ";"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B97C0F22-196D-11D1-B99B-00A0C9053912}\Pins\Output\AllowedMany = "0"	MsiExec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{28D9F1E0-6ECC-11D0-AEBC-00A0C9053912}\Pins\Output\IsRendered = "0"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CDDBControl.CDDBControl.1\ = "CDDBControl Class"	MsiExec.exe

Modifies system certificate store 2 TTPs 2 IoCs

evasion spyware trojan

Install Root Certificate

T1130

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob = 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	vegas180.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2	vegas180.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
400	Setup.exe
400	Setup.exe
4460	msiexec.exe
4460	msiexec.exe
4460	msiexec.exe
4460	msiexec.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3432	msiexec.exe
Token: SeIncreaseQuotaPrivilege	3432	msiexec.exe
Token: SeSecurityPrivilege	4460	msiexec.exe
Token: SeCreateTokenPrivilege	3432	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	3432	msiexec.exe
Token: SeLockMemoryPrivilege	3432	msiexec.exe
Token: SeIncreaseQuotaPrivilege	3432	msiexec.exe
Token: SeMachineAccountPrivilege	3432	msiexec.exe
Token: SeTcbPrivilege	3432	msiexec.exe
Token: SeSecurityPrivilege	3432	msiexec.exe
Token: SeTakeOwnershipPrivilege	3432	msiexec.exe
Token: SeLoadDriverPrivilege	3432	msiexec.exe
Token: SeSystemProfilePrivilege	3432	msiexec.exe
Token: SeSystemtimePrivilege	3432	msiexec.exe
Token: SeProfSingleProcessPrivilege	3432	msiexec.exe
Token: SeIncBasePriorityPrivilege	3432	msiexec.exe
Token: SeCreatePagefilePrivilege	3432	msiexec.exe
Token: SeCreatePermanentPrivilege	3432	msiexec.exe
Token: SeBackupPrivilege	3432	msiexec.exe
Token: SeRestorePrivilege	3432	msiexec.exe
Token: SeShutdownPrivilege	3432	msiexec.exe
Token: SeDebugPrivilege	3432	msiexec.exe
Token: SeAuditPrivilege	3432	msiexec.exe
Token: SeSystemEnvironmentPrivilege	3432	msiexec.exe
Token: SeChangeNotifyPrivilege	3432	msiexec.exe
Token: SeRemoteShutdownPrivilege	3432	msiexec.exe
Token: SeUndockPrivilege	3432	msiexec.exe
Token: SeSyncAgentPrivilege	3432	msiexec.exe
Token: SeEnableDelegationPrivilege	3432	msiexec.exe
Token: SeManageVolumePrivilege	3432	msiexec.exe
Token: SeImpersonatePrivilege	3432	msiexec.exe
Token: SeCreateGlobalPrivilege	3432	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe
Token: SeRestorePrivilege	4460	msiexec.exe
Token: SeTakeOwnershipPrivilege	4460	msiexec.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
224	vegas180.exe
224	vegas180.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 400 wrote to memory of 3432	400	Setup.exe	90
PID 400 wrote to memory of 3432	400	Setup.exe	90
PID 4460 wrote to memory of 2348	4460	msiexec.exe	94
PID 4460 wrote to memory of 2348	4460	msiexec.exe	94
PID 4460 wrote to memory of 2348	4460	msiexec.exe	94
PID 4460 wrote to memory of 2984	4460	msiexec.exe	95
PID 4460 wrote to memory of 2984	4460	msiexec.exe	95
PID 4460 wrote to memory of 3472	4460	msiexec.exe	98
PID 4460 wrote to memory of 3472	4460	msiexec.exe	98
PID 4460 wrote to memory of 4392	4460	msiexec.exe	99
PID 4460 wrote to memory of 4392	4460	msiexec.exe	99
PID 4460 wrote to memory of 2432	4460	msiexec.exe	100
PID 4460 wrote to memory of 2432	4460	msiexec.exe	100
PID 4460 wrote to memory of 4832	4460	msiexec.exe	101
PID 4460 wrote to memory of 4832	4460	msiexec.exe	101
PID 4460 wrote to memory of 2844	4460	msiexec.exe	102
PID 4460 wrote to memory of 2844	4460	msiexec.exe	102
PID 4460 wrote to memory of 2560	4460	msiexec.exe	103
PID 4460 wrote to memory of 2560	4460	msiexec.exe	103
PID 4460 wrote to memory of 4224	4460	msiexec.exe	104
PID 4460 wrote to memory of 4224	4460	msiexec.exe	104
PID 4460 wrote to memory of 1488	4460	msiexec.exe	105
PID 4460 wrote to memory of 1488	4460	msiexec.exe	105
PID 4460 wrote to memory of 3140	4460	msiexec.exe	106
PID 4460 wrote to memory of 3140	4460	msiexec.exe	106
PID 4460 wrote to memory of 4828	4460	msiexec.exe	107
PID 4460 wrote to memory of 4828	4460	msiexec.exe	107
PID 4460 wrote to memory of 4848	4460	msiexec.exe	108
PID 4460 wrote to memory of 4848	4460	msiexec.exe	108
PID 4460 wrote to memory of 3644	4460	msiexec.exe	109
PID 4460 wrote to memory of 3644	4460	msiexec.exe	109
PID 4460 wrote to memory of 3644	4460	msiexec.exe	109
PID 4460 wrote to memory of 772	4460	msiexec.exe	110
PID 4460 wrote to memory of 772	4460	msiexec.exe	110
PID 4460 wrote to memory of 772	4460	msiexec.exe	110
PID 4460 wrote to memory of 1924	4460	msiexec.exe	111
PID 4460 wrote to memory of 1924	4460	msiexec.exe	111
PID 4460 wrote to memory of 1924	4460	msiexec.exe	111
PID 4460 wrote to memory of 2024	4460	msiexec.exe	112
PID 4460 wrote to memory of 2024	4460	msiexec.exe	112
PID 4460 wrote to memory of 4220	4460	msiexec.exe	113
PID 4460 wrote to memory of 4220	4460	msiexec.exe	113
PID 4460 wrote to memory of 224	4460	msiexec.exe	114
PID 4460 wrote to memory of 224	4460	msiexec.exe	114
PID 224 wrote to memory of 4020	224	vegas180.exe	116
PID 224 wrote to memory of 4020	224	vegas180.exe	116
PID 2984 wrote to memory of 868	2984	MsiExec.exe	118
PID 2984 wrote to memory of 868	2984	MsiExec.exe	118
PID 2984 wrote to memory of 868	2984	MsiExec.exe	118
PID 868 wrote to memory of 1688	868	ngen.exe	120
PID 868 wrote to memory of 1688	868	ngen.exe	120
PID 868 wrote to memory of 1688	868	ngen.exe	120
PID 868 wrote to memory of 2528	868	ngen.exe	121
PID 868 wrote to memory of 2528	868	ngen.exe	121
PID 868 wrote to memory of 2528	868	ngen.exe	121
PID 868 wrote to memory of 1648	868	ngen.exe	122
PID 868 wrote to memory of 1648	868	ngen.exe	122
PID 868 wrote to memory of 1648	868	ngen.exe	122
PID 868 wrote to memory of 4088	868	ngen.exe	123
PID 868 wrote to memory of 4088	868	ngen.exe	123
PID 868 wrote to memory of 4088	868	ngen.exe	123
PID 868 wrote to memory of 4664	868	ngen.exe	124
PID 868 wrote to memory of 4664	868	ngen.exe	124
PID 868 wrote to memory of 4664	868	ngen.exe	124

C:\Users\Admin\AppData\Local\Temp\Setup.exe
"C:\Users\Admin\AppData\Local\Temp\Setup.exe"
1⤵
- Modifies Control Panel
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:400
- C:\Windows\SYSTEM32\msiexec.exe
  "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\redist.msi" /quiet /norestart /Liwear "C:\Users\Admin\AppData\Roaming\Sony\msvcrt_redist_12052023-101308.log"
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3432

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Blocklisted process makes network request
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4460
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding A2E961B839491612430CCBD0847DB193
  2⤵
  - Loads dropped DLL
  PID:2348
- C:\Windows\System32\MsiExec.exe
  C:\Windows\System32\MsiExec.exe -Embedding 2648D28A829D50EF09BE172D20C8F7AA
  2⤵
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:2984
- - C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    "C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe" Install "C:\Program Files\VEGAS\VEGAS Pro 18.0\bdmux\BdMuxServer.exe"
    3⤵
    - Drops file in Windows directory
    - Suspicious use of WriteProcessMemory
    PID:868
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 22c -InterruptEvent 0 -NGENProcess 224 -Pipe 21c -Comment "NGen Worker Process"
      4⤵
      PID:1688
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2dc -InterruptEvent 0 -NGENProcess 2bc -Pipe 2e4 -Comment "NGen Worker Process"
      4⤵
      PID:2528
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2f4 -InterruptEvent 0 -NGENProcess 2fc -Pipe 2e8 -Comment "NGen Worker Process"
      4⤵
      Drops file in Windows directory
      PID:1648
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2f4 -InterruptEvent 0 -NGENProcess 2ec -Pipe 308 -Comment "NGen Worker Process"
      4⤵
      Drops file in Windows directory
      PID:4088
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2ec -InterruptEvent 0 -NGENProcess 2cc -Pipe 2f4 -Comment "NGen Worker Process"
      4⤵
      Drops file in Windows directory
      PID:4664
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2c4 -InterruptEvent 0 -NGENProcess 2dc -Pipe 2c8 -Comment "NGen Worker Process"
      4⤵
      Drops file in Windows directory
      PID:3244
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 30c -InterruptEvent 0 -NGENProcess 2fc -Pipe 2dc -Comment "NGen Worker Process"
      4⤵
      Drops file in Windows directory
      PID:4236
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2cc -InterruptEvent 0 -NGENProcess 2e0 -Pipe 2c4 -Comment "NGen Worker Process"
      4⤵
      Drops file in Windows directory
      PID:1500
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 320 -InterruptEvent 0 -NGENProcess 2d0 -Pipe 2f0 -Comment "NGen Worker Process"
      4⤵
      Drops file in Windows directory
      PID:3364
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2d0 -InterruptEvent 0 -NGENProcess 2cc -Pipe 320 -Comment "NGen Worker Process"
      4⤵
      PID:552
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 314 -InterruptEvent 0 -NGENProcess 318 -Pipe 324 -Comment "NGen Worker Process"
      4⤵
      Drops file in Windows directory
      PID:2024
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 32c -InterruptEvent 0 -NGENProcess 2e0 -Pipe 328 -Comment "NGen Worker Process"
      4⤵
      Drops file in Windows directory
      PID:4404
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2d0 -InterruptEvent 0 -NGENProcess 33c -Pipe 2d4 -Comment "NGen Worker Process"
      4⤵
      Drops file in Windows directory
      PID:4228
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 330 -InterruptEvent 0 -NGENProcess 32c -Pipe 334 -Comment "NGen Worker Process"
      4⤵
      Drops file in Windows directory
      PID:1388
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 348 -InterruptEvent 0 -NGENProcess 32c -Pipe 338 -Comment "NGen Worker Process"
      4⤵
      Drops file in Windows directory
      PID:4604
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2ac -InterruptEvent 0 -NGENProcess 2cc -Pipe 30c -Comment "NGen Worker Process"
      4⤵
      PID:548
- C:\Windows\System32\MsiExec.exe
  "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\mchammer_x64.dll"
  2⤵
  - Loads dropped DLL
  - Registers COM server for autorun
  - Modifies registry class
  PID:3472
- C:\Windows\System32\MsiExec.exe
  "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sffrgpnv_x64.dll"
  2⤵
  - Loads dropped DLL
  - Registers COM server for autorun
  - Modifies registry class
  PID:4392
- C:\Windows\System32\MsiExec.exe
  "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack1_x64.dll"
  2⤵
  - Loads dropped DLL
  - Registers COM server for autorun
  - Modifies registry class
  PID:2432
- C:\Windows\System32\MsiExec.exe
  "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack2_x64.dll"
  2⤵
  - Loads dropped DLL
  - Registers COM server for autorun
  - Modifies registry class
  PID:4832
- C:\Windows\System32\MsiExec.exe
  "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack3_x64.dll"
  2⤵
  - Loads dropped DLL
  - Registers COM server for autorun
  - Modifies registry class
  PID:2844
- C:\Windows\System32\MsiExec.exe
  "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfresfilter_x64.dll"
  2⤵
  - Loads dropped DLL
  - Registers COM server for autorun
  PID:2560
- C:\Windows\System32\MsiExec.exe
  "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sftrkfx1_x64.dll"
  2⤵
  - Loads dropped DLL
  - Registers COM server for autorun
  - Modifies registry class
  PID:4224
- C:\Windows\System32\MsiExec.exe
  "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx1_x64.dll"
  2⤵
  - Loads dropped DLL
  - Registers COM server for autorun
  - Modifies registry class
  PID:1488
- C:\Windows\System32\MsiExec.exe
  "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx2_x64.dll"
  2⤵
  - Loads dropped DLL
  - Registers COM server for autorun
  - Modifies registry class
  PID:3140
- C:\Windows\System32\MsiExec.exe
  "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx3_x64.dll"
  2⤵
  - Loads dropped DLL
  - Registers COM server for autorun
  - Modifies registry class
  PID:4828
- C:\Windows\System32\MsiExec.exe
  "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\xpvinyl_x64.dll"
  2⤵
  - Loads dropped DLL
  - Registers COM server for autorun
  - Modifies registry class
  PID:4848
- C:\Windows\syswow64\MsiExec.exe
  "C:\Windows\syswow64\MsiExec.exe" /Y "C:\Windows\SysWOW64\CDDBControl.dll"
  2⤵
  - Loads dropped DLL
  - Modifies registry class
  PID:3644
- C:\Windows\syswow64\MsiExec.exe
  "C:\Windows\syswow64\MsiExec.exe" /Y "C:\Windows\SysWOW64\CDDBUI.dll"
  2⤵
  - Loads dropped DLL
  - Modifies registry class
  PID:772
- C:\Windows\syswow64\MsiExec.exe
  "C:\Windows\syswow64\MsiExec.exe" /Y "C:\Program Files\VEGAS\VEGAS Pro 18.0\x86\sfvstproxystubx86.dll"
  2⤵
  - Loads dropped DLL
  PID:1924
- C:\Windows\System32\MsiExec.exe
  "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files\VEGAS\VEGAS Pro 18.0\sfvstwrap.dll"
  2⤵
  - Loads dropped DLL
  PID:2024
- C:\Windows\System32\MsiExec.exe
  C:\Windows\System32\MsiExec.exe -Embedding 47B7CE1C39EA82C86293D990790C49C0 E Global\MSI0000
  2⤵
  - Loads dropped DLL
  PID:4220
- C:\Program Files\VEGAS\VEGAS Pro 18.0\vegas180.exe
  "C:\Program Files\VEGAS\VEGAS Pro 18.0\vegas180.exe" /register /user 1085
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in System32 directory
  - Modifies registry class
  - Modifies system certificate store
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:224
- - C:\Program Files\VEGAS\VEGAS Pro 18.0\ErrorReportLauncher.exe
    "C:\Program Files\VEGAS\VEGAS Pro 18.0\ErrorReportLauncher.exe"
    3⤵
    - Executes dropped EXE
    PID:4020

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Install Root Certificate

T1130

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Config.Msi\e576cb6.rbs

Filesize
184KB

MD5
022d910496e49e2631516b2c1fe38529

SHA1
e81d45a3e1e7887c4d4f9a7fe0ee6bcd37f792ff

SHA256
35be20957da89243fa9c947131931b2597cf3fad7592c879ecb17e9f3891b355

SHA512
4442e42e631441b087445a23d7f0d98509e1531b57f80911c2baf707da7f91e5b8f1d8c49fa1793d530647ac7493ab63a278d4bf5e1f9a7fdd397d7e4fbe6b45

Download Submit
C:\Config.Msi\e576cba.rbs

Filesize
504KB

MD5
df929195cb31c26aae83becd869c1ee6

SHA1
3859bee378f87f130620a00420992d0fb32971e9

SHA256
41a4e5cb5880729a25111e657c8ed412b0d64c69a58f60a28009c5d207f75690

SHA512
07aeefabbe97ab90426e19abc761e6dd1c66fd88da6f7b48f5571ec87ac43ac40dbc1828ae669d2a5e9fcc8115778df8bdbe1d9395e4107b854bf6df8a4203b9

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\FileIO Plug-Ins\so4compoundplug\mc_dec_mp4v.dll

Filesize
1.3MB

MD5
3c8a67f6443ca685751c14e1f8650107

SHA1
a14f7014e54aa5a6aac716be64ea55286fa5854a

SHA256
984530397a0239cf5ccfcddbe77664c4cd84978080d41daecbedf6782eb22aee

SHA512
24d3b2334592b8b756ecd1a00fa77075698be3ad7e169d7dc0b691a59244356514730eb77d22417e32fa38b65cd303997b28541ed9a7197aa5b223c8864134b5

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_de_DE.cfg

Filesize
3KB

MD5
a470ecaa584dd350ecf60828173b8c2f

SHA1
63b2d295be8669c688df060f855f64db07eca2a5

SHA256
95067d173427041b2b12c0583d5b2c3407f492c8e8de507d47ecfab70d0a5248

SHA512
13f0df5c6d1325eb85606f6694680772173439c3f6a34cd01aa5a18ba3f3f71104a9e49757281a4a7b3429a7aaa82f46295670edfcc08c11a84fb4eb789dfedc

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_de_DE.cfg

Filesize
5KB

MD5
cee74a46aebe663376bb177163fdf094

SHA1
426027bf3738f4024b137484aba8571c94e5a91e

SHA256
99de64e5aabf90ae2937f5cc3e47989c958db35c5b563a655c87cc26965f0955

SHA512
8e68154520ed05c76681fd1dc07cb4460990b52791a4a65eb6fc8014ba8fafec4d1843468553f56854044cb6768854f0d68b5e6093b97afd9f491306ca8f2964

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_de_DE.cfg

Filesize
5KB

MD5
cee74a46aebe663376bb177163fdf094

SHA1
426027bf3738f4024b137484aba8571c94e5a91e

SHA256
99de64e5aabf90ae2937f5cc3e47989c958db35c5b563a655c87cc26965f0955

SHA512
8e68154520ed05c76681fd1dc07cb4460990b52791a4a65eb6fc8014ba8fafec4d1843468553f56854044cb6768854f0d68b5e6093b97afd9f491306ca8f2964

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_en_US.cfg

Filesize
232B

MD5
11576a848296364058f2c979521f7bac

SHA1
d80fd48bfdf4fd035ef668f9040fdd2a3a4a2bdd

SHA256
cf11e0654e4cd19c47a044dc17e008f365b00c846cf4afb36f71e651ac7856f3

SHA512
1d81cae0a00e514a636bed3cb05f15b1fd4adf8169e0cfb80905cfa92dc33e655e3975c3ca6a3abd17f72b8655cce8b692eaecbb2a69a63e3c94fb9d4000da05

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_en_US.cfg

Filesize
388B

MD5
8674679661233cb74ae1bd8f6a961330

SHA1
6d3cd982a18fd84e8fb2d6e44b844cc913fa0917

SHA256
92a170d3ded4ad13df32627f872831c15bb46026c2cdb7c566f06b48b23d38bd

SHA512
5b8ce1c70abb609e0f632907221bbdfdc10eabd256b28f57566f84ce3a4bc8f49212e9fca8722b9aa5c5dbfc89487468a29bd324916f7715633ae25da204b2b6

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_en_US.cfg

Filesize
1KB

MD5
a3758d6a09089d52a3272bcb214e12a4

SHA1
2181226406ebcf66073f5f199db32ecc03641471

SHA256
85ba2dcffea3ea1ea97031939b1c2e67eb93b252f1a7a6b3f855c6b62c7c6577

SHA512
a90f4c3f36a2a3ce767b015f3036408223eb4f29143340a4b2c7b2f51167ecdc76f144754675d236bdf0f427a30373bb90d9ee03021434a1e7bade12d950b0fd

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_en_US.cfg

Filesize
1KB

MD5
a3758d6a09089d52a3272bcb214e12a4

SHA1
2181226406ebcf66073f5f199db32ecc03641471

SHA256
85ba2dcffea3ea1ea97031939b1c2e67eb93b252f1a7a6b3f855c6b62c7c6577

SHA512
a90f4c3f36a2a3ce767b015f3036408223eb4f29143340a4b2c7b2f51167ecdc76f144754675d236bdf0f427a30373bb90d9ee03021434a1e7bade12d950b0fd

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_en_US.cfg

Filesize
3KB

MD5
789fb3d03b16a71313aca059f9239560

SHA1
6367b8958e85701d10d333992915316c4142343b

SHA256
9b6a29a769feec736d550ad6b47ef4cdc92e2668213d983fb18ffa8ca614cbad

SHA512
728dbc93cd310d40720e784aca8e37c1b20ef106f20a1fe0f4c64bf1cd0dd2d16e58d7c73739168bec0837d1ed84d0fb7b46470cfb69ac2349384b762971d347

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_en_US.cfg

Filesize
12KB

MD5
56c49aefbae0a8a447fe0ff04a285343

SHA1
06a7e3e7ae788d7a704baead7fef05b3c792592e

SHA256
76e49dcc19c86157194b5498f281c879b87d03aadbc1aceb88730adcf8c45bfe

SHA512
7c006b3358b1692ee14f17ce72f66f02f95edc61da6fec416ace90fa24645872e645a8cc368fa26218503b46e407f4159c166dda66b80d94b039c38a9c51b0c9

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_es_ES.cfg

Filesize
66B

MD5
07ed4ee4417494dd308b41be90ffe60f

SHA1
26ecb8a80034561830a78fa1ef7028ac04b00ae3

SHA256
29deb5cf1069418d89bf302b18356e7588c93d7167ff888f73dc91aea71dc1a4

SHA512
1c28eac12d3226bb43ba05ecc060f2c1d3dce03edaad2ef390ae2cd918fd7fe1abee96fa94f91a0d1e06204dc4ce46d8746211c0fb0c8c953c7c36ede03e2233

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_es_ES.cfg

Filesize
728B

MD5
08bc6c567dfac3aafbe1412492be60ca

SHA1
9b85bec4677db1eb1b339789e3f04727b0dd16f8

SHA256
06219c99daf9608a8db853a685c51f708e1386a0281808facb536299aaef3d5a

SHA512
7137762ab2a5b29f4a01542bb69411dad82ea402fa842b361e624c14728ffd2972d95644777dfe645968556dc32cb90ed3115e63466933a7c693bc0a0fa98069

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_es_ES.cfg

Filesize
1KB

MD5
8f66cf4bdccf73f97af6a5cd3baac317

SHA1
25c67477917038404e9fd1b0220f6a1ccd043d9d

SHA256
3045ec184e5462470bf2b439e248e329a393b7904213b021c89dc8fa78d77585

SHA512
598198888700810ac5cc510a6932bea82ca2015fb51306eb39ee01993ea1abe705a5f7251f2951697e4b120c4a45db89b4c88cceed9bb825c808c8b851e7ffa2

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_es_ES.cfg

Filesize
5KB

MD5
cc2fd4fad22a408a324a884ef5408c5f

SHA1
ad04a15dc867149bc16209e96527c8e3ef186084

SHA256
670ae63140907d34ec569444bab6e0beea3cf4f31af24d9078bae00a2b79d635

SHA512
64d3cee49396c50a07808280a6a17295f784bdb4f9622a782ff02795b1a97cef35e382236da36a56b4bae635e8354ba06e0ccbea48de28ce85156e5675d5da2f

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_fr_FR.cfg

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_fr_FR.cfg

Filesize
234B

MD5
734c4278ee84cc7e1e1bafd79c60cac5

SHA1
4530b107c26f51573f7fe195e1864dd09a76c504

SHA256
8fa903e4243acc37716a5e6409f53066432b30a2b053ea2c5e4ca462bd58680a

SHA512
f372c602fec1ac57fb06b0f09186b57cafdb5898bbecdd08a5d627c4bf9a49fa4ed18a7d441d54e6f88ba1b9c7ad0daff0c3639c65703258445547ed9b892db0

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_fr_FR.cfg

Filesize
488B

MD5
e52392bd8a962fa8702d6e055afef751

SHA1
10029798933e2b9d1ae7bd5dc5cfc6ed3bae9aaa

SHA256
47303d13b7889d62c4fcbfe349f29a04bcbaee74c0b3283d03d064ce232943ba

SHA512
9efb2908a9ec190caced2d8716acfebdfccb8c5eee1cd500a792c714e68c2d67e5a1ab2e3b2a600a1aaef4e854b39c6de8131d56bbad59d467c10e3c3b478ac4

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_fr_FR.cfg

Filesize
4KB

MD5
aa2b68e492bf10cd1798163ff5997170

SHA1
0a6b17a8e7dad932e163edff0ed5f91f22de730e

SHA256
c12b6d17a8aa1ccf4e7f2b3410d60740418169d6daed18212ddfb3cc1b8cdc0c

SHA512
7032000829817526d03357294df307e774716fdffae26b2f0a83f807b3c8a9bb524c0e121a6f2b9db1ed41758446e5e31972af9e7f197c2cc2658e6ff24fb74d

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_fr_FR.cfg

Filesize
4KB

MD5
aa2b68e492bf10cd1798163ff5997170

SHA1
0a6b17a8e7dad932e163edff0ed5f91f22de730e

SHA256
c12b6d17a8aa1ccf4e7f2b3410d60740418169d6daed18212ddfb3cc1b8cdc0c

SHA512
7032000829817526d03357294df307e774716fdffae26b2f0a83f807b3c8a9bb524c0e121a6f2b9db1ed41758446e5e31972af9e7f197c2cc2658e6ff24fb74d

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_fr_FR.cfg

Filesize
4KB

MD5
aa2b68e492bf10cd1798163ff5997170

SHA1
0a6b17a8e7dad932e163edff0ed5f91f22de730e

SHA256
c12b6d17a8aa1ccf4e7f2b3410d60740418169d6daed18212ddfb3cc1b8cdc0c

SHA512
7032000829817526d03357294df307e774716fdffae26b2f0a83f807b3c8a9bb524c0e121a6f2b9db1ed41758446e5e31972af9e7f197c2cc2658e6ff24fb74d

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_ja_JP.cfg

Filesize
5KB

MD5
75f331ba35742df43525b04b0e4e8d16

SHA1
8c835748295b7ad528271bdc882cf790cd6e53eb

SHA256
46146f95bfad743a7ba55e15e32d71d289318b32f178dcff33f0cacb5ea1f88d

SHA512
061b27c30c64e69bb2513465590a85429e8e3d3cb5446fdd7bc8a1971eb887141ef5382661393aa49fab1dc30ea47027070cf8dc8aea97e77fbb0ad27922b06b

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_ja_JP.cfg

Filesize
5KB

MD5
75f331ba35742df43525b04b0e4e8d16

SHA1
8c835748295b7ad528271bdc882cf790cd6e53eb

SHA256
46146f95bfad743a7ba55e15e32d71d289318b32f178dcff33f0cacb5ea1f88d

SHA512
061b27c30c64e69bb2513465590a85429e8e3d3cb5446fdd7bc8a1971eb887141ef5382661393aa49fab1dc30ea47027070cf8dc8aea97e77fbb0ad27922b06b

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_ja_JP.cfg

Filesize
5KB

MD5
75f331ba35742df43525b04b0e4e8d16

SHA1
8c835748295b7ad528271bdc882cf790cd6e53eb

SHA256
46146f95bfad743a7ba55e15e32d71d289318b32f178dcff33f0cacb5ea1f88d

SHA512
061b27c30c64e69bb2513465590a85429e8e3d3cb5446fdd7bc8a1971eb887141ef5382661393aa49fab1dc30ea47027070cf8dc8aea97e77fbb0ad27922b06b

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_ja_JP.cfg

Filesize
5KB

MD5
75f331ba35742df43525b04b0e4e8d16

SHA1
8c835748295b7ad528271bdc882cf790cd6e53eb

SHA256
46146f95bfad743a7ba55e15e32d71d289318b32f178dcff33f0cacb5ea1f88d

SHA512
061b27c30c64e69bb2513465590a85429e8e3d3cb5446fdd7bc8a1971eb887141ef5382661393aa49fab1dc30ea47027070cf8dc8aea97e77fbb0ad27922b06b

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_ko_KR.cfg

Filesize
490B

MD5
ea32eeaa1fcc4b6f128a1e832cf85a2e

SHA1
71a6e181c964fa99a4369972b72828e38300a714

SHA256
bdfcf7068f9a46b90616a7ea5ce08101882b535492a095f57ef4d1707d711236

SHA512
71da74492eb10996d12caf71906d1353fbfc9768b768c6a3bfb612c8e4829a0364821d13241c5cd5c2a1f322783c9102eaa81ddad93f0fbb939bea1159e7083c

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_ko_KR.cfg

Filesize
3KB

MD5
362080c9b2f581ea96cac431b1bae0e5

SHA1
79fa301a47b96005b6158b31f97fd9401962af4d

SHA256
e1e95124e23176a7ff8ee5ee378fab6460d2fd909a6605977a7c60d7a66fd7d7

SHA512
fad9d90298e88e9b58a2baeda633eaf342b5541ec970f4f0b8b22ad2879fa16421953eb9e8a9bf3eea4a0852368d402114d6b0f1ba2965bcedb38f2f94c97cd9

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_ko_KR.cfg

Filesize
3KB

MD5
362080c9b2f581ea96cac431b1bae0e5

SHA1
79fa301a47b96005b6158b31f97fd9401962af4d

SHA256
e1e95124e23176a7ff8ee5ee378fab6460d2fd909a6605977a7c60d7a66fd7d7

SHA512
fad9d90298e88e9b58a2baeda633eaf342b5541ec970f4f0b8b22ad2879fa16421953eb9e8a9bf3eea4a0852368d402114d6b0f1ba2965bcedb38f2f94c97cd9

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_ko_KR.cfg

Filesize
4KB

MD5
8ca73a61775971c5fd24da65eea066af

SHA1
53ba62ef55dcadd1e67f9b96203107f1b442b2b5

SHA256
0d80bb02d0d9d948993f426f1d3ba71578de6ac78cd3ebdfdf41f67706b9e772

SHA512
dfafd7c3d198add577e9e8e1712b5486d49ad7888cb1ef28aa5b355b2aa2e558b1055ffd909e2dd1bda21cd8f638e850a15f9fd164143e13b72826704e3d7688

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_pt_BR.cfg

Filesize
1KB

MD5
a1dc91632547eeea12b0fb89059ccc92

SHA1
b0843e33903c64a23600d00badbfe451ffd5c768

SHA256
f11086062faa9a45d227dbbc9d4a19cd55afb4d242ca1a1c72aed7fc44d039a9

SHA512
52e66272f609056910d87c38e8bf44d086e061f30957f49e4ab2d4d4e53fecfa43304fe32a293b6d8e3019a899d5d582ad7ad43e343debfebb772867c581f70d

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_pt_BR.cfg

Filesize
2KB

MD5
0560e9e01a882d8e55c1785166dbd6bc

SHA1
8e53074ca3ab57fcd0e640df770d0853d3c73afc

SHA256
ae613343997fea8e33849609997974e89839f2b4abcc4ed0614db98c32028676

SHA512
10cc287c2eb021ace457a85a564f9f28e52e6ad3c773719b8c09a1454d4664d7f10e268d7a8274bffdfd83101fb39c11b0d4ac6a804ecd660edc04736d46e91b

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_pt_BR.cfg

Filesize
4KB

MD5
8bd3d3f7b9c4d27e9adeca04a4e01739

SHA1
f56e90d49c36c308ecaa8493dbaf16c26375ac83

SHA256
f4651404c375e352ff477200c700b47191b17b7f74a54539c08e7c0f1943719d

SHA512
4f858da65b1c6486254a05d39b32a469b0b5beb2feb904f4e5c4ca4f065318078edf217cae1301def368969f0c25ca9f1d946a0d1f3008b2da0ec42ce8349462

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_zh_CN.cfg

Filesize
624B

MD5
2a15e4769f0fff5951265ed4ff16d389

SHA1
e7c8c6a69b3e4834a38059f0aa3a6fff94292047

SHA256
c923e2898519a8881716d64af8634237313b992712e8f265f071d530ecfc81d6

SHA512
31a20ea48d0e0818c49e4d4719749d0c6efbe3101a1cd5996aefa8b2d3121271de1ef6b7624c42cf21eb5d5f10ca0e757142856a5044365aa3aa9092c9a4b512

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_zh_CN.cfg

Filesize
624B

MD5
2a15e4769f0fff5951265ed4ff16d389

SHA1
e7c8c6a69b3e4834a38059f0aa3a6fff94292047

SHA256
c923e2898519a8881716d64af8634237313b992712e8f265f071d530ecfc81d6

SHA512
31a20ea48d0e0818c49e4d4719749d0c6efbe3101a1cd5996aefa8b2d3121271de1ef6b7624c42cf21eb5d5f10ca0e757142856a5044365aa3aa9092c9a4b512

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_zh_CN.cfg

Filesize
3KB

MD5
c0e5640da66eb7fd9262d39473e09292

SHA1
d645b87929c69709196e131a19a9e46130dddb29

SHA256
8851cba861b04b652e24d6d7040b9c5958e5d7fd3e070d80c11c781977b83071

SHA512
5aaef25c515100f1f17d8f37b528f339eba1d3a632b6c92cbd0ee168b44251b2e55e638c3262b5b6b71de19ed4d8036d2b916b07df2c7896914f98e12de035f1

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_zh_CN.cfg

Filesize
3KB

MD5
c0e5640da66eb7fd9262d39473e09292

SHA1
d645b87929c69709196e131a19a9e46130dddb29

SHA256
8851cba861b04b652e24d6d7040b9c5958e5d7fd3e070d80c11c781977b83071

SHA512
5aaef25c515100f1f17d8f37b528f339eba1d3a632b6c92cbd0ee168b44251b2e55e638c3262b5b6b71de19ed4d8036d2b916b07df2c7896914f98e12de035f1

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\Language\local_zh_CN.cfg

Filesize
5KB

MD5
1fee21bbffce649d010ed591558739f9

SHA1
066c95b091ebf74b8601197282cee9943cd7787b

SHA256
f8ab66e106b3c099f97833fc540630865db0e726b6a6e7724303ac503b7b76cf

SHA512
ed3ab069fa66c869232588270d96aa041bb4e62d67b524278d0cb36c8a6abc9c3d0d3bc0e8289558730752c09db95147319f68c036f97398b41108d6e60cbe31

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\OFX Video Plug-Ins\TitlesAndText.ofx.bundle\Contents\Presets\PresetPackage.ko-KR.xml

Filesize
122KB

MD5
525763c8338bc74c4b556c2640bd1394

SHA1
7b4d894253adaca84f30147431096cb4e7ad048d

SHA256
4366790b1f64ba66f92ae7194b1e7ccd4397eacc1a65ba144d1e185fc7ee2f9b

SHA512
5a313f20e7735bede91a18ae13d5b6baba949af3bd5d121f91eb726717bdc2e132475f84c8a39fa6631099045fd338939a0482aaaa0ed7226c70c7e74a77df5d

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\install.cfg

Filesize
176B

MD5
4fd2fe3bd68999a4fead6304211981c5

SHA1
966aacb5af43fedba0c48fa64050b9d066aba7d8

SHA256
f8ac9d230c8a180d8a426529b71e06b3d2ecdd0358d8594ef8313cb67678366b

SHA512
0914a842e5a1f9f7c850fb323916acab438c152260a279020c9d9eb5aeefcff2f6fbc673b87f747d0c57391b962248589a84eae589a8586b34c700599383e7e8

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\install.cfg

Filesize
560B

MD5
68046d4e7b4c5faf2a3402080d77cec7

SHA1
9d7cfb0180c7a3b2b0c4c21eea3265e7000664a0

SHA256
0c915e086be6d49e23af602be80fb9994379c2bc9c5680c7b55f404f7831112b

SHA512
c4c45a50641f86952b66d8e8417a0904a2c54c66b073dfbd4abf76f2bb70e658dcf68b3d4fb2d01fec70325b8b1fb8b61b19780b7646a5472ef34358e355a043

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\install.cfg

Filesize
888B

MD5
4fe973966e23bf10974315eccf691765

SHA1
d1c4801ebfab214e9912ac2a35a52c594c622dbf

SHA256
a355acd2c5966b45e8235b5542fdeae1a25c3109ffb3ca358b4ba201e17b8d1e

SHA512
16bf73d158cd9bcd73840ed1f55290e9cbf358c8055a25bc449214ee5086df70e15a1fd807f1728bfe9604941d1a0ed65ada56fbbbcffccb5d6fb1e2034a31f0

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\install.cfg

Filesize
1KB

MD5
1ed1aeb569f604f887de913e0d458327

SHA1
e2ec0854ac4607d8cf76e6456ba1856891abf5a9

SHA256
737c4688e8d269f956919e1d00eb2f0f0ce64d2581c3d7391cb05135c758c814

SHA512
7ed68c03c961df38d28b4d8a2f17f93e366331c1fadacae7ec1e61c23b7f4563f7466b2a7abe7e63b18354cd4ba80c5305d5e658feed285d13280a5712e64806

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\protein\Forms\UnlockFormServiceCenter_nb_NO.rtf

Filesize
2KB

MD5
fa703609338cc05f182d4d0d7d07fb1c

SHA1
cc34fc7d8282a2fc2bc4610ac671dce0b82661f7

SHA256
5a31feaa4bdbc96da11a4f68a7fcb36bb791dc073b41e109f7d085dd008790bc

SHA512
05e30eed8c0d921e721d3382dc26bbbef047ce77564c5926c122477500f28ae11e63522e93dd119436717878fa065d4d83e02f33d2c4e71c2c9eb1ca73412e08

Download Submit
C:\Program Files\VEGAS\VEGAS Pro 18.0\vegas180.exe

Filesize
45.3MB

MD5
920b2ea00247022915f4406566e5f308

SHA1
9ec00bd77340f1800d0208a48528ba3040bbf60e

SHA256
889e9fbdc19148e4a38a4962784844ed8217341a48ac3bcc5dd914203342442e

SHA512
bd0630a26e57f53a3a3b9c138ae534289572d6ef508b70bb738834be6e8f0b5c566d97dfa7c0ba12d2b5b2502b9cfe983f699460fe1e1bbc4fcf6d7260531b2d

Download Submit
C:\ProgramData\VEGAS\VEGAS_Pro_18\installation.ini

Filesize
402B

MD5
c2dc13e104e3cbf0251a38efc3eec4f3

SHA1
c76e9a849351c5895a567b7aa352bab224190fb7

SHA256
e5d6b487d84418b6c133d04cd9e814e17d34a687eda885e00f7e7c61ff8e9e73

SHA512
72435e5e6132d97e943a6830eea3615f9c2d81a6d8ded7f529b37caae133485f687f2668dabb45606417fdecf874b8c4307b7df4fd0e0418416cf49436251de6

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\EULA_enu.rtf

Filesize
12KB

MD5
f837aad5657b429f561814f4742c1f84

SHA1
5f2449c578aed744a49e42a82c16495588797d6a

SHA256
47e73f90e0af59acafa197ed07e71cd8d6c45a26a3582012c0664a3eddd99638

SHA512
bf23df16b0823e7a4ec09fba830408a6cf79540176163a558c67cdc4ad1fa495864057f60882693a76959fbb41b08b516b47beeddb95cb603abd4dae8d76f615

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\autorun.dat

Filesize
20B

MD5
1873c3760f642291c0530fedbc57a13a

SHA1
b18c0966fe4a872037c05a8c2ebf603ee1ff1af7

SHA256
1761fd6ae23db6e83ed04efb8cc9ca7c4c536e91043ac9004d443ac1eee0f533

SHA512
be1a24e15c73016a1423942e62f14a4307bd6b3136f75fa204a2ae886614de1a5a09cdcde9fd512e061b246d0e53233d040ca65e9f9739a27db27dba49416e1c

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\inst_banner.bmp

Filesize
210KB

MD5
71b93e7050c89122d3a3eb37ca0b97fe

SHA1
784a170828d71fcf9b64a6542dcf9065d4b96e87

SHA256
08734a6c333d3eea6f5293ef1560d01e431a3d394122d5f48d5ab3100727e86e

SHA512
222c182df3eecb28cea5fea0e94cbd6945da59f778a1dc80a3a1f922c31ac78db2be3ebcccc4c97fdc923ae5f101979cfe91c8e2c1bebc1960bfc4ecaa8efdac

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\redist.msi

Filesize
49.9MB

MD5
e6801cf002699ff8cfcd2b099fcefaeb

SHA1
37b58c13c284af48a2acfcc6875944bccebe00d5

SHA256
51363501212dae8bc9b33c8aec711271d311f2f360ebc620c20d36ed714995f9

SHA512
bed4d17102288fecc044fbace08b560d3597fca962ad0eebff6f094378870843904a7afeb6e7e790da2420414950e977e1ba4a0501c958abc1b8e5a040367ec1

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\request.ini

Filesize
151B

MD5
fa9ff3978ffde13fec5f6cb8298e750f

SHA1
b7f9a156ad1c5ba3802e7b6e9d12575bb89530ad

SHA256
83b31db9d0fb7204373e94e64de5a0442bc951e8071ede45bbe3b548977adeb6

SHA512
de2a2a6d30d3cb3cdfcb57883c564a015ce5b784d1895f5fe0034e3b241b4a9f71a2d3492611dd31fd118c052f4190ed3e3f8cc59e606ab012e56a6aa6d1b6e9

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\sonyinstall_x64.dll

Filesize
3.0MB

MD5
6cbb63c002bf04a8489ea320421e01e6

SHA1
1a8d18fb070773427343e746374c8d36c568e8c1

SHA256
7a679410002709fc21bf9a5b56c1fd097a556eb31b71547e309f24b23a9d92fa

SHA512
8b62795b0a886d3fca1c050faf89237c0b364b703cbff9c8cbc377205b8cdea0321910e268862fd0cbb3d78b362ec59066cc3f125887a00d72a073cd328272ee

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180.msi

Filesize
2.8MB

MD5
94a59313dd9592b79b3b03888167bbd0

SHA1
02f36fc109ddf9fd86924e88938410ea6f7eab2f

SHA256
30e1409e709335647a191c2a6310a5dd8909183577b8dc55168bb8d20fa71068

SHA512
7934b07f2ac3e04594c1235ac4ce72a09cd55d053c23c0ca39b42987cf65f6d3028cb10530e3c8bfcafd1f80fbb452ca899dd545291d8162d06aacafd496d839

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180.udat

Filesize
604KB

MD5
e34227582523dd5d6450d2a48e742d79

SHA1
0e7ad3795405d5eb2122fde5f0fc66ce74e1c855

SHA256
883986d00df7669a1d573a76317f036521232b0ad80a1b5f9cefbbda788f8932

SHA512
cf1ae9fa909655e7a639e382006cefd35ed29805cfdc92d48beec484794f79933313f6c7b13070bb9300e5c7829a63266048b5fdeaf84cf27ea27640f673531c

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\Monitor3D.cab

Filesize
922KB

MD5
5bcd6a6e167ae358fa7de5e8ce5d497e

SHA1
bd321d42428190e03a5e6f53721caea38b41d46f

SHA256
94d23df4013482606390f5b2532c870e21cfe1b9177f566b47c7d28bfe92d19b

SHA512
80b7d0b34047fafb04a7d7ac815a34d222a7e31e3527b76f7a1a1be5485ceec479e0e5518d63131f7f0da6b7dfd58f9af263b23feeedec01d12588b95e24eac6

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\OFXFilters.cab

Filesize
3.1MB

MD5
1e7a33078135779ecf9e7878cce505c2

SHA1
31e6bf27a290c55cfa34c96b43e1bfaf0c20702d

SHA256
881528d4990af3ac3274dda21081585a38260f7700bb907ef60f98078dc88c13

SHA512
57e766d095aea18a9296155b85a2fdae6567d285003512db659324f50d6e8c3b636243c11c954ca2d27836fb862bc6a98f2a5d04c5aa2b19ebe2e72a705aa4e3

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\ac3studioplug.cab

Filesize
1.6MB

MD5
ddd0ad783e98df4e406afa6eb87d6b26

SHA1
c140cfe33cba8eeb55f6d448720f49e2809a295b

SHA256
f7ac37497b93b8c8f2d1e0dce2ada71ab08ebac623c31a2521e2bd3848a7918f

SHA512
6639c595c546f9d8295bbc4a44da205b6c1975c899d749177641670449abc6eafd62e8a699fc38f89c603c37477b697a113d3dd21ef07b850603848b1f5b1356

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\aifplug.cab

Filesize
2.0MB

MD5
034450693e67618dd3353199758a02d0

SHA1
8f7bd82c47e2d3ed7743f291144faac78338b570

SHA256
3fa579e04ae9832cae77eded7232283fc793d0dd168815d0f1e486a6850a993a

SHA512
c9c0633c5ac59df023bf97b3d3bc035669fb14ac0273a11e3c3d2cc3fefd9039a9932173ba073d9dfe316af9b5545dcfca93f88ad1ccf2d282b148c620b01c78

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\atracplug.cab

Filesize
527KB

MD5
09fa7f36e7f5444a863030c331c12926

SHA1
b275ce8795b60031391f80cf8fff2708e036be17

SHA256
72fff6844c6dcbf1cd510eeb3fd2580f5ac8f82498e13e4b5c3b76a825d4316e

SHA512
eb540025feed6d4a57e4117a1ec310a2da871ff156a2887b73dd743b7b98981f63327b05ab50618c6ed9816f7711d0c46d47fb65b9fe53a8ed08b85f10ec3d15

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\aviplug.cab

Filesize
355KB

MD5
69cc7216a2aff0690cc14d70f4e31362

SHA1
027b127130b1c0e1ab3378e4261ed979594bb96b

SHA256
01c50e59208d504f9c5926b929a0aa6ad8b02a5dc61141d6e9719067e5e056a4

SHA512
4fccf427f242609846c2fff5695063f737ce50b0a4cf323fb51832faea4a48e07c98d8c564a956eb09d0e3b7b45748f05dcdd0fc1e4a4bb4958466f0a0f58bd9

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\cddb.cab

Filesize
742KB

MD5
f507dd458568b422a08e065503310e06

SHA1
296abfcd40d7d3065268b04aaae72889a80ba7dd

SHA256
8c02e481770497824a72fd3b3549dfcc21fa8ee0e1a2f645e8d0278d3d2c60f8

SHA512
4a0441c69b7e3c341746a1e78ad7b6e44865e7cc670d2ab6cc8a715d3b53b393c951dfbe83a70e3e0e95ae4180df37d8863e6187c7af6c50ac640a5567d4cf1c

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\errorreport.cab

Filesize
6.7MB

MD5
6b1f70a954748b02393d2021316789cb

SHA1
e0fb19813e61624d037898196d3e0ae1fd9d34dd

SHA256
a621f2cf23677a19c790577f5d4a049d3de5eb4024268dfcea39f563ba8bc753

SHA512
8984cfc04e4dbab8550e938cde51d7f7f8c6ea705a8bda2a2e0376e06564fab0f3a64354c05347995599e46787e92a6dfe00608b98a15ff1e2efa8a84525e143

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\exctrldr.cab

Filesize
11.0MB

MD5
8948b87b32e1782036d2d7b1abf3acd6

SHA1
52a6d343db02e965f037840d05b004c6b9a97afb

SHA256
d65fdb74efcbd271fd021b430414a7d1837b7ca6e6cd27bcee0e9872ffad5581

SHA512
844f1ed15122b57e6bf3e4f1878f67c1481d3c2799c34edb868fcce48ffac597f2e98c2c9b2c345fd1e69e61d45a598cdc8b86264b4dd7e1a803d2720becf729

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\extvid.cab

Filesize
2.5MB

MD5
1b02be6464c5b77333860ce189ba8d2c

SHA1
286037eb03910d6a7a25f9618d9458040e670fe1

SHA256
5b1173cbe86c5ed15628796f6aa8f0ca767a982e5cc58a9d3702bd80e47915cd

SHA512
5b5fddb08e8dc1e8c64c5c6895b7eb07fa2046db79b5dddf069a3ff1e74120ea5a0f2c84e0c758ee476d08ef7d24d600b674c9fbff664235540498f9d5c8beba

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\extvid_aja.cab

Filesize
306KB

MD5
a92d425f7af1b7c64a0eebe09d492eea

SHA1
78374be2cb8956d39225dd78a419501ee33d434b

SHA256
fb0667908415dcf91bffdf8c2acda16048ccc139a3aceae7f7f2700075f4eef2

SHA512
34c5eb8f63c205825588e64384462834a5c72f68fd6f30b83863a0b2b6ceb09989fb4c6a7de1241bcbe1cbe9689fa0c33926a04de9ec698d8e3337d59f4bd5a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\extvid_decklink.cab

Filesize
803KB

MD5
f426b90f1fbc49473315d5214e51a8bd

SHA1
232d631a552b54a07eaf1a8773b26181c60b44dd

SHA256
e842465e8c741d7cc2d7a691e804d451f62fdd109da0f0505ca763779c41761f

SHA512
352459fd79a405cc0e8afbc823959d20478b2649e7d98262f882f5f21c820d3f3532e01706e5fa3eb5d7853290b70a0c176dd198a4f47c0a11baf6939a048f62

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\fileio.cab

Filesize
4.6MB

MD5
c5092228e8cbd1046af8965556814030

SHA1
b4bc6f046be6e534cc2a48fa1fb87d81a3986dab

SHA256
2e98ddff14f14fe71bb673751b202664f0b127c742a4187da763ddba550541db

SHA512
0f084daf64b1c370df3ee4c061845523b32abf2a4dbba1942a8646835255a291a4127fa2680afa7df89dd1cd89bef20b13575530dd96eabacd10939b12ec540e

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\fileiosurrogate.cab

Filesize
1.4MB

MD5
fa929cb3fd73e5bd508728c816a64ce5

SHA1
bc4cbb28b86daf56fa1c4ba952bedb086f5d9c63

SHA256
a41d0d7179eff616e1bebe014ff65562f42c4db18f707a27cbf4f26068200781

SHA512
d29522b803ed63274e2326d6a6d81cedf7dc886646874681278c7e76d783489c2e9f5880966c6946c908ea4a6bcb2074843ff7639e894edb17d628992b5e052d

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\flacplug.cab

Filesize
309KB

MD5
a3c97d14693fa9a433f81957a8cf3f4f

SHA1
bf4e919146992cb42e7fe11fa25fabd796916218

SHA256
40941492c774bb15051a7a2f8f4a6d861e951cd57c40f0bb33f8c5d1446a9d3e

SHA512
d65d0faa7b6f7c1141af6c71a47e15a2e9c6a5bcab90ba916cd5028182536ab8b1282b42546295bfdef368f629c3e49d9bc853610a05d1c46e6bd85ee3d35b6c

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\gifplug.cab

Filesize
54KB

MD5
adee6ca6a96a827a3026e0604eb6e00f

SHA1
849d6b2a32de5d157bcef59a8771067d7c0218db

SHA256
ff28c6ab201ff93412fe235c91ffdfd45a86362bd082533d047ee387cf6bc4c3

SHA512
2f5afcf053e296cb16ab7e6f0f4b3be98ace50174dbe14c049f3104103daffde56e6755759eb061dd4c38212efffaf9b7334fd0dad5dd73e31b5439dca5b76dc

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\imapi.cab

Filesize
838KB

MD5
b2bb0de58aafc9dc980dabf3d36551c8

SHA1
4bbd398342202656b037cdfb156b4967d9311b72

SHA256
66c985004edb1765516068b60e477ebe91d4d00bfe1697dde4530246b5b2ddcf

SHA512
9fa552965870c1844134168278c1c10eeccf8419cfb7c25d16cf49f54b1f004af81802cd5b85dcd4f7de202155a6cabd610a4a9d3a95f68a6c71bcdc36cfa5b6

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\joystick.cab

Filesize
2KB

MD5
5fee4e7cb96af2ada8ca385abe8eb415

SHA1
77f11b444be7bf6f1756e8770f9da8b2ce289b77

SHA256
70f6c803dd90c33302a9961544af414b6a5a08fdbf55f670252f3fc000fd03ef

SHA512
24dbe9e9a4b2f38cf380f1e055ae939d293d90d37b712de88cc481e0bd623bec438682294bb7d8a5b694a1e2c9bb5fb5f0d6978d13d3140c9dd2ec024502e536

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\layouts_vegas.cab

Filesize
3KB

MD5
932e86b3584b516ff25ec040027ac838

SHA1
3b4a867998fd4ac2cd77d84f2c36c68364005545

SHA256
9e6c11f3fe2fe294771c9495399cdd33463286e45259300a72d3c1e6eb01659b

SHA512
d70e7f2fa83d807435b30ac9dbefff7c7f5238853c3210c8306380ab3bc242f185d47f24dd70cd5fee724798001e5d093904b9abd520cae58ef42ae6b4dcc37b

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\log4net.cab

Filesize
88KB

MD5
b1048dca918ae1ec5a2358cd0309b272

SHA1
008a68adb6ab30dc103c8aaeb1dbc651be3925cc

SHA256
8eebce8fc808071cad07f9e241fc55cde8290edfa8ed6ac3cef4f12301719c49

SHA512
063e4cb329f35f397660f6ad11451e7ee20e5a3de2b7c0a837d6ff7e981d1391b3c8e7a28a3babee2bdf0c2820a94bd460de0815cb63c575f647878d2411e2c5

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\mchammer.cab

Filesize
1.1MB

MD5
cc0cf9299c3492c232a79fdd5c72677e

SHA1
a096b3dc402722ea68bee54e779f83743f9c55d6

SHA256
93962182e3a212a43a6cf2d7c1aeee5a6d8a1f2a86377d4be63a775c69fc84cd

SHA512
28b78ee8b96a8423327962a8ef8a807f5536e12768a93bfb662b0e2d56bef41a1a431d71f19df469ab7a62411942f409100e35446a0b9283c4e887ead4aec7af

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\mcplug2.cab

Filesize
5.4MB

MD5
36ec2c68aad12f2b0a656edf531f4f94

SHA1
da2177b426c3445d60d1e8c00a412db67c6dccba

SHA256
8a391aae8ffc5d0dfdd97b423583daa21b21408c665d8cd1c7d42ddb83e17f85

SHA512
9fff509a292def126ad5e46d95f8698a3e983e9990f5eb67d17399e3d282d767db6bb7d5c7dd4b506f9ac7bee7cb17c3d4700fc9ba44a2611606364ce9f38d21

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\mp3plug2.cab

Filesize
553KB

MD5
7811797e6276ce4fa437732fe59a6875

SHA1
89bf880976978d29257e5c5d1cb924ca0cf66d91

SHA256
5acd21c5420e4d77f47b3550d2e0977f29b679b6dc855045f2851d11e591d9af

SHA512
7996f7b5fea462febb44bef1adabba51ce8edb9dcbf94933e3fc9c606fded65090b0b9341b32938a24a04955089ac6f21ffc463dee5bd8502ce45fd347231a83

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\ngen.cab

Filesize
14KB

MD5
1c444923478ac477503276e9cbde010e

SHA1
0c95d5d89f2d7d41a4387fd3665ce92a98847663

SHA256
444b6a0995a16cd9cb5b84b9a5ab3c6773249e9af081a5d1372de051f21c1069

SHA512
5d77b8d03fe41eead6fe813249984169d604447aa6ed5d2b3a4584e242a6683c488a5ca2b3c6a87ec30f31fab36f10f35cabb78d5ac4342391163ef1dc90ba01

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\oggplug.cab

Filesize
1.8MB

MD5
2160af908fa3da38f5214652bc79eb9f

SHA1
0fbf51f368ec7d90d01335fe8e72588ba4484dcc

SHA256
fac164c94d0f4a86dec815159b6942cb41ffa12ec485c19c9552e960356f7b70

SHA512
c567201b1e912505ebf191cc83eadeca9b9d637ed166d260629c098ef7fdfd74504321561da0810d0450de553d4da2ae048f7df5be003ff34244fdfba78d3959

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\qt7plug.cab

Filesize
454KB

MD5
1bd834cfda1bf770a4880ad40184e58d

SHA1
63b0a1af0a475a3eb6bb15a9a4df518501e2995a

SHA256
613f529f95d9a9f2a9d0b1b4c527edab4e411c15720348bf5562fd5dc5d7801d

SHA512
e47bbb611cee5442470095f12c8116b52e5d3e5cfc51518e8d67a679ed13e28664e471cf924aa5d0a3f4e08b7c9c5e9185ea6de72857d141f01a232fe7891add

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\readme_vegas.cab

Filesize
58KB

MD5
1897cbbb03a46fe81737e5f513903511

SHA1
f1113487157054836667cc8c0719b440a23e2dbe

SHA256
a5ee79e73a8d89ef76a1d402cd666d35e9ca398a2f972179bcb2123d5086b959

SHA512
0ecf30d3235b52b1e99c97d7e209c922136989777d235ba5f2a47c872f23eaa6d1ee824f6af7ec60ac08a2f85cb9908198accde064713bdc82b471673850ed22

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\redplug.cab

Filesize
7.2MB

MD5
c2471d461dad0397e321322e3532ec47

SHA1
5bf0338e633768f3114f2b7809baff711ff568ce

SHA256
a402e1ad66c069a5917362da6adb0a689271288e98ff2630088dd4eb81275380

SHA512
123cd1fd81beb7ec3635a262921eed9b824a0ffc27af6232910645a30921a79afc96f976e31675f730f1a4301f5c2285900bb6ec91475127061d334532c33c43

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\scripts.cab

Filesize
21KB

MD5
30a4e33914cfdec94038ee609f85f67b

SHA1
13f1318033e88e43c7ffe5c655d8c1678da33824

SHA256
d0c2b5839cbbeae0b67136bf11c2bb253fb02ca4e9206115e84b5faf5af5f197

SHA512
7191e5827e467b307bfe89453470abf5f4df48d2353018c9b26bd7e7e774b6b3a129f76d7eb16702ac746054b4ab0b94a9513b2ef3c9f85ebd941d109f741326

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sctplug.cab

Filesize
2.0MB

MD5
58efe8e18686538956f665bfb80db4b4

SHA1
0a703b7186214d19c2046aa3552ec51cd054379b

SHA256
06e3abf6fdaa037c128faf94c9cc6781d619fdfab2f5ce8910925f4eafb4ad26

SHA512
b0497d23e4d0890de4dc380a0bf92d8b847c02f97c63324494478836c52d594968b242d0fcdc7912b73e053f1bfbc30e3be6e387888df0b4aa2ee5fb1a785e59

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sffrgpnv.cab

Filesize
1.2MB

MD5
e97a61f59b5d9a9faa6cf950b6cb69e6

SHA1
536a9d80d5728068b7f60ddcb5fa4c754f7581e9

SHA256
313f87dbd4de26b236736c6364aa6eb6d7e486ec9dcb855f5e0c9de912640348

SHA512
c296dab03ef6d4e6426b59e08e560ef3d6ca010570fd427c253b22e8f091db14429092321d3b8a323bf60ebceb96362c3a95f7b09266a93914aee3dc845511e4

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sfpaplug.cab

Filesize
2.0MB

MD5
91cc20ba424f606daa79f5a72284636d

SHA1
2420d65ba1c6d602c8dd20ef1438baa49bb7f1cf

SHA256
2ec8502a787062c61284065b9600428f89032fce8745bfc748623515266522cd

SHA512
9b7d0e136d4cbf414774c314cdcfc780088d93ebfd4e5ce5a98dbfa6f3befb7bc8cfe52558bc10c6b9373d6913a9769cf2f2377e41ee86aaacd535ef69aaf161

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sfppack1.cab

Filesize
2.0MB

MD5
8a9c33b527c031ea38db9ab32e3346f0

SHA1
1e122a100fdca00c859783d26ecba86e0230c766

SHA256
eafa97e73c19cb532075b64a65dd5c79af5e9b7c12c35d70860d24c3449bb83d

SHA512
fe059ed1253b25c25f6b8713c9793e50f3326b1790ac646fe401588cf1d7e81bb5b819d412daf649b66d5884884a8a6c245c2fe6f58d4157484385e218a47663

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sfppack2.cab

Filesize
2.1MB

MD5
8b477059d3bb59d1b78d619e666ea971

SHA1
f69c1d8d8bbfe9a85feea80a10f4867331fee93c

SHA256
347fc982ab5aa0172da2551113791351f3eb7e4060eee69e1e763e99d825993e

SHA512
7f22f586d10ce3771d25cb2061cd73db32e9ac15bcd0f9d84fa3c2ed076c569afe260f0c619eecd406ba34074ed37cc9722917f2bc740e41c541914a2c579b2f

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sfppack3.cab

Filesize
1.9MB

MD5
32d05310e05a1664d5abcdf220e4e63d

SHA1
151da26229e83b1114a2cc329cada299d0363900

SHA256
6e6c31a6e343c719e44974fb979b15ba23e09c809d92769e02241a68855a33a5

SHA512
83d06fef7c21530257032939ae68bfb348849283693d73cdc9b72be05f1a239e026045a4d36a526bc6e60a0bc8c235773976b64787b64193c5eb71e38f4dfc16

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sfresfilter.cab

Filesize
1.6MB

MD5
9f1b20a1b9d4390c2febeaf99ad9d2f6

SHA1
736a3bcd9bee05370dc52920a501d9fe183db984

SHA256
aa7cd77022b3f9f58efa44d0e3593b59f7f4f96d7e86a38bf38e212578fb1262

SHA512
bd5cf985afe7ca0e406a857b7d21e1001d91a3880c6d7df1b29f13da1b066e3936c5affc9a0a7a10d50dc4f79561593d3dcd364102a791edad41af3fecbf98c6

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sftrkfx1.cab

Filesize
1.6MB

MD5
c28993b0a9852c054db55bb49b43e167

SHA1
acfe77c3c409fca4d4731b916de6c1b147107beb

SHA256
01b67095a92a093c78bc47b7669b68a68e6885a0f1f9afb749eabf3341b52e02

SHA512
7c59572529dec097492c6664791404246554f662ce7bf9ef899f0dd7d5e87b5123f1e8caf681eb8ff058d8cd05c0f08031a96a89319e025463c7fd83c0906008

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sfvstwrap.cab

Filesize
3.1MB

MD5
2031c9b18d6adc2a6d9852f3b2a6a040

SHA1
2cfd3a91842e90018bacf74f44208db6b38a4fdc

SHA256
610f9bd1e8be637a0b0fe4618b91c2da0640a898dbd1ec829949790683e4e594

SHA512
bfa2e3f273b10f43db5bee509f85f597f095cf1361a749accb36269ff802dd9dd0fbced95b2ac5105e131b49caeba24830d353368ea81e5a7c39b4f710c908dc

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sfxpfx1.cab

Filesize
1.4MB

MD5
e0bfb0bdcb2399bcba5bbd070590da1c

SHA1
98ee02157e74d488bc7280605ddd569054fce893

SHA256
c858df38b9d663fa667d537cd05bdd18278f12c4416bc50c1cde22705d19c951

SHA512
41194bb5893c259abc5c2c9620d81eb5ee85c8e66e6ac4e75b1a3ce1a3c99a9651c530d15f6eddde12920800c4bbc7e17f85413be8609e233241cbbdc2144389

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sfxpfx2.cab

Filesize
1.2MB

MD5
350e0dcc10d0aea97526d001107cd511

SHA1
79e8eb921d2c294d7eff5fdda1de19291f80a3e0

SHA256
f0715826929340866430f414a640deed290ab6ab2e79750cb08bdd4fdaef9c01

SHA512
27e3b69e517f161bada5464fe2890610126c60bdc83a2a556545d5f0bb55e6a2afca1e10055b0bf6ab4fdb6d62508bd230a804f83f9dd7d37645005a31d1615a

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sfxpfx3.cab

Filesize
1.3MB

MD5
8f594cddf3839a2285f69eba31f9c206

SHA1
cd66c1f9c6258c6bc2fc476f8d04409b28195a89

SHA256
714c80d2006d05f365d307d599f6053cb3e059214c37707b7c6a1d0d838df9a4

SHA512
5ae6982f54f14a20b7417d282018e1dfc3beca2049ea02dd92258606f29366b3927bf1457fb8105ccc4dd41d0b5a23fea67bbd563620ac051abd26de1a0d2031

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\shuttle_vegas.cab

Filesize
1KB

MD5
fbdd5c5d4936ffe3323603d931c4b909

SHA1
962fec19ee5ab2afb5c4a607b20498979251b674

SHA256
bb7397551440460eb4d6cc96407658f63dd7aefbf24f7dbf306009c390c3da28

SHA512
3dd716b37bd71cd277027e24a19370df902a72d50287375a94c56ac582c95adfeac950f3ec4e58f45dbb60bf609c8b59b2c5ab76f0b022eed0d84b185453bbfe

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\skins.cab

Filesize
35KB

MD5
e8311fb069e5de5db8608619e976300e

SHA1
e7bc847d6daaa80d152747e435dcce3178d4ff92

SHA256
09c41fc7d26fad24a59172081ebb20225bead2d57bc261ee2cd7d74a4df68f92

SHA512
d0e71e227af112be0ae069f24605667b3c17b46401d9284ae9885ebe075d709f57d27f026f27eea291c152fdb04ea7c13a60d9cd9c7842640a53063db933c598

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sonycapture.cab

Filesize
173KB

MD5
7d8648d89ec6e05e6c85b8ea2a91189d

SHA1
0468961920ffddbb3694c53508fe717726e83fcd

SHA256
4caf36595134e7a6967166c4ba3ef3aa2ee72d16add183260ca6f3d853c1c9cc

SHA512
7c8ce685c7d926163c1f5fcfcadc0e0b09e67a227776e963f05c81ca83a61f9bfb62e72414114c7d87d532adfc80a80584a165eae708d201652b7921a5a05812

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sonyclrshared.cab

Filesize
203KB

MD5
f7838e80060325551b3da5070f49f23e

SHA1
af180fdd5530b574940d5db142505018e2dfb5b4

SHA256
f7fac7742cfb4732acbbff5ccc233afd117b392d122a4218ef398d0d069f922a

SHA512
eba160747b00c8e76c4192416727ca2de3e67cc4d005da5875f0164b5c994a73ede8ce2cdbb29769232c7d51127b9da3376c6feaf771a018154378269adc1303

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sonydeviceexp.cab

Filesize
242KB

MD5
62b4eb166835fba71c18b50b3301ea63

SHA1
0fde0a4a9d14b5abb84ac8995fdc0fc5cfaea476

SHA256
51c01d31881a0ce38828633fda25d6127de75b591cb16052dc423386fbc7fec2

SHA512
fd58c7a44ca2dd76e9ed23858da8b150faad46f0b912cc60fe37c1c98f6ab14a00bab455f072aa520f3b3577e346d262660ca44fc829fe2bea46b86fb6391442

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sonyexternalviddev.cab

Filesize
206KB

MD5
b99f4e2844ce81592d85014ea5804213

SHA1
b2b15cb66752164fd514070974e36aaf3cc9efb3

SHA256
7251413ff0284780e5985941fafd50f76d90500206ef94755b39f4b2aa126942

SHA512
fc740f6684f4cb93c7d9348c9331957613b269048639c6316333c584dcdd71d6fdec42531aef204ba77966b9db6425899b6f4ef336fe467f529d2fc97120e243

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\sonyvegasdll.cab

Filesize
313KB

MD5
bca0d902616c837bf64db9bfc72dc967

SHA1
12e346a4125531a16f9d605aa87f7dad78d84945

SHA256
9039c56c15bde2f4a0a7b06f19210ec5daddaf8a82bcc0d711eac78fab9b9804

SHA512
18606ac5cfc71e2f6172014a5b7bb5ee3eec24f40ee915bb71beffd86df9a42c8af8072827a3ed191df0efa7722bf09f7758d5910c7a570bc0b7cf4b27d3b458

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\stl2plug.cab

Filesize
2.0MB

MD5
8fd67c99522fc625857113e456a3103b

SHA1
fa4ec407b1a07c9980a6974ec1cd7dfd893d425e

SHA256
512dc207e60326f1d278b4e2f2acefac13ad1e379994d194d6908f202810e601

SHA512
228c18ab1a0734176193961be9f5008bc8ce7c74d05d292a37c41be1cb34a0a03a2aaa8b6c84e78e866bf71d5ce49d5573f04cc3fe1706dd0f3beb4199ee1172

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\tutor.cab

Filesize
35.3MB

MD5
7b33eca2ccd5fab1cf0b553ff42f65e8

SHA1
5347bb9b4dd1f8685d6239c08c9b0380c38b408c

SHA256
b07e4291acf328cffbcccb806050125b1d2e4f82c1ecb2b37c32b5b84d49fb4e

SHA512
ef5538eaa0418aca0ba40b9c532eef3df166979c0ba100da075d5ea35e1421973a9102b5941e940da36ded547645a98db9cf0c6ba470a6487d508778688d1a5d

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\vduplug.cab

Filesize
1.9MB

MD5
691d932f13ba1fe6622e39b60a4a89fc

SHA1
239bb2d1528ff2b8b8c854bea93da4d75089fda2

SHA256
302ce01c132ae917d7d78edf142ffed44a7135f0bf92ef5fa5d07625b7d45729

SHA512
e496a4467f9e4d8e814fa2a194f3651058bf6f943a8512d186b60cbb6f73a47b6e20869c8a2df2437d0d805ba017f66dc6377f8acf7fb22c466e62c2e9a4d89a

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\vegas180.msi

Filesize
2.8MB

MD5
94a59313dd9592b79b3b03888167bbd0

SHA1
02f36fc109ddf9fd86924e88938410ea6f7eab2f

SHA256
30e1409e709335647a191c2a6310a5dd8909183577b8dc55168bb8d20fa71068

SHA512
7934b07f2ac3e04594c1235ac4ce72a09cd55d053c23c0ca39b42987cf65f6d3028cb10530e3c8bfcafd1f80fbb452ca899dd545291d8162d06aacafd496d839

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\vidcap.cab

Filesize
4.0MB

MD5
6a9851b06684cf9bdd1036b802e1b2ce

SHA1
98b4183f70e04e14e44a617e4588e77bd4200b37

SHA256
57cb9abbc0cdadbdfc10ac5f08be1ed598741659d2b9d971bb54a8ec0cba1d7c

SHA512
a8be128451ad39a3a63d41d67a4d496e8d6e367138486be1d3f16d42e952c33f6ca82b3e865ad2c63ad7e1710cd315ead03e3dbe129209410786783a2e75775e

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\wavplug.cab

Filesize
268KB

MD5
0f3cbc7561f9283deeede1e30dc23f5f

SHA1
b7d2ce377238b1fc86b53c69f551a31801c795cd

SHA256
3bf724745efa5cbc45db52300661e4c66049e770acb990b558aec2c0c028a9f5

SHA512
b997d02c91acfb919058dc605f4ffac84c30810047a68dc9fc2354662d960a80078ad67286da7891f7b141eb0eb93dfb8f26f8d1b9da53d95573626ff55b540b

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\wicplug.cab

Filesize
488KB

MD5
d154285db25d6f0aaf69f73c0b3e68a0

SHA1
064791f1aa6d2167b18d3c295f7857a5dc7bb0bc

SHA256
a21126d1ee724ab98de9adb36341a40b3d509c5e5261fe66c9a865686976c6e0

SHA512
421525e888db41c6879bace1fa6054c02efd2a88a2ca62f818850af26ace6a6d0b3e9d6a9faa2f09f17e8081002104700b96b6cd4773118e7cb4d03ee8d40e2a

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\wmfplug4.cab

Filesize
322KB

MD5
b5a8677ae7be53ec7afd0b21a5d5f668

SHA1
15f645cf23dff8bac8962f8ed9747c0d869c954e

SHA256
ed5f8329b3c079e0cd288e5f278f4d21a82850e1e49f24d8728c5dda67bd6fd4

SHA512
551e3a374517057609d5521aed2d19874ea20a100d6e6c990890f336cccb29997ed2bea37d92b4a71b9e8dad654c5ff9d2fb05423269d4df93223a06915b5a30

Download Submit
C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas180\xpvinyl.cab

Filesize
1.1MB

MD5
143c0ad1f5d1f83ec19f66d4dfcaafbc

SHA1
46ce574dc94a82c7fe15dca9216615b7aa434db9

SHA256
b608e8b8bad4c31d63426b2432f1228637d602aa6549db41f028b59275b82587

SHA512
ad5d96d607b75be8fcaa304e08a0cf95cbd9c3798f0276beca45d455a3577a57abfe7772214b4f1dfe309cb35177e6c67fe29cbd3cb34ace3440d91b47074ebc

Download Submit
C:\Users\Admin\AppData\Roaming\Sony\msvcrt_redist_12052023-101308.log

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Windows\Installer\MSI151E.tmp

Filesize
1.7MB

MD5
aa6140d90ba59625eff857dc9bf64125

SHA1
1c29f7ab92a4d6175dad72667b6d89a212349e07

SHA256
494d77dadb86b7bc5ed7fa8b6a3cfc16211104cb7a460808dc616118ad693888

SHA512
0e61051634cd825195d1d52f240bfdaefe48a64f9f9403d6e932357ea6020aa70bb1e5344fb010b16cea325c5d3023244587b5e3ddcf155a1dcd6e11e1a9e9f5

Download Submit
C:\Windows\Installer\MSIC9CA.tmp

Filesize
123KB

MD5
5cb7ec6843aa69694096d98e467bc5e7

SHA1
ade3a650ccfff23264c3e95819126c4be6eb57cb

SHA256
c03b47bcbe6c28cfa612950814ca383dddd0d4a527cc17f1750b8385d4917aad

SHA512
540e905256195ab904d1313b72811ca73f9dcbdb419c28cbbb83232e9fee966c3d80ca322f3701a0468e9bb545e4ca08e1106ae6254f59e100e703c139e40ce9

Download Submit
C:\Windows\Installer\MSIE001.tmp

Filesize
1.7MB

MD5
aa6140d90ba59625eff857dc9bf64125

SHA1
1c29f7ab92a4d6175dad72667b6d89a212349e07

SHA256
494d77dadb86b7bc5ed7fa8b6a3cfc16211104cb7a460808dc616118ad693888

SHA512
0e61051634cd825195d1d52f240bfdaefe48a64f9f9403d6e932357ea6020aa70bb1e5344fb010b16cea325c5d3023244587b5e3ddcf155a1dcd6e11e1a9e9f5

Download Submit
C:\Windows\Installer\MSIE001.tmp

Filesize
1.7MB

MD5
aa6140d90ba59625eff857dc9bf64125

SHA1
1c29f7ab92a4d6175dad72667b6d89a212349e07

SHA256
494d77dadb86b7bc5ed7fa8b6a3cfc16211104cb7a460808dc616118ad693888

SHA512
0e61051634cd825195d1d52f240bfdaefe48a64f9f9403d6e932357ea6020aa70bb1e5344fb010b16cea325c5d3023244587b5e3ddcf155a1dcd6e11e1a9e9f5

Download Submit
C:\Windows\Installer\MSIE65B.tmp

Filesize
1.7MB

MD5
aa6140d90ba59625eff857dc9bf64125

SHA1
1c29f7ab92a4d6175dad72667b6d89a212349e07

SHA256
494d77dadb86b7bc5ed7fa8b6a3cfc16211104cb7a460808dc616118ad693888

SHA512
0e61051634cd825195d1d52f240bfdaefe48a64f9f9403d6e932357ea6020aa70bb1e5344fb010b16cea325c5d3023244587b5e3ddcf155a1dcd6e11e1a9e9f5

Download Submit
C:\Windows\Installer\MSIE65B.tmp

Filesize
1.7MB

MD5
aa6140d90ba59625eff857dc9bf64125

SHA1
1c29f7ab92a4d6175dad72667b6d89a212349e07

SHA256
494d77dadb86b7bc5ed7fa8b6a3cfc16211104cb7a460808dc616118ad693888

SHA512
0e61051634cd825195d1d52f240bfdaefe48a64f9f9403d6e932357ea6020aa70bb1e5344fb010b16cea325c5d3023244587b5e3ddcf155a1dcd6e11e1a9e9f5

Download Submit
C:\Windows\Installer\e576cb4.msi

Filesize
49.9MB

MD5
e6801cf002699ff8cfcd2b099fcefaeb

SHA1
37b58c13c284af48a2acfcc6875944bccebe00d5

SHA256
51363501212dae8bc9b33c8aec711271d311f2f360ebc620c20d36ed714995f9

SHA512
bed4d17102288fecc044fbace08b560d3597fca962ad0eebff6f094378870843904a7afeb6e7e790da2420414950e977e1ba4a0501c958abc1b8e5a040367ec1

Download Submit
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen.log

Filesize
47KB

MD5
0ed6122bb8113c5349308f20d550ed00

SHA1
7efca0656aa91776ad92da5e3116a39deae66809

SHA256
84d2486f5c2f0a0adeaa7a95f716445b753fe941ed334d74707e2a0ac7b90731

SHA512
4beb1dba50c3e458b2bb0c7d733cadc50cae0cc12e87eb69577791a810f9c201add981cdc598400386453cdf5fb290de3a02c7c9c86249dc49610dbdc573cf06

Download Submit
C:\Windows\SysWOW64\DLLDEV32i.dll

Filesize
117KB

MD5
4f88fd71be7ba28395f79e72c1b01244

SHA1
cd25228481100b715b751a43e5ecab751e9adac8

SHA256
41390f9be34f90adde298f4c221d7cf27d4b8f5fefcf8bc15ec1ab3323273be3

SHA512
cbd3c446057f7f36975e54d7cd8106fb2b4f37f700873d15d9d9e1b5b2fe746da55477bcc0359c6815651560de7c2ddf905f29e6ce6f9bb3fe1a3f7bd4ed756b

Download Submit
C:\Windows\assembly\NativeImages_v2.0.50727_32\BdmuxInterface\29d15744753aff5c336ca3c3d9fabb71\BdmuxInterface.ni.dll

Filesize
14KB

MD5
52032748ac5018e7fb0cb4096e46bb41

SHA1
758125631c05bda97b7111c34880fcffb6f17694

SHA256
6ef9428dfbc684274fe5c0262cbe450b7fc7d016a39b88275a1268c2852428ae

SHA512
69556443faf3c7caa68bab6ac4671b2b991ba52747503f7a403b5e5d552f585ba9cbcdda6f84faf6e6be172a95a2ef5d97f50e6ab1085bbd32d26bb007ac4662

Download Submit
C:\Windows\assembly\NativeImages_v2.0.50727_32\BdmuxServer\078f394501343cd179428349ec675501\BdmuxServer.ni.exe

Filesize
19KB

MD5
a1e01dfe2dd230ee924601ed9acc4e80

SHA1
8dfad9d3d4cd433d25b09f5fa27f8e54fd82bb03

SHA256
b1212fe400199f033ea525c234bd3d06b19274d997e285c6f5a26e0ba685e34b

SHA512
2dc427757db6672eff0b0402f0fb587f8c12379a38fed2b31ff046317b4cab246beec9e1506bd4e37df609446d74bacb685301bde89c3aedccf34ad9e49af6d3

Download Submit
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\574e82db6b0f08cfa6c354a8c530eee2\Microsoft.VisualC.ni.dll

Filesize
15KB

MD5
01d23f6812fe23c0ce53c3fd1e1d1f34

SHA1
943b6ad66eae548473d9e093a35290e421de7a7d

SHA256
32a2b9d92ec3446635a6f9cb21acfb662ba5a1f1b5e725d6ec763438426a9962

SHA512
7df32aa18e90d856e982c555d040e7ceabada7e127a927ac7962d6276079d3e1ab9a1e9a824c67b7a0805ed3c4015de41b9f6b133af956def360dd8485cb9e7e

Download Submit
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\50c39c809e312905339e9d74496ecd00\System.Configuration.ni.dll

Filesize
955KB

MD5
4990dd6603ba3479ecc73fa52da8b155

SHA1
8bdc7e58144a9714537f7415ff14bd47b0b15f21

SHA256
88d7bf86a81d78d6cc26e3e740cb2552b0daab107a6fe57ff29b3a8b4c765d01

SHA512
7c5ab15c8c5dc5c210ec49a56b422a53fd648d805f4e6211ff0f66a81a78dc32f33d4f026f9d7b8b116eb3c0a6d5aafeed4749054b8238d14fb6258b27172dc7

Download Submit
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\2bf6d78fa46125ef60dd084028ef4d8c\System.Data.SqlXml.ni.dll

Filesize
2.4MB

MD5
fd8567cee64f4ce0a2e379c07adfe6e3

SHA1
7f46520023013b7563004bd2dac830816029b9e3

SHA256
e2db1ccf6218e8aef23603a2672348161351ece68b78f5e1b74301bf2a9f354f

SHA512
35ec5d23548c8e6d367eba031c62b933b56cc269f917e726e74d2ff1c077a88e08bf76ba2a2122d7146fcb950ccf6765c99b4112e5ff11edbac5a6b855ea729b

Download Submit
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\eaae44035dbd83a24255786d2aa9eef1\System.Data.ni.dll

Filesize
6.3MB

MD5
0e5ef58a5c1ef441d6203b9646569ae7

SHA1
65874e3a59eeec9bb8147e4f459a303de91c4100

SHA256
548f3755733ca180ea1a4e7782dcbc17006922b80586e9208b413be95d2154da

SHA512
a1537470ad190ffe22bbd08d330bf3123a9ab20fce35270588c0bd23dec475c8a64acea1c4872c47d6f3dfdaca42886890e05d8f822373fca0236fc5762089da

Download Submit
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\16ebe8df2036040bf7b16fbb0b441d63\System.DirectoryServices.ni.dll

Filesize
1.1MB

MD5
83549945235b83efb6078a1bb43a5ddc

SHA1
eb3b8496948c891b07376222a058f7ed2f863799

SHA256
f8cca9ed968d1f6244dda022faa84032e6ebec36168d4fb396ad8d01597f356a

SHA512
e55e4baf49291b160f0dce9ef68ee1328496d3263a0469c4c65b7626d6f1a67fa2798f4b47d1991201743033c95421c83fc3ff836aca7b1e65c18bd073eb0f79

Download Submit
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\bd2663637d8b93a187e67959328f54fe\System.EnterpriseServices.ni.dll

Filesize
613KB

MD5
0314d12a843f739fe5cd750fdff0289c

SHA1
61d925baf5f080132b62cafd3d1ff8a76ce6a477

SHA256
90f1074270765c0908c6527ca8a86d4199b241e87f2dc5c84ada42c5d966776e

SHA512
997a22727aae924fb467a057a484975d5b3b460f2070b5acfcbc86f8cb8a0d19ee682332d3aa3b2281c63eb7a91b98399ab5a64fc8476fba79d6c10adc5f458c

Download Submit
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\b7f272c19ef36ca26a6716b3ce65ba06\System.Runtime.Remoting.ni.dll

Filesize
756KB

MD5
1ca868c0ac37fc6cff2e1ed835a38cd6

SHA1
34f7a8b37af4e35d7ee07eaaca4aa06422e739ff

SHA256
d3e76742f3c6266a039769e51a4b5f419f5d016a1d68b70e8bb136bd2dd590e4

SHA512
fcd95cbe91b768620c74c53b1cb5365ff40fde039a525835572322c48e3750e79a8920f797a32e709b4bea4cf6a77a65d5210cbc2e8e1b4363c3c0d22abb4f5d

Download Submit
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\6358a966b003f859eb24e6c49d3bb7fa\System.Security.ni.dll

Filesize
705KB

MD5
9f33792c2dd85df9f6f356ac2761d5a9

SHA1
52236ee0a57ac0b135fa68e70adb8f1582b979a1

SHA256
497a442b45d20a888bd7f57b2bd3b39867752b1304109a414ccca565f1bdd9eb

SHA512
0d8d7ca85b6f68bb890391c0490bedf80efd2360fdc9e861038dedf5cff43519ec77ec6b7c5a9976f427d9690e2e94d96572b29f9fdffb4abe46d62c94a4458f

Download Submit
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\391b0d05b44d909e89c784995e964aa1\System.Transactions.ni.dll

Filesize
612KB

MD5
cd0552ae9ef192595a77292a45b87e21

SHA1
29dc417a2547f08b2aa1b537e63429a12d88d662

SHA256
b728af1b74b97e7ca828c7eaf297a100b384ad1d90df35304cd56a6e28580849

SHA512
ed222c33ce9fb01be88430f63ca1fd6fd46d10d6df2573128497e8e9e493a6b328944edd66793da1f9151aea0b1a4e0d1c89e85260d3a6763584b2e872d18142

Download Submit
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\4e31e183cb14c0cb0ef25463997f7af9\System.Xml.ni.dll

Filesize
5.2MB

MD5
aadbe0249d57d7e9a3be8f38b2eefac5

SHA1
5c58bb8a226b7348dd2e066041a80472751cee00

SHA256
1d669ecca4017e8be44b1dafb52155a77d5632acdda10ad94688abe5f06f6480

SHA512
835c206b482c1610d70bcf1d60810c8eef696491eb9cc9d11ee411c6f98d53a9ae120edfe52ef0998541adee7bf1c286db0ff103cac7d68804dfff4a400b193f

Download Submit
C:\Windows\assembly\NativeImages_v2.0.50727_32\Vegmuxmc\8764db574a0b0d3290c4c2bde537f46f\Vegmuxmc.ni.dll

Filesize
139KB

MD5
17c68165fef6ff9a362f788086dfe3e3

SHA1
278d58fd56d953db31c662e86a0cb84386ca2a53

SHA256
506bbc63b7dc90957548b3b874d3e5f02313726bab01e83c7fe40646ba0f67dd

SHA512
823a7dd88289407358a3d351e94b2aa4377d77e425a8c8c5dc6a842e8717be4a5e2967ab9b8d77c56a7db1cded393c0ef0b1e0a06efafcf03ba884fef697ea47

Download Submit
C:\Windows\assembly\NativeImages_v2.0.50727_32\mux.net\f10fec09dc4a248bf6475832bec881b8\mux.net.ni.dll

Filesize
311KB

MD5
3face17018443cdb5882a06bba7533c6

SHA1
aabd36a8961cdf49adc2fbc91a564ec09e934e14

SHA256
906b39066e48ce64d82dbdf739968ffef7dda5760e47128aba9d562cd3e7c8f9

SHA512
d244cc3ab2bbf28407d2b53585960a52641939b22708286f91c376127a694d33d66103de24be8a1bfa7c08d7bbf9b3dabc7996054c933770c59f645a6a0ad806

Download Submit
memory/224-3797-0x00007FF63F5A0000-0x00007FF64256A000-memory.dmp

Filesize
47.8MB

Download
memory/548-3964-0x0000000003290000-0x00000000032A0000-memory.dmp

Filesize
64KB

Download
memory/1388-3954-0x0000000002D90000-0x0000000002DA0000-memory.dmp

Filesize
64KB

Download
memory/1488-3779-0x000001AB8DAB0000-0x000001AB8DAC6000-memory.dmp

Filesize
88KB

Download
memory/1500-3901-0x0000000002F90000-0x0000000002FA0000-memory.dmp

Filesize
64KB

Download
memory/1688-3850-0x0000000007DE0000-0x0000000007DE1000-memory.dmp

Filesize
4KB

Download
memory/1688-3852-0x0000000003D30000-0x0000000003D40000-memory.dmp

Filesize
64KB

Download
memory/2024-3791-0x000001A1F5D60000-0x000001A1F5D61000-memory.dmp

Filesize
4KB

Download
memory/2432-3769-0x000002D42FDD0000-0x000002D42FDE6000-memory.dmp

Filesize
88KB

Download
memory/2528-3860-0x00000000036D0000-0x00000000036E0000-memory.dmp

Filesize
64KB

Download
memory/2560-3775-0x0000023C44CD0000-0x0000023C44CE6000-memory.dmp

Filesize
88KB

Download
memory/2844-3773-0x00000200F2DC0000-0x00000200F2DD6000-memory.dmp

Filesize
88KB

Download
memory/3140-3781-0x0000020F69720000-0x0000020F69736000-memory.dmp

Filesize
88KB

Download
memory/3244-3885-0x0000000003010000-0x0000000003020000-memory.dmp

Filesize
64KB

Download
memory/3364-3909-0x0000000002F80000-0x0000000002F90000-memory.dmp

Filesize
64KB

Download
memory/3472-3765-0x000002CE6E8C0000-0x000002CE6E8D6000-memory.dmp

Filesize
88KB

Download
memory/4088-3870-0x00000000030B0000-0x00000000030C0000-memory.dmp

Filesize
64KB

Download
memory/4224-3777-0x000001C33F6B0000-0x000001C33F6C6000-memory.dmp

Filesize
88KB

Download
memory/4228-3938-0x0000000003750000-0x0000000003760000-memory.dmp

Filesize
64KB

Download
memory/4236-3893-0x00000000037F0000-0x0000000003800000-memory.dmp

Filesize
64KB

Download
memory/4392-3767-0x00000220B53B0000-0x00000220B53C6000-memory.dmp

Filesize
88KB

Download
memory/4828-3783-0x000001A0BA3B0000-0x000001A0BA3C6000-memory.dmp

Filesize
88KB

Download
memory/4832-3771-0x00000212BE400000-0x00000212BE416000-memory.dmp

Filesize
88KB

Download
memory/4848-3785-0x0000025991830000-0x0000025991846000-memory.dmp

Filesize
88KB

Download