f980e92af3341650819ca6c985294ebe0aa78d38bdfe249536d7ec7f2efc6ecf

Analysis

max time kernel
92s
max time network
96s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
24-10-2023 17:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

clipgrab-3.9.7-dotinstaller.exe
Size

2.8MB
MD5

0f29445baa824f6729cbda3d90b15cec
SHA1

572195b4193529d842653e678eeec7dc3544ee2f
SHA256

f980e92af3341650819ca6c985294ebe0aa78d38bdfe249536d7ec7f2efc6ecf
SHA512

a05bb0cb18d3c7e0ce5795397beeaee90078c272afccf5211d911eae4bc39078bed7da22c528e77ed4daea1c1b4e736c2f361cdb6e525e4132ba4793e433cc81
SSDEEP

49152:9qe3f6PUk/4g+H98AHaCfu6rtWBu1SSmqOIzDamifOL9T9vEXv:MSiPUk/XE9vBugtL1SNaRLh9vEXv

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file

Executes dropped EXE 5 IoCs

pid	Process
1020	clipgrab-3.9.7-dotinstaller.tmp
1160	clipgrab-3.9.7-portable.exe
2420	clipgrab-3.9.7-portable.tmp
3052	vc_redist.x86.exe
2660	vc_redist.x86.exe

Loads dropped DLL 11 IoCs

pid	Process
2152	clipgrab-3.9.7-dotinstaller.exe
1020	clipgrab-3.9.7-dotinstaller.tmp
1020	clipgrab-3.9.7-dotinstaller.tmp
1020	clipgrab-3.9.7-dotinstaller.tmp
1160	clipgrab-3.9.7-portable.exe
2420	clipgrab-3.9.7-portable.tmp
2420	clipgrab-3.9.7-portable.tmp
2420	clipgrab-3.9.7-portable.tmp
2420	clipgrab-3.9.7-portable.tmp
3052	vc_redist.x86.exe
2660	vc_redist.x86.exe

Checks for any installed AV software in registry 1 TTPs 6 IoCs

Security Software Discovery

T1518.001

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\SOFTWARE\AVAST Software\Avast	clipgrab-3.9.7-dotinstaller.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\AVG\AV\Dir	clipgrab-3.9.7-dotinstaller.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVG\AV\Dir	clipgrab-3.9.7-dotinstaller.tmp
Key opened	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\SOFTWARE\AVG\AV\Dir	clipgrab-3.9.7-dotinstaller.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\AVAST Software\Avast	clipgrab-3.9.7-dotinstaller.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast	clipgrab-3.9.7-dotinstaller.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\ClipGrab\imageformats\qico.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\libEGL.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5Positioning.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5WebChannel.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5SerialPort.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\imageformats\qjpeg.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\position\is-HP2EO.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-2H1QB.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-VAVQG.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-JO028.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-EJRP1.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\opengl32sw.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-S3TI5.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-F32OL.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-JRKSS.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-IDHB9.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-O2MQA.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\python\python3.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\python\libssl-1_1.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-R0GC3.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\platforms\is-498F7.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-JR6LU.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-CUUM9.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-T2J0Q.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5Gui.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\libGLESV2.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5PrintSupport.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5Quick.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-O7II4.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-0PJT9.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-7DGAF.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\python\python37.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\QtWebEngineProcess.exe	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\position\qtposition_winrt.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\D3Dcompiler_47.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5QuickWidgets.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\python\python.exe	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-BHDL0.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-AC8C8.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-RL4RT.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\position\qtposition_positionpoll.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-1D9R3.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-MQTBM.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\imageformats\is-81EEN.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5Svg.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-AEV6C.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\styles\qwindowsvistastyle.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\translations\qtwebengine_locales\is-UD4HE.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-V9S3L.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\clipgrab.exe	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\ffmpeg.exe	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-VGICK.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\resources\is-0E3JQ.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\imageformats\qwbmp.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\resources\is-9PQU9.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\iconengines\is-IM7IJ.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\bearer\qgenericbearer.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5Widgets.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-QN3A3.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-JK7AA.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-A2AE4.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-8LD5C.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-QDF1M.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-CPR2A.tmp	clipgrab-3.9.7-portable.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	clipgrab-3.9.7-dotinstaller.tmp
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\	clipgrab-3.9.7-dotinstaller.tmp

Modifies system certificate store 2 TTPs 8 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 040000000100000010000000a923759bba49366e31c2dbf2e766ba870f000000010000001400000007eeabaf80a9ef4ae1b2cb9b4b5fc70d0428e6a953000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c00b000000010000002e00000053007400610072006600690065006c006400200054006500630068006e006f006c006f0067006900650073000000090000000100000016000000301406082b0601050507030406082b06010505070301140000000100000014000000a848b4242fc6ea24a0d78e3cb93c5c78d79833e41d00000001000000100000005959ddbc9c7632ba0a05f06316846fe6030000000100000014000000317a2ad07f2b335ef5a1c34e4b57e8b7d8f1fca619000000010000001000000044ba5fd9039fc9b56fd8aadccd597ca62000000001000000eb020000308202e730820250020101300d06092a864886f70d01010505003081bb312430220603550407131b56616c69436572742056616c69646174696f6e204e6574776f726b31173015060355040a130e56616c69436572742c20496e632e31353033060355040b132c56616c694365727420436c617373203220506f6c6963792056616c69646174696f6e20417574686f726974793121301f06035504031318687474703a2f2f7777772e76616c69636572742e636f6d2f3120301e06092a864886f70d0109011611696e666f4076616c69636572742e636f6d301e170d3939303632363030313935345a170d3139303632363030313935345a3081bb312430220603550407131b56616c69436572742056616c69646174696f6e204e6574776f726b31173015060355040a130e56616c69436572742c20496e632e31353033060355040b132c56616c694365727420436c617373203220506f6c6963792056616c69646174696f6e20417574686f726974793121301f06035504031318687474703a2f2f7777772e76616c69636572742e636f6d2f3120301e06092a864886f70d0109011611696e666f4076616c69636572742e636f6d30819f300d06092a864886f70d010101050003818d0030818902818100ce3a71cae5abc8599255d7abd8740ef9eed9f655475965470e0555dceb98363c5c535dd330cf38ecbd4189ed254209246b0a5eb37cdd522d4ce6d4d67d5a59a965d449132d244d1c506fb5c185543bfe71e4d35c42f980e0911a0a5b393667f33f557c1b3fb45f647334e3b412bf8764f8da12ff3727c1b343bbef7b6e2e69f70203010001300d06092a864886f70d0101050500038181003b7f506f6f509499496238381f4bf8a5c83ea78281f62bc7e8c5cee83a1082cb18008e4dbda8587fa17900b5bbe98daf41d90f34ee218119a0324928f4c48e56d55233fd50d57e996c03e4c94cfccb6cab66b34a218ce5b50c323e10b2cc6ca1dc9a984c025bf3ceb99ea5720e4ab73f3ce61668f8beed744cbc5bd5621f43dd	clipgrab-3.9.7-dotinstaller.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A	clipgrab-3.9.7-dotinstaller.tmp
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 0f00000001000000140000000f6aad4c3fe04619cdc8b2bd655aa1a26042e6500b000000010000005400000053007400610072006600690065006c006400200043006c00610073007300200032002000430065007200740069006600690063006100740069006f006e00200041007500740068006f007200690074007900000053000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c009000000010000002a000000302806082b0601050507030106082b0601050507030206082b0601050507030406082b06010505070303140000000100000014000000bf5fb7d1cedd1f86f45b55acdcd710c20ea988e71d000000010000001000000090c4f4233b006b7bfaa6adcd8f577d77030000000100000014000000ad7e1c28b064ef8f6003402014c3d0e3370eb58a2000000001000000130400003082040f308202f7a003020102020100300d06092a864886f70d01010505003068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3034303632393137333931365a170d3334303632393137333931365a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f7269747930820120300d06092a864886f70d01010105000382010d00308201080282010100b732c8fee971a60485ad0c1164dfce4defc80318873fa1abfb3ca69ff0c3a1dad4d86e2b5390fb24a43e84f09ee85fece52744f528a63f7bdee02af0c8af532f9eca0501931e8f661c39a74dfa5ab673042566eb777fe759c64a99251454eb26c7f37f19d530708fafb0462affadeb29edd79faa0487a3d4f989a5345fdb43918236d9663cb1b8b982fd9c3a3e10c83bef0665667a9b19183dff71513c302e5fbe3d7773b25d066cc323569a2b8526921ca702b3e43f0daf087982b8363dea9cd335b3bc69caf5cc9de8fd648d1780336e5e4a5d99c91e87b49d1ac0d56e1335235edf9b5f3defd6f776c2ea3ebb780d1c42676b04d8f8d6da6f8bf244a001ab020103a381c53081c2301d0603551d0e04160414bf5fb7d1cedd1f86f45b55acdcd710c20ea988e73081920603551d2304818a3081878014bf5fb7d1cedd1f86f45b55acdcd710c20ea988e7a16ca46a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479820100300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100059d3f889dd1c91a55a1ac69f3f359da9b01871a4f57a9a179092adbf72fb21eccc75e6ad88387a197ef49353e7706415862bf8e58b80a673fecb3dd21661fc954fa72cc3d4c40d881af779e837abba2c7f534178ed91140f4fc2c2a4d157fa7625d2e25d3000b201a1d68f917b8f4bd8bed2859dd4d168b1783c8b265c72d7aa5aabc53866ddd57a4caf820410b68f0f4fb74be565d7a79f5f91d85e32d95bef5719043cc8d1f9a000a8729e95522580023eae31243295b4708dd8c416a6506a8e521aa41b4952195b97dd134ab13d6adbcdce23d39cdbd3e7570a1185903c922b48f9cd55e2ad7a5b6d40a6df8b74011469a1f790e62bf0f97ece02f1f1794	clipgrab-3.9.7-dotinstaller.tmp
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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	clipgrab-3.9.7-dotinstaller.tmp
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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	clipgrab-3.9.7-dotinstaller.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6	clipgrab-3.9.7-dotinstaller.tmp
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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	clipgrab-3.9.7-dotinstaller.tmp
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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	clipgrab-3.9.7-dotinstaller.tmp

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	3	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

Suspicious behavior: EnumeratesProcesses 9 IoCs

pid	Process
1020	clipgrab-3.9.7-dotinstaller.tmp
1020	clipgrab-3.9.7-dotinstaller.tmp
1020	clipgrab-3.9.7-dotinstaller.tmp
1020	clipgrab-3.9.7-dotinstaller.tmp
1020	clipgrab-3.9.7-dotinstaller.tmp
1020	clipgrab-3.9.7-dotinstaller.tmp
1020	clipgrab-3.9.7-dotinstaller.tmp
2420	clipgrab-3.9.7-portable.tmp
2420	clipgrab-3.9.7-portable.tmp

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1020	clipgrab-3.9.7-dotinstaller.tmp
2420	clipgrab-3.9.7-portable.tmp

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1020	clipgrab-3.9.7-dotinstaller.tmp

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 2152 wrote to memory of 1020	2152	clipgrab-3.9.7-dotinstaller.exe	28
PID 2152 wrote to memory of 1020	2152	clipgrab-3.9.7-dotinstaller.exe	28
PID 2152 wrote to memory of 1020	2152	clipgrab-3.9.7-dotinstaller.exe	28
PID 2152 wrote to memory of 1020	2152	clipgrab-3.9.7-dotinstaller.exe	28
PID 2152 wrote to memory of 1020	2152	clipgrab-3.9.7-dotinstaller.exe	28
PID 2152 wrote to memory of 1020	2152	clipgrab-3.9.7-dotinstaller.exe	28
PID 2152 wrote to memory of 1020	2152	clipgrab-3.9.7-dotinstaller.exe	28
PID 1020 wrote to memory of 1160	1020	clipgrab-3.9.7-dotinstaller.tmp	31
PID 1020 wrote to memory of 1160	1020	clipgrab-3.9.7-dotinstaller.tmp	31
PID 1020 wrote to memory of 1160	1020	clipgrab-3.9.7-dotinstaller.tmp	31
PID 1020 wrote to memory of 1160	1020	clipgrab-3.9.7-dotinstaller.tmp	31
PID 1020 wrote to memory of 1160	1020	clipgrab-3.9.7-dotinstaller.tmp	31
PID 1020 wrote to memory of 1160	1020	clipgrab-3.9.7-dotinstaller.tmp	31
PID 1020 wrote to memory of 1160	1020	clipgrab-3.9.7-dotinstaller.tmp	31
PID 1160 wrote to memory of 2420	1160	clipgrab-3.9.7-portable.exe	32
PID 1160 wrote to memory of 2420	1160	clipgrab-3.9.7-portable.exe	32
PID 1160 wrote to memory of 2420	1160	clipgrab-3.9.7-portable.exe	32
PID 1160 wrote to memory of 2420	1160	clipgrab-3.9.7-portable.exe	32
PID 1160 wrote to memory of 2420	1160	clipgrab-3.9.7-portable.exe	32
PID 1160 wrote to memory of 2420	1160	clipgrab-3.9.7-portable.exe	32
PID 1160 wrote to memory of 2420	1160	clipgrab-3.9.7-portable.exe	32
PID 2420 wrote to memory of 3052	2420	clipgrab-3.9.7-portable.tmp	33
PID 2420 wrote to memory of 3052	2420	clipgrab-3.9.7-portable.tmp	33
PID 2420 wrote to memory of 3052	2420	clipgrab-3.9.7-portable.tmp	33
PID 2420 wrote to memory of 3052	2420	clipgrab-3.9.7-portable.tmp	33
PID 2420 wrote to memory of 3052	2420	clipgrab-3.9.7-portable.tmp	33
PID 2420 wrote to memory of 3052	2420	clipgrab-3.9.7-portable.tmp	33
PID 2420 wrote to memory of 3052	2420	clipgrab-3.9.7-portable.tmp	33
PID 3052 wrote to memory of 2660	3052	vc_redist.x86.exe	35
PID 3052 wrote to memory of 2660	3052	vc_redist.x86.exe	35
PID 3052 wrote to memory of 2660	3052	vc_redist.x86.exe	35
PID 3052 wrote to memory of 2660	3052	vc_redist.x86.exe	35
PID 3052 wrote to memory of 2660	3052	vc_redist.x86.exe	35
PID 3052 wrote to memory of 2660	3052	vc_redist.x86.exe	35
PID 3052 wrote to memory of 2660	3052	vc_redist.x86.exe	35

C:\Users\Admin\AppData\Local\Temp\clipgrab-3.9.7-dotinstaller.exe
"C:\Users\Admin\AppData\Local\Temp\clipgrab-3.9.7-dotinstaller.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2152
- C:\Users\Admin\AppData\Local\Temp\is-UR449.tmp\clipgrab-3.9.7-dotinstaller.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-UR449.tmp\clipgrab-3.9.7-dotinstaller.tmp" /SL5="$120150,1907617,1111552,C:\Users\Admin\AppData\Local\Temp\clipgrab-3.9.7-dotinstaller.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks for any installed AV software in registry
  - Checks processor information in registry
  - Modifies system certificate store
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1020
- - C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\clipgrab-3.9.7-portable.exe
    "C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\clipgrab-3.9.7-portable.exe" /VERYSILENT
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of WriteProcessMemory
    PID:1160
  - - C:\Users\Admin\AppData\Local\Temp\is-109JO.tmp\clipgrab-3.9.7-portable.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-109JO.tmp\clipgrab-3.9.7-portable.tmp" /SL5="$40170,72952445,791040,C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\clipgrab-3.9.7-portable.exe" /VERYSILENT
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Drops file in Program Files directory
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:2420
    - - C:\Users\Admin\AppData\Local\Temp\is-BTGIC.tmp\vc_redist.x86.exe
        
        "C:\Users\Admin\AppData\Local\Temp\is-BTGIC.tmp\vc_redist.x86.exe" /install /passive /silent /norestart
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of WriteProcessMemory
        
        PID:3052
      - C:\Windows\Temp\{C0A7FC23-1D34-439C-BD07-2B3B0DAF7076}\.cr\vc_redist.x86.exe
        
        "C:\Windows\Temp\{C0A7FC23-1D34-439C-BD07-2B3B0DAF7076}\.cr\vc_redist.x86.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\is-BTGIC.tmp\vc_redist.x86.exe" -burn.filehandle.attached=180 -burn.filehandle.self=188 /install /passive /silent /norestart
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:2660
- - C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod0_extract\saBSI.exe
    "C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod0_extract\saBSI.exe" /affid 91082 PaidDistribution=true CountryCode=NL
    3⤵
    PID:2204
- - C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod1_extract\avg_antivirus_free_setup.exe
    "C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod1_extract\avg_antivirus_free_setup.exe" /silent /ws /psh:92pTtVrLghNWrxJjUvy4S7XX7oyY7Hy5bgYq3fypcoSqSXido9Cd87Re7NDiD1hl3Cwfioc8BJQOgJ
    3⤵
    PID:1232
  - - C:\Windows\Temp\asw.570c71f2cba275b0\avg_antivirus_free_setup_x64.exe
      "C:\Windows\Temp\asw.570c71f2cba275b0\avg_antivirus_free_setup_x64.exe" /silent /ws /psh:92pTtVrLghNWrxJjUvy4S7XX7oyY7Hy5bgYq3fypcoSqSXido9Cd87Re7NDiD1hl3Cwfioc8BJQOgJ /cookie:mmm_irs_ppi_902_451_o /ga_clientid:8758ad77-4626-4986-a634-24eef518fecc /edat_dir:C:\Windows\Temp\asw.570c71f2cba275b0
      4⤵
      PID:2036
    - - C:\Windows\Temp\asw.b77cd75fbdd399ae\instup.exe
        
        "C:\Windows\Temp\asw.b77cd75fbdd399ae\instup.exe" /sfx:lite /sfxstorage:C:\Windows\Temp\asw.b77cd75fbdd399ae /edition:15 /prod:ais /guid:a299705b-7fe9-41a0-9051-a50ab945a915 /ga_clientid:8758ad77-4626-4986-a634-24eef518fecc /silent /ws /psh:92pTtVrLghNWrxJjUvy4S7XX7oyY7Hy5bgYq3fypcoSqSXido9Cd87Re7NDiD1hl3Cwfioc8BJQOgJ /cookie:mmm_irs_ppi_902_451_o /ga_clientid:8758ad77-4626-4986-a634-24eef518fecc /edat_dir:C:\Windows\Temp\asw.570c71f2cba275b0
        5⤵
        
        PID:2728
      - C:\Windows\Temp\asw.b77cd75fbdd399ae\New_15020c62\instup.exe
        
        "C:\Windows\Temp\asw.b77cd75fbdd399ae\New_15020c62\instup.exe" /sfx /sfxstorage:C:\Windows\Temp\asw.b77cd75fbdd399ae /edition:15 /prod:ais /guid:a299705b-7fe9-41a0-9051-a50ab945a915 /ga_clientid:8758ad77-4626-4986-a634-24eef518fecc /silent /ws /psh:92pTtVrLghNWrxJjUvy4S7XX7oyY7Hy5bgYq3fypcoSqSXido9Cd87Re7NDiD1hl3Cwfioc8BJQOgJ /cookie:mmm_irs_ppi_902_451_o /edat_dir:C:\Windows\Temp\asw.570c71f2cba275b0 /online_installer
        6⤵
        
        PID:2060
- - C:\Program Files (x86)\ClipGrab\clipgrab.exe
    "C:\Program Files (x86)\ClipGrab\clipgrab.exe"
    3⤵
    PID:2032
  - - C:\Program Files (x86)\ClipGrab\ffmpeg.exe
      ffmpeg -v quiet
      4⤵
      PID:112
  - - C:\Program Files (x86)\ClipGrab\ffmpeg.exe
      ffmpeg -formats
      4⤵
      PID:1720
  - - C:\Program Files (x86)\ClipGrab\python\python.exe
      "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
      4⤵
      PID:820
  - - C:\Program Files (x86)\ClipGrab\python\python.exe
      "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
      4⤵
      PID:2652
  - - C:\Program Files (x86)\ClipGrab\python\python.exe
      "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
      4⤵
      PID:1888
  - - C:\Program Files (x86)\ClipGrab\python\python.exe
      "C:\Program Files (x86)\ClipGrab\python\python.exe" "" -J https://www.youtube.com/playlist?list=PL6B3937A5D230E335 --yes-playlist --flat-playlist
      4⤵
      PID:656
  - - C:\Program Files (x86)\ClipGrab\python\python.exe
      "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
      4⤵
      PID:2152
  - - C:\Program Files (x86)\ClipGrab\python\python.exe
      "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
      4⤵
      PID:968
  - - C:\Program Files (x86)\ClipGrab\python\python.exe
      "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
      4⤵
      PID:1732
  - - C:\Program Files (x86)\ClipGrab\python\python.exe
      "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
      4⤵
      PID:1996

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Query Registry

T1012

Software Discovery

T1518

Security Software Discovery

T1518.001

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\ClipGrab\Qt5Core.dll

Filesize
4.9MB

MD5
357cf7f517757f0689030f196dd7edc0

SHA1
248ae43e160e80c81718a9f26544be4e535cf20a

SHA256
fd3dd9dcc286e6d36cb7b3fc90c8f7f683d2e9eb449e0433af70118e726d3fe1

SHA512
f938d4e81c46bb2d4cea587a9040e6a9eac44942654e07f6b17b3e4d27d31d03b3b5226004a2e981e6c9eaf0c2faf42957607f278c9978f6033c901c93217b7f

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Gui.dll

Filesize
5.1MB

MD5
c8bb97d7265ae7327eab7432c6496cf3

SHA1
c8ecab5cc7872a08ebb81edd00e95db85d56d6b5

SHA256
bd149755a4b0b7d721f9a355717855f488b16d8cbe177d0d88d9990359f5d4d5

SHA512
ec8c71336ff97e54252b3f8558a0471f8a14821ae91f90a32f1e9284eddfba6106d85eff25d5cf19d5273acaedb9ec23daf84e273ec0d6939e3c694e5da47085

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Network.dll

Filesize
1.0MB

MD5
08b5fcf0369a4923befb05a3e7b91998

SHA1
4d44449f027120d59bd0c9725dcfe02102acc82e

SHA256
de3ef3d9ac16b03a6da9cc076bba081142ccd4a306777b6d1bbaa60980e20723

SHA512
629a3c3b3fd6c36a0a9ec93bbd325bd78e5044279720a32eb79041b08989f575c99992f352d710c167b79c19498fa002ae85afbb080302fb001ed0b44465eb06

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Positioning.dll

Filesize
259KB

MD5
92aa5c44793603758874f87ecc5c88ce

SHA1
f368193467f61e0edb4864422085e70770c88d76

SHA256
798cc99af70288093bfd09a5addfd55a80f9652e7dc79f0b51f7760c47de2c9e

SHA512
459b97983c236ad76438615dad7174aa64561c9a0d9fcda7f290411237d97411f503d2dbb2d90f0c61fc229a872971a96ab61bf7b9bfb8b1ea840f4621d10910

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5PrintSupport.dll

Filesize
267KB

MD5
c9d5c7d715bbf74c31aab14893698778

SHA1
ee62edb71acb9eda4cb5f213a0b94940b972d7b3

SHA256
12717098b4d3f5f09ec19d091d1beb26d6df35e586bee511b9138be42d644e4a

SHA512
ee67880a737d1ec7c14cf84f20994bd34d8c8e39fc1763b634c311bc200ab6153f2f6760b217517a6190ccdf8076f4f9055062a011b3115c653c0ae4c5837330

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Qml.dll

Filesize
3.2MB

MD5
b92764b31b080972ad0682a0ba794db1

SHA1
a4b3b253da4078a0b9d536873a6e79a4ba070ad2

SHA256
4706a5ef8f1092da9d60af8722546ce8f23c98db7450c3f72521d4651aeb2a52

SHA512
077c7c285c038cec271fe21a2b77eaadf3ec7d6a288d24234d6e351bead294b7bb903ea2759cb852d8e3d0354fbac926292639375d82d4dbeb85e4c515ef4369

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Quick.dll

Filesize
3.0MB

MD5
7a517d5ee706c979876b97c789be8968

SHA1
7efc77f592389f94aa6980ecd3da7d39c960765f

SHA256
beb08a06b24ae1668441d47fbd434daa40ef6c4c45963351a0a6acdcd550bc31

SHA512
2656d980b31c5f6c34fae8b9ea719c06481195af6ff8b93a6297cae74783a2eaf6b808d539add7a1490e159ee19d2889308adb48491d719097d5459a7f798287

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5QuickWidgets.dll

Filesize
64KB

MD5
42ce360f532e7e835ee94ee1226e1c19

SHA1
6c596c32575f081c86524742fcb11aa5e44ad213

SHA256
6b12b555d3bc465e106a26603b4bead895134ecd90b3201773415eab64cc69ac

SHA512
8f2772be5a6e375f06439f58c4b26277f93b8b777c950640c4699de6e0b0a99f7f33ebc6eac4b3a87a1e1b644c573b7ae5de9289d399fa41d732867c1bf95508

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5WebChannel.dll

Filesize
96KB

MD5
2a65f4f49a88417222bcf109b59247ef

SHA1
a165ff1b21ff45c11783b63f2f4e9f270f84f05e

SHA256
632a5d720f3f6371721f94e4665ac13988afde722d155aaa5364a27cbd46d3ac

SHA512
c260fdb3454994e15582feec31b63e8418c9b1d705ee06ac09aa4ac77782ac79f722c9c883714e462ef919834ddd569ea7fff2b7d616a2b210966013c8ad9add

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5WebEngineCore.dll

Filesize
44.4MB

MD5
f1ff74fa883a302ce69aa287ffdb154c

SHA1
4e812a091823b9c3994865ad7f5d41d484fa8b4f

SHA256
90f3e6032815781130f082495f1cb3d4291168f803bb647c637fcaaa79efe40e

SHA512
9ad24431c401753dac6411355fe1a660f5089ed7e6ad6f02dfa9cebc5eb4d681a216382fa759fcd2931642b2116e97acf4885c550045927809c6b9b2c3706f1c

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5WebEngineWidgets.dll

Filesize
187KB

MD5
9c30ad3a2ba28362ac506f50221e881d

SHA1
02497e8d0544d91318a2b6619b7c154cebee1073

SHA256
ce773742d6d80df75e9e462bd38bf237508541b3243dad57c48b4eb24f4ff3f1

SHA512
50bb8ac0f02bebe6aaa09554bfe8dd575681810239edeeb696b8170a8f4c3457a4ff3bf2e7ad9ed1b6a6c54f81201988c8e347f1fbff4e2ea2d348a72ca9aa70

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Widgets.dll

Filesize
4.3MB

MD5
db7034b133d238447a6f3704b65bbceb

SHA1
c834d45162f38f461a8eafe737301eb22056e913

SHA256
53d9f928141382a5ef60039562b200e03d18e8720f16fb0ee8072b45e94202a7

SHA512
837b7e675b752c372973ecb4a53de568fc087e5f3896916614d504405a0a1ae78d1be59f173c2a0b28b4b139924736208de2eb6ee767c78894b7834fae9bf9f1

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Xml.dll

Filesize
149KB

MD5
fd0f95e872b99b61f0b7276e0ff76c28

SHA1
a90b20be2f436362782ac18182637f8dca1e9719

SHA256
9150d32aa158f9c555cc3b845fc8f776684f11ec014b47a96d498faad67e7a31

SHA512
25a4e5d74315f64171c16929da0fa049db9dd835cb912e2909bf442fc6383a424cdd52aec58c6eb6d335697651deff16f688ecac8c11310a1fe7383996bdcd94

Download Submit
C:\Program Files (x86)\ClipGrab\clipgrab.exe

Filesize
1.1MB

MD5
57cdd2bc92aee7d3d213561188e565d4

SHA1
fb34ba0178b5764b6ccc9d228796196ee172980e

SHA256
10770da581cc85d55a286d42a0428accafe6c7910bc640cc4264da7fb26dafa4

SHA512
ac00f5021cbc34b7ca160364cdde0a404353d8fc9e6a46866884268880c7b753e91741c48b413d6f7a5ff28a4e3d98bd7485550b46009a7c5b42dd0a877f3856

Download Submit
C:\Program Files (x86)\ClipGrab\clipgrab.exe

Filesize
1.1MB

MD5
57cdd2bc92aee7d3d213561188e565d4

SHA1
fb34ba0178b5764b6ccc9d228796196ee172980e

SHA256
10770da581cc85d55a286d42a0428accafe6c7910bc640cc4264da7fb26dafa4

SHA512
ac00f5021cbc34b7ca160364cdde0a404353d8fc9e6a46866884268880c7b753e91741c48b413d6f7a5ff28a4e3d98bd7485550b46009a7c5b42dd0a877f3856

Download Submit
C:\Program Files (x86)\ClipGrab\clipgrab.exe

Filesize
1.1MB

MD5
57cdd2bc92aee7d3d213561188e565d4

SHA1
fb34ba0178b5764b6ccc9d228796196ee172980e

SHA256
10770da581cc85d55a286d42a0428accafe6c7910bc640cc4264da7fb26dafa4

SHA512
ac00f5021cbc34b7ca160364cdde0a404353d8fc9e6a46866884268880c7b753e91741c48b413d6f7a5ff28a4e3d98bd7485550b46009a7c5b42dd0a877f3856

Download Submit
C:\Program Files (x86)\ClipGrab\libEGL.DLL

Filesize
21KB

MD5
55813372944c5acaca0e38c22902a6e6

SHA1
8c3fbdcacecc971aac8823a52eb83082669220a3

SHA256
fc219ad27720cfb1b223d748c1b5bdd78886235f4254bfe8e0adaf168c7e9849

SHA512
73f504a1f7cda4082f370387304db701672d95409886362dd70f8599fc17a5b577d2b37dd8f012cecb6d6dffe4321906c2a07cdd7e12e2d31bb9df0fb2e97a7f

Download Submit
C:\Program Files (x86)\ClipGrab\libGLESv2.dll

Filesize
2.7MB

MD5
02c59344a65e9893d7d2d0d79b570429

SHA1
d07d73aab1beaeeef57c03330add64afa5f20160

SHA256
adba2649650fa580fb301b69a74aa4ad0b8796a6b35179ff0a938be510db1b7d

SHA512
222ffdb94f4df18d25e5d77cb76ff95c0704dbd696796880bdc7c23c930546435ac5060233f3be9a5b2c058a721c15ffc542b9ba84aafe28dfc77498037f21df

Download Submit
C:\Program Files (x86)\ClipGrab\opengl32sw.dll

Filesize
15.3MB

MD5
8b197f55264a44b7b25046f7ba5bd7d2

SHA1
cef69e168160968e00ffffa136e1af7819e7c0ce

SHA256
25ae7577e066fa80519a8f1c314b15cdd22e4a8d3ecd2a36eccc79e40714a91d

SHA512
6af2b1b17a7e3460099359a6750221aacb8f9ce0e80b346dbafd2cbd8e579543b980f98e0aeb199e0781a045c9d6a7f2f11c8628f960c13550328487b7fa9154

Download Submit
C:\Program Files (x86)\ClipGrab\platforms\qwindows.dll

Filesize
1.2MB

MD5
b190c721612ac9d169f8b3a8f8b48a29

SHA1
206442dd161e878f1a6f83f3ebdb9208b56abfff

SHA256
ccb562f817d7015c78da4098bc576e7eaf3df1ebd55afb58d75f12dace9c761f

SHA512
951bc91302fcb1a28b7093f6867b379a90188733cec329efedb465ae27ae1a526a2d5f997816b26ed123d2401a9aa2854d26a003a65318f50e3a695d7948f6b7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
125d021ff65d0dae450e12fdf4c07d20

SHA1
8f237456a785d40bd09dc693016b804d01b2acb4

SHA256
b325e4a59f06f83e4c344efa19e5e34ddb6c555838d2e3e7bd4715e735debb9e

SHA512
fcbf8d60564e2533d09257489eac338b03d8dc706c3808260e3d644f439f0492e8d790e6b35d64e41090cce200e8d6785385da8455546cc6eb2aa1202b879b2e

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab890F.tmp

Filesize
61KB

MD5
f3441b8572aae8801c04f3060b550443

SHA1
4ef0a35436125d6821831ef36c28ffaf196cda15

SHA256
6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

SHA512
5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar8970.tmp

Filesize
163KB

MD5
9441737383d21192400eca82fda910ec

SHA1
725e0d606a4fc9ba44aa8ffde65bed15e65367e4

SHA256
bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

SHA512
7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-109JO.tmp\clipgrab-3.9.7-portable.tmp

Filesize
2.5MB

MD5
ae7b203e80eaa5afb50768049bb3de50

SHA1
cc0b5d64c2af21a3b24e167352df8ae93acd30d3

SHA256
ffe5d85efc5b75b4c99b07f5819d1fb3b9b1b42e67c903ef86f013bdedad7112

SHA512
a94cc199a4fa8a67496169de972bef84dd0e411502c5f74438ec0e7d18626ef3278d9c3aae1b0d025776849dbed5ec8e06d714b4bd48a43e48e2a167f7d52748

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-109JO.tmp\clipgrab-3.9.7-portable.tmp

Filesize
2.5MB

MD5
ae7b203e80eaa5afb50768049bb3de50

SHA1
cc0b5d64c2af21a3b24e167352df8ae93acd30d3

SHA256
ffe5d85efc5b75b4c99b07f5819d1fb3b9b1b42e67c903ef86f013bdedad7112

SHA512
a94cc199a4fa8a67496169de972bef84dd0e411502c5f74438ec0e7d18626ef3278d9c3aae1b0d025776849dbed5ec8e06d714b4bd48a43e48e2a167f7d52748

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\AVG_AV.png

Filesize
114KB

MD5
5ef5291810c454a35f76d976105f37cc

SHA1
8ce0cc65ae1786cef1c545d40d081eda13239fa6

SHA256
03e69e8c87732c625df2f628ac63bd145268f9dea9c5f3dd3670b1cf349a995c

SHA512
3bec461bb3cbbbdb3c05171fcc5ab7e648b2b60d7b811261662f14d35c3836148b14cda1a3f2be127c89cc732de8cf1644d2e55e049eeeb2da8e397c58cc919e

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\WebAdvisor.png

Filesize
33KB

MD5
db6c259cd7b58f2f7a3cca0c38834d0e

SHA1
046fd119fe163298324ddcd47df62fa8abcae169

SHA256
494169cdd9c79eb4668378f770bfa55d4b140f23a682ff424441427dfab0ced2

SHA512
a5e8bb6dc4cae51d4ebbe5454d1b11bc511c69031db64eff089fb2f8f68665f4004f0f215b503f7630a56c995bbe9cf72e8744177e92447901773cc7e2d9fdbb

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\clipgrab-3.9.7-portable.exe

Filesize
70.3MB

MD5
962d6f9e7331b8f3eb2fa4acb15f5f61

SHA1
2e1a7e9ec7159e564814a599657d42dc01ef9858

SHA256
0ae8656f4c65673d75544cff54721cbfc586edd6e8b4b2a2070930684920411e

SHA512
f8721fc68703d6a6ab9188bce1d64774447f02f378dd4b4d267f7fb4b01d42c4520feede2855ab426d92dfc538a1d272d7a88e65871015a95654c3d8f321d3be

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\clipgrab-3.9.7-portable.exe

Filesize
70.3MB

MD5
962d6f9e7331b8f3eb2fa4acb15f5f61

SHA1
2e1a7e9ec7159e564814a599657d42dc01ef9858

SHA256
0ae8656f4c65673d75544cff54721cbfc586edd6e8b4b2a2070930684920411e

SHA512
f8721fc68703d6a6ab9188bce1d64774447f02f378dd4b4d267f7fb4b01d42c4520feede2855ab426d92dfc538a1d272d7a88e65871015a95654c3d8f321d3be

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\clipgrab-3.9.7-portable.exe

Filesize
70.3MB

MD5
962d6f9e7331b8f3eb2fa4acb15f5f61

SHA1
2e1a7e9ec7159e564814a599657d42dc01ef9858

SHA256
0ae8656f4c65673d75544cff54721cbfc586edd6e8b4b2a2070930684920411e

SHA512
f8721fc68703d6a6ab9188bce1d64774447f02f378dd4b4d267f7fb4b01d42c4520feede2855ab426d92dfc538a1d272d7a88e65871015a95654c3d8f321d3be

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\finish.png

Filesize
2KB

MD5
7afaf9e0e99fd80fa1023a77524f5587

SHA1
e20c9c27691810b388c73d2ca3e67e109c2b69b6

SHA256
760b70612bb9bd967c2d15a5133a50ccce8c0bd46a6464d76875298dcc45dea0

SHA512
a090626e7b7f67fb5aa207aae0cf65c3a27e1b85e22c9728eee7475bd9bb7375ca93baaecc662473f9a427b4f505d55f2c61ba36bda460e4e6947fe22eedb044

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\loader.gif

Filesize
10KB

MD5
f23a523b82ad9103a9ac1dcc33eca72f

SHA1
5363bb6b51923441ef56638576307cc252f05a71

SHA256
59853c413b0813ded6f1e557959768d6662f010f49884d36b62c13038fac739c

SHA512
514ec63f7ed80d0708f7e2355fad8a558b4dcf2d0122ff98fe7c3ca1f40e7cd04e8869ca7a3b95622c0848c0d99306d7e791b86ca69b9e240beae959ca6285be

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\logo.png

Filesize
9KB

MD5
2c050a55ade91ca10c94c41fdceaa8cb

SHA1
178fd0ee1c184fe681d89bff0ff8b89392723a67

SHA256
43262c9cc6328d67007b97a8eb36c924d05d45a383349e61b067f35677e1ad6e

SHA512
425825cbe2a417f10832c37fc0e571ca3e3f9b940f93f9f8ec8fcff2df896a52ff753386c30e03836d588b6bf355323dbea2e3a0cbf756f8f3c7065335cbfeac

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod0.zip

Filesize
499KB

MD5
cd9c77bc5840af008799985f397fe1c3

SHA1
9b526687a23b737cc9468570fa17378109e94071

SHA256
26d7704b540df18e2bccd224df677061ffb9f03cab5b3c191055a84bf43a9085

SHA512
de82bd3cbfb66a2ea0cc79e19407b569355ac43bf37eecf15c9ec0693df31ee480ee0be8e7e11cc3136c2df9e7ef775bf9918fe478967eee14304343042a7872

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod0_extract\saBSI.exe

Filesize
1.1MB

MD5
bb7cf61c4e671ff05649bda83b85fa3d

SHA1
db3fdeaf7132448d2a31a5899832a20973677f19

SHA256
9d04462e854ef49bcd6059767248a635912ce0f593521a7cc8af938e6a027534

SHA512
63798024e1e22975d1be1e8bff828040d046d63df29f07d6161c868526d5f08451e44b5fa60bfb0c22cf7880abc03aaedafa2c5c844c3aeff640e6fac9586aab

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod0_extract\saBSI.exe

Filesize
1.1MB

MD5
bb7cf61c4e671ff05649bda83b85fa3d

SHA1
db3fdeaf7132448d2a31a5899832a20973677f19

SHA256
9d04462e854ef49bcd6059767248a635912ce0f593521a7cc8af938e6a027534

SHA512
63798024e1e22975d1be1e8bff828040d046d63df29f07d6161c868526d5f08451e44b5fa60bfb0c22cf7880abc03aaedafa2c5c844c3aeff640e6fac9586aab

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod0_extract\saBSI.exe

Filesize
1.1MB

MD5
bb7cf61c4e671ff05649bda83b85fa3d

SHA1
db3fdeaf7132448d2a31a5899832a20973677f19

SHA256
9d04462e854ef49bcd6059767248a635912ce0f593521a7cc8af938e6a027534

SHA512
63798024e1e22975d1be1e8bff828040d046d63df29f07d6161c868526d5f08451e44b5fa60bfb0c22cf7880abc03aaedafa2c5c844c3aeff640e6fac9586aab

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod1.zip

Filesize
122KB

MD5
56b0d3e1b154ae65682c167d25ec94a6

SHA1
44439842b756c6ff14df658befccb7a294a8ea88

SHA256
434bfc9e005a7c8ee249b62f176979f1b4cde69484db1683ea07a63e6c1e93de

SHA512
6f7211546c6360d4be8c3bb38f1e5b1b4a136aa1e15ec5ae57c9670215680b27ff336c4947bd6d736115fa4dedea10aacf558b6988196f583b324b50d4eca172

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod1_extract\avg_antivirus_free_setup.exe

Filesize
229KB

MD5
26816af65f2a3f1c61fb44c682510c97

SHA1
6ca3fe45b3ccd41b25d02179b6529faedef7884a

SHA256
2025c8c2acc5537366e84809cb112589ddc9e16630a81c301d24c887e2d25f45

SHA512
2426e54f598e3a4a6d2242ab668ce593d8947f5ddb36aded7356be99134cbc2f37323e1d36db95703a629ef712fab65f1285d9f9433b1e1af0123fd1773d0384

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod1_extract\avg_antivirus_free_setup.exe

Filesize
229KB

MD5
26816af65f2a3f1c61fb44c682510c97

SHA1
6ca3fe45b3ccd41b25d02179b6529faedef7884a

SHA256
2025c8c2acc5537366e84809cb112589ddc9e16630a81c301d24c887e2d25f45

SHA512
2426e54f598e3a4a6d2242ab668ce593d8947f5ddb36aded7356be99134cbc2f37323e1d36db95703a629ef712fab65f1285d9f9433b1e1af0123fd1773d0384

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BTGIC.tmp\vc_redist.x86.exe

Filesize
14.0MB

MD5
310f8aadd8055f8b8eba1a6528be7d10

SHA1
3ee9622151e4b50837fcdfac1b085430f0181f4e

SHA256
54ad46ae80984aa48cae6361213692c96b3639e322730d28c7fb93b183c761da

SHA512
2872a30939f7ee20b494806574cf5b8b5a0976f8fe69bdbd77dde2483ce2a9e5458ff3636147e49a449e941a44ca2d79239e3da62fddb69fc5bced8ee1004ee5

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BTGIC.tmp\vc_redist.x86.exe

Filesize
14.0MB

MD5
310f8aadd8055f8b8eba1a6528be7d10

SHA1
3ee9622151e4b50837fcdfac1b085430f0181f4e

SHA256
54ad46ae80984aa48cae6361213692c96b3639e322730d28c7fb93b183c761da

SHA512
2872a30939f7ee20b494806574cf5b8b5a0976f8fe69bdbd77dde2483ce2a9e5458ff3636147e49a449e941a44ca2d79239e3da62fddb69fc5bced8ee1004ee5

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-UR449.tmp\clipgrab-3.9.7-dotinstaller.tmp

Filesize
3.2MB

MD5
aadc16c8ad4312196df3aa1d9f6386d3

SHA1
ff4d78923e0d957e6a66b3c06efecc435c396c7a

SHA256
04fade43204ecbbb378114a023b3db4a3aebe8258ff3b3846156e80a9c5cf4a3

SHA512
51621ec71d530d75e4a537381edf03bc48b234dd861547c950573febf5709a1716ee797368854512edf1950a4e1f4f8bbe292417a0dd238600338a39e2454e04

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\HTMLayout.dll

Filesize
4.0MB

MD5
8ebe16ae0dd136418999ce7196ae5033

SHA1
244275bf43adcaac0525a5e403eca1ddbfca9e94

SHA256
87a63d31b6be9530b0d1272a56f657ff411a02a2a8ee3b13ca70541db6396083

SHA512
cc719b0ed3d33a0b6478e024b080bd22cafe2826085e45c24b44c49da7ed31cf04e15c9ff97f50551daa4edb8df69aa15764ceab033d804f67930011c8a56cb8

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\Instup.dll

Filesize
21.8MB

MD5
efb1d13fe087bf92b846527b35fee97b

SHA1
b1b29696d07e7d7d0e5ce29a0e02eabbf98bd06e

SHA256
d1b4fe09824713db309effea5f2ec82ecd62d2fe03313da72cfb7542e0a1d973

SHA512
866cd6ff36202d7a8e6a9fc20f4aa6f685112c572a91874f21c777e01bebb3b5f4351922e4dcaf43f1564d7d127c0198d144feea0d40c8dfbe93b153aa22a401

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\Instup.exe

Filesize
3.7MB

MD5
d9b166786b12cd53a4253edc6b6df9bf

SHA1
a554ae7eeaa91eb61fc22d1c8e3e417bf09283ab

SHA256
a7ee46f725b6159c2dc06ea6b2570c2d803bed97b8b11dc9c627bf6c3a8cbee4

SHA512
32f135f600151a464fb5086ae8934f6a30fe2e6268b84118186cdd07b0ab3afcbef21be9a4903d592313dd7f45365116f625d0f96f4358d04566a525fa3de09e

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\New_15020c62\asw4e5ecc8ae6698e59.tmp

Filesize
4.8MB

MD5
ff1bc47d64bac8029f352abb34ada896

SHA1
03d5a2bb672948b9a3a766529430e3537fcb64b9

SHA256
d97dbf9d34565c4c896abb2cf04e5358b2ad541ab987d90212170da87fb94e80

SHA512
dc89646581087bc2dbabb3dec121585e6bc899b74a697ffae69d714393de0902b23c94d03454a8a4a0f05adf4862a86897c9f280828de56a598f3e5eafdd72b6

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\New_15020c62\asw9135fccb9d0cec84.tmp

Filesize
4.5MB

MD5
bbb61ad0f20d3fe17a5227c13f09e82d

SHA1
01700413fc5470aa0ba29aa1a962d7a719a92a82

SHA256
39154701a5a844eacf6aa1ccc70297c66bda6e27450fd1043778cead49da859e

SHA512
c614246263664268970562908c63e933ddda0a7f1c2f06b63eab9a06a2d8253356636cac948f709c37e66929d5d8b57663bf5f0d34fcf591ac7461c2af5b63e4

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\New_15020c62\aswd03c09068bde8f40.tmp

Filesize
831KB

MD5
ce4d45d0b684f591d5a83fdbd99bd306

SHA1
e89637b905c37033950afadaca2161bd5b09fb5e

SHA256
907e054fef8297e3cd31d083299ff0ac495775eaa928e3e10e7000fdf6baaed7

SHA512
af0aefc20b9c9c91f63f34fcd70c27e9e304073d51cc9ec45113ab360dd5ba4ad104b5c752e022b8b153f435527b56f6bfbb6022dd4bca98f8d1778e2bfc97d1

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\New_15020c62\aswdada6fa6b37e57bd.tmp

Filesize
3.5MB

MD5
e35925e15f8503bb66d012befefe2e53

SHA1
1c75453718f26bf3e9a0c9143c9e9c604bb2237c

SHA256
97f25907c2f8dc94be232c778c58c2a65670c0ac4f000bdc4652ae9b466a2e7d

SHA512
1929202c68f9f286ef9d28766f738fe657479d995ce0c932c389cd1a7396d8803f50077a17c47fb8b91e6570cba01eb2d139b7be05ac335d361f639c556c3a58

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\New_15020c62\aswf30ba0a7a2ac12ae.tmp

Filesize
3.1MB

MD5
c545527e69a46359a4a45f58794a0fe5

SHA1
e233e5837bfe5d1429300fb33f12f5b54689781b

SHA256
8d86976b5ecd432772d4ac5965ff86bff6da04318f231b3e7ea64818de6211f9

SHA512
754c891b4f582948ba5dd776a87edba35f96453a540c20c5dd78f2d816bc83161e0d3f8a0f6052b5d0835f5a0b4eeb6d7a871aa611bd74e61ca25ea7046837e0

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\asw2dcba78bbfdf4467.ini

Filesize
563B

MD5
1df6227ba883fc43a1a1fa39033f2ded

SHA1
ed502c6e4869e3ef1cd7486af93222084d829842

SHA256
7ea2e9f237671d6abc8ed0193e8167eb38a1fbe1bc112e0e452081c92c58c230

SHA512
0176286bd77f0db71b8fc8bd61b64db3e5c0d29c6627a473be65304590f570c6a586eb2bf6cd6de4b8733169945206f7d5612803a2240cd000f451e2bb13f543

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\avdump_x64_ais-c62.vpx

Filesize
907KB

MD5
43dc9e69f1e9db4059cf49a5e825cfda

SHA1
519298f8a681b41d2d70db2670cc7543f1ee6da4

SHA256
98efeee831a7984d94cf13800aeb1de68e79bea0bb5d95ff7adcbb43b648ed4d

SHA512
d0c07cb1e251f2135fdb21893e6ca70efc019a8b759274c87266fb5a2c48ebc0126aecee0020bd48cfd65ef2f794b81b1e417000c91db18e2ac128c86eac4079

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\config.def

Filesize
17KB

MD5
1de245c301f3dcd5e38ee0efa0390090

SHA1
aea87a5eaba74d2a654e0640e9bc606feefa851b

SHA256
e833ec7a6f8a79aa540a18c6e8757316d588cf63c1b3120536f339ed322797da

SHA512
c838e865eb0a61701440f54dbfd330d4fced9d8a006c42b6330903d99c4a4c945828e4575e51bdedb348661dc8d2bdb573ca9c0c61475a4810d29880679fae2c

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\part-prg_ais-15020c62.vpx

Filesize
175KB

MD5
29b9bfd25fabf42939e3a6877f9b3ece

SHA1
c30d865bc2d680311c68eb0bed0e356845f700f9

SHA256
ed586b6ceb3e9dcc7dd21dd7dc7addd89e71a2b90039fe15b751b367e402d475

SHA512
a22827a2f9bc3de3c6c0ed5a4e36c383b5f8d4989fc543aa1a4852034c84055925df7456c1f9466ff3923de81f9d58a6f12d8f24e782bb2e805b908ef814a90e

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\part-setup_ais-15020c62.vpx

Filesize
5KB

MD5
d5b798d8816b252e7d718195dfeb8a8c

SHA1
860c5807fd491aeeb12d661d8cf2ecca4ca1639b

SHA256
75176962c8691f84eb299a555d4c82796b53a12161f1e6616ec50cf97393b499

SHA512
16cd2e8f57c05ba2bae79de39867cc35178a6d99cd035d7d20efd8788076360a408affa9b6caf3ea09daf5c32834b995e47b1ab4ec29fcc1fdfddcf0ba96cce5

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\prod-pgm.vpx

Filesize
572B

MD5
ad2aac5a8a6c3758f29636d1527d490e

SHA1
791e046067a460e38e627a711c7dfd6708dbc2d9

SHA256
f8f5c495bc4a1759af0855998d7cff5539bb4a3de68c562004b5ed68790c6dd5

SHA512
3606b9514effc5b563ca6da20e6a1ac5faf8452787c7c4d8955a9c4ccfe3096c42d0a49eecef2bbb319145e4112f8d9191b24a82ee14fbe749cd8dad803d3d4a

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\sbr_x64_ais-c62.vpx

Filesize
15KB

MD5
e38cc92cd980a55d811316ac62883e14

SHA1
fa83737abe11ee825c3da6843cc4d8e3b459729a

SHA256
be4d8a5dc335ca8446c0dbba4ee4ef07553a5c242bed560f11aaef4793855e87

SHA512
1422c8f94556ff0409a3cd1ff581f6c4ea56b01be36ba5b2c0e72465f4dad38391eb85bae28b079aa2f1204615d32a17b7e73e92ffcc9964f39c79626b7afe16

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\servers.def.lkg

Filesize
27KB

MD5
a0d9ac562ab8422b042b2d03fe5b6543

SHA1
a6b6dacbaa4b8ef2c6a818843b3a70035496be41

SHA256
75564c2bdd2c1c1ead9b79bd9fe094483f95c89760e9d04dae920b7dcd17d045

SHA512
c071894d7d17c56ab48df96110e4450de07a46575581c6f82e1cea3d21d13e88eae792b41ac68c6d88a2ff63d150151cd2038f582098f3da7966320d90b951cd

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\servers.def.vpx

Filesize
1KB

MD5
ac62a2e91800dd74826ea38481f5f11d

SHA1
f20b7662dab2ae9835266f6f141fbc212aa3697b

SHA256
97893fe6bb496c196b6d443fe59aa44d6a2dbd5eded2b20c622d96dceb060ac1

SHA512
0e55e6ec72e1d01cbf8dfc9502e0f040aebab9c328f030bd1964fa78b2b711374bbc1b8b82d9b222bbc3333a40068baa8596e308d7a04ffcd3ca160a9799e2ad

Download Submit
C:\Windows\Temp\asw.b77cd75fbdd399ae\uat_2060.dll

Filesize
29KB

MD5
13f20369d56d7b463b1831e3c611aa79

SHA1
f68f158ea8e1f631c111b942f63da4d7a2795e11

SHA256
73555c2064f172946cef371db88d0adcff850f63214e4aedf6b33d774097f5a5

SHA512
01d61eca8248beef04ce7e3c8a99f8561013b7a374364283d176cc86c73454078db4c4e6911eb64c51712eba9bd6a530530c06edc2b8ea839dc7ac0244ae4c3a

Download Submit
C:\Windows\Temp\{A6B488B9-9407-4422-BA0C-85F85D7BD157}\.ba\1055\license.rtf

Filesize
177KB

MD5
f1a281f74d3e91d16dd26d1f313cd8a9

SHA1
ddb2ca9032c5a9c091eac53b679f6ba428077b00

SHA256
f79108a254f876e0f6bbcb05a9effbe25dc252e7ea256bfe3fd28ceb79737f25

SHA512
484c5ca26275427e1fb74d3217a22a0e4aac409aba973e78d7ad68834e7ad1d86c7855d34b227925200f941d288dfc09477b2d7dfe0856810c6c847297b8d625

Download Submit
C:\Windows\Temp\{A6B488B9-9407-4422-BA0C-85F85D7BD157}\.ba\logo.png

Filesize
1KB

MD5
d6bd210f227442b3362493d046cea233

SHA1
ff286ac8370fc655aea0ef35e9cf0bfcb6d698de

SHA256
335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef

SHA512
464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b

Download Submit
C:\Windows\Temp\{C0A7FC23-1D34-439C-BD07-2B3B0DAF7076}\.cr\vc_redist.x86.exe

Filesize
881KB

MD5
9df0848b2753e9255f1a6b4cdc9a5a3e

SHA1
051469cd9e786b720ef6b70c35a1e184a643f520

SHA256
59089badd61acb47a07748c9018d3a959cf58f07de9902b0c45dffae3e566090

SHA512
518a78e77515b2fb21c5f66a760473a1f8ab5050e9bc65a4715ab178e568079f11f65fc173db59dd021b69fe0b606c42e50bf5f09a34ba2009a7b71e88033452

Download Submit
C:\Windows\Temp\{C0A7FC23-1D34-439C-BD07-2B3B0DAF7076}\.cr\vc_redist.x86.exe

Filesize
881KB

MD5
9df0848b2753e9255f1a6b4cdc9a5a3e

SHA1
051469cd9e786b720ef6b70c35a1e184a643f520

SHA256
59089badd61acb47a07748c9018d3a959cf58f07de9902b0c45dffae3e566090

SHA512
518a78e77515b2fb21c5f66a760473a1f8ab5050e9bc65a4715ab178e568079f11f65fc173db59dd021b69fe0b606c42e50bf5f09a34ba2009a7b71e88033452

Download Submit
\Program Files (x86)\ClipGrab\Qt5Core.dll

Filesize
4.9MB

MD5
357cf7f517757f0689030f196dd7edc0

SHA1
248ae43e160e80c81718a9f26544be4e535cf20a

SHA256
fd3dd9dcc286e6d36cb7b3fc90c8f7f683d2e9eb449e0433af70118e726d3fe1

SHA512
f938d4e81c46bb2d4cea587a9040e6a9eac44942654e07f6b17b3e4d27d31d03b3b5226004a2e981e6c9eaf0c2faf42957607f278c9978f6033c901c93217b7f

Download Submit
\Program Files (x86)\ClipGrab\Qt5Gui.dll

Filesize
5.1MB

MD5
c8bb97d7265ae7327eab7432c6496cf3

SHA1
c8ecab5cc7872a08ebb81edd00e95db85d56d6b5

SHA256
bd149755a4b0b7d721f9a355717855f488b16d8cbe177d0d88d9990359f5d4d5

SHA512
ec8c71336ff97e54252b3f8558a0471f8a14821ae91f90a32f1e9284eddfba6106d85eff25d5cf19d5273acaedb9ec23daf84e273ec0d6939e3c694e5da47085

Download Submit
\Program Files (x86)\ClipGrab\Qt5Network.dll

Filesize
1.0MB

MD5
08b5fcf0369a4923befb05a3e7b91998

SHA1
4d44449f027120d59bd0c9725dcfe02102acc82e

SHA256
de3ef3d9ac16b03a6da9cc076bba081142ccd4a306777b6d1bbaa60980e20723

SHA512
629a3c3b3fd6c36a0a9ec93bbd325bd78e5044279720a32eb79041b08989f575c99992f352d710c167b79c19498fa002ae85afbb080302fb001ed0b44465eb06

Download Submit
\Program Files (x86)\ClipGrab\Qt5Positioning.dll

Filesize
259KB

MD5
92aa5c44793603758874f87ecc5c88ce

SHA1
f368193467f61e0edb4864422085e70770c88d76

SHA256
798cc99af70288093bfd09a5addfd55a80f9652e7dc79f0b51f7760c47de2c9e

SHA512
459b97983c236ad76438615dad7174aa64561c9a0d9fcda7f290411237d97411f503d2dbb2d90f0c61fc229a872971a96ab61bf7b9bfb8b1ea840f4621d10910

Download Submit
\Program Files (x86)\ClipGrab\Qt5PrintSupport.dll

Filesize
267KB

MD5
c9d5c7d715bbf74c31aab14893698778

SHA1
ee62edb71acb9eda4cb5f213a0b94940b972d7b3

SHA256
12717098b4d3f5f09ec19d091d1beb26d6df35e586bee511b9138be42d644e4a

SHA512
ee67880a737d1ec7c14cf84f20994bd34d8c8e39fc1763b634c311bc200ab6153f2f6760b217517a6190ccdf8076f4f9055062a011b3115c653c0ae4c5837330

Download Submit
\Program Files (x86)\ClipGrab\Qt5Qml.dll

Filesize
3.2MB

MD5
b92764b31b080972ad0682a0ba794db1

SHA1
a4b3b253da4078a0b9d536873a6e79a4ba070ad2

SHA256
4706a5ef8f1092da9d60af8722546ce8f23c98db7450c3f72521d4651aeb2a52

SHA512
077c7c285c038cec271fe21a2b77eaadf3ec7d6a288d24234d6e351bead294b7bb903ea2759cb852d8e3d0354fbac926292639375d82d4dbeb85e4c515ef4369

Download Submit
\Program Files (x86)\ClipGrab\Qt5Quick.dll

Filesize
3.0MB

MD5
7a517d5ee706c979876b97c789be8968

SHA1
7efc77f592389f94aa6980ecd3da7d39c960765f

SHA256
beb08a06b24ae1668441d47fbd434daa40ef6c4c45963351a0a6acdcd550bc31

SHA512
2656d980b31c5f6c34fae8b9ea719c06481195af6ff8b93a6297cae74783a2eaf6b808d539add7a1490e159ee19d2889308adb48491d719097d5459a7f798287

Download Submit
\Program Files (x86)\ClipGrab\Qt5QuickWidgets.dll

Filesize
64KB

MD5
42ce360f532e7e835ee94ee1226e1c19

SHA1
6c596c32575f081c86524742fcb11aa5e44ad213

SHA256
6b12b555d3bc465e106a26603b4bead895134ecd90b3201773415eab64cc69ac

SHA512
8f2772be5a6e375f06439f58c4b26277f93b8b777c950640c4699de6e0b0a99f7f33ebc6eac4b3a87a1e1b644c573b7ae5de9289d399fa41d732867c1bf95508

Download Submit
\Program Files (x86)\ClipGrab\Qt5WebChannel.dll

Filesize
96KB

MD5
2a65f4f49a88417222bcf109b59247ef

SHA1
a165ff1b21ff45c11783b63f2f4e9f270f84f05e

SHA256
632a5d720f3f6371721f94e4665ac13988afde722d155aaa5364a27cbd46d3ac

SHA512
c260fdb3454994e15582feec31b63e8418c9b1d705ee06ac09aa4ac77782ac79f722c9c883714e462ef919834ddd569ea7fff2b7d616a2b210966013c8ad9add

Download Submit
\Program Files (x86)\ClipGrab\Qt5WebEngineCore.dll

Filesize
43.9MB

MD5
ce045d09093284bee968e7f18538f8cc

SHA1
0e1a004afea338354ee99ba0bc90e96a455ab76d

SHA256
d221ad7cead1caf6d2ee6d9b1149fcca676d9083a672a03ee3a1867cdcc202ec

SHA512
8cd69902158df6bd13f38d07f5c6c00843ebbfbda0f7b2ce0d4272d52ed0d01c8cfae72001a32b974eb828819b42f29b0de21004ce75b364bc23016d7b07e59e

Download Submit
\Program Files (x86)\ClipGrab\Qt5WebEngineWidgets.dll

Filesize
187KB

MD5
9c30ad3a2ba28362ac506f50221e881d

SHA1
02497e8d0544d91318a2b6619b7c154cebee1073

SHA256
ce773742d6d80df75e9e462bd38bf237508541b3243dad57c48b4eb24f4ff3f1

SHA512
50bb8ac0f02bebe6aaa09554bfe8dd575681810239edeeb696b8170a8f4c3457a4ff3bf2e7ad9ed1b6a6c54f81201988c8e347f1fbff4e2ea2d348a72ca9aa70

Download Submit
\Program Files (x86)\ClipGrab\Qt5Widgets.dll

Filesize
4.3MB

MD5
db7034b133d238447a6f3704b65bbceb

SHA1
c834d45162f38f461a8eafe737301eb22056e913

SHA256
53d9f928141382a5ef60039562b200e03d18e8720f16fb0ee8072b45e94202a7

SHA512
837b7e675b752c372973ecb4a53de568fc087e5f3896916614d504405a0a1ae78d1be59f173c2a0b28b4b139924736208de2eb6ee767c78894b7834fae9bf9f1

Download Submit
\Program Files (x86)\ClipGrab\Qt5Xml.dll

Filesize
149KB

MD5
fd0f95e872b99b61f0b7276e0ff76c28

SHA1
a90b20be2f436362782ac18182637f8dca1e9719

SHA256
9150d32aa158f9c555cc3b845fc8f776684f11ec014b47a96d498faad67e7a31

SHA512
25a4e5d74315f64171c16929da0fa049db9dd835cb912e2909bf442fc6383a424cdd52aec58c6eb6d335697651deff16f688ecac8c11310a1fe7383996bdcd94

Download Submit
\Program Files (x86)\ClipGrab\clipgrab.exe

Filesize
1.1MB

MD5
57cdd2bc92aee7d3d213561188e565d4

SHA1
fb34ba0178b5764b6ccc9d228796196ee172980e

SHA256
10770da581cc85d55a286d42a0428accafe6c7910bc640cc4264da7fb26dafa4

SHA512
ac00f5021cbc34b7ca160364cdde0a404353d8fc9e6a46866884268880c7b753e91741c48b413d6f7a5ff28a4e3d98bd7485550b46009a7c5b42dd0a877f3856

Download Submit
\Program Files (x86)\ClipGrab\clipgrab.exe

Filesize
1.1MB

MD5
57cdd2bc92aee7d3d213561188e565d4

SHA1
fb34ba0178b5764b6ccc9d228796196ee172980e

SHA256
10770da581cc85d55a286d42a0428accafe6c7910bc640cc4264da7fb26dafa4

SHA512
ac00f5021cbc34b7ca160364cdde0a404353d8fc9e6a46866884268880c7b753e91741c48b413d6f7a5ff28a4e3d98bd7485550b46009a7c5b42dd0a877f3856

Download Submit
\Program Files (x86)\ClipGrab\libEGL.dll

Filesize
21KB

MD5
55813372944c5acaca0e38c22902a6e6

SHA1
8c3fbdcacecc971aac8823a52eb83082669220a3

SHA256
fc219ad27720cfb1b223d748c1b5bdd78886235f4254bfe8e0adaf168c7e9849

SHA512
73f504a1f7cda4082f370387304db701672d95409886362dd70f8599fc17a5b577d2b37dd8f012cecb6d6dffe4321906c2a07cdd7e12e2d31bb9df0fb2e97a7f

Download Submit
\Program Files (x86)\ClipGrab\libGLESV2.dll

Filesize
2.7MB

MD5
02c59344a65e9893d7d2d0d79b570429

SHA1
d07d73aab1beaeeef57c03330add64afa5f20160

SHA256
adba2649650fa580fb301b69a74aa4ad0b8796a6b35179ff0a938be510db1b7d

SHA512
222ffdb94f4df18d25e5d77cb76ff95c0704dbd696796880bdc7c23c930546435ac5060233f3be9a5b2c058a721c15ffc542b9ba84aafe28dfc77498037f21df

Download Submit
\Program Files (x86)\ClipGrab\opengl32sw.dll

Filesize
15.3MB

MD5
8b197f55264a44b7b25046f7ba5bd7d2

SHA1
cef69e168160968e00ffffa136e1af7819e7c0ce

SHA256
25ae7577e066fa80519a8f1c314b15cdd22e4a8d3ecd2a36eccc79e40714a91d

SHA512
6af2b1b17a7e3460099359a6750221aacb8f9ce0e80b346dbafd2cbd8e579543b980f98e0aeb199e0781a045c9d6a7f2f11c8628f960c13550328487b7fa9154

Download Submit
\Program Files (x86)\ClipGrab\platforms\qwindows.dll

Filesize
1.2MB

MD5
b190c721612ac9d169f8b3a8f8b48a29

SHA1
206442dd161e878f1a6f83f3ebdb9208b56abfff

SHA256
ccb562f817d7015c78da4098bc576e7eaf3df1ebd55afb58d75f12dace9c761f

SHA512
951bc91302fcb1a28b7093f6867b379a90188733cec329efedb465ae27ae1a526a2d5f997816b26ed123d2401a9aa2854d26a003a65318f50e3a695d7948f6b7

Download Submit
\Program Files (x86)\ClipGrab\unins000.exe

Filesize
2.5MB

MD5
713651dc6a72f22021036563f4bfb3b9

SHA1
a09bead30eaa159688bef41f86b5843e61b65f28

SHA256
69605ea2bb1301ab9dc8b17523a013de325d02f5b35d47ab6cc0fb9a3855ca07

SHA512
c66749b235273cb6872a7938ae55c4aaa809297aaa0e4c063b542690b4485e6f20fe5ac2da92068a926ec3beace10361c6868815e9fe0ac33fcfbf3b2138dc91

Download Submit
\Users\Admin\AppData\Local\Temp\is-109JO.tmp\clipgrab-3.9.7-portable.tmp

Filesize
2.5MB

MD5
ae7b203e80eaa5afb50768049bb3de50

SHA1
cc0b5d64c2af21a3b24e167352df8ae93acd30d3

SHA256
ffe5d85efc5b75b4c99b07f5819d1fb3b9b1b42e67c903ef86f013bdedad7112

SHA512
a94cc199a4fa8a67496169de972bef84dd0e411502c5f74438ec0e7d18626ef3278d9c3aae1b0d025776849dbed5ec8e06d714b4bd48a43e48e2a167f7d52748

Download Submit
\Users\Admin\AppData\Local\Temp\is-466SS.tmp\botva2.dll

Filesize
37KB

MD5
67965a5957a61867d661f05ae1f4773e

SHA1
f14c0a4f154dc685bb7c65b2d804a02a0fb2360d

SHA256
450b9b0ba25bf068afbc2b23d252585a19e282939bf38326384ea9112dfd0105

SHA512
c6942818b9026dc5db2d62999d32cf99fe7289f79a28b8345af17acf9d13b2229a5e917a48ff1f6d59715bdbcb00c1625e0302abcfe10ca7e0475762e0a3f41b

Download Submit
\Users\Admin\AppData\Local\Temp\is-466SS.tmp\clipgrab-3.9.7-portable.exe

Filesize
70.3MB

MD5
962d6f9e7331b8f3eb2fa4acb15f5f61

SHA1
2e1a7e9ec7159e564814a599657d42dc01ef9858

SHA256
0ae8656f4c65673d75544cff54721cbfc586edd6e8b4b2a2070930684920411e

SHA512
f8721fc68703d6a6ab9188bce1d64774447f02f378dd4b4d267f7fb4b01d42c4520feede2855ab426d92dfc538a1d272d7a88e65871015a95654c3d8f321d3be

Download Submit
\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod0_extract\saBSI.exe

Filesize
1.1MB

MD5
bb7cf61c4e671ff05649bda83b85fa3d

SHA1
db3fdeaf7132448d2a31a5899832a20973677f19

SHA256
9d04462e854ef49bcd6059767248a635912ce0f593521a7cc8af938e6a027534

SHA512
63798024e1e22975d1be1e8bff828040d046d63df29f07d6161c868526d5f08451e44b5fa60bfb0c22cf7880abc03aaedafa2c5c844c3aeff640e6fac9586aab

Download Submit
\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod0_extract\saBSI.exe

Filesize
1.1MB

MD5
bb7cf61c4e671ff05649bda83b85fa3d

SHA1
db3fdeaf7132448d2a31a5899832a20973677f19

SHA256
9d04462e854ef49bcd6059767248a635912ce0f593521a7cc8af938e6a027534

SHA512
63798024e1e22975d1be1e8bff828040d046d63df29f07d6161c868526d5f08451e44b5fa60bfb0c22cf7880abc03aaedafa2c5c844c3aeff640e6fac9586aab

Download Submit
\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod0_extract\saBSI.exe

Filesize
1.1MB

MD5
bb7cf61c4e671ff05649bda83b85fa3d

SHA1
db3fdeaf7132448d2a31a5899832a20973677f19

SHA256
9d04462e854ef49bcd6059767248a635912ce0f593521a7cc8af938e6a027534

SHA512
63798024e1e22975d1be1e8bff828040d046d63df29f07d6161c868526d5f08451e44b5fa60bfb0c22cf7880abc03aaedafa2c5c844c3aeff640e6fac9586aab

Download Submit
\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod0_extract\saBSI.exe

Filesize
1.1MB

MD5
bb7cf61c4e671ff05649bda83b85fa3d

SHA1
db3fdeaf7132448d2a31a5899832a20973677f19

SHA256
9d04462e854ef49bcd6059767248a635912ce0f593521a7cc8af938e6a027534

SHA512
63798024e1e22975d1be1e8bff828040d046d63df29f07d6161c868526d5f08451e44b5fa60bfb0c22cf7880abc03aaedafa2c5c844c3aeff640e6fac9586aab

Download Submit
\Users\Admin\AppData\Local\Temp\is-466SS.tmp\prod1_extract\avg_antivirus_free_setup.exe

Filesize
229KB

MD5
26816af65f2a3f1c61fb44c682510c97

SHA1
6ca3fe45b3ccd41b25d02179b6529faedef7884a

SHA256
2025c8c2acc5537366e84809cb112589ddc9e16630a81c301d24c887e2d25f45

SHA512
2426e54f598e3a4a6d2242ab668ce593d8947f5ddb36aded7356be99134cbc2f37323e1d36db95703a629ef712fab65f1285d9f9433b1e1af0123fd1773d0384

Download Submit
\Users\Admin\AppData\Local\Temp\is-466SS.tmp\zbShieldUtils.dll

Filesize
2.0MB

MD5
e1f18a22199c6f6aa5d87b24e5b39ef1

SHA1
0dcd8f90b575f6f1d10d6789fe769fa26daafd0e

SHA256
62c56c8cf2ac6521ce047b73aa99b6d3952ca53f11d34b00e98d17674a2fc10d

SHA512
5a10a2f096adce6e7db3a40bc3ea3fd44d602966e606706ee5a780703f211de7f77656c79c296390baee1e008dc3ce327eaaf5d78bbae20108670c5bc809a190

Download Submit
\Users\Admin\AppData\Local\Temp\is-BTGIC.tmp\vc_redist.x86.exe

Filesize
14.0MB

MD5
310f8aadd8055f8b8eba1a6528be7d10

SHA1
3ee9622151e4b50837fcdfac1b085430f0181f4e

SHA256
54ad46ae80984aa48cae6361213692c96b3639e322730d28c7fb93b183c761da

SHA512
2872a30939f7ee20b494806574cf5b8b5a0976f8fe69bdbd77dde2483ce2a9e5458ff3636147e49a449e941a44ca2d79239e3da62fddb69fc5bced8ee1004ee5

Download Submit
\Users\Admin\AppData\Local\Temp\is-UR449.tmp\clipgrab-3.9.7-dotinstaller.tmp

Filesize
3.2MB

MD5
aadc16c8ad4312196df3aa1d9f6386d3

SHA1
ff4d78923e0d957e6a66b3c06efecc435c396c7a

SHA256
04fade43204ecbbb378114a023b3db4a3aebe8258ff3b3846156e80a9c5cf4a3

SHA512
51621ec71d530d75e4a537381edf03bc48b234dd861547c950573febf5709a1716ee797368854512edf1950a4e1f4f8bbe292417a0dd238600338a39e2454e04

Download Submit
\Windows\Temp\{A6B488B9-9407-4422-BA0C-85F85D7BD157}\.ba\wixstdba.dll

Filesize
191KB

MD5
eab9caf4277829abdf6223ec1efa0edd

SHA1
74862ecf349a9bedd32699f2a7a4e00b4727543d

SHA256
a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041

SHA512
45b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2

Download Submit
\Windows\Temp\{C0A7FC23-1D34-439C-BD07-2B3B0DAF7076}\.cr\vc_redist.x86.exe

Filesize
881KB

MD5
9df0848b2753e9255f1a6b4cdc9a5a3e

SHA1
051469cd9e786b720ef6b70c35a1e184a643f520

SHA256
59089badd61acb47a07748c9018d3a959cf58f07de9902b0c45dffae3e566090

SHA512
518a78e77515b2fb21c5f66a760473a1f8ab5050e9bc65a4715ab178e568079f11f65fc173db59dd021b69fe0b606c42e50bf5f09a34ba2009a7b71e88033452

Download Submit
memory/112-627-0x0000000001270000-0x0000000004ECC000-memory.dmp

Filesize
60.4MB

Download
memory/1020-240-0x0000000000400000-0x000000000073F000-memory.dmp

Filesize
3.2MB

Download
memory/1020-614-0x0000000000400000-0x000000000073F000-memory.dmp

Filesize
3.2MB

Download
memory/1020-611-0x0000000000400000-0x000000000073F000-memory.dmp

Filesize
3.2MB

Download
memory/1020-168-0x0000000003930000-0x000000000393F000-memory.dmp

Filesize
60KB

Download
memory/1020-8-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1020-19-0x0000000000400000-0x000000000073F000-memory.dmp

Filesize
3.2MB

Download
memory/1020-21-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1020-153-0x0000000003930000-0x000000000393F000-memory.dmp

Filesize
60KB

Download
memory/1020-174-0x0000000000400000-0x000000000073F000-memory.dmp

Filesize
3.2MB

Download
memory/1020-166-0x0000000000400000-0x000000000073F000-memory.dmp

Filesize
3.2MB

Download
memory/1160-242-0x0000000000400000-0x00000000004CE000-memory.dmp

Filesize
824KB

Download
memory/1160-462-0x0000000000400000-0x00000000004CE000-memory.dmp

Filesize
824KB

Download
memory/1160-188-0x0000000000400000-0x00000000004CE000-memory.dmp

Filesize
824KB

Download
memory/1720-667-0x0000000001270000-0x0000000004ECC000-memory.dmp

Filesize
60.4MB

Download
memory/2032-615-0x0000000000320000-0x000000000032A000-memory.dmp

Filesize
40KB

Download
memory/2032-616-0x0000000000320000-0x000000000032A000-memory.dmp

Filesize
40KB

Download
memory/2152-9-0x0000000000400000-0x000000000051D000-memory.dmp

Filesize
1.1MB

Download
memory/2152-1-0x0000000000400000-0x000000000051D000-memory.dmp

Filesize
1.1MB

Download
memory/2152-618-0x0000000000400000-0x000000000051D000-memory.dmp

Filesize
1.1MB

Download
memory/2420-249-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/2420-259-0x0000000000400000-0x0000000000685000-memory.dmp

Filesize
2.5MB

Download
memory/2420-243-0x0000000000400000-0x0000000000685000-memory.dmp

Filesize
2.5MB

Download
memory/2420-461-0x0000000000400000-0x0000000000685000-memory.dmp

Filesize
2.5MB

Download
memory/2420-196-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download