Resubmissions

08-11-2023 16:42

231108-t7mfnaeb43 8

08-11-2023 16:35

231108-t35rfacg2t 9

Analysis

  • max time kernel
    274s
  • max time network
    283s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-11-2023 16:35

General

  • Target

    clipgrab-3.9.7-dotinstaller.exe

  • Size

    2.8MB

  • MD5

    0f29445baa824f6729cbda3d90b15cec

  • SHA1

    572195b4193529d842653e678eeec7dc3544ee2f

  • SHA256

    f980e92af3341650819ca6c985294ebe0aa78d38bdfe249536d7ec7f2efc6ecf

  • SHA512

    a05bb0cb18d3c7e0ce5795397beeaee90078c272afccf5211d911eae4bc39078bed7da22c528e77ed4daea1c1b4e736c2f361cdb6e525e4132ba4793e433cc81

  • SSDEEP

    49152:9qe3f6PUk/4g+H98AHaCfu6rtWBu1SSmqOIzDamifOL9T9vEXv:MSiPUk/XE9vBugtL1SNaRLh9vEXv

Malware Config

Signatures

  • Renames multiple (93) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Modifies Installed Components in the registry 2 TTPs 5 IoCs
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 36 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops desktop.ini file(s) 1 IoCs
  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 6 IoCs
  • Script User-Agent 1 IoCs

    Uses user-agent string associated with script host/environment.

  • Suspicious behavior: AddClipboardFormatListener 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 27 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of SetWindowsHookEx 46 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\clipgrab-3.9.7-dotinstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\clipgrab-3.9.7-dotinstaller.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4260
    • C:\Users\Admin\AppData\Local\Temp\is-US755.tmp\clipgrab-3.9.7-dotinstaller.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-US755.tmp\clipgrab-3.9.7-dotinstaller.tmp" /SL5="$C005E,1907617,1111552,C:\Users\Admin\AppData\Local\Temp\clipgrab-3.9.7-dotinstaller.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks processor information in registry
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3148
      • C:\Users\Admin\AppData\Local\Temp\is-55CFH.tmp\clipgrab-3.9.7-portable.exe
        "C:\Users\Admin\AppData\Local\Temp\is-55CFH.tmp\clipgrab-3.9.7-portable.exe" /VERYSILENT
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:4336
        • C:\Users\Admin\AppData\Local\Temp\is-GN65O.tmp\clipgrab-3.9.7-portable.tmp
          "C:\Users\Admin\AppData\Local\Temp\is-GN65O.tmp\clipgrab-3.9.7-portable.tmp" /SL5="$14005C,72952445,791040,C:\Users\Admin\AppData\Local\Temp\is-55CFH.tmp\clipgrab-3.9.7-portable.exe" /VERYSILENT
          4⤵
          • Executes dropped EXE
          • Drops file in Program Files directory
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:4520
          • C:\Users\Admin\AppData\Local\Temp\is-AU501.tmp\vc_redist.x86.exe
            "C:\Users\Admin\AppData\Local\Temp\is-AU501.tmp\vc_redist.x86.exe" /install /passive /silent /norestart
            5⤵
            • Executes dropped EXE
            • Suspicious use of WriteProcessMemory
            PID:3040
            • C:\Windows\Temp\{CC90E180-B911-41C1-948E-9BAD027C078C}\.cr\vc_redist.x86.exe
              "C:\Windows\Temp\{CC90E180-B911-41C1-948E-9BAD027C078C}\.cr\vc_redist.x86.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\is-AU501.tmp\vc_redist.x86.exe" -burn.filehandle.attached=540 -burn.filehandle.self=648 /install /passive /silent /norestart
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:3680
      • C:\Program Files (x86)\ClipGrab\clipgrab.exe
        "C:\Program Files (x86)\ClipGrab\clipgrab.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        • Modifies system certificate store
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:4292
        • C:\Program Files (x86)\ClipGrab\ffmpeg.exe
          ffmpeg -v quiet
          4⤵
          • Executes dropped EXE
          PID:3536
        • C:\Program Files (x86)\ClipGrab\ffmpeg.exe
          ffmpeg -formats
          4⤵
          • Executes dropped EXE
          PID:4452
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of AdjustPrivilegeToken
          PID:2744
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of AdjustPrivilegeToken
          PID:4324
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" "" -J https://www.youtube.com/playlist?list=PL6B3937A5D230E335 --yes-playlist --flat-playlist
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of AdjustPrivilegeToken
          PID:5072
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of AdjustPrivilegeToken
          PID:1312
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of AdjustPrivilegeToken
          PID:4672
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of AdjustPrivilegeToken
          PID:3108
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of AdjustPrivilegeToken
          PID:4952
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of AdjustPrivilegeToken
          PID:2180
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" --version
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3488
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of AdjustPrivilegeToken
          PID:3184
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of AdjustPrivilegeToken
          PID:1504
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of AdjustPrivilegeToken
          PID:4336
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of AdjustPrivilegeToken
          PID:2500
        • C:\Program Files (x86)\ClipGrab\QtWebEngineProcess.exe
          "C:\Program Files (x86)\ClipGrab\QtWebEngineProcess.exe" --type=renderer --no-sandbox --disable-gpu-memory-buffer-video-frames --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations --disable-features=MojoVideoCapture,SurfaceSynchronization,UseModernMediaControls,UseVideoCaptureApiForDevToolsSnapshots --disable-databases --disable-gpu-compositing --service-pipe-token=2450320084235667026 --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=2450320084235667026 --renderer-client-id=2 --mojo-platform-channel-handle=2440 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:4892
        • C:\Program Files (x86)\ClipGrab\QtWebEngineProcess.exe
          "C:\Program Files (x86)\ClipGrab\QtWebEngineProcess.exe" --type=renderer --no-sandbox --disable-gpu-memory-buffer-video-frames --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations --disable-features=MojoVideoCapture,SurfaceSynchronization,UseModernMediaControls,UseVideoCaptureApiForDevToolsSnapshots --disable-databases --disable-gpu-compositing --service-pipe-token=13812915356090712808 --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=13812915356090712808 --renderer-client-id=4 --mojo-platform-channel-handle=2976 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:2176
        • C:\Program Files (x86)\ClipGrab\QtWebEngineProcess.exe
          "C:\Program Files (x86)\ClipGrab\QtWebEngineProcess.exe" --type=renderer --no-sandbox --disable-gpu-memory-buffer-video-frames --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations --disable-features=MojoVideoCapture,SurfaceSynchronization,UseModernMediaControls,UseVideoCaptureApiForDevToolsSnapshots --disable-gpu-compositing --service-pipe-token=8311026131163439776 --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=8311026131163439776 --renderer-client-id=3 --mojo-platform-channel-handle=2964 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:3888
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
          4⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:4148
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" "" --version
          4⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:1512
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" C:/Users/Admin/AppData/Roaming/ClipGrab/ClipGrab/yt-dlp --version
          4⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:5116
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" C:/Users/Admin/AppData/Roaming/ClipGrab/ClipGrab/yt-dlp --version
          4⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:4376
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" C:/Users/Admin/AppData/Roaming/ClipGrab/ClipGrab/yt-dlp -J https://www.youtube.com/playlist?list=PL6B3937A5D230E335 --yes-playlist --flat-playlist
          4⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:4780
        • C:\Program Files (x86)\ClipGrab\QtWebEngineProcess.exe
          "C:\Program Files (x86)\ClipGrab\QtWebEngineProcess.exe" --type=renderer --no-sandbox --disable-gpu-memory-buffer-video-frames --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations --disable-features=MojoVideoCapture,SurfaceSynchronization,UseModernMediaControls,UseVideoCaptureApiForDevToolsSnapshots --disable-databases --disable-gpu-compositing --service-pipe-token=4003375133813516882 --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=4003375133813516882 --renderer-client-id=5 --mojo-platform-channel-handle=3760 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:3120
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" --version
          4⤵
          • Executes dropped EXE
          PID:4076
        • C:\Program Files (x86)\ClipGrab\QtWebEngineProcess.exe
          "C:\Program Files (x86)\ClipGrab\QtWebEngineProcess.exe" --type=renderer --no-sandbox --disable-gpu-memory-buffer-video-frames --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations --disable-features=MojoVideoCapture,SurfaceSynchronization,UseModernMediaControls,UseVideoCaptureApiForDevToolsSnapshots --disable-databases --disable-gpu-compositing --service-pipe-token=13140319816474194015 --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=13140319816474194015 --renderer-client-id=6 --mojo-platform-channel-handle=3732 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:4696
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" C:/Users/Admin/AppData/Roaming/ClipGrab/ClipGrab/yt-dlp -J --no-playlist https://www.youtube.com/watch?v=WhWc3b3KhnY
          4⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:4520
        • C:\Program Files (x86)\ClipGrab\python\python.exe
          "C:\Program Files (x86)\ClipGrab\python\python.exe" C:/Users/Admin/AppData/Roaming/ClipGrab/ClipGrab/yt-dlp --newline --no-playlist --no-mtime -o C:/Users/Admin/AppData/Local/Temp/cg-youtube-dl-%(id)s-%(format_id)s.%(ext)s -f 620+140 https://www.youtube.com/watch?v=WhWc3b3KhnY
          4⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:3520
          • C:\Program Files (x86)\ClipGrab\ffmpeg.exe
            ffmpeg -bsfs
            5⤵
            • Executes dropped EXE
            PID:4928
          • C:\Program Files (x86)\ClipGrab\ffmpeg.exe
            ffmpeg -y -loglevel repeat+info -i file:C:\Users\Admin\AppData\Local\Temp\cg-youtube-dl-WhWc3b3KhnY-620+140.f620.mp4 -i file:C:\Users\Admin\AppData\Local\Temp\cg-youtube-dl-WhWc3b3KhnY-620+140.f140.m4a -c copy -map 0:v:0 -map 1:a:0 -movflags +faststart file:C:\Users\Admin\AppData\Local\Temp\cg-youtube-dl-WhWc3b3KhnY-620+140.temp.mp4
            5⤵
            • Executes dropped EXE
            PID:924
        • C:\Windows\SysWOW64\explorer.exe
          explorer.exe /select,C:\Users\Admin\Desktop\Spring - Blender Open Movie.mp4
          4⤵
            PID:4120
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Modifies registry class
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2104
      • C:\Program Files (x86)\Windows Media Player\wmplayer.exe
        "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Play "C:\Users\Admin\Desktop\Spring - Blender Open Movie"
        2⤵
          PID:556
          • C:\Program Files (x86)\Windows Media Player\setup_wm.exe
            "C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Play "C:\Users\Admin\Desktop\Spring - Blender Open Movie"
            3⤵
              PID:2160
              • C:\Windows\SysWOW64\unregmp2.exe
                C:\Windows\system32\unregmp2.exe /ShowWMP /SetShowState /CreateMediaLibrary
                4⤵
                  PID:456
                  • C:\Windows\system32\unregmp2.exe
                    "C:\Windows\SysNative\unregmp2.exe" /ShowWMP /SetShowState /CreateMediaLibrary /REENTRANT
                    5⤵
                    • Modifies Installed Components in the registry
                    • Drops desktop.ini file(s)
                    • Modifies registry class
                    PID:512
                • C:\Program Files (x86)\Windows Media Player\wmplayer.exe
                  "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Relaunch /Play "C:\Users\Admin\Desktop\Spring - Blender Open Movie"
                  4⤵
                  • Enumerates connected drives
                  • Suspicious use of AdjustPrivilegeToken
                  • Suspicious use of FindShellTrayWindow
                  PID:828
              • C:\Windows\SysWOW64\unregmp2.exe
                "C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon
                3⤵
                  PID:2100
                  • C:\Windows\system32\unregmp2.exe
                    "C:\Windows\SysNative\unregmp2.exe" /AsyncFirstLogon /REENTRANT
                    4⤵
                    • Enumerates connected drives
                    • Suspicious use of AdjustPrivilegeToken
                    PID:4452
            • C:\Windows\system32\svchost.exe
              C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s upnphost
              1⤵
              • Drops file in Windows directory
              PID:3352
            • C:\Windows\explorer.exe
              C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
              1⤵
              • Modifies Internet Explorer settings
              • Modifies registry class
              • Suspicious behavior: AddClipboardFormatListener
              • Suspicious use of SetWindowsHookEx
              PID:2052
              • C:\Program Files\VideoLAN\VLC\vlc.exe
                "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\Spring - Blender Open Movie.mp4"
                2⤵
                • Suspicious behavior: AddClipboardFormatListener
                • Suspicious behavior: GetForegroundWindowSpam
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                • Suspicious use of SetWindowsHookEx
                PID:4812
            • C:\Windows\System32\rundll32.exe
              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
              1⤵
                PID:4912
              • C:\Windows\system32\AUDIODG.EXE
                C:\Windows\system32\AUDIODG.EXE 0x440 0x4b8
                1⤵
                • Suspicious use of AdjustPrivilegeToken
                PID:212

              Network

              MITRE ATT&CK Enterprise v15

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • C:\Program Files (x86)\ClipGrab\Qt5Core.dll

                Filesize

                4.9MB

                MD5

                357cf7f517757f0689030f196dd7edc0

                SHA1

                248ae43e160e80c81718a9f26544be4e535cf20a

                SHA256

                fd3dd9dcc286e6d36cb7b3fc90c8f7f683d2e9eb449e0433af70118e726d3fe1

                SHA512

                f938d4e81c46bb2d4cea587a9040e6a9eac44942654e07f6b17b3e4d27d31d03b3b5226004a2e981e6c9eaf0c2faf42957607f278c9978f6033c901c93217b7f

              • C:\Program Files (x86)\ClipGrab\Qt5Core.dll

                Filesize

                4.9MB

                MD5

                357cf7f517757f0689030f196dd7edc0

                SHA1

                248ae43e160e80c81718a9f26544be4e535cf20a

                SHA256

                fd3dd9dcc286e6d36cb7b3fc90c8f7f683d2e9eb449e0433af70118e726d3fe1

                SHA512

                f938d4e81c46bb2d4cea587a9040e6a9eac44942654e07f6b17b3e4d27d31d03b3b5226004a2e981e6c9eaf0c2faf42957607f278c9978f6033c901c93217b7f

              • C:\Program Files (x86)\ClipGrab\Qt5Gui.dll

                Filesize

                5.1MB

                MD5

                c8bb97d7265ae7327eab7432c6496cf3

                SHA1

                c8ecab5cc7872a08ebb81edd00e95db85d56d6b5

                SHA256

                bd149755a4b0b7d721f9a355717855f488b16d8cbe177d0d88d9990359f5d4d5

                SHA512

                ec8c71336ff97e54252b3f8558a0471f8a14821ae91f90a32f1e9284eddfba6106d85eff25d5cf19d5273acaedb9ec23daf84e273ec0d6939e3c694e5da47085

              • C:\Program Files (x86)\ClipGrab\Qt5Gui.dll

                Filesize

                5.1MB

                MD5

                c8bb97d7265ae7327eab7432c6496cf3

                SHA1

                c8ecab5cc7872a08ebb81edd00e95db85d56d6b5

                SHA256

                bd149755a4b0b7d721f9a355717855f488b16d8cbe177d0d88d9990359f5d4d5

                SHA512

                ec8c71336ff97e54252b3f8558a0471f8a14821ae91f90a32f1e9284eddfba6106d85eff25d5cf19d5273acaedb9ec23daf84e273ec0d6939e3c694e5da47085

              • C:\Program Files (x86)\ClipGrab\Qt5Network.dll

                Filesize

                1.0MB

                MD5

                08b5fcf0369a4923befb05a3e7b91998

                SHA1

                4d44449f027120d59bd0c9725dcfe02102acc82e

                SHA256

                de3ef3d9ac16b03a6da9cc076bba081142ccd4a306777b6d1bbaa60980e20723

                SHA512

                629a3c3b3fd6c36a0a9ec93bbd325bd78e5044279720a32eb79041b08989f575c99992f352d710c167b79c19498fa002ae85afbb080302fb001ed0b44465eb06

              • C:\Program Files (x86)\ClipGrab\Qt5Network.dll

                Filesize

                1.0MB

                MD5

                08b5fcf0369a4923befb05a3e7b91998

                SHA1

                4d44449f027120d59bd0c9725dcfe02102acc82e

                SHA256

                de3ef3d9ac16b03a6da9cc076bba081142ccd4a306777b6d1bbaa60980e20723

                SHA512

                629a3c3b3fd6c36a0a9ec93bbd325bd78e5044279720a32eb79041b08989f575c99992f352d710c167b79c19498fa002ae85afbb080302fb001ed0b44465eb06

              • C:\Program Files (x86)\ClipGrab\Qt5Positioning.dll

                Filesize

                259KB

                MD5

                92aa5c44793603758874f87ecc5c88ce

                SHA1

                f368193467f61e0edb4864422085e70770c88d76

                SHA256

                798cc99af70288093bfd09a5addfd55a80f9652e7dc79f0b51f7760c47de2c9e

                SHA512

                459b97983c236ad76438615dad7174aa64561c9a0d9fcda7f290411237d97411f503d2dbb2d90f0c61fc229a872971a96ab61bf7b9bfb8b1ea840f4621d10910

              • C:\Program Files (x86)\ClipGrab\Qt5Positioning.dll

                Filesize

                259KB

                MD5

                92aa5c44793603758874f87ecc5c88ce

                SHA1

                f368193467f61e0edb4864422085e70770c88d76

                SHA256

                798cc99af70288093bfd09a5addfd55a80f9652e7dc79f0b51f7760c47de2c9e

                SHA512

                459b97983c236ad76438615dad7174aa64561c9a0d9fcda7f290411237d97411f503d2dbb2d90f0c61fc229a872971a96ab61bf7b9bfb8b1ea840f4621d10910

              • C:\Program Files (x86)\ClipGrab\Qt5PrintSupport.dll

                Filesize

                267KB

                MD5

                c9d5c7d715bbf74c31aab14893698778

                SHA1

                ee62edb71acb9eda4cb5f213a0b94940b972d7b3

                SHA256

                12717098b4d3f5f09ec19d091d1beb26d6df35e586bee511b9138be42d644e4a

                SHA512

                ee67880a737d1ec7c14cf84f20994bd34d8c8e39fc1763b634c311bc200ab6153f2f6760b217517a6190ccdf8076f4f9055062a011b3115c653c0ae4c5837330

              • C:\Program Files (x86)\ClipGrab\Qt5PrintSupport.dll

                Filesize

                267KB

                MD5

                c9d5c7d715bbf74c31aab14893698778

                SHA1

                ee62edb71acb9eda4cb5f213a0b94940b972d7b3

                SHA256

                12717098b4d3f5f09ec19d091d1beb26d6df35e586bee511b9138be42d644e4a

                SHA512

                ee67880a737d1ec7c14cf84f20994bd34d8c8e39fc1763b634c311bc200ab6153f2f6760b217517a6190ccdf8076f4f9055062a011b3115c653c0ae4c5837330

              • C:\Program Files (x86)\ClipGrab\Qt5Qml.dll

                Filesize

                3.2MB

                MD5

                b92764b31b080972ad0682a0ba794db1

                SHA1

                a4b3b253da4078a0b9d536873a6e79a4ba070ad2

                SHA256

                4706a5ef8f1092da9d60af8722546ce8f23c98db7450c3f72521d4651aeb2a52

                SHA512

                077c7c285c038cec271fe21a2b77eaadf3ec7d6a288d24234d6e351bead294b7bb903ea2759cb852d8e3d0354fbac926292639375d82d4dbeb85e4c515ef4369

              • C:\Program Files (x86)\ClipGrab\Qt5Qml.dll

                Filesize

                3.2MB

                MD5

                b92764b31b080972ad0682a0ba794db1

                SHA1

                a4b3b253da4078a0b9d536873a6e79a4ba070ad2

                SHA256

                4706a5ef8f1092da9d60af8722546ce8f23c98db7450c3f72521d4651aeb2a52

                SHA512

                077c7c285c038cec271fe21a2b77eaadf3ec7d6a288d24234d6e351bead294b7bb903ea2759cb852d8e3d0354fbac926292639375d82d4dbeb85e4c515ef4369

              • C:\Program Files (x86)\ClipGrab\Qt5Quick.dll

                Filesize

                3.0MB

                MD5

                7a517d5ee706c979876b97c789be8968

                SHA1

                7efc77f592389f94aa6980ecd3da7d39c960765f

                SHA256

                beb08a06b24ae1668441d47fbd434daa40ef6c4c45963351a0a6acdcd550bc31

                SHA512

                2656d980b31c5f6c34fae8b9ea719c06481195af6ff8b93a6297cae74783a2eaf6b808d539add7a1490e159ee19d2889308adb48491d719097d5459a7f798287

              • C:\Program Files (x86)\ClipGrab\Qt5Quick.dll

                Filesize

                3.0MB

                MD5

                7a517d5ee706c979876b97c789be8968

                SHA1

                7efc77f592389f94aa6980ecd3da7d39c960765f

                SHA256

                beb08a06b24ae1668441d47fbd434daa40ef6c4c45963351a0a6acdcd550bc31

                SHA512

                2656d980b31c5f6c34fae8b9ea719c06481195af6ff8b93a6297cae74783a2eaf6b808d539add7a1490e159ee19d2889308adb48491d719097d5459a7f798287

              • C:\Program Files (x86)\ClipGrab\Qt5QuickWidgets.dll

                Filesize

                64KB

                MD5

                42ce360f532e7e835ee94ee1226e1c19

                SHA1

                6c596c32575f081c86524742fcb11aa5e44ad213

                SHA256

                6b12b555d3bc465e106a26603b4bead895134ecd90b3201773415eab64cc69ac

                SHA512

                8f2772be5a6e375f06439f58c4b26277f93b8b777c950640c4699de6e0b0a99f7f33ebc6eac4b3a87a1e1b644c573b7ae5de9289d399fa41d732867c1bf95508

              • C:\Program Files (x86)\ClipGrab\Qt5QuickWidgets.dll

                Filesize

                64KB

                MD5

                42ce360f532e7e835ee94ee1226e1c19

                SHA1

                6c596c32575f081c86524742fcb11aa5e44ad213

                SHA256

                6b12b555d3bc465e106a26603b4bead895134ecd90b3201773415eab64cc69ac

                SHA512

                8f2772be5a6e375f06439f58c4b26277f93b8b777c950640c4699de6e0b0a99f7f33ebc6eac4b3a87a1e1b644c573b7ae5de9289d399fa41d732867c1bf95508

              • C:\Program Files (x86)\ClipGrab\Qt5WebChannel.dll

                Filesize

                96KB

                MD5

                2a65f4f49a88417222bcf109b59247ef

                SHA1

                a165ff1b21ff45c11783b63f2f4e9f270f84f05e

                SHA256

                632a5d720f3f6371721f94e4665ac13988afde722d155aaa5364a27cbd46d3ac

                SHA512

                c260fdb3454994e15582feec31b63e8418c9b1d705ee06ac09aa4ac77782ac79f722c9c883714e462ef919834ddd569ea7fff2b7d616a2b210966013c8ad9add

              • C:\Program Files (x86)\ClipGrab\Qt5WebChannel.dll

                Filesize

                96KB

                MD5

                2a65f4f49a88417222bcf109b59247ef

                SHA1

                a165ff1b21ff45c11783b63f2f4e9f270f84f05e

                SHA256

                632a5d720f3f6371721f94e4665ac13988afde722d155aaa5364a27cbd46d3ac

                SHA512

                c260fdb3454994e15582feec31b63e8418c9b1d705ee06ac09aa4ac77782ac79f722c9c883714e462ef919834ddd569ea7fff2b7d616a2b210966013c8ad9add

              • C:\Program Files (x86)\ClipGrab\Qt5WebEngineCore.dll

                Filesize

                56.7MB

                MD5

                cfa7e9d45cff6a9db2735ad94a1fac03

                SHA1

                f2b5ca141315a2bc064ea61df186f85b0d141eb5

                SHA256

                4ae899629fc79404bd166219bdde96a5cd169b7470375fb0f9c845c652402a65

                SHA512

                ed11a789437d3aca2036fbe364649f0b079f79d72fa6810063a0f12bf8a5b6e99dbe9af4d73202af2790e2569261f434a92a089984f15a820bea63ce6095b561

              • C:\Program Files (x86)\ClipGrab\Qt5WebEngineCore.dll

                Filesize

                56.7MB

                MD5

                cfa7e9d45cff6a9db2735ad94a1fac03

                SHA1

                f2b5ca141315a2bc064ea61df186f85b0d141eb5

                SHA256

                4ae899629fc79404bd166219bdde96a5cd169b7470375fb0f9c845c652402a65

                SHA512

                ed11a789437d3aca2036fbe364649f0b079f79d72fa6810063a0f12bf8a5b6e99dbe9af4d73202af2790e2569261f434a92a089984f15a820bea63ce6095b561

              • C:\Program Files (x86)\ClipGrab\Qt5WebEngineCore.dll

                Filesize

                56.7MB

                MD5

                cfa7e9d45cff6a9db2735ad94a1fac03

                SHA1

                f2b5ca141315a2bc064ea61df186f85b0d141eb5

                SHA256

                4ae899629fc79404bd166219bdde96a5cd169b7470375fb0f9c845c652402a65

                SHA512

                ed11a789437d3aca2036fbe364649f0b079f79d72fa6810063a0f12bf8a5b6e99dbe9af4d73202af2790e2569261f434a92a089984f15a820bea63ce6095b561

              • C:\Program Files (x86)\ClipGrab\Qt5WebEngineWidgets.dll

                Filesize

                187KB

                MD5

                9c30ad3a2ba28362ac506f50221e881d

                SHA1

                02497e8d0544d91318a2b6619b7c154cebee1073

                SHA256

                ce773742d6d80df75e9e462bd38bf237508541b3243dad57c48b4eb24f4ff3f1

                SHA512

                50bb8ac0f02bebe6aaa09554bfe8dd575681810239edeeb696b8170a8f4c3457a4ff3bf2e7ad9ed1b6a6c54f81201988c8e347f1fbff4e2ea2d348a72ca9aa70

              • C:\Program Files (x86)\ClipGrab\Qt5WebEngineWidgets.dll

                Filesize

                187KB

                MD5

                9c30ad3a2ba28362ac506f50221e881d

                SHA1

                02497e8d0544d91318a2b6619b7c154cebee1073

                SHA256

                ce773742d6d80df75e9e462bd38bf237508541b3243dad57c48b4eb24f4ff3f1

                SHA512

                50bb8ac0f02bebe6aaa09554bfe8dd575681810239edeeb696b8170a8f4c3457a4ff3bf2e7ad9ed1b6a6c54f81201988c8e347f1fbff4e2ea2d348a72ca9aa70

              • C:\Program Files (x86)\ClipGrab\Qt5Widgets.dll

                Filesize

                4.3MB

                MD5

                db7034b133d238447a6f3704b65bbceb

                SHA1

                c834d45162f38f461a8eafe737301eb22056e913

                SHA256

                53d9f928141382a5ef60039562b200e03d18e8720f16fb0ee8072b45e94202a7

                SHA512

                837b7e675b752c372973ecb4a53de568fc087e5f3896916614d504405a0a1ae78d1be59f173c2a0b28b4b139924736208de2eb6ee767c78894b7834fae9bf9f1

              • C:\Program Files (x86)\ClipGrab\Qt5Widgets.dll

                Filesize

                4.3MB

                MD5

                db7034b133d238447a6f3704b65bbceb

                SHA1

                c834d45162f38f461a8eafe737301eb22056e913

                SHA256

                53d9f928141382a5ef60039562b200e03d18e8720f16fb0ee8072b45e94202a7

                SHA512

                837b7e675b752c372973ecb4a53de568fc087e5f3896916614d504405a0a1ae78d1be59f173c2a0b28b4b139924736208de2eb6ee767c78894b7834fae9bf9f1

              • C:\Program Files (x86)\ClipGrab\Qt5Xml.dll

                Filesize

                149KB

                MD5

                fd0f95e872b99b61f0b7276e0ff76c28

                SHA1

                a90b20be2f436362782ac18182637f8dca1e9719

                SHA256

                9150d32aa158f9c555cc3b845fc8f776684f11ec014b47a96d498faad67e7a31

                SHA512

                25a4e5d74315f64171c16929da0fa049db9dd835cb912e2909bf442fc6383a424cdd52aec58c6eb6d335697651deff16f688ecac8c11310a1fe7383996bdcd94

              • C:\Program Files (x86)\ClipGrab\Qt5Xml.dll

                Filesize

                149KB

                MD5

                fd0f95e872b99b61f0b7276e0ff76c28

                SHA1

                a90b20be2f436362782ac18182637f8dca1e9719

                SHA256

                9150d32aa158f9c555cc3b845fc8f776684f11ec014b47a96d498faad67e7a31

                SHA512

                25a4e5d74315f64171c16929da0fa049db9dd835cb912e2909bf442fc6383a424cdd52aec58c6eb6d335697651deff16f688ecac8c11310a1fe7383996bdcd94

              • C:\Program Files (x86)\ClipGrab\clipgrab.exe

                Filesize

                1.1MB

                MD5

                57cdd2bc92aee7d3d213561188e565d4

                SHA1

                fb34ba0178b5764b6ccc9d228796196ee172980e

                SHA256

                10770da581cc85d55a286d42a0428accafe6c7910bc640cc4264da7fb26dafa4

                SHA512

                ac00f5021cbc34b7ca160364cdde0a404353d8fc9e6a46866884268880c7b753e91741c48b413d6f7a5ff28a4e3d98bd7485550b46009a7c5b42dd0a877f3856

              • C:\Program Files (x86)\ClipGrab\clipgrab.exe

                Filesize

                1.1MB

                MD5

                57cdd2bc92aee7d3d213561188e565d4

                SHA1

                fb34ba0178b5764b6ccc9d228796196ee172980e

                SHA256

                10770da581cc85d55a286d42a0428accafe6c7910bc640cc4264da7fb26dafa4

                SHA512

                ac00f5021cbc34b7ca160364cdde0a404353d8fc9e6a46866884268880c7b753e91741c48b413d6f7a5ff28a4e3d98bd7485550b46009a7c5b42dd0a877f3856

              • C:\Program Files (x86)\ClipGrab\clipgrab.exe

                Filesize

                1.1MB

                MD5

                57cdd2bc92aee7d3d213561188e565d4

                SHA1

                fb34ba0178b5764b6ccc9d228796196ee172980e

                SHA256

                10770da581cc85d55a286d42a0428accafe6c7910bc640cc4264da7fb26dafa4

                SHA512

                ac00f5021cbc34b7ca160364cdde0a404353d8fc9e6a46866884268880c7b753e91741c48b413d6f7a5ff28a4e3d98bd7485550b46009a7c5b42dd0a877f3856

              • C:\Program Files (x86)\ClipGrab\ffmpeg.exe

                Filesize

                49.8MB

                MD5

                bf955dfb106a42076aed62fc99ae73d9

                SHA1

                026353b9f9a1d4fd365bdf0890a16c1d6f2a64c6

                SHA256

                e79d9b4bd7b0420b974eb58eb15d6f072ee939f98acc93314a4cc750c6b7099d

                SHA512

                c86c8027087fecc0317bfdd6db9bccdf6bd42fc1eac77da400cfefe7f9aed9bf06ed5817f2dad02e423e4f33b6bd522598a3eb52e56c2a31bf58d811e26b952f

              • C:\Program Files (x86)\ClipGrab\ffmpeg.exe

                Filesize

                49.8MB

                MD5

                bf955dfb106a42076aed62fc99ae73d9

                SHA1

                026353b9f9a1d4fd365bdf0890a16c1d6f2a64c6

                SHA256

                e79d9b4bd7b0420b974eb58eb15d6f072ee939f98acc93314a4cc750c6b7099d

                SHA512

                c86c8027087fecc0317bfdd6db9bccdf6bd42fc1eac77da400cfefe7f9aed9bf06ed5817f2dad02e423e4f33b6bd522598a3eb52e56c2a31bf58d811e26b952f

              • C:\Program Files (x86)\ClipGrab\ffmpeg.exe

                Filesize

                49.8MB

                MD5

                bf955dfb106a42076aed62fc99ae73d9

                SHA1

                026353b9f9a1d4fd365bdf0890a16c1d6f2a64c6

                SHA256

                e79d9b4bd7b0420b974eb58eb15d6f072ee939f98acc93314a4cc750c6b7099d

                SHA512

                c86c8027087fecc0317bfdd6db9bccdf6bd42fc1eac77da400cfefe7f9aed9bf06ed5817f2dad02e423e4f33b6bd522598a3eb52e56c2a31bf58d811e26b952f

              • C:\Program Files (x86)\ClipGrab\iconengines\qsvgicon.dll

                Filesize

                33KB

                MD5

                0a8e8b38e75ce6b65e31e93175717030

                SHA1

                2ebb52d5373feb5a137188d98645b87b03cd89dd

                SHA256

                06b1d5a15af5bdb413b9335a508084383a6db6a52b80773a5ca762d4d060ff2e

                SHA512

                ddc6e40a1c1c76a385bad06e9a653da6e8c2515292b2e0c6fb8e7fe005ccdbd2cd6c83c3f7960feb72862d89b10e20762ad6c142451e73afa5651f4eb725b8ad

              • C:\Program Files (x86)\ClipGrab\imageformats\qgif.dll

                Filesize

                30KB

                MD5

                bc3a9bedb27c0985e5b406715546b289

                SHA1

                b20ba051b0bc966649493f6bda675002000d0632

                SHA256

                16190622ddbb8c604233cc8f6ac97768fadc645aca3d6ec81f61149804cfe031

                SHA512

                64878b67f478fb2f205d781a9287723239d09303ef7fa0a1ecdd3f7dfa6017f06dfa3e924b7ff8078f8081d50e9dfe181e2e8e2f8741d703b5c099e5bdd9404a

              • C:\Program Files (x86)\ClipGrab\imageformats\qico.dll

                Filesize

                30KB

                MD5

                9dba627908eac32a713b1c6e897be3ec

                SHA1

                0eadaed43503e05aadee9695adf7e1c64b0379e7

                SHA256

                13a3cc5e68d4f5e5449c10e88476660d4d49a5e00eee8b942011a5ac49592eb6

                SHA512

                9041a82e0378a7ec9e289d46a49109d97e1e0fdb3d53a4ef650488dfcff9cbc7973eeb09f692c3d47347e2d79df48f47aad58d00b2fe31584216cb10648de552

              • C:\Program Files (x86)\ClipGrab\imageformats\qjpeg.dll

                Filesize

                361KB

                MD5

                cc91e7b735389b1e2d312606056065aa

                SHA1

                f82c4881f37b28e8da5c4732f0f02c87e178931d

                SHA256

                0247fc16049a322f34407ab5eef4870e24a033e8042d6271b4e8a6c7c6fe8bdf

                SHA512

                00ba39fdf121dc9f84fb24fd455c9459b9126b6efd2db2ee31866422f57eba3cb341ca8d5d172d3b32206794de2b498ef115f965ad5c55a669717439ba43ad4c

              • C:\Program Files (x86)\ClipGrab\imageformats\qsvg.dll

                Filesize

                26KB

                MD5

                c5891397f0c8daae3dc5f4f701980802

                SHA1

                8e2a1f1891036d59aaf068ff9cdd3ee1ba8638e2

                SHA256

                7b066fb4d52ae0f4dd05569a1049329fd17dd461675543443c924ca1be26aad7

                SHA512

                6827de90f1351505c301b414de464b291d2b1eeccb5694191de6a9d2233dfff6ade6165c4b8c43a523f3ea0b30ba67366d9e4419c6e359af42030c91f83e2635

              • C:\Program Files (x86)\ClipGrab\imageformats\qwbmp.dll

                Filesize

                24KB

                MD5

                da5c04a80b552b274a8e01729c65aff2

                SHA1

                c9f0ca9c3b0fd5cd3a420a8122f99bc74b802caf

                SHA256

                265626b75d68ecefe32d8edb228afce5a0ece33a7bf3b63497cea29b17e27eac

                SHA512

                e0e69a6406ccd2b3e382d01f9544a5124b305b5776c68df75983b330ca0615b424fe668b1c32a796990afab299c4caa6611dc134b825ee89088c8dd041313e90

              • C:\Program Files (x86)\ClipGrab\imageformats\qwebp.dll

                Filesize

                410KB

                MD5

                a3b4161c22f15fbc0d1d04b933a31537

                SHA1

                f11c6ef92c5355de26a0f1bb92b84118146f0fd0

                SHA256

                c71f62c2184960343299768f6c6e080a68e864e1db70c9816844afa53b4ca778

                SHA512

                47a9cec46ee86e2d9be5e7af4a56e78837af50300fef316cdf091ba1e3a93979d99ad481ce351bdd078b23113b9f6f242c70f9f1fa5dbc0c80e1a576a85bb061

              • C:\Program Files (x86)\ClipGrab\libEGL.DLL

                Filesize

                21KB

                MD5

                55813372944c5acaca0e38c22902a6e6

                SHA1

                8c3fbdcacecc971aac8823a52eb83082669220a3

                SHA256

                fc219ad27720cfb1b223d748c1b5bdd78886235f4254bfe8e0adaf168c7e9849

                SHA512

                73f504a1f7cda4082f370387304db701672d95409886362dd70f8599fc17a5b577d2b37dd8f012cecb6d6dffe4321906c2a07cdd7e12e2d31bb9df0fb2e97a7f

              • C:\Program Files (x86)\ClipGrab\libEGL.dll

                Filesize

                21KB

                MD5

                55813372944c5acaca0e38c22902a6e6

                SHA1

                8c3fbdcacecc971aac8823a52eb83082669220a3

                SHA256

                fc219ad27720cfb1b223d748c1b5bdd78886235f4254bfe8e0adaf168c7e9849

                SHA512

                73f504a1f7cda4082f370387304db701672d95409886362dd70f8599fc17a5b577d2b37dd8f012cecb6d6dffe4321906c2a07cdd7e12e2d31bb9df0fb2e97a7f

              • C:\Program Files (x86)\ClipGrab\libGLESV2.dll

                Filesize

                2.7MB

                MD5

                02c59344a65e9893d7d2d0d79b570429

                SHA1

                d07d73aab1beaeeef57c03330add64afa5f20160

                SHA256

                adba2649650fa580fb301b69a74aa4ad0b8796a6b35179ff0a938be510db1b7d

                SHA512

                222ffdb94f4df18d25e5d77cb76ff95c0704dbd696796880bdc7c23c930546435ac5060233f3be9a5b2c058a721c15ffc542b9ba84aafe28dfc77498037f21df

              • C:\Program Files (x86)\ClipGrab\libGLESv2.dll

                Filesize

                2.7MB

                MD5

                02c59344a65e9893d7d2d0d79b570429

                SHA1

                d07d73aab1beaeeef57c03330add64afa5f20160

                SHA256

                adba2649650fa580fb301b69a74aa4ad0b8796a6b35179ff0a938be510db1b7d

                SHA512

                222ffdb94f4df18d25e5d77cb76ff95c0704dbd696796880bdc7c23c930546435ac5060233f3be9a5b2c058a721c15ffc542b9ba84aafe28dfc77498037f21df

              • C:\Program Files (x86)\ClipGrab\libcrypto-1_1.dll

                Filesize

                2.4MB

                MD5

                c58b2589b88c5da34df20f737b7ac50c

                SHA1

                05ed6edafd5342b546fb5d5a6162695f11f5d4da

                SHA256

                49b26d14cf68a370de47f8f3724e46e61bff98aba7dd7b8a7c1f87e83bb44064

                SHA512

                4e2db4133fdb69dcc7a03201810b10cf9519dd7cdea8ff3fc496779d84556502cdb562d67f60a0503493705b622d1cb772fc9acb4935aa4fb6a6cbdf7b4b211f

              • C:\Program Files (x86)\ClipGrab\libcrypto-1_1.dll

                Filesize

                2.4MB

                MD5

                c58b2589b88c5da34df20f737b7ac50c

                SHA1

                05ed6edafd5342b546fb5d5a6162695f11f5d4da

                SHA256

                49b26d14cf68a370de47f8f3724e46e61bff98aba7dd7b8a7c1f87e83bb44064

                SHA512

                4e2db4133fdb69dcc7a03201810b10cf9519dd7cdea8ff3fc496779d84556502cdb562d67f60a0503493705b622d1cb772fc9acb4935aa4fb6a6cbdf7b4b211f

              • C:\Program Files (x86)\ClipGrab\libssl-1_1.dll

                Filesize

                518KB

                MD5

                6464921a380a4aca2966912286a07161

                SHA1

                bb5b62f6be640aa217c4193e283a1e58d0d0d815

                SHA256

                194473a59a69e72655015dc582f1e1db7476b598c07cd94839d500e0c7135265

                SHA512

                b73f4d8897efac5f7d2bc65f32d3d46e54b691c60828fa10605a46c872e3920fd78f17727ff5721fec89d53e6214f07e8002972fe65e502cb0522efc63599fd2

              • C:\Program Files (x86)\ClipGrab\libssl-1_1.dll

                Filesize

                518KB

                MD5

                6464921a380a4aca2966912286a07161

                SHA1

                bb5b62f6be640aa217c4193e283a1e58d0d0d815

                SHA256

                194473a59a69e72655015dc582f1e1db7476b598c07cd94839d500e0c7135265

                SHA512

                b73f4d8897efac5f7d2bc65f32d3d46e54b691c60828fa10605a46c872e3920fd78f17727ff5721fec89d53e6214f07e8002972fe65e502cb0522efc63599fd2

              • C:\Program Files (x86)\ClipGrab\platforms\qwindows.dll

                Filesize

                1.2MB

                MD5

                b190c721612ac9d169f8b3a8f8b48a29

                SHA1

                206442dd161e878f1a6f83f3ebdb9208b56abfff

                SHA256

                ccb562f817d7015c78da4098bc576e7eaf3df1ebd55afb58d75f12dace9c761f

                SHA512

                951bc91302fcb1a28b7093f6867b379a90188733cec329efedb465ae27ae1a526a2d5f997816b26ed123d2401a9aa2854d26a003a65318f50e3a695d7948f6b7

              • C:\Program Files (x86)\ClipGrab\platforms\qwindows.dll

                Filesize

                1.2MB

                MD5

                b190c721612ac9d169f8b3a8f8b48a29

                SHA1

                206442dd161e878f1a6f83f3ebdb9208b56abfff

                SHA256

                ccb562f817d7015c78da4098bc576e7eaf3df1ebd55afb58d75f12dace9c761f

                SHA512

                951bc91302fcb1a28b7093f6867b379a90188733cec329efedb465ae27ae1a526a2d5f997816b26ed123d2401a9aa2854d26a003a65318f50e3a695d7948f6b7

              • C:\Program Files (x86)\ClipGrab\python\python.exe

                Filesize

                95KB

                MD5

                083f4389a5cb405d0ab6a85952ea14f9

                SHA1

                ac1aad1677c95b9de407f517cbc9432943c7f432

                SHA256

                ca9f2a394ea9a7e0ee58cc39c7f2dceb4d539223dfbada1124a215921b0d767d

                SHA512

                7e7a71b7ca969008d2718a43862504e747644617bd27f64fb21228c6a0d8aa5f75bebab7827b0d2fe88d3d04ea22eaf0799d6635f1b1609b946440cd4dcd040d

              • C:\Program Files (x86)\ClipGrab\styles\qwindowsvistastyle.dll

                Filesize

                125KB

                MD5

                c1cc204987a532be5e7f22b2bec82815

                SHA1

                03ea72517453ab137c3b85194cbf8bf08c05d032

                SHA256

                f08b95bac860f6292342e5e2e3e506a603cd8d7f4a0e4a1b5d8fafa7c30cd65d

                SHA512

                684d653a777361d732b7383a7b699809e8c1e74bb04eff2b74a92ec860c305290014f5627eb56597ea1f3d1d5ed0e4167c0c62778e176d2d8615fe07404290af

              • C:\Program Files (x86)\ClipGrab\styles\qwindowsvistastyle.dll

                Filesize

                125KB

                MD5

                c1cc204987a532be5e7f22b2bec82815

                SHA1

                03ea72517453ab137c3b85194cbf8bf08c05d032

                SHA256

                f08b95bac860f6292342e5e2e3e506a603cd8d7f4a0e4a1b5d8fafa7c30cd65d

                SHA512

                684d653a777361d732b7383a7b699809e8c1e74bb04eff2b74a92ec860c305290014f5627eb56597ea1f3d1d5ed0e4167c0c62778e176d2d8615fe07404290af

              • C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

                Filesize

                64KB

                MD5

                fc240c081ec382df4b74d591d7d37a45

                SHA1

                396e9d8accb2ff8b32e6c3957808cb87d23ad47c

                SHA256

                8cfeb277627a0fc9f2596c83dc37f9a3d8871293cd88dadd08f32098bf936038

                SHA512

                d8f83773c330b88b43f9ebc6220aa98368854e44a75b73a8575e7171f6c32e784d404e5a2e2e7787d3c71c0cfecdbb983631b639d9fee879b374d498d2ef0ab7

              • C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML

                Filesize

                9KB

                MD5

                7050d5ae8acfbe560fa11073fef8185d

                SHA1

                5bc38e77ff06785fe0aec5a345c4ccd15752560e

                SHA256

                cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b

                SHA512

                a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b

              • C:\Users\Admin\AppData\Local\Temp\cg-youtube-dl-WhWc3b3KhnY-620+140.f620.mp4

                Filesize

                140.6MB

                MD5

                d929b8237afaecab54e85cb716595687

                SHA1

                8d5c5f8aab07ff952f276fedff34b74c23af713d

                SHA256

                3b1d9a7eebfa5502ac8fc203a4b5cf894826ecd09f5cb8d54947bd7a4f9a04f3

                SHA512

                80c253c85347ade9237f86fe3ff61f67f189cfca551a313fcd0342f49908e79c003df397276db54038ec499e08051c97e8ce1e7dd35118eedce337c9f453239b

              • C:\Users\Admin\AppData\Local\Temp\is-55CFH.tmp\RAV_Cross.png

                Filesize

                74KB

                MD5

                cd09f361286d1ad2622ba8a57b7613bd

                SHA1

                4cd3e5d4063b3517a950b9d030841f51f3c5f1b1

                SHA256

                b92a31d4853d1b2c4e5b9d9624f40b439856d0c6a517e100978cbde8d3c47dc8

                SHA512

                f73d60c92644e0478107e0402d1c7b4dfa1674f69b41856f74f937a7b57ceaa2b3be9242f2b59f1fcf71063aac6cbe16c594618d1a8cdd181510de3240f31dff

              • C:\Users\Admin\AppData\Local\Temp\is-55CFH.tmp\WebAdvisor.png

                Filesize

                33KB

                MD5

                db6c259cd7b58f2f7a3cca0c38834d0e

                SHA1

                046fd119fe163298324ddcd47df62fa8abcae169

                SHA256

                494169cdd9c79eb4668378f770bfa55d4b140f23a682ff424441427dfab0ced2

                SHA512

                a5e8bb6dc4cae51d4ebbe5454d1b11bc511c69031db64eff089fb2f8f68665f4004f0f215b503f7630a56c995bbe9cf72e8744177e92447901773cc7e2d9fdbb

              • C:\Users\Admin\AppData\Local\Temp\is-55CFH.tmp\botva2.dll

                Filesize

                37KB

                MD5

                67965a5957a61867d661f05ae1f4773e

                SHA1

                f14c0a4f154dc685bb7c65b2d804a02a0fb2360d

                SHA256

                450b9b0ba25bf068afbc2b23d252585a19e282939bf38326384ea9112dfd0105

                SHA512

                c6942818b9026dc5db2d62999d32cf99fe7289f79a28b8345af17acf9d13b2229a5e917a48ff1f6d59715bdbcb00c1625e0302abcfe10ca7e0475762e0a3f41b

              • C:\Users\Admin\AppData\Local\Temp\is-55CFH.tmp\botva2.dll

                Filesize

                37KB

                MD5

                67965a5957a61867d661f05ae1f4773e

                SHA1

                f14c0a4f154dc685bb7c65b2d804a02a0fb2360d

                SHA256

                450b9b0ba25bf068afbc2b23d252585a19e282939bf38326384ea9112dfd0105

                SHA512

                c6942818b9026dc5db2d62999d32cf99fe7289f79a28b8345af17acf9d13b2229a5e917a48ff1f6d59715bdbcb00c1625e0302abcfe10ca7e0475762e0a3f41b

              • C:\Users\Admin\AppData\Local\Temp\is-55CFH.tmp\clipgrab-3.9.7-portable.exe

                Filesize

                70.3MB

                MD5

                962d6f9e7331b8f3eb2fa4acb15f5f61

                SHA1

                2e1a7e9ec7159e564814a599657d42dc01ef9858

                SHA256

                0ae8656f4c65673d75544cff54721cbfc586edd6e8b4b2a2070930684920411e

                SHA512

                f8721fc68703d6a6ab9188bce1d64774447f02f378dd4b4d267f7fb4b01d42c4520feede2855ab426d92dfc538a1d272d7a88e65871015a95654c3d8f321d3be

              • C:\Users\Admin\AppData\Local\Temp\is-55CFH.tmp\clipgrab-3.9.7-portable.exe

                Filesize

                70.3MB

                MD5

                962d6f9e7331b8f3eb2fa4acb15f5f61

                SHA1

                2e1a7e9ec7159e564814a599657d42dc01ef9858

                SHA256

                0ae8656f4c65673d75544cff54721cbfc586edd6e8b4b2a2070930684920411e

                SHA512

                f8721fc68703d6a6ab9188bce1d64774447f02f378dd4b4d267f7fb4b01d42c4520feede2855ab426d92dfc538a1d272d7a88e65871015a95654c3d8f321d3be

              • C:\Users\Admin\AppData\Local\Temp\is-55CFH.tmp\finish.png

                Filesize

                2KB

                MD5

                7afaf9e0e99fd80fa1023a77524f5587

                SHA1

                e20c9c27691810b388c73d2ca3e67e109c2b69b6

                SHA256

                760b70612bb9bd967c2d15a5133a50ccce8c0bd46a6464d76875298dcc45dea0

                SHA512

                a090626e7b7f67fb5aa207aae0cf65c3a27e1b85e22c9728eee7475bd9bb7375ca93baaecc662473f9a427b4f505d55f2c61ba36bda460e4e6947fe22eedb044

              • C:\Users\Admin\AppData\Local\Temp\is-55CFH.tmp\loader.gif

                Filesize

                10KB

                MD5

                f23a523b82ad9103a9ac1dcc33eca72f

                SHA1

                5363bb6b51923441ef56638576307cc252f05a71

                SHA256

                59853c413b0813ded6f1e557959768d6662f010f49884d36b62c13038fac739c

                SHA512

                514ec63f7ed80d0708f7e2355fad8a558b4dcf2d0122ff98fe7c3ca1f40e7cd04e8869ca7a3b95622c0848c0d99306d7e791b86ca69b9e240beae959ca6285be

              • C:\Users\Admin\AppData\Local\Temp\is-55CFH.tmp\logo.png

                Filesize

                9KB

                MD5

                2c050a55ade91ca10c94c41fdceaa8cb

                SHA1

                178fd0ee1c184fe681d89bff0ff8b89392723a67

                SHA256

                43262c9cc6328d67007b97a8eb36c924d05d45a383349e61b067f35677e1ad6e

                SHA512

                425825cbe2a417f10832c37fc0e571ca3e3f9b940f93f9f8ec8fcff2df896a52ff753386c30e03836d588b6bf355323dbea2e3a0cbf756f8f3c7065335cbfeac

              • C:\Users\Admin\AppData\Local\Temp\is-55CFH.tmp\zbShieldUtils.dll

                Filesize

                2.0MB

                MD5

                e1f18a22199c6f6aa5d87b24e5b39ef1

                SHA1

                0dcd8f90b575f6f1d10d6789fe769fa26daafd0e

                SHA256

                62c56c8cf2ac6521ce047b73aa99b6d3952ca53f11d34b00e98d17674a2fc10d

                SHA512

                5a10a2f096adce6e7db3a40bc3ea3fd44d602966e606706ee5a780703f211de7f77656c79c296390baee1e008dc3ce327eaaf5d78bbae20108670c5bc809a190

              • C:\Users\Admin\AppData\Local\Temp\is-AU501.tmp\vc_redist.x86.exe

                Filesize

                14.0MB

                MD5

                310f8aadd8055f8b8eba1a6528be7d10

                SHA1

                3ee9622151e4b50837fcdfac1b085430f0181f4e

                SHA256

                54ad46ae80984aa48cae6361213692c96b3639e322730d28c7fb93b183c761da

                SHA512

                2872a30939f7ee20b494806574cf5b8b5a0976f8fe69bdbd77dde2483ce2a9e5458ff3636147e49a449e941a44ca2d79239e3da62fddb69fc5bced8ee1004ee5

              • C:\Users\Admin\AppData\Local\Temp\is-AU501.tmp\vc_redist.x86.exe

                Filesize

                14.0MB

                MD5

                310f8aadd8055f8b8eba1a6528be7d10

                SHA1

                3ee9622151e4b50837fcdfac1b085430f0181f4e

                SHA256

                54ad46ae80984aa48cae6361213692c96b3639e322730d28c7fb93b183c761da

                SHA512

                2872a30939f7ee20b494806574cf5b8b5a0976f8fe69bdbd77dde2483ce2a9e5458ff3636147e49a449e941a44ca2d79239e3da62fddb69fc5bced8ee1004ee5

              • C:\Users\Admin\AppData\Local\Temp\is-GN65O.tmp\clipgrab-3.9.7-portable.tmp

                Filesize

                2.5MB

                MD5

                ae7b203e80eaa5afb50768049bb3de50

                SHA1

                cc0b5d64c2af21a3b24e167352df8ae93acd30d3

                SHA256

                ffe5d85efc5b75b4c99b07f5819d1fb3b9b1b42e67c903ef86f013bdedad7112

                SHA512

                a94cc199a4fa8a67496169de972bef84dd0e411502c5f74438ec0e7d18626ef3278d9c3aae1b0d025776849dbed5ec8e06d714b4bd48a43e48e2a167f7d52748

              • C:\Users\Admin\AppData\Local\Temp\is-GN65O.tmp\clipgrab-3.9.7-portable.tmp

                Filesize

                2.5MB

                MD5

                ae7b203e80eaa5afb50768049bb3de50

                SHA1

                cc0b5d64c2af21a3b24e167352df8ae93acd30d3

                SHA256

                ffe5d85efc5b75b4c99b07f5819d1fb3b9b1b42e67c903ef86f013bdedad7112

                SHA512

                a94cc199a4fa8a67496169de972bef84dd0e411502c5f74438ec0e7d18626ef3278d9c3aae1b0d025776849dbed5ec8e06d714b4bd48a43e48e2a167f7d52748

              • C:\Users\Admin\AppData\Local\Temp\is-US755.tmp\clipgrab-3.9.7-dotinstaller.tmp

                Filesize

                3.2MB

                MD5

                aadc16c8ad4312196df3aa1d9f6386d3

                SHA1

                ff4d78923e0d957e6a66b3c06efecc435c396c7a

                SHA256

                04fade43204ecbbb378114a023b3db4a3aebe8258ff3b3846156e80a9c5cf4a3

                SHA512

                51621ec71d530d75e4a537381edf03bc48b234dd861547c950573febf5709a1716ee797368854512edf1950a4e1f4f8bbe292417a0dd238600338a39e2454e04

              • C:\Windows\Temp\{640CEF65-6A53-48C4-9295-CFE037B7B860}\.ba\1055\license.rtf

                Filesize

                177KB

                MD5

                f1a281f74d3e91d16dd26d1f313cd8a9

                SHA1

                ddb2ca9032c5a9c091eac53b679f6ba428077b00

                SHA256

                f79108a254f876e0f6bbcb05a9effbe25dc252e7ea256bfe3fd28ceb79737f25

                SHA512

                484c5ca26275427e1fb74d3217a22a0e4aac409aba973e78d7ad68834e7ad1d86c7855d34b227925200f941d288dfc09477b2d7dfe0856810c6c847297b8d625

              • C:\Windows\Temp\{640CEF65-6A53-48C4-9295-CFE037B7B860}\.ba\logo.png

                Filesize

                1KB

                MD5

                d6bd210f227442b3362493d046cea233

                SHA1

                ff286ac8370fc655aea0ef35e9cf0bfcb6d698de

                SHA256

                335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef

                SHA512

                464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b

              • C:\Windows\Temp\{640CEF65-6A53-48C4-9295-CFE037B7B860}\.ba\wixstdba.dll

                Filesize

                191KB

                MD5

                eab9caf4277829abdf6223ec1efa0edd

                SHA1

                74862ecf349a9bedd32699f2a7a4e00b4727543d

                SHA256

                a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041

                SHA512

                45b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2

              • C:\Windows\Temp\{CC90E180-B911-41C1-948E-9BAD027C078C}\.cr\vc_redist.x86.exe

                Filesize

                881KB

                MD5

                9df0848b2753e9255f1a6b4cdc9a5a3e

                SHA1

                051469cd9e786b720ef6b70c35a1e184a643f520

                SHA256

                59089badd61acb47a07748c9018d3a959cf58f07de9902b0c45dffae3e566090

                SHA512

                518a78e77515b2fb21c5f66a760473a1f8ab5050e9bc65a4715ab178e568079f11f65fc173db59dd021b69fe0b606c42e50bf5f09a34ba2009a7b71e88033452

              • C:\Windows\Temp\{CC90E180-B911-41C1-948E-9BAD027C078C}\.cr\vc_redist.x86.exe

                Filesize

                881KB

                MD5

                9df0848b2753e9255f1a6b4cdc9a5a3e

                SHA1

                051469cd9e786b720ef6b70c35a1e184a643f520

                SHA256

                59089badd61acb47a07748c9018d3a959cf58f07de9902b0c45dffae3e566090

                SHA512

                518a78e77515b2fb21c5f66a760473a1f8ab5050e9bc65a4715ab178e568079f11f65fc173db59dd021b69fe0b606c42e50bf5f09a34ba2009a7b71e88033452

              • memory/924-1021-0x00000000004D0000-0x000000000412C000-memory.dmp

                Filesize

                60.4MB

              • memory/3148-51-0x0000000002830000-0x0000000002831000-memory.dmp

                Filesize

                4KB

              • memory/3148-50-0x0000000004FD0000-0x0000000004FDF000-memory.dmp

                Filesize

                60KB

              • memory/3148-5-0x0000000002830000-0x0000000002831000-memory.dmp

                Filesize

                4KB

              • memory/3148-28-0x0000000004FD0000-0x0000000004FDF000-memory.dmp

                Filesize

                60KB

              • memory/3148-41-0x0000000000400000-0x000000000073F000-memory.dmp

                Filesize

                3.2MB

              • memory/3148-42-0x0000000004FD0000-0x0000000004FDF000-memory.dmp

                Filesize

                60KB

              • memory/3148-331-0x0000000000400000-0x000000000073F000-memory.dmp

                Filesize

                3.2MB

              • memory/3148-332-0x0000000004FD0000-0x0000000004FDF000-memory.dmp

                Filesize

                60KB

              • memory/3148-49-0x0000000000400000-0x000000000073F000-memory.dmp

                Filesize

                3.2MB

              • memory/3148-388-0x0000000000400000-0x000000000073F000-memory.dmp

                Filesize

                3.2MB

              • memory/3148-111-0x0000000000400000-0x000000000073F000-memory.dmp

                Filesize

                3.2MB

              • memory/3536-387-0x00000000004D0000-0x000000000412C000-memory.dmp

                Filesize

                60.4MB

              • memory/4260-40-0x0000000000400000-0x000000000051D000-memory.dmp

                Filesize

                1.1MB

              • memory/4260-390-0x0000000000400000-0x000000000051D000-memory.dmp

                Filesize

                1.1MB

              • memory/4260-0-0x0000000000400000-0x000000000051D000-memory.dmp

                Filesize

                1.1MB

              • memory/4292-624-0x0000000000F00000-0x0000000000F10000-memory.dmp

                Filesize

                64KB

              • memory/4292-458-0x0000000000F00000-0x0000000000F10000-memory.dmp

                Filesize

                64KB

              • memory/4336-61-0x0000000000400000-0x00000000004CE000-memory.dmp

                Filesize

                824KB

              • memory/4336-116-0x0000000000400000-0x00000000004CE000-memory.dmp

                Filesize

                824KB

              • memory/4336-325-0x0000000000400000-0x00000000004CE000-memory.dmp

                Filesize

                824KB

              • memory/4452-392-0x00000000004D0000-0x000000000412C000-memory.dmp

                Filesize

                60.4MB

              • memory/4520-324-0x0000000000400000-0x0000000000685000-memory.dmp

                Filesize

                2.5MB

              • memory/4520-68-0x0000000000B60000-0x0000000000B61000-memory.dmp

                Filesize

                4KB

              • memory/4520-117-0x0000000000400000-0x0000000000685000-memory.dmp

                Filesize

                2.5MB

              • memory/4520-288-0x0000000000400000-0x0000000000685000-memory.dmp

                Filesize

                2.5MB

              • memory/4812-1084-0x00007FFB3F7B0000-0x00007FFB3F9B0000-memory.dmp

                Filesize

                2.0MB

              • memory/4812-1086-0x00007FFB4FE20000-0x00007FFB4FE5F000-memory.dmp

                Filesize

                252KB

              • memory/4812-1074-0x00007FF7E8D70000-0x00007FF7E8E68000-memory.dmp

                Filesize

                992KB

              • memory/4812-1076-0x00007FFB3FBA0000-0x00007FFB3FE54000-memory.dmp

                Filesize

                2.7MB

              • memory/4812-1079-0x00007FFB50100000-0x00007FFB50111000-memory.dmp

                Filesize

                68KB

              • memory/4812-1080-0x00007FFB500E0000-0x00007FFB500F7000-memory.dmp

                Filesize

                92KB

              • memory/4812-1081-0x00007FFB500C0000-0x00007FFB500D1000-memory.dmp

                Filesize

                68KB

              • memory/4812-1083-0x00007FFB4FE60000-0x00007FFB4FE71000-memory.dmp

                Filesize

                68KB

              • memory/4812-1082-0x00007FFB500A0000-0x00007FFB500BD000-memory.dmp

                Filesize

                116KB

              • memory/4812-1078-0x00007FFB50120000-0x00007FFB50137000-memory.dmp

                Filesize

                92KB

              • memory/4812-1100-0x00007FFB40780000-0x00007FFB407D6000-memory.dmp

                Filesize

                344KB

              • memory/4812-1077-0x00007FFB508D0000-0x00007FFB508E8000-memory.dmp

                Filesize

                96KB

              • memory/4812-1085-0x00007FFB3DB60000-0x00007FFB3EC0B000-memory.dmp

                Filesize

                16.7MB

              • memory/4812-1075-0x00007FFB50570000-0x00007FFB505A4000-memory.dmp

                Filesize

                208KB

              • memory/4812-1089-0x00007FFB4FDB0000-0x00007FFB4FDC1000-memory.dmp

                Filesize

                68KB

              • memory/4812-1088-0x00007FFB4FDD0000-0x00007FFB4FDE8000-memory.dmp

                Filesize

                96KB

              • memory/4812-1090-0x00007FFB47180000-0x00007FFB47191000-memory.dmp

                Filesize

                68KB

              • memory/4812-1091-0x00007FFB41840000-0x00007FFB41851000-memory.dmp

                Filesize

                68KB

              • memory/4812-1092-0x00007FFB41820000-0x00007FFB4183B000-memory.dmp

                Filesize

                108KB

              • memory/4812-1087-0x00007FFB4FDF0000-0x00007FFB4FE11000-memory.dmp

                Filesize

                132KB

              • memory/4812-1093-0x00007FFB415D0000-0x00007FFB415E1000-memory.dmp

                Filesize

                68KB

              • memory/4812-1094-0x00007FFB415B0000-0x00007FFB415C8000-memory.dmp

                Filesize

                96KB

              • memory/4812-1096-0x00007FFB40870000-0x00007FFB408D7000-memory.dmp

                Filesize

                412KB

              • memory/4812-1097-0x00007FFB40800000-0x00007FFB4086F000-memory.dmp

                Filesize

                444KB

              • memory/4812-1095-0x00007FFB40C80000-0x00007FFB40CB0000-memory.dmp

                Filesize

                192KB

              • memory/4812-1099-0x00007FFB407E0000-0x00007FFB407F1000-memory.dmp

                Filesize

                68KB

              • memory/4928-460-0x00000000004D0000-0x000000000412C000-memory.dmp

                Filesize

                60.4MB