f980e92af3341650819ca6c985294ebe0aa78d38bdfe249536d7ec7f2efc6ecf

Resubmissions

08/11/2023, 16:42

231108-t7mfnaeb43 8

08/11/2023, 16:35

231108-t35rfacg2t 9

Analysis

max time kernel
45s
max time network
65s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
08/11/2023, 16:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

clipgrab-3.9.7-dotinstaller.exe
Size

2.8MB
MD5

0f29445baa824f6729cbda3d90b15cec
SHA1

572195b4193529d842653e678eeec7dc3544ee2f
SHA256

f980e92af3341650819ca6c985294ebe0aa78d38bdfe249536d7ec7f2efc6ecf
SHA512

a05bb0cb18d3c7e0ce5795397beeaee90078c272afccf5211d911eae4bc39078bed7da22c528e77ed4daea1c1b4e736c2f361cdb6e525e4132ba4793e433cc81
SSDEEP

49152:9qe3f6PUk/4g+H98AHaCfu6rtWBu1SSmqOIzDamifOL9T9vEXv:MSiPUk/XE9vBugtL1SNaRLh9vEXv

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file

Executes dropped EXE 3 IoCs

pid	Process
4476	clipgrab-3.9.7-dotinstaller.tmp
4424	clipgrab-3.9.7-portable.exe
4284	clipgrab-3.9.7-portable.tmp

Loads dropped DLL 3 IoCs

pid	Process
4476	clipgrab-3.9.7-dotinstaller.tmp
4476	clipgrab-3.9.7-dotinstaller.tmp
4476	clipgrab-3.9.7-dotinstaller.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5QuickWidgets.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-TQ818.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-FSC1P.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\position\qtposition_serialnmea.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-A9QFP.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-507UI.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-I1146.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5PrintSupport.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\platforms\qwindows.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-HDIJ1.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-CDESE.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\D3Dcompiler_47.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\iconengines\qsvgicon.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-B0RB3.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\imageformats\is-BN7V0.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-IV915.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\imageformats\qwebp.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-JELT9.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\imageformats\is-ER4DB.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-F2MBP.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\libcrypto-1_1.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\imageformats\qico.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\position\is-HIKQA.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-GSGCD.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-TQT46.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\position\is-RVE5U.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-08485.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-H03C1.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-D77GC.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5Core.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\bearer\qgenericbearer.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\python\vcruntime140.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-HBKND.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-Q7FTV.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\python\libssl-1_1.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-7EAIA.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-RUAH2.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\imageformats\is-441UN.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5Positioning.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\ffmpeg.exe	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-5KC6A.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-L1PCG.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\styles\is-NI5BF.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5Widgets.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\imageformats\is-5I5IP.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-OBDCP.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-RSIKE.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\python\python.exe	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-8R2QT.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-LVJLT.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-VCAV8.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-H7CLR.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\Qt5Gui.dll	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\python\libcrypto-1_1.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\resources\is-R3ETV.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\resources\is-FTOKR.tmp	clipgrab-3.9.7-portable.tmp
File opened for modification	C:\Program Files (x86)\ClipGrab\position\qtposition_winrt.dll	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\imageformats\is-A9PH6.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\imageformats\is-8220B.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-IJPSM.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\python\is-E3532.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-S1LFB.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-RE3AN.tmp	clipgrab-3.9.7-portable.tmp
File created	C:\Program Files (x86)\ClipGrab\is-6H43B.tmp	clipgrab-3.9.7-portable.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	clipgrab-3.9.7-dotinstaller.tmp
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\	clipgrab-3.9.7-dotinstaller.tmp

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	27	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4284	clipgrab-3.9.7-portable.tmp
4284	clipgrab-3.9.7-portable.tmp

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4476	clipgrab-3.9.7-dotinstaller.tmp
4284	clipgrab-3.9.7-portable.tmp

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4476	clipgrab-3.9.7-dotinstaller.tmp

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 1816 wrote to memory of 4476	1816	clipgrab-3.9.7-dotinstaller.exe	84
PID 1816 wrote to memory of 4476	1816	clipgrab-3.9.7-dotinstaller.exe	84
PID 1816 wrote to memory of 4476	1816	clipgrab-3.9.7-dotinstaller.exe	84
PID 4476 wrote to memory of 4424	4476	clipgrab-3.9.7-dotinstaller.tmp	97
PID 4476 wrote to memory of 4424	4476	clipgrab-3.9.7-dotinstaller.tmp	97
PID 4476 wrote to memory of 4424	4476	clipgrab-3.9.7-dotinstaller.tmp	97
PID 4424 wrote to memory of 4284	4424	clipgrab-3.9.7-portable.exe	98
PID 4424 wrote to memory of 4284	4424	clipgrab-3.9.7-portable.exe	98
PID 4424 wrote to memory of 4284	4424	clipgrab-3.9.7-portable.exe	98

C:\Users\Admin\AppData\Local\Temp\clipgrab-3.9.7-dotinstaller.exe
"C:\Users\Admin\AppData\Local\Temp\clipgrab-3.9.7-dotinstaller.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1816
- C:\Users\Admin\AppData\Local\Temp\is-IGE91.tmp\clipgrab-3.9.7-dotinstaller.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-IGE91.tmp\clipgrab-3.9.7-dotinstaller.tmp" /SL5="$40210,1907617,1111552,C:\Users\Admin\AppData\Local\Temp\clipgrab-3.9.7-dotinstaller.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks processor information in registry
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4476
- - C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\clipgrab-3.9.7-portable.exe
    "C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\clipgrab-3.9.7-portable.exe" /VERYSILENT
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:4424
  - - C:\Users\Admin\AppData\Local\Temp\is-9MPBU.tmp\clipgrab-3.9.7-portable.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-9MPBU.tmp\clipgrab-3.9.7-portable.tmp" /SL5="$C005E,72952445,791040,C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\clipgrab-3.9.7-portable.exe" /VERYSILENT
      4⤵
      Executes dropped EXE
      Drops file in Program Files directory
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of FindShellTrayWindow
      PID:4284
    - - C:\Users\Admin\AppData\Local\Temp\is-JP4OB.tmp\vc_redist.x86.exe
        
        "C:\Users\Admin\AppData\Local\Temp\is-JP4OB.tmp\vc_redist.x86.exe" /install /passive /silent /norestart
        5⤵
        
        PID:2476
      - C:\Windows\Temp\{784FB064-16D7-4944-AE7E-2C65EFC365B7}\.cr\vc_redist.x86.exe
        
        "C:\Windows\Temp\{784FB064-16D7-4944-AE7E-2C65EFC365B7}\.cr\vc_redist.x86.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\is-JP4OB.tmp\vc_redist.x86.exe" -burn.filehandle.attached=692 -burn.filehandle.self=696 /install /passive /silent /norestart
        6⤵
        
        PID:1060
- - C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\prod0.exe
    "C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\prod0.exe" -ip:"dui=fa7f0b48-75de-4b27-a416-3c06e5f0c1af&dit=20231108164227&is_silent=true&oc=ZB_RAV_Cross_Tri_NCB&p=5efa&a=100&b=&se=true" -vp:"dui=fa7f0b48-75de-4b27-a416-3c06e5f0c1af&dit=20231108164227&oc=ZB_RAV_Cross_Tri_NCB&p=5efa&a=100&oip=26&ptl=7&dta=true" -dp:"dui=fa7f0b48-75de-4b27-a416-3c06e5f0c1af&dit=20231108164227&oc=ZB_RAV_Cross_Tri_NCB&p=5efa&a=100" -i -v -d -se=true
    3⤵
    PID:3616
  - - C:\Users\Admin\AppData\Local\Temp\gmtm3rbf.exe
      "C:\Users\Admin\AppData\Local\Temp\gmtm3rbf.exe" /silent
      4⤵
      PID:4888
    - - C:\Users\Admin\AppData\Local\Temp\nsyB2E2.tmp\RAVEndPointProtection-installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\nsyB2E2.tmp\RAVEndPointProtection-installer.exe" "C:\Users\Admin\AppData\Local\Temp\gmtm3rbf.exe" /silent
        5⤵
        
        PID:2476
      - C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe
        
        "C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe" -i -bn:ReasonLabs -pn:EPP -lpn:rav_antivirus -url:https://update.reasonsecurity.com/v2/live -dt:10
        6⤵
        
        PID:3732
- - C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\prod1_extract\ccsetup609_slim.exe
    "C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\prod1_extract\ccsetup609_slim.exe" /S /PI=LS
    3⤵
    PID:2540
- - C:\Program Files (x86)\ClipGrab\clipgrab.exe
    "C:\Program Files (x86)\ClipGrab\clipgrab.exe"
    3⤵
    PID:5100
  - - C:\Program Files (x86)\ClipGrab\ffmpeg.exe
      ffmpeg -v quiet
      4⤵
      PID:3336

C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe
"C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe" -pn:EPP -lpn:rav_antivirus -url:https://update.reasonsecurity.com/v2/live -bn:ReasonLabs -dt:10
1⤵
PID:1544

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\ClipGrab\Qt5Core.dll

Filesize
2.8MB

MD5
870294d4fed4d89c180b4b0e75f0d43e

SHA1
454ec0bc4d36e93a50c785e7ecdf3af3d57b3ade

SHA256
035f3913bef149ed0246d681a21a90dcd7023eeff8de4072504cca3375344368

SHA512
87b59fbc83167e5145da548ab27ef476b89f23c1bef1add6c01b5f9e8d2d51db2a0790b173a7d6d2b7779a703bdfa353226d8067697553ab568b756e80df7916

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Core.dll

Filesize
2.6MB

MD5
9e2ac3c77438dd0261eddcff999219a2

SHA1
97e89633baf31372291d886e9d1cae9a4d75716b

SHA256
1fa2874ea6c2ebd2c955832b6bf9e6aed963933879456ebb1d2071d0e160394b

SHA512
285faf1a109f28f5507a5e335af2d9f3f2608a79a50060910f6d003945631d9ac947df51529e157d2747793cbecd8a895f3201b3cf8fb71de9acf8537109d10b

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Gui.dll

Filesize
3.1MB

MD5
386f06ae2c5ef843257e6e6cd1d1b948

SHA1
69b73ff305a27a998dbfad99390fc747766e7754

SHA256
351b9b3cf9c9eb6606605b5f3d54a80cf1b3ad05ac5799b9d6f240e26c061158

SHA512
3d3c8d1065c704df4840b493f2e4fed578fbac97e30fe3eac87a6f8e23227c81837da54e4b888be717d8fb9db7ac25d189b38d5d840e9e50aedbe5bf0466a649

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Gui.dll

Filesize
2.6MB

MD5
da60be32b3e8081b969df6dfe65b7854

SHA1
c49e217d14df75f4257a2ffb60f148789e9dd930

SHA256
853705f68f2109579fd73ff8d3616848f6411dbc6b6e93fe733a6640fa6f1f2f

SHA512
131111089476731e6c3a0aca33bd020ed8b86fee6a70429315643bd4987b2cda9a51512ddea0384aee135192e38d655db593e5894ce2bb250533311b5560b563

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Network.dll

Filesize
1.0MB

MD5
08b5fcf0369a4923befb05a3e7b91998

SHA1
4d44449f027120d59bd0c9725dcfe02102acc82e

SHA256
de3ef3d9ac16b03a6da9cc076bba081142ccd4a306777b6d1bbaa60980e20723

SHA512
629a3c3b3fd6c36a0a9ec93bbd325bd78e5044279720a32eb79041b08989f575c99992f352d710c167b79c19498fa002ae85afbb080302fb001ed0b44465eb06

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Network.dll

Filesize
1.0MB

MD5
08b5fcf0369a4923befb05a3e7b91998

SHA1
4d44449f027120d59bd0c9725dcfe02102acc82e

SHA256
de3ef3d9ac16b03a6da9cc076bba081142ccd4a306777b6d1bbaa60980e20723

SHA512
629a3c3b3fd6c36a0a9ec93bbd325bd78e5044279720a32eb79041b08989f575c99992f352d710c167b79c19498fa002ae85afbb080302fb001ed0b44465eb06

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Positioning.dll

Filesize
259KB

MD5
92aa5c44793603758874f87ecc5c88ce

SHA1
f368193467f61e0edb4864422085e70770c88d76

SHA256
798cc99af70288093bfd09a5addfd55a80f9652e7dc79f0b51f7760c47de2c9e

SHA512
459b97983c236ad76438615dad7174aa64561c9a0d9fcda7f290411237d97411f503d2dbb2d90f0c61fc229a872971a96ab61bf7b9bfb8b1ea840f4621d10910

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Positioning.dll

Filesize
259KB

MD5
92aa5c44793603758874f87ecc5c88ce

SHA1
f368193467f61e0edb4864422085e70770c88d76

SHA256
798cc99af70288093bfd09a5addfd55a80f9652e7dc79f0b51f7760c47de2c9e

SHA512
459b97983c236ad76438615dad7174aa64561c9a0d9fcda7f290411237d97411f503d2dbb2d90f0c61fc229a872971a96ab61bf7b9bfb8b1ea840f4621d10910

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5PrintSupport.dll

Filesize
267KB

MD5
c9d5c7d715bbf74c31aab14893698778

SHA1
ee62edb71acb9eda4cb5f213a0b94940b972d7b3

SHA256
12717098b4d3f5f09ec19d091d1beb26d6df35e586bee511b9138be42d644e4a

SHA512
ee67880a737d1ec7c14cf84f20994bd34d8c8e39fc1763b634c311bc200ab6153f2f6760b217517a6190ccdf8076f4f9055062a011b3115c653c0ae4c5837330

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5PrintSupport.dll

Filesize
267KB

MD5
c9d5c7d715bbf74c31aab14893698778

SHA1
ee62edb71acb9eda4cb5f213a0b94940b972d7b3

SHA256
12717098b4d3f5f09ec19d091d1beb26d6df35e586bee511b9138be42d644e4a

SHA512
ee67880a737d1ec7c14cf84f20994bd34d8c8e39fc1763b634c311bc200ab6153f2f6760b217517a6190ccdf8076f4f9055062a011b3115c653c0ae4c5837330

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Qml.dll

Filesize
2.6MB

MD5
5c7f8aa830dc486bbecf2a5626daaa4c

SHA1
c4bfc57464354634193244f94c53650c1a668223

SHA256
0552264d296270cb43297064e32190190c448440beec342579db2af708a183dc

SHA512
63c052cd17c239d30520813ba44b10f80d58a230ac3fe8db7946a2954df836e998ea07562e4712f42e9625cf5f848ac15c9a4fbd3c554c14a89c22f6ca3f20ec

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Qml.dll

Filesize
2.6MB

MD5
0da912d80874d4216be0009b58a66eb6

SHA1
512fa76e1be65e342c615a987715d5f8849e5538

SHA256
fb145ec4e13f514bbe9adecc061183b32dc0d61da9db9935d2e4d8e16c76368f

SHA512
a51b707ef6fd370948051389b81c3db2460e3f786014e3308ac4d0c7f1ba65a375a6a3d53b6a32b2f15969683ef52d2627bb84fc8b22f7d15d326b8f283ca642

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Quick.dll

Filesize
2.6MB

MD5
eb16a14bda02b81d7c2b8299700dae8a

SHA1
5a2bf8e3fe30caa707f2e0137e4927708d99a8e3

SHA256
309a01abc5d4f20e6f0db5629b1307e56966ec0269932f931bf16921654190b1

SHA512
049c3525769f9bbf1de67ee6c9e9d6d485bed6daccbd805b4bfda658b4776c4aed4a3d40d91ae528b54f0b5366267d6a51bab30bf36465e2fdccafb875a5993e

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Quick.dll

Filesize
2.8MB

MD5
9b28c4a27afa1442ff2d1f7773a06077

SHA1
1c6fa9bb7e64437d87b100d8639a6984e7c007cd

SHA256
23fa8774e9197d8174d5d7c42e97e4cc44e50915aa220f1bf51d85e3d30977b6

SHA512
847ef0025eaeba13c8b9c8d85e4aedd2cea24d67a34a3e5756515dc4ef9bebbeae3e91b2a174cc8dab4bd802ad4520208c5ff2838d222614f04915eda126648d

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5QuickWidgets.dll

Filesize
64KB

MD5
42ce360f532e7e835ee94ee1226e1c19

SHA1
6c596c32575f081c86524742fcb11aa5e44ad213

SHA256
6b12b555d3bc465e106a26603b4bead895134ecd90b3201773415eab64cc69ac

SHA512
8f2772be5a6e375f06439f58c4b26277f93b8b777c950640c4699de6e0b0a99f7f33ebc6eac4b3a87a1e1b644c573b7ae5de9289d399fa41d732867c1bf95508

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5QuickWidgets.dll

Filesize
64KB

MD5
42ce360f532e7e835ee94ee1226e1c19

SHA1
6c596c32575f081c86524742fcb11aa5e44ad213

SHA256
6b12b555d3bc465e106a26603b4bead895134ecd90b3201773415eab64cc69ac

SHA512
8f2772be5a6e375f06439f58c4b26277f93b8b777c950640c4699de6e0b0a99f7f33ebc6eac4b3a87a1e1b644c573b7ae5de9289d399fa41d732867c1bf95508

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5WebChannel.dll

Filesize
96KB

MD5
2a65f4f49a88417222bcf109b59247ef

SHA1
a165ff1b21ff45c11783b63f2f4e9f270f84f05e

SHA256
632a5d720f3f6371721f94e4665ac13988afde722d155aaa5364a27cbd46d3ac

SHA512
c260fdb3454994e15582feec31b63e8418c9b1d705ee06ac09aa4ac77782ac79f722c9c883714e462ef919834ddd569ea7fff2b7d616a2b210966013c8ad9add

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5WebChannel.dll

Filesize
96KB

MD5
2a65f4f49a88417222bcf109b59247ef

SHA1
a165ff1b21ff45c11783b63f2f4e9f270f84f05e

SHA256
632a5d720f3f6371721f94e4665ac13988afde722d155aaa5364a27cbd46d3ac

SHA512
c260fdb3454994e15582feec31b63e8418c9b1d705ee06ac09aa4ac77782ac79f722c9c883714e462ef919834ddd569ea7fff2b7d616a2b210966013c8ad9add

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5WebEngineCore.dll

Filesize
2.9MB

MD5
14aef76f7c94bab5943922a52e4bed65

SHA1
384664879d1838f9cffa80e2af29f44f5f9c62c4

SHA256
a6e04d1a9dcc5935bb72730d7c2f729bfe6595a7b8b94987ecb06ffcb0f77b12

SHA512
b79024e57963ef07cff291e0c782f602ef4ab02d07092126a484e448d9cc4ce413ca66d6ba734d0c35149bac07f15035824e75250d428ba1b72600813537d99c

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5WebEngineCore.dll

Filesize
2.8MB

MD5
db4b32ea04536b31520a480acaa61108

SHA1
14b2f67ccc611a8e5716ab75fccbb2442c76ab63

SHA256
e8d5272ecb65627961cf775902b0742356a9138f32eead8d9525c2e8f1a6bf58

SHA512
c14930e64c1107575aa48c34a686add02c8a02498ff2c5075c6cf2f7448ef4f1543bd94f7b661e1f8770e6d4f816ad4d9ede4e3e2bfeddda223de5589e4bfb59

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5WebEngineWidgets.dll

Filesize
187KB

MD5
9c30ad3a2ba28362ac506f50221e881d

SHA1
02497e8d0544d91318a2b6619b7c154cebee1073

SHA256
ce773742d6d80df75e9e462bd38bf237508541b3243dad57c48b4eb24f4ff3f1

SHA512
50bb8ac0f02bebe6aaa09554bfe8dd575681810239edeeb696b8170a8f4c3457a4ff3bf2e7ad9ed1b6a6c54f81201988c8e347f1fbff4e2ea2d348a72ca9aa70

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5WebEngineWidgets.dll

Filesize
187KB

MD5
9c30ad3a2ba28362ac506f50221e881d

SHA1
02497e8d0544d91318a2b6619b7c154cebee1073

SHA256
ce773742d6d80df75e9e462bd38bf237508541b3243dad57c48b4eb24f4ff3f1

SHA512
50bb8ac0f02bebe6aaa09554bfe8dd575681810239edeeb696b8170a8f4c3457a4ff3bf2e7ad9ed1b6a6c54f81201988c8e347f1fbff4e2ea2d348a72ca9aa70

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Widgets.dll

Filesize
2.8MB

MD5
64f3ecf4d19aef1418408f936628f50a

SHA1
167a3721b0a1ed9fb5229f8f2ab55b0adde3066b

SHA256
871b6c9f55334d809b786f77e877e451036ffc5770cd0fa3e6b361fa01b366ac

SHA512
a6211eb5d4d7e3257c1bea9967a213fc8041852aed5e63228a5abbd1b3166d8df9591ef171f15b8754dff96fee5956ea4ffe62fd9c4c5c0a54cd36f4ee67a7b7

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Widgets.dll

Filesize
2.8MB

MD5
ad2d420a83e90fb427f469eb7420ec4e

SHA1
66cadd97f9e51f49502d745fe9865f77bc49ef72

SHA256
0c83ed1c09d6a41ca7dee0e87282a50a550d30b212289ce441f8834dd8d6daa6

SHA512
8c2f4cc0935afad10ea5fd2d0a73f8efd991d0f21032014d0a698b262e9f660042255b1ab6ad6d41d64d356e5b7dfd3028ebabcca7cb6d0b288d56e7359688ff

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Xml.dll

Filesize
149KB

MD5
fd0f95e872b99b61f0b7276e0ff76c28

SHA1
a90b20be2f436362782ac18182637f8dca1e9719

SHA256
9150d32aa158f9c555cc3b845fc8f776684f11ec014b47a96d498faad67e7a31

SHA512
25a4e5d74315f64171c16929da0fa049db9dd835cb912e2909bf442fc6383a424cdd52aec58c6eb6d335697651deff16f688ecac8c11310a1fe7383996bdcd94

Download Submit
C:\Program Files (x86)\ClipGrab\Qt5Xml.dll

Filesize
149KB

MD5
fd0f95e872b99b61f0b7276e0ff76c28

SHA1
a90b20be2f436362782ac18182637f8dca1e9719

SHA256
9150d32aa158f9c555cc3b845fc8f776684f11ec014b47a96d498faad67e7a31

SHA512
25a4e5d74315f64171c16929da0fa049db9dd835cb912e2909bf442fc6383a424cdd52aec58c6eb6d335697651deff16f688ecac8c11310a1fe7383996bdcd94

Download Submit
C:\Program Files (x86)\ClipGrab\clipgrab.exe

Filesize
1.1MB

MD5
57cdd2bc92aee7d3d213561188e565d4

SHA1
fb34ba0178b5764b6ccc9d228796196ee172980e

SHA256
10770da581cc85d55a286d42a0428accafe6c7910bc640cc4264da7fb26dafa4

SHA512
ac00f5021cbc34b7ca160364cdde0a404353d8fc9e6a46866884268880c7b753e91741c48b413d6f7a5ff28a4e3d98bd7485550b46009a7c5b42dd0a877f3856

Download Submit
C:\Program Files (x86)\ClipGrab\clipgrab.exe

Filesize
1.1MB

MD5
57cdd2bc92aee7d3d213561188e565d4

SHA1
fb34ba0178b5764b6ccc9d228796196ee172980e

SHA256
10770da581cc85d55a286d42a0428accafe6c7910bc640cc4264da7fb26dafa4

SHA512
ac00f5021cbc34b7ca160364cdde0a404353d8fc9e6a46866884268880c7b753e91741c48b413d6f7a5ff28a4e3d98bd7485550b46009a7c5b42dd0a877f3856

Download Submit
C:\Program Files (x86)\ClipGrab\clipgrab.exe

Filesize
1.1MB

MD5
57cdd2bc92aee7d3d213561188e565d4

SHA1
fb34ba0178b5764b6ccc9d228796196ee172980e

SHA256
10770da581cc85d55a286d42a0428accafe6c7910bc640cc4264da7fb26dafa4

SHA512
ac00f5021cbc34b7ca160364cdde0a404353d8fc9e6a46866884268880c7b753e91741c48b413d6f7a5ff28a4e3d98bd7485550b46009a7c5b42dd0a877f3856

Download Submit
C:\Program Files (x86)\ClipGrab\libEGL.DLL

Filesize
21KB

MD5
55813372944c5acaca0e38c22902a6e6

SHA1
8c3fbdcacecc971aac8823a52eb83082669220a3

SHA256
fc219ad27720cfb1b223d748c1b5bdd78886235f4254bfe8e0adaf168c7e9849

SHA512
73f504a1f7cda4082f370387304db701672d95409886362dd70f8599fc17a5b577d2b37dd8f012cecb6d6dffe4321906c2a07cdd7e12e2d31bb9df0fb2e97a7f

Download Submit
C:\Program Files (x86)\ClipGrab\libEGL.dll

Filesize
21KB

MD5
55813372944c5acaca0e38c22902a6e6

SHA1
8c3fbdcacecc971aac8823a52eb83082669220a3

SHA256
fc219ad27720cfb1b223d748c1b5bdd78886235f4254bfe8e0adaf168c7e9849

SHA512
73f504a1f7cda4082f370387304db701672d95409886362dd70f8599fc17a5b577d2b37dd8f012cecb6d6dffe4321906c2a07cdd7e12e2d31bb9df0fb2e97a7f

Download Submit
C:\Program Files (x86)\ClipGrab\platforms\qwindows.dll

Filesize
1.2MB

MD5
b190c721612ac9d169f8b3a8f8b48a29

SHA1
206442dd161e878f1a6f83f3ebdb9208b56abfff

SHA256
ccb562f817d7015c78da4098bc576e7eaf3df1ebd55afb58d75f12dace9c761f

SHA512
951bc91302fcb1a28b7093f6867b379a90188733cec329efedb465ae27ae1a526a2d5f997816b26ed123d2401a9aa2854d26a003a65318f50e3a695d7948f6b7

Download Submit
C:\Program Files (x86)\ClipGrab\platforms\qwindows.dll

Filesize
1.2MB

MD5
b190c721612ac9d169f8b3a8f8b48a29

SHA1
206442dd161e878f1a6f83f3ebdb9208b56abfff

SHA256
ccb562f817d7015c78da4098bc576e7eaf3df1ebd55afb58d75f12dace9c761f

SHA512
951bc91302fcb1a28b7093f6867b379a90188733cec329efedb465ae27ae1a526a2d5f997816b26ed123d2401a9aa2854d26a003a65318f50e3a695d7948f6b7

Download Submit
C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

Filesize
797KB

MD5
ded746a9d2d7b7afcb3abe1a24dd3163

SHA1
a074c9e981491ff566cd45b912e743bd1266c4ae

SHA256
c113072678d5fa03b02d750a5911848ab0e247c4b28cf7b152a858c4b24901b3

SHA512
2c273bf79988df13f9da4019f8071cf3b4480ecd814d3df44b83958f52f49bb668dd2f568293c29ef3545018fea15c9d5902ef88e0ecfebaf60458333fcaa91b

Download Submit
C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

Filesize
797KB

MD5
ded746a9d2d7b7afcb3abe1a24dd3163

SHA1
a074c9e981491ff566cd45b912e743bd1266c4ae

SHA256
c113072678d5fa03b02d750a5911848ab0e247c4b28cf7b152a858c4b24901b3

SHA512
2c273bf79988df13f9da4019f8071cf3b4480ecd814d3df44b83958f52f49bb668dd2f568293c29ef3545018fea15c9d5902ef88e0ecfebaf60458333fcaa91b

Download Submit
C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

Filesize
797KB

MD5
ded746a9d2d7b7afcb3abe1a24dd3163

SHA1
a074c9e981491ff566cd45b912e743bd1266c4ae

SHA256
c113072678d5fa03b02d750a5911848ab0e247c4b28cf7b152a858c4b24901b3

SHA512
2c273bf79988df13f9da4019f8071cf3b4480ecd814d3df44b83958f52f49bb668dd2f568293c29ef3545018fea15c9d5902ef88e0ecfebaf60458333fcaa91b

Download Submit
C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

Filesize
797KB

MD5
ded746a9d2d7b7afcb3abe1a24dd3163

SHA1
a074c9e981491ff566cd45b912e743bd1266c4ae

SHA256
c113072678d5fa03b02d750a5911848ab0e247c4b28cf7b152a858c4b24901b3

SHA512
2c273bf79988df13f9da4019f8071cf3b4480ecd814d3df44b83958f52f49bb668dd2f568293c29ef3545018fea15c9d5902ef88e0ecfebaf60458333fcaa91b

Download Submit
C:\Users\Admin\AppData\Local\Temp\gmtm3rbf.exe

Filesize
1.9MB

MD5
57e695b8a5d353e2ce50c3d6829af43c

SHA1
fb7ec942f50f90b92d9dfbd70b9e00a3395fa4db

SHA256
73d29888ad897a10af6f960ffd025d14b0669656550645794f342385c8c3377c

SHA512
239888ec2441792dc42598c6825d47cd5f3fff4dfcfad0b6015a82531063bfaed383fa96f1f1afbe8e3819a821af2bdc72fb72e0d8daa395ce66de79fc5decdd

Download Submit
C:\Users\Admin\AppData\Local\Temp\gmtm3rbf.exe

Filesize
1.9MB

MD5
57e695b8a5d353e2ce50c3d6829af43c

SHA1
fb7ec942f50f90b92d9dfbd70b9e00a3395fa4db

SHA256
73d29888ad897a10af6f960ffd025d14b0669656550645794f342385c8c3377c

SHA512
239888ec2441792dc42598c6825d47cd5f3fff4dfcfad0b6015a82531063bfaed383fa96f1f1afbe8e3819a821af2bdc72fb72e0d8daa395ce66de79fc5decdd

Download Submit
C:\Users\Admin\AppData\Local\Temp\gmtm3rbf.exe

Filesize
1.9MB

MD5
57e695b8a5d353e2ce50c3d6829af43c

SHA1
fb7ec942f50f90b92d9dfbd70b9e00a3395fa4db

SHA256
73d29888ad897a10af6f960ffd025d14b0669656550645794f342385c8c3377c

SHA512
239888ec2441792dc42598c6825d47cd5f3fff4dfcfad0b6015a82531063bfaed383fa96f1f1afbe8e3819a821af2bdc72fb72e0d8daa395ce66de79fc5decdd

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\CCleaner.png

Filesize
193KB

MD5
7c87614f099c75a0bed6ab01555143dd

SHA1
07ab72dc4a1e53e2c62ecccc1221472854d78635

SHA256
02335420cb5c2fa33eec48f32706d2353f8b609daaf337458f04a8f98d999a7c

SHA512
29b7ce896332ed2a05235645adb963b77920a0a252561684ea9f1f925f69dbcee4685e1b30584c1034a15b7efc18b911902d1ecb41c523cf2552ff23e165bf43

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\RAV_Cross.png

Filesize
74KB

MD5
cd09f361286d1ad2622ba8a57b7613bd

SHA1
4cd3e5d4063b3517a950b9d030841f51f3c5f1b1

SHA256
b92a31d4853d1b2c4e5b9d9624f40b439856d0c6a517e100978cbde8d3c47dc8

SHA512
f73d60c92644e0478107e0402d1c7b4dfa1674f69b41856f74f937a7b57ceaa2b3be9242f2b59f1fcf71063aac6cbe16c594618d1a8cdd181510de3240f31dff

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\botva2.dll

Filesize
37KB

MD5
67965a5957a61867d661f05ae1f4773e

SHA1
f14c0a4f154dc685bb7c65b2d804a02a0fb2360d

SHA256
450b9b0ba25bf068afbc2b23d252585a19e282939bf38326384ea9112dfd0105

SHA512
c6942818b9026dc5db2d62999d32cf99fe7289f79a28b8345af17acf9d13b2229a5e917a48ff1f6d59715bdbcb00c1625e0302abcfe10ca7e0475762e0a3f41b

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\botva2.dll

Filesize
37KB

MD5
67965a5957a61867d661f05ae1f4773e

SHA1
f14c0a4f154dc685bb7c65b2d804a02a0fb2360d

SHA256
450b9b0ba25bf068afbc2b23d252585a19e282939bf38326384ea9112dfd0105

SHA512
c6942818b9026dc5db2d62999d32cf99fe7289f79a28b8345af17acf9d13b2229a5e917a48ff1f6d59715bdbcb00c1625e0302abcfe10ca7e0475762e0a3f41b

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\clipgrab-3.9.7-portable.exe

Filesize
70.3MB

MD5
962d6f9e7331b8f3eb2fa4acb15f5f61

SHA1
2e1a7e9ec7159e564814a599657d42dc01ef9858

SHA256
0ae8656f4c65673d75544cff54721cbfc586edd6e8b4b2a2070930684920411e

SHA512
f8721fc68703d6a6ab9188bce1d64774447f02f378dd4b4d267f7fb4b01d42c4520feede2855ab426d92dfc538a1d272d7a88e65871015a95654c3d8f321d3be

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\clipgrab-3.9.7-portable.exe

Filesize
70.3MB

MD5
962d6f9e7331b8f3eb2fa4acb15f5f61

SHA1
2e1a7e9ec7159e564814a599657d42dc01ef9858

SHA256
0ae8656f4c65673d75544cff54721cbfc586edd6e8b4b2a2070930684920411e

SHA512
f8721fc68703d6a6ab9188bce1d64774447f02f378dd4b4d267f7fb4b01d42c4520feede2855ab426d92dfc538a1d272d7a88e65871015a95654c3d8f321d3be

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\finish.png

Filesize
2KB

MD5
7afaf9e0e99fd80fa1023a77524f5587

SHA1
e20c9c27691810b388c73d2ca3e67e109c2b69b6

SHA256
760b70612bb9bd967c2d15a5133a50ccce8c0bd46a6464d76875298dcc45dea0

SHA512
a090626e7b7f67fb5aa207aae0cf65c3a27e1b85e22c9728eee7475bd9bb7375ca93baaecc662473f9a427b4f505d55f2c61ba36bda460e4e6947fe22eedb044

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\loader.gif

Filesize
10KB

MD5
f23a523b82ad9103a9ac1dcc33eca72f

SHA1
5363bb6b51923441ef56638576307cc252f05a71

SHA256
59853c413b0813ded6f1e557959768d6662f010f49884d36b62c13038fac739c

SHA512
514ec63f7ed80d0708f7e2355fad8a558b4dcf2d0122ff98fe7c3ca1f40e7cd04e8869ca7a3b95622c0848c0d99306d7e791b86ca69b9e240beae959ca6285be

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\logo.png

Filesize
9KB

MD5
2c050a55ade91ca10c94c41fdceaa8cb

SHA1
178fd0ee1c184fe681d89bff0ff8b89392723a67

SHA256
43262c9cc6328d67007b97a8eb36c924d05d45a383349e61b067f35677e1ad6e

SHA512
425825cbe2a417f10832c37fc0e571ca3e3f9b940f93f9f8ec8fcff2df896a52ff753386c30e03836d588b6bf355323dbea2e3a0cbf756f8f3c7065335cbfeac

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\prod0.exe

Filesize
44KB

MD5
23ad46598493943dfaf1211ff1c13412

SHA1
8976886f1a4628b7eed02df13da6452634f6d33b

SHA256
09b9dd46cf267696109d3fe81ec5d032ac521212737286255b3148f5f8ed2ac2

SHA512
60d3f2ab1b9b9ed9e14625feb8caeb384f12a88db6098dd59ae7a7ca76c0e2be7b533cad171e1168e6a408d9f551748c7e5600545f4d10d8858746b568a8d9ee

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\prod0.exe

Filesize
44KB

MD5
23ad46598493943dfaf1211ff1c13412

SHA1
8976886f1a4628b7eed02df13da6452634f6d33b

SHA256
09b9dd46cf267696109d3fe81ec5d032ac521212737286255b3148f5f8ed2ac2

SHA512
60d3f2ab1b9b9ed9e14625feb8caeb384f12a88db6098dd59ae7a7ca76c0e2be7b533cad171e1168e6a408d9f551748c7e5600545f4d10d8858746b568a8d9ee

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\prod0.exe

Filesize
44KB

MD5
23ad46598493943dfaf1211ff1c13412

SHA1
8976886f1a4628b7eed02df13da6452634f6d33b

SHA256
09b9dd46cf267696109d3fe81ec5d032ac521212737286255b3148f5f8ed2ac2

SHA512
60d3f2ab1b9b9ed9e14625feb8caeb384f12a88db6098dd59ae7a7ca76c0e2be7b533cad171e1168e6a408d9f551748c7e5600545f4d10d8858746b568a8d9ee

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\prod1.zip

Filesize
11.7MB

MD5
1b31a592e559f3452e34c88b27eb9b5c

SHA1
b64c455295712882fa5bea05d428a7d4e4e5c271

SHA256
f1a2e0b3da80328b80b11237bce79b9431a6e373d6e73a130cf47932f0769f76

SHA512
7eca60067dea83b2e023b2aab47c9aa13ba9d604409bccea53224e6e524fe470cd80c73b597eceec42fbf0605d6df33d51fdf1d6672092e77a5d557391baec05

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\prod1_extract\ccsetup609_slim.exe

Filesize
8.5MB

MD5
1737b11a2896a5924f3b2068f3f170cd

SHA1
85fd4690f495feb0d5dc2eafaf35dadb461329c7

SHA256
3987d452b778a2339bf2275aac90b3cf7b1f7d9c8239dbdcced9d608784788ba

SHA512
8a5e21f5502a2031c7ff5164dbfa1036131c097b63abf674f23c72d75b592b5d842ef727dc8400766ad78d4050cdda6a906a6dad60826c2cf49a43137f765891

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\prod1_extract\ccsetup609_slim.exe

Filesize
7.2MB

MD5
e3c887dea9c7a44b81b45464f8dc2917

SHA1
3bbc465500e23619f704eb4f6a7f63336dc16433

SHA256
3cd7435f4fa19d3c94b053127a65a49a1872564647051233a10811fc14e2ca16

SHA512
2a3eed49d0b95c4655181d0b6a34eeca842d4dc9a37834519ed381cfadb442cd09ad8aca2deeb6555a28e27da45d50b9e685a51fcebb3c989e99842bde1b9f19

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\prod1_extract\ccsetup609_slim.exe

Filesize
7.0MB

MD5
799e92993873ab3584c1f2beb7234328

SHA1
9a18c5172d8dc1d24077a47e6f5d91c29bb92cb2

SHA256
9821ee2b2c1f2e6a96bfc8f98eac8a30d550854112bdf4ea234211275e2ff98f

SHA512
61911dbc5b67918528042eda81802ab2289f858917934a4233e8efe459dcbcaecc02a489861e3993ceab74a91bbe6f939f0b13b2957cbc730055a90c62ac848e

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9BK28.tmp\zbShieldUtils.dll

Filesize
2.0MB

MD5
e1f18a22199c6f6aa5d87b24e5b39ef1

SHA1
0dcd8f90b575f6f1d10d6789fe769fa26daafd0e

SHA256
62c56c8cf2ac6521ce047b73aa99b6d3952ca53f11d34b00e98d17674a2fc10d

SHA512
5a10a2f096adce6e7db3a40bc3ea3fd44d602966e606706ee5a780703f211de7f77656c79c296390baee1e008dc3ce327eaaf5d78bbae20108670c5bc809a190

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9MPBU.tmp\clipgrab-3.9.7-portable.tmp

Filesize
2.5MB

MD5
ae7b203e80eaa5afb50768049bb3de50

SHA1
cc0b5d64c2af21a3b24e167352df8ae93acd30d3

SHA256
ffe5d85efc5b75b4c99b07f5819d1fb3b9b1b42e67c903ef86f013bdedad7112

SHA512
a94cc199a4fa8a67496169de972bef84dd0e411502c5f74438ec0e7d18626ef3278d9c3aae1b0d025776849dbed5ec8e06d714b4bd48a43e48e2a167f7d52748

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-9MPBU.tmp\clipgrab-3.9.7-portable.tmp

Filesize
2.5MB

MD5
ae7b203e80eaa5afb50768049bb3de50

SHA1
cc0b5d64c2af21a3b24e167352df8ae93acd30d3

SHA256
ffe5d85efc5b75b4c99b07f5819d1fb3b9b1b42e67c903ef86f013bdedad7112

SHA512
a94cc199a4fa8a67496169de972bef84dd0e411502c5f74438ec0e7d18626ef3278d9c3aae1b0d025776849dbed5ec8e06d714b4bd48a43e48e2a167f7d52748

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-IGE91.tmp\clipgrab-3.9.7-dotinstaller.tmp

Filesize
3.2MB

MD5
aadc16c8ad4312196df3aa1d9f6386d3

SHA1
ff4d78923e0d957e6a66b3c06efecc435c396c7a

SHA256
04fade43204ecbbb378114a023b3db4a3aebe8258ff3b3846156e80a9c5cf4a3

SHA512
51621ec71d530d75e4a537381edf03bc48b234dd861547c950573febf5709a1716ee797368854512edf1950a4e1f4f8bbe292417a0dd238600338a39e2454e04

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-JP4OB.tmp\vc_redist.x86.exe

Filesize
14.0MB

MD5
310f8aadd8055f8b8eba1a6528be7d10

SHA1
3ee9622151e4b50837fcdfac1b085430f0181f4e

SHA256
54ad46ae80984aa48cae6361213692c96b3639e322730d28c7fb93b183c761da

SHA512
2872a30939f7ee20b494806574cf5b8b5a0976f8fe69bdbd77dde2483ce2a9e5458ff3636147e49a449e941a44ca2d79239e3da62fddb69fc5bced8ee1004ee5

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-JP4OB.tmp\vc_redist.x86.exe

Filesize
14.0MB

MD5
310f8aadd8055f8b8eba1a6528be7d10

SHA1
3ee9622151e4b50837fcdfac1b085430f0181f4e

SHA256
54ad46ae80984aa48cae6361213692c96b3639e322730d28c7fb93b183c761da

SHA512
2872a30939f7ee20b494806574cf5b8b5a0976f8fe69bdbd77dde2483ce2a9e5458ff3636147e49a449e941a44ca2d79239e3da62fddb69fc5bced8ee1004ee5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsiB2D1.tmp\System.dll

Filesize
12KB

MD5
cff85c549d536f651d4fb8387f1976f2

SHA1
d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

SHA256
8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

SHA512
531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsyB2E2.tmp\Microsoft.Win32.TaskScheduler.dll

Filesize
341KB

MD5
a09decc59b2c2f715563bb035ee4241e

SHA1
c84f5e2e0f71feef437cf173afeb13fe525a0fea

SHA256
6b8f51508240af3b07a8d0b2dc873cedc3d5d9cb25e57ea1d55626742d1f9149

SHA512
1992c8e1f7e37a58bbf486f76d1320da8e1757d6296c8a7631f35ba2e376de215c65000612364c91508aa3ddf72841f6b823fa60a2b29415a07c74c2e830212b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsyB2E2.tmp\RAVEndPointProtection-installer.exe

Filesize
539KB

MD5
41a3c2a1777527a41ddd747072ee3efd

SHA1
44b70207d0883ec1848c3c65c57d8c14fd70e2c3

SHA256
8592bae7b6806e5b30a80892004a7b79f645a16c0f1b85b4b8df809bdb6cf365

SHA512
14df28cc7769cf78b24ab331bd63da896131a2f0fbb29b10199016aef935d376493e937874eb94faf52b06a98e1678a5cf2c2d0d442c31297a9c0996205ed869

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsyB2E2.tmp\RAVEndPointProtection-installer.exe

Filesize
539KB

MD5
41a3c2a1777527a41ddd747072ee3efd

SHA1
44b70207d0883ec1848c3c65c57d8c14fd70e2c3

SHA256
8592bae7b6806e5b30a80892004a7b79f645a16c0f1b85b4b8df809bdb6cf365

SHA512
14df28cc7769cf78b24ab331bd63da896131a2f0fbb29b10199016aef935d376493e937874eb94faf52b06a98e1678a5cf2c2d0d442c31297a9c0996205ed869

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsyB2E2.tmp\rsAtom.dll

Filesize
156KB

MD5
9deba7281d8eceefd760874434bd4e91

SHA1
553e6c86efdda04beacee98bcee48a0b0dba6e75

SHA256
02a42d2403f0a61c3a52138c407b41883fa27d9128ecc885cf1d35e4edd6d6b9

SHA512
7a82fbac4ade3a9a29cb877cc716bc8f51b821b533f31f5e0979f0e9aca365b0353e93cc5352a21fbd29df8fc0f9a2025351453032942d580b532ab16acaa306

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsyB2E2.tmp\rsJSON.dll

Filesize
218KB

MD5
f8978087767d0006680c2ec43bda6f34

SHA1
755f1357795cb833f0f271c7c87109e719aa4f32

SHA256
221bb12d3f9b2aa40ee21d2d141a8d12e893a8eabc97a04d159aa46aecfa5d3e

SHA512
54f48c6f94659c88d947a366691fbaef3258ed9d63858e64ae007c6f8782f90ede5c9ab423328062c746bc4ba1e8d30887c97015a5e3e52a432a9caa02bb6955

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsyB2E2.tmp\rsLogger.dll

Filesize
177KB

MD5
83ad54079827e94479963ba4465a85d7

SHA1
d33efd0f5e59d1ef30c59d74772b4c43162dc6b7

SHA256
ec0a8c14a12fdf8d637408f55e6346da1c64efdd00cc8921f423b1a2c63d3312

SHA512
c294fb8ac2a90c6125f8674ca06593b73b884523737692af3ccaa920851fc283a43c9e2dc928884f97b08fc8974919ec603d1afb5c178acd0c2ebd6746a737e1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsyB2E2.tmp\rsStubLib.dll

Filesize
248KB

MD5
a16602aad0a611d228af718448ed7cbd

SHA1
ddd9b80306860ae0b126d3e834828091c3720ac5

SHA256
a1f4ba5bb347045d36dcaac3a917236b924c0341c7278f261109bf137dcef95a

SHA512
305a3790a231b4c93b8b4e189e18cb6a06d20b424fd6237d32183c91e2a5c1e863096f4d1b30b73ff15c4c60af269c4faaadaf42687101b1b219795abc70f511

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsyB2E2.tmp\rsSyncSvc.exe

Filesize
797KB

MD5
ded746a9d2d7b7afcb3abe1a24dd3163

SHA1
a074c9e981491ff566cd45b912e743bd1266c4ae

SHA256
c113072678d5fa03b02d750a5911848ab0e247c4b28cf7b152a858c4b24901b3

SHA512
2c273bf79988df13f9da4019f8071cf3b4480ecd814d3df44b83958f52f49bb668dd2f568293c29ef3545018fea15c9d5902ef88e0ecfebaf60458333fcaa91b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsyB2E2.tmp\uninstall.ico

Filesize
170KB

MD5
af1c23b1e641e56b3de26f5f643eb7d9

SHA1
6c23deb9b7b0c930533fdbeea0863173d99cf323

SHA256
0d3a05e1b06403f2130a6e827b1982d2af0495cdd42deb180ca0ce4f20db5058

SHA512
0c503ec7e83a5bfd59ec8ccc80f6c54412263afd24835b8b4272a79c440a0c106875b5c3b9a521a937f0615eb4f112d1d6826948ad5fb6fd173c5c51cb7168f4

Download Submit
C:\Windows\Temp\{784FB064-16D7-4944-AE7E-2C65EFC365B7}\.cr\vc_redist.x86.exe

Filesize
881KB

MD5
9df0848b2753e9255f1a6b4cdc9a5a3e

SHA1
051469cd9e786b720ef6b70c35a1e184a643f520

SHA256
59089badd61acb47a07748c9018d3a959cf58f07de9902b0c45dffae3e566090

SHA512
518a78e77515b2fb21c5f66a760473a1f8ab5050e9bc65a4715ab178e568079f11f65fc173db59dd021b69fe0b606c42e50bf5f09a34ba2009a7b71e88033452

Download Submit
C:\Windows\Temp\{784FB064-16D7-4944-AE7E-2C65EFC365B7}\.cr\vc_redist.x86.exe

Filesize
881KB

MD5
9df0848b2753e9255f1a6b4cdc9a5a3e

SHA1
051469cd9e786b720ef6b70c35a1e184a643f520

SHA256
59089badd61acb47a07748c9018d3a959cf58f07de9902b0c45dffae3e566090

SHA512
518a78e77515b2fb21c5f66a760473a1f8ab5050e9bc65a4715ab178e568079f11f65fc173db59dd021b69fe0b606c42e50bf5f09a34ba2009a7b71e88033452

Download Submit
C:\Windows\Temp\{BD4B3CD7-E14D-49FB-8F6D-9D6B2086E4C7}\.ba\1055\license.rtf

Filesize
177KB

MD5
f1a281f74d3e91d16dd26d1f313cd8a9

SHA1
ddb2ca9032c5a9c091eac53b679f6ba428077b00

SHA256
f79108a254f876e0f6bbcb05a9effbe25dc252e7ea256bfe3fd28ceb79737f25

SHA512
484c5ca26275427e1fb74d3217a22a0e4aac409aba973e78d7ad68834e7ad1d86c7855d34b227925200f941d288dfc09477b2d7dfe0856810c6c847297b8d625

Download Submit
C:\Windows\Temp\{BD4B3CD7-E14D-49FB-8F6D-9D6B2086E4C7}\.ba\logo.png

Filesize
1KB

MD5
d6bd210f227442b3362493d046cea233

SHA1
ff286ac8370fc655aea0ef35e9cf0bfcb6d698de

SHA256
335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef

SHA512
464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b

Download Submit
C:\Windows\Temp\{BD4B3CD7-E14D-49FB-8F6D-9D6B2086E4C7}\.ba\wixstdba.dll

Filesize
191KB

MD5
eab9caf4277829abdf6223ec1efa0edd

SHA1
74862ecf349a9bedd32699f2a7a4e00b4727543d

SHA256
a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041

SHA512
45b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2

Download Submit
memory/1816-0-0x0000000000400000-0x000000000051D000-memory.dmp

Filesize
1.1MB

Download
memory/1816-40-0x0000000000400000-0x000000000051D000-memory.dmp

Filesize
1.1MB

Download
memory/1816-528-0x0000000000400000-0x000000000051D000-memory.dmp

Filesize
1.1MB

Download
memory/2476-459-0x0000020EC76D0000-0x0000020EC76D1000-memory.dmp

Filesize
4KB

Download
memory/2476-439-0x0000020EC7290000-0x0000020EC7318000-memory.dmp

Filesize
544KB

Download
memory/2476-442-0x00007FFDB5760000-0x00007FFDB6221000-memory.dmp

Filesize
10.8MB

Download
memory/2476-444-0x0000020EE16F0000-0x0000020EE1730000-memory.dmp

Filesize
256KB

Download
memory/2476-446-0x0000020EE1730000-0x0000020EE1760000-memory.dmp

Filesize
192KB

Download
memory/2476-452-0x0000020EE1940000-0x0000020EE1950000-memory.dmp

Filesize
64KB

Download
memory/2476-464-0x0000020EE1B90000-0x0000020EE1BE8000-memory.dmp

Filesize
352KB

Download
memory/2476-458-0x0000020EE1910000-0x0000020EE193A000-memory.dmp

Filesize
168KB

Download
memory/2476-456-0x0000020EC76C0000-0x0000020EC76C1000-memory.dmp

Filesize
4KB

Download
memory/2476-455-0x0000020EE1990000-0x0000020EE19CA000-memory.dmp

Filesize
232KB

Download
memory/2476-453-0x0000020EC8FB0000-0x0000020EC8FB1000-memory.dmp

Filesize
4KB

Download
memory/3616-334-0x000002DF5A5B0000-0x000002DF5AAD8000-memory.dmp

Filesize
5.2MB

Download
memory/3616-337-0x00007FFDB5760000-0x00007FFDB6221000-memory.dmp

Filesize
10.8MB

Download
memory/3616-344-0x000002DF40050000-0x000002DF40060000-memory.dmp

Filesize
64KB

Download
memory/3616-333-0x000002DF3FC20000-0x000002DF3FC28000-memory.dmp

Filesize
32KB

Download
memory/4284-66-0x0000000000730000-0x0000000000731000-memory.dmp

Filesize
4KB

Download
memory/4284-117-0x0000000000400000-0x0000000000685000-memory.dmp

Filesize
2.5MB

Download
memory/4284-319-0x0000000000400000-0x0000000000685000-memory.dmp

Filesize
2.5MB

Download
memory/4424-60-0x0000000000400000-0x00000000004CE000-memory.dmp

Filesize
824KB

Download
memory/4424-116-0x0000000000400000-0x00000000004CE000-memory.dmp

Filesize
824KB

Download
memory/4424-320-0x0000000000400000-0x00000000004CE000-memory.dmp

Filesize
824KB

Download
memory/4476-54-0x0000000005160000-0x000000000516F000-memory.dmp

Filesize
60KB

Download
memory/4476-90-0x0000000000400000-0x000000000073F000-memory.dmp

Filesize
3.2MB

Download
memory/4476-53-0x0000000000400000-0x000000000073F000-memory.dmp

Filesize
3.2MB

Download
memory/4476-42-0x0000000005160000-0x000000000516F000-memory.dmp

Filesize
60KB

Download
memory/4476-524-0x0000000000400000-0x000000000073F000-memory.dmp

Filesize
3.2MB

Download
memory/4476-41-0x0000000000400000-0x000000000073F000-memory.dmp

Filesize
3.2MB

Download
memory/4476-112-0x0000000002740000-0x0000000002741000-memory.dmp

Filesize
4KB

Download
memory/4476-28-0x0000000005160000-0x000000000516F000-memory.dmp

Filesize
60KB

Download
memory/4476-5-0x0000000002740000-0x0000000002741000-memory.dmp

Filesize
4KB

Download
memory/4476-437-0x0000000000400000-0x000000000073F000-memory.dmp

Filesize
3.2MB

Download