Resubmissions

21-04-2024 04:55

240421-fklzqacb2s 8

27-02-2024 19:38

240227-yctzgahf54 8

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-04-2024 04:55

General

  • Target

    pivot_v4-2.exe

  • Size

    616KB

  • MD5

    d3eefd47c4e9914b0628ce70eb8bc2d4

  • SHA1

    e62be539433ebab0c86bd6838503fb7a8fed81a5

  • SHA256

    032185876f05ee92ea39feddce819321acb8c4600b5d580396a7e5e29fbc82de

  • SHA512

    5e6be0e425f38958b3a34a9e30ac41c68a90cb50b3f6a331e18864dbcd96c847f8455644d2cb22bb8eae662d35855ce1733093b3dae7cfd26c1a7cc83d7be4ce

  • SSDEEP

    12288:1otU8AmKff8NWuJQnvv5Ehl3qRlWUFxuUN:1L8Am4f8NWuJQnH5Ehl3qlQUN

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 3 IoCs
  • Checks for any installed AV software in registry 1 TTPs 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 20 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 17 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\pivot_v4-2.exe
    "C:\Users\Admin\AppData\Local\Temp\pivot_v4-2.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4640
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:2836
    • C:\Users\Admin\AppData\Local\Temp\pivot_v4-2.exe
      "C:\Users\Admin\AppData\Local\Temp\pivot_v4-2.exe"
      1⤵
      • Checks computer location settings
      • Checks for any installed AV software in registry
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4556
      • C:\Program Files (x86)\Pivot Animator\pivot.exe
        "C:\Program Files (x86)\Pivot Animator\pivot.exe"
        2⤵
        • Executes dropped EXE
        • Checks processor information in registry
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:2332
    • C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivot_v4-2.exe
      "C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivot_v4-2.exe" /VERYSILENT
      1⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:3656
      • C:\Users\Admin\AppData\Local\Temp\is-ATUN4.tmp\pivot_v4-2.tmp
        "C:\Users\Admin\AppData\Local\Temp\is-ATUN4.tmp\pivot_v4-2.tmp" /SL5="$20258,860644,58368,C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivot_v4-2.exe" /VERYSILENT
        2⤵
        • Executes dropped EXE
        • Drops file in Program Files directory
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        PID:3008

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Program Files (x86)\Pivot Animator\Animations\cursor.piv

      Filesize

      7KB

      MD5

      2e923d0f7f805c9acb390a85a782d49c

      SHA1

      fb98065c9dc3baa5c3729f9540806075c8bf17fe

      SHA256

      5eaf90001d8e3b867473137e904af9baf29a0cb6dba41caa9242a368c28d0c83

      SHA512

      acba39c54635e2bbf8863da415a52290df64932a2529c0852d28f121cec033c290cce4dc7d007a5a65b8fede938b42a792e6a0c74fe9c7e952517af606014dca

    • C:\Program Files (x86)\Pivot Animator\Animations\dominos.piv

      Filesize

      4KB

      MD5

      08557c8776d979a1143cc674a5fafb32

      SHA1

      bac5104bd62594892404b61b5bd0e96f6c7f153e

      SHA256

      d8e45cdcd53ec9ad56fba89575c66701b01e009c4d371db092deecb1604a087f

      SHA512

      5b0cc057cecee04beb080fa44eea6657dff3e7b43a5032035ebe1554ef6f166aae6ef8ea189b829855eb2db7503e6195a9f6965f9c65b5cc9c4a0d1c25357a41

    • C:\Program Files (x86)\Pivot Animator\Animations\horse_revenge.piv

      Filesize

      7KB

      MD5

      834bb56ece2ec9942d38013d3bb60a18

      SHA1

      2025dea0b5bd24703ab641feabc716add70bd66c

      SHA256

      703046dd6742dc3e04113ef1c2beb8547c0f42501549372b8a17f954ace2b5a5

      SHA512

      c28f92c969e90247c733d80f7f676b8c63b6cf89ae9dd12d412e550bae2b2cd15e8fdd36d3d2321bfdbb65abc03c5168a8344cbd68dfa2a57d0fb3a16ad620f0

    • C:\Program Files (x86)\Pivot Animator\Animations\run.piv

      Filesize

      1KB

      MD5

      0e6fd71c488570c995703dbf2d3a718a

      SHA1

      b1cc92b31df5ff9947dd0e9fcd8e22a684dfa968

      SHA256

      371c96cbce8efafa6ab9ccc1f393b6b9280b899a92000a9b3061e3468b81dd3a

      SHA512

      f7a271eefd8191071d44298f6077df1da4de5c65c20dbb406b02a1fc703e4b3f3294edbffd0420df444b380de55f801f709120333a279cd29b2c8cf552bc5a60

    • C:\Program Files (x86)\Pivot Animator\Animations\sprite_demo.piv

      Filesize

      226KB

      MD5

      8fcdedbaba257eadd8be3cab322a9251

      SHA1

      6cfce653c35e3d9dada31d2f95a60f6783e6b680

      SHA256

      07e2827109f791ea15f3dc095593bbf9f8b04d897b84f20d721b0b12e0123d0c

      SHA512

      3e9eb3ca2f4cdc63552c989d0780a06174b6e4e9979b69224df89b61f94933bf7b6709ec14cc5bcd59dc671451af37cf128d181f9bd3c47a475c77ad4ce1c34d

    • C:\Program Files (x86)\Pivot Animator\Animations\tower_fall.piv

      Filesize

      24KB

      MD5

      62b0d70606a4007449fe4b874fe5439a

      SHA1

      0320443ba131e16e7082e7630335137920e6843e

      SHA256

      1af0fef50894c5aff61c2a521c872715105f25d2039aa37b1a048aa628373cff

      SHA512

      b3eda7099348978899b699897969f095b2d18184f9e0b1574c3eca5806f49ef2c8b43112f3ee94ec93c2809c097d52fb68f0afbf7fe703dcc42cfd4ac2986438

    • C:\Program Files (x86)\Pivot Animator\Animations\tumble.piv

      Filesize

      8KB

      MD5

      f93b4710781fa8957a8cc3c86929025a

      SHA1

      efa94134deac0e9edcfc028bdfc120d7ce58cb91

      SHA256

      c57ebe624a4cf08eb72783f7aa5f7f1f511fcea84791908be722398a69d8f7b3

      SHA512

      3224c1ceb84923a92788ae09a21fc202fb33b84c1ad9a81124cd9bdbe7335e19d2d16044ac1979518cd8124c593e888d4ccd4762bfb190df8178045320c128c1

    • C:\Program Files (x86)\Pivot Animator\Animations\walking.piv

      Filesize

      2KB

      MD5

      b2eda498c427624b00b8dd1a03939afa

      SHA1

      578d03967c0eb86a1f8dacf5ade9e16bbb09e24d

      SHA256

      525e4ad75a58ba9d20c3950878f27b2c55277e4d59757aa980a5b6260d2f16d0

      SHA512

      a2f1520839d3e0934bf7a5f7197cdda5321013e81471debf0cf89274f66b96a9d96b8611391474f2ce5fbded653dd6e19f88cd492a80f13a6b2d413e63ad3b76

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\1.stk

      Filesize

      98B

      MD5

      b07faa0667d4e1b152b6b6c1a6a213ef

      SHA1

      f54ed7e2ef74f3db06e6227dc97e233e5cad5329

      SHA256

      b50f24c56b0e88211311766d205cfd18133f5512552f712bce1064de5fecf624

      SHA512

      25518f1be750483b45491c20555c61a5c5deb85140b4b26d56f69ea2d08246137eebd1675319530bacf792336ece0c629d18047b151bb1bf5e9b3812ac2b4317

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\2.stk

      Filesize

      122B

      MD5

      df2d2f9fd01374d2083880f1081e2490

      SHA1

      c80afbc7ab6689cce7f9e16ceea55603204ef8a3

      SHA256

      91400bae7ff40551dbc8a8457ac121b2b1c55545a347b959b905f73bc55a9106

      SHA512

      c3a88521a35f0a4ad4a01288c15518eeae04d3356a13dfa48dbcfbddf64ba711b121573606868f0ae6a0d84c9bebf4594c24bccd8f73c15b1ab03d1d7a666b38

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\3.stk

      Filesize

      146B

      MD5

      46573091d7235213e5427d09cacb9ede

      SHA1

      1e67406a2ac01eb9d2e6cac4d2c91e493d4a024e

      SHA256

      f51a51e14b699469443c74a9fec16b98e2e9ec0b6ccb7a1fceeb3c1c7a74aeaf

      SHA512

      d3b56da371692058d45d75163096e826cd847c310de2ab4e1d12d56287e99efa2be5ada08e1e7276a0a908b25e38f67ae486eab6392472b719cdbcdd0a197c67

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\4_hL.stk

      Filesize

      98B

      MD5

      7459040a00a1f4a4dbce7207a95e2376

      SHA1

      ca24b527fdc1e14a73234e3447a839310d881971

      SHA256

      293fc2561325965cc5926e67c8d28b9fd2d15ba6fd7858bad249c9c9560b38f4

      SHA512

      189640cad709ca643a8da1d732d5f1bf1a6ad6b5bdcea0aa0fee08c3626a95f11099bdb8721fe2bb774320a12057e3afb1c9e8601296156968776c4619d73272

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\6_9_gL.stk

      Filesize

      146B

      MD5

      51340f06165bd5fcdd3056975121d165

      SHA1

      d41a725d73757227740f72f6c8b6e43f93068369

      SHA256

      e9a827495fd89d09759d01fbaa6f6cf8dbc88c7b157fc2b425f04a5be9b36b80

      SHA512

      29458e8846458b996f3c642cff2bd9e50cfaea590fcfc81355ed5180c3c3e2207afa567ec76ee234914e823c8af4d51d45f6f978a409772d0887b046fc14c67c

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\7.stk

      Filesize

      50B

      MD5

      32563fb9ce429f8b997b467307ab53ec

      SHA1

      75ae297a0524dc0bfb7be24d022bd2d3ec13dcd5

      SHA256

      14b9431faf7c94846f9d9ddacf515ccaa07dec721e156231cee7867be0b60494

      SHA512

      bd7a9785b3e87ad00735f20c094e5496bca0162f46f431f362bfa884eb4ce1311aa75bc05c3a28a2a0fe0967675ae841394a337a01063b77d6a6a85175eb7898

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\8.stk

      Filesize

      146B

      MD5

      58c604e602bdbc3ed6aaa0b4192d78f3

      SHA1

      2059f75836356cdec64c8f397869447aab03c4f8

      SHA256

      b2f1a12cab5d033861a52cb7deb0b7e0a7cf09054edb924dee6f5e7c83ef296f

      SHA512

      8cb01e78d012738f3806536a79eeb5844202446a7f3fc9ab356341cc081d3736881427cd27580c6764d8974d3e5010c385b7e35b0ef36afa0ca71687eb16ef9d

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\A.stk

      Filesize

      98B

      MD5

      7f90b5b326d4bd9bb02a979903820aa5

      SHA1

      a5253efb0f9ef8a29a9ee269f6a403bac3135a76

      SHA256

      5188f0a5d059a11fe90cfd446b7c0444cd106fd4741199d1f96e1c4826c976a4

      SHA512

      6c18b5a89f0476661a02c7b0065b573b56b8bdb3ec2c92908725bc18947992c4c9ca1d93e39db41318dbc1b372950c5fc1b8c20550d32babb97c492d870a0c09

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\B.stk

      Filesize

      122B

      MD5

      ef27da9922682713c00bef188df0e45c

      SHA1

      f0eaf737e92f1022bb102d5f85ac5adc096bcfc3

      SHA256

      b4f10213fd809fb3b9f952dff8a0706a68d64377f966ab6d1cd91854221ff5e1

      SHA512

      4984f4d5c44ae9324c33c97b8ede94369b45eb90dda23ff50c7483df32163ed9873d23678e6881113156b8b29b467f801850fefefb145ff2b9777779a69ca2a5

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\C.stk

      Filesize

      98B

      MD5

      11cae03f50507ef502d2893717973882

      SHA1

      b01704b7fd383cc4ccc27358d7ae75eec535adf7

      SHA256

      1995eb284dc1a1ae5f2d5da9695ce7a391ba8a8e95f7030efd1696133567bb16

      SHA512

      deca421c0235649655e1d03cfd4106555070a7f735ae1a172b9e8ff8fa980490651e457baf4e72fe3d1e982ac667139d736ed5043f20504ab3648a2062e0db57

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\D.stk

      Filesize

      74B

      MD5

      50eee6e15b191fa40b0dccd6832837e3

      SHA1

      b7db8bbd5746ee89a3d995663445a796649aa91b

      SHA256

      fbc1d1ee389f2ab03604818ce31d3d4450824263361c4430532502b21c22ec8f

      SHA512

      7df1c3ed22c5a88dafe8a0213fef711f29b815e4de0bf410a406b977693f8ac6d185c69d61f669eb6f3f33c5742d4bc502d258a6c106d526cddf2d1b85ca9447

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\E.stk

      Filesize

      146B

      MD5

      98195fc67981016b715bcb297a90adc5

      SHA1

      082d8fab7376bebc5ba6e5ffb75593eef1e5c0b0

      SHA256

      162a1d28b0e86cedb275a5eb6adb6d20db05e6137fdfd6909f18a03a83ff683a

      SHA512

      63eb48b83f437cff58b64446df39af6e421c3d0f9208c73ee373e757e0b561b46cf0cc96635af0568defe2bf914694b1585347eee2cccfad17efd8c4d6861153

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\F.stk

      Filesize

      98B

      MD5

      80130e7111ebb75481908f90c354cb97

      SHA1

      46821326b860c75d678d1a0b4258d36588eb301e

      SHA256

      556fb1d92fd0eee80a8ed0632c9ba666808bc41cbc9211ff1fccd33cf6f0aab9

      SHA512

      1d3c1685ff9b8ce3facc8c727293447e25aa4f3da611a337a08eee21e3b6b95967b7267ec9bb995023d766e91dc9034fec678f51438201cf5e35b72ced83b023

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\G.stk

      Filesize

      146B

      MD5

      16849e7537adfeafad9e58b70816be0b

      SHA1

      b3d0bdb190b408e401c19effc884076467f0702c

      SHA256

      865cc0f494877fab698dfa9f00da2600da3ddf39db60aa6560e95ab8a8148f28

      SHA512

      85f2e07eb01e3dec700556163aef2bbf528781e14d10a71545971c8f7b00b740aa89daedc70fd4e19b2ff1855f01cb379c844694ee28733cef85c8514bd2d190

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\H.stk

      Filesize

      122B

      MD5

      81f1b941b96530432d740274f806914e

      SHA1

      bf0748cad4bf15312f98ae60d5726813bc92cbed

      SHA256

      e62cf61f61a88174e2951fd7b670f4a92a503f20a3f2aeb96a915191c5a5d193

      SHA512

      aa2eda9fe8f114fa10551f3648b695d24469fbefaaa485b27512772ead56cc487d224de93b33988ab85936d3c6921e22ebcd1b6289b113d11335ee72a66c19a1

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\I.stk

      Filesize

      122B

      MD5

      ba393471faa9590b11b7423b832cfd3c

      SHA1

      d3f575675a6c2ab4297060fc9ac4d889584ec4d2

      SHA256

      c301e32beffd94c6ace558c764238b2add3b34696c7396f3f86ad5f96151e974

      SHA512

      ba824af5f2a72ecf9452d725d27ed7c60107f03c6892f2cd92e58269de647aff36c325123790c5d0aea661edee7a56b3daa55e1154445b4030c3350de99e177a

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\J.stk

      Filesize

      146B

      MD5

      a615cc4de152df246240743333247f61

      SHA1

      0e447a4d98e34ab8fc7dc28b53414d4837927990

      SHA256

      f808cb165149ac646a2e7762e1253fcbec243031dc23456341edc87fbcb2489b

      SHA512

      a750cde2fe4c6e40b923c0f8c7c3db569c5091ff99a12ba5cdf48b2a127c23877fa984b69ab0eab41281b9b25dac74756ebff229ed9b47abf3995f844f323c68

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\K.stk

      Filesize

      98B

      MD5

      ee200345873a8801c5797233121203f0

      SHA1

      32676af0589025ec2db73f993af1afdc8f582876

      SHA256

      37e8486e69cb021a51259d9280f88cd9f90f0ceb1a212cf9ff6bfa3c8b736a5b

      SHA512

      c6eb16703affc74c461ab5c1eae3c0d5cc02b144f980102162c92c9be79f7a1acc1d62f9c4a98a68399200bb99b06b1681cdc64ff394a67e92581fcb4c66a90f

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\L.stk

      Filesize

      74B

      MD5

      a08a8e84783cd5ef34579eac9d49ebff

      SHA1

      5a4166c9a0fe7642a1fd3092884f5047b635ff6e

      SHA256

      cde1bb29a5c2addaff15d7d9e5aaacbdca90ee630f290d798944a4963eee9b96

      SHA512

      d51697ccce2d279cea4cdfa9699834fbc4456bb52b4286b08dffe702ba039778a063623a4b3abed0146cf8a04883d873bbeb625c975d882019e82962b3c8a9ba

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\M_W.stk

      Filesize

      98B

      MD5

      4100522f0e682d35ba6a70fad280e592

      SHA1

      e654af8677bdf3ecf05509e90740a1c77891c31f

      SHA256

      5a031f402539377c7b006bad0399dadf92c5c5241b646affb04400b69c32084c

      SHA512

      95a978c92fe55fe1b785f924c5faf16dc957ca685c669bb9e8ebee28eccea17f6be5f42abc38417e87fdc2b60bd8623b36bc1df52f05301059b42df523d5ef9e

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\N.stk

      Filesize

      74B

      MD5

      3c2d6adcc45500f77bdd3dbc1528282d

      SHA1

      9cb228038a37aa8cfb6a1822c1e0c3fe1bd2a67c

      SHA256

      e69b2609f285ae76058562a32c9b0b28031cf3615c8a8502756c8c58fb096579

      SHA512

      8c13db7bdefd6e57c3e0134cfe636043e25a06ed5eeb1f234d84bdb7153d3bce765ea4b29499fcce138ccc76d7dea3011b50d1803213cc60ef5d7137a5ce8d51

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\O_0.stk

      Filesize

      98B

      MD5

      4d0f916594afe9fb2bef31525c13d94d

      SHA1

      845734ebb3e820963d08e8b8c368075e254eaf2b

      SHA256

      ac7d9f5abedd9c31155b3cb70d4666ccc058d7b9f00e23b4313e6a1abad631cc

      SHA512

      3b058b7e2cfc68163624d55b77241700e41ea0d47b1ca4d31b1503646238a4861ef3a25d3196e404b3015e394256a714f3f0cc6552985c8aec983bb487e72718

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\P_pL_bL_dL.stk

      Filesize

      98B

      MD5

      6c8f0b61d8b9b1e82a55428f301925b1

      SHA1

      54c1b24cf82fc9d36f83e7358cd2dc0763b6029e

      SHA256

      e11d85df3d1e7fe369ecdec76d396672bc1eb89c2d2ffdd06dd96015bd7cab98

      SHA512

      cd147c39ad024041afb6638d74a9699e136fe492c90284429ed66c7a626e7781c22c5eb1fa471de4650247d9774f72b0e1ab931b1eb296236ecd42f1ed10d4df

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\Q.stk

      Filesize

      146B

      MD5

      21c8dd618bff000595566632a000d741

      SHA1

      0a1b1060678fa2e4d68e265d35eaebc7656dfcc9

      SHA256

      b76632d4cf53478481d3e96f63f204a9981ee28c85155f16f2bcf4f3b78831f4

      SHA512

      425d5cb46f7001418d26262c9b46179e20288429bdb1d37aa6b9a240195d1a5906fe014c54f90fd49cfdc84e348a68b9564dec65fd35bdd9d70cd7c0d11f0373

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\R.stk

      Filesize

      122B

      MD5

      ef2c16039d3be46ccceaa7f2e65998cb

      SHA1

      5f7946d79bbc4350d2e531f1f2ab51addbbea1a3

      SHA256

      da4514d3bbdeda80c3bc58c5dfd227c1bdc216cf7b39a1e68cdd9c2915af72d9

      SHA512

      0e4db55061fd5cfee71150bc6021ee6c99928fa5a6d7322911bba2f6c50efc0c480e76bccce77819c699d2cda521c3b3a2e576a491e5563a6e8e1bc7b681afcd

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\S_5.stk

      Filesize

      122B

      MD5

      9903faafbace60771a34c6ddb2465845

      SHA1

      9127eb1ee59701c4be4f5ce9aa44f61205b54119

      SHA256

      3e3e8b703f99f694c2d2daf4080efa6804b36e4ae6e9f4c34bfee70c7cf7ce44

      SHA512

      947c84d2c6dea37d48cf500cc2f24f4835e2457c9786f32509bf5287b12dc0ef18a0a2acc6a76027f87db6e5e3884e404ff3e5777c274ae1385d6962e1e42ee9

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\T.stk

      Filesize

      74B

      MD5

      3dec83be7a6f69a5071c40ab4e43d547

      SHA1

      1ca325bb18b2fb0d0ea85cd6cf6219479fd727be

      SHA256

      3ad276aa6090c6218647effd257ba885d5f62d3d92b843fba144f0cd9fa7553b

      SHA512

      5d2a1607ecb5cfbc0cd40d404746600206775525120b649afaf4996bc1e2c52c60d9aac5471a50b48ec03f27721dcc7d34e8f33b4ce6cf7611fc82ef8c071934

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\eL_aL.stk

      Filesize

      146B

      MD5

      1306f63cdd86ded97ba1213da36f307c

      SHA1

      81192e4045e861e59997d47c180ef5c76a8c6917

      SHA256

      35e3ffc4ded073fb1a7364ca258d46f9e67b13b1ae76bc2d86ceec869720793b

      SHA512

      99076add14d1312d7e76e2097ee0d9c31a75762a3de2243e9c3fcb6fd780b57e1a3d105f34b32b4a940d17d8a2b51dc38b2ed9524f690daf767aa1965a4182a4

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\fL.stk

      Filesize

      98B

      MD5

      fe41a987f22fb3c5712587d296fbb9cb

      SHA1

      cc454df8c3660df5829ea7189f6e15cdef948d76

      SHA256

      956f47d967208841d912f455c42362403cfa4c5ca3876fdf4c1d45ec777e98f9

      SHA512

      e421fd732b68ccd0b7d6e43ce7702af143d3cad863f36b64a59df0415bba74d9772393fd967c812da1190061a822ca093bffd1ae7da8d2d8ce94d4c94b27c61e

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\hL.stk

      Filesize

      98B

      MD5

      9cab37e539c44008443c3fe9fca413d2

      SHA1

      c96c55560ac632bfd2481599cb20252e09b36a84

      SHA256

      2a55e9eefd089d2dbb4914a5507e86e429b1331c589f5721d2d45dcda85baf3b

      SHA512

      f1698509576f93c53dcb0e723fb7bab6ba324c2e38e1c25cfd722bc1b70c70d074d1d05954628bc2327579670e3caba998b00b6c47d58697a73d0349395c704e

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\iL.stk

      Filesize

      74B

      MD5

      fe7489fec00a24e19a97127fba1a05cc

      SHA1

      a611ba69fefccf94acbfd769e3d46b1990aa40d9

      SHA256

      498a8ecfdea877441b014e46dd0012798878a067cbbd61707c799d9ca306062f

      SHA512

      f64246a3d61606287b7d1dc9e95651000f61f26dc6ff11420a9828758d7ebdeb6864cab78b99952b4106fa614aaa52ef46f61bef998717c3dc7a25e5f4fb51f1

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\jL.stk

      Filesize

      122B

      MD5

      167a303db7eb003061fedb3953f108fb

      SHA1

      853bae140b615b9e0bddf30a1eaaa2ea1e9d6c1f

      SHA256

      a8bead17591efcc63a6eb5a0e1dcbb4d02dd30ffee3ebad5088801ca5f879583

      SHA512

      85b23ac5b15517579190cbc820f7401a933676989a2a7049dd6d90256cb2e7d2f1ff6abc1b6dffc75eec7a6db9cae0588e595bb542a195257a269430ccda9394

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\kL.stk

      Filesize

      98B

      MD5

      fe92a26d23a47b0df1f48eeb20ae88a1

      SHA1

      151ef3f567c02e88182d1592aa7eef986db2eb17

      SHA256

      4bd3e91be5e933dfb4c96378dd5a1a5db8c14defac3d99e47832afd7bd7f8f53

      SHA512

      7e6737d42ff2c99e50751f47599a7a9eb5c7d3e78cbdbea2a7dcd5699640a128a7935bc9955303597b83b1f58fc3fead864cdb3830ab6f940b78b41cf7e2cba0

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\lL.stk

      Filesize

      74B

      MD5

      08438000ed5510b72f2a821e48e09696

      SHA1

      d0d7f8c1bfcea25e305fca00c557946643c604ae

      SHA256

      6103c9a3a180f74f3eeb6228ff5cd53678ac667d3c5d2fed899fb20f2caf973f

      SHA512

      7894c4109f9d4a4baefee4557730d85f38119839f2ac976c6e3b1cef50c8fa2794bed3726143d8167252f5476191e457278da749bd7a3d8dc9dad73bd4844704

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\mL_wL.stk

      Filesize

      122B

      MD5

      be9b46d832e303f7e29d1f154a2bf15d

      SHA1

      85bafeccfc755e3556effcb62a3b0a456b7a7130

      SHA256

      e2d8727f6e42f4e21e3536ec4b7c97f058833a8538bcdc9d6063295801eded9d

      SHA512

      6a65c6c8783935fdacd5402f65a63f036df18d0c580750dcf43b8a887d46c533527214cad6f3dc07c2564947fa1a5decaebfe9ce37498d7105a1ce308d703d15

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\nL_cL_uL.stk

      Filesize

      74B

      MD5

      68fc84f019515ea92ea4265324522bf7

      SHA1

      adc2a7578b250c926a9447cc0074f5ddaab6aded

      SHA256

      99f36ee5a6c90e78363c70c29238bb4d4d0c4de2ecb3a06b0fa141a212ea8124

      SHA512

      aa0b732d6b24d7712e263ba5bf778f2b67ae43e9a75faca754930a27ddbc6b4a07018629d560fa757a251c75458df9692a43b80cda74ab6b08dc774faca51315

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\oL.stk

      Filesize

      98B

      MD5

      cc989ba1afc220b3a7310b749566e5f2

      SHA1

      05904d06f8b0eb76607af5885b8433d3c71eee1c

      SHA256

      685b9561bde25a1d1d111eeb41048ff5c19c0786df50fd84d41f507c9f998d46

      SHA512

      7c50e008ea5de9f9bccaeae9478b689a154224358fbdfb84eefdb2d378fe0758467da1bd8b10deb64b71d81d5c68ecc7e9140716e47676d8a6674c83c6912ab1

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\qL.stk

      Filesize

      146B

      MD5

      6ffcebd53fe5131ed980aa5fb6b51377

      SHA1

      4a2f2be1582086f96032e672011ccf31f3139393

      SHA256

      d66bf3f86afd77ce64cd365b5178a0b3c105e09f444cb664637a5e8dc42dd1fd

      SHA512

      b6f86dace86d8929dfd773e115ae85c8ee159cfe9f9c1f2b52683f3259e434035c783fb336ce10c712ccd67ade5db127a0eb6d3020118041a8e7a0304faf8501

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\rL.stk

      Filesize

      74B

      MD5

      9f6704c407efa6449f3c8569e5dfe336

      SHA1

      d1117aea7b11ef7c5506c0becd42d5cbbb2a348e

      SHA256

      13b49bdeeeb4a5549623c7a0ee76734af15dc26688b72e87bfe927d4489e3dea

      SHA512

      a644ba51eda2ff47f7b40582bfd55a824677a9e007dde4d0cac7936a0ff2140dab4db0ed2255f311dc949b9a4200ae70702721787b6e4732e5592db1d1261f1b

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\sL.stk

      Filesize

      122B

      MD5

      94583b4a3ebfc6ca15cb5f45b0ce12dc

      SHA1

      4004ada882e3ddffbf88a1d313698d89657c82b6

      SHA256

      e22c89b9325cc2de97db3cbf5e25b3648e286f9274a2fb208beab9ba96a5b1be

      SHA512

      78ac4731838e9a23f168627961369562b0815b7b4960a95e64330ad140bcb8712ac7fe70f75af8c3b9e4772d98b701611eb677af9e757e73d05d2f32fabcac6b

    • C:\Program Files (x86)\Pivot Animator\Figures\alphabet\tL.stk

      Filesize

      122B

      MD5

      810dfba98e6b4dbcc3daafe29a2c9e32

      SHA1

      874ac547d3d22c6a11b938d602d9413131e35e95

      SHA256

      0adc19bf1adbfaa40149a68fbaa5306bb6bd8980f29a7fc4b89322a7b31e9d76

      SHA512

      e35d6183fc9de0c816358dea6af4091fa52dac8eb122f068f559ffcb6749c74d08764629f754b418d285ececb0a09b778e60d05908c78b1d951c39da06150075

    • C:\Program Files (x86)\Pivot Animator\Figures\clock.stk

      Filesize

      674B

      MD5

      bf204760449e39d33efa312a2f027ecb

      SHA1

      c57203280b902425c6b9243a7f645b74d2a9bd00

      SHA256

      93babe694a9e14b3aefe3a900ddc8623d4a8fe938a671323bf5cfdf68bd81afa

      SHA512

      85d4ac1b80e2c31dca3efb2a1a920649f410a38cbaab4e623761eca0cbcfc74eacf55fbd894d484f03715d491472343f1422da218ec459fa7f37326965d6a29f

    • C:\Program Files (x86)\Pivot Animator\Figures\cowboy.stk

      Filesize

      410B

      MD5

      44207f61be6cbecb2e942fa214ab7ce3

      SHA1

      f05ecf61b19ce943513916aba67823d8e6ac63e4

      SHA256

      2914177d015fb201b423485522df207efe680fabeaf811f1cd59362374344563

      SHA512

      4393917897ab29024919a03702f397f73deb38c0ced1576d74b32e751a3d9bc4f0ccc19c69a5ebd97346759df25df5f22cf4408403ad17b096bd5bb6d9d415de

    • C:\Program Files (x86)\Pivot Animator\Figures\default_pivot2.stk

      Filesize

      242B

      MD5

      8d61ed789696fb6fc57460c903f6bcd1

      SHA1

      8fb0ac3f02cd1d5a1430f6c892b23779d2362af9

      SHA256

      91a2d8f040f4566f8c50ccbe7faf800463cfab72b77315f112170db0fe953dbd

      SHA512

      07e063e56a68a19b5faf9df56ef0eb83a36bcf94674e03f5d9c1ea7606e7624be850ebb8caccfd1b192cf90f180112841b17768413c882f3f0b67dbaeacb0768

    • C:\Program Files (x86)\Pivot Animator\Figures\elephant.stk

      Filesize

      458B

      MD5

      4003994633de0353b135ec2117f4cfbc

      SHA1

      b637213dfdd99aea0eeedd54818c713d4543bed6

      SHA256

      7f58987b2a7fea67ba767a67519e23408001755ec11b764304f41ae86b47d8a1

      SHA512

      71579e0290b7f72fb7a036f1b9b3bd69bee55977152069bfcaf8298e9cc00b0c71f6a80e95923cbb2be8c012ea7ae651d19b1442e3cf48e6c9c392ae6f8784e1

    • C:\Program Files (x86)\Pivot Animator\Figures\horse.stk

      Filesize

      386B

      MD5

      e7bfc2164ed2cc976eb0e6a03ba1666e

      SHA1

      2f07b80e72d9efe4f2be07d66376149b88d84162

      SHA256

      1e92f7a981c1530ae9d779505c37e663f13b487fdf3e76e39a380c815ca653ed

      SHA512

      aa56543ff08b2239abeaa5616be67270aeb415b5d6bb4de96439b4cc9de139529872411dd46fe7d06f0f9a32efff6c26029e5ea07c096a58ce33397d1f6109ec

    • C:\Program Files (x86)\Pivot Animator\Figures\ladder.stk

      Filesize

      506B

      MD5

      890e0b71d7bb2ecc2e8ab582142a6dea

      SHA1

      9df816c4b27c9d3ebd8efa60105b286e18d55817

      SHA256

      928db977e9d6403467a28f3b27daf6e8d5d014b7cc24da5a49bad32a71f7b521

      SHA512

      9844dbf4fd4d1338c65e036bbe79792dabaeb1a0be1044d52d80ecf0c30a14473b8a028244916dd39c7ce4008008b0e5190696e898184ebb302b920d1dcf8174

    • C:\Program Files (x86)\Pivot Animator\Figures\man.stk

      Filesize

      290B

      MD5

      bc38e45306c140bfd2cca0f0e429a711

      SHA1

      51b71da52da155bbfe36a31aab59f4ac6c54de03

      SHA256

      402482091dc89f95a39e4114b2051d0b62b51b23436d984604fe722d816cedff

      SHA512

      62b80f1860573cdcd63f9ad604a5b073f7bb39c244a348a3c5b3eab800c4c0086b2c6d5fc340faace6c4eeae50eb2c411546ebdc4e2d4d4cb67fff9ae442c55b

    • C:\Program Files (x86)\Pivot Animator\Figures\man_evolved.stk

      Filesize

      440B

      MD5

      43c05d8c2be77c118572b875abb9b062

      SHA1

      96799226803a2c1e4adb0b3524a42bf4b92e6b3d

      SHA256

      e829d27438a81d7d81581853ba2cf01393257151aedda00d19bbb5d154f3bc46

      SHA512

      2b618f17376503474981e4f70a79683780b49542920996692b10aedb55b1fa1f2a88e0317f1b08c7fcc382cb998742af415fcdb7c782c157c590937e772e9a61

    • C:\Program Files (x86)\Pivot Animator\Figures\man_rotate.stk

      Filesize

      266B

      MD5

      64e43db5b1accf836f361ec1f1b552dc

      SHA1

      ff09eefd7153d73fc05b09f10e78a1dc989b0ef1

      SHA256

      b58b11b3aeda16a1d8b03dcdd00a90b1ea4551e55a9063cc5b197034f65cef1e

      SHA512

      3f6a48c17ca813c77e27e7f24a4d9a457503c51a2f834783e67b88538cbcfdb1d7e811cf88f91209e6664b7a7ee673fd4dd8052ffef27c97092913d8aa853adc

    • C:\Program Files (x86)\Pivot Animator\Figures\realistic_man.stk

      Filesize

      362B

      MD5

      1a1c27977e828b5791821dbed308939b

      SHA1

      ceb455f00c1d5c81c4391f35a3b22cf3df55816a

      SHA256

      37d2d982ef098dc2a0f04da28cc155132d9350693db9b593107370da1d643a4a

      SHA512

      2142ebc80fa6d8abd5a22f4304713a64ab9ce459b5722e8ddeead91f4a1e2e84dfb8ac2fefbc6d1f995b9724c806aef6a9316546166bb0ea84dcc771c657520f

    • C:\Program Files (x86)\Pivot Animator\pivot.exe

      Filesize

      1.2MB

      MD5

      08ae4965fa6de62edf71d2d8eca71fcd

      SHA1

      f8fb52c140038d867d595bd7cbc530981b10ba9b

      SHA256

      877a849a0050273c0a5a19704d1acf5ad4fe4720c3f2dfe5f2c7d89cb0c5b594

      SHA512

      8b29675fcbdd5e07cfcd193cb7cde2f33dc0e49a5c311e58e6627f7a2adf3c934d3f21e6ac9ee3bf1381c85c94e9481318a285947b08f8a7a4accce8f2696e9b

    • C:\Users\Admin\AppData\Local\Pivot Animator\Pivot.ini

      Filesize

      429B

      MD5

      f189fe87243276c78817eb51fa7ae14d

      SHA1

      c7947f292a3ce0e91005daab0d8499ca841ab1e9

      SHA256

      b18f75975605d90b268959d055f15e61a2674d7cfdf799f79c7374329d12b285

      SHA512

      d11a5eaef09599670bd2caef9872bdf67615b534bc2b9ca597cc02c1b452a6cb90f2fa3215a813e9ae6bd87cf99b256b09d46185feeb1caae246f97d4a1cbc4f

    • C:\Users\Admin\AppData\Local\Temp\Pivot_Animator_files\pivot_v4-2.exe

      Filesize

      1.1MB

      MD5

      9d9b0c3774e93aefc28c07fb27a21745

      SHA1

      2313e78cba6b534f9b49d063c960d4bf37214bef

      SHA256

      b9da128ff6276692922463e4e010f169b67fdc11befc54187ad0735ac4a81065

      SHA512

      2c3b33174e05fb6203598ccea8284beac7d3d6ba2d77e3848df7dddb8031153e2e1168c7a6acc6875ae36399151ab3906fb8cc3ab82183138f8a306042264301

    • C:\Users\Admin\AppData\Local\Temp\is-ATUN4.tmp\pivot_v4-2.tmp

      Filesize

      702KB

      MD5

      1afbd25db5c9a90fe05309f7c4fbcf09

      SHA1

      baf330b5c249ca925b4ea19a52fe8b2c27e547fa

      SHA256

      3bb0ee5569fe5453c6b3fa25aa517b925d4f8d1f7ba3475e58fa09c46290658c

      SHA512

      3a448f06862c6d163fd58b68b836d866ae513e04a69774abf5a0c5b7df74f5b9ee37240083760185618c5068bf93e7fd812e76b3e530639111fb1d74f4d28419

    • memory/2332-479-0x0000000000400000-0x000000000053A000-memory.dmp

      Filesize

      1.2MB

    • memory/2332-257-0x00000000023F0000-0x00000000023F1000-memory.dmp

      Filesize

      4KB

    • memory/3008-46-0x00000000021F0000-0x00000000021F1000-memory.dmp

      Filesize

      4KB

    • memory/3008-252-0x0000000000400000-0x00000000004BF000-memory.dmp

      Filesize

      764KB

    • memory/3656-41-0x0000000000400000-0x0000000000415000-memory.dmp

      Filesize

      84KB

    • memory/3656-253-0x0000000000400000-0x0000000000415000-memory.dmp

      Filesize

      84KB

    • memory/4556-17-0x00007FF807880000-0x00007FF808341000-memory.dmp

      Filesize

      10.8MB

    • memory/4556-21-0x0000000002560000-0x0000000002570000-memory.dmp

      Filesize

      64KB

    • memory/4556-20-0x0000000002560000-0x0000000002570000-memory.dmp

      Filesize

      64KB

    • memory/4556-19-0x0000000002560000-0x0000000002570000-memory.dmp

      Filesize

      64KB

    • memory/4556-18-0x0000000002560000-0x0000000002570000-memory.dmp

      Filesize

      64KB

    • memory/4556-22-0x0000000002560000-0x0000000002570000-memory.dmp

      Filesize

      64KB

    • memory/4556-16-0x0000000002560000-0x0000000002570000-memory.dmp

      Filesize

      64KB

    • memory/4556-15-0x0000000002560000-0x0000000002570000-memory.dmp

      Filesize

      64KB

    • memory/4556-14-0x0000000002560000-0x0000000002570000-memory.dmp

      Filesize

      64KB

    • memory/4556-13-0x00007FF807880000-0x00007FF808341000-memory.dmp

      Filesize

      10.8MB

    • memory/4556-258-0x00007FF807880000-0x00007FF808341000-memory.dmp

      Filesize

      10.8MB

    • memory/4640-11-0x000000001B3A0000-0x000000001B3B0000-memory.dmp

      Filesize

      64KB

    • memory/4640-10-0x000000001BB10000-0x000000001BB2A000-memory.dmp

      Filesize

      104KB

    • memory/4640-9-0x000000001BAF0000-0x000000001BB0E000-memory.dmp

      Filesize

      120KB

    • memory/4640-8-0x000000001BB30000-0x000000001BB62000-memory.dmp

      Filesize

      200KB

    • memory/4640-7-0x000000001BAD0000-0x000000001BAF0000-memory.dmp

      Filesize

      128KB

    • memory/4640-6-0x000000001BA50000-0x000000001BA62000-memory.dmp

      Filesize

      72KB

    • memory/4640-5-0x000000001BB90000-0x000000001BC42000-memory.dmp

      Filesize

      712KB

    • memory/4640-4-0x000000001BA80000-0x000000001BAD0000-memory.dmp

      Filesize

      320KB

    • memory/4640-3-0x000000001BE20000-0x000000001C348000-memory.dmp

      Filesize

      5.2MB

    • memory/4640-2-0x000000001B3A0000-0x000000001B3B0000-memory.dmp

      Filesize

      64KB

    • memory/4640-1-0x00007FF809050000-0x00007FF809B11000-memory.dmp

      Filesize

      10.8MB

    • memory/4640-12-0x00007FF809050000-0x00007FF809B11000-memory.dmp

      Filesize

      10.8MB

    • memory/4640-0-0x0000000000750000-0x00000000007EE000-memory.dmp

      Filesize

      632KB