Analysis

  • max time kernel
    102s
  • max time network
    102s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-de
  • resource tags

    arch:x64arch:x86image:win10-20240404-delocale:de-deos:windows10-1703-x64systemwindows
  • submitted
    12/10/2024, 15:34

General

  • Target

    https://www.dvdvideosoft.com/download.htm?fname=FreeScreenVideoRecorder.exe&ls=topWinPrimary

Malware Config

Signatures

  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 21 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
  • Modifies registry class 64 IoCs
  • NTFS ADS 1 IoCs
  • Script User-Agent 1 IoCs

    Uses user-agent string associated with script host/environment.

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 40 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: MapViewOfSection 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 41 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Windows\system32\LaunchWinApp.exe
    "C:\Windows\system32\LaunchWinApp.exe" "https://www.dvdvideosoft.com/download.htm?fname=FreeScreenVideoRecorder.exe&ls=topWinPrimary"
    1⤵
      PID:3800
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
      1⤵
      • Drops file in Windows directory
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      PID:3740
    • C:\Windows\system32\browser_broker.exe
      C:\Windows\system32\browser_broker.exe -Embedding
      1⤵
      • Modifies Internet Explorer settings
      • NTFS ADS
      • Suspicious use of WriteProcessMemory
      PID:2776
      • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\FreeScreenVideoRecorder_3.1.2.1206_u.exe
        "C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\FreeScreenVideoRecorder_3.1.2.1206_u.exe"
        2⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:756
        • C:\Users\Admin\AppData\Local\Temp\is-VPT99.tmp\FreeScreenVideoRecorder_3.1.2.1206_u.tmp
          "C:\Users\Admin\AppData\Local\Temp\is-VPT99.tmp\FreeScreenVideoRecorder_3.1.2.1206_u.tmp" /SL5="$601DA,36029068,900608,C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\FreeScreenVideoRecorder_3.1.2.1206_u.exe"
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Drops file in Program Files directory
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:2324
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\LAV\LAVSplitter.ax"
            4⤵
            • System Location Discovery: System Language Discovery
            PID:4656
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\LAV\LAVVideo.ax"
            4⤵
            • System Location Discovery: System Language Discovery
            PID:1800
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\LAV\LAVAudio.ax"
            4⤵
            • System Location Discovery: System Language Discovery
            PID:4600
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\Haali\avi.dll"
            4⤵
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:1528
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\Haali\avi.x64.dll"
            4⤵
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:2092
            • C:\Windows\system32\regsvr32.exe
              /s "C:\Program Files (x86)\FreeCodecPack\Haali\avi.x64.dll"
              5⤵
              • Loads dropped DLL
              • Modifies registry class
              PID:1364
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\Haali\dxr.dll"
            4⤵
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Modifies registry class
            PID:4568
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\Haali\dxr.x64.dll"
            4⤵
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:3884
            • C:\Windows\system32\regsvr32.exe
              /s "C:\Program Files (x86)\FreeCodecPack\Haali\dxr.x64.dll"
              5⤵
              • Loads dropped DLL
              • Modifies registry class
              PID:4308
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\Haali\mkx.dll"
            4⤵
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:1228
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\Haali\mkx.x64.dll"
            4⤵
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:4708
            • C:\Windows\system32\regsvr32.exe
              /s "C:\Program Files (x86)\FreeCodecPack\Haali\mkx.x64.dll"
              5⤵
                PID:5188
            • C:\Windows\SysWOW64\regsvr32.exe
              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\Haali\mp4.dll"
              4⤵
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Modifies registry class
              PID:3692
            • C:\Windows\SysWOW64\regsvr32.exe
              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\Haali\mp4.x64.dll"
              4⤵
              • System Location Discovery: System Language Discovery
              PID:2264
              • C:\Windows\system32\regsvr32.exe
                /s "C:\Program Files (x86)\FreeCodecPack\Haali\mp4.x64.dll"
                5⤵
                • Modifies registry class
                PID:5248
            • C:\Windows\SysWOW64\regsvr32.exe
              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\Haali\ogm.dll"
              4⤵
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:1936
            • C:\Windows\SysWOW64\regsvr32.exe
              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\Haali\ogm.x64.dll"
              4⤵
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:224
              • C:\Windows\system32\regsvr32.exe
                /s "C:\Program Files (x86)\FreeCodecPack\Haali\ogm.x64.dll"
                5⤵
                  PID:5236
              • C:\Windows\SysWOW64\regsvr32.exe
                "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\Haali\ts.dll"
                4⤵
                • System Location Discovery: System Language Discovery
                PID:1596
              • C:\Windows\SysWOW64\regsvr32.exe
                "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\Haali\ts.x64.dll"
                4⤵
                • System Location Discovery: System Language Discovery
                PID:2340
                • C:\Windows\system32\regsvr32.exe
                  /s "C:\Program Files (x86)\FreeCodecPack\Haali\ts.x64.dll"
                  5⤵
                    PID:5308
                • C:\Windows\SysWOW64\regsvr32.exe
                  "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\Haali\Splitter.ax"
                  4⤵
                  • System Location Discovery: System Language Discovery
                  • Modifies registry class
                  PID:1356
                • C:\Windows\SysWOW64\regsvr32.exe
                  "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\Haali\Splitter.x64.ax"
                  4⤵
                  • System Location Discovery: System Language Discovery
                  PID:3780
                  • C:\Windows\system32\regsvr32.exe
                    /s "C:\Program Files (x86)\FreeCodecPack\Haali\Splitter.x64.ax"
                    5⤵
                    • Modifies registry class
                    PID:5320
                • C:\Windows\SysWOW64\regsvr32.exe
                  "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FreeCodecPack\vsfilter.dll"
                  4⤵
                  • System Location Discovery: System Language Discovery
                  • Modifies registry class
                  PID:3560
                • C:\Program Files (x86)\DVDVideoSoft\Free Screen Video Recorder\FreeScreenVideoRecorder.exe
                  "C:\Program Files (x86)\DVDVideoSoft\Free Screen Video Recorder\FreeScreenVideoRecorder.exe"
                  4⤵
                  • Checks computer location settings
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious behavior: AddClipboardFormatListener
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious behavior: GetForegroundWindowSpam
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of SetWindowsHookEx
                  PID:3824
          • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
            "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
            1⤵
            • Suspicious behavior: MapViewOfSection
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:2676
          • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
            "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
            1⤵
            • Drops file in Windows directory
            • Modifies Internet Explorer settings
            • Modifies registry class
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of SetWindowsHookEx
            PID:4160
          • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
            "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
            1⤵
            • Drops file in Windows directory
            • Modifies registry class
            PID:4404
          • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
            "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
            1⤵
            • Modifies registry class
            • Suspicious use of AdjustPrivilegeToken
            PID:3584
          • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
            "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
            1⤵
            • Drops file in Windows directory
            • Modifies registry class
            PID:1992
          • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
            "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
            1⤵
            • Modifies registry class
            PID:1864
          • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
            "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
            1⤵
            • Drops file in Windows directory
            • Modifies registry class
            • Suspicious use of SetWindowsHookEx
            PID:5812
          • C:\Windows\system32\browser_broker.exe
            C:\Windows\system32\browser_broker.exe -Embedding
            1⤵
              PID:4876
            • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
              "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
              1⤵
              • Suspicious behavior: MapViewOfSection
              • Suspicious use of SetWindowsHookEx
              PID:1528
            • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
              "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
              1⤵
              • Drops file in Windows directory
              • Modifies registry class
              PID:5148

            Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\DVSSysReport.exe

              Filesize

              374KB

              MD5

              e1fc955b7309ad1ddce0b4a6564a7a44

              SHA1

              53fb307e873a6be6ead4bf2e00a981ac973c0b8c

              SHA256

              350a5f5fb8d76e5088317966694b44aef6d3f3387dc572527f0f412891215e04

              SHA512

              11b712c5e72a88900349b346e0b8ddb046f17cb3ce53102e575a848d5e2841f3dc9430c46ff1900819746fd1bafa17ea97573871eafb22a71a45198ceec34a54

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\API-MS-Win-core-xstate-l2-1-0.dll

              Filesize

              12KB

              MD5

              1b3ccbf256dc4c91404d2458fb1e8197

              SHA1

              99fd59a2c8f0126da3a3d3cd98d7ccd0252456e6

              SHA256

              ee90371e060f7256ce6bbdac59dfabf99768cbf769e3af08cc95df77b45c3404

              SHA512

              3b51167fc35c895ee0978cdca11f39d6122df16c4733930f85f75b1e7685d209edb6d8be08929bb314724575691457fb70f064f41d5fd361349c780197791c62

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\D3Dcompiler_47.dll

              Filesize

              3.3MB

              MD5

              aa9c377896fbfaa3e70b48eee66c410b

              SHA1

              937c931208ca8e7bf55275217976b29fcc845463

              SHA256

              a9edc4384de2a831c09dab37280fe4219ab322b51607e7bc8dcde800880e7ac6

              SHA512

              eb3f5f27b8dea1bb6f04717f478d864a010ad538992fc7c0a494ae5863dbc656557772b6a2c8485235a9411be14310a35fc68eff4a524f118a80aae31dd8896f

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\FreeStudioManager.exe

              Filesize

              1.7MB

              MD5

              d61c583f0ba52c3ffb6cf19df73f74b5

              SHA1

              96565f996635f8ac459c47b2d1b0b1efe70cbeec

              SHA256

              ad356ab131cba34cbdc03651695bbaf1e050e3ddbd3d85a4f56ce6afca6edd37

              SHA512

              c9590286f5ef1ecffa6dd9591d3777af98ebb7886203fd69df590e34a3c1381fa0b5b4d3cbb862ecefd0c1580dcb262a8dfbfb365038290a7f76a384517cc3dd

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Qt5Core.dll

              Filesize

              5.0MB

              MD5

              09eb51616db4a65de10063a7702c546f

              SHA1

              3d82f51d7091e53b33e34951cdf23d2b94ac1d8a

              SHA256

              1dd8c2325a40cc86ada7471eb6c1cd6a5143133cd1bbe0dc07731b2b12422a0a

              SHA512

              bc1fa7ea7c80be03cfd8cc8dec8c653f0a11115441afa2e934df36da03aedee84ecbcdbbf07e70c69aeda1066143f46c4c464560abd8eaf5f5090ae725c7e4fe

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Qt5Gui.dll

              Filesize

              5.1MB

              MD5

              cb7a1ea438bccf8e027114f73d9da54e

              SHA1

              fbd1f9d8c29e44d46619f37b594e9d16be2d544b

              SHA256

              fa04467034ced8cc0822c8e4def65bc5e8b35a6a0b623b3c8b7ab30f7193b9c4

              SHA512

              b2a97e8082aff62b933fc62eff5b2bc6e9e25be8bbd65a3c3b73252920936a425b188143c6b2536b90380f8c25c285627ab401619c0b9d42d571bdcb7ab5df93

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Qt5Svg.dll

              Filesize

              263KB

              MD5

              22a041be2c268ceacffb583b19b740bd

              SHA1

              6f0033d2fb08474c6ca4897211ebb4e16c01a305

              SHA256

              160dd9c9f8a173e2ba099ea2ba641096955e35d1f365c5da4c45b3d06ac63294

              SHA512

              d8872aefe554caffdd9f845d361e53a41931ec7d6dbc123c696749fa92b2e40d71b9c3a5a5a0de5d827bd5027107457438677d62d657fce429fcc6845a2e7993

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Qt5Widgets.dll

              Filesize

              4.3MB

              MD5

              656830ebc84e1a8d61e95bb215393c09

              SHA1

              682f0c78b36d5b5590ced96e2ebc0a5db2d26af7

              SHA256

              b718f326c4bb30b1fbf0c1f55a3f39f03a9098e82a941426f8795cc10afe6500

              SHA512

              7275f4483646c7ee510136f7f479ca7265201f3763888cc8e2b650bddcc64488442ca72e4b312d25c974b5896fab350a76984d8fb1a6f01b3608aef8090f7eb5

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-console-l1-1-0.dll

              Filesize

              13KB

              MD5

              39c95e9cbaff94a77b9d09b9e488fbfb

              SHA1

              02f92561203c6b1087fc5c8a1d33dc13dd73754b

              SHA256

              ebace7fa2632de2d3231bd106aaac5c93e3be56125836ff3b1439392a09bdd4c

              SHA512

              d05222f29b22466fe143bcc8d04a50e1681c132c93361bd1458751e6cf04f6264d00b121873bdd8830cb863d73141cba5536e6c089a44ed818a02f31258cdba7

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-console-l1-2-0.dll

              Filesize

              13KB

              MD5

              a5176f13ad85ec644ce0f33de8e0a90e

              SHA1

              ba99b214221180ecfebb1b75207246709c2eb03a

              SHA256

              8622943aced6326bf1a0fd4e1b119ad2e10315efff7d4d29cb11d3eb9bbedfef

              SHA512

              56dd642360fc4f5c0e2dc4c25807f19697108d807a2c2f9903b5f8443acfd5ec1f3f12f2f4e319a7908c3468f435b4ed713b065c39ebad2dd1a6a4dcf1942045

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-datetime-l1-1-0.dll

              Filesize

              12KB

              MD5

              b0792b28b8913256192365944ea99aa9

              SHA1

              f25a55016a856624a72ac48014dbb105aa2ec20f

              SHA256

              16b23bb44fe83d6cb9aff2d0a9d5c966e7d3573316ec00ea2cdc71ef5777b129

              SHA512

              08fdd7f491e6afec58debe1011827b444d42148f3bbb8fcfc04505fdeb07b322e104ae036b2b9bb32adb8f2ba214df649ced38734052cc2295a29ad8fe40a6ea

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-debug-l1-1-0.dll

              Filesize

              12KB

              MD5

              6f727db436470578ffe47fced4f43f71

              SHA1

              8f6d8bcab2f934b402e77fd45ffb3564a1faeffe

              SHA256

              d38b9242008d122b6ff7d345837ca2ace2cefddf929d1346b2b56eb3955ee532

              SHA512

              d9047df2e0f683c1dd295761d432addfc1b84ab0787d37c648c47aabd2b3d6118fbb792590af46ef6702df8c36bca60f9df443a50beaa6a3eeb9a8b6922f8741

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-errorhandling-l1-1-0.dll

              Filesize

              12KB

              MD5

              2cf64495402bb2b2ee3898ca80567d0a

              SHA1

              8e80bba5012c93f864a22e6b1ec1f2f54526c078

              SHA256

              fc837b3abaace09fcbc2b0d14464675f4190952ad56fc2052b525b0d6a35d7f8

              SHA512

              6adaa312fa0d08cf2f79051cc1c72348f2c8058fe270742367770156d5a611d02702cd10f796c737a515825607a804d443485b2bf7a2126fac2917d99a0812c6

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-file-l1-1-0.dll

              Filesize

              16KB

              MD5

              e45251bd3a6431ee56f04e37c40228b6

              SHA1

              c2e9aab61fcba638d272d4799bae4867b7cdc6ef

              SHA256

              bfcea2841cf4b596b57e427641eb71a3fe28f0db9e5616c5aa71c719efa9e299

              SHA512

              97a337ed55a98daa4af621d23491398935640c760c7aa7c02e5a678bc5631bb2fbe3378472cdefe200e589cd42c7ddedfde2e367fe415205f260bb3eb9ab5516

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-file-l1-2-0.dll

              Filesize

              12KB

              MD5

              f547bd4ebfd554e6e8575e8585c7891c

              SHA1

              249154e01acb1518141d6817491fa5fdafd3da61

              SHA256

              3caea8dc234b2909d574f3664514d1f96aeb2de686949868d3a3b880097426a2

              SHA512

              c029eff1e9b6415fef1a887a8c7343fe70ee29baf21c679c2ebd4f0a658655eca8f5a5e06f43a75194238457235880749f76d590eda27e30e573aba183dffa2e

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-file-l2-1-0.dll

              Filesize

              12KB

              MD5

              7510d2a0861d1c7188bc4a1441d87317

              SHA1

              cf96cb30d6c173b06c3b7307507e602827091cf5

              SHA256

              8981ab565a9f0f0a9085208edf9f3a53c7468507a2b82ed27077390650014b6c

              SHA512

              c28eeb1c1f5382999504454ce25342fcf2689a58894de6edf80aa446524353bae516a53560d2995cab0622f3ece11cd252e620efb466fba72d8002fd8b412da6

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-handle-l1-1-0.dll

              Filesize

              12KB

              MD5

              4c973c91feaf50788bd3cc2982d9718e

              SHA1

              27376f6da90fdf60f0d40ba6e7c3110ea1f38b49

              SHA256

              c28d61aa7e42b8f848c9f31766cca3dfcbd30f545ff5720633eaa326f69d9be6

              SHA512

              5d504ec0fe5e9a2afe80675b2e0afe89ce3d9426b526b4a67093134744f8d41e7621f343f36f43e092ffc881d777dcc4c6f67265e3330a924efe63dbf7284dc7

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-heap-l1-1-0.dll

              Filesize

              13KB

              MD5

              fd959893a0d02b7da2e62d3be6bf6243

              SHA1

              a4e39d246b6dddacd759021e83e2e0f1b1eeb1c4

              SHA256

              31187ebc3f4805f5b022adefa042839d16210a357495755acf49ff25cb625351

              SHA512

              6f8961d63e07d09c200f6887ad016d4f5dfaf94480da674c8de02dae067b3b620979e2da80d4e3eccf8484aab9bca8660b47d6aa816ec5aac2cac164c88f4e09

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-interlocked-l1-1-0.dll

              Filesize

              13KB

              MD5

              b7803aa54325c7e0f3a77f4abb33b38c

              SHA1

              3b5c12f2a6d4cecd95b4f32d9503fb9d85354092

              SHA256

              91e6bded93d593aab225e74a784fc7d7a3824aa959568997584708588ac9ff90

              SHA512

              06c8c5ae286a75a731eec491fe5e13b72f2c9dd167be0839e97e8c4b0d7f4d5973af53a4e0a19ab28d762a519855ad03705c5a40e7fa569cfa320ee27ed4aa2c

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-libraryloader-l1-1-0.dll

              Filesize

              13KB

              MD5

              9e732e6cfa7999851d86a37927938c07

              SHA1

              7e18801e84bcedb4c10314c5e109daa3fcd57fd6

              SHA256

              d7d95fe9e894e381637cfa1810a2b01f49816329ad873bcc5a658cfafb9e9026

              SHA512

              ba55626b85a91b9baae8f6743605eabc6a87c1d97466a2f01bec9a8db47f335d98ca2261b75ad6b8241aaa5bd877c6abd21282c5086245d2ec889ec12b5322f7

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-localization-l1-2-0.dll

              Filesize

              15KB

              MD5

              88d22a5a2310ea4cecf51bdb4f620c99

              SHA1

              c71b05ad0d9433032aec034300642047b6107624

              SHA256

              25f0e4b7a96eff810b1f636494ee62839b0a8eb4293899f380b4fd7d603a2638

              SHA512

              3372d46da604b53419079faeef728ded55710b80d103516ab232dc7f545cc3326d5c3a2d26872b979549c3aaf1453b760efc601f23fbaa7f9734059a2dea5cdc

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-memory-l1-1-0.dll

              Filesize

              13KB

              MD5

              0b4a0dd0c0fbc9da618ada478033cac4

              SHA1

              8d26fefb581a0e10a34cfc48d1696ddd88b9be67

              SHA256

              be75f5d0e14decedcb665d515a77d2caaa95c20b078c37999d2415fde3d61d65

              SHA512

              41a72adfce6b885990bdefe4ee0a57abcdcbe31248e105e551aa0d36629807e8b56cd75e1b866900eb4104093e6229728bf8e506229db6d782917cafeefd0bc3

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-namedpipe-l1-1-0.dll

              Filesize

              12KB

              MD5

              5da97f26cb736b69e10168b76820f74c

              SHA1

              33b4b85a6de0c638ea758df36169711f5c99fc95

              SHA256

              e910b6333bb68ed52eec9f2ab2dcd6be4545ae6f1ed8145010affc58b0eedd48

              SHA512

              94048cb64f31188a2e924863964ebd407b779dce7170b67bda803e724545f89364c21bb9507ab80f76bbe4c84a11e68e8bc5ac296f4fe760ba47ab9c7f739613

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-processenvironment-l1-1-0.dll

              Filesize

              13KB

              MD5

              f054b8c7cf5baa767e8d4a8dd9e52534

              SHA1

              787808dcd3144e9e82b006552a2aa8384160dcb1

              SHA256

              ebf1a9fe7e29f096b9c6983910e24e3cf8fbc38f1ba634043c945105fcca8393

              SHA512

              34c31a7095d9985539cd0a474383285493cf9c7c27feed50c8d4229e343d135a897a38a902a23dc9c74fd81ca19147d566f4e592a794558fe0c384455b06a1ff

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-processthreads-l1-1-0.dll

              Filesize

              15KB

              MD5

              b0deede87f1001cf83d8ea647a2c36aa

              SHA1

              4ea5b930d66a5a9dff09176feb3c64fdc536c022

              SHA256

              8acbdc17dca8adb9dac0d8ebb089d37f2202ccb2c97ca2eab8e09e40e0de9f2c

              SHA512

              1be36ca8e356fb988f2284d7792729952f33148da81a21bfc8079e19e7ceb1d726d80ff0d5e491b1ab3ab303e0927f8f584dbec42ba950e68c7832972ca79679

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-processthreads-l1-1-1.dll

              Filesize

              13KB

              MD5

              24d609f000cae8dc49f114d1dd1f16e8

              SHA1

              6ff91404c24e776afb93188691816e5b811d6b1f

              SHA256

              5b4be5f51714e1394ba33fa9d769b94d8dc86da9e871e699d36333023afdbe26

              SHA512

              d1833fa32f5aa36aec369b9fe3ecaa2e975357e33b8b276bbc808748f50b62304f9bdc6f6e9103ad2417a45a24a4fa2afb62bb7b4fe636991cbde1b1bdef81d6

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-profile-l1-1-0.dll

              Filesize

              12KB

              MD5

              289cd367f44786224d731dfdb3b2b4de

              SHA1

              85ac5b478e512fbb7493aaf47ba8163ba2da0a7a

              SHA256

              897484919c59bd630d6ae9a8465c80cd7d7320cfc4bf85415f040a0f67cd7e89

              SHA512

              543f51205505e5ee61ce3848b376cced211f0edcefb356bc79dabda9debd522412a8a16751a05d024c3aa5e9bab25f87258528c3808913659d9b841b83fcc73c

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-rtlsupport-l1-1-0.dll

              Filesize

              12KB

              MD5

              5932da747ff29d6c3e37640af1aa6f00

              SHA1

              adb74fca84f68df42a631b24afb01eb302b2ef6c

              SHA256

              0af4af9c9c3deed032df9a58b81f57602b8bf97e781ed95cce2012a52709c2e2

              SHA512

              de231f0d6387b1c28866017a6a8f7f5a11830a166acb5247227c53d9ea65ab6ce9ec323ea45d0407ad112a9fdad03edbeee102d600a706773699a00e82ed88ec

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-string-l1-1-0.dll

              Filesize

              12KB

              MD5

              7e76ca5448378033c82a31f172ca0bec

              SHA1

              34465351d5afd68653ffdb57ba5bc41db4609860

              SHA256

              7f095044e7cea1525da373946fd9361ddab5af43f3ea11a8d0dfc897a7b74330

              SHA512

              b11efee70c09d134b0cdd3a17ee6a76ca294968b37c101189b67e42f6791b84559d408941e9d2dd8cd254338c83656904d0513f04054697833982e968449548a

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-synch-l1-1-0.dll

              Filesize

              14KB

              MD5

              3f7ea38374a620cf01a7e41f1bfc3f10

              SHA1

              9e9bf7814a838a73fd6fa85a70b8d165c277ff9d

              SHA256

              2e5e4d13b59b5310c6136464b8f3571e37a5e6034a8596d7df9751113ef5a282

              SHA512

              a4fdf6d648fb8637d1aa16c335937f920070c1017698299033b43d5e7596ce318a0bf238234dd5b055e18a7a1bace3c5a7d5fa971e0bcf29d0f84d28c209cf26

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-synch-l1-2-0.dll

              Filesize

              13KB

              MD5

              9793035fa219ccfab0cb1fee96e2b0e7

              SHA1

              e5568864304b4b2394a38bcd73864259980cb6f1

              SHA256

              ce3b06533489c440ce640263457d52c18dc759a1e35f73f6e6b11ea512e6cd85

              SHA512

              3df8b4809885ec63698e7b0682faf59de801e1233f7571b1ab4dd474b8705862f4028701f5bc69394a56968e2ad2e85f78ae9107260e81172519a6e3cfc24956

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-sysinfo-l1-1-0.dll

              Filesize

              13KB

              MD5

              189fa23cb896fc618ba9f744dbd5ad39

              SHA1

              63fd602f4e75458b02ed85b00796efa057592cf6

              SHA256

              33ddb34cd9585ba91e7bd96112ae7c3ce43aede579591db52dc8d1ef892a606c

              SHA512

              78e37d37efef2e6983d81d3169c6502a2592b7551f14c9b649a46fe4d59168b901e83ad3518726e0cffeebd5a0624438a2de38cf53943b30adaf188d99a03af7

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-timezone-l1-1-0.dll

              Filesize

              13KB

              MD5

              cbd77ad86ded810e88d62ae4c5661787

              SHA1

              8a73b1166ceb7e7e8fe08005445f8eef47a36600

              SHA256

              f7b7fe9e5c14bbd27266470287107108fc4c3f51f1814e76d8e9a06e6adb299d

              SHA512

              6e54dc0bfe13863cc7e3099f62732a613e6675af619ea118049bf83dafbc2e98001a4166d11598b7cce513f1b8c578ec62ec0140e725c45294d9f3e383edab2e

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-core-util-l1-1-0.dll

              Filesize

              12KB

              MD5

              9f1f1bbd473b9bc6d001c9816bda2ba5

              SHA1

              bfdbea9333728169345a9f9488da60e3179e5699

              SHA256

              61c48004acd3e97bc113c519058f519e054f2d4b268fd1c8e4ff42bb4fb42d83

              SHA512

              2e120e0bf563fb5b875aa44201d012e4afb8e6ae44b1f96cc2cc7a1f46f2a9c8298cfb7923cfa7de9051e2b4cb9175e67f154dbb18200d5a2cd653c3c7366ad7

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-conio-l1-1-0.dll

              Filesize

              13KB

              MD5

              3f630abc13f1ebe70451eb05cdf2a8a7

              SHA1

              b8c452756797cbc3c93537854647916aa26e8ec9

              SHA256

              176ef6be6d970ca23436032a8aae29d80730bb244c9b0b1e628272721caf48eb

              SHA512

              6373308310e643c232f778d7db8f0c555c3e75504236dc2d7ceb7a99fc5a08a8c221323deeb727be206ae6b5dbf45d0361ffb68d6101090701c29e10a16264bf

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-convert-l1-1-0.dll

              Filesize

              16KB

              MD5

              c3ba155d6cacdd70d3a1a281b18d11f4

              SHA1

              8a97f1cd679b8e51b5bbd525335b7b9d54eeeb59

              SHA256

              cacba692a1854d872cd652ebf49be6b601a0f4b7944c305a988403b0ec4004bb

              SHA512

              47c42e3a134ec484e0030965d141c8a84d4e383520581ee4e985e34efdd09046241d516d062d10fea3d68724fb21730d56335f53d86f7ca2d88b13ea5a57a9c8

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-environment-l1-1-0.dll

              Filesize

              13KB

              MD5

              223f27b61b75ad70ad4b394c96ab1a0e

              SHA1

              fb7b3d3ce48536f88c04c42605126ea6a5b94e24

              SHA256

              95b7de51cf56f85b16151e1241d55e90e73c46b819241b72189a8fba405b8c56

              SHA512

              5c90abdc886a4513061edc73f6ce1e4e0983faa3d978c1db7946012dc0ac8f4038b5dd5cb9c1610fe4f8d88b73af5173935f0d2df84a199da3d97ff20e665c94

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-filesystem-l1-1-0.dll

              Filesize

              14KB

              MD5

              185b7593c9e20fbd16b32011001ba492

              SHA1

              fa4d69120373ee648402fd1c4d02c6ac1ae64fe9

              SHA256

              f1b3215c179463190454e8f617c33178821139cf2808defedbd844c5d7743107

              SHA512

              f8f29cccf42452d0a97f34ff402b427c12630a05b88ebefa7054e08be6434ebddfc522697d0a92e6a4dc5a5608a9b098a3f3f7121e1e577b710d284b3b976f75

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-heap-l1-1-0.dll

              Filesize

              13KB

              MD5

              4ebccaaebf65e4ab6ef98a5c95894b9d

              SHA1

              f0f62c7824dc80c13a684f0cbc594781905a9ac1

              SHA256

              dcbf134a546777455b416e7a2c22d80a3bd4a4f7bf04824f5fbf0a6eb503b474

              SHA512

              e97793e8d10f277b4503e13fa1284fa43ff603607d774b2441646c743bb59698069de87234b70dad04a107c22c611e1254036ec98f15e628c6223861e5270a3e

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-locale-l1-1-0.dll

              Filesize

              13KB

              MD5

              977eb374c23ac85162143a804a672339

              SHA1

              58eea6326b97076051ba21f961db468a0ca6b6e9

              SHA256

              f7ce78f65d566f8d15ebf85aead4eef38453b0beae8d3f4fc5e1571dfb0ba859

              SHA512

              cf14cfa0e09029971937004b3799f25f79e9fe1da2c7fccf5edafee972ccd5a9366abdf439dc0790a9350398439bfd62bdce481957a827ef274de8a124e252a3

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-math-l1-1-0.dll

              Filesize

              23KB

              MD5

              8941e9688a61fd3cf20ae7bca9285618

              SHA1

              872539bb4f932542530ea0c8021bcca17d88aa49

              SHA256

              406f358d074215e2a3e0ca7ed0a8592b92bc465f405bb35e07813dec7ff6425f

              SHA512

              3761ac64e27dc59d1f34429716053d6f3b351c0efeec7657a310978dfa4785cf2547cd1817b8237f52616bb775570c49f1ad8d9749c9725d1d70fab156e5c063

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-multibyte-l1-1-0.dll

              Filesize

              20KB

              MD5

              ac274d7160dd812bbc3d6d5825dc6ad8

              SHA1

              687174922f334e71fbdfbdad3270829835e95f5c

              SHA256

              b8004bd546ef1bac7a9262ed054b9ada817aace61a3cc637ed8c7719781fcd4b

              SHA512

              a9199d48df105333a369e895e67dd04d8c98b520c0eca81289f3f23bb0ff19685c3e24a7eda8edadf7e3907700cbca00427ce5870be164112f6b98611c5847fc

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-private-l1-1-0.dll

              Filesize

              66KB

              MD5

              d563c2e84ddf5f9d998181e387f7971a

              SHA1

              d1b08093d0c59a1d5dac507dcfaee1ff3721dc3b

              SHA256

              0abe9fc43414eb95eed00af5aaff16c4a74b8d22768975e6909ee518e036008c

              SHA512

              ada02e8d2c91ff6bae020617c6e81500d86b806c2c9aec98f4bb9e63d3dc9988746d7dee4ad6d5f4d77e352aa400f107091c6e068ed550975a53c570d5627048

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-process-l1-1-0.dll

              Filesize

              13KB

              MD5

              4a9ed0680ca2fddc9b1a65de6258ea67

              SHA1

              d87dd9c7354a09875641393482277fd75deea89d

              SHA256

              1ca454b477eb96acfae8f808c655c9d33874ed9850e6f0696ad4ce427f8400ea

              SHA512

              d27544e71c62a502341f546ce93e8de38b790d6b7f36bfb63156676e0bfb0b8cb894d34935734afce99e9c8a02b81b597b9b4612a4b6b04c481a7f9df214c188

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-runtime-l1-1-0.dll

              Filesize

              17KB

              MD5

              5899c92237a64a222700ecc843e084cb

              SHA1

              a16678eadb85988ad72ec15b6fe7603d23a12b49

              SHA256

              8102f751bd6b97e357b3b5414080a68c1e5b651d894b4b801165e17cf0812133

              SHA512

              ce709e698c4cdf27721486c975e8b5bf3c891a6d5c98140418bc11df9a2bc95566943ccb0b4199b9a5545b5773656b429e6fa8d8b7f9b724af93838f61555424

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-stdio-l1-1-0.dll

              Filesize

              18KB

              MD5

              cf2c1a9d0e312571e3dcab7a385764d4

              SHA1

              17b01baeb9791a21f2fe087d9a6c592142a84555

              SHA256

              0b697d40a8d5b41f287e73f1538b3ef6e5d23c771b0631a4f4f012ad90ed137b

              SHA512

              2a58a918ba20a6ac0cb9813a3ae6a99025e0cac3d8593b3fe26d60edb8e44a1b787a8084bb208ae6cbe1a663a335ac70ad300bae0387376477066fbe72e668d5

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-string-l1-1-0.dll

              Filesize

              19KB

              MD5

              3e406178080b7611959d7950823a7547

              SHA1

              e27482795ff38dd463b07061e6fb82a69684a80e

              SHA256

              e1e9ae7d8736d9abf08dd911b050069ed80599e8693686b5e55e1150b6ce158b

              SHA512

              6b7ddca5b78bdf9e9346f25c415cc6aed40dbf36fc93fcc5d9bfd92840e9a0806ffe7d45f59acdd8cdb91152aa499674b0dfb139c6a68c54bc646d7006ddd9f3

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-time-l1-1-0.dll

              Filesize

              15KB

              MD5

              8fc90dcbf9196d9de6ef12a3879edd6f

              SHA1

              11a09bfa884bf7edaeaf8b5287bd39965b6ddf61

              SHA256

              83f50046481526129ec4ffef4e4cf1706213b92567219e66f3dafea353aeb6d8

              SHA512

              5ccca707b2725e8d504ad483c148bf2a3701e53c23d4eada6542a503aa5e9354cb6198cd33e827af99ab85f99ccdbe7eff076686b29523645f1790ede3cc09f9

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\api-ms-win-crt-utility-l1-1-0.dll

              Filesize

              13KB

              MD5

              136016f8425ef1f13cc3b7d076446a99

              SHA1

              4169c7d2ad59d419fdc477faa6eaa55081e840e7

              SHA256

              3c73d8c19a552cdccd196852f7f54806a036c9e316f35d13996538ff87d5c0ab

              SHA512

              19c1f7659e0a9641bca50d53086a40ed25aa4d23a6598463383ffdeee152838b63871e7f87579976b2623482d2b2d074f611f76632b9c4d8e384c2f63c984194

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\avcodec-57.dll

              Filesize

              22.8MB

              MD5

              462a5221550099b4c8d3abe283defde8

              SHA1

              13d2cc2cb0c609638e763bf0cc3ec3c17079b548

              SHA256

              640f3cdd5394b956d978e93213a1fcf3f0aecc9fe772a13bcbd883916c7c789d

              SHA512

              2a2e83870c0ac005bb9b589b72b884db88fd61e471cf53f6a65838c479d7337514c1ffc63d7964b4e129e0e791ad255cc1bd5b65c713823e2b27ed19d8b13e23

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\avdevice-57.dll

              Filesize

              1.3MB

              MD5

              f11d60a9887c4a6d182c0be8a3dbaeb2

              SHA1

              410ddd2366b5cf2ae1ff4e8925735cc31b96f36f

              SHA256

              08ea2e1a2759094bc14101e1c0a99b40299e334586ecffb9a6106e477510ae4d

              SHA512

              2ecac3deb1c81431dcc7871dc644ae2b69e3334e2d301f138f8ad0c640afdab7299c6f6ece4cd113ee45be239a780dcc4eb969b32f3a62f4a5569321d6cd2dd0

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\avfilter-6.dll

              Filesize

              3.5MB

              MD5

              392cf6379bdd592eb416fdab983f12aa

              SHA1

              f6ece65bca401b72b19ecf8aed2c43a0ad5549cb

              SHA256

              120acaf740f1ce2590ae997ff5af2d34bbf09027f3c8da43a7db0e31886e9631

              SHA512

              dabaa512efa6ea56955e50e73d93f1a40b6c2b299a7dfbc752e58a7273824bfd67a7596a344f3fba8768fa2910482440af418409112b46c91e97243df09c2911

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\avformat-57.dll

              Filesize

              6.0MB

              MD5

              8ac0efbf6b88374da7696db75a144d29

              SHA1

              452f9e6226669568abfa9cfb49644f01c2101d5c

              SHA256

              001543fb861cea54b8aaeee72afcf48dd667fc39761ad0f169d2c384cf3dd98e

              SHA512

              78ecba4fe7bacf642f0024191a9055bc41d448e0fdf8a67b97bd0492aa8e66b78768d21b663e51dbb5a48319f7fb37df3981882ce63090bbf56f75ad52dcd163

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\avutil-55.dll

              Filesize

              597KB

              MD5

              c39b397e8d23d4f21a13078b40f3359b

              SHA1

              a3c5d5dd86159bf6d2a3626e0646523ef4a8f085

              SHA256

              e813779f2e28362e618c8ae13a55e1963689eee2df797c1c3c1fe6e10fde8b79

              SHA512

              c060c2c3b93d1b489c57d3eda2c6cdc21ffa9cb48df49b7a59659af921b917af608457b9e871ae0e8997f7ca2a01a97fc7dcf9168ef09436251f9896779c46da

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\concrt140.dll

              Filesize

              239KB

              MD5

              86f52cf5fcad672b55103f11be9841b6

              SHA1

              63eccde1bbdff68fa84be36c071cc8d03cd3ea34

              SHA256

              32c753afb93b02150e3783e954c79004bc9bd0d1e3f7c3d6104b245f48862aa1

              SHA512

              f491b8eb44dc68ca516fa0bdee59dcf72150f320a69b3ece4fd7e70c1d8ab6aa7ae640200f5231390a2b525731c0f8be501e988fe33687c753e175b24ea9c5d4

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\dlmgr.dll

              Filesize

              192KB

              MD5

              9eab2a1b2439efda7c7cf418db93f113

              SHA1

              e7ebf91c638b0cb0fbf4193719b207c53330ac08

              SHA256

              0d355087ac59316982d1e67c8aa5c26b157db7c97ed943cb6cfdd138950aef71

              SHA512

              70e9ca4fafb88e67e6d1eb3efe5e246b7d5cbc440c91e70bf0c83c9268c9de7e8e2c5d045ef3d588599f035469b0e0be3689ec5e1f31a3fac616356620371e57

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\iconengines\qsvgicon.dll

              Filesize

              39KB

              MD5

              d61a696dfbdf728185070f816b089a4d

              SHA1

              e674c43961cee9b2df85b5b40cb21a9958dcb0b3

              SHA256

              5d29930dc8a24939bf51358499915586102ba23bf25f96065819df5d3bbef4d6

              SHA512

              3e214f18e0660982c29b648e2eb7ea6f910483dd70454ace3e6a4e6216de5a5fcaded584abf555ac9e8e3bcbbd19d75fb0587620800aed90bb0eb503b30c7d40

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\imageformats\qgif.dll

              Filesize

              36KB

              MD5

              cd21fb063b18625f84120853b12be967

              SHA1

              a0a1bc1f6bd42410dd8cb4a8f000ffa45f6725c7

              SHA256

              7f01de5072a76b196336e7870e1782985538b015d33bd62a289e3ef167d4a1d4

              SHA512

              84a99a23df590fc878bd520d4da160f91eb13b457367db43327f1bcda7f592361f775a0dfabe170c3df1e0504f4c5817a35f980dd4376c05def9068cc46c20c3

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\imageformats\qicns.dll

              Filesize

              42KB

              MD5

              c700dd54455ae7d5c3c5322afb2f41e8

              SHA1

              5b0a9679f8325b235e9927ef9833350896562557

              SHA256

              7496169d4879c1eb3d48a0d182564dc57f5fd31306d408ef8df6a8fc970aa82a

              SHA512

              c25a3a553926fb535348c011b8d1acbe445241c6c2cc0da7c4c24bcb4db6fa36f7b61991e73c0ce59a8d2d7fcf6f2440ca7b5ee9347831caca8b1f60de92c195

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\imageformats\qico.dll

              Filesize

              35KB

              MD5

              caa467921974c748f60d66dddc40b8b5

              SHA1

              6cc265de9026d0ccf79edbd526eca8b1c6079b97

              SHA256

              2acf451d7d39b6c2402f0f5cc02b8afad28fd3c47efab8dcfe01a0410cc61dd0

              SHA512

              04a6edecd688943687ceae3d1f3ab35259715922afb77ec1bf672785f87199b35ccca538815fd907a59652d0bd7f62c01ca0a59f3964718e690b528d53e239af

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\imageformats\qjpeg.dll

              Filesize

              353KB

              MD5

              434ab4fc8dde85dd09d93d9a099ffe46

              SHA1

              0e91071bab974372d8b2374fdbd63b6977dbd347

              SHA256

              da42d47714f9456f445fa4bb8bbc95251eba18da50882ae2e64f129f72a62c7d

              SHA512

              142bd737db7cbb99e6bd95dc9f4ceb0aedf1c48e8cd1badec9904b4bff1b17256d57e794fbc234ce9736f7551f2a38ff7d943315c344641b9f87c80521e4767c

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\imageformats\qsvg.dll

              Filesize

              30KB

              MD5

              2c2e2eeea1d5d9ec48f4b08b4f47dbe3

              SHA1

              db323d9592f00f687cf6a5828f6246d23c16b7ea

              SHA256

              666859c4ca1c47546ea840f1c876a2f3a9271b6fca698e92d47f56efbb74a39b

              SHA512

              6ee975c1bfc9ba5245c695d5d5f7d9dfbe5b7f025a87af9d24b26318c922d79f0c17b0c4e8048df1741e476b6ab67f8dbf24d95945b89a79f14d6b34da9af4d1

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\imageformats\qwebp.dll

              Filesize

              413KB

              MD5

              4b19e8b5fdef9b5ee51d4192f7256ce2

              SHA1

              34da02a349589d47dedeb6018d2066cdb1d8a2df

              SHA256

              57db3e02e59a19a6ec8e4f3676c2ab7672b76c99c0a78b08799991ea8c06c9e7

              SHA512

              995a0fe5810d30424adda76acb286deeef0f538df493449ba428e6f404b9a7750568a6396d8c428feb51ee6627c36574ee9478c19bfca211b05542b81901303f

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\is-IBEVN.tmp

              Filesize

              5.0MB

              MD5

              91d75436cc4a89b717c72439bb23e265

              SHA1

              c2a6890d3c38b9208350761278fe7056a8a1562a

              SHA256

              4bee2831cf57ecaca4680f700a26d40e2155636617dd6ee8d9335eec77966626

              SHA512

              e7a82f4d0a7d9e22a0e68ad4369c81fa4194845c080e92d986f1b656b61f75b52ad68e3ac40f1ab2d0c928ed953122cde1c05fec9fa96374abea3115c8824448

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\jansson.dll

              Filesize

              51KB

              MD5

              dce2b97a9648ffa84f0d4ddcb17d1fb8

              SHA1

              ee7fec8cc0702acbf1b7781237707028eb2ea2a8

              SHA256

              1cfbcc4cf9514adae50299c45ecde6e6a5306d06b73f47cb00c914ce52c76c66

              SHA512

              0c0acf90fe96abc7f3b627bf109ed2931828441522db3c0ffad8c4c8357b38b5f853203752ba736fea23d7eddf29ad7fc3c5550dacb9fa50bfc3de975451cec8

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\libEGL.dll

              Filesize

              25KB

              MD5

              069d2280af0c194eb7f8f9731ae91c53

              SHA1

              d407be04bf83cb5542941789b1d770104a81e22f

              SHA256

              98c3348310e4e5e4c175124cebefb81737485b34d3d2f11099a66c2757a8b722

              SHA512

              6d08b629290e206fb0d3c8557e59de07159797b0b1d57c16e1a29cb3e4f7a3dbfe01e43c18380fce4bf3908a7caffd95a1d7d74206c8e7a638cbbb4362af750e

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\libGLESV2.dll

              Filesize

              2.8MB

              MD5

              bf17ff7b92469a91f04ce84300210c36

              SHA1

              0aadc2b9636f3e8e9736825b9234be11033e979b

              SHA256

              e2c1db2182ac1dd0ee23ace0573e05ba9159af7fd5e2759f481ea043c06d44d1

              SHA512

              008e9cf7f53023af287279d9e56496a6358e112b24cedea3f666a902138ea246ae687f58ccf977b7cc5b1900dea3f670dab4a8c3465589fde35f8828fa4ad593

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\libcrypto-1_1.dll

              Filesize

              2.4MB

              MD5

              3aadf125dcad8341a18e65d92f5dd824

              SHA1

              8d8f3569edd88e3a80da770d7f65c7e3aaf2ed3d

              SHA256

              935b93a0dbc551502958b1b2625f4d1b381e0efe70232d62e7a700785c6fc5e2

              SHA512

              8f247474bff4f477dad0a8ef9a589bfdf0764a9444b999aa74ed86810d627c9bc8ce2e5cbe67c2a32a9a45713a1a7cb8e70e70c083db05a51b4036e83f118551

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\libcurl.dll

              Filesize

              320KB

              MD5

              8e066fb0857a05641f72676b051763a8

              SHA1

              1f5d50f2831fc9bbee09cf4ab7fd12064c9e9a75

              SHA256

              fcfaaf2993d2b6e35793870e4077ed6884264c79170bb39dce3fd7bde62dd455

              SHA512

              71bf7e2a1808ef8bf2b9ff5f2c0687c15aa8c97fe9f26ecea34b14a658f0620ebd7b8b212f88be78edb30f3145158dbb6315fcae1754c3f7a052ce137bfda40d

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\libssl-1_1.dll

              Filesize

              533KB

              MD5

              22cdafa1d93c5caba9a556dcba132b05

              SHA1

              3584292540555d6fd1baee9628d9e6a2272974a7

              SHA256

              eb1ee9f5b43b39353e9ca14f2633aa4788083a641173dc43e30e796673806fc4

              SHA512

              083e9c279202a310d4a744c7c81533bf6639dabd9fdbabaa6b31fe27f434f2b0ba601f5f32a768a0523462016d731655cfa5923f1e9a2607dd10310714c4a6e3

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\msvcp140_1.dll

              Filesize

              22KB

              MD5

              5bb2b6705227cc529ae2605b21668d80

              SHA1

              27d902cdb0679c508e690217e811800ac9bc45b4

              SHA256

              5c3f5bd3823716bc2c9248e94d071112ad3665f5a0a80cf2c01af66c0a1d6a4c

              SHA512

              ca39344a2fd05f0aae588f0625310fa687697ca02a22c11e615541065ae29567702d397b18afb0842d5490cd52b723bac60460738297c86826e1c402d3120bb1

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\msvcp140_2.dll

              Filesize

              163KB

              MD5

              79281c8f30eeda7b6d174e059bae6062

              SHA1

              6d58f5f86043d1babfebd368aa2420983bb05b78

              SHA256

              1a736c311d276948959cb08a07a1e16ef83aba4a862d237f731f7daaed605eb4

              SHA512

              0158dde027948cb34cab67b64102b7d5d73339cfdb6aea215d2cb953aaa54fb4af25a04e54c3e857eafa9b2d510fd5cca7534f6efa2ef020e448881a6508c100

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\msvcp140_atomic_wait.dll

              Filesize

              52KB

              MD5

              7a405cfc4d88a12a6b5d7e7e989ae949

              SHA1

              a7a094dfa48c1f5df66490813f45c193dbb430ee

              SHA256

              0f7f405e25559f7d3f73aa79f200609f60747f0c4f301bbffaebf59ce526c8db

              SHA512

              bcf050f53f9c0bfe8932f4ae0500cd9dd5e4a5dd613096b16c150c22788ee2be2a315aa924af2c81c380256e6609c82c4e2552a6878cfa81798f6cb772a3dac2

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\msvcp140_codecvt_ids.dll

              Filesize

              19KB

              MD5

              e1429e5d532cb0a448307f4224b2ffc1

              SHA1

              8d6e2f72ac711904354a8720c269cdd5affd24cc

              SHA256

              7ab28d7785c27b1b3ccf1f4edb0eae259f845da82d94650302f937591ebf7808

              SHA512

              8f4b729eac309fcce53a0b21b10ca7c17d82b5e2a5f3b8242ac484f430be281d7f1ef952661fef7222dc501fb1882015ec45c5cd66bb94741f280d7b66853a7a

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\platforms\qwindows.dll

              Filesize

              1.2MB

              MD5

              7d52f327153e4c9419bb13eb181990e0

              SHA1

              a3082bf7ca47c29ea5a33666719b265769dc97b6

              SHA256

              19199538dae24168c8be341aaebfb917349ff3e662b9cc566670cf769888da63

              SHA512

              19c64d1de2c078292a7ec152b1a5bdd492e4a29303578b144e6a78de2f9d7ab1060caa3916f49655c18dbd9243e037941dabc4d35135b4cf1c3f912d83f016f2

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\postproc-54.dll

              Filesize

              117KB

              MD5

              bdaf93337c4d791fee7a21b12232adc1

              SHA1

              df3efa391910823ad44c3f7a860b997ee73e91da

              SHA256

              73df62667edbaa5840a2e1df67a3f714bfde57ec44b4d2203b8450e071185928

              SHA512

              81947d70f63680787097fc160cbd853eb8340e60b635451068dbfdedc215e13c68d4af58f0789ea48570bc76a0d38c0404290a68e68fa2bc406968d796d02d15

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\styles\qwindowsvistastyle.dll

              Filesize

              131KB

              MD5

              8bf1f54a99c9d626a6fcf7399bf70460

              SHA1

              9f2530d715a99bd53d22e079cd8e6daacdbf2fcc

              SHA256

              24659736c77509e121fe8091607a908c42e412fb3f35a088deb9835f498651b9

              SHA512

              b737e92d8b9bd2eb6c02888232137b30c82f7fe07becd4e11d0587180899221108c2af3c51964ee532cf9b339d5c3b9211af2a09772c36c8b0621d50d7137f14

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\swresample-2.dll

              Filesize

              290KB

              MD5

              0b8c04770e94887bfa5e0a40bae1a9ba

              SHA1

              56a43d251d876aea40be418354c263650697fc41

              SHA256

              d0581506c46c10c0cf48ccaf5fb539b477ff88e718b29b5c5df27625dcea479c

              SHA512

              4be34fff483b8f723d40acd00b8f6b46d1e0812c31ddc26ee064cdf3f033d608f2d5f6f7f9b78dd387025375ad382a6fedb2a6292f7af527b3dbb4f712ccf922

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\swscale-4.dll

              Filesize

              513KB

              MD5

              d273cfc4364a7c2cb5f084ca2dbf5225

              SHA1

              1c241ff982fc4896d2a4d6e188fffa4367218623

              SHA256

              b90fcf7487f5cf1564f3ece461e1760d85c52ef67e036e4bc172808a266593b9

              SHA512

              5de3ef84f2ae7dd2df58f6e2578abc73f3ae9aefe95fbe106519c61d97adbe08976bd339783e696cc42ccd8c4efd54e7c5a4d7191b07139daf134eec0894ff4d

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\tier0.dll

              Filesize

              141KB

              MD5

              352c70da700fe0fdbd6be9bb731027de

              SHA1

              22fae38d272ab5a5ae21333c042c150a070e24c5

              SHA256

              49482281a2de4d86e01b40338bc62d2f16bbe8ee53ca23395450150f8950b66e

              SHA512

              dee72fa4b9224ed6f6e3af1540deb2e270d621bee616e01b1c8f992f6590ad6a992bd747e693369e6d7dfe180acab276b7c3a9da7ac34e46f64cdfa5bc44a381

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\tier0.dll

              Filesize

              142KB

              MD5

              822bc2f6e04858d1fa7e12146bf0c983

              SHA1

              9446093309e2acd842682692641753eae018e6a7

              SHA256

              5899d0dfcf182998a0ae587273ed0119d16c5b29f1b921850d696618906c0a45

              SHA512

              4868885fcbbf26eac6e20bd1c872c6513f484aecff71bc19be362611866d4b8a80a01705efb095e3a8cc6ab5de80cc4eeb8b960824dc99c4fa85b37a4d88fac3

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\tier0.dll

              Filesize

              141KB

              MD5

              5fdfe324eb16a47f8e397aabadd685c7

              SHA1

              b50f02f2a1eb1fbeb6b14ce409c27472c55b1f6f

              SHA256

              ec39f4bd3827c6c4ef99bfe58159ef85c6081ce116f73d46a3c3aba78ea6b00b

              SHA512

              042e9ad15f90f4f604b218689cf4359c6b0de30bd47654f13955f3fbee12f47c1d72636d8bac2ca9f23472caab904a3a4d324eebb1304b154dbf497bcbe86b19

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\ucrtbase.dll

              Filesize

              1.1MB

              MD5

              9ccead9e7ccf12ab0f2a8bf1341cf5f6

              SHA1

              b098feae8eaa2bc470329aca83b39c8195e83027

              SHA256

              1e35d20821adb5da91a39ef44e82d7c9750ef7e6c636d591d9b5feb4a141c0a1

              SHA512

              d2c7502864328ef6b57a33b9ec3d0a0e580397f5c0893a1464c6b96a047b25d46fd75d2eb75ee2c19d5ea23637a27edd1b1e5dbb850d38263aace3fac52cc73f

            • C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vccorlib140.dll

              Filesize

              262KB

              MD5

              871b2bc01e4c0c33a07275b0511d2081

              SHA1

              b14982973b6286d027320641e3f2aa667e104aa4

              SHA256

              cf7be3e14c12c3b80a3094a1b92a004ab523f5183a914c3122b4d39aa920505e

              SHA512

              956ff066368f16413d7ab0db156b434abaae85f208d08c949d57214fdc57f71396c9924d0b1ff7bd3438b25cbcc5f335c1dd59f4e5d87b2c2e1226f9a150ddb9

            • C:\Program Files (x86)\DVDVideoSoft\Free Screen Video Recorder\FreeScreenVideoRecorder.exe

              Filesize

              2.6MB

              MD5

              574ad8595026f22f23933b24e99d8b49

              SHA1

              3f30019b88a1ef70332f49b3285745e550b1c79e

              SHA256

              c1097bfb4e4408c48360239ccea82583a8c437ee01992b53d9583eaa5eb511ff

              SHA512

              ff6c190f34c44d7eafddbffe4edd91b19a4390a62132d898f9464bee43082dad33122222acb92f39c9fd0936b94bb5f71d7b3dac6201dcf876d75e8a395bb0c9

            • C:\Program Files (x86)\DVDVideoSoft\Free Screen Video Recorder\zlib.dll

              Filesize

              82KB

              MD5

              2a89f92559a1f68a3c3be64b1d83de28

              SHA1

              2a41d6b9b1aa8ec328d5a8a820f38cb6e20d8f85

              SHA256

              50fef350a82124286cc2e9bc8cb213c1c6fd650792815a3c0113fdc3dc619d89

              SHA512

              cbdddc65ff6ec197d8db358dc92aedef380dab4deaa0c20ad399f99b38a3b8de3e335774dd95c54b28beb74f8edc07b0a826ad592ed5ce5ba417c595cfed8cb2

            • C:\Program Files (x86)\FreeCodecPack\Haali\mkzlib.dll

              Filesize

              88KB

              MD5

              84872e3cfb565c32847e998612912bc7

              SHA1

              b4f50bc69e611707089de9202f75c8f6a9ced0fc

              SHA256

              4e9f64a3919fbba9b7ae12bf8a84955cae9b64b0fe1e3607627379d24c94c51f

              SHA512

              8cc4735ad3a7ee3b30a14c572e6bcc1df81f0348c452434c26659f79c14ce742f5b10c8b5ccb9ef7ba0f6fe8c12a8e5a9f84146825dbbc9dc6eab7276adebc63

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

              Filesize

              4KB

              MD5

              1bfe591a4fe3d91b03cdf26eaacd8f89

              SHA1

              719c37c320f518ac168c86723724891950911cea

              SHA256

              9cf94355051bf0f4a45724ca20d1cc02f76371b963ab7d1e38bd8997737b13d8

              SHA512

              02f88da4b610678c31664609bcfa9d61db8d0b0617649981af948f670f41a6207b4ec19fecce7385a24e0c609cbbf3f2b79a8acaf09a03c2c432cc4dce75e9db

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\E49JWOHD\edgecompatviewlist[1].xml

              Filesize

              74KB

              MD5

              d4fc49dc14f63895d997fa4940f24378

              SHA1

              3efb1437a7c5e46034147cbbc8db017c69d02c31

              SHA256

              853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1

              SHA512

              cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a

            • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NYN0GX4D\store-adaptive.min[1].css

              Filesize

              79KB

              MD5

              1b6431d9cff84ec721a5663f6aacf9e5

              SHA1

              5159f15dd63fc580cea118d0620779d1a1160dae

              SHA256

              befb5741859c8447980ebde7f421b9e12747cce3fa0b0980475f2307402b2c7d

              SHA512

              2013b789dc67b46e2c5616ee957e1542932807cbde575587fc178d59b233cdabff43ff96312b0bd65061e4aabd3bbd3cee785cfddf04a7804418d1b25ca23d7e

            • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\MSSCR27O\js.stripe[1].xml

              Filesize

              13B

              MD5

              c1ddea3ef6bbef3e7060a1a9ad89e4c5

              SHA1

              35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

              SHA256

              b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

              SHA512

              6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

            • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\NKOJO92S\favicon[1].ico

              Filesize

              1KB

              MD5

              042513acc1d6a15f5ccab8593155e910

              SHA1

              f9bdb7f03a1393c013a2ea6bf9ca35add03b6c39

              SHA256

              445bc4ead8ec5b135faf4feb797deb3b2c494e37fcf2e8ece09d02e7b4675d9f

              SHA512

              c138c38f3dc4a9635f9cdf35aad922d5d51ee55b8587b2ce030a11d1dbd6820706175ef6cf172356ccbfc181bedd2305cccfcbac587bbc213050f57adb155b22

            • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\LogFiles\edb.log

              Filesize

              512KB

              MD5

              3557970110fe4645c55de77a8b35c06e

              SHA1

              7f6512cefab7c438a70411f06e62068ad5275360

              SHA256

              883ce72eeeb8c9f1016e8196553ebbc8aba4b62cf1ef16c0fc9d825eea218fda

              SHA512

              1a839c73974dc9069af83b2a22a3b820c108b8849342c93875bde86a627f6094dbaae1406bcf40db5a93d53035c0decf4a782f6a60e23cdc934484ca30620fd0

            • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DF510903F157BB042C.TMP

              Filesize

              28KB

              MD5

              d1ea3a002813f9d1be9a800c822389bf

              SHA1

              ac15fe4d0f8b89667fdb70426cb9d54653d0e01d

              SHA256

              5d7527725b46b670423ddf178d87b994eb1d4cee1dc23c240d8a402ea314f247

              SHA512

              cb26496c817b7d542d7e974646ad0b96be9bff6f19ee4f128e4a7cc920293bfd1d2d484f3f51bef73e6b50fbf70158365eb78aebf70305d8996a5e29441b986c

            • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\FreeScreenVideoRecorder_3.1.2.1206_u.exe.uq3w48p.partial

              Filesize

              35.3MB

              MD5

              7754f38871727168a28bfacb12e2a5e5

              SHA1

              b3a62d2b52c3a3187c87a907741f26dde98048d0

              SHA256

              dd93a375d5bf0eede17c968c09995ea8ec86b25a6634cc8f8a2f602357a64eb1

              SHA512

              4d0c8f7155eac5be52f911a5b07d86db3f30ef8e6d182ba18bbe78afbbfc602eab64fc55488b7514198be61ec3768d9df5a4c964c31f82e2b782581a58752545

            • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\L5JDKJVN\FreeScreenVideoRecorder_3.1.2.1206_u[1].exe

              Filesize

              23KB

              MD5

              9c08b4aa639292cc05ac28562c5ad9c0

              SHA1

              3f6740087bfff10a052661527fc465bd3d45bf8f

              SHA256

              1aa3b4d48ff43efee34efc6856e03c3a4a3e94b989f31a406baded324e092c0e

              SHA512

              d1a2086fcbff51936137be9b4c2ff9f3aebfa7c4c33f0fd95da6661f86c5350c536915bfe26b6e8c9afa6de8b87d8a8e8215102323bcd45b78b919e090768b4f

            • C:\Users\Admin\AppData\Local\Temp\is-VPT99.tmp\FreeScreenVideoRecorder_3.1.2.1206_u.tmp

              Filesize

              3.1MB

              MD5

              b096a766eadd0240e5da70478698bff7

              SHA1

              f9e342625889eb8c06caf1758b0ac485cebfdeda

              SHA256

              513ea593076644126e004416726c1ead5e29b5ca07d75d41153a9e14929419fc

              SHA512

              20154a641befae528ca4295a469474da3b84db44ec52a38b828b7f54e6c5e4c0035580e36d87e76b0feaf1d24da8048d318294f1cdb0adfbef0ad7c4dfc3eb09

            • C:\Users\Admin\AppData\Roaming\DVDVideoSoft\FreeScreenVideoRecorder.cfg

              Filesize

              104B

              MD5

              f7bb367302b186f23d7f6b6be0149eab

              SHA1

              2e393999be7e126baf1db6f0d3e27cc9efde4dda

              SHA256

              d501721d1684bd11f63fc4079145733a392d52b74fbc4fac78def74425d0b626

              SHA512

              cdfe9b1222e5fff8d54f215c63eb5ad2965d703ee385498d2324e8ed48e1e0862edb34471ec0cd1f2bf97235e720a582d6a9538fae6662ee44aace78e2c04f61

            • C:\Users\Admin\AppData\Roaming\DVDVideoSoft\common.cfg

              Filesize

              141B

              MD5

              725d5320e2c0485d8b936ce5766e3958

              SHA1

              8f4187e717c6f365339db859cf8c2dccd9aee726

              SHA256

              9465b750b9b22133569ffc8ce6360afbbda15554ccd7aec992aa4b3517fae16c

              SHA512

              99e15dbbadab2f695e6f23306e5d78810ff5b3cef278799b6718678589b19f3b46d832139a080741003edfc88a283470845289a23031b119b4c2be392ee5f759

            • \Program Files (x86)\FreeCodecPack\Haali\avi.dll

              Filesize

              117KB

              MD5

              9ab04b4d3833dc4ed758f48703ee107e

              SHA1

              eed3cc0a4a93ab4fd80f765df18a4e40889383b9

              SHA256

              81799a129246c097f24527860a0d0d18661b10afa8c88d170ca857939ea35578

              SHA512

              1dc86ba03c90c6d02b6c42235438541799e5e6c8dac25738a38220167362b58edf3371f031f2bfb97e01707ccdb70859cee1c0bdbe278cc0b915bd91009923f0

            • \Program Files (x86)\FreeCodecPack\Haali\avi.x64.dll

              Filesize

              129KB

              MD5

              286c8843efbfbc95385f3cc8efbb41c8

              SHA1

              1c2230b7867de1fb7202dae06d55e68648097398

              SHA256

              33912bd9a11aa33f3e5a7fbee2c0f3744f8d28ac6064f151cc40c2e2807fa2e6

              SHA512

              7dad5fca23821017ad43865b731daf2d7242a2a41a00282bd0a24d0a68a72656881e0207e5ef3b3a44d5698ebaea4bd5d22892ad65f18fae6050bcdf1cc922e2

            • \Program Files (x86)\FreeCodecPack\Haali\dxr.dll

              Filesize

              254KB

              MD5

              fdaa8a470a1dd277e36b275a18284f12

              SHA1

              dcc3a23498626932a67ed04985ebb4cd9579dfa1

              SHA256

              2017b74518e565fbf308dcdba0b67bef09453964951e0c32b712604599f15254

              SHA512

              65a86f5aa185c6a4a9decfd7faa73bee70bfbceccca549f8cb70ad76964ac1f087bbae1677ef33f9c16d799da10de8f6ba5e8287424671d69d10e23ee9cce937

            • \Program Files (x86)\FreeCodecPack\Haali\dxr.x64.dll

              Filesize

              334KB

              MD5

              20ee91562ae89488f0bfc3d70f65f990

              SHA1

              f7c09bea0a811826353906faec8f2e0d8e6acf6c

              SHA256

              038224c19e0821d10a16c606675ebe099136a97b6c605ca41e7e1ea519c05f65

              SHA512

              27950e93b8c2ac1fe1caf12cc6cef7f9fa0dc0e392750674b4fe211904be350d748126583f8ac18ecfa187d0cf312ed2b3cb20064572b350696c17060e38efcd

            • \Program Files (x86)\FreeCodecPack\Haali\mkunicode.dll

              Filesize

              34KB

              MD5

              8afe7c1ec163c4dcda41b84996ebeb88

              SHA1

              c2633d26aef7fe592a3d885010c8fdbdb8a67fe4

              SHA256

              e081636fc664c798a077a25dc8583c8a27622549edc304fd7fc0104d8023d142

              SHA512

              5021191bc2cc546eba9d2ed8419dd100e9ffe58f6b5da44f55564f948eb2c01126127a7079dec081291faf162b9f02774f9d0c88a598f1bb89df9a22310d213b

            • \Program Files (x86)\FreeCodecPack\Haali\mkunicode.x64.dll

              Filesize

              34KB

              MD5

              65751410533d9f74f8da4b25b4d94182

              SHA1

              70e409c747f35c284b4e62513c057d16ab54b689

              SHA256

              13b1d59a0413287b8db2e08f8eb185bf7f12da85b15b129f7c9c01e4aabc5ee4

              SHA512

              1bd7d40cc9564f988d51df58aae28ac96276e55c8071b4cb2cf3ff2fced642c8a659eb6368b6c3624b1caa23a3e5844562d712c4840f839b63135c35e3789779

            • \Program Files (x86)\FreeCodecPack\Haali\mkx.dll

              Filesize

              156KB

              MD5

              980a1eb9fc1afeb48d3d3ba350df7c6e

              SHA1

              83fbcc11991be65f1fec3d5749e05ec8466f6aa9

              SHA256

              33ed7181de50818ed9721ed9537dda1b4a986af4fda52e446a600640811ee3a0

              SHA512

              851bdba879f795295d2c44ae0e7007ec45b2932c6b222277d7d5252c0aab5f1dfc710e1f5a424c519a0c52e7289443e2cbf384f5eb7ba4e10eea2d1a30ed5139

            • \Program Files (x86)\FreeCodecPack\Haali\mkx.x64.dll

              Filesize

              180KB

              MD5

              d9b33a7691ef591ae78de5a93edc7a26

              SHA1

              5de4dd152ff2c7ac03c20e5f59ec21304608ca53

              SHA256

              767b3e103bf0cb876b6275ba79f0f82debafc7c84a71403c859e5eac768f16f6

              SHA512

              e57c8893b42f10ac3911ecd336e8a0dbfa8c70f0737719e6f73564648e1a455945ca9fb574331d4b1d444ec74dc2121d66becd936a15de47fbd9c9cb577629ed

            • \Program Files (x86)\FreeCodecPack\Haali\mp4.dll

              Filesize

              150KB

              MD5

              79d7b666f4262fc63c98af37f4bd4f82

              SHA1

              ac3f564922e071cea46da8d2a918c32017fb23c6

              SHA256

              f3a68f2f714b49a5cd41bffccfb8d7ca0eb9e3eed426200be7495288c93d951d

              SHA512

              0b5b198fb507fb1d36ae1e075e6cd015941af9d807d75711fe2ca86aaf1d3a8ddccf7a18e3ce13358409d3d34a399325bf3606b1827d9e856a3dccbad66da7b8

            • \Program Files (x86)\FreeCodecPack\Haali\ogm.dll

              Filesize

              130KB

              MD5

              b40d60573da1b8e7877801cff2dbcde7

              SHA1

              c7db57efcd7c80186a3bb71323ecf4aefe542392

              SHA256

              ca95d9665516970c21b5200244af81210155f987807207348ff1a5f910dec833

              SHA512

              e9a62b72a86c1d55166e70db6d800f050e1b66c24a7bf90c111eb5e371ba50a0e6308a0c7a402c05ca1b0a3476e160669f44f2a28a3121cdf5325cafc8ea724d

            • \Users\Admin\AppData\Local\Temp\is-8C6O6.tmp\dlmgr.dll

              Filesize

              194KB

              MD5

              c41a84ead571651d3f54472e2534b590

              SHA1

              e476e6bc8d3940bf8b84a9b3fe606136387c9cf6

              SHA256

              da9fb4b2bdec84d4b6ee6602666b55d762a0f925863b97ba9f4134e26e5be370

              SHA512

              a5029489ade04efea880fbde25f338f686a1ae2a35c5e5101968393c3932c9af48b374d0ff6e37551a359248c1105327c4cf5776c062135e0d52a176ed1e3b09

            • \Users\Admin\AppData\Local\Temp\is-8C6O6.tmp\dvssyshelper.dll

              Filesize

              471KB

              MD5

              6cbb8dd7c6d931a0aa47684ba70501f6

              SHA1

              9079a507c330585743f599924cdeadfda9a6e1a2

              SHA256

              f3b4f343049a363b0f0055580f7091d43a89dcbffeec1cb7b65df2c2bf7bd3c4

              SHA512

              85c33b2a527c1d5311745dc47afa1b3a5e5d99f460407134b69bd420a747e4c9cbbfe8fe7517d7c494c42a9bf2f9efca78939c9d5d41092ff1f9b049938e5c7d

            • \Users\Admin\AppData\Local\Temp\is-8C6O6.tmp\jansson.dll

              Filesize

              51KB

              MD5

              bd85ae31f57e240dd145a0b1b3a23d1d

              SHA1

              c24a6fc4296c9b0f60d4cc32769306892b4bee0d

              SHA256

              e80bb21d45ff59da6cb22b0fb63267e025be3b11f89006661d077d852fb0a110

              SHA512

              02abf4fb5f445728994c11854e85e9a37faaf7c8d69f8dad31198bd4402df85935debfc4261f45cf42388440e58be74a477310a9c2126c35ea2e9609674f1d7a

            • \Users\Admin\AppData\Local\Temp\is-8C6O6.tmp\libcrypto-1_1.dll

              Filesize

              2.4MB

              MD5

              d525d6132163a1ccc8bba68892452a64

              SHA1

              9f1fbbafb940cd7fce729e3948041d506b226c26

              SHA256

              375639ffb9efdbc5d978d020be5867c3e6fe29cff9ce54be3e584d262673569f

              SHA512

              366e58246ac7e750770a2ffd18f82d64049eae17246227d92e37876392c5b22a35c62cdd3ac4b437fbcf51bae83751ff07c97201bca48e861f65bd0a8755e839

            • \Users\Admin\AppData\Local\Temp\is-8C6O6.tmp\libcurl.dll

              Filesize

              320KB

              MD5

              d5e314b1856826ed2c729996718dde82

              SHA1

              5442c7d1b33fe561f12332e4accc9991d9600da0

              SHA256

              a3e8dfa038824da6f56aad2921b12f383e318e1dbdfad603d8df16ebc5a02ad2

              SHA512

              55b9e1b2eaa984aeff32a798ceef1762880bfef862c25dbb7174de64f7b3e8f6e4c0167291d47840c35dc3d12dcc49aae03612815890bb5c8262461a430ebd1f

            • \Users\Admin\AppData\Local\Temp\is-8C6O6.tmp\libssl-1_1.dll

              Filesize

              533KB

              MD5

              3503885267b930c992cf2fbe028c3b4b

              SHA1

              b82d0a36168b306336227b7677d45d842d932199

              SHA256

              ba5084c0c44317d42fcdb2fd76ce07b73c5048b66f932242945095c5e2e2668b

              SHA512

              a4b68c4bd0dcc1732e0b7e109c4bbb37709309460896a8a992cf4ae26e9f957e1a28f1a446565ff3c712d0a46daf2ede6d39b03a9c86d5bad7dd403bb83ea0ab

            • \Users\Admin\AppData\Local\Temp\is-8C6O6.tmp\msvcp140.dll

              Filesize

              427KB

              MD5

              3a207bdfaa989abab1cf5f7e86555b87

              SHA1

              b5df7c111591c9cf719260fcf0769322927f23f8

              SHA256

              9e9b340bba6d47fb15cde3b9d0568c6d296e3299eca0dfcd2bf000637b36fe13

              SHA512

              9341b5083a9f1470a2f6834d0440b04346da7f4a1b050741c3acc32af730daa567ddcd15d699b7918b7a3a83b5bc45c5514872100d820d63deb8a9b17633e54f

            • \Users\Admin\AppData\Local\Temp\is-8C6O6.tmp\tier0.dll

              Filesize

              142KB

              MD5

              db894e877aa91484ec5b7075f6dfde2a

              SHA1

              779f09729789a86f5efd3e010c8cf59ad004e12f

              SHA256

              b318fb7d1cc6763c0c21684a3949b46a9316045afaa3bb6959f37678cf661f1b

              SHA512

              27cd3509cbcdae17c2c292ea900fd71a7dec762a3b6d9a65e9b6e5c791cd2e661a71ef5979044f094cb22b29d65e085732dfbf3ad69916e4d19e19e0f209d6b7

            • \Users\Admin\AppData\Local\Temp\is-8C6O6.tmp\unihelp.dll

              Filesize

              100KB

              MD5

              2e279ffcc1de9027cebc97511ec4e3fa

              SHA1

              31732b05b4c02d9d0f5f8be8a0984900bc46be25

              SHA256

              915205ab28fdd2e0b5677976425b68918ea141e4ea3ddfc3dad8025d6390da64

              SHA512

              305e5a1a1e4f8545f368c72ee73515b3bb22e7a458b0e40e0f353b13959fedeadaa01f4fd05efee9554f6def66867d1696042463105bba146626543623d337ec

            • \Users\Admin\AppData\Local\Temp\is-8C6O6.tmp\vcruntime140.dll

              Filesize

              75KB

              MD5

              30f437cc4598570e7cc661f8131daf2e

              SHA1

              1549c04d7babf58b71a243ce5e7ec308494ca818

              SHA256

              b48dc53977477f13ca80e7aa002d23a127b53515c0a45fe82c2a87f35450d1d0

              SHA512

              30f21fd5f884d47a46796024ceffb5ef426bbad4c81e1a5fcefe408db5af4739ddc76b18c3937b73000d288440ef886136ef96fc09611c924b20128272cb1539

            • \Users\Admin\AppData\Local\Temp\is-8C6O6.tmp\zlib.dll

              Filesize

              82KB

              MD5

              42ead533d902c09ac7c6b78eaafbc76b

              SHA1

              7ee55d69b5176b440448ef92188eb8c8c47eaf5d

              SHA256

              bd33974eacf309cdcd0bc081286fe777d95f7a97f0bfca873a4255427eac7ea1

              SHA512

              67e12c8560c22c7c073d2e4cb42840ab5c8909be3f651b7bfa681ea3161bb83ba1eadb8c7671fef0e45b02c3ca1a5f8b6fb2f636d50a30e0c9b523bf21426e27

            • memory/756-229-0x0000000000400000-0x00000000004E9000-memory.dmp

              Filesize

              932KB

            • memory/756-1251-0x0000000000400000-0x00000000004E9000-memory.dmp

              Filesize

              932KB

            • memory/756-170-0x0000000000400000-0x00000000004E9000-memory.dmp

              Filesize

              932KB

            • memory/1228-1193-0x0000000003410000-0x0000000003427000-memory.dmp

              Filesize

              92KB

            • memory/1356-1227-0x00000000009A0000-0x00000000009B7000-memory.dmp

              Filesize

              92KB

            • memory/2324-1250-0x0000000000400000-0x0000000000724000-memory.dmp

              Filesize

              3.1MB

            • memory/2324-240-0x0000000000400000-0x0000000000724000-memory.dmp

              Filesize

              3.1MB

            • memory/2324-1226-0x0000000000400000-0x0000000000724000-memory.dmp

              Filesize

              3.1MB

            • memory/3692-1206-0x0000000000980000-0x0000000000997000-memory.dmp

              Filesize

              92KB

            • memory/3740-127-0x0000020D0E5F0000-0x0000020D0E5F1000-memory.dmp

              Filesize

              4KB

            • memory/3740-16-0x0000020D07F20000-0x0000020D07F30000-memory.dmp

              Filesize

              64KB

            • memory/3740-0-0x0000020D07E20000-0x0000020D07E30000-memory.dmp

              Filesize

              64KB

            • memory/3740-126-0x0000020D0E5E0000-0x0000020D0E5E1000-memory.dmp

              Filesize

              4KB

            • memory/3740-35-0x0000020D07090000-0x0000020D07092000-memory.dmp

              Filesize

              8KB

            • memory/4160-45-0x000002619DB00000-0x000002619DC00000-memory.dmp

              Filesize

              1024KB

            • memory/4160-44-0x000002619DB00000-0x000002619DC00000-memory.dmp

              Filesize

              1024KB

            • memory/4404-64-0x000001E1F7AE0000-0x000001E1F7AE2000-memory.dmp

              Filesize

              8KB

            • memory/4404-120-0x000001E1F9240000-0x000001E1F9260000-memory.dmp

              Filesize

              128KB

            • memory/4404-104-0x000001E1F89D0000-0x000001E1F89D2000-memory.dmp

              Filesize

              8KB

            • memory/4404-106-0x000001E1F89F0000-0x000001E1F89F2000-memory.dmp

              Filesize

              8KB

            • memory/4404-108-0x000001E1F8A10000-0x000001E1F8A12000-memory.dmp

              Filesize

              8KB

            • memory/4404-66-0x000001E1F7C00000-0x000001E1F7C02000-memory.dmp

              Filesize

              8KB

            • memory/4404-68-0x000001E1F7CC0000-0x000001E1F7CC2000-memory.dmp

              Filesize

              8KB

            • memory/5188-1229-0x00000000020D0000-0x00000000020E9000-memory.dmp

              Filesize

              100KB

            • memory/5248-1230-0x00000000014A0000-0x00000000014B9000-memory.dmp

              Filesize

              100KB

            • memory/5320-1231-0x00000000011A0000-0x00000000011B9000-memory.dmp

              Filesize

              100KB