Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    43s
  • max time network
    43s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    13/10/2024, 20:02

General

  • Target

    video_editor_x64.exe

  • Size

    114.7MB

  • MD5

    c933e930d461ca97651075a73644b9e3

  • SHA1

    4ed6356f544699d058a122ecc5148f046a1af7ec

  • SHA256

    4f7bf5eec173898d67e693ae48351e6ca813a1478cea7bbf3359d96b90c37bb7

  • SHA512

    1bebf5ab403ea6d512f2205470c87b5acd99b75766a6a156d6262bce17a51053594a963aea2b8cde98201e04d6e65326046fe52b6b5979f3400d2b25d037e5a9

  • SSDEEP

    3145728:XeaxX/m4b1kHiDCEXsRXQKVpGLPL4/0+VZ5:Xeax7b4iDCE8JQ0oLatV

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Modifies Windows Firewall 2 TTPs 9 IoCs
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in System32 directory 1 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 4 IoCs
  • Executes dropped EXE 9 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 27 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: MapViewOfSection 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\video_editor_x64.exe
    "C:\Users\Admin\AppData\Local\Temp\video_editor_x64.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4372
    • C:\Users\Admin\AppData\Local\Temp\is-RIA54.tmp\video_editor_x64.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-RIA54.tmp\video_editor_x64.tmp" /SL5="$B01D4,119251992,832512,C:\Users\Admin\AppData\Local\Temp\video_editor_x64.exe"
      2⤵
      • Checks computer location settings
      • Drops file in System32 directory
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1068
      • C:\Users\Admin\AppData\Local\Temp\is-BG597.tmp\vcredist_x64.exe
        "C:\Users\Admin\AppData\Local\Temp\is-BG597.tmp\vcredist_x64.exe" /install /passive /norestart
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:308
        • C:\Windows\Temp\{3DF477EE-C4A9-457F-ACD3-DF9FE02216A2}\.cr\vcredist_x64.exe
          "C:\Windows\Temp\{3DF477EE-C4A9-457F-ACD3-DF9FE02216A2}\.cr\vcredist_x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\is-BG597.tmp\vcredist_x64.exe" -burn.filehandle.attached=512 -burn.filehandle.self=600 /install /passive /norestart
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:4940
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslcore5.dll"
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:3172
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslprofiles5.dll"
        3⤵
        • Loads dropped DLL
        PID:4452
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslconfig5.dll"
        3⤵
        • Loads dropped DLL
        PID:2256
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslstreams5.dll"
        3⤵
        • Loads dropped DLL
        PID:4972
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslvideofilters5.dll"
        3⤵
        • Loads dropped DLL
        PID:1308
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslaudiofilters5.dll"
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:3328
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslaudiovis5.dll"
        3⤵
        • Loads dropped DLL
        PID:2908
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslaudiocodecs5.dll"
        3⤵
        • Loads dropped DLL
        PID:1088
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslaudioplayer5.dll"
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:2176
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslvideocodecs5.dll"
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:2284
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslvvdsfilter5.ax"
        3⤵
        • Loads dropped DLL
        PID:1084
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslmediaplayer5.dll"
        3⤵
        • Loads dropped DLL
        PID:1580
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslmediafile5.dll"
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:3872
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslavfile5.dll"
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:4228
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslbraw5.dll"
        3⤵
        • Loads dropped DLL
        PID:2084
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\Blackmagic\BlackmagicRawAPI.dll"
        3⤵
        • Loads dropped DLL
        PID:2464
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslanimationfile5.dll"
        3⤵
        • Loads dropped DLL
        PID:4020
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\msldvdfile5.dll"
        3⤵
          PID:2728
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslwmfile5.dll"
          3⤵
          • Modifies registry class
          PID:1256
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslflashfile5.dll"
          3⤵
          • Modifies registry class
          PID:3896
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslrmfile5.dll"
          3⤵
          • Modifies registry class
          PID:5116
        • C:\Windows\SysWOW64\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\x32\mslrmwrapper5.exe"
          3⤵
          • System Location Discovery: System Language Discovery
          PID:4344
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslvocfile5.dll"
          3⤵
          • Modifies registry class
          PID:2200
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslnullfile5.dll"
          3⤵
          • Modifies registry class
          PID:1392
        • C:\Windows\SysWOW64\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\x32\mslvdwrapper5.exe"
          3⤵
          • System Location Discovery: System Language Discovery
          PID:3180
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslaudiodesktop5.ax"
          3⤵
          • Modifies registry class
          PID:924
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslaudiocapture5.dll"
          3⤵
          • Modifies registry class
          PID:4616
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslinetsrv5.dll"
          3⤵
          • Modifies registry class
          PID:4564
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslocv5.dll"
          3⤵
          • Modifies registry class
          PID:4148
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslonnx5.dll"
          3⤵
          • Modifies registry class
          PID:4212
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\msldrivekernel5.dll"
          3⤵
            PID:2136
          • C:\Windows\system32\regsvr32.exe
            "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\msldfs5.dll"
            3⤵
              PID:2892
            • C:\Windows\system32\regsvr32.exe
              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\msldio5.dll"
              3⤵
              • Modifies registry class
              PID:4176
            • C:\Windows\system32\regsvr32.exe
              "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\msxml3.dll"
              3⤵
                PID:5072
              • C:\Windows\system32\regsvr32.exe
                "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslcore5.dll"
                3⤵
                • Modifies registry class
                PID:2632
              • C:\Windows\system32\regsvr32.exe
                "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslvideofilters5.dll"
                3⤵
                  PID:4132
                • C:\Windows\system32\regsvr32.exe
                  "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslaudiofilters5.dll"
                  3⤵
                  • Modifies registry class
                  PID:2100
                • C:\Windows\system32\regsvr32.exe
                  "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslaudiovis5.dll"
                  3⤵
                    PID:356
                  • C:\Windows\system32\regsvr32.exe
                    "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslprofiles5.dll"
                    3⤵
                    • Modifies registry class
                    PID:516
                  • C:\Windows\system32\regsvr32.exe
                    "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslconfig5.dll"
                    3⤵
                      PID:1820
                    • C:\Windows\system32\regsvr32.exe
                      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslstreams5.dll"
                      3⤵
                      • Modifies registry class
                      PID:4412
                    • C:\Windows\system32\regsvr32.exe
                      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslaudiocodecs5.dll"
                      3⤵
                        PID:4240
                      • C:\Windows\system32\regsvr32.exe
                        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslaudioplayer5.dll"
                        3⤵
                          PID:3916
                        • C:\Windows\system32\regsvr32.exe
                          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslvideocodecs5.dll"
                          3⤵
                            PID:4444
                          • C:\Windows\system32\regsvr32.exe
                            "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslvvdsfilter5.ax"
                            3⤵
                              PID:540
                            • C:\Windows\system32\regsvr32.exe
                              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslmediaplayer5.dll"
                              3⤵
                              • Modifies registry class
                              PID:520
                            • C:\Windows\system32\regsvr32.exe
                              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslmediafile5.dll"
                              3⤵
                              • Modifies registry class
                              PID:1548
                            • C:\Windows\system32\regsvr32.exe
                              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslavfile5.dll"
                              3⤵
                              • Modifies registry class
                              PID:3224
                            • C:\Windows\system32\regsvr32.exe
                              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslbraw5.dll"
                              3⤵
                              • Modifies registry class
                              PID:3204
                            • C:\Windows\system32\regsvr32.exe
                              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\Blackmagic\BlackmagicRawAPI.dll"
                              3⤵
                              • Modifies registry class
                              PID:1312
                            • C:\Windows\system32\regsvr32.exe
                              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslanimationfile5.dll"
                              3⤵
                              • Modifies registry class
                              PID:1120
                            • C:\Windows\system32\regsvr32.exe
                              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\msldvdfile5.dll"
                              3⤵
                                PID:1316
                              • C:\Windows\system32\regsvr32.exe
                                "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslwmfile5.dll"
                                3⤵
                                  PID:2840
                                • C:\Windows\system32\regsvr32.exe
                                  "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslflashfile5.dll"
                                  3⤵
                                  • Modifies registry class
                                  PID:1000
                                • C:\Windows\system32\regsvr32.exe
                                  "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslrmfile5.dll"
                                  3⤵
                                    PID:3700
                                  • C:\Program Files\Common Files\FlashIntegro\ActiveX\x32\mslrmwrapper5.exe
                                    "C:\Program Files\Common Files\FlashIntegro\ActiveX\x32\mslrmwrapper5.exe" /RegServer
                                    3⤵
                                    • Executes dropped EXE
                                    • System Location Discovery: System Language Discovery
                                    • Modifies registry class
                                    PID:1372
                                  • C:\Program Files\Common Files\FlashIntegro\ActiveX\x32\mslrmwrapper5.exe
                                    "C:\Program Files\Common Files\FlashIntegro\ActiveX\x32\mslrmwrapper5.exe" /RegServerPerUser
                                    3⤵
                                    • Executes dropped EXE
                                    • System Location Discovery: System Language Discovery
                                    • Modifies registry class
                                    PID:4656
                                  • C:\Windows\system32\regsvr32.exe
                                    "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslvocfile5.dll"
                                    3⤵
                                    • Modifies registry class
                                    PID:5040
                                  • C:\Program Files\Common Files\FlashIntegro\ActiveX\x32\mslvdwrapper5.exe
                                    "C:\Program Files\Common Files\FlashIntegro\ActiveX\x32\mslvdwrapper5.exe" /RegServer
                                    3⤵
                                    • Executes dropped EXE
                                    • System Location Discovery: System Language Discovery
                                    PID:1732
                                  • C:\Program Files\Common Files\FlashIntegro\ActiveX\x32\mslvdwrapper5.exe
                                    "C:\Program Files\Common Files\FlashIntegro\ActiveX\x32\mslvdwrapper5.exe" /RegServerPerUser
                                    3⤵
                                    • Executes dropped EXE
                                    • System Location Discovery: System Language Discovery
                                    • Modifies registry class
                                    PID:3724
                                  • C:\Windows\system32\regsvr32.exe
                                    "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslnullfile5.dll"
                                    3⤵
                                    • Modifies registry class
                                    PID:3360
                                  • C:\Windows\system32\regsvr32.exe
                                    "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslaudiodesktop5.ax"
                                    3⤵
                                      PID:4236
                                    • C:\Windows\system32\regsvr32.exe
                                      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslaudiocapture5.dll"
                                      3⤵
                                      • Modifies registry class
                                      PID:4972
                                    • C:\Windows\system32\regsvr32.exe
                                      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslinetsrv5.dll"
                                      3⤵
                                      • Modifies registry class
                                      PID:3664
                                    • C:\Windows\system32\regsvr32.exe
                                      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslocv5.dll"
                                      3⤵
                                      • Modifies registry class
                                      PID:5052
                                    • C:\Windows\system32\regsvr32.exe
                                      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\mslonnx5.dll"
                                      3⤵
                                      • Modifies registry class
                                      PID:4608
                                    • C:\Windows\system32\regsvr32.exe
                                      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\msldrivekernel5.dll"
                                      3⤵
                                      • Modifies registry class
                                      PID:1880
                                    • C:\Windows\system32\regsvr32.exe
                                      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\msldfs5.dll"
                                      3⤵
                                        PID:4420
                                      • C:\Windows\system32\regsvr32.exe
                                        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Common Files\FlashIntegro\ActiveX\msldio5.dll"
                                        3⤵
                                          PID:4172
                                        • C:\Windows\system32\netsh.exe
                                          "C:\Windows\system32\netsh.exe" advfirewall firewall delete rule name="VSDC Free Video Editor Tmp"
                                          3⤵
                                          • Modifies Windows Firewall
                                          • Event Triggered Execution: Netsh Helper DLL
                                          PID:2352
                                        • C:\Windows\system32\netsh.exe
                                          "C:\Windows\system32\netsh.exe" advfirewall firewall add rule name="VSDC Free Video Editor Tmp" program="C:\Program Files\FlashIntegro\VideoEditor\VideoEditor.exe" profile=any protocol=TCP dir=in localport=any remoteport=any action=allow
                                          3⤵
                                          • Modifies Windows Firewall
                                          • Event Triggered Execution: Netsh Helper DLL
                                          PID:3976
                                        • C:\Windows\system32\netsh.exe
                                          "C:\Windows\system32\netsh.exe" advfirewall firewall add rule name="VSDC Free Video Editor Tmp" program="C:\Program Files\FlashIntegro\VideoEditor\VideoEditor.exe" profile=any protocol=UDP dir=in localport=any remoteport=any action=allow
                                          3⤵
                                          • Modifies Windows Firewall
                                          • Event Triggered Execution: Netsh Helper DLL
                                          PID:2084
                                        • C:\Windows\system32\netsh.exe
                                          "C:\Windows\system32\netsh.exe" advfirewall firewall delete rule name="VSDC Free Video Editor Activater"
                                          3⤵
                                          • Modifies Windows Firewall
                                          • Event Triggered Execution: Netsh Helper DLL
                                          PID:4664
                                        • C:\Windows\system32\netsh.exe
                                          "C:\Windows\system32\netsh.exe" advfirewall firewall add rule name="VSDC Free Video Editor Activater" program="C:\Program Files\FlashIntegro\VideoEditor\Activation.exe" profile=any protocol=TCP dir=in localport=any remoteport=any action=allow
                                          3⤵
                                          • Modifies Windows Firewall
                                          • Event Triggered Execution: Netsh Helper DLL
                                          PID:4980
                                        • C:\Windows\system32\netsh.exe
                                          "C:\Windows\system32\netsh.exe" advfirewall firewall add rule name="VSDC Free Video Editor Activater" program="C:\Program Files\FlashIntegro\VideoEditor\Activation.exe" profile=any protocol=UDP dir=in localport=any remoteport=any action=allow
                                          3⤵
                                          • Modifies Windows Firewall
                                          • Event Triggered Execution: Netsh Helper DLL
                                          PID:4712
                                        • C:\Windows\system32\netsh.exe
                                          "C:\Windows\system32\netsh.exe" advfirewall firewall delete rule name="VSDC Free Video Editor Updater"
                                          3⤵
                                          • Modifies Windows Firewall
                                          • Event Triggered Execution: Netsh Helper DLL
                                          PID:4256
                                        • C:\Windows\system32\netsh.exe
                                          "C:\Windows\system32\netsh.exe" advfirewall firewall add rule name="VSDC Free Video Editor Updater" program="C:\Program Files\FlashIntegro\VideoEditor\Updater.exe" profile=any protocol=TCP dir=in localport=any remoteport=any action=allow
                                          3⤵
                                          • Modifies Windows Firewall
                                          • Event Triggered Execution: Netsh Helper DLL
                                          PID:3484
                                        • C:\Windows\system32\netsh.exe
                                          "C:\Windows\system32\netsh.exe" advfirewall firewall add rule name="VSDC Free Video Editor Updater" program="C:\Program Files\FlashIntegro\VideoEditor\Updater.exe" profile=any protocol=UDP dir=in localport=any remoteport=any action=allow
                                          3⤵
                                          • Modifies Windows Firewall
                                          • Event Triggered Execution: Netsh Helper DLL
                                          PID:4748
                                        • C:\Program Files\FlashIntegro\VideoEditor\VideoEditor.exe
                                          "C:\Program Files\FlashIntegro\VideoEditor\VideoEditor.exe"
                                          3⤵
                                          • Enumerates connected drives
                                          • Executes dropped EXE
                                          • Suspicious use of SetWindowsHookEx
                                          PID:3492
                                    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
                                      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
                                      1⤵
                                      • Drops file in Windows directory
                                      • Modifies registry class
                                      • Suspicious use of SetWindowsHookEx
                                      PID:752
                                    • C:\Windows\system32\browser_broker.exe
                                      C:\Windows\system32\browser_broker.exe -Embedding
                                      1⤵
                                      • Modifies Internet Explorer settings
                                      PID:2296
                                    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
                                      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
                                      1⤵
                                      • Suspicious behavior: MapViewOfSection
                                      • Suspicious use of SetWindowsHookEx
                                      PID:2836
                                    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
                                      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
                                      1⤵
                                      • Drops file in Windows directory
                                      • Modifies Internet Explorer settings
                                      • Suspicious use of AdjustPrivilegeToken
                                      • Suspicious use of SetWindowsHookEx
                                      PID:1836
                                    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
                                      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
                                      1⤵
                                      • Drops file in Windows directory
                                      • Modifies registry class
                                      PID:68
                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\x32\mslrmwrapper5.exe
                                      "C:\Program Files\Common Files\FlashIntegro\ActiveX\x32\mslrmwrapper5.exe" -Embedding
                                      1⤵
                                      • Executes dropped EXE
                                      • System Location Discovery: System Language Discovery
                                      PID:6012

                                    Network

                                    MITRE ATT&CK Enterprise v15

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\P7x64.dll

                                      Filesize

                                      217KB

                                      MD5

                                      ab92c5c68e9b019a00f14f74343572ea

                                      SHA1

                                      184c224d863f0041460da9c2f63de3265c6743af

                                      SHA256

                                      d89f9bd4660123df342b04fbee426def23e5f3d1665d3663ea9ad90bc0837909

                                      SHA512

                                      9856a68ccab7ffca41fd3d79890b2c6b9907aa3f19f7a5a909e627cc5da329959698b713e95810e753b9bab8f731da9ea2d8b1107ffc819ce631cae0c5356804

                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\concrt140.dll

                                      Filesize

                                      310KB

                                      MD5

                                      b7ff8e74ab911b76f4fe2fbdc2c3cea1

                                      SHA1

                                      7ca4395c9083838052677ca55af0c15bc7f6c94d

                                      SHA256

                                      d1a9b1a0ebe71e886b42a59faa67d4bf7646c3f46e0153dd2519b0e77ebbcdc5

                                      SHA512

                                      37125fd1fc0de5f3101437b7a0ce6b72737d5a6093d26e3fe911b575aa0116c0e7c64b67c4b66da20173f9c72b3617e42aeeeb2eb67f4d2a04846e5f24311ff2

                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\mslaudiofilters5.dll

                                      Filesize

                                      4.5MB

                                      MD5

                                      e9f1b8a58029ca6d2ef8512b909ad19a

                                      SHA1

                                      b0b5d1045b6e5f087e49ece43f6fab046b73beac

                                      SHA256

                                      c982621403397e8270d3876a02d1aa506d5a90d154ab5390f62c75f0d347d557

                                      SHA512

                                      8eabf64e4bcc0d3f1e3291067881b8032841736a1724dbcfc818fc66add43385f4d9fbd3c1e4180f7e89f899e62ea2f1b813a24a8cc8b7b720031e60c36cf836

                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\mslaudioplayer5.dll

                                      Filesize

                                      132KB

                                      MD5

                                      b8f87e7fbbeb6fc481418d631623c9b0

                                      SHA1

                                      172b07dd848493bd9ed36b35f4af2cb8d41dd56b

                                      SHA256

                                      61aa8388d21416dbef53c6e5663174d2f98858d4d04ee769a86e3ca200d45139

                                      SHA512

                                      08ff0753cd98280d7b1adcc4ff52a903307674ebe9b7fe62314fcba36c1fe25a31666ffdc7fc6282513f5ef321b65859b7aa64734429e650dbaaaf488fefcb3c

                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\mslconfig5.dll

                                      Filesize

                                      4.0MB

                                      MD5

                                      9820d9ae130a44a69305675e8d278642

                                      SHA1

                                      bf35696aa5f8f7a3d71af380df26be091b101aff

                                      SHA256

                                      077958b1ab92d43506ff62ffe24b6ba710fba3a64c0213aac00c022399098860

                                      SHA512

                                      958e273670b11a523706e7e060a55412986fa7f21554744bde43af1bfccc8e466db4d86ed5f33046eeef18af79c92953cbe32b9fcc4fe6167b1d63096530fafd

                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\mslvideofilters5.dll

                                      Filesize

                                      88KB

                                      MD5

                                      f5f8fd12f78cd0118af48fb9ec9b909d

                                      SHA1

                                      7b12c58ee52bcef490bc1a4ab86faf7167997e65

                                      SHA256

                                      503dceec75e47aa8517b9c75f1a3a1f3c8d058ed089b63a3d69ef1fc525ac53b

                                      SHA512

                                      2fadeb5a4bc8bb96eb48a8c4588311dcfe5a05d776bf2e3973dbf5a276d38ba74eba95669b40ec2b78f5ced8a4af72e1325566207453e7400b62285248bfb273

                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\msvcp140.dll

                                      Filesize

                                      554KB

                                      MD5

                                      0d89995cc45c7eb40e5a7e287506c1e9

                                      SHA1

                                      096c27b06ee7fff2bcd290af0264cdafd04cded9

                                      SHA256

                                      e0a22a594e148fa55ceef3e49969bfa77011a801267a0bd7805b681b593c9d0b

                                      SHA512

                                      3497c2957d10fcddeec8f312fb15c53f82d770dcc3e771a94daf4f4435c3ddf323ecd33310baaf1ad56673bac7c6268a9ef921d5f32cf7e4a7c9dcb0d8aafa63

                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\msvcp140_1.dll

                                      Filesize

                                      24KB

                                      MD5

                                      c060bb176a671f068362db2673a08c5e

                                      SHA1

                                      1d6b4ae5e778f1daf3573d4817777a51c35cbac4

                                      SHA256

                                      768e0829decea713afb35a7de07e276f051581c8ff2c17e1bae9b07dd1445dd0

                                      SHA512

                                      78a6c8f76d3ebd8db9c784d7775ec44647c4776fcb11d0b32ae2b3a6f2837c0b3be12f053ef6a25811a68da17d0eea83077521f496e238757f5539b445a58a7d

                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\msvcp140_2.dll

                                      Filesize

                                      182KB

                                      MD5

                                      94bc7a22ec7308f851cc58fd6de90b2d

                                      SHA1

                                      cb4d8dcd2c8e9bbf049c1628246cb12cdd34b353

                                      SHA256

                                      5c12eaef6db18b168f712bff9b55793e0effddf15b89552e7f5ca4f8f1887b9b

                                      SHA512

                                      87791e992ccb43c833ea6ef2b0fa146031e0fd26305c93d77bc693473292f5b54d36516f3294edcc1c253d2decc166fdd1767c659f65e7d7e447cd8c318b7c96

                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\msvcp140_atomic_wait.dll

                                      Filesize

                                      56KB

                                      MD5

                                      6407c40330e6081689bb702daa5aacac

                                      SHA1

                                      24126ff2ddd568a6ed17134e539cad94e22152a7

                                      SHA256

                                      0193cdcff562f12218ecab5841fd6bbc4d24295cd8e4dcae960e2fb47cceb662

                                      SHA512

                                      445ab6d0e1f2e5d0ef520261122fac3f6909fcdc7c39df7891b395694f31a3b54a1f7f5dadc35701baad4431ef358481e725cd19f438362c262e4f936abea7a3

                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\msvcp140_codecvt_ids.dll

                                      Filesize

                                      21KB

                                      MD5

                                      23efa781b89641f24c17592de857bb40

                                      SHA1

                                      fd537ff2cf7d09701baf6550640d6cc96bd5d284

                                      SHA256

                                      9c6c0d8fa51ecca5e274295cbd72d45be474f3c6ce1070ec5e90f70242ae7185

                                      SHA512

                                      48c541d11fae95cfd04aa00d9c769a7cb6844524cdbb2e234af471048148a6f7f20e1acf077b88cb6127e8a7c49642726745386d081d0c8d404dcbb9caa4310b

                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\vccorlib140.dll

                                      Filesize

                                      327KB

                                      MD5

                                      b2b992faefa1bdf7445ae4e6435bd0b5

                                      SHA1

                                      499e221690ce4f0ac4ecd11968fa15fd09ffb84b

                                      SHA256

                                      3e194d5ab03fdb1e97b0bae61070994013487c567f82c9338e7adc202f7d7d67

                                      SHA512

                                      90de9bdb6011f2c611ea5549a296e62656d1e66dd7dbe44b6fdefc655a613599ab3991ed5a390c22c9c0aa9ba5432da97a62bdc79e656659c9ef2a071469a0f8

                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\vcruntime140.dll

                                      Filesize

                                      96KB

                                      MD5

                                      a4cf5c1f71c540c69371c861abe57726

                                      SHA1

                                      f272b34182db8a78ffc71755b46a57a253fcd384

                                      SHA256

                                      c179d8914ba8e57b2f8f4d6c101c2c550c7c6712a7f0f9920a97db340f9d9574

                                      SHA512

                                      f2b53f28a6369f76b22e99fddfb86730f3d33e87c68dae7aa3d05808223693bb86ade263cccb99d5462cf98eeeaa6a6f1cfe5ea3aa1739f8ad6eb624caff1045

                                    • C:\Program Files\Common Files\FlashIntegro\ActiveX\vcruntime140_1.dll

                                      Filesize

                                      37KB

                                      MD5

                                      9f4eac207cb58e8d110477e7fd19d565

                                      SHA1

                                      687051b863f7a7178cabf9c06ab3b534b1e23dd3

                                      SHA256

                                      7cf38d20d00b6640d510eab70171e1c6f8fa2e42040832e17c7433ab61d94a8e

                                      SHA512

                                      9c5c4499adfc7b61751510f52a1288ff386dd1c1aaf8e8a9660990194813394329f8123f38e026ea10c6e30b4a5506625b9060329d524db68e48f36ab2691a05

                                    • C:\Program Files\FlashIntegro\VideoEditor\Profiles\is-52TM6.tmp

                                      Filesize

                                      45KB

                                      MD5

                                      bb47e7dd65907beac726ccb568133618

                                      SHA1

                                      90e3ec7da07662f7097d2a9c3b40a7a72cf172ff

                                      SHA256

                                      e1bb9f8af51c60ad2c1c7b849c4580b2b0649438b4dfc56a470dc13cc0cac909

                                      SHA512

                                      01fbd987b3ba3891350d10386af9cda2d106f5c54434710f8feae34d7ed2b00b21a3e72f9d74bb0ec92802db2570b6e249338462aa33493929b8cdf1ac136110

                                    • C:\Program Files\FlashIntegro\VideoEditor\Profiles\is-JA3HA.tmp

                                      Filesize

                                      201KB

                                      MD5

                                      f7fcabbb93555e95c2239c4893b8eea9

                                      SHA1

                                      cd8b6d2e1b8ff24ef7351e7ece4975fbe94c0f2b

                                      SHA256

                                      69ecc1f3a72cfb5507a4c762893fa07ec5d080dcd101194c0166fc35274511a5

                                      SHA512

                                      2423acfbfd3449b762775341a6c91c9a723e79acd807d186fe28e675a457fbca0f03dc305cf9aba75ebf3a9f2e13452117507da02d3f13a5e94bdb86967ecce4

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\CrashRptx64.dll

                                      Filesize

                                      147KB

                                      MD5

                                      4c56b3cdae8e9bdfa53c55418372b11a

                                      SHA1

                                      f18a6285f78229eab5ccdbbdca9cd23f164ff957

                                      SHA256

                                      5a52c954eb2670254bdd9a940a3bd2d406a8ea473d5b6e2bbf67aa30e9dc0186

                                      SHA512

                                      c4e86557b0d58a96ebd7b97fbe7f697cf865d3d318f6448251056e833488fe2229cde1c3e82909b97090f0aad497826aa92a02cda6d068f8c4ca934594b860f4

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\CrashSender1403.exe

                                      Filesize

                                      1.1MB

                                      MD5

                                      02e8a01d6f45a8ee3044d82279d5fb28

                                      SHA1

                                      353d41dc0478d6b6ac9af164290424ead51b0fe0

                                      SHA256

                                      5a451420bc0e46ee558c57c854fac4cfbbce1613a53bfc6b283ba14515b7c883

                                      SHA512

                                      324ea3a757b468bbe0927ca5aa24c96a2692c2a378401988059334040c9670251baea9504ba5887902555e16c4050082cdf70e88dea497e8a4c16135c0c59d6e

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_BN.ini

                                      Filesize

                                      8KB

                                      MD5

                                      c414cbd1e54b61425870e8a0e6785d16

                                      SHA1

                                      fa8c603ff774824f7847ee2481e6c53764f6e5a4

                                      SHA256

                                      ac87b439f2c1dbe5c90c226254189418102c749e5031438df82e1885ef98aa38

                                      SHA512

                                      d77511072a8eebc61f7f203198b6d0fd0ce520c3fea440b7994201c0203c875c5903d5504cf91f1e788e36c5653b28bcb62ffd93ea74e54b81b03a01e0b624cd

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_CS.ini

                                      Filesize

                                      8KB

                                      MD5

                                      b6ac6eb650d062d043cf4030196b9798

                                      SHA1

                                      cc43ea49fe9c007494a1ec1d9ac086cc2dda6cc6

                                      SHA256

                                      8d96400d7159c90d7ce290006790399ac2100080d7280134e7371cc1db011970

                                      SHA512

                                      a8110ff38a36e1d4daa392209ebb497bb041332f0125fb30fa1d9ee775f34925d2a704a5fee594739ae0909f34dfc06448884a6a3b926c88362b3b98042686de

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_DE.ini

                                      Filesize

                                      8KB

                                      MD5

                                      088f56f41cae74e6c399fad788829b93

                                      SHA1

                                      59e3c6542b92ecf5a63cb9bca529823498721437

                                      SHA256

                                      562b71d6b0340d8f5d881198a164fa857a646f4e43d01c76270a71d65588e605

                                      SHA512

                                      9a95e2c09aeef76b55b9021d151a5914802d0a5e7e17da6128d5165fa8f338ecf5bd38cd056a43a3041c1893299fd0002186b756245a4534fe7752c5d9e03bdc

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_EN.ini

                                      Filesize

                                      8KB

                                      MD5

                                      771da39b527e886a247a0c0a33ffb715

                                      SHA1

                                      cb762abe50294a08a7823c246e02cd9347555b49

                                      SHA256

                                      763f0fe5af80055827fb2563af696bd1452c39be080720ab483d0ce6ac36ee92

                                      SHA512

                                      628382cf8a6035275b48d6ff3cf0dc17c2b61f65e4ef0f138990a09fd0cf09a4f821e2cb5780a3fddb49a01e3f6af1f379ed44bef290d39b0d04d5e110b7d9a5

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_ES.ini

                                      Filesize

                                      9KB

                                      MD5

                                      0871aabbb223d0fb55540fe7acbc51cf

                                      SHA1

                                      085476dfe9b8f75a11399008e4ad6e931c3505d5

                                      SHA256

                                      90aa62baa98f460f4911c1d7794e54b1697c524a82229c62f632627a9339edba

                                      SHA512

                                      fecf554978acd9e5a03fe7bd987db75190b5759275867b6119e95581a09f0ada68ca30bd07bed91c46d80683b4a8e412721fcbf776ddeeb5ad655804a6ec0699

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_FA.ini

                                      Filesize

                                      7KB

                                      MD5

                                      150f5f38840722ecd18bb3f93d6825f3

                                      SHA1

                                      7e969a74b02095b8253fb91833c17b4216fb4b8d

                                      SHA256

                                      2eab0b8c74a452f14807a58ea7e5abc9f2456f5ee071fc7737e0ace9b1e281eb

                                      SHA512

                                      fd4885fbb85e0451f9a36b121ab7881dd3374283870eb342111f2aa5249b5326c682ab5819cfc54a395754759d93fcb7b2d5fec8da57018fcc3cd712e24b29b1

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_FR.ini

                                      Filesize

                                      9KB

                                      MD5

                                      733051cb5bf0a0e194c171380884328a

                                      SHA1

                                      cd3106376f42e9e30f02f11d60dd7636dc81e944

                                      SHA256

                                      8837aaac9d6071256514c7b9bc7dfc87f485036403c29db778b3cbe6df7c7d89

                                      SHA512

                                      b136baa49eb8b4636dd29403e19991da5fa027f849eef16ec9bd6e4b51e04c4254f566e5ec36e0fca97f809b8ac2b2041d82dd0631ee910ffbf7d6184c4352b3

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_HI.ini

                                      Filesize

                                      8KB

                                      MD5

                                      b0bd5f27ef6381e111280e6afb4f2f1e

                                      SHA1

                                      daf2269a6a1ac6f988a3060e4770395df183b2db

                                      SHA256

                                      7d5cd0d52681ca2b60c2dc7d6b71c77f2081364aa07d31b6b76d1621a03f0662

                                      SHA512

                                      d66e8d6cfd9b52f13f679e433cd04619199814fa7a463b3f0a9aff9a9e53d41eb0d433c5e9d3271682d5fc760feb689a5347f5d3b21be8923186823c912bf31d

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_HI_orig.ini

                                      Filesize

                                      8KB

                                      MD5

                                      80f518d5e437f08859716f164e3dc503

                                      SHA1

                                      1277a14a7978168a7efd6bfa779c124e37aa3fe8

                                      SHA256

                                      84ae05d640d8f05d6c9c97194734e0cb54ad74661eba12076225d74eb11fe85e

                                      SHA512

                                      5d0718a9d4a60680811badf291ee7de702853831d950eae32825add2e80e8d54de26b47b011a725bcdea8cfaa44c4d0eaf3e7abbc81ca24c8c0a0570cadea64d

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_IT.ini

                                      Filesize

                                      8KB

                                      MD5

                                      7946240b3f0a4f4690a606e99d033d80

                                      SHA1

                                      3f1eed3d945155bb9805d3d8a7ab8ab46aef93e5

                                      SHA256

                                      668861ed83446ddd88a52d1da75b26f81fbbfbd28bef799dffd81545b6620929

                                      SHA512

                                      6d185abef33b9dbee082161dd0c9dc85d85a23641ea87d02a998b45a9cf9d4e11f5844611a337ade63bd71d5f8db436b9a0080b402acea7370d63173f5af79f2

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_JA.ini

                                      Filesize

                                      5KB

                                      MD5

                                      734ede39b3c0908bba4c4dfd4d94ccfb

                                      SHA1

                                      79bf0855227e8f30c5c8374a60b24ba6fc631bf0

                                      SHA256

                                      e5e774d8ea8ee657a8e25e0f90f0fa18db40bdadbd47a6939473557508d8a7a6

                                      SHA512

                                      2ef962e808ea8f58caa29937ad4684d115aa9a21d56ffef70351edb517712cbcf58608f8eadcbb4696e43410273b8ccb6adb26663f541345e59c98733508bac0

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_KO.ini

                                      Filesize

                                      6KB

                                      MD5

                                      ba8eb6172962837d3c32d1800a33049b

                                      SHA1

                                      77c7328d3873092af2c8a36b29b8a427a4ffd059

                                      SHA256

                                      f88bcba711b9d014dd028fff3d22ff6c67e094d7263d0f90f34252c3a0f9b381

                                      SHA512

                                      e14e663a6505b547639c1ac46bac84543d5a10b31e9021e6be808df524e0acc74ceb138339ed100e24b4f095ab33216af6af1e59ee0728457e47faf521fd948d

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_PL.ini

                                      Filesize

                                      8KB

                                      MD5

                                      8e1574b9f46ec84c1c471c76ecdb5e78

                                      SHA1

                                      f91e0e641f3d4f9f2d2ac4dfd3635fce386eb487

                                      SHA256

                                      5b5b3113c0a23400fb11d311995f82f96ad30792c700f09f35bb40d63987f302

                                      SHA512

                                      579607bffd41ada4eafb547ecb1582efdfce8c3d44a4f12b0b95cabc5efc23d986604381e906690c6b8a13f4852f349ba667d39524793511c5276ee0895c3d35

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_PT.ini

                                      Filesize

                                      8KB

                                      MD5

                                      5b42edf21c241f237c407bf42803a8a6

                                      SHA1

                                      a28b2520476d0e9fabb6db143f42dd31f677e02f

                                      SHA256

                                      444f8659317abadb97626385615c65ccbaae846d6ecc58966829071518512cf9

                                      SHA512

                                      0663753e724ff4e80dc2379f412b8999985b34ee3152b334e2a1e2d0d932b1ee1c4b297a266f1a142d0c68640639ab2be17bbff20672de2b794c260321b29d71

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_RU.ini

                                      Filesize

                                      8KB

                                      MD5

                                      7133f35c69e84c9bff0899dad8b36c07

                                      SHA1

                                      9b71c69d46a9436e3e1c3a7e6517508668162cb4

                                      SHA256

                                      aa3b6f6245b27e2d58d3c164264af853fe6e718bb03d1c6f77b159616c768ceb

                                      SHA512

                                      9dbbb09646f74f9dbbc32169489e48cd3801bc00a78566a6cd5dcbc47c33eec5141c9af56ff226eeef3a85fd3b3474c05ca60e2912f040f0dacd5e83f25b1e3f

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_SK.ini

                                      Filesize

                                      8KB

                                      MD5

                                      2f97d087b9d2b9a04325f54d0bc65235

                                      SHA1

                                      770bd8b419d1d7614d8fe7f7523060f8b8afef2c

                                      SHA256

                                      4cf9914ede1297c37bb194c65729d44bc9c48c0434f566e80185fa9eb86d0ebd

                                      SHA512

                                      0d917de5d20bf1f0faa4dac30faabd0b7bff36787443b0a089905b9c3c7399e059b507e76de0a53e85a3d713711efb61ae36bc95f2bd7fa03b6b8e80bb585098

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_TR.ini

                                      Filesize

                                      8KB

                                      MD5

                                      7dbc588d328a68c0a4f4701a2b9017e8

                                      SHA1

                                      240ba369a0c19e767705168199382e7aaadce193

                                      SHA256

                                      fd0af3dbe8826ce1164206764005276b4eaacc3d5170ffaddad1507ef4d2a349

                                      SHA512

                                      e2449312de6fad8f034cfbea106faf74fb1c245db3b6091f24fe1ff51d18b9392b4fe83d1d0e496bc4b4a4738ea370f5634492d09a27a142821699887df47e1b

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_UR.ini

                                      Filesize

                                      8KB

                                      MD5

                                      6a40ac54690946306ffa2adbb10e471f

                                      SHA1

                                      e6071f1a3378569576611fd489163a7d27ff56d5

                                      SHA256

                                      10346e9bfaa72f82cf9d0ddd0916cdb5cbbe49d5e6518bea69c2298053afccb5

                                      SHA512

                                      01acae99e3dc728c832d2126885e5771746fd74e6531c9464483d6b1cc873a01f4926e70e83cae92d9595e692531efacadf64878589b849771b4c53c4c3af088

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\Localizations\crashrpt_lang_ZH-CN.ini

                                      Filesize

                                      5KB

                                      MD5

                                      4ca209c131119e28c581447d10f5f9db

                                      SHA1

                                      9f49c9c89e0a7149a8f3a9451a58d6d5ebed05c4

                                      SHA256

                                      eb3dd1604138b82f9ba13a180d71e513599d201b4a6eaba814179d12bfe97abb

                                      SHA512

                                      cb0f404d8d9044fa92f15fcadbafcc3bde75c7ba33dd58e26b2fce7656847f757f7f2947f52d587205544ffcf0b29c05865350e98d4f6840a657b787d0e02701

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\VRProfiles\AIFFProfiles.prop

                                      Filesize

                                      4KB

                                      MD5

                                      892e1eda8fe820d9543186b737ed66b0

                                      SHA1

                                      1527db2c30db87865e0ee23cc63b94f940f531d5

                                      SHA256

                                      2fb850b262a6880b372d7ff74e966ec4e946840741e8965d51a916725335dffb

                                      SHA512

                                      949af03a6e4e977fae9725fc3dd9f16a7640f793e187cf7d213d4d8beb00b8d82be188fab841333cdc4fd6b883010dd3a788a4de1c9f968ebe2cbce165b54b1b

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\VRProfiles\AMRProfiles.prop

                                      Filesize

                                      3KB

                                      MD5

                                      9a179ee720d206ed1ef9056b92421a0b

                                      SHA1

                                      2288adb8c2dd54e9968510a0ee8db069567b7f20

                                      SHA256

                                      a70c6b77c37e073f081510033c21b8d99c80f688fdb22122a3acd3f053c4c95e

                                      SHA512

                                      7f26c9d9bebdf8caec3414df6ab0baee1ad4a7c06084ea60f1ebb0a8e22188824a9b226f79e567a8b2f4dc02b566c471c9d65d5d1057e63520d72120dbb0b5b8

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\VRProfiles\AUProfiles.prop

                                      Filesize

                                      5KB

                                      MD5

                                      1e2fdcb57c4f71d03778afaeea8a24cd

                                      SHA1

                                      e3b5e2b7e58da91c90d3dff22aefc498325823b1

                                      SHA256

                                      37bd56796b2ecdeb608c6f67bee5e607a8438484cb427f4cebefff481fc68f2f

                                      SHA512

                                      7112af4d85e4f47dbb9023e7a43404e96566e73cfcf568fa6559fe84740699d35318bf2d857f2d1d77688ce85058194363bcd79d8865491b6b0a36a3c3da0102

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\VRProfiles\MP3Profiles.prop

                                      Filesize

                                      8KB

                                      MD5

                                      60c5668ae07b9fcefffd9dae984d437a

                                      SHA1

                                      c7448fb7d831b89098e0dacab1636558d4578f9a

                                      SHA256

                                      f1a67f43b4e900a078846c4e69c8e464e48e362ccceaca2a837faa0295925548

                                      SHA512

                                      e789297505a77b554e0e6ec5ba7c1d942dd4be9450ac58393753c2bb394afa36aa261233f77891d62d51c4c0e63ac23c77239a17d4a4e7d6351a38e4c017cec1

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\VRProfiles\OGGProfiles.prop

                                      Filesize

                                      4KB

                                      MD5

                                      3991a9b3609ffcb2781c677efcfc8f9e

                                      SHA1

                                      91f33f36e4c71539416b81f89bafd8278b582c88

                                      SHA256

                                      9658818c3a90725a649370b29c65c2b1fe5d6f0caff0821ab3c6618dc3b4e56f

                                      SHA512

                                      9ecdaf27450d01ebf91a9b25c6edc713d88ba6a38d7ac3771b7bb06c4d2531b72d13e968eba8fc3b9904faa36a146b33346ff5600cf9c2191c2edd59ceb97474

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\VRProfiles\WAVProfiles.prop

                                      Filesize

                                      3KB

                                      MD5

                                      fd909b143548cc3d3833f85d0bb6f1a9

                                      SHA1

                                      077f9213e9972c64305c07131aa90fb2f65cb4b5

                                      SHA256

                                      c17241e6241bc35888a4ecf7263b525d9610aeea56c52ca0be8a63d3cc9f0002

                                      SHA512

                                      0321acd878fa09448d00ae1f7217434a2f41498e47b60a65c281c11c20b89e0507687a8bfd24b338548109428b55c90f5f3bbe9c5973ddac7d88dca4ee5f6bd2

                                    • C:\Program Files\FlashIntegro\VideoEditor\Tools\VRProfiles\WMAProfiles.prop

                                      Filesize

                                      8KB

                                      MD5

                                      b3ba02cd97659aecf8a31b9495837ac8

                                      SHA1

                                      1cc58810a337c91787be9a021e78c0dbb3ff5029

                                      SHA256

                                      f21bd6c0ca52a25ae3870830312ae50c8f284e0cc88d35ae46b2c02dcfd937dd

                                      SHA512

                                      6c757f2e781447ecadae62e01e6a40255478d4792b14ed910bb54c0c18748f22141b23b44f96b5835ecf26d10dca69c68780c56061ad3852297e78090da13498

                                    • C:\Program Files\FlashIntegro\VideoEditor\VCProfiles\is-2EPSM.tmp

                                      Filesize

                                      201KB

                                      MD5

                                      d22e3d0c604bb544e5d9fb2616d7eecd

                                      SHA1

                                      eb7ce9ba2946106ce2145c8e6224bb52e8ca3898

                                      SHA256

                                      e8f8ab514267524c7fcc3430763c79828c1c79bd7223aff84113ddf211714d03

                                      SHA512

                                      72df6dfbc8d3c61b86f4cc3298bb3cb6eb3c112d487e747cbd816fa494d3734848bf8af79dede23f7722bd3f2425522839a561d8d550c9a834e3f9b0403a42de

                                    • C:\Program Files\FlashIntegro\VideoEditor\VCProfiles\is-PRJ23.tmp

                                      Filesize

                                      70KB

                                      MD5

                                      87b50bbef3b4bbd0d1577cc0203c6881

                                      SHA1

                                      c81c357c7618115dc504d26a4e961f9e11dd5bbe

                                      SHA256

                                      6211a37c36dfbbd753d34658db346a2f7dc71123079b3a6392a04946ee138712

                                      SHA512

                                      8fbddcb6955ff20a91ad8c073452ff73bf6f7e8038d11d6f81b9e4e25f555fc2f4a653154a68ca6abff5708ba63afaa2236d4d062dafa209f13e581f13a715f6

                                    • C:\Program Files\FlashIntegro\VideoEditor\VCProfiles\is-RC5UV.tmp

                                      Filesize

                                      24KB

                                      MD5

                                      d2f6089bcde54603da0e13a65951162e

                                      SHA1

                                      90360fa0ef66e72b81c28b5d9f55d5870c4d9c38

                                      SHA256

                                      ccb931b544a5cddc09aa6279162fc611a1536b401aef8c9b1633736e6117fa46

                                      SHA512

                                      966d4ab84352fa7bb5e54c625f39abbbce718377c024bddb6245f63ef836a3e6fd0bffa09d877c90cf1db3009184f519c6e77994a46dcd7e48ea2c1a53f6bfbe

                                    • C:\Program Files\FlashIntegro\VideoEditor\VCProfiles\is-UBUKV.tmp

                                      Filesize

                                      33KB

                                      MD5

                                      8147536a638d00d0651f1a98b058a3f9

                                      SHA1

                                      11ca093bbae14fbf44abd36995a95354f0dc1d8d

                                      SHA256

                                      89fd172e0234158168bd3dbcca817c74611d20fbb59cc31690aad63e80a84a91

                                      SHA512

                                      14f9ba6097180d6ca664279d0ac233f3fcd8a1a7447ceff47288ebdee6d49ee4bab797788adebbcd69e74e71bc440078a9a4fad989a5f55ffb0f2b0d04141c9f

                                    • C:\Program Files\FlashIntegro\VideoEditor\VCProfiles\is-V5BRB.tmp

                                      Filesize

                                      19KB

                                      MD5

                                      3cf5fbbe316841eea03e00bd23c8ca12

                                      SHA1

                                      dd11ad0a61438737b31034879a150bf5c7dcaa02

                                      SHA256

                                      fbe7f161dc12dc0f6b18a4063eabae18c738b58f2ebe19752b0ac8fbae260f56

                                      SHA512

                                      3268e3774e656d9963fb5a2e60dd1a20a8ec3ba2d15c4da1a793648e894310cfb203aa99ea6f20e8348d16980ae347d7a25e34b3c1f7a74b1d0d4c315a851868

                                    • C:\Program Files\FlashIntegro\VideoEditor\VCProfiles\is-V9LI2.tmp

                                      Filesize

                                      60KB

                                      MD5

                                      797b0cdf02b3631a0e72e6b497bddbac

                                      SHA1

                                      1f01e6a78467391c27c95bd8af6246af39408bc0

                                      SHA256

                                      e6bbdf126fd778bb0760b05efe1887593a8d5f026705826d01a0a38e94ef5aef

                                      SHA512

                                      6d060e1bccfa40532123c08d25b4c1dd084fd43ad3cc52a485f057b6e0d43534adb53b46241e37006ff81be9cfd384238f8bc4b0039e0a47adb672adf9dc524a

                                    • C:\Program Files\FlashIntegro\VideoEditor\VRProfiles\AACProfiles.prop

                                      Filesize

                                      5KB

                                      MD5

                                      d7fa4fa90296fce0ec0eb7e13df825ce

                                      SHA1

                                      474e710bf9eaf649c39421a855e2fd6eac5247ff

                                      SHA256

                                      3e934a196b92b7d1124fcf69933e7374f55a1a4ad2fab49a13b39c11961588de

                                      SHA512

                                      f98b8d0e700293eb1af85dccea8e5f74e910bd9eb5f0890d432386c7c5864515e3332a7490ac750fa501781ccfd8105479fb02270e3cac6ec1a7f1f47e4090e6

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-0THU2.tmp

                                      Filesize

                                      19KB

                                      MD5

                                      4824f785ba801a1b09f62c569ae2a868

                                      SHA1

                                      7b3ad76f69fb186179ad2265625b82ea2ab67c25

                                      SHA256

                                      e6337a0b944489e18677ee407e6ca37c56619348a81ff44649bb2505f4dbbddb

                                      SHA512

                                      1dafddc033abfbe113865e94c20672b7b0ba6353688376e7f1282d3af64cfefbde238e1e57d94722860651dc7360bf471ff26446e26eb7e9c61d4d391ef75509

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-1KDC2.tmp

                                      Filesize

                                      81KB

                                      MD5

                                      74bb958489c4bb7a62b7c7087d5af40b

                                      SHA1

                                      798ea01068ecbe00b40a6ec11547a65d4d56f7af

                                      SHA256

                                      530b44e5dd8b469ac5f27ea11d4509958e340fbd77470fbeff6ce077462ec3eb

                                      SHA512

                                      c1734b2d13f86a26fbb48686ab1cf9df1296e6a146f1064074f8b6dac29fc1f1dc954c999dd192c075e13e4483f339c08093267f447198cc47b13093f181451a

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-4C3B2.tmp

                                      Filesize

                                      17KB

                                      MD5

                                      4a68ceaf7425aeec5acafb755f3423e3

                                      SHA1

                                      a78d637e7c98b600993567391669c740d532ecbd

                                      SHA256

                                      27e5e71723b656f050a197aa0a40c8ef9a2e1ab28eb679c6f54c284d41a4db62

                                      SHA512

                                      6a1038ca45f7b08002121b04368f7918aea3aeaa46b74477225d3dc5f2b768ee376e1bf10f87073aee2ee25601ea9b4fd602a1165738c5a7c826a81ff5444a5b

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-4SVI2.tmp

                                      Filesize

                                      84KB

                                      MD5

                                      186eb924d65a47c120aba6486badd4e1

                                      SHA1

                                      f07508a891706056d73c9c42c2f6d261a63cf5ce

                                      SHA256

                                      202d97881ae0508e8c36af05edf397760debb56e284e575bd2256cb15868355f

                                      SHA512

                                      35c1f623ccad493ae5716556091c122c7b44cc30c8279ff47f5929aa94d3de7b84f9ad4ca35ddc6f6bc81ed315ecbcd749427cd619ac93e5109db134cf477818

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-9QF48.tmp

                                      Filesize

                                      17KB

                                      MD5

                                      14e2e47a2fd167b34c5e362f61631eb1

                                      SHA1

                                      de9bfae36e9afd50d5b4b35a2a9a2cc76848b100

                                      SHA256

                                      dc20fc99b20573123c344c76f30b93552e5b22fef9a90a5b92d7f0700fb03d16

                                      SHA512

                                      f1a796547664c4349197c17ca24e038084d466e407902f893496cc3c50d2e7fcbda5cd17fdb637ecae41b2b3673232211fc810f666546ca54c96b3900d190dce

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-D60S6.tmp

                                      Filesize

                                      14KB

                                      MD5

                                      ae09f8b9f5c50fac337fc71754c315e6

                                      SHA1

                                      1a76a790f61dfaa275b10818b545101e24b8ae4d

                                      SHA256

                                      6cd92b17d37d7c019c9b697e33efbbfff81716ca97d9a4ba432c57496861b7c6

                                      SHA512

                                      ebf03fc10ab69e26bd7277fff256a6ab594fc9d2c7bad783c2aa6e4fb22f9dd4891c79c95fd26599f02d7fb790aea753019761cabb6f0b9aad6807ddad23e032

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-DCKIH.tmp

                                      Filesize

                                      31KB

                                      MD5

                                      f269fcbfb27c2c5dfc46fc8a4563092b

                                      SHA1

                                      db83f38161f1be4527cfa7cd3e879321b0823b04

                                      SHA256

                                      ff29b94676d48589b02313f600dfc69bac6f6270f95d77e6d47072821d37a4e2

                                      SHA512

                                      06d1bed442da4b06581e834b35bccc1014f4d705c0be0850da496aad965b8ec0cdcc88c88a01915d9ee137f9e79f7774030f36c613b7d5dda479029708813d65

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-EFVMJ.tmp

                                      Filesize

                                      202KB

                                      MD5

                                      2180ef273a9dc1cfe42cceb7820ca506

                                      SHA1

                                      cb546121aab77478432a587b2e581052cb5e9feb

                                      SHA256

                                      16c79b5258387eaab1b5fba057f28574d7f20e2d0d945fe716e8742d39eebc51

                                      SHA512

                                      47d8c329ccd45410b87e2f2feb30d0619b62ca689ebac85fed0db35a4893a83f548ad79132ec6f8b0124a141ea7e7e6c648c49269ccf82cc4c26dc709a9f894b

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-FOFJN.tmp

                                      Filesize

                                      49KB

                                      MD5

                                      28839d4e05348b525f7c346551b0e731

                                      SHA1

                                      7bb8bad83f9cb55446f8dd4476a46a73a20e9f8a

                                      SHA256

                                      e0bddf29465ab1c50b188277d23986e488ddf3076b212896a953be12ff7a87f3

                                      SHA512

                                      0d50879e7be24099c6deb30b05ff1c50b1b593f8633f9e1f0aabb29a48c31f9c6332a5d31a9ad971b5f8f4bc70e20a600a739066e3fc978eb6bd8bef97430834

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-H27B5.tmp

                                      Filesize

                                      79KB

                                      MD5

                                      648829e79218af4be829c8569346b36b

                                      SHA1

                                      c5be3d24858362a2640318b527b9c5c6886ac369

                                      SHA256

                                      0d951ade9dcfc930ae70ba2a40d9be271abb824753d555cab029f0e004439891

                                      SHA512

                                      ab204be3344249c50582d20b7203af24f272fe2d2726b7900ac9942e181d6a95741a323ab982e43dfb1354d0318349c6ef18920def52acc1acbe764651fbc172

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-HT75I.tmp

                                      Filesize

                                      9KB

                                      MD5

                                      166c94adaf471b6636fab2d15570e083

                                      SHA1

                                      9e39134be28a613086bc27620a7f408a8dbb4c79

                                      SHA256

                                      4a2effd9f309ffa5f3b92befbc6af3e42dd8ecdf1cd14602ac526ee30cea8e8e

                                      SHA512

                                      724c55f0b829093feb803b31f3038607dc9ee8badaf452eb4c97268e45c1c2709c165af212909e522c99595ae80bf148c8133c770871cab90ff31269d575248d

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-IC4MC.tmp

                                      Filesize

                                      22KB

                                      MD5

                                      22659e145a93aa34efe63e15655c2520

                                      SHA1

                                      2df19fdd44d2ec67d8630644c7c081fc2b95ddd4

                                      SHA256

                                      d227d6c877af49b4034ee6c6ccf3ee0a4a77a134295967db3a5acba2ebf399a7

                                      SHA512

                                      598796d6d3cce5f9e9d8e49a7331accc7cd5253c1f25878ba2dcdbefbae3f18523fe14825e9c16bce4bdbc10a55773be0d71ec5d8c8aece8e5746c220da3cbec

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-JTT5K.tmp

                                      Filesize

                                      302KB

                                      MD5

                                      86d55a688eaace5fa84a158a80de5236

                                      SHA1

                                      65ed1646585fddccf789e3770a517d2b35c68a2c

                                      SHA256

                                      2eda050858ff9444050003049182bc095babde374eef6765b6e33e15b6878224

                                      SHA512

                                      aa4b3681279e3aec59f6c7af7ce96aa03f270f39f719af8f3a369bc300774cccd524ce4bded75e274508bbcc09592be6c25c91068b87264d54202acca97c90c6

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-NHK7D.tmp

                                      Filesize

                                      19KB

                                      MD5

                                      84775b33596dc9142ade5012312e9bff

                                      SHA1

                                      e2d3a622fe01467bb00592479992cd12161d1155

                                      SHA256

                                      ba340c4cb290be26a0f6212d0c2befbae9157e8fdecc482bdba119c2109e85d1

                                      SHA512

                                      12bb12f30fd29f9ee076985e9358a0b69b92df9d1e0707b81072ccf69359c4daeba499f508e98e7ffca52f32f00310a1e02b45f025009e0590bf7d87c39c7258

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-OFRF2.tmp

                                      Filesize

                                      19KB

                                      MD5

                                      4f63be7de9e590666e3f89916154777f

                                      SHA1

                                      d46fac1915369af398408ee612b2e2f7f6d78be3

                                      SHA256

                                      d1de92f919735a536528f1768985e4e89c52526aea10e6f582a092e5b2f29e92

                                      SHA512

                                      47ccd012085d6c2fa1ca383dbb8cd550f04b3749cb26b09f7a117dfa17b8d45a2b913305aa6f8a9ae5cad8d8f71364e64f577c0de68c2d690dcaa8e4eb1a3578

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-PEJPG.tmp

                                      Filesize

                                      9KB

                                      MD5

                                      1e959c75378f234a72aa343e412be58d

                                      SHA1

                                      00c1ab260ee81b0d7efcc4ce5bef54394d290fcb

                                      SHA256

                                      119626836443be19cc81deb93f2947985f3048ef197d6f1f0f5163d799977850

                                      SHA512

                                      91a5a91669b604ebfc7c4382965f6252c1948bf34449897abdb86c9f8384f54965dd6b22f0dd05f9450603f49fef30f9d71cc0835d937d924546ef113c0e74d1

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-SPD1C.tmp

                                      Filesize

                                      45KB

                                      MD5

                                      17410a9c5b6becf5fe792205913773f2

                                      SHA1

                                      ff1d55e2efa847b2b09c2071bafe3ad92ae0694c

                                      SHA256

                                      4b5fd84c994a5fa89ec3817cec02d465cb65fb3caa3c950eee4ceda046d22270

                                      SHA512

                                      915f581f6b0c4ed1301137caa82c81e7f276e809bcb9101a84920c7b3399b393a384d662685ef2688a7b8c77066ec92be09a2cf9c582b96a38782db1f486d412

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-TU09F.tmp

                                      Filesize

                                      8KB

                                      MD5

                                      679a298a1cb53238c6b8f704428626de

                                      SHA1

                                      24f389298fa3ca90df66fcc2d23cd82f3c1dae7e

                                      SHA256

                                      f44fc10ab94383302de0ea836e49ff62fa4cd7a4f49de8a05444dc4867586923

                                      SHA512

                                      5714caa27bb3cd3e58e9ca05aff3b3812bd4d18da2b9de8ac22924aaea8f6aa2721dd1240751835798fbfc5119df25d041073b7d6dcbd889d779ebf671a7f43d

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-UN3IO.tmp

                                      Filesize

                                      44KB

                                      MD5

                                      68bdac52af7e22eed62dd1e5a99e0aaa

                                      SHA1

                                      7077cf5a701649b8191001f3c3313182edccf59a

                                      SHA256

                                      1ad92792bddbf024264ff5068a3077a4014361a5d9b281d970f4f44d3b88b6e8

                                      SHA512

                                      a709db526c6d7da47a3718b37ee6aadad8639a2b7859c357ab65f0aa981500da73807aa6b30fed32a29895d32a52c412676abcfae41c4883f57bb2b1b7e3cd5e

                                    • C:\Program Files\FlashIntegro\VideoEditor\VSProfiles\is-UUILF.tmp

                                      Filesize

                                      6KB

                                      MD5

                                      42a126e20d2fbc7e1b96e9fc52206f62

                                      SHA1

                                      f14d94b893260eb826c2ec66a49e434b38b2c45a

                                      SHA256

                                      351c155773ab03dcdd7da979a00434b447a0b88308bf5290ecfcefbabb3e422a

                                      SHA512

                                      0979d86af05564f23752099bbe09655a10400593d1bc9d0895b4b2c4fdbdec088e6e6155d4fb2cb8d6c327bd7ca9d1a896540479bb956c9d58a4d18b2f37404c

                                    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\FFUZHV4W\www.videosoftdev[1].xml

                                      Filesize

                                      509B

                                      MD5

                                      f6728dad7f2687ced1fe314e47524947

                                      SHA1

                                      d9a25f158dd87f9018d862ad0646bd1e62e76e05

                                      SHA256

                                      26789dfbf06ba213485910a04dcd10e76b68ff4790633bca13efcd0af6c2139b

                                      SHA512

                                      b1514f2bcbcecb34d79a7c322b17ea7753e6dd71373e09b8fc07e8462df6b81dc414bc8c05511f3cadf4e18810248830a362decf349021adf6088119b77012b5

                                    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\FFUZHV4W\www.videosoftdev[1].xml

                                      Filesize

                                      2KB

                                      MD5

                                      be2be64a3c871d21710c444ae1194e3c

                                      SHA1

                                      e2a14835f184ab2640202715077068e4c53ccb21

                                      SHA256

                                      3b4dfeff96d1f1c39ba46e10c9607bd864f2ac08727a77116c66af0c643e1f0f

                                      SHA512

                                      d51757038b9933f656f70e8e22c315c5568dfb0567d8fec5649dbb773b8dc6eb428c685d2b4c2716385f12a19b85f41ac0765efa1f91910ac22459017f67238c

                                    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\FFUZHV4W\www.videosoftdev[1].xml

                                      Filesize

                                      3KB

                                      MD5

                                      19b853dec9fb36b9d2ab1b5e7a09d313

                                      SHA1

                                      9113bfe62fde3780f3f9470d35d18f10ea1e6592

                                      SHA256

                                      94318ab1363d8b1a196c82fe1bf76127723b5a43a6264225c8dfd5d5cdc36d2e

                                      SHA512

                                      ff55aafe39d5823b48cf49da3ce24e9db06b3a6a66dc21831006e205d3eabfdb6cfed7b8bd664bc405a5c5f1d749ef593f14adf8e1827a17025a3d4000d8db95

                                    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\W5W0Z9MA\www.youtube[1].xml

                                      Filesize

                                      13B

                                      MD5

                                      c1ddea3ef6bbef3e7060a1a9ad89e4c5

                                      SHA1

                                      35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

                                      SHA256

                                      b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

                                      SHA512

                                      6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

                                    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\W5W0Z9MA\www.youtube[1].xml

                                      Filesize

                                      228B

                                      MD5

                                      aa5ec65710e99976c22e030a19f2b62b

                                      SHA1

                                      b55188ba21867aff41ad2243f580547ef5592d88

                                      SHA256

                                      4d623e734a8cd418c56cfe524a4d8ea0c558dd0b7281f85582bfb1a50bc50dd9

                                      SHA512

                                      af42f0c66e90738c699e7512f302fdfb948489fbfbdb839180c57e511aef2e3080ccf218cecad9e02f9ab12f5e1b40784931401678408fe770dabce0076cbf8c

                                    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\W5W0Z9MA\www.youtube[1].xml

                                      Filesize

                                      985B

                                      MD5

                                      7d881d8f1f5fc7cd21156378868fb6a2

                                      SHA1

                                      7fce3c2e5f8c374987050bab9b7096dc7acae113

                                      SHA256

                                      68dcdf41d0ac8d2183a178ed9e7a58ba353751b829c338fceb49ff08f39fd30f

                                      SHA512

                                      b38cb23a755549f6c6b6369913ff14e46f2b4e14efdde7e841d4d303a922ae2191e5887a653b606afd623519bca9f0990030c228deefeec3ba6d9d90bef0e063

                                    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\W5W0Z9MA\www.youtube[1].xml

                                      Filesize

                                      985B

                                      MD5

                                      66815e645dd487f7c468b9ecda810c8f

                                      SHA1

                                      bca65e9fac8e027263b3af7f701e2c4c6e5b808c

                                      SHA256

                                      b2eb9e0d8fa52ce44b77eeca47835813f4ceca4dae5bc8bc24da923c6b585670

                                      SHA512

                                      faf5d75e9a7ee2f93f71e6286987aeb202581faab2760e609add051336119ca6b5a672314b7d7c41fbcf254df239847752468c92c9c1a9caf9698c5bbbab3b8b

                                    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\IY08M0IB\favicon[1].ico

                                      Filesize

                                      1KB

                                      MD5

                                      66fbd55c4d383c71a19ca4db069f005a

                                      SHA1

                                      07f42ac04afcde3a11337d057967658a0732bf88

                                      SHA256

                                      5e8d46547bfdb281085735b2f22b23799a877f1f105e595be1864d1a94b5190e

                                      SHA512

                                      cfa456e585b265e5063aa5a33cce265a080b8b13d6a9b5e3328d05ad4855105b12d7528f94cfd6dd49342be794f3f6e4d6f3b14faa7da5d438bbc726f6a9b45f

                                    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\P0JFXRVZ\favicon[1].svg

                                      Filesize

                                      2KB

                                      MD5

                                      5a8ceab8ae931212bbc7cfaf940150a9

                                      SHA1

                                      3cca1c3824c6879a0f6b1aafe01907e267c4577b

                                      SHA256

                                      76729d616114f6035e47649827d868c8d19e40f5a6aa096afa2e54b0f2ad32cb

                                      SHA512

                                      9ec8852fbe89a658615d759a554181109d2d3ca311e55e431f83661fd013a1adade5475e16b61dddab5397e2569d2fd322e5ba2aa6971d1a607101d7ce22b829

                                    • C:\Users\Admin\AppData\Local\Temp\is-BG597.tmp\vcredist_x64.exe

                                      Filesize

                                      24.1MB

                                      MD5

                                      e091e9e5ede4161b45b880ccd6e140b0

                                      SHA1

                                      1a18b960482c2a242df0e891de9e3a125e439122

                                      SHA256

                                      cee28f29f904524b7f645bcec3dfdfe38f8269b001144cd909f5d9232890d33b

                                      SHA512

                                      fa8627055bbeb641f634b56059e7b5173e7c64faaa663e050c20d01d708a64877e71cd0b974282c70cb448e877313b1cf0519cf6128c733129b045f2b961a09b

                                    • C:\Users\Admin\AppData\Local\Temp\is-RIA54.tmp\video_editor_x64.tmp

                                      Filesize

                                      3.1MB

                                      MD5

                                      2ea94b6556fc1ff6bfc62d97ba8058f8

                                      SHA1

                                      6a1e49c0010c6aebfa91bf99e183085dc2e57647

                                      SHA256

                                      0b84924173f6f34daf292c0e798df3bcd7a58d70d5dbf22d287667bc71eda6bf

                                      SHA512

                                      df0fb97eda5dcef450beb9ea980773a26d1af6df5b523bdedffa02f5c9e2470fdd9358f7a227988635042655a1c8983c788c641af0dc75139c6786295eb624d5

                                    • C:\Windows\Temp\{3DF477EE-C4A9-457F-ACD3-DF9FE02216A2}\.cr\vcredist_x64.exe

                                      Filesize

                                      634KB

                                      MD5

                                      cb264f7d256b42a54b2129b7a02c1ce3

                                      SHA1

                                      d71459e24185f70b0c8647758663b1116a898412

                                      SHA256

                                      d6aaee30c9b7edeac6939f78f4a55683c6358d9cc03dac487880d01f18700e83

                                      SHA512

                                      4f623f5d21bc216f3dd040e6d0c663a8ea37efe5d0ce5f4aeb1ef5c1f7c873e19d1abc979d3e40d4dc70e2e4f0fc9a1b114b17d9eb852ea9a41d0f84356cd7cb

                                    • C:\Windows\Temp\{662A66A4-389F-4536-AA9C-0C476A56D78E}\.ba\logo.png

                                      Filesize

                                      1KB

                                      MD5

                                      d6bd210f227442b3362493d046cea233

                                      SHA1

                                      ff286ac8370fc655aea0ef35e9cf0bfcb6d698de

                                      SHA256

                                      335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef

                                      SHA512

                                      464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b

                                    • \Program Files\Common Files\FlashIntegro\ActiveX\mslaudiocodecs5.dll

                                      Filesize

                                      831KB

                                      MD5

                                      2c6b6637b010d19ffc9f098686d6fc33

                                      SHA1

                                      935ccb7e85cc497a2590df8bb74d5d062674e09e

                                      SHA256

                                      078410ea37b5cfd6471eb5a88a8e31df5fee940f80dad37d3bb30052cd3da7ea

                                      SHA512

                                      e893ed62dd43464a099ab37af17ca98d830baa15cb716419e225afa7c64f1459c1b596f6b00970951fbb191e58f6171906f522824f7cce13565a45375a518c2b

                                    • \Program Files\Common Files\FlashIntegro\ActiveX\mslaudiovis5.dll

                                      Filesize

                                      395KB

                                      MD5

                                      1dc3bef5e8e32cce10d87aa8a86aa985

                                      SHA1

                                      9ed22fe3b025249a02db747f65ac95f73dcf9a38

                                      SHA256

                                      f309e018c6c55f0cd49689b7ff6868ec97c64ae85d08f533c3e5025c96cf3ee7

                                      SHA512

                                      dbb84139e4f35ba4d0f1a210edfbc49acf5e7f1627921b9d3e6bcce0d1642a57224d73bba3fbd7d141130bedb690f864074883a0d84008467a098161d458245c

                                    • \Program Files\Common Files\FlashIntegro\ActiveX\mslprofiles5.dll

                                      Filesize

                                      374KB

                                      MD5

                                      be6e7c6a1db1b84d3792bce104731395

                                      SHA1

                                      5c433b1a5ad6cdf91f04a884a4cacf00bce6a15c

                                      SHA256

                                      d265f6e2bc811499509cf1141e939abdd2eee1c511b8cdd138c179e03355f15a

                                      SHA512

                                      337396ba1994a703e5bf110d88f9911fa91c83bfbcec0ffcf6f90c7fa25fc277941758fcb1ecb68f92db4602802d921efe6bec3ce9874bc1f92b475ddfb648f2

                                    • \Program Files\Common Files\FlashIntegro\ActiveX\mslstreams5.dll

                                      Filesize

                                      67KB

                                      MD5

                                      22bf2b6a805d87df6c2675610324936e

                                      SHA1

                                      dad878c41b14ba81716e2d22c758760fe47907ac

                                      SHA256

                                      d56c56f751d4cf820c490449f1bea59ab765c2bbc3c5deb5e0804d6971cb8e0f

                                      SHA512

                                      b57e00e91f64d1e48138f5d414e81e5baee8233f053200b586cc67e636f3cc2be877e6edcf3799d844440188988c152183de86604a999e057cb61224c2f95b8c

                                    • \Program Files\Common Files\FlashIntegro\ActiveX\mslvideocodecs5.dll

                                      Filesize

                                      2.4MB

                                      MD5

                                      056f83c978e1f3134417d7a63d2e3623

                                      SHA1

                                      da062a0b3845a5039a99e50148e6d453eb64e33e

                                      SHA256

                                      56751536551ac20b776171c81c56f2fb69700d81956d0f57d3f8aa017d34424f

                                      SHA512

                                      0378b5ba350caa6339644224ee61b3f01959f1c284312f20e217450110dd5f1704985dcb9e03b9651a62b7ba3ec7325ba32ccd21ed1f74753b74ca5567196119

                                    • \Program Files\Common Files\FlashIntegro\ActiveX\mslvvdsfilter5.ax

                                      Filesize

                                      58KB

                                      MD5

                                      a1bad7a12d92eab4a22f6dd82829378a

                                      SHA1

                                      5f3fc7316d3ab6bcdaa46786368ea408f5fa827d

                                      SHA256

                                      e57ba79c1a3ef99b886af507447c6fa08ab555db3b2333835a38ca8122d33cb5

                                      SHA512

                                      8043c62fc0f25d9c7d56f2bafc8452a02e329082333f9cb5ddf5da4852175d504d9f0eaf039f0e0b77de59a49582186536cc764ba8fbacadf56d947601cf10bf

                                    • \Users\Admin\AppData\Local\Temp\is-BG597.tmp\_isetup\_iscrypt.dll

                                      Filesize

                                      2KB

                                      MD5

                                      a69559718ab506675e907fe49deb71e9

                                      SHA1

                                      bc8f404ffdb1960b50c12ff9413c893b56f2e36f

                                      SHA256

                                      2f6294f9aa09f59a574b5dcd33be54e16b39377984f3d5658cda44950fa0f8fc

                                      SHA512

                                      e52e0aa7fe3f79e36330c455d944653d449ba05b2f9abee0914a0910c3452cfa679a40441f9ac696b3ccf9445cbb85095747e86153402fc362bb30ac08249a63

                                    • \Windows\Temp\{662A66A4-389F-4536-AA9C-0C476A56D78E}\.ba\wixstdba.dll

                                      Filesize

                                      191KB

                                      MD5

                                      eab9caf4277829abdf6223ec1efa0edd

                                      SHA1

                                      74862ecf349a9bedd32699f2a7a4e00b4727543d

                                      SHA256

                                      a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041

                                      SHA512

                                      45b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2

                                    • memory/68-2564-0x00000163F54C0000-0x00000163F54E0000-memory.dmp

                                      Filesize

                                      128KB

                                    • memory/68-2787-0x00000163F6470000-0x00000163F6570000-memory.dmp

                                      Filesize

                                      1024KB

                                    • memory/68-2486-0x00000163E3F90000-0x00000163E3F92000-memory.dmp

                                      Filesize

                                      8KB

                                    • memory/68-2488-0x00000163E3FB0000-0x00000163E3FB2000-memory.dmp

                                      Filesize

                                      8KB

                                    • memory/68-2839-0x00000163E3F70000-0x00000163E3F80000-memory.dmp

                                      Filesize

                                      64KB

                                    • memory/68-2607-0x00000163F5A20000-0x00000163F5A22000-memory.dmp

                                      Filesize

                                      8KB

                                    • memory/68-2605-0x00000163F57C0000-0x00000163F57C2000-memory.dmp

                                      Filesize

                                      8KB

                                    • memory/68-2603-0x00000163F5530000-0x00000163F5532000-memory.dmp

                                      Filesize

                                      8KB

                                    • memory/68-2611-0x00000163F6650000-0x00000163F6652000-memory.dmp

                                      Filesize

                                      8KB

                                    • memory/68-2609-0x00000163F6630000-0x00000163F6632000-memory.dmp

                                      Filesize

                                      8KB

                                    • memory/68-2617-0x00000163F6660000-0x00000163F6662000-memory.dmp

                                      Filesize

                                      8KB

                                    • memory/68-2653-0x00000163F5360000-0x00000163F5380000-memory.dmp

                                      Filesize

                                      128KB

                                    • memory/68-2687-0x00000163F6970000-0x00000163F6972000-memory.dmp

                                      Filesize

                                      8KB

                                    • memory/68-2689-0x00000163F6990000-0x00000163F6992000-memory.dmp

                                      Filesize

                                      8KB

                                    • memory/68-2731-0x00000163F8120000-0x00000163F8220000-memory.dmp

                                      Filesize

                                      1024KB

                                    • memory/68-2838-0x00000163E3F70000-0x00000163E3F80000-memory.dmp

                                      Filesize

                                      64KB

                                    • memory/68-2788-0x00000163F6470000-0x00000163F6570000-memory.dmp

                                      Filesize

                                      1024KB

                                    • memory/68-2483-0x00000163E3F60000-0x00000163E3F62000-memory.dmp

                                      Filesize

                                      8KB

                                    • memory/68-2790-0x00000163F6C40000-0x00000163F6D40000-memory.dmp

                                      Filesize

                                      1024KB

                                    • memory/68-2837-0x00000163E3F70000-0x00000163E3F80000-memory.dmp

                                      Filesize

                                      64KB

                                    • memory/68-2836-0x00000163E3F70000-0x00000163E3F80000-memory.dmp

                                      Filesize

                                      64KB

                                    • memory/752-2441-0x000002D57C720000-0x000002D57C730000-memory.dmp

                                      Filesize

                                      64KB

                                    • memory/752-2425-0x000002D57C620000-0x000002D57C630000-memory.dmp

                                      Filesize

                                      64KB

                                    • memory/752-2809-0x000002D5054B0000-0x000002D5054B1000-memory.dmp

                                      Filesize

                                      4KB

                                    • memory/752-2460-0x000002D5798B0000-0x000002D5798B2000-memory.dmp

                                      Filesize

                                      8KB

                                    • memory/752-2808-0x000002D5054A0000-0x000002D5054A1000-memory.dmp

                                      Filesize

                                      4KB

                                    • memory/1068-2474-0x0000000000400000-0x000000000071C000-memory.dmp

                                      Filesize

                                      3.1MB

                                    • memory/1068-6-0x0000000000400000-0x000000000071C000-memory.dmp

                                      Filesize

                                      3.1MB

                                    • memory/1068-3551-0x0000000000400000-0x000000000071C000-memory.dmp

                                      Filesize

                                      3.1MB

                                    • memory/1068-18-0x0000000000400000-0x000000000071C000-memory.dmp

                                      Filesize

                                      3.1MB

                                    • memory/1068-1934-0x0000000000400000-0x000000000071C000-memory.dmp

                                      Filesize

                                      3.1MB

                                    • memory/4372-2-0x0000000000401000-0x00000000004B7000-memory.dmp

                                      Filesize

                                      728KB

                                    • memory/4372-0-0x0000000000400000-0x00000000004D8000-memory.dmp

                                      Filesize

                                      864KB

                                    • memory/4372-15-0x0000000000400000-0x00000000004D8000-memory.dmp

                                      Filesize

                                      864KB