Analysis

  • max time kernel
    151s
  • max time network
    120s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/07/2026, 14:34

General

  • Target
    Setup Cracked.exe
  • Size 77.8MB
  • Sample260708-rxyd3agv2x
  • SHA256 b558db4afe775a98f347bdf689cfed2b18533a8d5acaf58cc0cb16112e8f4867
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks BIOS information in registry 2 TTPs 4 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Writes to the Master Boot Record (MBR) 1 TTPs 2 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

    Inno Setup installer

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 42 IoCs
  • Suspicious use of FindShellTrayWindow 7 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Setup Cracked.exe
    "C:\Users\Admin\AppData\Local\Temp\Setup Cracked.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5788
    • C:\Users\Admin\AppData\Local\Temp\is-1HAIB.tmp\Setup Cracked.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-1HAIB.tmp\Setup Cracked.tmp" /SL5="$30206,80566266,802304,C:\Users\Admin\AppData\Local\Temp\Setup Cracked.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:5376
      • C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\ScreenRecorder.exe
        "C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\ScreenRecorder.exe"
        3⤵
        • Checks BIOS information in registry
        • Executes dropped EXE
        • Loads dropped DLL
        • Writes to the Master Boot Record (MBR)
        • Drops file in Windows directory
        • Checks processor information in registry
        • Modifies registry class
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:3800
        • C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\crashpad_handler.exe
          "C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\crashpad_handler.exe" --no-rate-limit --database=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0 --metrics-dir=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0 --url=https://o474997.ingest.sentry.io:443/api/6722886/minidump/?sentry_client=sentry.native/0.10.0&sentry_key=4215d6afd234c6f661e6673de4e8a0cb --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-event --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-breadcrumb2 --initial-client-data=0x468,0x46c,0x470,0x444,0x474,0x7fff43af9178,0x7fff43af9190,0x7fff43af91a8
          4⤵
          • Executes dropped EXE
          PID:2472
        • C:\Windows\System32\Wbem\wmic.exe
          wmic path win32_VideoController get description
          4⤵
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:5288
        • C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\WebConfigLoader.exe
          "C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\WebConfigLoader.exe" --send_statistics=1 --timeout=40000 --sid=260708-153621-220188
          4⤵
          • Checks BIOS information in registry
          • Executes dropped EXE
          • Writes to the Master Boot Record (MBR)
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of WriteProcessMemory
          PID:5636
          • C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\crashpad_handler.exe
            "C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\crashpad_handler.exe" --no-rate-limit --database=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0 --metrics-dir=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0 --url=https://o474997.ingest.sentry.io:443/api/6722886/minidump/?sentry_client=sentry.native/0.10.0&sentry_key=4215d6afd234c6f661e6673de4e8a0cb --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\3a32532e-48f3-45c8-453b-9f19d4fbc164.run\__sentry-event --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\3a32532e-48f3-45c8-453b-9f19d4fbc164.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\3a32532e-48f3-45c8-453b-9f19d4fbc164.run\__sentry-breadcrumb2 --initial-client-data=0x42c,0x430,0x434,0x408,0x438,0x7fff43af9178,0x7fff43af9190,0x7fff43af91a8
            5⤵
            • Executes dropped EXE
            PID:2136
        • C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\RouterApplication.exe
          "C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\RouterApplication.exe"
          4⤵
          • Executes dropped EXE
          PID:2132
        • C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\RouterApplication.exe
          "C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\RouterApplication.exe"
          4⤵
          • Executes dropped EXE
          • Suspicious use of SetWindowsHookEx
          PID:1208

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        mntemp

        • Path C:\ProgramData\mntemp
        • Size 16B
        • SHA256 6a7981e3cad2a92ec89c104e948e754504b92b70c9899375427bc7dfe756fe96
        • MD5 SHA1 SHA512

        Bonus.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Bonus.qml
        • Size 2KB
        • SHA256 e3a77552f07ca198b141bffb0646905464e182543e225cf767c9d4ad7bb7c7a7
        • MD5 SHA1 SHA512 TLSH

        Buttons.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Buttons.qml
        • Size 2KB
        • SHA256 c58d4ee6c9e4a9ccace546631fc065f049c3fb3630bf00e3e5f3488ea76b4455
        • MD5 SHA1 SHA512 TLSH

        CloseButton.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\CloseButton.qml
        • Size 1KB
        • SHA256 b250c4dda1661e7444560bc60fb1e3e265ca892b5b7407a3327619c7d09cda31
        • MD5 SHA1 SHA512 TLSH

        ColumnButton.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\ColumnButton.qml
        • Size 193B
        • SHA256 2da06d9d14ba3fe7025c737ed3d7105f8dd24663c959914a826fc551df3a811a
        • MD5 SHA1 SHA512 TLSH

        ColumnNag.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\ColumnNag.qml
        • Size 1KB
        • SHA256 12cb11f8a713271b96b90ff687ca14bcb448568fe9cf517cb8b4574a465745e9
        • MD5 SHA1 SHA512 TLSH

        ColumnsGrid.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\ColumnsGrid.qml
        • Size 8KB
        • SHA256 bb310154f3d0971de79e6ce8dcfa2dc127590b9dea5d82923613df975ca30d83
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Constants.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Constants.qml
        • Size 846B
        • SHA256 d49c8feb32db97b337fdeee17ad321e463aa3b56eba6f603a94f852b9fd4604b
        • MD5 SHA1 SHA512 TLSH

        Content.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Content.qml
        • Size 600B
        • SHA256 11ca2d586bf9e1c72aada0a6c8ef4f181f04e07e4ef2508eee86d02a57598e48
        • MD5 SHA1 SHA512 TLSH

        Customization.js

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Customization.js
        • Size 2KB
        • SHA256 b639df04beb45ed37d2b9948cf965cc60d213b0559538e65895dba0eaae4febe
        • MD5 SHA1 SHA512 TLSH

        DebugHighlight.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\DebugHighlight.qml
        • Size 321B
        • SHA256 87fc4bc55fc4d9356188a4f1ae600702a77482371b3be4c70fc2c3e59c820790
        • MD5 SHA1 SHA512 TLSH

        Description.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Description.qml
        • Size 667B
        • SHA256 5f11717248ee8e695b18f17080653eb99edf4b1cd75f53f07a04f57baf388ac9
        • MD5 SHA1 SHA512 TLSH

        Elements.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Elements.qml
        • Size 4KB
        • SHA256 74ffcfde85ae6cdbe8c99ac0dcb27a221e19555d4df64f210bfa9695c7a211b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        EmailInput.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\EmailInput.qml
        • Size 2KB
        • SHA256 3e7f9aabefb199b2bf39dff01578aaabb7cfe4e29f74c994417c78774085fd43
        • MD5 SHA1 SHA512 TLSH

        Legal.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Legal.qml
        • Size 575B
        • SHA256 d984791deb6aee9c03ae26d2427905a31fad889b6fbecb1a47bb73cc4e7e4b2f
        • MD5 SHA1 SHA512 TLSH

        AnimatedImagePage.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Media\AnimatedImagePage.qml
        • Size 1KB
        • SHA256 033aa5729fa3574061eb34711414ffca1a112b09e7ce812d9185cb3a9bafcce8
        • MD5 SHA1 SHA512 TLSH

        ImagePage.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Media\ImagePage.qml
        • Size 208B
        • SHA256 e20e4406be357be94093fa798a0f3273af1cb99916c7ad144fefe6d39133ce76
        • MD5 SHA1 SHA512 TLSH

        MediaUtils.js

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Media\MediaUtils.js
        • Size 1KB
        • SHA256 b0ffa73c635f39e9c30e6c559ba5066ca16c3456758ec5568243cb3278f2843a
        • MD5 SHA1 SHA512 TLSH

        VideoPage.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Media\VideoPage.qml
        • Size 4KB
        • SHA256 0f4b07204751a461a44626eb5cb3ad26dd6252732f4a50e738659ce95d6aec50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nag.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Nag.qml
        • Size 2KB
        • SHA256 88c2c6208b4bcda87e5e156ac56b33823dd3c79364b964cc25d4437657d25c42
        • MD5 SHA1 SHA512 TLSH

        NagBody.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\NagBody.qml
        • Size 922B
        • SHA256 9c17ee0e2c43f8e310cbb5a718e76021f1ea653ba8ab9b1f62f793213d6f2f56
        • MD5 SHA1 SHA512 TLSH

        PrimaryButton.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\PrimaryButton.qml
        • Size 286B
        • SHA256 1c0eef7e9f48468f02a1959f24130109224d122b76e9a2171502f379bc87906c
        • MD5 SHA1 SHA512 TLSH

        Promocode.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Promocode.qml
        • Size 1KB
        • SHA256 8b1f26691d8ed9e85326f9921ef9f396c77aa67f45e83ffc714fc9171116f5f5
        • MD5 SHA1 SHA512 TLSH

        RoundedImage.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\RoundedImage.qml
        • Size 1KB
        • SHA256 1c43fd13af1090345d7940829131bc727712f6f35b7752c2cb73b9f5802b0a3f
        • MD5 SHA1 SHA512 TLSH

        RoundedRectangle.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\RoundedRectangle.qml
        • Size 1KB
        • SHA256 01cf09611c5fe927223dc1319bb116d03b862a9c1846d3626c135dc1ed0bb3f2
        • MD5 SHA1 SHA512 TLSH

        SecondaryButton.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\SecondaryButton.qml
        • Size 298B
        • SHA256 ced53349d0bd0730486bef79fcb2308ac86dadddad4a3cbc5a34c44ebc91106d
        • MD5 SHA1 SHA512 TLSH

        SideBanner.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\SideBanner.qml
        • Size 1KB
        • SHA256 8e5ec40ab72fa065ac6ba9f7db97c5ad267c3421e57a90743b8efaa498be3286
        • MD5 SHA1 SHA512 TLSH

        SpacerItem.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\SpacerItem.qml
        • Size 266B
        • SHA256 1750ee88f31c25c2a43e48b9f6fc88cb5bc20c43255259d7ac3b30826246c0ca
        • MD5 SHA1 SHA512 TLSH

        StyledButton.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\StyledButton.qml
        • Size 2KB
        • SHA256 796c09a4000faa0e4b4d47d41de69cc1a8e640a707742b43d4259a289df56dc9
        • MD5 SHA1 SHA512 TLSH

        StyledText.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\StyledText.qml
        • Size 2KB
        • SHA256 31f116e8489dcf0257b6a85eb796877651476dc5cc7212eb0e784368443eadc4
        • MD5 SHA1 SHA512 TLSH

        StylingBase.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\StylingBase.qml
        • Size 1KB
        • SHA256 77cf4600af3c84e211cf001e46696643867ce60c34f8ffd81b6efea0fc103efc
        • MD5 SHA1 SHA512 TLSH

        Title.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Title.qml
        • Size 716B
        • SHA256 6f5063cb5a2fa0cd8e29a00fd5f3da104c89d170cf3c160f16c9f60288b89c17
        • MD5 SHA1 SHA512 TLSH

        TopBanner.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\TopBanner.qml
        • Size 1KB
        • SHA256 83176f6f05bff594f86d8c841a42fdace55357eccc8a8faa1c2ce541327d8ea3
        • MD5 SHA1 SHA512 TLSH

        Utils.js

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Utils.js
        • Size 249B
        • SHA256 3262f41ef9045d326fabf55f36aeeabaef253bf4a02673ed8f45d0364999ef80
        • MD5 SHA1 SHA512 TLSH

        CommonParser.js

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\VariablesParsers\CommonParser.js
        • Size 3KB
        • SHA256 d6f0b4020df3ec5ff3c2ee3abba43c682486425792ff9dd7f47e1495cb6c165c
        • MD5 SHA1 SHA512 TLSH

        MultiColumnParser.js

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\VariablesParsers\MultiColumnParser.js
        • Size 5KB
        • SHA256 3fde4e769abd111a8193a6147ec8e909ee9837f9f89df3dc1f2f8800263539eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SingleColumnParser.js

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\VariablesParsers\SingleColumnParser.js
        • Size 7KB
        • SHA256 acdd2d290f2970ef0702508d94f2169ecc3d52947ac77047450f6a6be9548e3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Utils.js

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\VariablesParsers\Utils.js
        • Size 3KB
        • SHA256 48215b7d0092c34cad6dc889836bc323e4e4ee9ea95eb8a02c23b8bf769f3051
        • MD5 SHA1 SHA512 TLSH

        WithBanner.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\WithBanner.qml
        • Size 1021B
        • SHA256 fcfe5749e0bc9115dad1455c7ea3ef1fe91863d1d598a0f8e3cc0ecd5628c3d9
        • MD5 SHA1 SHA512 TLSH

        bullet.png

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\images\bullet.png
        • Size 583B
        • SHA256 5a74c6ef51c4517186d58bf7fa873367b4fbd225fa6d77a181556d9e7864fd49
        • MD5 SHA1 SHA512 TLSH

        close.png

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\images\close.png
        • Size 424B
        • SHA256 554c61bd7af920d865170df06183bf41253d947e08969e6097d746f282730825
        • MD5 SHA1 SHA512 TLSH

        copied.png

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\images\copied.png
        • Size 1KB
        • SHA256 e2efd9d295bf57b77283f2959b23d7c08649c660c1f11731bb0ce6c6cd749a44
        • MD5 SHA1 SHA512 TLSH

        copy.png

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\images\copy.png
        • Size 639B
        • SHA256 e6977a2b61fc7cbba4e7bda48097d83a7dc587c2d10da179799d68a7e09c1515
        • MD5 SHA1 SHA512 TLSH

        copy_hovered.png

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\images\copy_hovered.png
        • Size 663B
        • SHA256 926efbbb37be6690c14bd98aebb2223e963223e2c54ce953337cfee84dbae28c
        • MD5 SHA1 SHA512 TLSH

        ParsedVariables.js

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\ParsedVariables.js
        • Size 3KB
        • SHA256 1005e5af7a2a6f2ef026927028c9a1b77b20b95b7dcc4b675bb58b9245f0e99c
        • MD5 SHA1 SHA512 TLSH

        constants.js

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\constants.js
        • Size 599B
        • SHA256 d0d74bb928aa60e5499f4572e9086f51865d8c09e2524e84ea66b3652fd0d51e
        • MD5 SHA1 SHA512 TLSH

        defaults.js

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\defaults.js
        • Size 4KB
        • SHA256 b5403ecfc054d6ce404f3bc2f587445fcea0ab9130ac492e76ce2153184cf72b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        main.qml

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\main.qml
        • Size 710B
        • SHA256 235f859ca6283f9a80cb613bd789e9ef2efc96f869622c7c12c4f28a9c4ac556
        • MD5 SHA1 SHA512 TLSH

        variables.js

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\variables.js
        • Size 47KB
        • SHA256 9bb85fdd15196cfa61c75340b8171301398cc4dbfcc5fa7d481a456defd38ccd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        9116d3c4f67f448178c3c0c55b64cd70

        • Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsConfigCache\91\16\d3c4f67f448178c3c0c55b64cd70\9116d3c4f67f448178c3c0c55b64cd70
        • Size 522B
        • SHA256 d271736db5b8b7648621d71d99193ac60bb535d0dcf84a90d75b71196ae42027
        • MD5 SHA1 SHA512 TLSH

        __sentry-breadcrumb1

        • Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\3a32532e-48f3-45c8-453b-9f19d4fbc164.run\__sentry-breadcrumb1
        • Size 2KB
        • SHA256 f358ac77e85c7361e939ba7bdae79e94b6da84dd573a365c1af945afe2d39623
        • MD5 SHA1 SHA512 TLSH

        __sentry-event

        • Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\3a32532e-48f3-45c8-453b-9f19d4fbc164.run\__sentry-event
        • Size 604B
        • SHA256 3ff792c3c9859da109f840d30156c0bfb3dd17fcc54ee5301d56942b72c5f085
        • MD5 SHA1 SHA512 TLSH

        __sentry-breadcrumb1

        • Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-breadcrumb1
        • Size 4KB
        • SHA256 2c09654a312b0f1e64cda368a3905e15c527bf0487609731fbb0639a7b1d5896
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __sentry-breadcrumb1

        • Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-breadcrumb1
        • Size 1KB
        • SHA256 f288b4c99e1a4eb37db1a6df0d14bb0b825d7d25fde6b9f7f02787a7c637ef46
        • MD5 SHA1 SHA512 TLSH

        __sentry-breadcrumb1

        • Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-breadcrumb1
        • Size 4KB
        • SHA256 7aa351bca217e7df824b320954ca23b49c694872f0c894b23215cbe9c565712a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __sentry-breadcrumb1

        • Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-breadcrumb1
        • Size 5KB
        • SHA256 71c6fcfea17cd348d2715da8700d61715b019cc0c67ae27e6095f0eab05d87f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __sentry-breadcrumb2

        • Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-breadcrumb2
        • Size 4KB
        • SHA256 74f800de96eb09b1fa9d9fe0f36e10d888b8506bb22ddb691f3e0fd14c902884
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __sentry-event

        • Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-event
        • Size 604B
        • SHA256 c66320ddab325eaa3dbe9c6b3bbd1dcc4a19d9f9373b83abd8ab64125a85c699
        • MD5 SHA1 SHA512 TLSH

        52138624887473023.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138624887473023.json
        • Size 1KB
        • SHA256 e6d8e26bd052eb1ac98cf281f1748a0dff3a9cd25c4642a57c5aea84f7fd3d8a
        • MD5 SHA1 SHA512 TLSH

        52138626298349624.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138626298349624.json
        • Size 1KB
        • SHA256 665d743732da5ae2e453d37d8b73e1498c3cd8cb4b9c6278c5d4bb4110956ad1
        • MD5 SHA1 SHA512 TLSH

        52138655026466025.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138655026466025.json
        • Size 1KB
        • SHA256 f57b853b49ade817f5203381c53eb40d71341de3b1a35e93dfb02b961d253afd
        • MD5 SHA1 SHA512 TLSH

        52138656378547726.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138656378547726.json
        • Size 1KB
        • SHA256 91390b4376f6ba6d162052edba24f822821e9838d7b7941d10af0d3fbbfab6be
        • MD5 SHA1 SHA512 TLSH

        52138697127126727.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138697127126727.json
        • Size 1KB
        • SHA256 4f3c814dd0aaa97c6d0f2e8c1d4c4b2477babfcf25539d28ac0772ff1b0b3012
        • MD5 SHA1 SHA512 TLSH

        52138707049113528.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138707049113528.json
        • Size 1KB
        • SHA256 dfc7fd6df7389cbab0cafb88afe9899f10b24b44cf837de9a65963df36a68d79
        • MD5 SHA1 SHA512 TLSH

        52138708843748129.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138708843748129.json
        • Size 1KB
        • SHA256 97f765d7a7b9f19d204e7433d21dc9ba90a339647c68e85147ed2b4c34ea30ec
        • MD5 SHA1 SHA512 TLSH

        52138710912135430.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138710912135430.json
        • Size 1KB
        • SHA256 5d4b02814ec8eaab4fcbfe6475982ace5f8b11bc1532641117066808a33c1cda
        • MD5 SHA1 SHA512 TLSH

        52138712736963231.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138712736963231.json
        • Size 1KB
        • SHA256 dc29540cddb014d9d0e2683fc639c08d8c9567d8c28d40eb8194034aa7cd34a4
        • MD5 SHA1 SHA512 TLSH

        52138714518159032.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138714518159032.json
        • Size 1KB
        • SHA256 ab76e74d5560fcdb416ef2603b43192a508fef62800145f2866c4202bd1e136a
        • MD5 SHA1 SHA512 TLSH

        52138721027142233.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138721027142233.json
        • Size 1KB
        • SHA256 ab5c7b6dd72c84a6b7d471c68882c677ebdf3f40b0b629f1a93966c0a77b3031
        • MD5 SHA1 SHA512 TLSH

        52138722976665634.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138722976665634.json
        • Size 1KB
        • SHA256 a7ff89d60b658d502caff5db7992a15080d0b51beba60278ec447fd4d5b75c1c
        • MD5 SHA1 SHA512 TLSH

        52138723628869635.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138723628869635.json
        • Size 1KB
        • SHA256 b8d294ea2cbabe2764103c293f179de7b395221be3fe492a54bba87a23995607
        • MD5 SHA1 SHA512 TLSH

        52138723683617436.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138723683617436.json
        • Size 1KB
        • SHA256 80a18ede642ed6d2121d6d6b969faa3089409012a685946f960e3ca219e66ac6
        • MD5 SHA1 SHA512 TLSH

        52138724709531437.json

        • Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138724709531437.json
        • Size 946B
        • SHA256 0f89d35d785e57f807de04570c51c56c32cfdf4914b5c943ad61489fc1cffb20
        • MD5 SHA1 SHA512 TLSH

        ScreenRecorder.ini.gNFaoe

        • Path C:\Users\Admin\AppData\Local\ScreenRecorder\Movavi\srecorder 24.7.0\ScreenRecorder.ini.gNFaoe
        • Size 38B
        • SHA256 cb7d53745470d5e7894a59954c8f785cf110edd6ca6bcfd50971672f58145a68
        • MD5 SHA1 SHA512

        ScreenRecorder.ini.lock

        • Path C:\Users\Admin\AppData\Local\ScreenRecorder\Movavi\srecorder 24.7.0\ScreenRecorder.ini.lock
        • Size 67B
        • SHA256 a1fe668668ec5886887676ffd6160ed2e05e43bb7f3e1101d744238a6d2af7a2
        • MD5 SHA1 SHA512 TLSH

        95fca8a4b63a00309bd35e1796a68146.zip

        • Path C:\Users\Admin\AppData\Local\Temp\Screen Recorder\24\ScreenRecorder\usFGeX\95fca8a4b63a00309bd35e1796a68146.zip
        • Size 47KB
        • SHA256 ae4c8f32db33d759e13f7bd3f4e2cff0ed1a35790043370657ce7fccce7c09e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Setup Cracked.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-1HAIB.tmp\Setup Cracked.tmp
        • Size 3.0MB
        • SHA256 5f999fb4fbba0e807af1581c9cf2240247a14bf8362935d10f8add9fa56f9ab3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CoreTimeQt.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\CoreTimeQt.dll
        • Size 82KB
        • SHA256 89ff5853d5aac9d3aa53567d29587362eca4ce7c982bb47877eae3a6e6ef094b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CoreTracker.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\CoreTracker.dll
        • Size 32KB
        • SHA256 bef36e56a5e4922d7cd8b6205ab48a0186ff0e20c1f1c309ad76d4e2e1349737
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CrashHandlerInitializer.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\CrashHandlerInitializer.dll
        • Size 193KB
        • SHA256 840a2a2722777368d28e1cd2bd2f0fb3567fd1ebf86d563da2eb46712d4b19cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FileStorageFactory.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\FileStorageFactory.dll
        • Size 25KB
        • SHA256 f1b5b61f7d4b4e43b6950c930cdb9395c04f6179166121936917a6c9edc71ef7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OpenglSwitcherAPI.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\OpenglSwitcherAPI.dll
        • Size 458KB
        • SHA256 fdc3fb51a28aebdcf3e6517e80f1a3d543d7a30dcad560815fd1177eee63fca6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PatentActivator.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\PatentActivator.dll
        • Size 223KB
        • SHA256 3f4149c3e4c46e17907aaee772d91abca5f7b6365cc7cf0504aabd6412cd2408
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCConverter.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCConverter.dll
        • Size 309KB
        • SHA256 a9850e8184f234f2fe411e8b114a4c00c947c0056f8213bde09ba622a4b7dfd2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCModuleAudioCapturing.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleAudioCapturing.dll
        • Size 1.4MB
        • SHA256 81d59602d254be02f1d5490c6dae6342e5930d24d7e6cef826ea72bc6c0393ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCModuleCapturing.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleCapturing.dll
        • Size 2.3MB
        • SHA256 fbbfcdd04c0e80cac3efc23705a723d53a58952906873557b2820c11722364c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCModuleCommon.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleCommon.dll
        • Size 1.8MB
        • SHA256 e4c73730c5080b70ea5e331cc7d94b71eeb8bcdd52e6848ede37fb1fe8158156
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCModuleEditing.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleEditing.dll
        • Size 2.1MB
        • SHA256 e31a2062a70ea97926a783c126b7cbc8f6743831624391729691d0361a17f933
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCModuleLauncher.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleLauncher.dll
        • Size 1.3MB
        • SHA256 882e56463f40e3972e20a798f879952559d3aed8e197bc1126e200ef7f67eb46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCModuleRunner.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleRunner.dll
        • Size 221KB
        • SHA256 1558600cce7df0a9afdfba24e4fabc1eb29926f7392c3dad9255d4d5a70dd283
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCModuleScreenshoting.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleScreenshoting.dll
        • Size 1.7MB
        • SHA256 32060c61a958861ccf36e2e8ed0bd7d9400e8de141069e80d04b169c1a5340e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCModuleScrolling.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleScrolling.dll
        • Size 818KB
        • SHA256 467d1fd1db031b3afac016a4c25fd5c630fb34c0c789d5f4bf7abdcc79da694a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCModuleWebCameraCapturing.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleWebCameraCapturing.dll
        • Size 1.5MB
        • SHA256 9ae1c236160073a34742f43403ed0637d45d1cce6a3ff0f015fb058ead1e2149
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCProject.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCProject.dll
        • Size 491KB
        • SHA256 31f62ae942d2b0a2a60fd33509222a76ef65baa287fbd46d331e69c8bc6aa1dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCProjectStreams.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCProjectStreams.dll
        • Size 140KB
        • SHA256 27afee9a00769602eb3627bc03adf15ced651722b03e3c949357963c1d94ad52
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCScheduler.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCScheduler.dll
        • Size 204KB
        • SHA256 716933db5182749bd77e886e87afdaf202018434e8cfea4db77b92628ad56538
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCServiceAreaSelector.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCServiceAreaSelector.dll
        • Size 994KB
        • SHA256 6bfff157131cd3d516d5c67f854b2c76f80296321046a362777dcbcca8682325
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCServiceDesktopCanvas.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCServiceDesktopCanvas.dll
        • Size 597KB
        • SHA256 87d666d74be5dae5ca0d9286b65fe53a894ac89c848320b66aec041c0a657669
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCServiceScreenPainting.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCServiceScreenPainting.dll
        • Size 823KB
        • SHA256 6ea535ab2cd49354bed9a4ec4e21fce368f5eb33d12e6245a130bf145150ec9c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCServiceSocialRegistrator.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCServiceSocialRegistrator.dll
        • Size 789KB
        • SHA256 3813d702fa38bdff9f9c13c4f592890e29b811bb2ff738c4659f37f681004abd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCSettingsController.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCSettingsController.dll
        • Size 305KB
        • SHA256 3b0e6b265727c28920623482f2b336b9469617c7cebac49b1596e125def3e3fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCUiAudioComponentInstallHelper.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCUiAudioComponentInstallHelper.dll
        • Size 46KB
        • SHA256 7923a07426e200e0eafe60984986bb610c4cc439991b3627924e8071a01f7c81
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCUiAutoSwintchCaptureMethodHelper.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCUiAutoSwintchCaptureMethodHelper.dll
        • Size 157KB
        • SHA256 9577e92ffc77002c85bf30b5ca72a42cd66d104158f735cb41f5487eea145461
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCUiStyle.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCUiStyle.dll
        • Size 42KB
        • SHA256 f50ee4859309bb5da013baba5ce0c55a20a0647d9413cb1a1e589e1e454162d5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCUiWindowPositionHelper.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCUiWindowPositionHelper.dll
        • Size 24KB
        • SHA256 d933b9a61231c0886510fee34d2406e5ee1a0421f5a12e4bb8b83ad2a9d6b6e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCUtilCodecPolicyHelper.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCUtilCodecPolicyHelper.dll
        • Size 308KB
        • SHA256 5760395872d91800d80fac1ef4c8125f5f187a5b547ff4fe611f3067c7933688
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ScreenRecorder.exe

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\ScreenRecorder.exe
        • Size 13.9MB
        • SHA256 448ad6a8fea2be456d4bfa3585a648eb206e066d99da5c5cc8a8da242bcb9131
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SessionTracker.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SessionTracker.dll
        • Size 105KB
        • SHA256 0df54ae70779c861e270267ed0115b2f0b81dc71807712f6beb2cb4431273ddd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WebConfig.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\WebConfig.dll
        • Size 1.2MB
        • SHA256 2f0c059488db42739c3566410baa91cc3158e63a2e9e7d51449066baec9c1a7a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        glog.dll

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\glog.dll
        • Size 135KB
        • SHA256 bcbafad19340cd1a6195549cfbb92b2434ce73300e38b48880cea78d951df74a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-K52MG.tmp

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\qml\QtQuick\Controls.2\designer\is-K52MG.tmp
        • Size 2KB
        • SHA256 a3fff66cd7217029792e7fce403cc658b0ea03b2d3a2860f57479c8ea6bc1372
        • MD5 SHA1 SHA512 TLSH

        is-U0VQI.tmp

        • Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\qml\QtQuick\Controls.2\designer\is-U0VQI.tmp
        • Size 2KB
        • SHA256 91d7772e4a193e91a093d59451508cdb89448eaffb4febda26789777afbacf3d
        • MD5 SHA1 SHA512 TLSH

        memory/1208-3265-0x00007FFF427F0000-0x00007FFF42D3A000-memory.dmp

        memory/2132-3264-0x00007FFF427F0000-0x00007FFF42D3A000-memory.dmp

        memory/3800-3887-0x000002A1C8A30000-0x000002A1C8A3E000-memory.dmp

        memory/3800-3211-0x00007FFF32580000-0x00007FFF32B92000-memory.dmp

        memory/3800-3198-0x00007FFF32580000-0x00007FFF32B92000-memory.dmp

        memory/3800-3191-0x00007FFF32580000-0x00007FFF32B92000-memory.dmp

        memory/3800-3886-0x00007FFF32580000-0x00007FFF32B92000-memory.dmp

        memory/3800-3892-0x00007FFF32580000-0x00007FFF32B92000-memory.dmp

        memory/3800-3897-0x00007FFF32580000-0x00007FFF32B92000-memory.dmp

        memory/5376-14-0x0000000000400000-0x000000000070C000-memory.dmp

        memory/5376-569-0x0000000000400000-0x000000000070C000-memory.dmp

        memory/5376-12-0x0000000000400000-0x000000000070C000-memory.dmp

        memory/5376-9-0x0000000000400000-0x000000000070C000-memory.dmp

        memory/5376-10-0x0000000000A80000-0x0000000000A81000-memory.dmp

        memory/5376-5-0x0000000000A80000-0x0000000000A81000-memory.dmp

        memory/5376-3129-0x0000000000400000-0x000000000070C000-memory.dmp

        memory/5636-3245-0x00007FFF32580000-0x00007FFF32B92000-memory.dmp

        memory/5636-3224-0x00007FFF35C50000-0x00007FFF3604D000-memory.dmp

        memory/5636-3225-0x00007FFF427F0000-0x00007FFF42D3A000-memory.dmp

        memory/5788-7-0x0000000000400000-0x00000000004DC000-memory.dmp

        memory/5788-3130-0x0000000000400000-0x00000000004DC000-memory.dmp

        memory/5788-0-0x0000000000400000-0x00000000004DC000-memory.dmp