Analysis
- max time kernel
151s - max time network
120s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/07/2026, 14:34
Behavioral task
behavioral1
Sample
Setup Cracked.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup Cracked.exe
Resource
win11ltsc2024-20260706-en
19 signatures
150 seconds
General
- Target Setup Cracked.exe
- Size 77.8MB
- Sample260708-rxyd3agv2x
- SHA256 b558db4afe775a98f347bdf689cfed2b18533a8d5acaf58cc0cb16112e8f4867
- MD5 7a452931bf5d4ff75cc23524955bd11b
- SHA1 dd715fa761dbe8ff252fb7e7bbc0e593f54e927e
- SHA512 1d6e5ea0d5a5780d807c7db509ef1caa5869bd807424969137cfb7887aae25d9c556e3affcce6d73429ac0bf8dd19b36cdf5cced28be1611de4f867816a56813
- SSDEEP 1572864:22kTjIw8aqXMtX7dKIoZw0hyNqn7eSp55KPm6/CBBNJPh5NhG5tI86MC:2/TjIwqgrdK7Dn75H6/CnNDXV
- TLSH T1E808330272B855FEE59D48388977A040D6FF2264ED26C92E13F50EBC4F5AAB10C7B61D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Checks BIOS information in registry 2 TTPs 4 IoCs
BIOS information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion ScreenRecorder.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion ScreenRecorder.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion WebConfigLoader.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion WebConfigLoader.exe - Executes dropped EXE 7 IoCs
pid Process 5376 Setup Cracked.tmp 3800 ScreenRecorder.exe 2472 crashpad_handler.exe 5636 WebConfigLoader.exe 2136 crashpad_handler.exe 2132 RouterApplication.exe 1208 RouterApplication.exe - Loads dropped DLL 64 IoCs
pid Process 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Writes to the Master Boot Record (MBR) 1 TTPs 2 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 ScreenRecorder.exe File opened for modification \??\PhysicalDrive0 WebConfigLoader.exe -
resource yara_rule behavioral2/memory/5788-0-0x0000000000400000-0x00000000004DC000-memory.dmp upx behavioral2/memory/5788-7-0x0000000000400000-0x00000000004DC000-memory.dmp upx behavioral2/memory/5788-3130-0x0000000000400000-0x00000000004DC000-memory.dmp upx - Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\Q092994.log ScreenRecorder.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Setup Cracked.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Setup Cracked.tmp - Inno Setup is an open-source installation builder for Windows applications. 2 IoCs
Inno Setup installer
resource yara_rule behavioral2/memory/5788-7-0x0000000000400000-0x00000000004DC000-memory.dmp innosetup behavioral2/memory/5788-3130-0x0000000000400000-0x00000000004DC000-memory.dmp innosetup - Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ ScreenRecorder.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString ScreenRecorder.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz ScreenRecorder.exe - Modifies registry class 64 IoCs
description ioc Process Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\OxPnQG^jjEGS^mwiJC[Qldvu]i\E = 44719595902f8d8d903b886a826d898b72767bd1727c ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\pOtDPF^Sa[xiotpkLHDVpfjTxoBE = 4cc3bec53b48cec3c83946b8c9cab846c547c4b7 ScreenRecorder.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{D14533E0-82A4-CE33-7E2E}\axabpeqi = c85909a81000167f22fdd4354a9a31ee ScreenRecorder.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{D14533E0-82A4-CE33-7E2E}\axabpeqi = b4e5f667222818bb2aff5a74acbc339d ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\GJTdq[uvzvsEv]YLyzC\TaMKvRLE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\]oLhoHMsNaHjuc[SnHyKuaRPM^TE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\hDhfzJULRtHCLfVuqFz_braMzQDE = 49c4c8c53d4cccc1c43a46bbc8beb845c947babf ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\sXWLaSVMpUtJVPUEXw\hUu_tVeHE = 49bdc8c53a45cac4cb384cb8c3bdb745c649bbb7 ScreenRecorder.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{B6C5A016-A8C1-2BEA-18E9} ScreenRecorder.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{B6C5A016-A8C1-2BEA-18E9}\yfpiyamm = 6f9b201a02f8c577f20f24bc7f83bc99 ScreenRecorder.exe Key created \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D} WebConfigLoader.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\pJiUysBsLoEHOmCCSTdBpahQDeLE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{15F0E54A-88F4-8B79-0D39}\hpbnvail = 0fb9202a70b81fb974296231eb211c5d ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\Io^W[YLtVOO_OLTizSsp]p_U\owE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\]_yWEttNLv]PMQrNpsha[z^lwWDE = 49cac9c43d4cc8b9c43445bac4c7c13ac543c5ca ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\kdS\wJp[jvRjlk]M^cpWlTQ\\joE = 4cbec7bb3947cbc4cd3845b7c7c3b83ac746bcb7 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\KC^Ow]RiYpPqN^AFuONPmC]SmPoE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{478F92A4-548C-55A6-D94E}\ltndsltg = 386a2647f2e73974080c1b3aba69f518 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\qTCq]ILgIeKWLL`^LBt_HCxTVQwE = 49cabebb4645c7c4c83849c2c4c7b73cbe4bbdb7 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\IYCktbSJLOBYwSEzENKXRFg[sLwE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\bmUUdZO]dvEiDtzgs]]NXQ^zxvHE = 49c3c5ba3b4accbac43842bcbcc5c137c446c4be ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\HqJNyqD_LdOQIRBgOJiqGPRsOpHE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\xXpNlHC[^xwLMoWjnspdLYJMrWPE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{15F0E54A-88F4-8B79-0D39}\hpbnvail = 0fcfe015c49e4313cab1dd86f55f2340 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\UTsiws`_heqMfL = 4ad6 ScreenRecorder.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{D14533E0-82A4-CE33-7E2E} WebConfigLoader.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{D14533E0-82A4-CE33-7E2E}\axabpeqi = da6ba5af3681b71c2c3022a78e84afdb WebConfigLoader.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\tuxUXTTdhEwC`KLElZbLgFQpDOhE = 47c5c9b73e41c9c7c7334abac4c7b737c34bb9b7 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\htrQBRw[zxTPOPMommJNRGoKueHE = 49c4c6c43c4cc6c1cd3a45b8bdbdb53ec748baca ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\WKUVFtBTPuTqJgCxrsC_TCTMvmTE = 49d6 ScreenRecorder.exe Key created \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D} ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\LonFTRoZSaGPLcpg\Iyly[TpvXhE = 46c7bec53845c7c6c5354abbc6c7b53ec643b9b7 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\tPxCMBCjLoBoMyDErskKWCHk]OXE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\mmNTyFL[wo\xCOTxDDq_HLqWsiDE = 49c9c4b93849cbb9c53e45bcc4c7c23eca49b6bf ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\PxtBytrCu]ZwVZuyCFxqB\tOPpDE = 6d72bc6b8a89909197a3997c99afa68a837c7a8e887b896f8ecf798d72bb6b878a909587ac7a8b95cfaa8e669179907983317d926c45737a746f699754967b862f99918d956d95908c7a86b185718e4393777c717988747d739aafae79988d8f30859190449c7a826e86978d958385509176888e795071708d9269867999758e7977995c8d7879d08d928ec5b37a7a6f75786a968b8acf9189997199afae918a7779668d8776b0819191448c9886b08e779d8d8475506d798896694f519a889279a98a95928cb08c8b3bbb6784508988947a7b9a2fb2957a8d9eafa86d998990aa759789508a718ec2a4967bae75876b758c89d08e8e97b075926e445399 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\TOC[zOt\bx\ioPUyE^JPqFLLjxPE = 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 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\njpPemoHIUSB`DWgkLkapCZS]pHE = 49cac6bb4642ccc8cc3442b8c9c4c139c746b9c8 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\LcPRccvPPsunKoyzWKyYlYKmvEoE = 49c3bec43e46c6c7c53d45b7bdc7c138c34dbdc4 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\RlC\KqpaW]uEQLYZvi]KV\RU`WLE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\KrhGNbMZNd_MyEIuDyqulzZTJhBE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\KKkYPbDOK[E]OEbFlnxBYG\O_f\E = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{15F0E54A-88F4-8B79-0D39}\hpbnvail = 0fb7201a221818472a01db8de7991d1f ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\SMm]bvtYOLFZKOZTvoMLEaUUvP`E = 45c3c9bb3b41cdbac83a49b7c3c8b63ac847b8b7 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\WsmVMMwGVtBGEpP\PnZDGBHwz`wE = 49cac9b8464acdc8c43941c2bdc3c23ac647b6be ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\TTwZtl`v_nsWx_vqagXeXunfJVv = 49d6 ScreenRecorder.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{478F92A4-548C-55A6-D94E} ScreenRecorder.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{15F0E54A-88F4-8B79-0D39} WebConfigLoader.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\WqIFxGQbPu\Md^mX`wwNnCWyQvkE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\hxWW]BTdtRAYXLWwlKZOvFKbLvHE = 49c4bdb63e4ccbc2c5344ab8c6c5bc37c346bdc4 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\tCnQbstebZWXCRMwMwvRIzoyRchE = 45c9c5bb3c4acbc2cd3a4cbcbdc7bb39c44cbab7 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\[etbn_LRPsEjNMCROXuhKyGYtBoE = 49c9cabc3e42cdc8cc3e46bbbdcabb3cc549c4cb ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\PcsP]^uoIEVSwdyDzqP_rsMQseHE = 49c8c8b73948cdc5cb3748bbc9c6bc3dc54cb9cb ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\Wo]Ip^^HpqB^UfNWCSK`oxqNRSHE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\lyPxWHwieyWmlKDxUJA\GLLKcRPE = 45c5c5b63e45c9c5c53949c3c4cab63cc548c5b7 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\ZozDbIbWNEDTmLt]LvthnB]\ORLE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\]LOULHTWWppldsmLpMFYPDk][B\E = 49c7bdbb3d45c9c7c53842bcc9bec13ac346bac9 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\pkiQapwOu\zSwqvJDK[jH]w^ZzBE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\^OsYFOQgRaS`CnRzKtQNbnaKx_XE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\mkmmygYqk`f]jYfi\ni`H = 49c7bebb394bcdc3c43447b7bccab63a ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\pVVXvLo_DbslGLDCIiK\H\K\wwhE = 49c8bebd3a4ccac2cd334abdbdc6b639be49bdb7 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\tNNT]sOZMtFlSCCQorXDABHBSJPE = 49d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\oKk[[hLM_BsqzwDUTzM^StzuTrBE = 48d6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\bVpXphq_puAMucl`jnmklc_T = 4ad6 ScreenRecorder.exe Set value (data) \REGISTRY\USER\S-1-5-21-3816465931-3623202676-2955785815-1000_Classes\CLSID\{493C1F38-89932B9-F94B986A-9610ECED-DEA1EB2D}\`pLhEKMzyZ^[NeYtxaYMhW_ns_BE = 49d6 ScreenRecorder.exe - Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3800 ScreenRecorder.exe - Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 5376 Setup Cracked.tmp 5376 Setup Cracked.tmp 5288 wmic.exe 5288 wmic.exe 5288 wmic.exe 5288 wmic.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 5636 WebConfigLoader.exe 5636 WebConfigLoader.exe - Suspicious use of AdjustPrivilegeToken 42 IoCs
description pid Process Token: SeIncreaseQuotaPrivilege 5288 wmic.exe Token: SeSecurityPrivilege 5288 wmic.exe Token: SeTakeOwnershipPrivilege 5288 wmic.exe Token: SeLoadDriverPrivilege 5288 wmic.exe Token: SeSystemProfilePrivilege 5288 wmic.exe Token: SeSystemtimePrivilege 5288 wmic.exe Token: SeProfSingleProcessPrivilege 5288 wmic.exe Token: SeIncBasePriorityPrivilege 5288 wmic.exe Token: SeCreatePagefilePrivilege 5288 wmic.exe Token: SeBackupPrivilege 5288 wmic.exe Token: SeRestorePrivilege 5288 wmic.exe Token: SeShutdownPrivilege 5288 wmic.exe Token: SeDebugPrivilege 5288 wmic.exe Token: SeSystemEnvironmentPrivilege 5288 wmic.exe Token: SeRemoteShutdownPrivilege 5288 wmic.exe Token: SeUndockPrivilege 5288 wmic.exe Token: SeManageVolumePrivilege 5288 wmic.exe Token: 33 5288 wmic.exe Token: 34 5288 wmic.exe Token: 35 5288 wmic.exe Token: 36 5288 wmic.exe Token: SeIncreaseQuotaPrivilege 5288 wmic.exe Token: SeSecurityPrivilege 5288 wmic.exe Token: SeTakeOwnershipPrivilege 5288 wmic.exe Token: SeLoadDriverPrivilege 5288 wmic.exe Token: SeSystemProfilePrivilege 5288 wmic.exe Token: SeSystemtimePrivilege 5288 wmic.exe Token: SeProfSingleProcessPrivilege 5288 wmic.exe Token: SeIncBasePriorityPrivilege 5288 wmic.exe Token: SeCreatePagefilePrivilege 5288 wmic.exe Token: SeBackupPrivilege 5288 wmic.exe Token: SeRestorePrivilege 5288 wmic.exe Token: SeShutdownPrivilege 5288 wmic.exe Token: SeDebugPrivilege 5288 wmic.exe Token: SeSystemEnvironmentPrivilege 5288 wmic.exe Token: SeRemoteShutdownPrivilege 5288 wmic.exe Token: SeUndockPrivilege 5288 wmic.exe Token: SeManageVolumePrivilege 5288 wmic.exe Token: 33 5288 wmic.exe Token: 34 5288 wmic.exe Token: 35 5288 wmic.exe Token: 36 5288 wmic.exe - Suspicious use of FindShellTrayWindow 7 IoCs
pid Process 5376 Setup Cracked.tmp 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe - Suspicious use of SendNotifyMessage 6 IoCs
pid Process 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3800 ScreenRecorder.exe 3800 ScreenRecorder.exe 1208 RouterApplication.exe - Suspicious use of WriteProcessMemory 8 IoCs
description pid Process procid_target PID 5788 wrote to memory of 5376 5788 Setup Cracked.exe 87 PID 5376 wrote to memory of 3800 5376 Setup Cracked.tmp 90 PID 3800 wrote to memory of 2472 3800 ScreenRecorder.exe 91 PID 3800 wrote to memory of 5288 3800 ScreenRecorder.exe 92 PID 3800 wrote to memory of 5636 3800 ScreenRecorder.exe 95 PID 5636 wrote to memory of 2136 5636 WebConfigLoader.exe 97 PID 3800 wrote to memory of 2132 3800 ScreenRecorder.exe 98 PID 3800 wrote to memory of 1208 3800 ScreenRecorder.exe 99
Processes
-
C:\Users\Admin\AppData\Local\Temp\Setup Cracked.exe"C:\Users\Admin\AppData\Local\Temp\Setup Cracked.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5788 -
C:\Users\Admin\AppData\Local\Temp\is-1HAIB.tmp\Setup Cracked.tmp"C:\Users\Admin\AppData\Local\Temp\is-1HAIB.tmp\Setup Cracked.tmp" /SL5="$30206,80566266,802304,C:\Users\Admin\AppData\Local\Temp\Setup Cracked.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5376 -
C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\ScreenRecorder.exe"C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\ScreenRecorder.exe"3⤵
- Checks BIOS information in registry
- Executes dropped EXE
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
- Drops file in Windows directory
- Checks processor information in registry
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3800 -
C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\crashpad_handler.exe"C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\crashpad_handler.exe" --no-rate-limit --database=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0 --metrics-dir=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0 --url=https://o474997.ingest.sentry.io:443/api/6722886/minidump/?sentry_client=sentry.native/0.10.0&sentry_key=4215d6afd234c6f661e6673de4e8a0cb --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-event --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-breadcrumb2 --initial-client-data=0x468,0x46c,0x470,0x444,0x474,0x7fff43af9178,0x7fff43af9190,0x7fff43af91a84⤵
- Executes dropped EXE
PID:2472
-
-
C:\Windows\System32\Wbem\wmic.exewmic path win32_VideoController get description4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5288
-
-
C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\WebConfigLoader.exe"C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\WebConfigLoader.exe" --send_statistics=1 --timeout=40000 --sid=260708-153621-2201884⤵
- Checks BIOS information in registry
- Executes dropped EXE
- Writes to the Master Boot Record (MBR)
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5636 -
C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\crashpad_handler.exe"C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\crashpad_handler.exe" --no-rate-limit --database=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0 --metrics-dir=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0 --url=https://o474997.ingest.sentry.io:443/api/6722886/minidump/?sentry_client=sentry.native/0.10.0&sentry_key=4215d6afd234c6f661e6673de4e8a0cb --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\3a32532e-48f3-45c8-453b-9f19d4fbc164.run\__sentry-event --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\3a32532e-48f3-45c8-453b-9f19d4fbc164.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\3a32532e-48f3-45c8-453b-9f19d4fbc164.run\__sentry-breadcrumb2 --initial-client-data=0x42c,0x430,0x434,0x408,0x438,0x7fff43af9178,0x7fff43af9190,0x7fff43af91a85⤵
- Executes dropped EXE
PID:2136
-
-
-
C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\RouterApplication.exe"C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\RouterApplication.exe"4⤵
- Executes dropped EXE
PID:2132
-
-
C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\RouterApplication.exe"C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\RouterApplication.exe"4⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:1208
-
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\mntemp
- Size 16B
- SHA256 6a7981e3cad2a92ec89c104e948e754504b92b70c9899375427bc7dfe756fe96
- MD5 8ed2fdd8bace925f74e06a14618811d2
- SHA1 1504ba6664b3f08274b655f161b629011f3b7f0c
- SHA512 b091b6f43db742189f68e43acd202afc45f59a7fa3159356d2d8b34e43c21a340af5a5e5dada89271e51527af45a0761f242b8e94a7b87dfe790d3a0ba86bc88
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Bonus.qml
- Size 2KB
- SHA256 e3a77552f07ca198b141bffb0646905464e182543e225cf767c9d4ad7bb7c7a7
- MD5 ba08ac3ca79f66ebbfaf95157cc8a8fa
- SHA1 6ab04c7a74853c758c2edf164bb540336ecaed8f
- SHA512 9eb142ef0cc02e455049f09b12b5dabe2faf4d5b569f7110c2cf0e1716fa4858a993b8fec7c0a80d90c6fbda2c3a15d6ab572565aa3372ea65f854f50a478e8a
- TLSH T15941E110EFBC2867EE07471EDCDA84EC6B3D0372E22685A2F34F014B4DA111D2AB04E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Buttons.qml
- Size 2KB
- SHA256 c58d4ee6c9e4a9ccace546631fc065f049c3fb3630bf00e3e5f3488ea76b4455
- MD5 be00fe1e244c55a4e49d311535e54bef
- SHA1 d998c31c3a14938cdd54cd98e52296c5e1c07d04
- SHA512 dda1e9804937e33b70eba35898a0f0643accf1c117d13ec54ae1c00cc87e6c18b9216af561a2b9df52408ac2ad2927bbc94bf0828c828f627818f31c88c64dc6
- TLSH T17E517149177CAA62053B7036CD1B848ACFA93DF9922D1C73E10F838785A86176355977
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\CloseButton.qml
- Size 1KB
- SHA256 b250c4dda1661e7444560bc60fb1e3e265ca892b5b7407a3327619c7d09cda31
- MD5 decdab6d130cdd7fa62d3b6c34aed1d4
- SHA1 842d17581f3e364ecbca76da98f669278552ec2b
- SHA512 c90bae3107f4edfac9ac924b223ff15d8b0dfdc4d329d965e4935229987daba345fa1007777e92d4ed27904c9f5d0c4560e32bfccd4432a5825d58edc8eadf5c
- TLSH T1CE216540535A1E35A872B7FF0A1114C05DBD2015FB282AB6F77BE72942D358F06D19C3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\ColumnButton.qml
- Size 193B
- SHA256 2da06d9d14ba3fe7025c737ed3d7105f8dd24663c959914a826fc551df3a811a
- MD5 fd6e2796174bf73e404b67a5e4638f56
- SHA1 1c77d313a9f31e546512435a0d472b6106f6f290
- SHA512 70dce4b8509845f1e72ff0a261729c4b598868f1e1976dc6d557fd78507bd117ecda215b3edca16a5eb756164286c5f9ab3e1e75ee0f929111e512cea8d39474
- TLSH T172C012C296852B1A1B54388165922814F69FD1308BB434817B67CAE869C0A36FA78077
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\ColumnNag.qml
- Size 1KB
- SHA256 12cb11f8a713271b96b90ff687ca14bcb448568fe9cf517cb8b4574a465745e9
- MD5 963dd8728bac9bf2c379cda3d0924b3a
- SHA1 0a08c2b6636b02690eef19e019df4940bda69cde
- SHA512 8091683c54d25eb0c08bbe12cc07bb2d012fd26bd04213d5a120168515480f6c9f2c41c3af790fce58d6e25bfdf56fafdae532e582b8ed6df5a9b47c93e7b9ca
- TLSH T106313F50EFBE1BB6FA0B281EEDDE98DD862F4730E4244A82765B51DD89B104F14B40A2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\ColumnsGrid.qml
- Size 8KB
- SHA256 bb310154f3d0971de79e6ce8dcfa2dc127590b9dea5d82923613df975ca30d83
- MD5 67a7f630421bc033949bd9253bf7b3cd
- SHA1 1cd7131c09e83fe27516075fd45fe3017e84132a
- SHA512 cbb95b5c25e22ecdcea6b31d7fab40a7605930e70f669567f5dfa65cb82d4aa91bde0cb9ef7b230cb5c11b36c1e04fba7efb5a2b5352b80245d12c33d6a4fbab
- SSDEEP 96:CU7KO+fHx+/jQn1JYy2GqZiPtahP8oPU/l7WgU+3CzCHLGHxxEd/8MhjabryVkGp:a9HYG1JYnGqQV8yFjPiHrE/8Mhd0k
- TLSH T1DA127995DF7D3E174B07241D9CF84C99A92EA230CCA172D97A8EC19618E4D3B947C363
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Constants.qml
- Size 846B
- SHA256 d49c8feb32db97b337fdeee17ad321e463aa3b56eba6f603a94f852b9fd4604b
- MD5 df4b29629919670c01bf9ed917ef64f2
- SHA1 4f639206a59ffbae2a637ea5adc4357f67ad4dec
- SHA512 f3e0007382b52ee9d032541c04bf91979e855e5b456d3b8909589128e11eb36dd215d2c1d271979ab1a990b051b9c580ae7922440f119425b61040d3f8e586d1
- TLSH T16F016F81F28B8E510ECB67E85DD820D4853C51115D35745DABCBD3660DD757A02726C3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Content.qml
- Size 600B
- SHA256 11ca2d586bf9e1c72aada0a6c8ef4f181f04e07e4ef2508eee86d02a57598e48
- MD5 5131b5e7c4648278ff5caf3ab70c950c
- SHA1 3aa8002be59fa35040615cf5336090c68a79d0f0
- SHA512 ec5bfb8b41e6d221bc4aa1708e1468af75fe5d21ae60e78b4819d4ab2065cbb961470d410b989b6d0d0254e5ff63370bed74ab15383803d929d3c7eafe986fda
- TLSH T1BEF04C117F21B511DD959B4FCCB7A04EE3739E6056672089DA1F1668494310870E39CB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Customization.js
- Size 2KB
- SHA256 b639df04beb45ed37d2b9948cf965cc60d213b0559538e65895dba0eaae4febe
- MD5 30612d73480d673f63d2b7a9f38d8b11
- SHA1 42139758bb30161bf4fed67f1eb277c6e3159703
- SHA512 f351ad80d6ed2fbec49f6b58e28228d426cd7ee85200c66e9c951a00f36e90fef457b8548f7824a478cfabe339914b96a04cfd677ac189b5666e5a954db35704
- TLSH T1E051388C24CAEC3731EAF83C06CE1114A870DDA62754B8B096A6271F761765C5FD5BF2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\DebugHighlight.qml
- Size 321B
- SHA256 87fc4bc55fc4d9356188a4f1ae600702a77482371b3be4c70fc2c3e59c820790
- MD5 0fea67c7cdadb089960dab7f0d036089
- SHA1 09f22b4e1695d295808c317f44dae2135e9c8100
- SHA512 c5d5e72aba2d0db2cb9becbe5e3f1072998b1ee7450b680b61eb7e17fe8cfeeec7072617d48457e990ec3ff62c1a08ee00d312799539cc9a36399604b3ac4819
- TLSH T16EE08650F2A760352BD7C99A19DC6A0F738FF51A5B2B6A4033051541485450C745D6C3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Description.qml
- Size 667B
- SHA256 5f11717248ee8e695b18f17080653eb99edf4b1cd75f53f07a04f57baf388ac9
- MD5 697eb212c83ba1403bb0c1e2c99ac0ab
- SHA1 dd83cf0f0e5e8e2ff50ec2b8d236447e01af0fdb
- SHA512 6f9a31e8897dfe4433ad218f8966c595ec75669dff7fe6f5d471bd72b8ec0f78104a985123677175f92ccbb44a24b7c762b2a8deed45d5294fc3b2ba25a19bab
- TLSH T1F601F240DE18F6038F8F0849EE38E18FF1B66365DAA08150FAC3471C04503FAD67A786
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Elements.qml
- Size 4KB
- SHA256 74ffcfde85ae6cdbe8c99ac0dcb27a221e19555d4df64f210bfa9695c7a211b2
- MD5 c12bf0b70a0b98c625ba16d5b5e401c4
- SHA1 b9c3f80fdae481a0c9d75475ccef49f776462f2e
- SHA512 a0e46fc08aaad43cbb3dd50f73511650f573d0de2f76c99b4f0036d0d587c0b1ab8171b9152f5c176e6ee767340a2985b76231aea4707cf6a46c323b36f01b09
- SSDEEP 96:Gz07ijM+Z4NQNAZzaLIwgK0/NSI3f0OTfDVzHv4BZABcCo7h:GiSvZ4CNA9UzL0/NSNYZHv4LAWCoV
- TLSH T18EA131E0EF7C64B6ED0B362DACDE54CAE67F0331D8104596B60B42CB54E156E24680F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\EmailInput.qml
- Size 2KB
- SHA256 3e7f9aabefb199b2bf39dff01578aaabb7cfe4e29f74c994417c78774085fd43
- MD5 56a4f51626cbcf061860eeb9febf92df
- SHA1 f2fbcebf19740d0d9c9da92edd64783056e474dd
- SHA512 58d809f61879ad2e61067852f5a540a969d093b7e3e2ab980b53f1b418e772d383aa489f1e26ba6736b08d6582b298b92a43eae636b8a234bbe8423252dd3c04
- TLSH T1CA5163306B1C36674FAA82DF3DB49ACCA2BC52325E4115BE7647121481C0E63B7A0AE3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Legal.qml
- Size 575B
- SHA256 d984791deb6aee9c03ae26d2427905a31fad889b6fbecb1a47bb73cc4e7e4b2f
- MD5 47c8fc68d5ca19fc900de07b978de599
- SHA1 d8587574a515d51520ab363fa51c4d40543cb650
- SHA512 009d25be81c116677b2c7f8cb3ef992acef8ae6eb36337237c51462dcda63a97dd2d51ea99bc9cc7cb89d2a813aaab349406c1543a611b8692f7f5fd8ba2181c
- TLSH T19BF04C20C33C2B62DF1B176BA9B559A9B237D7FAD4040559B147071C04852E873D1702
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Media\AnimatedImagePage.qml
- Size 1KB
- SHA256 033aa5729fa3574061eb34711414ffca1a112b09e7ce812d9185cb3a9bafcce8
- MD5 a1d1a93e53d410969f7d7fd5c2d156da
- SHA1 02ec850bc6131f97dc0295e861ed7e4e99527a55
- SHA512 cf148257281b8740df41fb10fc0fb7e09316a45b9131c5c5a732ef837ed9bb852d0c96987bcc82743a153fc528574a6b593c1ad2b736b6d57aa494a465aa3a37
- TLSH T14B31C0379A70183A090395B6A9DF8100A9A36913ED3517FDFE1C83442FF166D8579AEC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Media\ImagePage.qml
- Size 208B
- SHA256 e20e4406be357be94093fa798a0f3273af1cb99916c7ad144fefe6d39133ce76
- MD5 658f799930ba5b8bb637c0e94f33ee2e
- SHA1 a6e0a1d259aeeb878f695005d5fea2e9ff4df559
- SHA512 deedd131660febb92cd4e0210ef6a5019a8be0a8e656c7117323805695ba43f119124c7f92bebe034beaddf342fe11a983a5784ff59060ce554ed27643e2b046
- TLSH T15FD0A90B58BA783B0120865E3C6804089EF83490AEB503EA648A019AA020A082AB2F91
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Media\MediaUtils.js
- Size 1KB
- SHA256 b0ffa73c635f39e9c30e6c559ba5066ca16c3456758ec5568243cb3278f2843a
- MD5 d856e45ba7fcf899a674bfb797b004ca
- SHA1 c24de8eace2cf686435e19f6dbbc02aa13d07ab2
- SHA512 f481d4027fa106004c70d4da92bdbb90f7b517f61a68c0a68eed3dfaf57016845ce2110322f0e94c140fd1a58f3aba43b0334c0dea92bc3b3023582730fe1aea
- TLSH T1D4314E6F1CB532295A3BC219FDDB9816E36E55A67165898CF4CD41103F31228C2E3DC8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Media\VideoPage.qml
- Size 4KB
- SHA256 0f4b07204751a461a44626eb5cb3ad26dd6252732f4a50e738659ce95d6aec50
- MD5 684f54947fa4766f1bf4e6cc25d7c357
- SHA1 5e5948b362be8cd56a689ecc8518ac5c730360c4
- SHA512 ec0960829df38b0058250ca2bed7e8683b251fcae19e3d68c9460be593eb3d291dbf7064dff79aa579936526acf7248ec03847d4d38efd936085cf0a62aadb06
- SSDEEP 96:TncAnNC7nenA7fHt1P4eZTcX0LExVqsoTGPFexB+n7ToO:TvQnenA7fRkXoKPFfgO
- TLSH T15D91442D41B2282A4A43617E3EA110483524D0235B171D99FF8FDB056FD992CCAFDFE5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Nag.qml
- Size 2KB
- SHA256 88c2c6208b4bcda87e5e156ac56b33823dd3c79364b964cc25d4437657d25c42
- MD5 72c928b459564a63d55d06bc22975f97
- SHA1 a0438c87d503c4d2e1e45bef4bf19cfae87d9d8a
- SHA512 0b1bd39028fdf9b2a226561e4d5eebaa54bc0a6ea618441572b80286057c0f66b2674655936d978fddd21007f966f402a41beeaeff58e4f1ca36f6c26124d9be
- TLSH T1D5511082F34E2552056AE1991CAA009C5C3E71248F7595AF740EDA68ABC316F4677BC3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\NagBody.qml
- Size 922B
- SHA256 9c17ee0e2c43f8e310cbb5a718e76021f1ea653ba8ab9b1f62f793213d6f2f56
- MD5 5e1bb3b5f1b9b03bb2983b9cdda34d1b
- SHA1 b8923a21bf2dd12111f2c0808c2823a1ee696b92
- SHA512 5a1de1303c5482a1ad0dda9702cae0d7e520f7e2f0c8ef068ae98657dd11a970016060f8a9f1041ca08ba35e6e535d2709fd6d3d345237d500b5f2eb1a710532
- TLSH T14B115070FB1D76767E76CBC61CB49D8C723A9501172B0AA5F30B280745C412839753D3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\PrimaryButton.qml
- Size 286B
- SHA256 1c0eef7e9f48468f02a1959f24130109224d122b76e9a2171502f379bc87906c
- MD5 b2f6441355fea2a8a27ca8748f9ee8d9
- SHA1 d8013c47a45006a8c538517bbb92c8473b524db2
- SHA512 f7010a816bab07190c4e8abea013343ecc3974ff92bb442a5721e558ca8a6c669b7bd1d75680a87317d49177d1c2272bf8f8b5e3c6cf73120d1ad1e40c337ef8
- TLSH T116D01251C1152FF75F07285E60499C944EBAF155C5481F80304F2A82DC840EB10F7595
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Promocode.qml
- Size 1KB
- SHA256 8b1f26691d8ed9e85326f9921ef9f396c77aa67f45e83ffc714fc9171116f5f5
- MD5 b03e71059c4dcc736498c3ddf66b66af
- SHA1 2ae46ef68ba0be8ca7205b661463491c8e39c2b7
- SHA512 e4f7f8adfbb9fc8f9c9d7eaf0be89bd889e1e607699b09bc93283947b913ca77d8a02da92299e0a8327f90add2006fbe78bc5dd0d899b7de16b2caade0beffa8
- TLSH T1043135905B1D2476896A4A576EA609CCE6BD8171EF1501BFF757072040C2E7A33A1BD3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\RoundedImage.qml
- Size 1KB
- SHA256 1c43fd13af1090345d7940829131bc727712f6f35b7752c2cb73b9f5802b0a3f
- MD5 2a3a7607c253fc88b7c8386fcbf09280
- SHA1 cd7344e6b065d2e77278a2176ba6c46916ffaf73
- SHA512 8fa341ec36751eb555ca5cfc0d4d4170246cbd323c4c3be1b7a7c17221e7993996d37c0a956583edac552c1ec4595001e47bfd5039f9de56a40d4484c0d37baa
- TLSH T1B921D99E9A3F283CB13282B12F5419186B3DC6744762835FE746017D14B7A6C01B863A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\RoundedRectangle.qml
- Size 1KB
- SHA256 01cf09611c5fe927223dc1319bb116d03b862a9c1846d3626c135dc1ed0bb3f2
- MD5 163159b1ae24e370d7cc1ec692c6417b
- SHA1 72a1bf783526d9522697e61dc79526a2581a7099
- SHA512 86978af2f52deff11737d11b8750c5403c1477cca6fa15eb8f21813fccc9b9a3083ac5c52f6dc81b997d775ad51c3b34b5fb4000ce006e12b3b26dd9336635d7
- TLSH T1E4214BA0683F743CBA360B679E78AC8CB73BE8340B51175AFB5E1C6055054BE25E81B7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\SecondaryButton.qml
- Size 298B
- SHA256 ced53349d0bd0730486bef79fcb2308ac86dadddad4a3cbc5a34c44ebc91106d
- MD5 7e14e7fbab6b9412995cc75361003dd7
- SHA1 7c738d216d49db1d0fa35e3d9f6892e8bed7dd95
- SHA512 e694fe854e4922dd3a10e2d2fc16a1f26fadaf1c9570e4d58146279f2e22043f6e0605db36891971099b9e7c0401feaf32275142ad48fd064a2f3a6fd9e6578b
- TLSH T1E1E0EC81C9B53FE75FCB2C6E60459CD44AA3A125ED4A1300B86F148058820ED10E75E5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\SideBanner.qml
- Size 1KB
- SHA256 8e5ec40ab72fa065ac6ba9f7db97c5ad267c3421e57a90743b8efaa498be3286
- MD5 e4f6e40d45c8a8e9622b479d127ab5e2
- SHA1 40d7d5474c375783dd6e0659eac621039c0aec98
- SHA512 4383e056cf4c5dd202d47bca43cc2ef29db7b5c6e2d5dfb70e35708bfc427bd4c2bbbeb310de97d322fa98804e0db530f62951141926dc4d50b67567eb8dfcd9
- TLSH T13D218E566B76A4308F5371BE3BDD040599BCA031DDA457E9BE4B026482B302EE2B1BE4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\SpacerItem.qml
- Size 266B
- SHA256 1750ee88f31c25c2a43e48b9f6fc88cb5bc20c43255259d7ac3b30826246c0ca
- MD5 822062159374a2b2a5916cb3c01b56d0
- SHA1 21a6f4d5ff0e4083844ae001c29bef39318a2922
- SHA512 e4041dd3d1e7fde6bde2884a309af28a3867039aee03ad38ab505f94ee7106b7d9faaec24b5902bdda8ee293c52f0babe207753d3806f9c53afe33202943eec5
- TLSH T179D02B26EF24B693CC5343C74CC3550CC3275142A120552A738456130F431D0B570A3B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\StyledButton.qml
- Size 2KB
- SHA256 796c09a4000faa0e4b4d47d41de69cc1a8e640a707742b43d4259a289df56dc9
- MD5 d227f8b0d4a546d43997bc9aeeef9b18
- SHA1 d88af402adf8d8e3cd912e1fb958cfdd901122f5
- SHA512 0797bbf6402068e87b73d9644ec4b3cf1ba944f3671cb07f777a5a24c5e563fd2fa5f931bfd41bf2d8ede2636af963205449098768bde40ff903442c3e045efb
- TLSH T1F04141C0EA4D0F2ADC62A2FDC2661584E2BD9035F67021F7F67DCB5941C01AEA3A0593
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\StyledText.qml
- Size 2KB
- SHA256 31f116e8489dcf0257b6a85eb796877651476dc5cc7212eb0e784368443eadc4
- MD5 95cc9c6019b871ada9e786e66662b240
- SHA1 b0683debad699aafa2d3a33abb69f5de7b28b3fc
- SHA512 2004775f78951be3a327d9882adb21367ccbb09f99f62e02eb203a96ce465e8499197778063e6877ff4fac3953e7605de5b90f9f3cd8e18957248c6216d7c311
- TLSH T115513394C3AF2B01C743159EDC1527C5E16C6ABBF13556B6BBA3A71C4C91A3C93A4087
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\StylingBase.qml
- Size 1KB
- SHA256 77cf4600af3c84e211cf001e46696643867ce60c34f8ffd81b6efea0fc103efc
- MD5 98a754e95eaba7b9dc46d2eafecdd3bb
- SHA1 f281f8ec3f7f5505e4f41de6ba3a83943e0cb24e
- SHA512 022da9b9737d6fd55d965686437afd68d07b9a66abf7f11968bbd0b7da6619ada154a0168240f6317a13ea34342d2e402b43acd11c9c297b85b9871f83744e15
- TLSH T11631F296FBDAA9131FC94ADD0C6D6CE5A5ACE150203C815F7B8FD34E4CC815A90B49E3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Title.qml
- Size 716B
- SHA256 6f5063cb5a2fa0cd8e29a00fd5f3da104c89d170cf3c160f16c9f60288b89c17
- MD5 d1a06677a07753c5be4e2a93e66fcc38
- SHA1 629c0ee226d3c43eb264e8597ab7e07a6d5a6632
- SHA512 2d3703750038454e3731704736eefd6c8c0b7dad1a720d056a6326d912757d77eef6b7bafdf0aa551f93c6fe34b68e6f7f1dba4abaf1145a04003c8d844c9099
- TLSH T1B5012864A33DBA63CE1B0D46FAF87BC9E2B61675CAB14011F2434B190484129E27878E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\TopBanner.qml
- Size 1KB
- SHA256 83176f6f05bff594f86d8c841a42fdace55357eccc8a8faa1c2ce541327d8ea3
- MD5 58b2fc33593bd29afe1b6888d15311db
- SHA1 181e0540ca31ffe00636c421c884f624f8d37d8f
- SHA512 7941deff1011cc8722aa13cb950ba8aa435f5d0e2bb6db2966a96abc9a8015e8f4d37abbf4952afefd3ee217a74dd97a771a3ddfe2391befb3dc6a2a5f52278e
- TLSH T1DD219B267B75A931871332BE3A894459A8BDE021CCA06AEDFF0B116452B312DA1B1BD4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\Utils.js
- Size 249B
- SHA256 3262f41ef9045d326fabf55f36aeeabaef253bf4a02673ed8f45d0364999ef80
- MD5 f1d1aab026a61d64633cfd675416d1e6
- SHA1 133148d6e47be57d49bc7efc582108b97cad4e5d
- SHA512 94e437f437491de2eb00847d4abf6f10767675b16b7e40505cfd77fb9e76ebea59fc1127fd2954873b65ee28cf9bc733cc99fd8af5f81f9d9a5b435f3cc21479
- TLSH T172D0A7C85CE3B1509A7EE36D052FE50E613CE877214D5D51B80C87705FE003457D6B88
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\VariablesParsers\CommonParser.js
- Size 3KB
- SHA256 d6f0b4020df3ec5ff3c2ee3abba43c682486425792ff9dd7f47e1495cb6c165c
- MD5 1e5c43f571c58b55c20d82e61f66ff8a
- SHA1 1cde1ed2a157dac969e4926cab60a00c1b9dc3f5
- SHA512 50d85c35b752c77c4bb7cd419d2baf5ccc00067caa4ce4bcc1b54fda21484766dad4140e3403b76aabf2a6ffbf57fdd2d77bc143410ac45d926026e71fa8335a
- TLSH T14971CE108D0BA41712C7A5BC6CEEDC48A27C231D74A6D4BD7D6F610A174A2DCC4ABAF8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\VariablesParsers\MultiColumnParser.js
- Size 5KB
- SHA256 3fde4e769abd111a8193a6147ec8e909ee9837f9f89df3dc1f2f8800263539eb
- MD5 3613204a7aba69e3bddb56a39b796488
- SHA1 c0a9f64a6ac8ccb029e4e237bcfeb0567ec80d69
- SHA512 d202bb098fa72a8f6bd8fae2bbcc28546eca2a25ddb8cebb9b09990ab8f446b9f6d17a65e0bf17637462efb393239386f7c1d564b88e584218d1bf8e77f36acd
- SSDEEP 96:oMX3eFvPyThbAK2iwhHmK89Yi+IyIZacwrwSORE2Qwqzoe+cYjsTnxFoTgDCTtmG:oBqT92iwjE2IXLahLdnrUWCJfd
- TLSH T185C12EC2EC2DA04A078B705E7CCA9D41F66D623ABC70F2C73C97855420D952FADBC5A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\VariablesParsers\SingleColumnParser.js
- Size 7KB
- SHA256 acdd2d290f2970ef0702508d94f2169ecc3d52947ac77047450f6a6be9548e3f
- MD5 eec84add149eb56318a13849fa92a782
- SHA1 09472211a6ae464c5065fad92b31649c6542c80a
- SHA512 11c572ac610c202b7ffbf6be6158d1101bb992b499253eec15455c737ae5bdd3ff62ad2d459834a4e8c980bf359dc66b546bc1794e6a5b44b68ac14067c95c49
- SSDEEP 96:osf3Shedf0zCvVwCGn+I6cpIefJLhaTwCbJWhnwLorjyJOV4WsHyx2lNq:om5TVwhnV6olazInUMjyJOV4WsHyx2Hq
- TLSH T11DF113A89627141626C2F83E3C8F9805681C513D6938EC7AB93F264A17510EEF5BF5EC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\VariablesParsers\Utils.js
- Size 3KB
- SHA256 48215b7d0092c34cad6dc889836bc323e4e4ee9ea95eb8a02c23b8bf769f3051
- MD5 b617f69e4407d3daa2c75476fce4318e
- SHA1 b7a61678ca82fa4482cfe3769f54cd3be521aece
- SHA512 3392c1f0e2fd3e0dbeb152b471e61fce57302e312e61893de65e0720bb15cef8cf16a1670ea7faf8f65b0ede77f4456c2e82523bc49717b1255bc9780129660e
- TLSH T1CC616351B19ED49E01A630408919334EF8AC86FD3D37C9FFF5A06AB464E246C865F725
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\WithBanner.qml
- Size 1021B
- SHA256 fcfe5749e0bc9115dad1455c7ea3ef1fe91863d1d598a0f8e3cc0ecd5628c3d9
- MD5 c43ab9ab81a7d09662f274f50b3c95f4
- SHA1 68f1e659131124a00a8ecd41092b09f3e0d0a060
- SHA512 470289af3b78f2f33e6458332a35aaeab01f721821351144aa8660cdc35c29c27b9ea49932a2b80721eb4ff1604b4ac43eca36b47f43a01b268a543f100b485c
- TLSH T1A411AF221B7C20308527B9AB5DF061AD5D3C54519E2345FEA94B852950B372935A37C3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\images\bullet.png
- Size 583B
- SHA256 5a74c6ef51c4517186d58bf7fa873367b4fbd225fa6d77a181556d9e7864fd49
- MD5 66d0854ef63a1d1c41975b4fd8146da9
- SHA1 2159f084eb8bd732f79284a587a082e467ad020c
- SHA512 77300de96767b3628d9cd31c852f0937c06bcbbd3d552b3bfb1d7b096a21f8fbadb3e79d685afb1da6d5dc53e19251aced1ce2e7b336008ffd708a4e032ecdeb
- TLSH T1B8F041C21B056AB3C18C08BAA1968B80E4B7472C9A85C48CBF7468417D830CBEF1B132
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\images\close.png
- Size 424B
- SHA256 554c61bd7af920d865170df06183bf41253d947e08969e6097d746f282730825
- MD5 b1d4b91a048d6a8f0333270f1c11d54f
- SHA1 42de6e9032552a929f79df01a3d2b4926d973823
- SHA512 33b7e58e4673debc99a5da6ed84a4cb7ed5492bf118f544d2dd8e73f16aec8c1f76ab5ce2d26b36dc12e24fc6f7e82eac8246fb55ed3f6ed102a51436b99fd23
- TLSH T15FE023C1B71E4479038733A4010E5680B1A70D6D157337CC052415748A79B4D105BF85
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\images\copied.png
- Size 1KB
- SHA256 e2efd9d295bf57b77283f2959b23d7c08649c660c1f11731bb0ce6c6cd749a44
- MD5 39d04845092d9c1187368c0aa5c580d5
- SHA1 339654226d9ff66be0640a04da35024f0d0ccdd3
- SHA512 7b30c9ab630cc49aa01e52a61f6575d9a3999cf3e4c4a5f22cde549f15a8bcf465d0c1955835885028bd37677028a8abdf0a2ade1c4ccc52834a1ddf6aff7aaf
- TLSH T179210BE3EBD410BA1896E087480EF2647377490C5D3136C650AE4635EF19CA6E6FF469
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\images\copy.png
- Size 639B
- SHA256 e6977a2b61fc7cbba4e7bda48097d83a7dc587c2d10da179799d68a7e09c1515
- MD5 82a7b9fe8ad2fa965698ec8eeb876d83
- SHA1 ecfba83181151453d7f3d9cb2d0dba8a32c89b9e
- SHA512 17ef37c2c62ffecec8bae1966842fc4b732222d1b9f2b1ede4c76b05237d4fbd8af11b873e35da26ce8ad96f78c6a87afe29ca406f91c9c1bafab6c8cdedb2c2
- TLSH T178F062C3B70008FD82091972B7D3426E593730ECD21C46168FB6E6E85D2A858BE0DFC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\CdpNagBase\images\copy_hovered.png
- Size 663B
- SHA256 926efbbb37be6690c14bd98aebb2223e963223e2c54ce953337cfee84dbae28c
- MD5 82d87eb7d87cf7a1d079c65fef35f48c
- SHA1 685cb342e40c62a399fab3f6efff0fdcc1a77969
- SHA512 06ca9b1006ff8f07e980b33334a1cb2a3a0368d2af78294c0d393a1b8b2a85e24ccdb2c2c236d72500a28ac523c538053070135266d3a557332380eb25a579f3
- TLSH T17C0183E90028DD8D80E49A9F9F505498ADB9007DC1352379BCE905F9193AE0F0708B82
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\ParsedVariables.js
- Size 3KB
- SHA256 1005e5af7a2a6f2ef026927028c9a1b77b20b95b7dcc4b675bb58b9245f0e99c
- MD5 5ca3c8ffcb3496bf10084c6e341a11e7
- SHA1 34c94089885f785220c12991acb93dd1cdfc3299
- SHA512 595c86f97d4c69e834ac22f1fb67d4cfe037c789d52d4a5cea627265ada18f1777c893adab2688f697d504ee52c13b710572200302d484af41cce3532138bf0b
- TLSH T1AD81330A639C956E1545F11DCCECAC082F3041BDBFE271B6F641662E31A307D8976EEA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\constants.js
- Size 599B
- SHA256 d0d74bb928aa60e5499f4572e9086f51865d8c09e2524e84ea66b3652fd0d51e
- MD5 5c022b249801f875167aeffc830e5cd0
- SHA1 75c0647a7afbe41f1a61ef8c881481a70c323887
- SHA512 b43807dd3f46b4b79e699d8e058b8c99a70293a0ef7290653aa75f1aad1fe2806151d315078344b07a39bc060d35216542fed2e21ddae16bc2c13373249efaa8
- TLSH T1AFF04668114148B263AAE8D99C4C1F4ABDF6577DAC33A78549C9614FE4F311CC08B66F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\defaults.js
- Size 4KB
- SHA256 b5403ecfc054d6ce404f3bc2f587445fcea0ab9130ac492e76ce2153184cf72b
- MD5 710d502f12417c12e3b93d8eb4a0d0d4
- SHA1 149152551588403152e715542d62820d6a57720f
- SHA512 ee1cd6c85d9f671d260ce47fe2769b9984d4d399d9333676946dff1881d2417495304a74715cd74c7e865fea3a8c3f28b72e09477b743cd7f175fdfd7b7e7fc6
- SSDEEP 96:ojrATpIp6OCsQxxrvyAI3MPHgNN0QVrrGTH0RruhY:ojrKOMG133VeTH0ohY
- TLSH T18BA1E230EDC5A5C32605509F708F4ED9F1AA2461741CBACA792EC5CDDF4215888ED5FA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\main.qml
- Size 710B
- SHA256 235f859ca6283f9a80cb613bd789e9ef2efc96f869622c7c12c4f28a9c4ac556
- MD5 27c40ad3248829d2a4341e60c892e4bd
- SHA1 437a4232412147f0796644d2fd7feb7196002411
- SHA512 9bb2ea71154b2724490ec28bd40049c31b3af3410177e3cd048f8e645d73ff59a0655304a361213c9ed4e954f910df69437baf8a036b7f5b3905646881ea8f73
- TLSH T1F601C002311F188641E2F6DB873337811A74C479A71536663472833DB7B50AB560E8CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsCache\~82924da4f5e67e5c52c3eaa4655a44ce\variables.js
- Size 47KB
- SHA256 9bb85fdd15196cfa61c75340b8171301398cc4dbfcc5fa7d481a456defd38ccd
- MD5 1008a1a31ee25a5ad120b87a81a7fa1f
- SHA1 4aeb47d0a45602c38ca7920552519d739b1db211
- SHA512 792f578671239844b7d04fbca216755d1d2f65829bce07e4c335bb50f5a7eb5b70939680b20a8dd6cf4254a3e957c83f1617f1b267f3065e0489e44105b8445a
- SSDEEP 384:cBeLicfcQngvMnlKLd2jKauvvNXS0VCyBqm/wHp:Fjf3ngvMnlKLd2jKa0vNCVyBqgwHp
- TLSH T10223EF94C1314C160262A4CD9CB656ED9254C21F9F40FE25BD3D8B6E4F8C66EF0BA3B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Screen Recorder\cache\NagsConfigCache\91\16\d3c4f67f448178c3c0c55b64cd70\9116d3c4f67f448178c3c0c55b64cd70
- Size 522B
- SHA256 d271736db5b8b7648621d71d99193ac60bb535d0dcf84a90d75b71196ae42027
- MD5 1da533389063c3d0ee71b87595c81573
- SHA1 405b2d7e2d9e2e9d845a8ecf51840c4ca9682971
- SHA512 ff519eb8f648b1bcfdbd534cf5cc371ebe16e43b8fd687ebf91e125db6daef9098d8a6a38c317d8a1792666e05d6b7df751350fb6c8cf1e5de7a420685c373e7
- TLSH T116F0308EBC49BFFE05CB4ADD5A6F4AB4407418A932BC9470DD9D857A1E6B390438B120
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\3a32532e-48f3-45c8-453b-9f19d4fbc164.run\__sentry-breadcrumb1
- Size 2KB
- SHA256 f358ac77e85c7361e939ba7bdae79e94b6da84dd573a365c1af945afe2d39623
- MD5 6b87290834291e52c66c3e35e263a466
- SHA1 9eac37f0b53f37985b767787eab42aaeb1be9aad
- SHA512 3410e30aa0e56044896378019500774d4322d532013f2c7b152dbad45aa8618d3c668e2b0aa911266920f1167d8c8e89052e945c7847a0384ce4300e54970b36
- TLSH T19051BBE31A2C700B1562C210F589B99129F0E75E1949BC47A44BF7B422481D75E63FFD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\3a32532e-48f3-45c8-453b-9f19d4fbc164.run\__sentry-event
- Size 604B
- SHA256 3ff792c3c9859da109f840d30156c0bfb3dd17fcc54ee5301d56942b72c5f085
- MD5 79b9bec5b680345e151d5dc39fbcd79c
- SHA1 4dbb2178f2363d6e276331830bdee9ab37b20103
- SHA512 bd5a961aa90592655df594616d5371e47f82a84445b3d08bf2f14e355de15bd1a9cc49450cf9805a8d2fa6a9d8af63c00e137aa02d1b4d266612f9aecb0696c0
- TLSH T1BCF041D3A3B0C3217A233F06E56512C217348A5302C14283B9122B97EF90E430B06939
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-breadcrumb1
- Size 4KB
- SHA256 2c09654a312b0f1e64cda368a3905e15c527bf0487609731fbb0639a7b1d5896
- MD5 8dc3a2de6f8ab5d00860beaffa42a890
- SHA1 d0e5d3da6722ecc54eb8d6ca665b8eb55f5de96a
- SHA512 ddd27cf45543e7d8761dc2b1b41d678642f4e12edb1b70657e4215744e6149117379cb684a8b8f99678e398f2fb29b4e6fa9402ffee465798bccbeb182467fbf
- SSDEEP 96:88VCo8mrQ8dh8ik8QCjQ8Tx80u8k/Q8ZgN8q+8FyrQ8ap8BCh8orYQ8JwN8KCM8Y:VV0sY8pK6chMF2BBzIArKIov9P7cX+ZB
- TLSH T108A1FAA64B1C98433971C005E84A399211F9E21F080CFC8BD29BC77825E66D69E36EFD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-breadcrumb1
- Size 1KB
- SHA256 f288b4c99e1a4eb37db1a6df0d14bb0b825d7d25fde6b9f7f02787a7c637ef46
- MD5 df40530f633163938fa87eec8bb10087
- SHA1 8354d855f686333936261cf925fe34fd317733ea
- SHA512 b78358138365a5f212f2c789405c3bfc241b810870f70b54b99f4caa71f7f5dc696a31344cef515313865a1cc51916254d34bfc7cafa8a0f311d59e9ff905b3e
- TLSH T1851189D5A22C144B6A06C052BD49BD4343F9E76F04AD7CA5E0CBCA74225B0839F74FE9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-breadcrumb1
- Size 4KB
- SHA256 7aa351bca217e7df824b320954ca23b49c694872f0c894b23215cbe9c565712a
- MD5 5b79fe17c9691674238b56c6ec9b76e7
- SHA1 d6b002a55b1fc2b0ac1647714fabc856588bbf64
- SHA512 378308c61fe33e535323846593b34413b16893bf4116a2a8ef430cbf055e66779b9bbf2c6c79becf64c2c7f4446bfaeb0100c25b4311312da4c56ab33220d369
- SSDEEP 96:88vC8KB8nF8J8JJ8hJ8Uzt8QXCFAivsj8B8l8z4Tv18U4Tdf1814T318U4Tk188Q:Vv7ZC+QYNQXC4AGiz4T6U4Tdq14TCU47
- TLSH T15CA121EA661DA40B0812805AB8993E828BF1A75E0CDD7C46A0D3D7F853130D74F72FB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-breadcrumb1
- Size 5KB
- SHA256 71c6fcfea17cd348d2715da8700d61715b019cc0c67ae27e6095f0eab05d87f2
- MD5 b312e523f5493f0afadf522cebd7fe43
- SHA1 8d0d46e8cd7fb4cd4db1f12991086b81aba86d73
- SHA512 414c3514020948cba56ac3eb486054f6dac66d574d146624757f84699cefab1f7fe1fc3edbf64ca3f826fcddc8d86edf6584248cfa4d7d7a40a4fa482ff15391
- SSDEEP 96:88vC8KB8nF8J8JJ8hJ8Uzt8QXCFAivsj8B8l8z4Tv18U4Tdf1814T318U4Tk188g:Vv7ZC+QYNQXC4AGiz4T6U4Tdq14TCU4B
- TLSH T15EB122EA661DA40B0912805AB4993E828BF0A75E0C997C46A093D7F853130D74F72FB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-breadcrumb2
- Size 4KB
- SHA256 74f800de96eb09b1fa9d9fe0f36e10d888b8506bb22ddb691f3e0fd14c902884
- MD5 35d35bebd52ce212cd87d6ce68c7e937
- SHA1 58b4796d7ab931a0ba00e76ae7e6b1ff60d9dcae
- SHA512 3ab85481b1af00f8e31c0f14be56c39fa72d02aded27468e3404eae57a089e09fe86459509d57bd7ffeb8e5ce58714a08942fb37cf3a83db9e37c9560392ae1e
- SSDEEP 96:88Er8UpQ8z9n8eyM8ujQ8yM8mp8q4Q8HUJ18DUJ18hi8oIs8oOP8oznGG8oh68o9:VVKz+Nlao5RHKyDKyhbVF3UmnGnIDuOg
- TLSH T18CA155D9992C84879926C008F589BD8211FDF33E4A85BC4AF543D7B913120D29F76EED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\Sentry\srecorder\24.7.0\0.10.0\a65abf0d-e053-48a0-a4c1-85f159705f99.run\__sentry-event
- Size 604B
- SHA256 c66320ddab325eaa3dbe9c6b3bbd1dcc4a19d9f9373b83abd8ab64125a85c699
- MD5 a39916878164db88e28ec5673e14d261
- SHA1 c2286d4d967c67b91f969804d2cc08aed7dabbd6
- SHA512 05d3ed7e3c935054c5f40c1f4348c27cde2b44ab268302b72f662393a963a72baaebe1b322ec6319b61891f198e285069de7b451e40ca41d5edc63eef882f755
- TLSH T1E6F041E223F0D36139230F02A2A922C31730CE9617C107C3B8105686DFA0C8A4B0397C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138624887473023.json
- Size 1KB
- SHA256 e6d8e26bd052eb1ac98cf281f1748a0dff3a9cd25c4642a57c5aea84f7fd3d8a
- MD5 e86f70a51f7078a8161be5b35c975614
- SHA1 e194354ebbf4869417d920a85474d2149a56f47b
- SHA512 99e4d283a453ccc7693c993d1769bf6adeab390de59e62d915f9ef7a81334717faa9f1856f4691545c69ff9b7aa548d590059d971dc21fcbed76ebd83571f99d
- TLSH T18C1112CE5EC53D18DBC34C5424301C741C7571B8070B5B14D56C7265359C5D64BE2E79
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138626298349624.json
- Size 1KB
- SHA256 665d743732da5ae2e453d37d8b73e1498c3cd8cb4b9c6278c5d4bb4110956ad1
- MD5 c0135d8f0d6f53b1ad126552a8738fd1
- SHA1 52d4180a0cda2c4e8033115482051771c8329c5a
- SHA512 7b5e7d7e37341d2bc66237847fb5fcb3f637104305a1197ae3e72206459da3d03c1e8b6d441efbaa7a2d40426c1141fde14ddba7d1c4bcd5da2f0666089d6184
- TLSH T192111FCE5EC43C58CBC34C8428301DB41CA472B9070B5F10EA6872A579AC9D287F6F39
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138655026466025.json
- Size 1KB
- SHA256 f57b853b49ade817f5203381c53eb40d71341de3b1a35e93dfb02b961d253afd
- MD5 13062fc849efd53524494ef63fde83d9
- SHA1 16c6c2c2f49f5a50840a1d0f7b1f02aea609fcd4
- SHA512 b107bcc31bc034f84aefc0f09c516c77e5b0d4ae2f1ada7461f3d8b11d5e3c0a50bf023269b2f866e70046678e0e7fb6cd1dad3c4e108acf42c13657ff9a0756
- TLSH T12E111FCE9EC12D58DBC34C98183008741C6572BD070B9B64DA6C72A5399CAE687E2F3A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138656378547726.json
- Size 1KB
- SHA256 91390b4376f6ba6d162052edba24f822821e9838d7b7941d10af0d3fbbfab6be
- MD5 9e1adc8a10944eeb00386e85fd24e938
- SHA1 8a4cf31a935872d6572f0a7178ec51cc89724df9
- SHA512 d23457332bfd1025e67260d42ad7761840519e7b400f3e8d76f32281fdef998b17fc002c2d6b673cfc358b4fba15617bedbffa786e9c4ea0162a481ff19e427e
- TLSH T1A21102CE8EC93D18EBC35C4429301CB4287572BC074B5B68DA5D71657A9C9D287F2E39
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138697127126727.json
- Size 1KB
- SHA256 4f3c814dd0aaa97c6d0f2e8c1d4c4b2477babfcf25539d28ac0772ff1b0b3012
- MD5 2136b85f2a6dbf606d22fd99252ed281
- SHA1 c80829886b2de915eb4d460338775b2956a36ecb
- SHA512 f1ae48db06d38771f45523cfb3b20ce5a3f4d95a34be7e71590762c4cedfc068098f40d78b97e01547a68072d6a4f812f9a7ef9ec4aa6816a865e33b78381fb2
- TLSH T1511112CE4EC43D1CDBC35C4418300C741CB971B9070E5B54D96C7155399C5E287E2E35
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138707049113528.json
- Size 1KB
- SHA256 dfc7fd6df7389cbab0cafb88afe9899f10b24b44cf837de9a65963df36a68d79
- MD5 849e382ff5d6ea001c419b0305d506a1
- SHA1 7d6ce82c2222dc83975acaaacae03620d99e7e8a
- SHA512 88e004401c4d475a5a27d14e3dd909f9b00068a8652436402a3545dd0cbc783bd5fb78cbd8727a1fd213384d90bb0c188268549d5fa344fdf240ea77f5387cda
- TLSH T1451112CE4DC47D1CCBC38C44243008701D7571B9070B5B50DAA87269759CAD387E2E3A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138708843748129.json
- Size 1KB
- SHA256 97f765d7a7b9f19d204e7433d21dc9ba90a339647c68e85147ed2b4c34ea30ec
- MD5 d0be60ab24f4c3d714e3ca32fc8b1c06
- SHA1 76870b5317c751f4dd9685400fb132ad0fdd95c3
- SHA512 6a47f91de307d236877839bb0238f694d408bffe07a5533339f112e5d9ac7bc78ee60652ac6db3451984a7fc06c394a1bce6c74782355a0b973741eedc31449e
- TLSH T1871132CE5EC43D18CBC38C4428301CB41CB572B9070A6B10D6A872A4799CDE287E6E3A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138710912135430.json
- Size 1KB
- SHA256 5d4b02814ec8eaab4fcbfe6475982ace5f8b11bc1532641117066808a33c1cda
- MD5 e7f6c6f19f496d81e6d267aef00acf70
- SHA1 43a6c2c2ad9834b3d8dd58fe20417610ba1fbe61
- SHA512 303b3a11db367c37ec6abe9f89491b29e6a8e774d6aa70acdbb567c1abd59120bc466ec89c9eb913d85a64280e7e0bb531bc19ef857bcc41840de801784b8251
- TLSH T160111FDE5EC53C18DBC38C4418301C741CB572B9074A5B14D5AC7264399CAD28BE2E39
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138712736963231.json
- Size 1KB
- SHA256 dc29540cddb014d9d0e2683fc639c08d8c9567d8c28d40eb8194034aa7cd34a4
- MD5 e5fa3073ab54fce43a05df5128a1425e
- SHA1 f3e1a6f005de3738e287f158103b4882b2bd8807
- SHA512 64928d13583be8bf839427b6e987735f72e8ca58fdc805caa7b665d3c36b22a1b76a16c1d9d6f035d846f4b2d50cf41c0280af31d5f5af7953e7200d7e2cf7b3
- TLSH T18D11FCCE4EC42D48CBC38C98283019B41CA572B9470A5B04D5A876A4399C9A28BF2E79
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138714518159032.json
- Size 1KB
- SHA256 ab76e74d5560fcdb416ef2603b43192a508fef62800145f2866c4202bd1e136a
- MD5 5bfbd730db946db71a62806140b6f3ba
- SHA1 faf11a64c8ec7213728142db8e3dcd810b8b331b
- SHA512 01c4b9850bf01eec5ff914c220da11bcd850cad3694c0e3927df5e7fd8f298e22ae1152c6b87b371924b47f76fd4f235f991d3425ba1cb940452e134766330f2
- TLSH T1D5111FCE4EC43D08CBC39C84283019B51CB572BC4B4A6B00D66C75A539CC9A28BE6E79
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138721027142233.json
- Size 1KB
- SHA256 ab5c7b6dd72c84a6b7d471c68882c677ebdf3f40b0b629f1a93966c0a77b3031
- MD5 99f925c60731f1e82f626a589e46721d
- SHA1 92eddb5bae3bc622c769b83f537ecd2f4eb590f8
- SHA512 200a8ecf91b92522574ab6b2c8314b23960fe4fc969970d8517b752895858d3c77dbaa4e70315b90f6a2e83c9fad86746836b8cf489529b54490d4f89d2c10fd
- TLSH T17611EFCE9EC53D48CBC34C88283018745C7972B80A4B9B54D96C7165769C9A28BE3E76
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138722976665634.json
- Size 1KB
- SHA256 a7ff89d60b658d502caff5db7992a15080d0b51beba60278ec447fd4d5b75c1c
- MD5 f0ed097396f52feeb8bf6e3aaa69f41e
- SHA1 ad3175957743daa62648c6d64395110b2cc59fa1
- SHA512 6a963706a53158dd184dc9dbbcc884b86cc56045b4c6ee74440eb91bd0352ab747a73f06a392db1641c36784cf13c812dc74a65289c2b9aa747bbc7000efe974
- TLSH T1F311F0DE5EC13D18CFC38C44283019B5187572B8474B5F44D59832A4798C9D28BE7E39
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138723628869635.json
- Size 1KB
- SHA256 b8d294ea2cbabe2764103c293f179de7b395221be3fe492a54bba87a23995607
- MD5 82554c61a1057aa25620b37bd9c2f7cc
- SHA1 5d941089b39e5c960ce6a91ccd6741a5a241cb1a
- SHA512 4741b9dafcbb164a6cc8cdd4309d21515a39fde9bc06c9788811d6f3029cfdf5e44dae877a618a8903011a07bc7858ad21b60581752e7152678eb62f9817094c
- TLSH T1C31123CD8FC13908DBE34848217089745DB9D2A90ACA5B90D18C794931CC9C2CBB6D65
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138723683617436.json
- Size 1KB
- SHA256 80a18ede642ed6d2121d6d6b969faa3089409012a685946f960e3ca219e66ac6
- MD5 3a639c97c71abc5edc08516efd2a565e
- SHA1 dfc69cd4e675ef2a40e35adb1d468235a0842c72
- SHA512 60ab286912164208fff569adf6d35c6b2a46cd039daaa69b11211db36a52a90f031631fb2ea40b60a8362044685cc0cb1bdbf59525b7e488207c7354d9e1dbda
- TLSH T15911328A8FC5781CCBA298493034E9B56CBD93AA07491B50E55C7446B08C9D38BF2D74
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Movavi\srecorder24\EventsStorage\52138724709531437.json
- Size 946B
- SHA256 0f89d35d785e57f807de04570c51c56c32cfdf4914b5c943ad61489fc1cffb20
- MD5 cb1d120d1252133c9e3ee44089721c0a
- SHA1 f7860d315f7c5e81cc9117962fd51b96b11d0ab1
- SHA512 2e18dbe7e8ce313f83aeb8aa0973037f86453f37e33a1ff72c3d92dcc43574e04bed572fd6e1e7a39a10f0985dd60f87c6c7b4f8e2c8119d345777d45d6729de
- TLSH T11511508E4FC43A18CF86480430305C741C7B61A8074E6B449AACB159748CAD38BF3E36
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\ScreenRecorder\Movavi\srecorder 24.7.0\ScreenRecorder.ini.gNFaoe
- Size 38B
- SHA256 cb7d53745470d5e7894a59954c8f785cf110edd6ca6bcfd50971672f58145a68
- MD5 840f8c9df5e655afd1132ce5e69d6c2f
- SHA1 2cffbc4324dc2f7a4756854d2e49050450a66e5d
- SHA512 c774b954da6a3b170dc6ffff93c43ab6a10048d619c6431fe862b7c6023df7582ae00bb562923bf7f147ce75916a1a5806c60ca8e86a148a873f53a875edea4e
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\ScreenRecorder\Movavi\srecorder 24.7.0\ScreenRecorder.ini.lock
- Size 67B
- SHA256 a1fe668668ec5886887676ffd6160ed2e05e43bb7f3e1101d744238a6d2af7a2
- MD5 5a6d92d2be46bf2d6f4fe33dd0946da2
- SHA1 49924556f224247f5c7ac9e48364c90eff92545d
- SHA512 da31e7735ca3ba17f1903d386cdd12977b94acea035926521ba14bce596c70d43cb437b9e3aa4c1b15ab55ef008271a339b09f99b1730a3f19a3b73b17ef16b8
- TLSH T137A02220E0A3A020C200B883FC020C0303F000838CCC30020022F0EB82000003B388A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\Screen Recorder\24\ScreenRecorder\usFGeX\95fca8a4b63a00309bd35e1796a68146.zip
- Size 47KB
- SHA256 ae4c8f32db33d759e13f7bd3f4e2cff0ed1a35790043370657ce7fccce7c09e2
- MD5 4578ab88b77dde52b5a88692124ef512
- SHA1 7da86ce76c7870a82044b2c8eb54d58fb0e34fa7
- SHA512 1ff8c2017d43c3239d659f40d92f05d74164ae151c90a6028ff82bf840ab2b3163932b04d4131198c577c5a80512f2681f5c29fb7132536b0551b550ecb710f2
- SSDEEP 768:78+M6VURxDfE0f3It/OtECWw9K+M7jo0a5v7sR52eKXa/zI7STq/:A+MWUPDfTvQGqCoolF7sRySTq/
- TLSH T18C23AE7BC3281062CACEF13ED88F2BCE6BF6C20945147FA538140A5D779A1679E79B41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-1HAIB.tmp\Setup Cracked.tmp
- Size 3.0MB
- SHA256 5f999fb4fbba0e807af1581c9cf2240247a14bf8362935d10f8add9fa56f9ab3
- MD5 f15c70c1301dc3f17c8aae0cff9ec6d5
- SHA1 103990be8e11bec50edb6b52a0d236998ca074a1
- SHA512 2a395c33361fec2f4f44dafd07e1269bb5347056c3adde51c2ecf395e996e0235049f7630cbd7a0dc5ce1efac03eb03e02728346e237906e2efb8be7490fbd05
- SSDEEP 49152:Bdx4HDQNJL0VR6SgMt+k4RiP+RmXMjiINiMq95FoHVHNTQTEje333EBz:SHDYsqiPRhINnq95FoHVBe333Y
- TLSH T1D6E54B17F389723ED06B1A364A3386909837B6617916CCA797FC384C8F3D5942A3E746
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\CoreTimeQt.dll
- Size 82KB
- SHA256 89ff5853d5aac9d3aa53567d29587362eca4ce7c982bb47877eae3a6e6ef094b
- MD5 216eaaf3f0b36e4021cce4ccfd6189b4
- SHA1 122d6fd15ca0edffce8c93a9346a6a97c217b431
- SHA512 5d30963409d74708369494d105e82b6829289db6ac581a9c85ec0f7d8d2d04df7a7201e6e963d1fefc0fc983bc31934b4bb6946d79d72c6c931475400cb7a6fc
- SSDEEP 1536:f3yO9p5V/iyBmrk11Qd2l5rYHtNBNQdXwoik4CG8:vTp5V/iyBmr6Qd2l5rYHtcX0k4CG8
- TLSH T1FB83395F76194058F57AD27DC9CB4D1ADAB270A6434287CF1296C3AD0F33AD86EBE210
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\CoreTracker.dll
- Size 32KB
- SHA256 bef36e56a5e4922d7cd8b6205ab48a0186ff0e20c1f1c309ad76d4e2e1349737
- MD5 e01ef8a1b1d75c5172d7719c0ae64693
- SHA1 8a5d795fc71001ea7445003671e90629330ea9c7
- SHA512 a4d4817d4de4cac6cea85a5b86bad5ede76216e9d6abf753be3470b4689eabf5551902286cf4c88c1aa64981ab909bf47f42f1989d406d45ca988db9520dea43
- SSDEEP 384:xTJ37Gnf2mpZGFOP1xOsg6euCEMGIZg9WxRgZl6DxF6Ds6UZxE54HYB02y8RbmLD:QjPOsg6K7wCRgr69oY7y5Bv5ALsS
- TLSH T18CE28FCBB2850859F837D23CE4C79E16D43679945B4283CB239042AE0F673D57DBE2A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\CrashHandlerInitializer.dll
- Size 193KB
- SHA256 840a2a2722777368d28e1cd2bd2f0fb3567fd1ebf86d563da2eb46712d4b19cd
- MD5 e35b95d0e3c4cecfe55d3060536ce85e
- SHA1 692ef8dcffa3e58be2461b513b2fd82fd61995b7
- SHA512 d3d6da1c6b6cdf775d033b4462fb4871575ffc58a4a58c33eb74b53204c008a994bc8f3d96edd3df6ccadcd5f9b6fbc30b9b8d9eee3a7f6de89153e824c7d620
- SSDEEP 6144:41rCdktPsSu6a4qGK4lG16ZqTWIIf/XVcj:41YktPsSul4iLKFK
- TLSH T15C14184B36484069E1B7E27DCAC74F46F6B2344643519BCF06D083BE1F27BD899BA660
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\FileStorageFactory.dll
- Size 25KB
- SHA256 f1b5b61f7d4b4e43b6950c930cdb9395c04f6179166121936917a6c9edc71ef7
- MD5 e09fd724137b853688919777fca45bf2
- SHA1 a6bf64586839ea0f0aea42bbd00f7ceb3fc40aa2
- SHA512 bf3df90f58c4aca0a94fbd84f3fc1c20a70999c4df7b4015efd361bf426c34896e8fe6846ddbf2b6330f56a73276cd077ab0dd7e88fbe76a9c7f3d9c06f7d623
- SSDEEP 384:R0444444536i444444oLibfRFYbnuNRQCctLiYagBii6y8RbmL4nNy0B+:R0444444536i444444wKHlRrsBq5AL0+
- TLSH T1D7C23B8AFA504898EC57C07AEAEA9E16DD3231D51701C6C713A0C6964FE77C273FE258
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\OpenglSwitcherAPI.dll
- Size 458KB
- SHA256 fdc3fb51a28aebdcf3e6517e80f1a3d543d7a30dcad560815fd1177eee63fca6
- MD5 596327451444d8990b084a64f815e210
- SHA1 32f654879cf6c85a5e52b1af8703ecb952f8bb50
- SHA512 a0abcd2af3debdebf2a041edaa6504594d5c13763b5215ec4b433f23c29630a316ba902632f2a1e8aa8477e4b9e03c1b3475748452faaa68a28dbc7698d0729a
- SSDEEP 12288:h9bYKOFEVlarPvTU5Tagat2ppVAzC+Q1iDW:h9k/FalarDU5TagauTzAW
- TLSH T181A42B6FF2980085F17BD13CDAC74A01D2F334964761D6DB0285932E6E2BFE8D97A621
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\PatentActivator.dll
- Size 223KB
- SHA256 3f4149c3e4c46e17907aaee772d91abca5f7b6365cc7cf0504aabd6412cd2408
- MD5 0b0253fd20c1bedd8c7c44b81377f922
- SHA1 d96b9c626a1ec13ddebf44003d519d70c1797b82
- SHA512 8f34ebb01cf16484390c8ab7134d1d24a611419960f8cba11fd8508b0405693010dcf38dc411bd0e5afc7dd5afa9a7badd266525c800c9a1e1303d54593e6844
- SSDEEP 3072:2WOq9sE1bHbZd6KCqSbNqHYJ5MJCFPk+7YONndpFcG58lVmNnTuhC:5OcsE1luNq2eJok+cSdp9jNnj
- TLSH T1AF242BAF354C04A5F47BA1BCD6C78A42F1F3650A0741DBDF0691836A2E2BEDC5A78670
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCConverter.dll
- Size 309KB
- SHA256 a9850e8184f234f2fe411e8b114a4c00c947c0056f8213bde09ba622a4b7dfd2
- MD5 1b938012df83df78cfb21f946640b06d
- SHA1 556b62edd48cf9a4ea84059c6868b92747d1a484
- SHA512 36816ca7fa09de1a810d55f32108ea3f8ef2a9ad99ec76a6995a315aa0e33556ad727208a4e4df8e06767294ad78e312821b7ccb15c5b3295365a017e8ea7ce4
- SSDEEP 3072:RVL+zU2AUf5J1/jL58AgCHyNwWkD1KLtI1lC96vd43Ftz1axcRZ45RpiNe4uPfSZ:RVL+7WCHyaWM1JnSK41tycT4oNeFfw7
- TLSH T18664F75F72684C69F4B781BDD7CB8E06D67278550312D6CB06D1839B1F67BC898BE220
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleAudioCapturing.dll
- Size 1.4MB
- SHA256 81d59602d254be02f1d5490c6dae6342e5930d24d7e6cef826ea72bc6c0393ed
- MD5 2083cd46982c9bddad25021efc81f79a
- SHA1 9710dd129e25c3681aecbb8c409ccb81ed9746d3
- SHA512 76403296061b78ff79a5d929cd249c16afd933bee252cac8433e5fb8fe63e1f498f6fe34c67aaf3b1af8e2d6a195a2f285e843fa9890ea7bf0fd6dba29131b42
- SSDEEP 24576:L8mKzuoZsHQt/maLrGOnJfIy2SPDVnUwabdZDP:LlO3ZLrG+IyPVnUJ
- TLSH T110652A5B35990199F17AC1BDCFDB8E12CAB230650712CAD706D9C78E1FA7ED849BD220
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleCapturing.dll
- Size 2.3MB
- SHA256 fbbfcdd04c0e80cac3efc23705a723d53a58952906873557b2820c11722364c4
- MD5 91d2512c1ba0316880b146da43c6717e
- SHA1 fed6332e533f8a2505b522692e732524810a82e4
- SHA512 84711891ee6a9e0c5a9bd6e2d7e2c8dc83edb14715ee3ebfe789b3a643e671bbbcdf849ea211c8a99a96adfc3c51549429ba2a9e4b9441c165182427f89e72bf
- SSDEEP 49152:vLKW1N8gQkYEuVHvvZt+Lg/Ko94u6yRfuFQZGpnZn:vqn/ffuzn
- TLSH T11BB5195B725901A9E1BAC2BDCFCB4E06D9B230560712DACB05D587CE1FA7ED849FD220
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleCommon.dll
- Size 1.8MB
- SHA256 e4c73730c5080b70ea5e331cc7d94b71eeb8bcdd52e6848ede37fb1fe8158156
- MD5 a4416ba356aa14decdae9662e79221ab
- SHA1 1ecb5a182f7b349a053a725739e47572d7a4e8cd
- SHA512 81e31859472828fab33e0a5d3c5822ca89a9d35d5a1657c91d3aa1a4b7e391f1eac20bc60c267053f85d6b7554149dc08b10e197ff90b0176b7cb0a1802aa8cc
- SSDEEP 24576:AnEe/eMwFmkxn7dusxNGPrrrtjk4I7YXBPXVmB8YL0pQV1uZs+t7K6pZbdG9bsO:AEqxeF7U1rrrtS7YtVCLqQVGx75O
- TLSH T139852A5B71980598F1BAC1BDCFCB4E02D9B2301A0B619AD707D5839E2F6BED849BD710
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleEditing.dll
- Size 2.1MB
- SHA256 e31a2062a70ea97926a783c126b7cbc8f6743831624391729691d0361a17f933
- MD5 1adf4e96f46f1cde52ed2c31d260a667
- SHA1 01a970e0590e517e236977fdfa9b3a1746c166c2
- SHA512 9b933ff3dae43819321a70bad7142dd0b9de5c1cc377d03cba7a660bb53d8576261419e5fa462b83e04ed3afd70e270d4a1a080b0efa0add5d189f10ca17f713
- SSDEEP 24576:nxCjC12I7YP/j8POlVhRgCQpfluE/DXnK5H+InUGhXtuFoHsQKa3I+hAdPQLtCNs:nUiYX5lVgRzZD6MOsQKaxhR
- TLSH T113A53C5F32590098F0BBC27DDBCB8E06D9B230560752E6DB0695879E1FA7FD849BD220
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleLauncher.dll
- Size 1.3MB
- SHA256 882e56463f40e3972e20a798f879952559d3aed8e197bc1126e200ef7f67eb46
- MD5 3bf02bbd1a0fdc0f1a93da3b5eb6dd82
- SHA1 3753009e785caeec7935b5ec49d26407fe0a4852
- SHA512 8db9d96378c171fbfd4aa47ecaa73a12d0f61fae4a6cfbfe0997f77a52ee5a1a1e981d7ae723965ea92379b7ed148e1db7d907bbe3e58631646968fd46a56a9e
- SSDEEP 24576:dAlWkdFIn3kg3mjWwbwHQqrPl6VK20LgKirEDbN2nQIzwdaS:d6rU3ki8WgAB6VwJ+8
- TLSH T1E155195B329D41A9F07BC2BCCBCB8E12D9B234590712DED706D5878E1E67ED849BD220
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleRunner.dll
- Size 221KB
- SHA256 1558600cce7df0a9afdfba24e4fabc1eb29926f7392c3dad9255d4d5a70dd283
- MD5 365fa17e2c9dc3c6e1e63b515679d68a
- SHA1 5cd6d1cbeb073d7fb9a47e211a656549cb9bd22b
- SHA512 aa053f37bb4bc44312300eff4cd5595b71281b33cc08971acb0ffb71ca3ff4703fb36e76109fe79f5b3bc41ec806a692f618c3a3f24741412b6455e1c656ae45
- SSDEEP 6144:6aVcdZFu3a5F2CcZp6/sGlKSn2geYTXdPI8Cq+Y:6aqdZFu3a6CcZQEGl32mTXdD
- TLSH T1CC24194F315504A4EABBD1BDCADB8E07E67234160702D7CB16D183EA1F67EC859BE260
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleScreenshoting.dll
- Size 1.7MB
- SHA256 32060c61a958861ccf36e2e8ed0bd7d9400e8de141069e80d04b169c1a5340e3
- MD5 1d7ea65ac64f1af92ee3887f8317f2ca
- SHA1 1b871667aac8170a83f72e26bc0f1e3c2f3bd9e9
- SHA512 3ada358fdea20677c7a492afc5d872ad152fbf879fbe522c5896fb3d0b42dcb5e39b19c240c27a650fbf63b851bb8eeae349044cd83036b14c780f5f00f6d91a
- SSDEEP 24576:i8HN3mPAvim0IMBMKMvnmkP+VFbUabSiNykluqevaHufYScYUwdRjPD:i0dCUD20nUVFbUabS2yPak
- TLSH T1CE85195B31580594F1BAC2BDCFDB8E02C9B230560B12DAD70695879E2F6BFD84ABD710
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleScrolling.dll
- Size 818KB
- SHA256 467d1fd1db031b3afac016a4c25fd5c630fb34c0c789d5f4bf7abdcc79da694a
- MD5 de42d709b22596c36263c2c2da18bda0
- SHA1 2f1c82bed22e9f41120593ec148c3bad9fe948d6
- SHA512 478806f7a3d4c7be9381eb56942ee915562684fb073ba4632c262737fae676f8e2e8e66b506f5ab336105e41252fd106db9dd2bd76f9665a725017881c35949c
- SSDEEP 24576:YGfyAorMW3oiPcKtVUCMBoV9/bt/HHdYF:Ye54mKtVDV9/bti
- TLSH T16905195F719C0594F07BE17D8BCB8D12DAB224160712DBDB06D5839E2E6BEDC49BA320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCModuleWebCameraCapturing.dll
- Size 1.5MB
- SHA256 9ae1c236160073a34742f43403ed0637d45d1cce6a3ff0f015fb058ead1e2149
- MD5 201f2b8b570f09615f5f4e068dc06f82
- SHA1 96c26bf4ef791581685427d88a127bbae2ea7079
- SHA512 a94504de82440ab34cc716ecc48e748a206219cdd4860e111e400036c0220f82d791ed16e14b4eb16c69d614845b7ae2594e30c4a2e3e1c16078d3c7df1da79f
- SSDEEP 24576:1N9dt10pQ21imMI8KTsV+J7PMvIVPOCtPMNCkt1Ip6weMdyVrz:1Djelkp+GvIVPdlMe6weLp
- TLSH T104752B5A76590095F4BAC2BDCFDB8E02CAB230650711DAC706D9879E1F67FE889FD210
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCProject.dll
- Size 491KB
- SHA256 31f62ae942d2b0a2a60fd33509222a76ef65baa287fbd46d331e69c8bc6aa1dd
- MD5 f742dbc55600d1e77a165a5d5ca82afe
- SHA1 34ca29b4a7d84daea981748aa835ebb18b42a893
- SHA512 feab0860ea8c4d15e548013deacc584fae296fbe27a8ce0d75e1b6020a5d4ab765b8cab50fc119cbb7ebcd32c77532773201e96fc1073a20406a78d8f6739ddf
- SSDEEP 6144:AqpwLKj+1bs5n3EsxD/GADeNOn79MUAl3A6+ICIwg2wwCyudyY/Xz5mqcc:AqnpHkIM33A5hCzd9+c
- TLSH T129B43A1FB6484569F1BB917CCB978E03E6B2344A4302D7CB02D5C3AE2E57BD8597E260
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCProjectStreams.dll
- Size 140KB
- SHA256 27afee9a00769602eb3627bc03adf15ced651722b03e3c949357963c1d94ad52
- MD5 d8036a7ad22309104a85330d5aa517ea
- SHA1 8dd9584cb48bf245d2d795113f1cf8408cf1bb5c
- SHA512 7f3b0ac863fc616a2eb72b4a239eab39b2897a77a2d5ba406a7349e403a398a981f041fd1b971af36e5d432a95f4037c170a4752adb5e9821ee64495bb2d4df6
- SSDEEP 1536:jjAX9THhTRs7eJ0bRGWWC3UvM3It3fRr21fa9g76lnYsKgSmFmD0G:jjAX9THhKMWWCB4t3fUfa+elBKgbyZ
- TLSH T11AE3295B3258406AE1BA91BDC6C79E0AD73274574702E7CF0691839F4F27BD89CBE260
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCScheduler.dll
- Size 204KB
- SHA256 716933db5182749bd77e886e87afdaf202018434e8cfea4db77b92628ad56538
- MD5 fb1420f015401279851b31cd72f533dd
- SHA1 a23ed8290ae2fe288590cc6b4b31ddb2c02fc5f0
- SHA512 d32f8a4ee36799c0034de0c08c2354664ce0e22667e84f9659df0cf06649becd29ec0181b263af5004ae9410c0dd17b6148c56d1ec34e71d27e2dc8d491da7e5
- SSDEEP 3072:VhQYinr53Y88oAr+icO5S0M7JmpcMtLMHQ9c2ZL1t+HGfHqQsRX+:kYid3YjoAM7JmKMxqQc4RfhEX+
- TLSH T1C214F75F315800ADE57B927DCADB8E02F97270560B02D6CB07D187BE0E57FD8A9BA211
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCServiceAreaSelector.dll
- Size 994KB
- SHA256 6bfff157131cd3d516d5c67f854b2c76f80296321046a362777dcbcca8682325
- MD5 127ad4560eb1533d1624788da9905605
- SHA1 f2515cc1499bf2f0cce3b26a28dcfbe755768022
- SHA512 15dc11b9b54c2abd02020b282853b57aa34e799eb65a67ce28dabc8a0d64278f52604695f4d1a879f84036e798523b45a31f08d1f79663620bfd5db7e14fa325
- SSDEEP 24576:t95DNhFOWfyZP45LVy/JV+enaSyYmBhwM5dLTr:tXUE5LVPpYmBhL3
- TLSH T1AB25094E725801A4E57BD17D8FDB8E06E5B230990712E6CB06D1C79E3E63ED81ABD321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCServiceDesktopCanvas.dll
- Size 597KB
- SHA256 87d666d74be5dae5ca0d9286b65fe53a894ac89c848320b66aec041c0a657669
- MD5 d2dc1fa8f9cd5cc64f0366ffae745ab2
- SHA1 11aee224f56aa2a982e33722484097d9e3d8bbe1
- SHA512 75ea25ce9751d7ada19390f885c7e6e34cca079c90fbf73c205d397a82c8720443ace6ea6a95b26b49c37fd217a4bea6f819fdd5061f52c5e1bc231bfd656da9
- SSDEEP 12288:fSWflW37Ply0uVtg68emnmSPv2CwaSdiVY:fSWdW37PUpVG68JmSPv2CwaSdii
- TLSH T108D4094F775516A8F4BBD17CCACB8E07D5723855074296CB06D0D3AA2EE3EDC8A7A210
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCServiceScreenPainting.dll
- Size 823KB
- SHA256 6ea535ab2cd49354bed9a4ec4e21fce368f5eb33d12e6245a130bf145150ec9c
- MD5 c7b7eb305c49cd769141f41973608f45
- SHA1 8077d521152c50c26e4a56ccbf1fd799ba2edf37
- SHA512 9178e9f632a511b6950bd55af4276a3bede8852b88d60f03afc9f6066a15666993e592c8cbe82ddd4d10f533d6a13078e2a08b475ace8451abf0dc8d6e5d7519
- SSDEEP 24576:jHlafP22JdNSvPKqV2Nfj7G7xCu7di+dYhZ:INz1qVUG7xCu7qhZ
- TLSH T16D05091F72980568E47BD17ECBCB8E16D6B23455070296CB06D5839E2F67EDC4ABE320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCServiceSocialRegistrator.dll
- Size 789KB
- SHA256 3813d702fa38bdff9f9c13c4f592890e29b811bb2ff738c4659f37f681004abd
- MD5 fe40c67a09a51f2678ca7f9b4ffc0c0f
- SHA1 df3cb83f035eccec307b8631876006c760f097b7
- SHA512 cab74d84759001ca815f94658a187312b357bb132420298322b61ae3ddea2391b871db7a6372d5fb1aaba0683259478035f48548f4c11b80facb0c14c7e1330c
- SSDEEP 12288:ScIKwgvqfgU5mEAnGpfu3VXZruqr+FEykSfykdu+b:Sc5wgvqfj5mEGGY3VXZrtr+FEwykdx
- TLSH T1B8053B4B76480599F17BD17DCACB8D12E67234160742DACB02D5879E2FA7EDC4EBA320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCSettingsController.dll
- Size 305KB
- SHA256 3b0e6b265727c28920623482f2b336b9469617c7cebac49b1596e125def3e3fa
- MD5 1b6dd6efcb3cad0fff381d1b3741ce52
- SHA1 99edef0f1072880b7f2ef2e5db5d3d9c07849d79
- SHA512 a81961b792588d6583de7e65a30a44f003fcdf28d07fa37054ac795125840f9e2a09e13b4c3f5d25b1cb45e1f3a404442db27ce6adc73d53e93b74cf9527d285
- SSDEEP 6144:gBcGdUafk4VJkTF8cag92lFNQ+nnkbXgQQtacHwRPeuLBT5CPUJyHb8aiMZ0sy:gBcGdUafk4VQR9NrQ/Xy
- TLSH T14564E69E61158E6CF87A907C99CB4E82EA7178550712C2DB0AD2415E5FC3BE889FF331
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCUiAudioComponentInstallHelper.dll
- Size 46KB
- SHA256 7923a07426e200e0eafe60984986bb610c4cc439991b3627924e8071a01f7c81
- MD5 d6d48376ba22cf7384cb170c3f68edb1
- SHA1 6baaa70544547804a455bd1485edba6176eef39f
- SHA512 0865ff2e03ff15cd0a477bba5cb48878580e549001041fd6ffdcff1ce57b5530bd8989f175111f8bc6ed13da46f894eddbf5897df15eb9d6d6ca983f34eaa462
- SSDEEP 768:7Y2LAWi7xPmr2T0Fy9aZ4Oo0EX+r0y1uX1T6bMvBysRFOfceabMHdj5AL9CTa:7Ymewr2uZcOuFT8MvBy0OfXabMW
- TLSH T1E523499A76545095F826C1BCCAEB4E4BD6B270064340E7CB0365C69E0F73BE0B5BD78A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCUiAutoSwintchCaptureMethodHelper.dll
- Size 157KB
- SHA256 9577e92ffc77002c85bf30b5ca72a42cd66d104158f735cb41f5487eea145461
- MD5 6db73d6f69ecdae33e036e3847fdbae6
- SHA1 9a99ba5a862128f948fe07dd3bcb711fcad501f4
- SHA512 d4518e6965fbaa7572b4f3396c910414ebdfb4f0b5bd32e7a2a17077216fa3837cfc0f55b7819472dce9c7acb12d5c0e6e4390d67a1a97044ce091a0cc93858f
- SSDEEP 3072:7DMYRLjLeQtAYIwYPa6hnBNnnh7faMhMVqirzmhaweBIH+:7DRLjLhQw2zhnBNnnZaQMVqirzmhaweP
- TLSH T116F3F8BF399C0095E179E2BCC6C70541F3B2211A0B9197DB4256436A5D2BBDCFE78AB0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCUiStyle.dll
- Size 42KB
- SHA256 f50ee4859309bb5da013baba5ce0c55a20a0647d9413cb1a1e589e1e454162d5
- MD5 10fb898e678b4eb413041fb512bcd519
- SHA1 84727dab8a757634ca41121fffecbbca8794251d
- SHA512 d3f82acee77769529a23a236dc638c94d051d8962b64aa824d106ca11ce3ba6d97175c1fcd62ec1026c1e92a498743e5e35b064ffff21493f5b0f4cb120aeb6e
- SSDEEP 768:n/oY18cMpi6bvZGjsLtvieR0g6N5TboXWOSp5ALEVN8:/oY18cMpi6bRKsLtvipv5T8XWr8
- TLSH T155135B5F662A0186DA6BD23CC2860D59E832B4654742C3DF022AC7A80F733C67D7D79E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCUiWindowPositionHelper.dll
- Size 24KB
- SHA256 d933b9a61231c0886510fee34d2406e5ee1a0421f5a12e4bb8b83ad2a9d6b6e6
- MD5 cae326779a63652c687de84182cf4601
- SHA1 fb884c80c89462498deecdb6793e44b8a2963087
- SHA512 cf969dc566813a6b2ce2ccb8490822294e3443af8f187e895e6d2084919a8c58b376b838b6d87b6ea02948154e6c7ab967568094a018828d162b3b20cb183fb6
- SSDEEP 384:SN+KBpr6ecYpyhV5RXvLxi4GyBuJ7y8RbmL4nNyy/v6:SN+EvFpgV5RVGgE75ALE6
- TLSH T165B24B87BB549C95D823C535E0CB192AE972B265079193CB232582590F633C23BBF7ED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SCUtilCodecPolicyHelper.dll
- Size 308KB
- SHA256 5760395872d91800d80fac1ef4c8125f5f187a5b547ff4fe611f3067c7933688
- MD5 1e14649934f2d7ffbc0c67d847ee0084
- SHA1 b4369263520ffb37f4f19d45b8f0e24126f94bdc
- SHA512 8f02b8024b724b2981f4319755ef6f022ea2bd0a00b1fadd1d4e41d327ca3b0681f347bb9e70439be4a67d8ad3ec71f6bd0399229224604da96bf1562a3792cd
- SSDEEP 3072:PbZpQnP0CTk/YON4TNKhPdNNCBZngx9SyrJgnkHndKRUuSo0Hhmm2gAEG1Y0NWrt:PR/YOV9fNlWyqidUAo0HV6EG1ZNWrc0T
- TLSH T17C644B5F32480DA9F577917DDAC78E03E6B2348A0702D7CB06D0439E2E57FD899BA660
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\ScreenRecorder.exe
- Size 13.9MB
- SHA256 448ad6a8fea2be456d4bfa3585a648eb206e066d99da5c5cc8a8da242bcb9131
- MD5 2ee7e2100f6fdd9458f63471eb778ad8
- SHA1 76282a5ee3ecfe96e9f87d9011c5da8333e96176
- SHA512 c088faa41d0017db7324dda036910ba54e6762d07181a477e1a79f3142bbda547d68f3183784c488eb6c37c845053dbedccdbede89f7bc4f0a05eb35e19fb724
- SSDEEP 98304:E+IKxRvv851+Zx8gTTu2r84nzPw1QWwoqSLxyyT/BgFBUy8cq1Z56:EOe+Zx8gTDY1QWwa4yT/BgFBUyg1Z56
- TLSH T1D4E62B4A2BC568B4F0B6E17E9DDA8E61D9733921872193C7029087AA3DD3DC8CF76750
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\SessionTracker.dll
- Size 105KB
- SHA256 0df54ae70779c861e270267ed0115b2f0b81dc71807712f6beb2cb4431273ddd
- MD5 a24f90b66b71dda1ea8e107c2c0e8d92
- SHA1 2634992dece79e14957446e33c262d1941164ec9
- SHA512 0804cdad5f0433b6358ac947a7c9c6bac6f85d08580a7b99ffcc0c7ed23f532b61bfd0d86b118624b6ea65206588a05896e10d5d379716d55c807d98815c2196
- SSDEEP 3072:rs5e305QoQaF3i19ZAXla562aWYkASeC+tNP:g5e6bX4zS1a562aWYkASeC+tNP
- TLSH T180B3076F364940A9F47AD2BCC6D68E06E3B6745543028BCF03A6879D0F27BC95DBD260
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\WebConfig.dll
- Size 1.2MB
- SHA256 2f0c059488db42739c3566410baa91cc3158e63a2e9e7d51449066baec9c1a7a
- MD5 151210e229c533baf837462b0e1dcf97
- SHA1 faf3ba4a6026041d4806d2c049707e0a73e8022e
- SHA512 9c62d7d3b941d58a3d773f10bee51880bc85b12c77a8d313cabf1814bfc58b9f57c449df85993d1c6de0f403f34639fec5c2dd1abbd0f0a67dd033e5c5eceef1
- SSDEEP 12288:T7HjWzznSuzrpJXgPJxST5LfJ7SmFkQWGmrAUoZTLFUAKRb1:T7qzzSYr/gxKJf9LFNmrAUoZTxUAKRb1
- TLSH T10B451A4F354841A8F5BB91BDCBCB8D06EA7220564711DBCB0AD1978E2F57FD849BE220
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\glog.dll
- Size 135KB
- SHA256 bcbafad19340cd1a6195549cfbb92b2434ce73300e38b48880cea78d951df74a
- MD5 df69de038b553f60d462dc9ec6c02940
- SHA1 ba6995fd61f83853a63774143681df553a158774
- SHA512 131ccff24fd41777d6ec70ddbb6dd3650af4facef6dced3cbbacf1a44e3eba522e093253cb2e1f872065f54c5236305147fa14827395a63d09e8f0bf32fb2cfd
- SSDEEP 1536:eqS8t8FYHIC03vJgxXiFfkRLp+zqzf9edJDH2Gme7tqIWXx:s8t8FY1xZNpIOlSJDHZ7tqT
- TLSH T137D35B5B365A41BEE563E17CAAC75B02D3B27405071297CF439242AA1F333D52E7ABB0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\qml\QtQuick\Controls.2\designer\is-K52MG.tmp
- Size 2KB
- SHA256 a3fff66cd7217029792e7fce403cc658b0ea03b2d3a2860f57479c8ea6bc1372
- MD5 e6dd3db4f8a582e30f07b77e801428f0
- SHA1 d207e34278440fc9b47c6480a47fef13870ffff6
- SHA512 f58e27d7f36e05cb1d6277629ee2e3cc239b2ba73a75d1399a048191e4443dbb1360922b2cc0d36c3a19b04fcdb64f5dbbd0a838736dca658b9caf856031c5ea
- TLSH T1C741CB4A72545F3713820A807ECF93CAF2AAC27A775A44047C2DB65A4B6D83117F23E9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Movavi Screen Recorder\qml\QtQuick\Controls.2\designer\is-U0VQI.tmp
- Size 2KB
- SHA256 91d7772e4a193e91a093d59451508cdb89448eaffb4febda26789777afbacf3d
- MD5 5435f060331a523b9e5db9c9957756aa
- SHA1 e0f07b59a0ac83b7cea1716cdae4a59aeafa396b
- SHA512 536e731672c1348222490d39099712c7bbcbf8d0c6be5d0f3517c10feb1b47d7942c18703e18c28f36774546a41f18d61fa8096e022a82947d43b11a2641d187
- TLSH T1F741CB4A72541F37538206807ECF93CAF2AAC27A775A44007C2DB65A4B6D83117F23E9
- MD5 SHA1 SHA512 TLSH