Overview

overview

6

Static

static

3

R2R/Script...as.dll

windows10-ltsc_2021-x64

1

R2R/Script...as.dll

windows11-21h2-x64

1

R2R/VEGAS_...64.exe

windows10-ltsc_2021-x64

6

R2R/VEGAS_...64.exe

windows11-21h2-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    658s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    04/08/2026, 02:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    R2R/VEGAS_Pro_23.0.0.302_x64.exe
  • Size 658.4MB
  • Sample260804-dbkdes1apg
  • SHA256 2b7d2e0cecf79a67de90a57870a1bd25d73741db1ea4cd7093581a41009247b4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoverypersistenceprivilege_escalationransomwarespywaretrojan

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 8 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 47 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks computer location settings 2 TTPs 5 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in System32 directory 64 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks system information in the registry 2 TTPs 2 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 29 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 54 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 23 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 51 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 39 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 59 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\R2R\VEGAS_Pro_23.0.0.302_x64.exe
    "C:\Users\Admin\AppData\Local\Temp\R2R\VEGAS_Pro_23.0.0.302_x64.exe"
    1⤵
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:5608
    • C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\product\VEGAS_Pro_23_setup.exe
      "C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\product\VEGAS_Pro_23_setup.exe" -m C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\SetupValues.dat
      2⤵
      • Enumerates connected drives
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3428
      • C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2013_12.0.40664\vcredist_x86.exe
        "C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2013_12.0.40664\vcredist_x86.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\001#Install#vcredist2013_12_0_40664_x86.txt"
        3⤵
        • Adds Run key to start application
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:1652
        • C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2013_12.0.40664\vcredist_x86.exe
          "C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2013_12.0.40664\vcredist_x86.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\001#Install#vcredist2013_12_0_40664_x86.txt" -burn.unelevated BurnPipe.{C9506AB2-720B-4AD6-A44D-956ABEE0276D} {FC9A3FAE-A3E4-4B5C-8494-5FD7198D4C71} 1652
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:1372
        • C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe
          "C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={9dff3540-fc85-4ed5-ac84-9e3c7fd8bece} -burn.embedded BurnPipe.{F77F633B-CBE4-4B60-A0C2-3679FF07575D} {AE522028-7D10-4A9B-AEA3-FCC445BB8AF7} 1652
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:1648
          • C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe
            "C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={9dff3540-fc85-4ed5-ac84-9e3c7fd8bece} -burn.embedded BurnPipe.{F77F633B-CBE4-4B60-A0C2-3679FF07575D} {AE522028-7D10-4A9B-AEA3-FCC445BB8AF7} 1652 -burn.unelevated BurnPipe.{13E25DA8-17A6-4A52-ADE5-87381CA69572} {80E18C7A-17CF-48DF-B16D-9633C7FC9AE4} 1648
            5⤵
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:5204
      • C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2013_12.0.40664\vcredist_x64.exe
        "C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2013_12.0.40664\vcredist_x64.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\002#Install#vcredist2013_12_0_40664_x64.txt"
        3⤵
        • Adds Run key to start application
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:5952
        • C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2013_12.0.40664\vcredist_x64.exe
          "C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2013_12.0.40664\vcredist_x64.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\002#Install#vcredist2013_12_0_40664_x64.txt" -burn.unelevated BurnPipe.{E2F6D4E3-4EFD-42E9-A422-7257D5053697} {4ECA9CE5-A728-4010-8D34-BEF962529F1D} 5952
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:4780
        • C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\vcredist_x64.exe
          "C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\vcredist_x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={042d26ef-3dbe-4c25-95d3-4c1b11b235a7} -burn.embedded BurnPipe.{CC4AD10E-06BD-46F8-84C8-83E4821A9CF0} {BF1B134E-493A-4739-908D-2F86D0CBA88A} 5952
          4⤵
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious use of WriteProcessMemory
          PID:1332
          • C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\vcredist_x64.exe
            "C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\vcredist_x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={042d26ef-3dbe-4c25-95d3-4c1b11b235a7} -burn.embedded BurnPipe.{CC4AD10E-06BD-46F8-84C8-83E4821A9CF0} {BF1B134E-493A-4739-908D-2F86D0CBA88A} 5952 -burn.unelevated BurnPipe.{6021AEF7-7FF8-4543-B231-D4C7B59951FB} {375EA3F9-F3C7-43E3-AD44-7F2F3D0B9FCA} 1332
            5⤵
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:1840
      • C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2022-2015_14.40.33810\VC_redist.x86.exe
        "C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2022-2015_14.40.33810\VC_redist.x86.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\003#Install#vcredist2022_2015_14_40_33810_x86.txt"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2360
        • C:\Windows\Temp\{4EC8D634-66B8-4C1D-82B1-7078395ADFDA}\.cr\VC_redist.x86.exe
          "C:\Windows\Temp\{4EC8D634-66B8-4C1D-82B1-7078395ADFDA}\.cr\VC_redist.x86.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2022-2015_14.40.33810\VC_redist.x86.exe" -burn.filehandle.attached=540 -burn.filehandle.self=556 /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\003#Install#vcredist2022_2015_14_40_33810_x86.txt"
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:2488
          • C:\Windows\Temp\{16124485-400C-4159-A965-AEE23F4DD2AC}\.be\VC_redist.x86.exe
            "C:\Windows\Temp\{16124485-400C-4159-A965-AEE23F4DD2AC}\.be\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{B5E678B4-DD65-4B17-8BF8-CEB9C8005F50} {D96288A6-B14D-4707-9FE7-ADB6850535FE} 2488
            5⤵
            • Adds Run key to start application
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:4288
            • C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
              "C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={47109d57-d746-4f8b-9618-ed6a17cc922b} -burn.filehandle.self=1108 -burn.embedded BurnPipe.{8D141899-EAF0-4DE1-B82C-93600F202F55} {E39B28F5-8CE7-4544-81A0-259F2DE0DF3E} 4288
              6⤵
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:2284
              • C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
                "C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -burn.clean.room="C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -burn.filehandle.attached=548 -burn.filehandle.self=516 -uninstall -quiet -burn.related.upgrade -burn.ancestors={47109d57-d746-4f8b-9618-ed6a17cc922b} -burn.filehandle.self=1108 -burn.embedded BurnPipe.{8D141899-EAF0-4DE1-B82C-93600F202F55} {E39B28F5-8CE7-4544-81A0-259F2DE0DF3E} 4288
                7⤵
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:6132
                • C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
                  "C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{605B83F5-7D8C-4E49-B665-E8C2EDA75164} {0013BA22-6ADD-45C7-9E64-E0DAA673D2C5} 6132
                  8⤵
                  • System Location Discovery: System Language Discovery
                  PID:6016
      • C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2022-2015_14.40.33810\VC_redist.x64.exe
        "C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2022-2015_14.40.33810\VC_redist.x64.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\004#Install#vcredist2022_2015_14_40_33810_x64.txt"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3772
        • C:\Windows\Temp\{046EAECE-1516-4DE2-9CBC-6DD4B2867AE8}\.cr\VC_redist.x64.exe
          "C:\Windows\Temp\{046EAECE-1516-4DE2-9CBC-6DD4B2867AE8}\.cr\VC_redist.x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2022-2015_14.40.33810\VC_redist.x64.exe" -burn.filehandle.attached=532 -burn.filehandle.self=540 /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\004#Install#vcredist2022_2015_14_40_33810_x64.txt"
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:5272
          • C:\Windows\Temp\{02AC0FC7-5AD5-4943-9055-471D03F98E77}\.be\VC_redist.x64.exe
            "C:\Windows\Temp\{02AC0FC7-5AD5-4943-9055-471D03F98E77}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{A83DFF25-E50B-4378-BCC0-EE9A62849587} {740F3950-EDAD-4BC4-A572-1166BF0D88AD} 5272
            5⤵
            • Adds Run key to start application
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:2104
            • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
              "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={5af95fd8-a22e-458f-acee-c61bd787178e} -burn.filehandle.self=1052 -burn.embedded BurnPipe.{4C63828B-E5DC-4319-9318-747729E88AA0} {7F44B9A3-4D48-450A-A4B7-CF3EFF9C503E} 2104
              6⤵
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:892
              • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=492 -burn.filehandle.self=524 -uninstall -quiet -burn.related.upgrade -burn.ancestors={5af95fd8-a22e-458f-acee-c61bd787178e} -burn.filehandle.self=1052 -burn.embedded BurnPipe.{4C63828B-E5DC-4319-9318-747729E88AA0} {7F44B9A3-4D48-450A-A4B7-CF3EFF9C503E} 2104
                7⤵
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:5540
                • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                  "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{68D0AB32-AAD8-4083-BD3C-7EDE2DCF4DAB} {C83D6719-9D13-4900-A01C-17858854E5FA} 5540
                  8⤵
                  • System Location Discovery: System Language Discovery
                  PID:4156
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3208
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding CB009903C3A3947F87EC35D9E14C2B37
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:5140
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 36ABE532A7E2A6746286BE989A6A5E36 E Global\MSI0000
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2232
      • C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe
        "C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe" /register /user 1085
        3⤵
        • Drops file in System32 directory
        • Suspicious use of NtSetInformationThreadHideFromDebugger
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies data under HKEY_USERS
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:3648
        • C:\Program Files\VEGAS\VEGAS Pro 23.0\ErrorReportLauncher.exe
          "C:\Program Files\VEGAS\VEGAS Pro 23.0\ErrorReportLauncher.exe"
          4⤵
          • Executes dropped EXE
          PID:964
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\mchammer_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2716
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\mchammer_x64.dll"
          4⤵
            PID:4540
        • C:\Windows\SysWOW64\regsvr32.exe
          "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sffrgpnv_x64.dll"
          3⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:236
          • C:\Windows\system32\regsvr32.exe
            /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sffrgpnv_x64.dll"
            4⤵
            • Modifies registry class
            PID:1860
        • C:\Windows\SysWOW64\regsvr32.exe
          "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack1_x64.dll"
          3⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:4868
          • C:\Windows\system32\regsvr32.exe
            /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack1_x64.dll"
            4⤵
            • Modifies data under HKEY_USERS
            • Modifies registry class
            PID:1596
        • C:\Windows\SysWOW64\regsvr32.exe
          "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack2_x64.dll"
          3⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:1868
          • C:\Windows\system32\regsvr32.exe
            /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack2_x64.dll"
            4⤵
            • Modifies registry class
            PID:3268
        • C:\Windows\SysWOW64\regsvr32.exe
          "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack3_x64.dll"
          3⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:5628
          • C:\Windows\system32\regsvr32.exe
            /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack3_x64.dll"
            4⤵
            • Modifies registry class
            PID:2764
        • C:\Windows\SysWOW64\regsvr32.exe
          "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sftrkfx1_x64.dll"
          3⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:2336
          • C:\Windows\system32\regsvr32.exe
            /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sftrkfx1_x64.dll"
            4⤵
            • Modifies registry class
            PID:5172
        • C:\Windows\SysWOW64\regsvr32.exe
          "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfresfilter_x64.dll"
          3⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:2388
          • C:\Windows\system32\regsvr32.exe
            /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfresfilter_x64.dll"
            4⤵
              PID:2740
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx1_x64.dll"
            3⤵
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:5528
            • C:\Windows\system32\regsvr32.exe
              /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx1_x64.dll"
              4⤵
              • Modifies data under HKEY_USERS
              • Modifies registry class
              PID:5864
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx2_x64.dll"
            3⤵
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:4692
            • C:\Windows\system32\regsvr32.exe
              /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx2_x64.dll"
              4⤵
              • Modifies data under HKEY_USERS
              • Modifies registry class
              PID:4404
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx3_x64.dll"
            3⤵
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:1004
            • C:\Windows\system32\regsvr32.exe
              /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx3_x64.dll"
              4⤵
              • Modifies data under HKEY_USERS
              • Modifies registry class
              PID:5516
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\xpvinyl_x64.dll"
            3⤵
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:572
            • C:\Windows\system32\regsvr32.exe
              /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\xpvinyl_x64.dll"
              4⤵
              • Modifies registry class
              PID:5904
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files\VEGAS\VEGAS Pro 23.0\sfvstwrap.dll"
            3⤵
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:5212
            • C:\Windows\system32\regsvr32.exe
              /s "C:\Program Files\VEGAS\VEGAS Pro 23.0\sfvstwrap.dll"
              4⤵
                PID:3064
          • C:\Windows\syswow64\MsiExec.exe
            C:\Windows\syswow64\MsiExec.exe -Embedding 1D9D3EE4255883F768DD22AB199F6709
            2⤵
            • System Location Discovery: System Language Discovery
            PID:5896
          • C:\Windows\syswow64\MsiExec.exe
            C:\Windows\syswow64\MsiExec.exe -Embedding 3EA47244428472B9E5F2B417CA2AB612 E Global\MSI0000
            2⤵
            • System Location Discovery: System Language Discovery
            PID:2224
        • C:\Windows\system32\vssvc.exe
          C:\Windows\system32\vssvc.exe
          1⤵
          • Checks SCSI registry key(s)
          • Suspicious use of AdjustPrivilegeToken
          PID:3628
        • C:\Windows\system32\srtasks.exe
          C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
          1⤵
            PID:3264
          • C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe
            "C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe" /burn.runonce
            1⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:4348
            • C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe
              "C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\001#Install#vcredist2013_12_0_40664_x86.txt"
              2⤵
              • Adds Run key to start application
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Modifies registry class
              • Suspicious use of WriteProcessMemory
              PID:2788
              • C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe
                "C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\001#Install#vcredist2013_12_0_40664_x86.txt" -burn.unelevated BurnPipe.{20D3C554-ADEE-4524-8965-8DE357F49D0B} {621E6C49-5BD5-40B0-B738-B0A147F99B98} 2788
                3⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:3620
              • C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe
                "C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={9dff3540-fc85-4ed5-ac84-9e3c7fd8bece} -burn.embedded BurnPipe.{2DE5AA78-7E49-4C95-B220-548AFC062B59} {65EC4050-ACE8-41D9-8029-80A43AAA0377} 2788
                3⤵
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:1476
                • C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe
                  "C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={9dff3540-fc85-4ed5-ac84-9e3c7fd8bece} -burn.embedded BurnPipe.{2DE5AA78-7E49-4C95-B220-548AFC062B59} {65EC4050-ACE8-41D9-8029-80A43AAA0377} 2788 -burn.unelevated BurnPipe.{3701B3D6-DC40-4443-A368-5C717EF8C1D7} {558B5E3F-C3CD-49D8-BAFC-5DC528F96F2E} 1476
                  4⤵
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:3104
          • C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe
            "C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe" /burn.runonce
            1⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:1872
            • C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe
              "C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\002#Install#vcredist2013_12_0_40664_x64.txt"
              2⤵
              • Adds Run key to start application
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:4060
              • C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe
                "C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\002#Install#vcredist2013_12_0_40664_x64.txt" -burn.unelevated BurnPipe.{E85A16DD-65FD-44A6-A484-0D8282899570} {D4351D58-C8D2-418C-A9D0-EC4B33A2010E} 4060
                3⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:5508
          • C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe
            "C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" /burn.runonce
            1⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:6128
            • C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe
              "C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\003#Install#vcredist2022_2015_14_40_33810_x86.txt"
              2⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:5144
              • C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe
                "C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" -burn.clean.room="C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" -burn.filehandle.attached=516 -burn.filehandle.self=536 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\003#Install#vcredist2022_2015_14_40_33810_x86.txt"
                3⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:4324
                • C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe
                  "C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{49EDE220-1EE8-4269-83E5-4D6750BA9A43} {67797E12-24F3-4B34-A664-D3B5522F054D} 4324
                  4⤵
                  • Adds Run key to start application
                  • Executes dropped EXE
                  • System Location Discovery: System Language Discovery
                  PID:5032
          • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
            "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" /burn.runonce
            1⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:4580
            • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
              "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\004#Install#vcredist2022_2015_14_40_33810_x64.txt"
              2⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:5736
              • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
                "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" -burn.filehandle.attached=516 -burn.filehandle.self=536 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\004#Install#vcredist2022_2015_14_40_33810_x64.txt"
                3⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:1716
                • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
                  "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{71335726-3EE4-4A61-A051-404AED3EFB6C} {46494896-CFAE-452F-A27A-4B43D3B1BA4B} 1716
                  4⤵
                  • Adds Run key to start application
                  • Executes dropped EXE
                  • System Location Discovery: System Language Discovery
                  PID:4320
          • C:\Windows\System32\rundll32.exe
            C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
            1⤵
              PID:2892
            • C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe
              "C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe"
              1⤵
              • Enumerates connected drives
              • Suspicious use of NtSetInformationThreadHideFromDebugger
              • Checks system information in the registry
              • Executes dropped EXE
              • Checks SCSI registry key(s)
              • Checks processor information in registry
              • Modifies registry class
              • Modifies system certificate store
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:2720
              • C:\Program Files\VEGAS\VEGAS Pro 23.0\ErrorReportLauncher.exe
                "C:\Program Files\VEGAS\VEGAS Pro 23.0\ErrorReportLauncher.exe"
                2⤵
                • Executes dropped EXE
                PID:4640

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  e59b1a6.rbs
                  • Path C:\Config.Msi\e59b1a6.rbs
                  • Size 17KB
                  • SHA256 193a79891d1c13c90efbe5c8ae9a4f6aea2090e6aa82746f779b667f82a482e4
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1af.rbs
                  • Path C:\Config.Msi\e59b1af.rbs
                  • Size 13KB
                  • SHA256 74c83a16f3f1aa375d40511d47401d221e7b0f016d67ed6b432e08c728b791f3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1b0.rbf
                  • Path C:\Config.Msi\e59b1b0.rbf
                  • Size 444KB
                  • SHA256 d672fb07a05fb53cc821da0fde823fdfd46071854fe8c6c5ea83d7450b978ecb
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1b1.rbf
                  • Path C:\Config.Msi\e59b1b1.rbf
                  • Size 948KB
                  • SHA256 e0305aa54823e6f39d847f8b651b7bd08c085f1dbbcb5c3c1ce1942c0fa1e9fa
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1b2.rbf
                  • Path C:\Config.Msi\e59b1b2.rbf
                  • Size 331KB
                  • SHA256 c1b61dd24dc2dd5efd5cd548c0cd74fac112358e9e580df4d780d2c125474dad
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1b3.rbf
                  • Path C:\Config.Msi\e59b1b3.rbf
                  • Size 242KB
                  • SHA256 1d67a8464991a03fc190d87b43591764f231d7a7a71a72ffc51d982b26691153
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1b4.rbf
                  • Path C:\Config.Msi\e59b1b4.rbf
                  • Size 117KB
                  • SHA256 62287589fc0b577398005f7ac07256d9fe671cdd3e5369faf74b9f64cb572317
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1b5.rbf
                  • Path C:\Config.Msi\e59b1b5.rbf
                  • Size 3B
                  • SHA256 13bf7b3039c63bf5a50491fa3cfd8eb4e699d1ba1436315aef9cbe5711530354
                  • MD5 SHA1 SHA512
                  Submit Download

                  e59b1b9.rbs
                  • Path C:\Config.Msi\e59b1b9.rbs
                  • Size 26KB
                  • SHA256 ba033367d6c3f472e980aaf2bc8961db42ac48cd9612cf6513d9e865c2c5120f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1cb.rbs
                  • Path C:\Config.Msi\e59b1cb.rbs
                  • Size 22KB
                  • SHA256 4ecc2c85830c20f455a2b684951da860c82be2fe350cd318dec8224f878fc202
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1cc.rbf
                  • Path C:\Config.Msi\e59b1cc.rbf
                  • Size 45KB
                  • SHA256 5e7331a6adeb9d4252531ade800d47b8ddf020b97cfedc58de85386b3ae64e76
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1cd.rbf
                  • Path C:\Config.Msi\e59b1cd.rbf
                  • Size 45KB
                  • SHA256 9eec79bd4af04bba1e11fc24c64d94f30c22985c8ebbce3e0b411a61a1edbabe
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1ce.rbf
                  • Path C:\Config.Msi\e59b1ce.rbf
                  • Size 73KB
                  • SHA256 550f6c9f16fe85a8338b04f1bec43de3babeac60ff257197625f2802907007b8
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1cf.rbf
                  • Path C:\Config.Msi\e59b1cf.rbf
                  • Size 63KB
                  • SHA256 d1dbc7677010f9af7b680ea2efa28c964154997bddbf6c8d9d65ea225a5ec613
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1d0.rbf
                  • Path C:\Config.Msi\e59b1d0.rbf
                  • Size 72KB
                  • SHA256 87e5c496e038c337ca1acee52c145d8f4bdb3e74261b13e1feb740c4e2124e0a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1d1.rbf
                  • Path C:\Config.Msi\e59b1d1.rbf
                  • Size 73KB
                  • SHA256 b098ed9a5f44052b9ab5ceee82ab4cea5c6d9a14a61816882ef996a0599838b2
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1d2.rbf
                  • Path C:\Config.Msi\e59b1d2.rbf
                  • Size 71KB
                  • SHA256 271abe43d14cbd8c80b85ec804787272522bc06c45b7f93244b718ab0c08a289
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1d3.rbf
                  • Path C:\Config.Msi\e59b1d3.rbf
                  • Size 52KB
                  • SHA256 43cd9fdf714b7dfca4b2a8f54bc25ceeddc7a6212ba59233d89a03c650053407
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1d4.rbf
                  • Path C:\Config.Msi\e59b1d4.rbf
                  • Size 52KB
                  • SHA256 32dfe0f26b5024ec900a31f0dde736ca62769dc5de48238b485f4322cd367e7d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1d5.rbf
                  • Path C:\Config.Msi\e59b1d5.rbf
                  • Size 69KB
                  • SHA256 1154c537bd700ebbda599a5c2923e73d098c3eaa930fd0f4d415583ff90eea67
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1d6.rbf
                  • Path C:\Config.Msi\e59b1d6.rbf
                  • Size 4.2MB
                  • SHA256 6130ad7d21a492cd3f3924bed43d954f80b6b6920374934b9eed057f27130e15
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1d7.rbf
                  • Path C:\Config.Msi\e59b1d7.rbf
                  • Size 4.2MB
                  • SHA256 68df186e26151313a0df2adb0ef5f3a45ebba3cb02229bd8723a29dee60e278d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1d8.rbf
                  • Path C:\Config.Msi\e59b1d8.rbf
                  • Size 81KB
                  • SHA256 8c82f149507c3415250e52bf4c7fe937946a60d51f07492a1e36ab3e14482187
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1d9.rbf
                  • Path C:\Config.Msi\e59b1d9.rbf
                  • Size 81KB
                  • SHA256 d6d2ba4ac1606e825216a25ab401d26d77c4300299e957cfadab3b0b945d065a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1de.rbs
                  • Path C:\Config.Msi\e59b1de.rbs
                  • Size 18KB
                  • SHA256 7f7090db701b86cd75542fa8eed0545dc6bbf9938a1c482bd742ff1ed8db12d0
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1e7.rbs
                  • Path C:\Config.Msi\e59b1e7.rbs
                  • Size 14KB
                  • SHA256 96eb46563b13182ec60e08c8af095463b296ec43ee39b1c392ac75e59535b794
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1e8.rbf
                  • Path C:\Config.Msi\e59b1e8.rbf
                  • Size 644KB
                  • SHA256 92faedd18a29e1bd2dd27a1d805ea5aa3e73b954a625af45a74f49d49506d20f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1e9.rbf
                  • Path C:\Config.Msi\e59b1e9.rbf
                  • Size 940KB
                  • SHA256 d28c7ab34842b6149609bd4e6b566ddab8b891f0d5062480a253ef20a6a2caaa
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1ea.rbf
                  • Path C:\Config.Msi\e59b1ea.rbf
                  • Size 470KB
                  • SHA256 88a5ed51a7be4ff7ebded0c107fafda6ace3801877216c0bb6cbb458ae054a7b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1eb.rbf
                  • Path C:\Config.Msi\e59b1eb.rbf
                  • Size 348KB
                  • SHA256 1b296bd172332d3b2253bdcb6ecac46afef883f75c13c361632ff40fec743fcc
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1ec.rbf
                  • Path C:\Config.Msi\e59b1ec.rbf
                  • Size 134KB
                  • SHA256 22d14e004ba4b78a9143257399dc40ef4d0e8f2cdb9127e1ba2638f54cce5c70
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b1f1.rbs
                  • Path C:\Config.Msi\e59b1f1.rbs
                  • Size 27KB
                  • SHA256 3e76a70a248df64a641ef4277792dcd260bd350b52f78a316abbad0c81fee612
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b203.rbs
                  • Path C:\Config.Msi\e59b203.rbs
                  • Size 22KB
                  • SHA256 ed3ab380d841d64e550cdc82d3841c877e96c3e1c6d226d4080d9bafc7a62a2d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b204.rbf
                  • Path C:\Config.Msi\e59b204.rbf
                  • Size 45KB
                  • SHA256 cb531679be2881677a93d11067c71274ec30b30aadf1cdcf1543dddd6b1d7b61
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b205.rbf
                  • Path C:\Config.Msi\e59b205.rbf
                  • Size 45KB
                  • SHA256 0301c5dc6e762788891356987e9c8cd0d40b262df06e8384bf5796b1f20f083e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b206.rbf
                  • Path C:\Config.Msi\e59b206.rbf
                  • Size 73KB
                  • SHA256 80e0f29ff6b7ada892f23927f17021783575ad80f9f6c8a268a6c2a7ce35e5d6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b207.rbf
                  • Path C:\Config.Msi\e59b207.rbf
                  • Size 63KB
                  • SHA256 e463f38fa6b6157398ad224a462538bd8e36b75031fa711e567c5505a9092df6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b208.rbf
                  • Path C:\Config.Msi\e59b208.rbf
                  • Size 72KB
                  • SHA256 db4fc3652d24224d5375d1a5696144ac8881332cc20f5992ed1488236e64c120
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b209.rbf
                  • Path C:\Config.Msi\e59b209.rbf
                  • Size 73KB
                  • SHA256 e7cb6c2818ca27c864bda635d5b5d9f7bdb308f4b5d4bbc206ee1e135b7dbbf7
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b20a.rbf
                  • Path C:\Config.Msi\e59b20a.rbf
                  • Size 71KB
                  • SHA256 9cfc5985440df4e70b57869b32c8ee69eb6fc570a98cc94a53141a0dc7535e10
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b20b.rbf
                  • Path C:\Config.Msi\e59b20b.rbf
                  • Size 52KB
                  • SHA256 83fb72fd2142d54bff6280e7c4d4ff22d43c3a81fa4ff8881003abbe5e21ec3b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b20c.rbf
                  • Path C:\Config.Msi\e59b20c.rbf
                  • Size 52KB
                  • SHA256 b2c7fc2c95b13bac36316d298c94d842dd2574f78e9c22e4d4e4af1c3fcc0fd9
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b20d.rbf
                  • Path C:\Config.Msi\e59b20d.rbf
                  • Size 69KB
                  • SHA256 3238676035d9c1595248ef65ef5b044384b473ab9bdfe8d1077e10e4fe7bc983
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b20e.rbf
                  • Path C:\Config.Msi\e59b20e.rbf
                  • Size 5.4MB
                  • SHA256 75497de4aec4b5f0f258164672db2eb55eef5138c028317860e05f11030f7b7c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b20f.rbf
                  • Path C:\Config.Msi\e59b20f.rbf
                  • Size 5.3MB
                  • SHA256 950ff7746d747de51cc09c1aaaf88fbc2fc97c59865f574cc3fb10243ae7b906
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b210.rbf
                  • Path C:\Config.Msi\e59b210.rbf
                  • Size 89KB
                  • SHA256 a78e7988c9f99bcbe02d29441b0dcbdebafa616d2a4652aad867b81f554a0476
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b211.rbf
                  • Path C:\Config.Msi\e59b211.rbf
                  • Size 89KB
                  • SHA256 864958960b8dd2890d47f2774ba836954f2c4f5ad6e4d529b13138caefcce73e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b218.rbs
                  • Path C:\Config.Msi\e59b218.rbs
                  • Size 16KB
                  • SHA256 e9a23e4ff9aea5b095ef97b4d9bae54009c1242c9b9332cecb2bc46cc122b11c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b21d.rbs
                  • Path C:\Config.Msi\e59b21d.rbs
                  • Size 18KB
                  • SHA256 504c86502973084a1a52b416fed64685e5b2e84cff28581e372b76782d02c90d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b22a.rbs
                  • Path C:\Config.Msi\e59b22a.rbs
                  • Size 20KB
                  • SHA256 bdd6d92f269d726d4dd090b7e7a8d1fc6ac3dab1b9796dcc2de922a6e16519d6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b239.rbs
                  • Path C:\Config.Msi\e59b239.rbs
                  • Size 19KB
                  • SHA256 312171ce9e366430c171c857f21c7107f5b83fe0264cd8c0083f7ab663c29d5e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b240.rbs
                  • Path C:\Config.Msi\e59b240.rbs
                  • Size 19KB
                  • SHA256 27f5610021a6dd3b85c43bf1e2bcba22f789b6529e7782b018c18a226ce38950
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b24c.rbs
                  • Path C:\Config.Msi\e59b24c.rbs
                  • Size 19KB
                  • SHA256 8e1f860b75b7a6bd797efefcdb2fef0f8c93bf92b48aa5c6616a54b09f620d9e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b253.rbs
                  • Path C:\Config.Msi\e59b253.rbs
                  • Size 21KB
                  • SHA256 732c34b6149a986e015a926576baa342fe2e981fc6978005b5eced701d476208
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b262.rbs
                  • Path C:\Config.Msi\e59b262.rbs
                  • Size 21KB
                  • SHA256 6c37680fd5836b83b070e7460ab0a0d8993000327a40be371695365890f4ef0a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b268.rbs
                  • Path C:\Config.Msi\e59b268.rbs
                  • Size 15.9MB
                  • SHA256 e475ce5f9313bbeaf58e60929807482a849d5ff87cf22d41f6e8784a8ce96f79
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59b26e.rbs
                  • Path C:\Config.Msi\e59b26e.rbs
                  • Size 13.8MB
                  • SHA256 f1c03795eeb5120b2da1c7b33fe562b723ebd424af787e5a487d02c37b2b6145
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  PresetPackage.ko-KR.xml
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\OFX Video Plug-Ins\TitlesAndText.ofx.bundle\Contents\Presets\PresetPackage.ko-KR.xml
                  • Size 120KB
                  • SHA256 1f804e0e9a2a96673980ed460f08ddd9cbc2391360efda59302fdc1bd5f979fa
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  UnlockFormServiceCenter_nb_NO.rtf
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\Protein\Forms\UnlockFormServiceCenter_nb_NO.rtf
                  • Size 2KB
                  • SHA256 5a31feaa4bdbc96da11a4f68a7fcb36bb791dc073b41e109f7d085dd008790bc
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  install.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                  • Size 2B
                  • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                  • MD5 SHA1 SHA512
                  Submit Download

                  install.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                  • Size 218B
                  • SHA256 836ed7e15037a5a21ada8f1640e644a68b55d78c7454ad30861a5e0078e459c8
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  install.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                  • Size 1KB
                  • SHA256 831cc0c5de1884e71628eebcfa44cf5663e4cd347e5e638e0a9e26e7bc4aad3d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  install.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                  • Size 1KB
                  • SHA256 9c2cc77cf86706cda27b6d24161276c74c66fa6694a50220c01b89b34aae153c
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  install.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                  • Size 1KB
                  • SHA256 c9b836f17736fc35fc22202cf9eb95a11256ee6f5396b1664c429a8a96a496e0
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_de_DE.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_de_DE.cfg
                  • Size 866B
                  • SHA256 d059be76433133e9d963b79b9f5a5b968214a3f82c2ced649d70f83b4f38f139
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_de_DE.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_de_DE.cfg
                  • Size 3KB
                  • SHA256 c8c5fa509c2bf541f6a0ad39005d10bfa3366b8fdc4ac52b0e7c37824bf08ad2
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_de_DE.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_de_DE.cfg
                  • Size 4KB
                  • SHA256 d862eb65630b9791082c9dada695395a89645b48e058f06314840b0d45004796
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  local_en_US.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                  • Size 138B
                  • SHA256 06e7d6ac97adac48d501c4ee34604504bb49368872926b90b71151449303c15c
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_en_US.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                  • Size 1KB
                  • SHA256 c10641f55c240d66967f076fdb6071c2a10b5e45ab3c4a0dc7e5cda04e17c400
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_en_US.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                  • Size 2KB
                  • SHA256 884e49c927ec7a81877691942f26deec0abb6c33a6cc6d8d8a9535b3b4855c4e
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_en_US.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                  • Size 4KB
                  • SHA256 1f711a3deb2ad75eec930b33525d1e92f8c1678e4a04c5fd70b4e4768d825882
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  local_es_ES.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_es_ES.cfg
                  • Size 1KB
                  • SHA256 4f0e4fd6e27e0198698beb80e1c14b2ed2c078933cd1519af40764b584a3e419
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_es_ES.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_es_ES.cfg
                  • Size 2KB
                  • SHA256 992caefe0a6ea1601fd70571ab5b6018ee83767d77752e14ddad05e0be90db6c
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_es_ES.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_es_ES.cfg
                  • Size 4KB
                  • SHA256 741e2cc7141c443419900b6ae7f732c1a98866bcd8dc584981c60c9699a2721b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  local_fr_FR.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                  • Size 1KB
                  • SHA256 acefbfe3c654e771628acaea8e1b0cbb3d9bdeb81357acb052a6eee33afe534f
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_fr_FR.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                  • Size 4KB
                  • SHA256 d7bab05b88e3afcd45bcd36fb0e33b1ebaee40f06a37c54e75f09a262203ce39
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Vegas_readme.htm
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\readme\Vegas_readme.htm
                  • Size 21KB
                  • SHA256 6081943d6f86222d72967065bd0a9c2f89ec84e30f6aa7eea64015290a8cf9e3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  state.rsm
                  • Path C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\state.rsm
                  • Size 788B
                  • SHA256 d5d82a22821b289051eb03738492a9d47eadd8d506ae2efefdd35f1848ea4de1
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  state.rsm
                  • Path C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\state.rsm
                  • Size 788B
                  • SHA256 109012aa69af22ad29317f30bcb448eb2287d4d6537d7a7e32874ec3c539c395
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  installation.ini
                  • Path C:\ProgramData\VEGAS\VEGAS_Pro_23\installation.ini
                  • Size 402B
                  • SHA256 0b72e37309b04fca36a735f171d344807dc0b302d0b86689b9a9c94bd0ca5ea8
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  installation.ini
                  • Path C:\ProgramData\VEGAS\VEGAS_Pro_23\installation.ini
                  • Size 476B
                  • SHA256 28bcd1b3b63321592899db02c19ee9a384aa1e52ed160c9c0be1d89e6de6d6f4
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  001#Install#vcredist2013_12_0_40664_x86_000_vcRuntimeMinimum_x86.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\001#Install#vcredist2013_12_0_40664_x86_000_vcRuntimeMinimum_x86.txt
                  • Size 2KB
                  • SHA256 570b23ca907bdb50e6b12ab64f08f33038e3246bda3ca57b5086b906baa73e38
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  001#Install#vcredist2013_12_0_40664_x86_001_vcRuntimeAdditional_x86.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\001#Install#vcredist2013_12_0_40664_x86_001_vcRuntimeAdditional_x86.txt
                  • Size 2KB
                  • SHA256 21445700993dce562358494c1b41b4554c028034af02a8e32c66c55f0b9c487b
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  002#Install#vcredist2013_12_0_40664_x64.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\002#Install#vcredist2013_12_0_40664_x64.txt
                  • Size 11KB
                  • SHA256 80470da3f04f88a8cfec0c57f7c5e9213268bc0d85a2f51b832a149d59a07641
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  002#Install#vcredist2013_12_0_40664_x64_000_vcRuntimeMinimum_x64.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\002#Install#vcredist2013_12_0_40664_x64_000_vcRuntimeMinimum_x64.txt
                  • Size 2KB
                  • SHA256 9d03ed238187d71b3ab88e7b9b77ec1748479d3c3933aa0aae1a7cbb94cc25cd
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  002#Install#vcredist2013_12_0_40664_x64_001_vcRuntimeAdditional_x64.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\002#Install#vcredist2013_12_0_40664_x64_001_vcRuntimeAdditional_x64.txt
                  • Size 2KB
                  • SHA256 ffd701dca5addc6cc1e7d450c71d14d1623030d511cfd80e386e497aca2a3e41
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  003#Install#vcredist2022_2015_14_40_33810_x86_000_vcRuntimeMinimum_x86.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\003#Install#vcredist2022_2015_14_40_33810_x86_000_vcRuntimeMinimum_x86.txt
                  • Size 2KB
                  • SHA256 27f1c93a830ff1f67fc61473dbd21604f0c39b85f87222d5c99f6ef015f4ded6
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  003#Install#vcredist2022_2015_14_40_33810_x86_001_vcRuntimeAdditional_x86.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035608\003#Install#vcredist2022_2015_14_40_33810_x86_001_vcRuntimeAdditional_x86.txt
                  • Size 2KB
                  • SHA256 2b524e62339cf85d650e6ea15556a802577907b400842120a4e7c850122c1741
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  VEGAS_Capture_en-US.mst
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\VEGAS_Capture\VEGAS_Capture_en-US.mst
                  • Size 60KB
                  • SHA256 7723e5ccb8b29c412c23d744c427aede74b1e75deb5a60df9c69e13d1a38226c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Capture_es-ES.mst
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\VEGAS_Capture\VEGAS_Capture_es-ES.mst
                  • Size 60KB
                  • SHA256 7c832cda977837585f1d59fbc3e7a8df393a5b7fe97f0aca98f87c6f9ac992ce
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Capture_fr-FR.mst
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\VEGAS_Capture\VEGAS_Capture_fr-FR.mst
                  • Size 64KB
                  • SHA256 e8303d23d25459ed408f78df90c8c4dbd26c91fdef5321ebd1334ef593ce1513
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Capture_setup_x64.ms_
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\VEGAS_Capture\VEGAS_Capture_setup_x64.ms_
                  • Size 2.4MB
                  • SHA256 e4e60178ebbd00f46650a02c90885d007c795e4427d8ee551395cd068fd092e6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _8mir9uw.cab
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\VEGAS_Capture\_8mir9uw.cab
                  • Size 36B
                  • SHA256 a32e0a83001d2c5d41649063217923dac167809cab50ec5784078e41c9ec0f0f
                  • MD5 SHA1 SHA512
                  Submit Download

                  vcredist_x64.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2013_12.0.40664\vcredist_x64.exe
                  • Size 6.9MB
                  • SHA256 a4bba7701e355ae29c403431f871a537897c363e215cafe706615e270984f17c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcredist_x86.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2013_12.0.40664\vcredist_x86.exe
                  • Size 6.2MB
                  • SHA256 53b605d1100ab0a88b867447bbf9274b5938125024ba01f5105a9e178a3dcdbd
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VC_redist.x64.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2022-2015_14.40.33810\VC_redist.x64.exe
                  • Size 24.2MB
                  • SHA256 3642e3f95d50cc193e4b5a0b0ffbf7fe2c08801517758b4c8aeb7105a091208a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VC_redist.x86.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\addon\vcredist2022-2015_14.40.33810\VC_redist.x86.exe
                  • Size 13.2MB
                  • SHA256 a32dd41eaab0c5e1eaa78be3c0bb73b48593de8d97a7510b97de3fd993538600
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Pro_23_SetupInfo.ini
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\product\VEGAS_Pro_23_SetupInfo.ini
                  • Size 2KB
                  • SHA256 eaef6d7e2c4088b7efcfdac773a19d8bc485b482a0d49c066c8ad2cfd447a225
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  VEGAS_Pro_23_SetupRes.mxres
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\product\VEGAS_Pro_23_SetupRes.mxres
                  • Size 3.0MB
                  • SHA256 8bff71ec225fc280da3c1645974a5696ab198c7e6343278f51bb25d7bc1b235a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Pro_23_en-US.mst
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\product\VEGAS_Pro_23_en-US.mst
                  • Size 60KB
                  • SHA256 fdb75cbd0265211f24cd0bcbfac5df5bfa9afa3ea6d0eae13ac797fc0ceb6a72
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Pro_23_setup.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\product\VEGAS_Pro_23_setup.exe
                  • Size 4.7MB
                  • SHA256 6f4813f7b0863956fdb4d426dc1a562852233d4e859fe46f661e1a3406e35668
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Pro_23_setup.xml
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\product\VEGAS_Pro_23_setup.xml
                  • Size 4KB
                  • SHA256 57090f9351d785475c8f5c7e4761151f1b72cd56833f922c9c9926c8ff936ce2
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Pro_23_setup_x64.ms_
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxhq5stkeh\product\VEGAS_Pro_23_setup_x64.ms_
                  • Size 2.7MB
                  • SHA256 530151283473853b0ea05783f7df28fe33f3654f395124a2306e5e37ed8661fe
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcredist_x64.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\.be\vcredist_x64.exe
                  • Size 455KB
                  • SHA256 102f69b5a98352a6a1a6b26bc2c86ee7611c1f45f5a9ca04f5a8841961f191c6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  cab2C04DDC374BD96EB5C8EB8208F2C7C92
                  • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\cab2C04DDC374BD96EB5C8EB8208F2C7C92
                  • Size 5.3MB
                  • SHA256 1f2f8f5d60dadbc6e4d3d36c88cc54f22af0a615b609609e748782dc26231174
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  cab5046A8AB272BF37297BB7928664C9503
                  • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\cab5046A8AB272BF37297BB7928664C9503
                  • Size 1010KB
                  • SHA256 e95d29cbb06bb323d9d43fc2ce61d4565b0866622a83d93df76430a0c252b433
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcRuntimeAdditional_x64
                  • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcRuntimeAdditional_x64
                  • Size 140KB
                  • SHA256 8909e5c1d917064983595a4e4717f758c2a8df8f59d7b31a5b79b2f95bd8f7cc
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcRuntimeMinimum_x64
                  • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcRuntimeMinimum_x64
                  • Size 140KB
                  • SHA256 e88d0915814e622cd1deca849efa23a0d58d5d756be44ebbb4d460d3dac9e816
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Users\Admin\AppData\Local\Temp\{61087a79-ac85-455c-934d-1fa22cc64f36}\.ba1\license.rtf
                  • Size 6KB
                  • SHA256 8518f0420972c1dbe8a323ffc6f57863af0b80c6a3b27fd0c6fc9bdabb7e2d13
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Users\Admin\AppData\Local\Temp\{61087a79-ac85-455c-934d-1fa22cc64f36}\.ba1\thm.wxl
                  • Size 2KB
                  • SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  thm.xml
                  • Path C:\Users\Admin\AppData\Local\Temp\{61087a79-ac85-455c-934d-1fa22cc64f36}\.ba1\thm.xml
                  • Size 5KB
                  • SHA256 6b1ba0dea830e556a58c883290faa5d49c064e546cbfcd0451596a10cc693f87
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  logo.png
                  • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\.ba1\logo.png
                  • Size 1KB
                  • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wixstdba.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\.ba1\wixstdba.dll
                  • Size 117KB
                  • SHA256 e7c8e7edd9112137895820e789baaaeca41626b01fb99fede82968ddb66d02cf
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcredist_x86.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\.be\vcredist_x86.exe
                  • Size 455KB
                  • SHA256 fd597b58a578cfa46e1818b3b4b795ca6d25225dc11ee86cd491f3d55d7b235d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  cab54A5CABBE7274D8A22EB58060AAB7623
                  • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\cab54A5CABBE7274D8A22EB58060AAB7623
                  • Size 973KB
                  • SHA256 80a29d5ce27c6794b9a38e5d5b98d535f877ac3363f450ee7ac0be9394426e49
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  cabB3E1576D1FEFBB979E13B1A5379E0B16
                  • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\cabB3E1576D1FEFBB979E13B1A5379E0B16
                  • Size 4.7MB
                  • SHA256 e12efc1bc0c61a7b9ba10a07502ef6833297d028368760da26e63218b744da79
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcRuntimeAdditional_x86
                  • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcRuntimeAdditional_x86
                  • Size 140KB
                  • SHA256 7cef0419f52c47f41b9546065e6788f20de07a7f1e647589ab52d88f6c7e50a5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcRuntimeMinimum_x86
                  • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcRuntimeMinimum_x86
                  • Size 140KB
                  • SHA256 60714fcdac0a7cbfc45e6ed9bc6d4b7f8536947f630016e5faca5cce1745adcf
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  MSI231D.tmp
                  • Path C:\Windows\Installer\MSI231D.tmp
                  • Size 1.7MB
                  • SHA256 741924f6c77e3699cd12a7e921e44479827a9afbc885133a44e87c081ee335ff
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  MSI45BD.tmp
                  • Path C:\Windows\Installer\MSI45BD.tmp
                  • Size 1.7MB
                  • SHA256 b9e422778f7b5066963d0ec404505cc586747ea33ebab30f9daf6cdca5a2a9f7
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  MSI7D0C.tmp
                  • Path C:\Windows\Installer\MSI7D0C.tmp
                  • Size 191KB
                  • SHA256 83912ab67c75b38c97bd5e867b943daa592c83bf0bf6fa20f651670b0981f1cc
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  ProgramIcon.exe
                  • Path C:\Windows\Installer\{B5135DB3-1651-44C7-835B-BA8F5EAA8A01}\ProgramIcon.exe
                  • Size 352KB
                  • SHA256 4b3107ddff5ed64f39f315ea015fe55d3e1f62146e82b6441b33397edac9f3b4
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  DLLDEV32i.dll
                  • Path C:\Windows\SysWOW64\DLLDEV32i.dll
                  • Size 117KB
                  • SHA256 32f832551b879cf54a4afb240dd56b26b8e6a53a25e13a6fd830d5310f13625e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VC_redist.x64.exe
                  • Path C:\Windows\Temp\{02AC0FC7-5AD5-4943-9055-471D03F98E77}\.be\VC_redist.x64.exe
                  • Size 635KB
                  • SHA256 8cd998a0318f07a27f78b75edb19479f44273590e300629eff237d47643c496c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  wixstdba.dll
                  • Path C:\Windows\Temp\{16124485-400C-4159-A965-AEE23F4DD2AC}\.ba\wixstdba.dll
                  • Size 191KB
                  • SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  cab54A5CABBE7274D8A22EB58060AAB7623
                  • Path C:\Windows\Temp\{16124485-400C-4159-A965-AEE23F4DD2AC}\cab54A5CABBE7274D8A22EB58060AAB7623
                  • Size 822KB
                  • SHA256 f4576ef2e843c282d2a932f7c55d71cc3fcbb35b0a17a0a640eb5f21731cc809
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  cabB3E1576D1FEFBB979E13B1A5379E0B16
                  • Path C:\Windows\Temp\{16124485-400C-4159-A965-AEE23F4DD2AC}\cabB3E1576D1FEFBB979E13B1A5379E0B16
                  • Size 4.9MB
                  • SHA256 7327d37634cc8e966342f478168b8850bea36a126d002c38c7438a7bd557c4ca
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcRuntimeAdditional_x86
                  • Path C:\Windows\Temp\{16124485-400C-4159-A965-AEE23F4DD2AC}\vcRuntimeAdditional_x86
                  • Size 180KB
                  • SHA256 be137dc2b1ec7e85ae7a003a09537d3706605e34059361404ea3110874895e3a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcRuntimeMinimum_x86
                  • Path C:\Windows\Temp\{16124485-400C-4159-A965-AEE23F4DD2AC}\vcRuntimeMinimum_x86
                  • Size 180KB
                  • SHA256 a2ad58d741be5d40af708e15bf0dd5e488187bf28f0b699d391a9ef96f899886
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VC_redist.x86.exe
                  • Path C:\Windows\Temp\{4EC8D634-66B8-4C1D-82B1-7078395ADFDA}\.cr\VC_redist.x86.exe
                  • Size 634KB
                  • SHA256 81873c2f6c8bc4acaad66423a1b4d90e70214e59710ea7f11c8aeb069acd4cd0
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{AF1727DC-1C29-4F58-A4E5-D461EF056C93}\.ba\license.rtf
                  • Size 9KB
                  • SHA256 8099dc3cf9502c335da829e5c755948a12e3e6de490eb492a99deb673d883d8b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.xml
                  • Path C:\Windows\Temp\{AF1727DC-1C29-4F58-A4E5-D461EF056C93}\.ba\thm.xml
                  • Size 8KB
                  • SHA256 f13bae0ec08c91b4a315bb2d86ee48fade597e7a5440dce6f751f98a3a4d6916
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1028\license.rtf
                  • Size 17KB
                  • SHA256 44c76290f7a2e45940e8338912feb49bcf4e071cfa85d2d34762857743acbc8d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1028\thm.wxl
                  • Size 2KB
                  • SHA256 8e2e660dfb66cb453e17f1b6991799678b1c8b350a55f9ebe2ba0028018a15ad
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1029\license.rtf
                  • Size 12KB
                  • SHA256 503c433dcde2f3a9e7d388a5ff2b0612e7d8f90f5188d5b2b60228db33044fde
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1029\thm.wxl
                  • Size 3KB
                  • SHA256 07fb3ec174f25dfbe532d9d739234d9dfda8e9d34f01fe660c5b4d56989fa779
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1031\license.rtf
                  • Size 12KB
                  • SHA256 28f63bad9c2960395106011761993049546607f8a850d344d6a54042176bf03f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1031\thm.wxl
                  • Size 3KB
                  • SHA256 8e0dca6e085744bfcbff46f7dcbcfa6fbd722dfa52013ee8ceeaf682d7509581
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1036\license.rtf
                  • Size 12KB
                  • SHA256 5c13a65870d770d1642a4259eecb436257ca39016a0500f747be9c79be0c7009
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1036\thm.wxl
                  • Size 3KB
                  • SHA256 704ddf2e60c1f292be95c7c79ee48fe8ba8534ceb7ccf9a9ea68b1ad788ae9d4
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1040\license.rtf
                  • Size 11KB
                  • SHA256 70ecf23c03b66a2b18e173332586afa8f00f91e02a80628f4f9cb2521e27f6ac
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1040\thm.wxl
                  • Size 3KB
                  • SHA256 0c57f40cc2091554307aa8a7c35dd38e4596e9513e9efae00ac30498ef4e9bc2
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1041\license.rtf
                  • Size 29KB
                  • SHA256 c3061a334bfd5f02b7085f8f454d5d3d97d477af14bab497bf31a7887bc90c5b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1041\thm.wxl
                  • Size 3KB
                  • SHA256 6b9bbf90d75cfa7d943f036c01602945fe2fa786c6173e22acb7afe18375c7ea
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1042\license.rtf
                  • Size 27KB
                  • SHA256 3d4e9c165cbeab829d608106f0e96450f839ffa8adbd755f0b51867e89da2ae0
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1042\thm.wxl
                  • Size 3KB
                  • SHA256 ad7608b87a7135f408abf54a897a0f0920080f76013314b00d301d6264ae90b2
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1045\license.rtf
                  • Size 13KB
                  • SHA256 6f94a99072061012c5626a6dd069809ec841d6e3102b48394d522a0c2e3aa2b5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1045\thm.wxl
                  • Size 3KB
                  • SHA256 440b309fcdf61ffc03b269fe3815c60cb52c6ae3fc6acad14eac04d057b6d6ea
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1046\license.rtf
                  • Size 10KB
                  • SHA256 27891eec899be859e3b4d3b29247fc6b535d7e836def0329111c48741ec6e701
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1046\thm.wxl
                  • Size 3KB
                  • SHA256 f52b54a0e0d0e8f12cba9823d88e9fd6822b669074dd1dc69dad6553f7cb8913
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1049\license.rtf
                  • Size 31KB
                  • SHA256 1bb3fb55b8a13fa3bafffe72f5b1ed8b57a63bd4d8654bb6dc5b9011ce803b44
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1049\thm.wxl
                  • Size 4KB
                  • SHA256 7333bc8e52548821d82b53dbd7d7c4aa1703c85155480cb83cefd78380c95661
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1055\license.rtf
                  • Size 13KB
                  • SHA256 f80926604e503697247353f56856b31de0b3fc1319f1c94068363952549cc9b1
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\1055\thm.wxl
                  • Size 3KB
                  • SHA256 e5abe3cb3bf84207dac4e6f5bba1e693341d01aea076dd2d91eaa21c6a6cb925
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\2052\license.rtf
                  • Size 17KB
                  • SHA256 a808b4933ce3b3e0893504dbef43ebf90b8b567f94bd6481b6315ed9141e1b11
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\2052\thm.wxl
                  • Size 2KB
                  • SHA256 2ac8b7c19a5189662de36a0581c90dbad96df259ec00a28f609b644c3f39f9ca
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\3082\license.rtf
                  • Size 10KB
                  • SHA256 abc11bb2b04dff6afe2d4d4f40d95a7d62e5af352928af90daa3dade58dd59bd
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E65C1669-1B28-47C7-BABD-E932C951236A}\.ba\3082\thm.wxl
                  • Size 3KB
                  • SHA256 9cbb2b312c100b309a1b1495e84e2228b937612885f7a642fbbd67969b632c3a
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  memory/892-1373-0x0000000000BA0000-0x0000000000C17000-memory.dmp
                  Download

                  memory/1332-901-0x0000000000C00000-0x0000000000C65000-memory.dmp
                  Download

                  memory/1476-551-0x0000000000350000-0x00000000003B5000-memory.dmp
                  Download

                  memory/1648-566-0x0000000000350000-0x00000000003B5000-memory.dmp
                  Download

                  memory/1840-900-0x0000000000C00000-0x0000000000C65000-memory.dmp
                  Download

                  memory/2284-1135-0x0000000000730000-0x00000000007A7000-memory.dmp
                  Download

                  memory/2720-5063-0x000000000F390000-0x000000000F5FB000-memory.dmp
                  Download

                  memory/2720-5073-0x0000000011E70000-0x00000000123FB000-memory.dmp
                  Download

                  memory/2720-5059-0x00007FF703900000-0x00007FF706D2E000-memory.dmp
                  Download

                  memory/2720-5062-0x000000000F0A0000-0x000000000F382000-memory.dmp
                  Download

                  memory/2720-5097-0x0000000001740000-0x0000000002C10000-memory.dmp
                  Download

                  memory/2720-5060-0x0000000001740000-0x0000000002C10000-memory.dmp
                  Download

                  memory/2720-5058-0x00007FF703900000-0x00007FF706D2E000-memory.dmp
                  Download

                  memory/2720-5118-0x0000000001740000-0x0000000002C10000-memory.dmp
                  Download

                  memory/3064-4841-0x0000000002160000-0x0000000003630000-memory.dmp
                  Download

                  memory/3104-550-0x0000000000350000-0x00000000003B5000-memory.dmp
                  Download

                  memory/3648-4766-0x00007FF703900000-0x00007FF706D2E000-memory.dmp
                  Download

                  memory/3648-4770-0x000000000DC70000-0x000000000DEDB000-memory.dmp
                  Download

                  memory/3648-4769-0x000000000D980000-0x000000000DC62000-memory.dmp
                  Download

                  memory/3648-4767-0x0000000001730000-0x0000000001731000-memory.dmp
                  Download

                  memory/4156-1369-0x0000000000BA0000-0x0000000000C17000-memory.dmp
                  Download

                  memory/5204-565-0x0000000000350000-0x00000000003B5000-memory.dmp
                  Download

                  memory/5540-1371-0x0000000000BA0000-0x0000000000C17000-memory.dmp
                  Download

                  memory/6016-1124-0x0000000000730000-0x00000000007A7000-memory.dmp
                  Download

                  memory/6132-1126-0x0000000000730000-0x00000000007A7000-memory.dmp
                  Download