Overview

overview

6

Static

static

3

R2R/Script...as.dll

windows10-ltsc_2021-x64

1

R2R/Script...as.dll

windows11-21h2-x64

1

R2R/VEGAS_...64.exe

windows10-ltsc_2021-x64

6

R2R/VEGAS_...64.exe

windows11-21h2-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    900s
  • max time network
    617s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    04/08/2026, 02:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    R2R/VEGAS_Pro_23.0.0.302_x64.exe
  • Size 658.4MB
  • Sample260804-dbkdes1apg
  • SHA256 2b7d2e0cecf79a67de90a57870a1bd25d73741db1ea4cd7093581a41009247b4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoverypersistenceprivilege_escalationransomwarespywaretrojan

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 8 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 47 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 64 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks system information in the registry 2 TTPs 2 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 29 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 52 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 23 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 51 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 38 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 61 IoCs
  • Suspicious use of WriteProcessMemory 62 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\R2R\VEGAS_Pro_23.0.0.302_x64.exe
    "C:\Users\Admin\AppData\Local\Temp\R2R\VEGAS_Pro_23.0.0.302_x64.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3984
    • C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\product\VEGAS_Pro_23_setup.exe
      "C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\product\VEGAS_Pro_23_setup.exe" -m C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\SetupValues.dat
      2⤵
      • Enumerates connected drives
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3792
      • C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2013_12.0.40664\vcredist_x86.exe
        "C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2013_12.0.40664\vcredist_x86.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\001#Install#vcredist2013_12_0_40664_x86.txt"
        3⤵
        • Adds Run key to start application
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:2968
        • C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2013_12.0.40664\vcredist_x86.exe
          "C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2013_12.0.40664\vcredist_x86.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\001#Install#vcredist2013_12_0_40664_x86.txt" -burn.unelevated BurnPipe.{7D71CEE9-0243-46AC-BF76-90AEE17B829A} {577AF35C-482A-420D-A0A0-2472C7ACD65C} 2968
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:2936
        • C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe
          "C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={9dff3540-fc85-4ed5-ac84-9e3c7fd8bece} -burn.embedded BurnPipe.{CCDD8D30-C3D1-4596-B0F2-C78CA767E4CE} {7A6FBB63-0F57-4C8C-9741-756C4AB82FA4} 2968
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:4880
          • C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe
            "C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={9dff3540-fc85-4ed5-ac84-9e3c7fd8bece} -burn.embedded BurnPipe.{CCDD8D30-C3D1-4596-B0F2-C78CA767E4CE} {7A6FBB63-0F57-4C8C-9741-756C4AB82FA4} 2968 -burn.unelevated BurnPipe.{D75A8808-8704-4141-AACD-D6BCDFD2F9DE} {22685EB1-AEFD-4D3D-AE27-3B70B90AFE18} 4880
            5⤵
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:1884
      • C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2013_12.0.40664\vcredist_x64.exe
        "C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2013_12.0.40664\vcredist_x64.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\002#Install#vcredist2013_12_0_40664_x64.txt"
        3⤵
        • Adds Run key to start application
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1352
        • C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2013_12.0.40664\vcredist_x64.exe
          "C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2013_12.0.40664\vcredist_x64.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\002#Install#vcredist2013_12_0_40664_x64.txt" -burn.unelevated BurnPipe.{9FAC4445-06C1-4018-AA6C-68AD3BFFC387} {BA56B3A1-BD6F-4E0B-B4CE-754F76529E85} 1352
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:4864
        • C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\vcredist_x64.exe
          "C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\vcredist_x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={042d26ef-3dbe-4c25-95d3-4c1b11b235a7} -burn.embedded BurnPipe.{8C07102F-C706-4E17-B089-B5C0576E0B11} {6939E493-6107-4B0C-AC80-83371DF61C59} 1352
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:2200
          • C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\vcredist_x64.exe
            "C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\vcredist_x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={042d26ef-3dbe-4c25-95d3-4c1b11b235a7} -burn.embedded BurnPipe.{8C07102F-C706-4E17-B089-B5C0576E0B11} {6939E493-6107-4B0C-AC80-83371DF61C59} 1352 -burn.unelevated BurnPipe.{7D9085D9-4E47-46BD-BE91-EECAF3C3DEF4} {13F6EE04-CDED-4713-B35D-371B5ABDCD6D} 2200
            5⤵
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:2392
      • C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2022-2015_14.40.33810\VC_redist.x86.exe
        "C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2022-2015_14.40.33810\VC_redist.x86.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\003#Install#vcredist2022_2015_14_40_33810_x86.txt"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1804
        • C:\Windows\Temp\{2B94026A-DA89-4757-89DD-EC79707037D8}\.cr\VC_redist.x86.exe
          "C:\Windows\Temp\{2B94026A-DA89-4757-89DD-EC79707037D8}\.cr\VC_redist.x86.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2022-2015_14.40.33810\VC_redist.x86.exe" -burn.filehandle.attached=564 -burn.filehandle.self=572 /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\003#Install#vcredist2022_2015_14_40_33810_x86.txt"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:4016
          • C:\Windows\Temp\{BB59FC85-1637-4B7E-AFC4-0645298904B5}\.be\VC_redist.x86.exe
            "C:\Windows\Temp\{BB59FC85-1637-4B7E-AFC4-0645298904B5}\.be\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{10F2A686-F4F8-439E-A95C-32650B497526} {A3CC7EB9-4FAE-4638-932D-C86195E219D8} 4016
            5⤵
            • Adds Run key to start application
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:3500
            • C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
              "C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={47109d57-d746-4f8b-9618-ed6a17cc922b} -burn.filehandle.self=1120 -burn.embedded BurnPipe.{B8233F2A-4479-4D8E-BD47-E0E3B027805E} {67A8645E-3F2E-46F7-A445-9C3C8637F747} 3500
              6⤵
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:904
              • C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
                "C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -burn.clean.room="C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -burn.filehandle.attached=548 -burn.filehandle.self=564 -uninstall -quiet -burn.related.upgrade -burn.ancestors={47109d57-d746-4f8b-9618-ed6a17cc922b} -burn.filehandle.self=1120 -burn.embedded BurnPipe.{B8233F2A-4479-4D8E-BD47-E0E3B027805E} {67A8645E-3F2E-46F7-A445-9C3C8637F747} 3500
                7⤵
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:444
                • C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
                  "C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{E445FB8A-FC13-4D4A-BB3C-54AF287955DF} {7FB69EC9-2FE0-4D90-AC37-97BFD3F3F181} 444
                  8⤵
                  • System Location Discovery: System Language Discovery
                  PID:716
      • C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2022-2015_14.40.33810\VC_redist.x64.exe
        "C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2022-2015_14.40.33810\VC_redist.x64.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\004#Install#vcredist2022_2015_14_40_33810_x64.txt"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3620
        • C:\Windows\Temp\{17739376-BCC6-448D-ACE3-60A10A9EC05D}\.cr\VC_redist.x64.exe
          "C:\Windows\Temp\{17739376-BCC6-448D-ACE3-60A10A9EC05D}\.cr\VC_redist.x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2022-2015_14.40.33810\VC_redist.x64.exe" -burn.filehandle.attached=576 -burn.filehandle.self=544 /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\004#Install#vcredist2022_2015_14_40_33810_x64.txt"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:4668
          • C:\Windows\Temp\{F3C29D43-326E-4F8E-96EE-78BB1A49AC7D}\.be\VC_redist.x64.exe
            "C:\Windows\Temp\{F3C29D43-326E-4F8E-96EE-78BB1A49AC7D}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{8017D9B5-E5A7-4057-BFA3-5128C5E9597C} {827418F3-3B73-4DC8-865E-20292B43BC50} 4668
            5⤵
            • Adds Run key to start application
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:408
            • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
              "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={5af95fd8-a22e-458f-acee-c61bd787178e} -burn.filehandle.self=1188 -burn.embedded BurnPipe.{238C9E65-3D70-4999-BB52-04B1537DDB4F} {96A69339-5707-4480-96E6-85D41053E414} 408
              6⤵
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:3428
              • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=548 -burn.filehandle.self=564 -uninstall -quiet -burn.related.upgrade -burn.ancestors={5af95fd8-a22e-458f-acee-c61bd787178e} -burn.filehandle.self=1188 -burn.embedded BurnPipe.{238C9E65-3D70-4999-BB52-04B1537DDB4F} {96A69339-5707-4480-96E6-85D41053E414} 408
                7⤵
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:2688
                • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                  "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{5F016AB9-75F7-4A7E-A4B8-8D0F0C9A23B1} {F6FED0D2-C9AF-47F5-8A5F-9D4108CA028A} 2688
                  8⤵
                  • System Location Discovery: System Language Discovery
                  PID:4144
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3924
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 662A7662E6315E4B771D8F9A99CCB456
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:3028
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding A994E79041856096E20A89FEC81E60BE E Global\MSI0000
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1572
      • C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe
        "C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe" /register /user 1085
        3⤵
        • Drops file in System32 directory
        • Suspicious use of NtSetInformationThreadHideFromDebugger
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies data under HKEY_USERS
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:2940
        • C:\Program Files\VEGAS\VEGAS Pro 23.0\ErrorReportLauncher.exe
          "C:\Program Files\VEGAS\VEGAS Pro 23.0\ErrorReportLauncher.exe"
          4⤵
          • Executes dropped EXE
          PID:2124
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\mchammer_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1584
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\mchammer_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:3732
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sffrgpnv_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:656
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sffrgpnv_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:4416
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack1_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4988
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack1_x64.dll"
          4⤵
          • Modifies registry class
          PID:4524
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack2_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2480
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack2_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:2632
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack3_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2212
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack3_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:4888
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sftrkfx1_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1512
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sftrkfx1_x64.dll"
          4⤵
          • Modifies registry class
          PID:2712
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfresfilter_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4052
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfresfilter_x64.dll"
          4⤵
          • Modifies registry class
          PID:1888
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx1_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3372
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx1_x64.dll"
          4⤵
          • Modifies registry class
          PID:2020
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx2_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1068
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx2_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:1212
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx3_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3724
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx3_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:1556
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\xpvinyl_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2316
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\xpvinyl_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:1620
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files\VEGAS\VEGAS Pro 23.0\sfvstwrap.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2052
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files\VEGAS\VEGAS Pro 23.0\sfvstwrap.dll"
          4⤵
            PID:1248
      • C:\Windows\syswow64\MsiExec.exe
        C:\Windows\syswow64\MsiExec.exe -Embedding BF4E6324A529DC0A7A39A87C677482D1
        2⤵
        • System Location Discovery: System Language Discovery
        PID:1896
      • C:\Windows\syswow64\MsiExec.exe
        C:\Windows\syswow64\MsiExec.exe -Embedding 621C7B6D38ADF23163305C3EEAE76B73 E Global\MSI0000
        2⤵
        • System Location Discovery: System Language Discovery
        PID:1496
    • C:\Windows\system32\vssvc.exe
      C:\Windows\system32\vssvc.exe
      1⤵
      • Checks SCSI registry key(s)
      • Suspicious use of AdjustPrivilegeToken
      PID:2228
    • C:\Windows\system32\srtasks.exe
      C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
      1⤵
        PID:2952
      • C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe
        "C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe" /burn.runonce
        1⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2476
        • C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe
          "C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\001#Install#vcredist2013_12_0_40664_x86.txt"
          2⤵
          • Adds Run key to start application
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:5028
          • C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe
            "C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\001#Install#vcredist2013_12_0_40664_x86.txt" -burn.unelevated BurnPipe.{78E613B2-C897-4D0A-B174-9D077E1AB0D9} {D7F41BD9-E75E-45CD-919F-EF20EB3A77CB} 5028
            3⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:2424
      • C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe
        "C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe" /burn.runonce
        1⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1292
        • C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe
          "C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\002#Install#vcredist2013_12_0_40664_x64.txt"
          2⤵
          • Adds Run key to start application
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:2148
          • C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe
            "C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\002#Install#vcredist2013_12_0_40664_x64.txt" -burn.unelevated BurnPipe.{C302E4B2-8EAA-43C1-B8C4-0CDD2F98BC8E} {2E075DD2-A815-4F51-9FE2-DBB001444FDD} 2148
            3⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:3744
      • C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe
        "C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" /burn.runonce
        1⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3960
        • C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe
          "C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\003#Install#vcredist2022_2015_14_40_33810_x86.txt"
          2⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:2680
          • C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe
            "C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" -burn.clean.room="C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" -burn.filehandle.attached=544 -burn.filehandle.self=560 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\003#Install#vcredist2022_2015_14_40_33810_x86.txt"
            3⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:760
            • C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe
              "C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{D2DC709B-F6A0-4EE3-A27F-90A785F929DF} {715518DB-96BE-411A-9CBA-0E3DD92E52AC} 760
              4⤵
              • Adds Run key to start application
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:232
      • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
        "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" /burn.runonce
        1⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1856
        • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
          "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\004#Install#vcredist2022_2015_14_40_33810_x64.txt"
          2⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:948
          • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
            "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" -burn.filehandle.attached=544 -burn.filehandle.self=560 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\004#Install#vcredist2022_2015_14_40_33810_x64.txt"
            3⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:2256
            • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
              "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{65F75D75-80BA-48E6-8FE0-D385F993772F} {B9B2F1D1-A7B2-4893-82DD-2F2712BD3585} 2256
              4⤵
              • Adds Run key to start application
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:4216
      • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
        "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
        1⤵
        • Suspicious use of SetWindowsHookEx
        PID:2424
      • C:\Windows\System32\rundll32.exe
        C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
        1⤵
          PID:1360
        • C:\Windows\System32\DataExchangeHost.exe
          C:\Windows\System32\DataExchangeHost.exe -Embedding
          1⤵
            PID:4636
          • C:\Windows\System32\DataExchangeHost.exe
            C:\Windows\System32\DataExchangeHost.exe -Embedding
            1⤵
              PID:1016
            • C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe
              "C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe"
              1⤵
              • Enumerates connected drives
              • Suspicious use of NtSetInformationThreadHideFromDebugger
              • Checks system information in the registry
              • Executes dropped EXE
              • Checks SCSI registry key(s)
              • Checks processor information in registry
              • Modifies system certificate store
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:4088
              • C:\Program Files\VEGAS\VEGAS Pro 23.0\ErrorReportLauncher.exe
                "C:\Program Files\VEGAS\VEGAS Pro 23.0\ErrorReportLauncher.exe"
                2⤵
                • Executes dropped EXE
                PID:4396

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  e59ba02.rbs
                  • Path C:\Config.Msi\e59ba02.rbs
                  • Size 17KB
                  • SHA256 d3db2258e17c382cbb4b43a14653db9ef3e83a2a309d1e627dba7f248fe6d8e8
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba0b.rbs
                  • Path C:\Config.Msi\e59ba0b.rbs
                  • Size 13KB
                  • SHA256 d93d0d91e715c88f34143ec9d7ef437c87630b8a514fb87601a1c32e3f4da8b4
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba0c.rbf
                  • Path C:\Config.Msi\e59ba0c.rbf
                  • Size 444KB
                  • SHA256 d672fb07a05fb53cc821da0fde823fdfd46071854fe8c6c5ea83d7450b978ecb
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba0d.rbf
                  • Path C:\Config.Msi\e59ba0d.rbf
                  • Size 948KB
                  • SHA256 e0305aa54823e6f39d847f8b651b7bd08c085f1dbbcb5c3c1ce1942c0fa1e9fa
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba0e.rbf
                  • Path C:\Config.Msi\e59ba0e.rbf
                  • Size 331KB
                  • SHA256 c1b61dd24dc2dd5efd5cd548c0cd74fac112358e9e580df4d780d2c125474dad
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba0f.rbf
                  • Path C:\Config.Msi\e59ba0f.rbf
                  • Size 242KB
                  • SHA256 1d67a8464991a03fc190d87b43591764f231d7a7a71a72ffc51d982b26691153
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba10.rbf
                  • Path C:\Config.Msi\e59ba10.rbf
                  • Size 117KB
                  • SHA256 62287589fc0b577398005f7ac07256d9fe671cdd3e5369faf74b9f64cb572317
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba11.rbf
                  • Path C:\Config.Msi\e59ba11.rbf
                  • Size 3B
                  • SHA256 13bf7b3039c63bf5a50491fa3cfd8eb4e699d1ba1436315aef9cbe5711530354
                  • MD5 SHA1 SHA512
                  Submit Download

                  e59ba15.rbs
                  • Path C:\Config.Msi\e59ba15.rbs
                  • Size 26KB
                  • SHA256 856478916b7dbc085d99ee209f4b566d57240b42de6093b17fa9c9e94180e17c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba27.rbs
                  • Path C:\Config.Msi\e59ba27.rbs
                  • Size 22KB
                  • SHA256 2c477c7f0612df3847936ed0d70e5ec4b42824420f25c7e066615d96e3b7581d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba28.rbf
                  • Path C:\Config.Msi\e59ba28.rbf
                  • Size 45KB
                  • SHA256 5e7331a6adeb9d4252531ade800d47b8ddf020b97cfedc58de85386b3ae64e76
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba29.rbf
                  • Path C:\Config.Msi\e59ba29.rbf
                  • Size 45KB
                  • SHA256 9eec79bd4af04bba1e11fc24c64d94f30c22985c8ebbce3e0b411a61a1edbabe
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba2a.rbf
                  • Path C:\Config.Msi\e59ba2a.rbf
                  • Size 73KB
                  • SHA256 550f6c9f16fe85a8338b04f1bec43de3babeac60ff257197625f2802907007b8
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba2b.rbf
                  • Path C:\Config.Msi\e59ba2b.rbf
                  • Size 63KB
                  • SHA256 d1dbc7677010f9af7b680ea2efa28c964154997bddbf6c8d9d65ea225a5ec613
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba2c.rbf
                  • Path C:\Config.Msi\e59ba2c.rbf
                  • Size 72KB
                  • SHA256 87e5c496e038c337ca1acee52c145d8f4bdb3e74261b13e1feb740c4e2124e0a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba2d.rbf
                  • Path C:\Config.Msi\e59ba2d.rbf
                  • Size 73KB
                  • SHA256 b098ed9a5f44052b9ab5ceee82ab4cea5c6d9a14a61816882ef996a0599838b2
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba2e.rbf
                  • Path C:\Config.Msi\e59ba2e.rbf
                  • Size 71KB
                  • SHA256 271abe43d14cbd8c80b85ec804787272522bc06c45b7f93244b718ab0c08a289
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba2f.rbf
                  • Path C:\Config.Msi\e59ba2f.rbf
                  • Size 52KB
                  • SHA256 43cd9fdf714b7dfca4b2a8f54bc25ceeddc7a6212ba59233d89a03c650053407
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba30.rbf
                  • Path C:\Config.Msi\e59ba30.rbf
                  • Size 52KB
                  • SHA256 32dfe0f26b5024ec900a31f0dde736ca62769dc5de48238b485f4322cd367e7d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba31.rbf
                  • Path C:\Config.Msi\e59ba31.rbf
                  • Size 69KB
                  • SHA256 1154c537bd700ebbda599a5c2923e73d098c3eaa930fd0f4d415583ff90eea67
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba32.rbf
                  • Path C:\Config.Msi\e59ba32.rbf
                  • Size 4.2MB
                  • SHA256 6130ad7d21a492cd3f3924bed43d954f80b6b6920374934b9eed057f27130e15
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba33.rbf
                  • Path C:\Config.Msi\e59ba33.rbf
                  • Size 4.2MB
                  • SHA256 68df186e26151313a0df2adb0ef5f3a45ebba3cb02229bd8723a29dee60e278d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba34.rbf
                  • Path C:\Config.Msi\e59ba34.rbf
                  • Size 81KB
                  • SHA256 8c82f149507c3415250e52bf4c7fe937946a60d51f07492a1e36ab3e14482187
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba35.rbf
                  • Path C:\Config.Msi\e59ba35.rbf
                  • Size 81KB
                  • SHA256 d6d2ba4ac1606e825216a25ab401d26d77c4300299e957cfadab3b0b945d065a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba3a.rbs
                  • Path C:\Config.Msi\e59ba3a.rbs
                  • Size 18KB
                  • SHA256 ca703217539908759e7e3cfc1929f8df5d09ad1903f1a9deda6c1c25edf0d4c5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba43.rbs
                  • Path C:\Config.Msi\e59ba43.rbs
                  • Size 14KB
                  • SHA256 c8baa24710611375c4294768d2253daea089a6d353f2db35d6fb29a111d43fa5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba44.rbf
                  • Path C:\Config.Msi\e59ba44.rbf
                  • Size 644KB
                  • SHA256 92faedd18a29e1bd2dd27a1d805ea5aa3e73b954a625af45a74f49d49506d20f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba45.rbf
                  • Path C:\Config.Msi\e59ba45.rbf
                  • Size 940KB
                  • SHA256 d28c7ab34842b6149609bd4e6b566ddab8b891f0d5062480a253ef20a6a2caaa
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba46.rbf
                  • Path C:\Config.Msi\e59ba46.rbf
                  • Size 470KB
                  • SHA256 88a5ed51a7be4ff7ebded0c107fafda6ace3801877216c0bb6cbb458ae054a7b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba47.rbf
                  • Path C:\Config.Msi\e59ba47.rbf
                  • Size 348KB
                  • SHA256 1b296bd172332d3b2253bdcb6ecac46afef883f75c13c361632ff40fec743fcc
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba48.rbf
                  • Path C:\Config.Msi\e59ba48.rbf
                  • Size 134KB
                  • SHA256 22d14e004ba4b78a9143257399dc40ef4d0e8f2cdb9127e1ba2638f54cce5c70
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba4d.rbs
                  • Path C:\Config.Msi\e59ba4d.rbs
                  • Size 27KB
                  • SHA256 f95a3c796d2cc7613ef2d1ee3e9c1f85342208c13705386f3eb27b1e8c310889
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba5f.rbs
                  • Path C:\Config.Msi\e59ba5f.rbs
                  • Size 22KB
                  • SHA256 1e69ea8e06641333553ff2adb63ed37d6712790ae64172498c3f9c511f70539c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba60.rbf
                  • Path C:\Config.Msi\e59ba60.rbf
                  • Size 45KB
                  • SHA256 cb531679be2881677a93d11067c71274ec30b30aadf1cdcf1543dddd6b1d7b61
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba61.rbf
                  • Path C:\Config.Msi\e59ba61.rbf
                  • Size 45KB
                  • SHA256 0301c5dc6e762788891356987e9c8cd0d40b262df06e8384bf5796b1f20f083e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba62.rbf
                  • Path C:\Config.Msi\e59ba62.rbf
                  • Size 73KB
                  • SHA256 80e0f29ff6b7ada892f23927f17021783575ad80f9f6c8a268a6c2a7ce35e5d6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba63.rbf
                  • Path C:\Config.Msi\e59ba63.rbf
                  • Size 63KB
                  • SHA256 e463f38fa6b6157398ad224a462538bd8e36b75031fa711e567c5505a9092df6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba64.rbf
                  • Path C:\Config.Msi\e59ba64.rbf
                  • Size 72KB
                  • SHA256 db4fc3652d24224d5375d1a5696144ac8881332cc20f5992ed1488236e64c120
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba65.rbf
                  • Path C:\Config.Msi\e59ba65.rbf
                  • Size 73KB
                  • SHA256 e7cb6c2818ca27c864bda635d5b5d9f7bdb308f4b5d4bbc206ee1e135b7dbbf7
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba66.rbf
                  • Path C:\Config.Msi\e59ba66.rbf
                  • Size 71KB
                  • SHA256 9cfc5985440df4e70b57869b32c8ee69eb6fc570a98cc94a53141a0dc7535e10
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba67.rbf
                  • Path C:\Config.Msi\e59ba67.rbf
                  • Size 52KB
                  • SHA256 83fb72fd2142d54bff6280e7c4d4ff22d43c3a81fa4ff8881003abbe5e21ec3b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba68.rbf
                  • Path C:\Config.Msi\e59ba68.rbf
                  • Size 52KB
                  • SHA256 b2c7fc2c95b13bac36316d298c94d842dd2574f78e9c22e4d4e4af1c3fcc0fd9
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba69.rbf
                  • Path C:\Config.Msi\e59ba69.rbf
                  • Size 69KB
                  • SHA256 3238676035d9c1595248ef65ef5b044384b473ab9bdfe8d1077e10e4fe7bc983
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba6a.rbf
                  • Path C:\Config.Msi\e59ba6a.rbf
                  • Size 5.4MB
                  • SHA256 75497de4aec4b5f0f258164672db2eb55eef5138c028317860e05f11030f7b7c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba6b.rbf
                  • Path C:\Config.Msi\e59ba6b.rbf
                  • Size 5.3MB
                  • SHA256 950ff7746d747de51cc09c1aaaf88fbc2fc97c59865f574cc3fb10243ae7b906
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba6c.rbf
                  • Path C:\Config.Msi\e59ba6c.rbf
                  • Size 89KB
                  • SHA256 a78e7988c9f99bcbe02d29441b0dcbdebafa616d2a4652aad867b81f554a0476
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba6d.rbf
                  • Path C:\Config.Msi\e59ba6d.rbf
                  • Size 89KB
                  • SHA256 864958960b8dd2890d47f2774ba836954f2c4f5ad6e4d529b13138caefcce73e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba74.rbs
                  • Path C:\Config.Msi\e59ba74.rbs
                  • Size 16KB
                  • SHA256 13c236b8c13cb51930a72086f694609de3712ecd8e8fc3842d52e09fa749e514
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba79.rbs
                  • Path C:\Config.Msi\e59ba79.rbs
                  • Size 18KB
                  • SHA256 53a0bbfdd33812e4ca2fbab35a88fc13287692c28339b1cfb91fb6681edb2a73
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba86.rbs
                  • Path C:\Config.Msi\e59ba86.rbs
                  • Size 20KB
                  • SHA256 fd8fd1be4b1919521513105de33158d7e603af6b452580ea3b39e24d4fe40ef7
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba95.rbs
                  • Path C:\Config.Msi\e59ba95.rbs
                  • Size 19KB
                  • SHA256 85d4250109651f8efb220d9b1ce8437a1720a50fdbdf0c4fc6586ee7ce44a6da
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59ba9c.rbs
                  • Path C:\Config.Msi\e59ba9c.rbs
                  • Size 19KB
                  • SHA256 ce587528ba869f491db2db6109db65c72ed1bb99a385ace4fcb38ee3c277709e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59baa8.rbs
                  • Path C:\Config.Msi\e59baa8.rbs
                  • Size 19KB
                  • SHA256 24305d757461aa748d5091d7094e532413557c1c5b62e3dfdf467f50b66263d3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59baaf.rbs
                  • Path C:\Config.Msi\e59baaf.rbs
                  • Size 21KB
                  • SHA256 67c9a3532dc81a13eb1fe0f48b448ff278f9f700a848c993194a29bc9ba0796f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59babe.rbs
                  • Path C:\Config.Msi\e59babe.rbs
                  • Size 21KB
                  • SHA256 4fcb6869f2d46fb9c81f25189a323745366fb6ba2572fd4528d39c88c32ddfad
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59bac4.rbs
                  • Path C:\Config.Msi\e59bac4.rbs
                  • Size 15.9MB
                  • SHA256 c0681ddebce72fcc93851be8b9bfc2876bc92d2e234c9937145e833756354457
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  e59baca.rbs
                  • Path C:\Config.Msi\e59baca.rbs
                  • Size 13.8MB
                  • SHA256 713e678dcc9c4579b4b2e69f4e10489cec7e88d8fd6a9875e14f36c6d0163cbe
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  SetupInfo.ini
                  • Path C:\Program Files (x86)\Common Files\MAGIX Services\Uninstall\GlobalContent.VEGAS_Pro_23_Content\SetupInfo.ini
                  • Size 316B
                  • SHA256 b256c4b91fa058e8eb63273608bf19f46ee07252c74f3f51bb28e18471a56c52
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  PresetPackage.ko-KR.xml
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\OFX Video Plug-Ins\TitlesAndText.ofx.bundle\Contents\Presets\PresetPackage.ko-KR.xml
                  • Size 120KB
                  • SHA256 1f804e0e9a2a96673980ed460f08ddd9cbc2391360efda59302fdc1bd5f979fa
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  UnlockFormServiceCenter_nb_NO.rtf
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\Protein\Forms\UnlockFormServiceCenter_nb_NO.rtf
                  • Size 2KB
                  • SHA256 5a31feaa4bdbc96da11a4f68a7fcb36bb791dc073b41e109f7d085dd008790bc
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  install.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                  • Size 2B
                  • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                  • MD5 SHA1 SHA512
                  Submit Download

                  install.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                  • Size 1KB
                  • SHA256 c2f952ea5eb4d0b2227e0aa809784ecac877095fe82a4a9f523f15948aafd1c0
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  install.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                  • Size 1KB
                  • SHA256 478af7891ee9544d74f613e574afe24cf96fa270f0552a8d86803d59ccd5907d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  install.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                  • Size 1KB
                  • SHA256 8a1470019d68729f03b6083de1a7989e383cfe7413255af675bf1c0baaafc904
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  install.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                  • Size 1KB
                  • SHA256 b9b5eb84961cf475c69b00e595fa6c164553fd3ac359318d99c583614b3220f4
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  install.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                  • Size 2KB
                  • SHA256 f0f9307ca115ac65c725bb40a3430531d198d3531a1c09f46fe830e0078b4af6
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_de_DE.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_de_DE.cfg
                  • Size 560B
                  • SHA256 77e71619178e47f96369f06884e142f34d4cbca79254733f542895efedd428d7
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_de_DE.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_de_DE.cfg
                  • Size 1KB
                  • SHA256 c485181dc78d0cc20a43ca3f56f0196eb24d5b229e0fee20b038aa61964a1c39
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_de_DE.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_de_DE.cfg
                  • Size 2KB
                  • SHA256 a123b44138ad83112da2c5cd15334d7755e626f4afc574e7de1df8c7c2b6916d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_de_DE.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_de_DE.cfg
                  • Size 3KB
                  • SHA256 c8c5fa509c2bf541f6a0ad39005d10bfa3366b8fdc4ac52b0e7c37824bf08ad2
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_de_DE.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_de_DE.cfg
                  • Size 4KB
                  • SHA256 d862eb65630b9791082c9dada695395a89645b48e058f06314840b0d45004796
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  local_en_US.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                  • Size 138B
                  • SHA256 06e7d6ac97adac48d501c4ee34604504bb49368872926b90b71151449303c15c
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_en_US.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                  • Size 436B
                  • SHA256 cc07fcbafdeba759f9552d7804ed58f1f21dec86694def280d9ac85fb680abd4
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_en_US.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                  • Size 1KB
                  • SHA256 dc4aaf0d88d7e8337b849ef1bb2b96a8d6161b389490dfa693153e19853cd69e
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_en_US.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                  • Size 2KB
                  • SHA256 aff5740145d6ddc1a9aec5960b201f65ed9e1d23f6568c8ce899e462ab45f054
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_en_US.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                  • Size 4KB
                  • SHA256 b73b1179a3cc10a2848e186c9a8c410524e208714138f93807cf02c701ba5db2
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  local_es_ES.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_es_ES.cfg
                  • Size 1KB
                  • SHA256 af906c9c3781b3b70d2ac98ee3c773945b6a3e26ad628586b60f69ef0bcc4400
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_es_ES.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_es_ES.cfg
                  • Size 3KB
                  • SHA256 30293fb32d315bedfb8fc5221e5925f97c1f4cff6211c16d8183d3967fec260b
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_es_ES.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_es_ES.cfg
                  • Size 4KB
                  • SHA256 f2afa8a60fca2006a553c92d6aaa6c08e9317ff300788cf4b272e16d7b71d789
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  local_fr_FR.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                  • Size 442B
                  • SHA256 7698b9a04c1e049d2aa42719e12e7841fc88d80714fc6321372d7f1d5e4b9485
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_fr_FR.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                  • Size 552B
                  • SHA256 ab31123e5bf4ba78583b8c02f3f6ee028afcf9b30e4fd69ba63f90af644bdc63
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_fr_FR.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                  • Size 1KB
                  • SHA256 312a856c3b408a2ed5ab021f9125899611b44186d7378c4b38e0fbe8629cc39b
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_fr_FR.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                  • Size 1KB
                  • SHA256 e2e4a1b6bc9834473975597f0663ee6bfb62f51172ac70173506e9e2dacc1f41
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_fr_FR.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                  • Size 2KB
                  • SHA256 dfadf62c6bf363ac5b6496d94219e74da661c74a74a0b1e0b44208da274214b9
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  local_fr_FR.cfg
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                  • Size 4KB
                  • SHA256 c50f60c57fc2608ae9103c3cb2689f46f42cb4f71cd77f0f4f20380ccdfff77c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Vegas_readme.htm
                  • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\readme\Vegas_readme.htm
                  • Size 21KB
                  • SHA256 6081943d6f86222d72967065bd0a9c2f89ec84e30f6aa7eea64015290a8cf9e3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  57be44b07b344fd613ce0327d027edf1_07064ea3-a03c-4a6a-b26b-39dded9adc41
                  • Path C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\57be44b07b344fd613ce0327d027edf1_07064ea3-a03c-4a6a-b26b-39dded9adc41
                  • Size 2KB
                  • SHA256 ecd1827569ba703e79d01f799ebc66eaf1a0d0904bd9481a1290ab26fdc766f1
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  state.rsm
                  • Path C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\state.rsm
                  • Size 788B
                  • SHA256 a1d8df7a1ccc3e8e848c9a63783d69debb0a6f4282b77a2593b1c12b997ed5a9
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  state.rsm
                  • Path C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\state.rsm
                  • Size 788B
                  • SHA256 d9abefdcdd2a83cee2701d58397be8ea8af3583a1824fef228ab413d35bee001
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  state.rsm
                  • Path C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\state.rsm
                  • Size 764B
                  • SHA256 42ab4e798d6094e63819be7c0e8c69881bcde286f11b4abea8cb2c086a1b278c
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  installation.ini
                  • Path C:\ProgramData\VEGAS\VEGAS_Pro_23\installation.ini
                  • Size 402B
                  • SHA256 e37bdb5f674ea587389f9205fe544288fee4ea4436b1f66a95effe992de7ac37
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  installation.ini
                  • Path C:\ProgramData\VEGAS\VEGAS_Pro_23\installation.ini
                  • Size 476B
                  • SHA256 2ddf067cfd8a540833c29dc347be5a5296a6a7c440fe15044163ec5b275c08cf
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  SearchHoverUnifiedTileModelCache.dat
                  • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
                  • Size 22KB
                  • SHA256 45545929b7aa320d2be87b6b93cc12d98a4c78f4e125f6d77ba35a998a4814c7
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  001#Install#vcredist2013_12_0_40664_x86.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\001#Install#vcredist2013_12_0_40664_x86.txt
                  • Size 11KB
                  • SHA256 ffdaf100906a67220914263b9f0f937ed4183ed17e69a4efcd842cff792980cf
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  001#Install#vcredist2013_12_0_40664_x86_000_vcRuntimeMinimum_x86.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\001#Install#vcredist2013_12_0_40664_x86_000_vcRuntimeMinimum_x86.txt
                  • Size 2KB
                  • SHA256 d68ab77185b31e18708e51d8ed9a87f1b6d63440f82fc02d199092d3a29ac485
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  001#Install#vcredist2013_12_0_40664_x86_001_vcRuntimeAdditional_x86.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\001#Install#vcredist2013_12_0_40664_x86_001_vcRuntimeAdditional_x86.txt
                  • Size 2KB
                  • SHA256 380d9ea53d5584f8038ad856cfd86c6903ae77936b3938b998d609a9d9ff89df
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  002#Install#vcredist2013_12_0_40664_x64.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\002#Install#vcredist2013_12_0_40664_x64.txt
                  • Size 11KB
                  • SHA256 83d26a21df26c52513807a98b197df08812b0256ec535a1f5f7c8ae18a1c8fd9
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  002#Install#vcredist2013_12_0_40664_x64_000_vcRuntimeMinimum_x64.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\002#Install#vcredist2013_12_0_40664_x64_000_vcRuntimeMinimum_x64.txt
                  • Size 4KB
                  • SHA256 1bd7bdc6442ca9eca78cc1ca7e74d0aa196b23784da4294b767175e61c4f0117
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  002#Install#vcredist2013_12_0_40664_x64_001_vcRuntimeAdditional_x64.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\002#Install#vcredist2013_12_0_40664_x64_001_vcRuntimeAdditional_x64.txt
                  • Size 2KB
                  • SHA256 45c9078714038719c97a54769ff80a2d95ac93204705f3722cb1e5030ae53dbe
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  003#Install#vcredist2022_2015_14_40_33810_x86_000_vcRuntimeMinimum_x86.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260804_035613\003#Install#vcredist2022_2015_14_40_33810_x86_000_vcRuntimeMinimum_x86.txt
                  • Size 16KB
                  • SHA256 b0c1c0f5857111402341ecc5d1d331101ab62ca8964cd63f205e28ff821c9971
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Capture_en-US.mst
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\VEGAS_Capture\VEGAS_Capture_en-US.mst
                  • Size 60KB
                  • SHA256 7723e5ccb8b29c412c23d744c427aede74b1e75deb5a60df9c69e13d1a38226c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Capture_es-ES.mst
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\VEGAS_Capture\VEGAS_Capture_es-ES.mst
                  • Size 60KB
                  • SHA256 7c832cda977837585f1d59fbc3e7a8df393a5b7fe97f0aca98f87c6f9ac992ce
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Capture_fr-FR.mst
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\VEGAS_Capture\VEGAS_Capture_fr-FR.mst
                  • Size 64KB
                  • SHA256 e8303d23d25459ed408f78df90c8c4dbd26c91fdef5321ebd1334ef593ce1513
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Capture_setup_x64.ms_
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\VEGAS_Capture\VEGAS_Capture_setup_x64.ms_
                  • Size 2.4MB
                  • SHA256 e4e60178ebbd00f46650a02c90885d007c795e4427d8ee551395cd068fd092e6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _8mir9uw.cab
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\VEGAS_Capture\_8mir9uw.cab
                  • Size 36B
                  • SHA256 a32e0a83001d2c5d41649063217923dac167809cab50ec5784078e41c9ec0f0f
                  • MD5 SHA1 SHA512
                  Submit Download

                  vcredist_x64.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2013_12.0.40664\vcredist_x64.exe
                  • Size 6.9MB
                  • SHA256 a4bba7701e355ae29c403431f871a537897c363e215cafe706615e270984f17c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcredist_x86.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2013_12.0.40664\vcredist_x86.exe
                  • Size 6.2MB
                  • SHA256 53b605d1100ab0a88b867447bbf9274b5938125024ba01f5105a9e178a3dcdbd
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VC_redist.x64.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2022-2015_14.40.33810\VC_redist.x64.exe
                  • Size 24.2MB
                  • SHA256 3642e3f95d50cc193e4b5a0b0ffbf7fe2c08801517758b4c8aeb7105a091208a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VC_redist.x86.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\addon\vcredist2022-2015_14.40.33810\VC_redist.x86.exe
                  • Size 13.2MB
                  • SHA256 a32dd41eaab0c5e1eaa78be3c0bb73b48593de8d97a7510b97de3fd993538600
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Pro_23_SetupInfo.ini
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\product\VEGAS_Pro_23_SetupInfo.ini
                  • Size 2KB
                  • SHA256 eaef6d7e2c4088b7efcfdac773a19d8bc485b482a0d49c066c8ad2cfd447a225
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  VEGAS_Pro_23_SetupRes.mxres
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\product\VEGAS_Pro_23_SetupRes.mxres
                  • Size 3.0MB
                  • SHA256 8bff71ec225fc280da3c1645974a5696ab198c7e6343278f51bb25d7bc1b235a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Pro_23_en-US.mst
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\product\VEGAS_Pro_23_en-US.mst
                  • Size 60KB
                  • SHA256 fdb75cbd0265211f24cd0bcbfac5df5bfa9afa3ea6d0eae13ac797fc0ceb6a72
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Pro_23_setup.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\product\VEGAS_Pro_23_setup.exe
                  • Size 4.7MB
                  • SHA256 6f4813f7b0863956fdb4d426dc1a562852233d4e859fe46f661e1a3406e35668
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Pro_23_setup.xml
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\product\VEGAS_Pro_23_setup.xml
                  • Size 4KB
                  • SHA256 57090f9351d785475c8f5c7e4761151f1b72cd56833f922c9c9926c8ff936ce2
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VEGAS_Pro_23_setup_x64.ms_
                  • Path C:\Users\Admin\AppData\Local\Temp\mgxg79ugh2w\product\VEGAS_Pro_23_setup_x64.ms_
                  • Size 2.7MB
                  • SHA256 530151283473853b0ea05783f7df28fe33f3654f395124a2306e5e37ed8661fe
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcredist_x64.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\.be\vcredist_x64.exe
                  • Size 455KB
                  • SHA256 102f69b5a98352a6a1a6b26bc2c86ee7611c1f45f5a9ca04f5a8841961f191c6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  cab2C04DDC374BD96EB5C8EB8208F2C7C92
                  • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\cab2C04DDC374BD96EB5C8EB8208F2C7C92
                  • Size 5.3MB
                  • SHA256 1f2f8f5d60dadbc6e4d3d36c88cc54f22af0a615b609609e748782dc26231174
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  cab5046A8AB272BF37297BB7928664C9503
                  • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\cab5046A8AB272BF37297BB7928664C9503
                  • Size 1010KB
                  • SHA256 e95d29cbb06bb323d9d43fc2ce61d4565b0866622a83d93df76430a0c252b433
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcRuntimeAdditional_x64
                  • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcRuntimeAdditional_x64
                  • Size 140KB
                  • SHA256 8909e5c1d917064983595a4e4717f758c2a8df8f59d7b31a5b79b2f95bd8f7cc
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcRuntimeMinimum_x64
                  • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcRuntimeMinimum_x64
                  • Size 140KB
                  • SHA256 e88d0915814e622cd1deca849efa23a0d58d5d756be44ebbb4d460d3dac9e816
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Users\Admin\AppData\Local\Temp\{61087a79-ac85-455c-934d-1fa22cc64f36}\.ba1\license.rtf
                  • Size 6KB
                  • SHA256 8518f0420972c1dbe8a323ffc6f57863af0b80c6a3b27fd0c6fc9bdabb7e2d13
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Users\Admin\AppData\Local\Temp\{61087a79-ac85-455c-934d-1fa22cc64f36}\.ba1\thm.wxl
                  • Size 2KB
                  • SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  thm.xml
                  • Path C:\Users\Admin\AppData\Local\Temp\{61087a79-ac85-455c-934d-1fa22cc64f36}\.ba1\thm.xml
                  • Size 5KB
                  • SHA256 6b1ba0dea830e556a58c883290faa5d49c064e546cbfcd0451596a10cc693f87
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  logo.png
                  • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\.ba1\logo.png
                  • Size 1KB
                  • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wixstdba.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\.ba1\wixstdba.dll
                  • Size 117KB
                  • SHA256 e7c8e7edd9112137895820e789baaaeca41626b01fb99fede82968ddb66d02cf
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcredist_x86.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\.be\vcredist_x86.exe
                  • Size 455KB
                  • SHA256 fd597b58a578cfa46e1818b3b4b795ca6d25225dc11ee86cd491f3d55d7b235d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  cab54A5CABBE7274D8A22EB58060AAB7623
                  • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\cab54A5CABBE7274D8A22EB58060AAB7623
                  • Size 973KB
                  • SHA256 80a29d5ce27c6794b9a38e5d5b98d535f877ac3363f450ee7ac0be9394426e49
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  cabB3E1576D1FEFBB979E13B1A5379E0B16
                  • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\cabB3E1576D1FEFBB979E13B1A5379E0B16
                  • Size 4.7MB
                  • SHA256 e12efc1bc0c61a7b9ba10a07502ef6833297d028368760da26e63218b744da79
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcRuntimeAdditional_x86
                  • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcRuntimeAdditional_x86
                  • Size 140KB
                  • SHA256 7cef0419f52c47f41b9546065e6788f20de07a7f1e647589ab52d88f6c7e50a5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcRuntimeMinimum_x86
                  • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcRuntimeMinimum_x86
                  • Size 140KB
                  • SHA256 60714fcdac0a7cbfc45e6ed9bc6d4b7f8536947f630016e5faca5cce1745adcf
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  0f5007522459c86e95ffcc62f32308f1_07064ea3-a03c-4a6a-b26b-39dded9adc41
                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-1636999435-3883760687-346127294-1000\0f5007522459c86e95ffcc62f32308f1_07064ea3-a03c-4a6a-b26b-39dded9adc41
                  • Size 1KB
                  • SHA256 8a61d94cb6af6e89d2618c828f5447536018563a7f5e117d59493def3b1917dd
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  MSI227.tmp
                  • Path C:\Windows\Installer\MSI227.tmp
                  • Size 1.7MB
                  • SHA256 741924f6c77e3699cd12a7e921e44479827a9afbc885133a44e87c081ee335ff
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  MSI316D.tmp
                  • Path C:\Windows\Installer\MSI316D.tmp
                  • Size 191KB
                  • SHA256 83912ab67c75b38c97bd5e867b943daa592c83bf0bf6fa20f651670b0981f1cc
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  MSI7D9.tmp
                  • Path C:\Windows\Installer\MSI7D9.tmp
                  • Size 1.7MB
                  • SHA256 b9e422778f7b5066963d0ec404505cc586747ea33ebab30f9daf6cdca5a2a9f7
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  ProgramIcon.exe
                  • Path C:\Windows\Installer\{B5135DB3-1651-44C7-835B-BA8F5EAA8A01}\ProgramIcon.exe
                  • Size 352KB
                  • SHA256 4b3107ddff5ed64f39f315ea015fe55d3e1f62146e82b6441b33397edac9f3b4
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  DLLDEV32i.dll
                  • Path C:\Windows\SysWOW64\DLLDEV32i.dll
                  • Size 117KB
                  • SHA256 0b25d1f6cbe59cd804c2a890506e2bcfd8f1d847c97d74e16299f6c00546d7cd
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VC_redist.x86.exe
                  • Path C:\Windows\Temp\{2B94026A-DA89-4757-89DD-EC79707037D8}\.cr\VC_redist.x86.exe
                  • Size 634KB
                  • SHA256 81873c2f6c8bc4acaad66423a1b4d90e70214e59710ea7f11c8aeb069acd4cd0
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  wixstdba.dll
                  • Path C:\Windows\Temp\{BB59FC85-1637-4B7E-AFC4-0645298904B5}\.ba\wixstdba.dll
                  • Size 191KB
                  • SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  cab54A5CABBE7274D8A22EB58060AAB7623
                  • Path C:\Windows\Temp\{BB59FC85-1637-4B7E-AFC4-0645298904B5}\cab54A5CABBE7274D8A22EB58060AAB7623
                  • Size 822KB
                  • SHA256 f4576ef2e843c282d2a932f7c55d71cc3fcbb35b0a17a0a640eb5f21731cc809
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  cabB3E1576D1FEFBB979E13B1A5379E0B16
                  • Path C:\Windows\Temp\{BB59FC85-1637-4B7E-AFC4-0645298904B5}\cabB3E1576D1FEFBB979E13B1A5379E0B16
                  • Size 4.9MB
                  • SHA256 7327d37634cc8e966342f478168b8850bea36a126d002c38c7438a7bd557c4ca
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcRuntimeAdditional_x86
                  • Path C:\Windows\Temp\{BB59FC85-1637-4B7E-AFC4-0645298904B5}\vcRuntimeAdditional_x86
                  • Size 180KB
                  • SHA256 be137dc2b1ec7e85ae7a003a09537d3706605e34059361404ea3110874895e3a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcRuntimeMinimum_x86
                  • Path C:\Windows\Temp\{BB59FC85-1637-4B7E-AFC4-0645298904B5}\vcRuntimeMinimum_x86
                  • Size 180KB
                  • SHA256 a2ad58d741be5d40af708e15bf0dd5e488187bf28f0b699d391a9ef96f899886
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1028\license.rtf
                  • Size 17KB
                  • SHA256 44c76290f7a2e45940e8338912feb49bcf4e071cfa85d2d34762857743acbc8d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1028\thm.wxl
                  • Size 2KB
                  • SHA256 8e2e660dfb66cb453e17f1b6991799678b1c8b350a55f9ebe2ba0028018a15ad
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1029\license.rtf
                  • Size 12KB
                  • SHA256 503c433dcde2f3a9e7d388a5ff2b0612e7d8f90f5188d5b2b60228db33044fde
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1029\thm.wxl
                  • Size 3KB
                  • SHA256 07fb3ec174f25dfbe532d9d739234d9dfda8e9d34f01fe660c5b4d56989fa779
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1031\license.rtf
                  • Size 12KB
                  • SHA256 28f63bad9c2960395106011761993049546607f8a850d344d6a54042176bf03f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1031\thm.wxl
                  • Size 3KB
                  • SHA256 8e0dca6e085744bfcbff46f7dcbcfa6fbd722dfa52013ee8ceeaf682d7509581
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1036\license.rtf
                  • Size 12KB
                  • SHA256 5c13a65870d770d1642a4259eecb436257ca39016a0500f747be9c79be0c7009
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1036\thm.wxl
                  • Size 3KB
                  • SHA256 704ddf2e60c1f292be95c7c79ee48fe8ba8534ceb7ccf9a9ea68b1ad788ae9d4
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1040\license.rtf
                  • Size 11KB
                  • SHA256 70ecf23c03b66a2b18e173332586afa8f00f91e02a80628f4f9cb2521e27f6ac
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1040\thm.wxl
                  • Size 3KB
                  • SHA256 0c57f40cc2091554307aa8a7c35dd38e4596e9513e9efae00ac30498ef4e9bc2
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1041\license.rtf
                  • Size 29KB
                  • SHA256 c3061a334bfd5f02b7085f8f454d5d3d97d477af14bab497bf31a7887bc90c5b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1041\thm.wxl
                  • Size 3KB
                  • SHA256 6b9bbf90d75cfa7d943f036c01602945fe2fa786c6173e22acb7afe18375c7ea
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1042\license.rtf
                  • Size 27KB
                  • SHA256 3d4e9c165cbeab829d608106f0e96450f839ffa8adbd755f0b51867e89da2ae0
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1042\thm.wxl
                  • Size 3KB
                  • SHA256 ad7608b87a7135f408abf54a897a0f0920080f76013314b00d301d6264ae90b2
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1045\license.rtf
                  • Size 13KB
                  • SHA256 6f94a99072061012c5626a6dd069809ec841d6e3102b48394d522a0c2e3aa2b5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1045\thm.wxl
                  • Size 3KB
                  • SHA256 440b309fcdf61ffc03b269fe3815c60cb52c6ae3fc6acad14eac04d057b6d6ea
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1046\license.rtf
                  • Size 10KB
                  • SHA256 27891eec899be859e3b4d3b29247fc6b535d7e836def0329111c48741ec6e701
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1046\thm.wxl
                  • Size 3KB
                  • SHA256 f52b54a0e0d0e8f12cba9823d88e9fd6822b669074dd1dc69dad6553f7cb8913
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1049\license.rtf
                  • Size 31KB
                  • SHA256 1bb3fb55b8a13fa3bafffe72f5b1ed8b57a63bd4d8654bb6dc5b9011ce803b44
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1049\thm.wxl
                  • Size 4KB
                  • SHA256 7333bc8e52548821d82b53dbd7d7c4aa1703c85155480cb83cefd78380c95661
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1055\license.rtf
                  • Size 13KB
                  • SHA256 f80926604e503697247353f56856b31de0b3fc1319f1c94068363952549cc9b1
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\1055\thm.wxl
                  • Size 3KB
                  • SHA256 e5abe3cb3bf84207dac4e6f5bba1e693341d01aea076dd2d91eaa21c6a6cb925
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\2052\license.rtf
                  • Size 17KB
                  • SHA256 a808b4933ce3b3e0893504dbef43ebf90b8b567f94bd6481b6315ed9141e1b11
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\2052\thm.wxl
                  • Size 2KB
                  • SHA256 2ac8b7c19a5189662de36a0581c90dbad96df259ec00a28f609b644c3f39f9ca
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\3082\license.rtf
                  • Size 10KB
                  • SHA256 abc11bb2b04dff6afe2d4d4f40d95a7d62e5af352928af90daa3dade58dd59bd
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.wxl
                  • Path C:\Windows\Temp\{E0E5B314-DBB3-42A6-8F0C-5B602BC17DA7}\.ba\3082\thm.wxl
                  • Size 3KB
                  • SHA256 9cbb2b312c100b309a1b1495e84e2228b937612885f7a642fbbd67969b632c3a
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  VC_redist.x64.exe
                  • Path C:\Windows\Temp\{F3C29D43-326E-4F8E-96EE-78BB1A49AC7D}\.be\VC_redist.x64.exe
                  • Size 635KB
                  • SHA256 8cd998a0318f07a27f78b75edb19479f44273590e300629eff237d47643c496c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  license.rtf
                  • Path C:\Windows\Temp\{FA1BB919-981F-4D45-BE77-7AD6BC4A48F7}\.ba\license.rtf
                  • Size 9KB
                  • SHA256 8099dc3cf9502c335da829e5c755948a12e3e6de490eb492a99deb673d883d8b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  thm.xml
                  • Path C:\Windows\Temp\{FA1BB919-981F-4D45-BE77-7AD6BC4A48F7}\.ba\thm.xml
                  • Size 8KB
                  • SHA256 f13bae0ec08c91b4a315bb2d86ee48fade597e7a5440dce6f751f98a3a4d6916
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  memory/444-1112-0x00000000000F0000-0x0000000000167000-memory.dmp
                  Download

                  memory/716-1110-0x00000000000F0000-0x0000000000167000-memory.dmp
                  Download

                  memory/904-1113-0x00000000000F0000-0x0000000000167000-memory.dmp
                  Download

                  memory/1884-534-0x0000000000C00000-0x0000000000C65000-memory.dmp
                  Download

                  memory/2200-887-0x0000000000500000-0x0000000000565000-memory.dmp
                  Download

                  memory/2392-886-0x0000000000500000-0x0000000000565000-memory.dmp
                  Download

                  memory/2688-1334-0x0000000000AC0000-0x0000000000B37000-memory.dmp
                  Download

                  memory/2940-4792-0x0000000000E20000-0x0000000000EF4000-memory.dmp
                  Download

                  memory/2940-4790-0x0000000000E20000-0x0000000000EF4000-memory.dmp
                  Download

                  memory/2940-4755-0x000000000CB40000-0x000000000CE22000-memory.dmp
                  Download

                  memory/2940-4749-0x00007FF619850000-0x00007FF61CC7E000-memory.dmp
                  Download

                  memory/2940-4752-0x0000000000E20000-0x0000000000EF4000-memory.dmp
                  Download

                  memory/2940-4753-0x0000000000F70000-0x0000000000F71000-memory.dmp
                  Download

                  memory/2940-4756-0x000000000CE30000-0x000000000D09B000-memory.dmp
                  Download

                  memory/3428-1335-0x0000000000AC0000-0x0000000000B37000-memory.dmp
                  Download

                  memory/4088-5055-0x000000000EED0000-0x000000000F13B000-memory.dmp
                  Download

                  memory/4088-5052-0x00007FF619850000-0x00007FF61CC7E000-memory.dmp
                  Download

                  memory/4088-5054-0x000000000EBE0000-0x000000000EEC2000-memory.dmp
                  Download

                  memory/4088-5061-0x0000000001740000-0x00000000018F3000-memory.dmp
                  Download

                  memory/4088-5066-0x000000000FA30000-0x000000000FFBB000-memory.dmp
                  Download

                  memory/4088-5090-0x0000000001740000-0x00000000018F3000-memory.dmp
                  Download

                  memory/4088-5092-0x0000000001740000-0x00000000018F3000-memory.dmp
                  Download

                  memory/4144-1332-0x0000000000AC0000-0x0000000000B37000-memory.dmp
                  Download

                  memory/4880-535-0x0000000000C00000-0x0000000000C65000-memory.dmp
                  Download