Overview

overview

6

Static

static

1

RSMB5AE-5....er.exe

windows10-2004-x64

4

RSMB5AE-5....er.exe

windows11-ltsc_2024-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    147s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    06/08/2026, 22:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    RSMB5AE-5.1.8-windows-installer.exe
  • Size 23.9MB
  • Sample260806-143f2abl6s
  • SHA256 03ece48cb2bb27030db490ea58f36a45bfde4ed7994d24aaaeb561393cfdc542
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoverypersistenceransomwaretrojan

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 18 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\RSMB5AE-5.1.8-windows-installer.exe
    "C:\Users\Admin\AppData\Local\Temp\RSMB5AE-5.1.8-windows-installer.exe"
    1⤵
    • Drops file in Program Files directory
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    • Checks processor information in registry
    • Suspicious use of WriteProcessMemory
    PID:3572
    • C:\PROGRA~1\REVISI~1\RSMB5AE\REVISI~1.EXE
      "C:\PROGRA~1\REVISI~1\RSMB5AE\REVISI~1.EXE" RSMB5AE
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:6124
    • C:\PROGRA~1\REVISI~1\RSMB5AE\VCREDI~1.EXE
      "C:\PROGRA~1\REVISI~1\RSMB5AE\VCREDI~1.EXE" /install /passive /norestart
      2⤵
      • Adds Run key to start application
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:772
      • C:\PROGRA~1\REVISI~1\RSMB5AE\VCREDI~1.EXE
        "C:\PROGRA~1\REVISI~1\RSMB5AE\VCREDI~1.EXE" /install /passive /norestart -burn.unelevated BurnPipe.{C7046AF1-0B3A-4FF0-B4FE-98CAEF4FFABD} {8A72C7D8-E8F6-4936-893A-9C199D72026C} 772
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        PID:2000
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Checks SCSI registry key(s)
    • Suspicious use of AdjustPrivilegeToken
    PID:5520
  • C:\Windows\system32\srtasks.exe
    C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
    1⤵
      PID:4312
    • C:\ProgramData\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe
      "C:\ProgramData\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe" /burn.runonce
      1⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4580
      • C:\ProgramData\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe
        "C:\ProgramData\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe"
        2⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4140
        • C:\ProgramData\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe
          "C:\ProgramData\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe" -burn.unelevated BurnPipe.{E6A5E3DF-05D3-4E88-8734-5265C71C4764} {357B7102-8484-4B32-B043-9A90AAB4FEC0} 4140
          3⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:5000

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          RSMBProVectorInput_64.aex
          • Path C:\Program Files\Adobe\Common\Plug-ins\7.0\MediaCore\RSMB5AE\RSMBProVectorInput_64.aex
          • Size 3.8MB
          • SHA256 4ad3abbcd848481ef8f7a739f226b512b5c30a5c06a1377de6f3b5eeb2b4f9c6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RSMBPro_64.aex
          • Path C:\Program Files\Adobe\Common\Plug-ins\7.0\MediaCore\RSMB5AE\RSMBPro_64.aex
          • Size 4.0MB
          • SHA256 a0e417229bfd6b4e1b6844dba6b7a5a64afeb93e525a2bfd554174db04593a7e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RSMB_64.aex
          • Path C:\Program Files\Adobe\Common\Plug-ins\7.0\MediaCore\RSMB5AE\RSMB_64.aex
          • Size 3.8MB
          • SHA256 e2a7a80756139d2ed6347d7a3d9fb9942e65adaaa200b111df9316c2a7f588fa
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          REVisionCheckUpdates.bat
          • Path C:\Program Files\REVisionEffects\REVisionCheckUpdates.bat
          • Size 377B
          • SHA256 c78bf5d105a79ecc6442791e4e8982efe7ea26d59a688936233f59a9125eb9ed
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          REVisionUpdater.exe
          • Path C:\Program Files\REVisionEffects\RSMB5AE\.updater\REVisionUpdater.exe
          • Size 8.2MB
          • SHA256 270a0708d6e2954a600b04e16a2c32ece20d88e11d0dd8a7f16e5b906e894332
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          REVisionLicenseInstaller.exe
          • Path C:\Program Files\REVisionEffects\RSMB5AE\REVisionLicenseInstaller.exe
          • Size 239KB
          • SHA256 f7ce49a4bf6a3c90486f677689cf6978aa8a6a829ed65475252effa2ef87e8f3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AEMaskSetup.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\AEMaskSetup.gif
          • Size 144KB
          • SHA256 abb0e2dd6bff31ff6642887136e14c1c2e6c284a6011bc24de21a7f7b875070d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AEMaskTIme2.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\AEMaskTIme2.gif
          • Size 80KB
          • SHA256 9313340725e92b3be92b2cd460c696d278bcfcee53365358ef496df1b6a61960
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AEMaskTime1.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\AEMaskTime1.gif
          • Size 78KB
          • SHA256 ac426c7c57a352509c1f041a08c0d0d1d86c59878cf741a2c32da0e89ee4ddd3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CatStillWithMotionBlur.mov
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\CatStillWithMotionBlur.mov
          • Size 77KB
          • SHA256 275e6df6dff597ab8ebc48f701b37d68e2a6cb9ed892e329431b1bbb0ea56cc3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CatWiggle.mov
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\CatWiggle.mov
          • Size 414KB
          • SHA256 f958ba9e91cb102b2bcfd8e3ae1de511dc815c77711d9a8f1c0658ea41335894
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CatWiggleWIthMotionBlur.mov
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\CatWiggleWIthMotionBlur.mov
          • Size 95KB
          • SHA256 07d7cb3b3fe41652b74d8777a5b53c96d25431412adbf83cf3006caec7996ee5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CombPerSplineLayerSetting.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\CombPerSplineLayerSetting.gif
          • Size 81KB
          • SHA256 5d6c6dddbaca1e725272154246747a27c20bd7d58b8783e9775e89b5638f08a7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CombPolyControls.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\CombPolyControls.gif
          • Size 55KB
          • SHA256 c268cdf186e72addda421bec01bb898cf6f8c6b470a1b3aa9570d6c80104756c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CombSplineSetUp.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\CombSplineSetUp.gif
          • Size 94KB
          • SHA256 06339bf85d0957f6014100b7fdb40b9329f8af6d373410969719b9115127d7bd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CombSplineTime0.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\CombSplineTime0.gif
          • Size 80KB
          • SHA256 a48109af2e4c03ccdd47ab0af9d7d3287cbf3e782e3cd8ef0a1b14ec58195f9b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CombSplineTime1.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\CombSplineTime1.gif
          • Size 79KB
          • SHA256 3878c0ad4a70704a09ac2ac33271c9f6fc4e963a1973562c90d248e4f3482821
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CombustionToolbar.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\CombustionToolbar.gif
          • Size 12KB
          • SHA256 fcfe12f8cb66f1cdc633d6fb0fe4ccf7a18ad6ee1161edc499b5bfd92dd0e0a8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          LennyWithBadVectors.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\LennyWithBadVectors.gif
          • Size 6KB
          • SHA256 cb8f6c79edc484da09646d1a3f79a521b1bf5a5880fd2ffbb469f9509573fffd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          LennyWithGoodVectors.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\LennyWithGoodVectors.gif
          • Size 7KB
          • SHA256 aa7efbca1edcb503ed1e3f1fa8ffcf4b91e663fc78d612967252e4201c06496d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MaskMenus.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\MaskMenus.gif
          • Size 119KB
          • SHA256 ebd210d9ae553238c0f9df153851ba28469d9345239b36487deb9ae3cc92231c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MotionSrcBlurredBad.jpg
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\MotionSrcBlurredBad.jpg
          • Size 4KB
          • SHA256 6aa2d06b6b575a73c2d40e985be5ce28f673cff24673f94295d84c6d64c4a922
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MotionSrcBlurredGood.jpg
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\MotionSrcBlurredGood.jpg
          • Size 3KB
          • SHA256 ec561c6ab7d964c2e8e681249274de4af6a4f70d7de8ce68d0f14b9ae94684f5
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          MotionSrcEnhanced.jpg
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\MotionSrcEnhanced.jpg
          • Size 9KB
          • SHA256 983e0dfb483f29cf5c8d1e4f43e9e25fabdaa09886c631939878b9283f637d79
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MotionSrcOrig.jpg
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\MotionSrcOrig.jpg
          • Size 5KB
          • SHA256 f7ce0054aad3aac8657d8a5fd13d4d19ce4cd94f59ce2d637cf87f3497c13a43
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MotionVectors.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\MotionVectors.gif
          • Size 5KB
          • SHA256 a290de53a7d624ca282e1d8b58584d318d3c19ba51d203edb54f3b4569d10f37
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MotionVectorsWithAlpha.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\MotionVectorsWithAlpha.gif
          • Size 6KB
          • SHA256 1469290f748d9771125a5486e8755fbe93f08bd021f6f60d591c92c0d49b2b68
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RSMBProUsersManAE.htm
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\RSMBProUsersManAE.htm
          • Size 7KB
          • SHA256 8568191f770401adc505daf7a5d92808e942ccf32b8ad745a5eb6afa3dc1a2db
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RSMBProUsersManComb.htm
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\RSMBProUsersManComb.htm
          • Size 10KB
          • SHA256 0798c8688d54abf58ec9334c1136c6462fda38b49149f33d34e61880c06c36c4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TrackPoints.mov
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\TrackPoints.mov
          • Size 46KB
          • SHA256 1393f3e9336f7abba26d7c62abf7939eaec2470bc6c1d0a3bcb4c43be3f8dfc7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TrackPointsBadBlur.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\TrackPointsBadBlur.gif
          • Size 67KB
          • SHA256 d581cf8351394438b6bedf89047b7746ecafedb30d2e2e46964355f24f6dab26
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TrackPointsGoodBlur.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\TrackPointsGoodBlur.gif
          • Size 66KB
          • SHA256 70bddf05cd6f7984a0bc6b621ca328c396352965887ff5df86d313e03dae7337
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TrackPointsSrc1.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\TrackPointsSrc1.gif
          • Size 79KB
          • SHA256 27162efc8ca277e7a4a7461774f88b457609c51824918391fecc4c7f201ccd22
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TrackPointsSrc2.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\TrackPointsSrc2.gif
          • Size 81KB
          • SHA256 6fbddec91721e0759f6241458452609bd95f0b590eac0f0bdadfea14137090c1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TrackPointsWithPoints1.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\TrackPointsWithPoints1.gif
          • Size 78KB
          • SHA256 8971af35eaaa16c253e006f3034131a9e9b53c0ea4432d67a2400446713a82ea
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TrackPointsWithPoints2.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\TrackPointsWithPoints2.gif
          • Size 79KB
          • SHA256 9f14a8db753d5573a50281c4b21227fb15635d3cce776e05760154b2a60cf8c6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          alpha.jpg
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\alpha.jpg
          • Size 4KB
          • SHA256 7f093cc0afc7cb3012077bc0edf4d9eebda34d4194925bcebe633c476db381bc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          backNoChoke.jpg
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\backNoChoke.jpg
          • Size 12KB
          • SHA256 48d48d6be5de4cd1b80a7daa5fc669ccbe371a3317fda08cc6d01c531037dd1c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          backWithChoke.jpg
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\backWithChoke.jpg
          • Size 12KB
          • SHA256 1b4fab41f7319d573c7d3ebc54330f21afd0b690603d3355e9e09f301e063b13
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          combscrubcontrol.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\combscrubcontrol.gif
          • Size 2KB
          • SHA256 9323df1050c204268e39226d101b367f5db8d338f845bd62e3525798878e9736
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          combusesettings.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\combusesettings.gif
          • Size 21KB
          • SHA256 fed8065d2385a7343e77ca49bd858b7c3a466d80a3c391c747070d6f5b566083
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fillInBG.jpg
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\fillInBG.jpg
          • Size 4KB
          • SHA256 7bf0951bcad8b65e557e82ab99d0abfc6476c708e4d54719ca8870413633bab9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          hand.jpg
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\hand.jpg
          • Size 5KB
          • SHA256 4b968e7c36e64e1f91d85ceedbeb96c5c3a915beac3df688356169641a827c22
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          layers.jpg
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\layers.jpg
          • Size 28KB
          • SHA256 2afdb0b56b8304e805b30880545d715643c80fb4ba33802db672a8837a8baaf8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          lenny.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\lenny.gif
          • Size 3KB
          • SHA256 a89fe3b0c7a65a6e9b03c82dca4e14a8dd9bb39fd96937d74f186f62eafcbb97
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          matchvertices2.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\matchvertices2.gif
          • Size 1KB
          • SHA256 2bdcc9dbb955e228ba95e90e2ed710d95af39e735f3e3eb4a3e38c9c624ac541
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          nolayers.jpg
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\nolayers.jpg
          • Size 28KB
          • SHA256 a7b2ff7e0faac5d2231c3b8e1a207f8e8c4f8de8f73fa91b8c724220bcfbae32
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          source.jpg
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\source.jpg
          • Size 13KB
          • SHA256 2558b4966f9f107febe4fc9c07e4da9d66e22a92a7f2b7063d0b820a88dfdc16
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          trackPointMenu.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\trackPointMenu.gif
          • Size 12KB
          • SHA256 3152dff7a6559f4e13c05e2d735a12ed8b90f55a9fc6942ec05c42e1b075777d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          twixorAEmasks2.gif
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\MotionBlurReadMePix\twixorAEmasks2.gif
          • Size 40KB
          • SHA256 899affcf5f85b2c31673862d5b472a02f43b67c586b4a75efd7304802e1730b9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RSMBProUsersManual.htm
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\RSMBProUsersManual.htm
          • Size 33KB
          • SHA256 6d86174c47cfba60809f6827ac377b01397614ddda3f3539a26b0e7f94de2834
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RSMBProVector.htm
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\RSMBProVector.htm
          • Size 10KB
          • SHA256 380859fc25697fb2ebaeaef2e205019cec75255b24be5e859c6110b4a936959a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RSMBUsersManual.htm
          • Path C:\Program Files\REVisionEffects\RSMB5AE\RSMB5AEManual\RSMBUsersManual.htm
          • Size 23KB
          • SHA256 c391fb2fe02617da4ecca76d6ff7af030a8bf226eac69062c1d58ee45ead2032
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          uninstbr.000
          • Path C:\Program Files\REVisionEffects\RSMB5AE\uninstall\uninstbr.000
          • Size 5.1MB
          • SHA256 1036edd419dd0b731d8832d48218dd54baf50b6cb6cc5e20ef39d2c38b9c8519
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vcredist_x64.exe
          • Path C:\Program Files\REVisionEffects\RSMB5AE\vcredist_x64.exe
          • Size 6.9MB
          • SHA256 e554425243e3e8ca1cd5fe550db41e6fa58a007c74fad400274b128452f38fb8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          state.rsm
          • Path C:\ProgramData\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\state.rsm
          • Size 666B
          • SHA256 4e414fe3bd0b2c562ed6e9c987597f75cc18816b3f675ecd27e6593436540229
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          BRAC92.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\BRAC92.tmp
          • Size 43KB
          • SHA256 ca4f71aaaa2fc292a1cb4d7dfe2bdf260a6475eba6982239fc40799fd76a28d4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BRAD10.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\BRAD10.tmp
          • Size 403KB
          • SHA256 65b32ea2982078fb9a18e88feec238cb76ed2ae6c2bb4ddb0f6a9c4f57b1d62b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BRADCC.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\BRADCC.tmp
          • Size 35KB
          • SHA256 78827e2b1ef0aad4f8b1b42d0964064819aa22bfcd537ebaacb30d817edc06d8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BRAE1B.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\BRAE1B.tmp
          • Size 121KB
          • SHA256 ee41ad6c74b2f09a9c19ca6bb0fe239f107b96bba8b6242b7a2a76e648ac24b3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BRAEA9.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\BRAEA9.tmp
          • Size 400KB
          • SHA256 eef69d005bf1c0b715c8d6205400d4755c261dd38ddfbbfe918e6ee91f21f1f0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BRAF56.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\BRAF56.tmp
          • Size 72KB
          • SHA256 5ddee4aab3cf33e505f52199d64809125b26de04fb9970ca589cd8619c859d80
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BRB10C.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\BRB10C.tmp
          • Size 74KB
          • SHA256 41788435f245133ec5511111e2c5d52f7515e359876180067e0b5ba85c729322
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BRB11D.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\BRB11D.tmp
          • Size 102KB
          • SHA256 ea9cbd7e1812e2d1d805e3e7d7412267474c7ad4751cce5fce8d415ceda7319f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BRB16C.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\BRB16C.tmp
          • Size 24KB
          • SHA256 e69a9d06f2c17cc021ebf9b62ca110548facdc147b67dea4846e09865043d2d9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BRB17D.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\BRB17D.tmp
          • Size 24KB
          • SHA256 27ea1b57a3024aec4a03188e80fdb2aa301fa5179c19be9c8b0dfc2aac73a114
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BRB19D.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\BRB19D.tmp
          • Size 100KB
          • SHA256 c71a16b1056e522cd0365449448116d06f37a3273d77694d170340064511dd25
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BRB1BD.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\BRB1BD.tmp
          • Size 56KB
          • SHA256 59182f092b59a3005ada6b2f2855c7e860e53e8adf6e41cd8cd515578ae7815a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          logo.png
          • Path C:\Users\Admin\AppData\Local\Temp\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\.ba1\logo.png
          • Size 1KB
          • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          wixstdba.dll
          • Path C:\Users\Admin\AppData\Local\Temp\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\.ba1\wixstdba.dll
          • Size 117KB
          • SHA256 e7c8e7edd9112137895820e789baaaeca41626b01fb99fede82968ddb66d02cf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vcredist_x64.exe
          • Path C:\Users\Admin\AppData\Local\Temp\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\.be\vcredist_x64.exe
          • Size 450KB
          • SHA256 18e6d3d96fcd39ba069c0e6ebc108881ec5bb07e29a24b0177688ce391dac526
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          memory/3572-681-0x0000000066C00000-0x0000000066C14000-memory.dmp
          Download

          memory/3572-83-0x0000000000F20000-0x0000000000F39000-memory.dmp
          Download

          memory/3572-99-0x00000000710C0000-0x00000000710DF000-memory.dmp
          Download

          memory/3572-33-0x0000000002DD0000-0x0000000002E35000-memory.dmp
          Download

          memory/3572-677-0x0000000000740000-0x00000000009FE000-memory.dmp
          Download

          memory/3572-98-0x0000000066680000-0x000000006668E000-memory.dmp
          Download

          memory/3572-96-0x0000000000740000-0x00000000009FE000-memory.dmp
          Download

          memory/3572-101-0x0000000067E00000-0x0000000067E1B000-memory.dmp
          Download

          memory/3572-762-0x0000000000740000-0x00000000009FE000-memory.dmp
          Download

          memory/3572-766-0x0000000066C00000-0x0000000066C14000-memory.dmp
          Download

          memory/3572-93-0x0000000002BE0000-0x0000000002BEE000-memory.dmp
          Download

          memory/3572-100-0x0000000066C00000-0x0000000066C14000-memory.dmp
          Download

          memory/3572-97-0x0000000075040000-0x000000007504E000-memory.dmp
          Download

          memory/3572-126-0x0000000066C00000-0x0000000066C14000-memory.dmp
          Download

          memory/3572-122-0x0000000000740000-0x00000000009FE000-memory.dmp
          Download