Overview

overview

6

Static

static

1

VEGAS_Pro_...8D.exe

windows10-2004-x64

6

VEGAS_Pro_...8D.exe

windows11-ltsc_2024-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    446s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    18/08/2026, 04:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    VEGAS_Pro_23.0.0.356_x64_DLV_DE-EN-FR-ES_251212_18-29_6E6EC08D.exe
  • Size 652.3MB
  • Sample260818-e1pvwawcnd
  • SHA256 1001b1deb76eb76a59ebe030e7da529695ea90f6659c0f9c79aaf850b1ff7f77
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoverypersistenceprivilege_escalationransomware

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 6 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 64 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks computer location settings 2 TTPs 5 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in System32 directory 64 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 25 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 5 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 42 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 43 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 32 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 51 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\VEGAS_Pro_23.0.0.356_x64_DLV_DE-EN-FR-ES_251212_18-29_6E6EC08D.exe
    "C:\Users\Admin\AppData\Local\Temp\VEGAS_Pro_23.0.0.356_x64_DLV_DE-EN-FR-ES_251212_18-29_6E6EC08D.exe"
    1⤵
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1100
    • C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\product\VEGAS_Pro_23_setup.exe
      "C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\product\VEGAS_Pro_23_setup.exe" -m C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\SetupValues.dat
      2⤵
      • Enumerates connected drives
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2740
      • C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2013_12.0.40664\vcredist_x86.exe
        "C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2013_12.0.40664\vcredist_x86.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\001#Install#vcredist2013_12_0_40664_x86.txt"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4932
        • C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2013_12.0.40664\vcredist_x86.exe
          "C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2013_12.0.40664\vcredist_x86.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\001#Install#vcredist2013_12_0_40664_x86.txt" -burn.unelevated BurnPipe.{073BEDB9-83AB-430E-937F-9BD8EE3F994C} {6AEF86C1-D66A-40E2-89A8-028D288E3036} 4932
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:372
      • C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2013_12.0.40664\vcredist_x64.exe
        "C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2013_12.0.40664\vcredist_x64.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\002#Install#vcredist2013_12_0_40664_x64.txt"
        3⤵
        • Adds Run key to start application
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4416
        • C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2013_12.0.40664\vcredist_x64.exe
          "C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2013_12.0.40664\vcredist_x64.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\002#Install#vcredist2013_12_0_40664_x64.txt" -burn.unelevated BurnPipe.{A3B61CEA-D700-4A8E-A5B3-BB50406B3407} {D638072D-D77A-4119-8F58-57EFE84BA34D} 4416
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:4640
          • C:\Windows\SysWOW64\WerFault.exe
            C:\Windows\SysWOW64\WerFault.exe -u -p 4640 -s 1028
            5⤵
            • Program crash
            PID:2064
      • C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2022-2015_14.40.33810\VC_redist.x86.exe
        "C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2022-2015_14.40.33810\VC_redist.x86.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\003#Install#vcredist2022_2015_14_40_33810_x86.txt"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2172
        • C:\Windows\Temp\{F1897225-BDC2-49AC-9913-D683325B0606}\.cr\VC_redist.x86.exe
          "C:\Windows\Temp\{F1897225-BDC2-49AC-9913-D683325B0606}\.cr\VC_redist.x86.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2022-2015_14.40.33810\VC_redist.x86.exe" -burn.filehandle.attached=548 -burn.filehandle.self=648 /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\003#Install#vcredist2022_2015_14_40_33810_x86.txt"
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:520
          • C:\Windows\Temp\{AE6F5C53-E90C-4DD3-9E66-E0C3DD3213C5}\.be\VC_redist.x86.exe
            "C:\Windows\Temp\{AE6F5C53-E90C-4DD3-9E66-E0C3DD3213C5}\.be\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{50E0DC43-4174-406A-9F10-16F5CE989C5F} {3A2D014A-F930-4601-9DCC-E5C6B089DC9A} 520
            5⤵
            • Adds Run key to start application
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:4432
          • C:\Windows\SysWOW64\WerFault.exe
            C:\Windows\SysWOW64\WerFault.exe -u -p 520 -s 1572
            5⤵
            • Program crash
            PID:3940
      • C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2022-2015_14.40.33810\VC_redist.x64.exe
        "C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2022-2015_14.40.33810\VC_redist.x64.exe" /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\004#Install#vcredist2022_2015_14_40_33810_x64.txt"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1788
        • C:\Windows\Temp\{EB2724A1-7E8C-46B8-9E99-97AAFB4FC86A}\.cr\VC_redist.x64.exe
          "C:\Windows\Temp\{EB2724A1-7E8C-46B8-9E99-97AAFB4FC86A}\.cr\VC_redist.x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2022-2015_14.40.33810\VC_redist.x64.exe" -burn.filehandle.attached=688 -burn.filehandle.self=692 /quiet /norestart /l "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\004#Install#vcredist2022_2015_14_40_33810_x64.txt"
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:3040
          • C:\Windows\Temp\{07DB9238-BBCA-404D-86D7-0EE161BDAB49}\.be\VC_redist.x64.exe
            "C:\Windows\Temp\{07DB9238-BBCA-404D-86D7-0EE161BDAB49}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{64F77FBF-B466-4F0E-9595-560B3401B179} {3BF2CD84-A22C-4BE0-89F4-39F526BA1493} 3040
            5⤵
            • Adds Run key to start application
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:1504
          • C:\Windows\SysWOW64\WerFault.exe
            C:\Windows\SysWOW64\WerFault.exe -u -p 3040 -s 1528
            5⤵
            • Program crash
            PID:3008
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4984
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 977914CE67A04CDEEA156CE4CD9374FB
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:4172
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 8CE981E9F2BBE1AF1892A8D48E413082 E Global\MSI0000
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4896
      • C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe
        "C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe" /register /user 1085
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies data under HKEY_USERS
        PID:4760
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\mchammer_x64.dll"
        3⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2028
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\mchammer_x64.dll"
          4⤵
          • Loads dropped DLL
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:4808
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sffrgpnv_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2296
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sffrgpnv_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:2384
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack1_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3996
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack1_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:1268
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack2_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:5052
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack2_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:2984
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack3_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3220
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack3_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:4880
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sftrkfx1_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2260
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sftrkfx1_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:4628
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfresfilter_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4604
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfresfilter_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:1852
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx1_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:460
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx1_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:736
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx2_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:388
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx2_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:3560
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx3_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2068
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx3_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:5012
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\xpvinyl_x64.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3468
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\xpvinyl_x64.dll"
          4⤵
          • Modifies data under HKEY_USERS
          • Modifies registry class
          PID:772
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files\VEGAS\VEGAS Pro 23.0\sfvstwrap.dll"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1684
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files\VEGAS\VEGAS Pro 23.0\sfvstwrap.dll"
          4⤵
          • Modifies data under HKEY_USERS
          PID:3284
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding CCE293D25426B6726BBD912201CBF2A3
      2⤵
      • System Location Discovery: System Language Discovery
      PID:2716
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 28A177D8523F476DCDDEC038F10372E1 E Global\MSI0000
      2⤵
      • System Location Discovery: System Language Discovery
      PID:2036
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Checks SCSI registry key(s)
    • Suspicious use of AdjustPrivilegeToken
    PID:1308
  • C:\Windows\system32\srtasks.exe
    C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
    1⤵
      PID:1300
    • C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe
      "C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe" /burn.runonce
      1⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4220
      • C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe
        "C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\002#Install#vcredist2013_12_0_40664_x64.txt"
        2⤵
        • Adds Run key to start application
        • Drops file in System32 directory
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2556
        • C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe
          "C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\002#Install#vcredist2013_12_0_40664_x64.txt" -burn.unelevated BurnPipe.{25EC2126-D501-489F-86D0-DFEC9E868718} {02C83175-04F0-408F-A9E0-7586F979CEBA} 2556
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:5084
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4640 -ip 4640
      1⤵
        PID:764
      • C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe
        "C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" /burn.runonce
        1⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2620
        • C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe
          "C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\003#Install#vcredist2022_2015_14_40_33810_x86.txt"
          2⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:980
          • C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe
            "C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" -burn.clean.room="C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" -burn.filehandle.attached=516 -burn.filehandle.self=536 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\003#Install#vcredist2022_2015_14_40_33810_x86.txt"
            3⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:2604
            • C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe
              "C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{0E65ED22-A8D3-4320-8A26-2ABF3B963623} {EEA6DB44-B9D1-4855-8B9E-9D2E12BE4042} 2604
              4⤵
              • Adds Run key to start application
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:3920
              • C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
                "C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={47109d57-d746-4f8b-9618-ed6a17cc922b} -burn.filehandle.self=976 -burn.embedded BurnPipe.{01CAF8B0-FF93-42A9-BF31-084EDEA2AED3} {470BEB45-4D8C-4304-B011-57EFF7E1FDF0} 3920
                5⤵
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:1764
                • C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
                  "C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -burn.clean.room="C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -burn.filehandle.attached=516 -burn.filehandle.self=536 -uninstall -quiet -burn.related.upgrade -burn.ancestors={47109d57-d746-4f8b-9618-ed6a17cc922b} -burn.filehandle.self=976 -burn.embedded BurnPipe.{01CAF8B0-FF93-42A9-BF31-084EDEA2AED3} {470BEB45-4D8C-4304-B011-57EFF7E1FDF0} 3920
                  6⤵
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of WriteProcessMemory
                  PID:3796
                  • C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
                    "C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{E81B3029-9B02-4A7C-B0E8-A3C634D612A0} {DDBA2D33-EEA6-40D5-A2E7-74FA5649957F} 3796
                    7⤵
                    • System Location Discovery: System Language Discovery
                    PID:2848
            • C:\Windows\SysWOW64\WerFault.exe
              C:\Windows\SysWOW64\WerFault.exe -u -p 2604 -s 1528
              4⤵
              • Program crash
              PID:4648
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 520 -ip 520
        1⤵
          PID:4020
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 2604 -ip 2604
          1⤵
            PID:4420
          • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
            "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" /burn.runonce
            1⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:3120
            • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
              "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\004#Install#vcredist2022_2015_14_40_33810_x64.txt"
              2⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:3356
              • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
                "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" -burn.filehandle.attached=516 -burn.filehandle.self=536 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\004#Install#vcredist2022_2015_14_40_33810_x64.txt"
                3⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:3480
                • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
                  "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{1569A8B8-6DFE-4390-9CCF-48D11C546D75} {B2C31098-BC76-4954-ADE6-30FD486B5F54} 3480
                  4⤵
                  • Adds Run key to start application
                  • Enumerates connected drives
                  • Executes dropped EXE
                  • System Location Discovery: System Language Discovery
                  PID:556
                • C:\Windows\SysWOW64\WerFault.exe
                  C:\Windows\SysWOW64\WerFault.exe -u -p 3480 -s 1540
                  4⤵
                  • Program crash
                  PID:5116
          • C:\Windows\SysWOW64\WerFault.exe
            C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 3040 -ip 3040
            1⤵
              PID:772
            • C:\Windows\SysWOW64\WerFault.exe
              C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 3480 -ip 3480
              1⤵
                PID:3524
              • C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe
                "C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe"
                1⤵
                • Executes dropped EXE
                PID:2044
              • C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe
                "C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe"
                1⤵
                • Executes dropped EXE
                PID:4616

              Network

                    MITRE ATT&CK Enterprise v16

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    e5989ab.rbs
                    • Path C:\Config.Msi\e5989ab.rbs
                    • Size 18KB
                    • SHA256 388aa47f0c41eba63e0f82c9fea4970cd06f4fd51ad7f8e34dd25ea41e7037bb
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    e5989b4.rbs
                    • Path C:\Config.Msi\e5989b4.rbs
                    • Size 14KB
                    • SHA256 3f974fcb90a303dd27b72c46b159bae205971ff58cf06e5df394d6653633d485
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    e5989b5.rbf
                    • Path C:\Config.Msi\e5989b5.rbf
                    • Size 644KB
                    • SHA256 92faedd18a29e1bd2dd27a1d805ea5aa3e73b954a625af45a74f49d49506d20f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    e5989b6.rbf
                    • Path C:\Config.Msi\e5989b6.rbf
                    • Size 940KB
                    • SHA256 d28c7ab34842b6149609bd4e6b566ddab8b891f0d5062480a253ef20a6a2caaa
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    e5989b7.rbf
                    • Path C:\Config.Msi\e5989b7.rbf
                    • Size 470KB
                    • SHA256 88a5ed51a7be4ff7ebded0c107fafda6ace3801877216c0bb6cbb458ae054a7b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    e5989b8.rbf
                    • Path C:\Config.Msi\e5989b8.rbf
                    • Size 348KB
                    • SHA256 1b296bd172332d3b2253bdcb6ecac46afef883f75c13c361632ff40fec743fcc
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    e5989b9.rbf
                    • Path C:\Config.Msi\e5989b9.rbf
                    • Size 134KB
                    • SHA256 22d14e004ba4b78a9143257399dc40ef4d0e8f2cdb9127e1ba2638f54cce5c70
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    e5989ba.rbf
                    • Path C:\Config.Msi\e5989ba.rbf
                    • Size 3B
                    • SHA256 13bf7b3039c63bf5a50491fa3cfd8eb4e699d1ba1436315aef9cbe5711530354
                    • MD5 SHA1 SHA512
                    Submit Download

                    e5989c3.rbs
                    • Path C:\Config.Msi\e5989c3.rbs
                    • Size 16KB
                    • SHA256 548f68eaa533642e58795bc663f1d471cf51c5c1a19165a07e395453bd2105fb
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    e5989c8.rbs
                    • Path C:\Config.Msi\e5989c8.rbs
                    • Size 18KB
                    • SHA256 96065aaec86731429b3e789b3f1ed8f3439ce990ae97c8d88df99773f65247e7
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    e5989d3.rbs
                    • Path C:\Config.Msi\e5989d3.rbs
                    • Size 27KB
                    • SHA256 db4727fe6e3dc2c23c51dfeedde944ebdfa4cd197a64ac163f86bc50b1d10dc1
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    e5989ea.rbs
                    • Path C:\Config.Msi\e5989ea.rbs
                    • Size 20KB
                    • SHA256 0c1d4f24ea05e15bf4e15499c13ea4148de9663bca09c2df7c6a075dcb402077
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    e5989f9.rbs
                    • Path C:\Config.Msi\e5989f9.rbs
                    • Size 19KB
                    • SHA256 2fa2e22245add28d0c08cf59c6e5e690312bb3c5446e35a24aac3a00f90a2131
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    e598a11.rbs
                    • Path C:\Config.Msi\e598a11.rbs
                    • Size 15.9MB
                    • SHA256 0c247c07ae2718608ff6bab545771b50519ebb4fd4e275d19c2942a4a3bb2226
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    e598a17.rbs
                    • Path C:\Config.Msi\e598a17.rbs
                    • Size 13.8MB
                    • SHA256 125650965b6e45a1342d3bb76a7dfe0fb094927085eea017afb528682babedf4
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    SetupInfo.ini
                    • Path C:\Program Files (x86)\Common Files\MAGIX Services\Uninstall\GlobalContent.VEGAS_Pro_23_Content\SetupInfo.ini
                    • Size 236B
                    • SHA256 f37f14646fbc88f93118053c4e54b931b938d1c2be27a73fdbbd81e2c5a3f8b5
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    PresetPackage.ko-KR.xml
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\OFX Video Plug-Ins\TitlesAndText.ofx.bundle\Contents\Presets\PresetPackage.ko-KR.xml
                    • Size 120KB
                    • SHA256 1f804e0e9a2a96673980ed460f08ddd9cbc2391360efda59302fdc1bd5f979fa
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    UnlockFormServiceCenter_nb_NO.rtf
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\Protein\Forms\UnlockFormServiceCenter_nb_NO.rtf
                    • Size 2KB
                    • SHA256 5a31feaa4bdbc96da11a4f68a7fcb36bb791dc073b41e109f7d085dd008790bc
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    install.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                    • Size 2B
                    • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                    • MD5 SHA1 SHA512
                    Submit Download

                    install.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                    • Size 138B
                    • SHA256 ce97749961df10224a7618f2d974349cb4c4e0bd5c4cb1d1d97312e0947d5e45
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    install.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                    • Size 360B
                    • SHA256 f9324f9b80efe447b48287708571cf708ee9022c42e94531be5fa7b16de3a5b2
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    install.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                    • Size 464B
                    • SHA256 210210e3249d471cb9af1d0b9bf490f33da775df7f86fcb1e5e4d6e783ccb7c1
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    install.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                    • Size 1KB
                    • SHA256 611111de385e2b9587ca78876dccdd90fe2af0345f44db8fd439211ebf28f8f4
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    install.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                    • Size 1KB
                    • SHA256 d872421ca95a7a446bb9e626ce1789df72bb47dfb843ad951e72f1684136de7d
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    install.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                    • Size 1KB
                    • SHA256 ed54ce929f3843d214d3dca6e84dcd6c884a13f7dda898718f4b8c40fa4c040c
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    install.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                    • Size 1KB
                    • SHA256 1b7f24e300b423b2abf4f16cce38b5610d47217091ec7de7b1685511463e05a6
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    install.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\install.cfg
                    • Size 2KB
                    • SHA256 800e18e2c21be427f91e74e9bb779963f92f0d5237fc979ddc895e2adf5b564d
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_de_DE.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_de_DE.cfg
                    • Size 200B
                    • SHA256 ac58566f275188acbd2dbdbc9907d84aba4c5ca6f3273a1e2c6fdf8746758553
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_de_DE.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_de_DE.cfg
                    • Size 866B
                    • SHA256 d059be76433133e9d963b79b9f5a5b968214a3f82c2ced649d70f83b4f38f139
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_de_DE.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_de_DE.cfg
                    • Size 1KB
                    • SHA256 c485181dc78d0cc20a43ca3f56f0196eb24d5b229e0fee20b038aa61964a1c39
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_de_DE.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_de_DE.cfg
                    • Size 3KB
                    • SHA256 e8ef26dc860bff826d48089c37e6905475cb2ef12e5e998aca142d417f188d62
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_de_DE.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_de_DE.cfg
                    • Size 4KB
                    • SHA256 37f0f0d355d2c282f9e21758fb3ff6528136bcaa36752a2470bb9a1b0d1ccce2
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    local_en_US.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                    • Size 138B
                    • SHA256 06e7d6ac97adac48d501c4ee34604504bb49368872926b90b71151449303c15c
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_en_US.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                    • Size 546B
                    • SHA256 3e30c9b7460589c3e6bbb4aa1339f6c6a68a95324f1a9e307586a90eb241a872
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_en_US.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                    • Size 852B
                    • SHA256 34756921ef236b88da4a590208b80dc6076f72607600ea0e771de81e7a84e71f
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_en_US.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                    • Size 2KB
                    • SHA256 884e49c927ec7a81877691942f26deec0abb6c33a6cc6d8d8a9535b3b4855c4e
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_en_US.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                    • Size 3KB
                    • SHA256 c99f94a515c31134a3320afc429fb70b2aed6765f4aa4b57776b40b6f618940d
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_en_US.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_en_US.cfg
                    • Size 4KB
                    • SHA256 36aebd9fbbd8dad713d8a5e6efabcab35f17aa9ec0f5df56dabd13f881910e43
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    local_es_ES.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_es_ES.cfg
                    • Size 192B
                    • SHA256 bac2ca238612c6c0522d83ceb332302e3f2b6e2710a038138aab7c983d9edb13
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_es_ES.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_es_ES.cfg
                    • Size 776B
                    • SHA256 5afbc32b68aa68df505f5c564ed6d9a396413ad9cd8e83e06584a3005002c106
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_es_ES.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_es_ES.cfg
                    • Size 1KB
                    • SHA256 c681dddb9d76e075224e4e039d12f5f11f9facd56bee65de89fd717d6f7eadf3
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_es_ES.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_es_ES.cfg
                    • Size 3KB
                    • SHA256 3a12a2df6ba51fb52f1eba5389e2dab4af78e70b404eb5c0f6f63be4244e7e57
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_es_ES.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_es_ES.cfg
                    • Size 4KB
                    • SHA256 8ff95e637d510d8631c1ef2f429bb788546a4dea422e1f641c19d887633d1912
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    local_fr_FR.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                    • Size 322B
                    • SHA256 44bf86c157980efc5f39ca4928d307801778fcfdb32fa49e4156ec8eed96ab97
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_fr_FR.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                    • Size 882B
                    • SHA256 28e407fc6c19d4d355369de172ccd879ea4b3a44309f440dec0b5a0fd915c8d6
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_fr_FR.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                    • Size 1KB
                    • SHA256 312a856c3b408a2ed5ab021f9125899611b44186d7378c4b38e0fbe8629cc39b
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_fr_FR.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                    • Size 1KB
                    • SHA256 e2e4a1b6bc9834473975597f0663ee6bfb62f51172ac70173506e9e2dacc1f41
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_fr_FR.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                    • Size 1KB
                    • SHA256 08737a8ab1f58659854abd588cd32bca520a94f1fe4ca52f97d94a5373b90f2f
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_fr_FR.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                    • Size 2KB
                    • SHA256 3632a4e4772048cfa13e5aff9d7b1d905dfe6a0ace4e1bf11aca7ffbf349cd29
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    local_fr_FR.cfg
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\language\local_fr_FR.cfg
                    • Size 4KB
                    • SHA256 f17116077a7051110d9fb95389d7ff168dec9238af17d3a0c8a9ded231f2c31e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    Vegas_readme.htm
                    • Path C:\Program Files\VEGAS\VEGAS Pro 23.0\readme\Vegas_readme.htm
                    • Size 27KB
                    • SHA256 2b2dc643abd2fc29b0a5d31bf78fc4763997f68cff4dd26b31fed52e3e84f29c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    state.rsm
                    • Path C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\state.rsm
                    • Size 788B
                    • SHA256 3352db5a8f5cbcfdae0c1b64ad2b6e99d807679ad33b1413f7038a3f2d983c3e
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    state.rsm
                    • Path C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\state.rsm
                    • Size 776B
                    • SHA256 8e44abd62c028432e9b3a1da3b289b19a65bf1d500d5068ea615d1b314102f2a
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    state.rsm
                    • Path C:\ProgramData\Package Cache\{47109d57-d746-4f8b-9618-ed6a17cc922b}\state.rsm
                    • Size 1KB
                    • SHA256 88dbaa7fd0d7f1bff9ff08390a850b324960842884aafd75d5b0bd769b329d77
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    002#Install#vcredist2013_12_0_40664_x64.txt
                    • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\002#Install#vcredist2013_12_0_40664_x64.txt
                    • Size 8KB
                    • SHA256 8261dac436dcb98f0e23129c9a3bac9f4b7a99555a88c33c84180119bc3c6c1f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    002#Install#vcredist2013_12_0_40664_x64_000_vcRuntimeMinimum_x64.txt
                    • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\002#Install#vcredist2013_12_0_40664_x64_000_vcRuntimeMinimum_x64.txt
                    • Size 2KB
                    • SHA256 e8d38b93dd46e497f178d3af9c92a2c219ca45f80bacf21628829185230a0331
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    002#Install#vcredist2013_12_0_40664_x64_001_vcRuntimeAdditional_x64.txt
                    • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\002#Install#vcredist2013_12_0_40664_x64_001_vcRuntimeAdditional_x64.txt
                    • Size 2KB
                    • SHA256 5867ef83b307d13af31a4285826569673f372465249a4a1ee45d06c98a4fcd65
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    003#Install#vcredist2022_2015_14_40_33810_x86.txt
                    • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\003#Install#vcredist2022_2015_14_40_33810_x86.txt
                    • Size 14KB
                    • SHA256 2b14c5f67e5887a9a3033a55af7e299720e0ce44e030b4f48877b280181afb3f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    003#Install#vcredist2022_2015_14_40_33810_x86_000_vcRuntimeMinimum_x86.txt
                    • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\003#Install#vcredist2022_2015_14_40_33810_x86_000_vcRuntimeMinimum_x86.txt
                    • Size 2KB
                    • SHA256 de81d62e895982d0e82808829e7813899372d6ec51c0bf9c49fcb2eacb2e8e5c
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    003#Install#vcredist2022_2015_14_40_33810_x86_001_vcRuntimeAdditional_x86.txt
                    • Path C:\Users\Admin\AppData\Local\Temp\MxMsiLogs\VEGAS_Pro_23_20260818_002825\003#Install#vcredist2022_2015_14_40_33810_x86_001_vcRuntimeAdditional_x86.txt
                    • Size 2KB
                    • SHA256 95038933e6c789b773fe2ee63ef99c36c3e0642f051372e9d7209978af1e2d69
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    VEGAS_Capture_en-US.mst
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\VEGAS_Capture\VEGAS_Capture_en-US.mst
                    • Size 60KB
                    • SHA256 16ea74a96420a49dba80a726b3f9d644bf735706788e4d60e4778801afe9cc4c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    VEGAS_Capture_es-ES.mst
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\VEGAS_Capture\VEGAS_Capture_es-ES.mst
                    • Size 60KB
                    • SHA256 e3a0d69567400890064dbc440886536aa968458edac5793e58ef53804c57aa41
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    VEGAS_Capture_fr-FR.mst
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\VEGAS_Capture\VEGAS_Capture_fr-FR.mst
                    • Size 64KB
                    • SHA256 7710c3e4a253e0fde0ba5645b22baa2d3700c5ba5c2d3c2bbe8f77478d569d8d
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    VEGAS_Capture_setup_x64.ms_
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\VEGAS_Capture\VEGAS_Capture_setup_x64.ms_
                    • Size 2.4MB
                    • SHA256 0b75622d287816854e41e1085f9be33eedd98bcea585e89aaa7e0164a8e5f45e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    _aze2vqq.cab
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\VEGAS_Capture\_aze2vqq.cab
                    • Size 36B
                    • SHA256 a32e0a83001d2c5d41649063217923dac167809cab50ec5784078e41c9ec0f0f
                    • MD5 SHA1 SHA512
                    Submit Download

                    vcredist_x64.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2013_12.0.40664\vcredist_x64.exe
                    • Size 6.9MB
                    • SHA256 a4bba7701e355ae29c403431f871a537897c363e215cafe706615e270984f17c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    vcredist_x86.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2013_12.0.40664\vcredist_x86.exe
                    • Size 6.2MB
                    • SHA256 53b605d1100ab0a88b867447bbf9274b5938125024ba01f5105a9e178a3dcdbd
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    VC_redist.x64.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2022-2015_14.40.33810\VC_redist.x64.exe
                    • Size 24.2MB
                    • SHA256 3642e3f95d50cc193e4b5a0b0ffbf7fe2c08801517758b4c8aeb7105a091208a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    VC_redist.x86.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\addon\vcredist2022-2015_14.40.33810\VC_redist.x86.exe
                    • Size 13.2MB
                    • SHA256 a32dd41eaab0c5e1eaa78be3c0bb73b48593de8d97a7510b97de3fd993538600
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    VEGAS_Pro_23_SetupInfo.ini
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\product\VEGAS_Pro_23_SetupInfo.ini
                    • Size 2KB
                    • SHA256 1fd39f1b28dd312867210fbb33dea43799ec52e6ca4d37df0ce9977b541598c2
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    VEGAS_Pro_23_SetupRes.mxres
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\product\VEGAS_Pro_23_SetupRes.mxres
                    • Size 3.0MB
                    • SHA256 08757b2beb625b8faacfa026953b499e0637bd7b79d1d4d0ffb5e727d42399ac
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    VEGAS_Pro_23_en-US.mst
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\product\VEGAS_Pro_23_en-US.mst
                    • Size 60KB
                    • SHA256 8f33bea35f8af3fe9529e472f2c8c77a7d42bce6d8c9819cfaf8018bb4adca9a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    VEGAS_Pro_23_setup.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\product\VEGAS_Pro_23_setup.exe
                    • Size 4.7MB
                    • SHA256 2da937727a4eaaaeb7f43bedb86d7950755c1899da41bfaa4717e2b53be9cd3d
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    VEGAS_Pro_23_setup.xml
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\product\VEGAS_Pro_23_setup.xml
                    • Size 4KB
                    • SHA256 57090f9351d785475c8f5c7e4761151f1b72cd56833f922c9c9926c8ff936ce2
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    VEGAS_Pro_23_setup_x64.ms_
                    • Path C:\Users\Admin\AppData\Local\Temp\mgx3bpei1u4\product\VEGAS_Pro_23_setup_x64.ms_
                    • Size 2.7MB
                    • SHA256 51c2e9dd020fbd5cd313e7c0a5b4f572156a2e7c72a229ae29ae4d4cb9b3f178
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\.ba2\license.rtf
                    • Size 6KB
                    • SHA256 8518f0420972c1dbe8a323ffc6f57863af0b80c6a3b27fd0c6fc9bdabb7e2d13
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.wxl
                    • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\.ba2\thm.wxl
                    • Size 2KB
                    • SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    thm.xml
                    • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\.ba2\thm.xml
                    • Size 5KB
                    • SHA256 6b1ba0dea830e556a58c883290faa5d49c064e546cbfcd0451596a10cc693f87
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    vcredist_x64.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\.be\vcredist_x64.exe
                    • Size 455KB
                    • SHA256 102f69b5a98352a6a1a6b26bc2c86ee7611c1f45f5a9ca04f5a8841961f191c6
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    cab2C04DDC374BD96EB5C8EB8208F2C7C92
                    • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\cab2C04DDC374BD96EB5C8EB8208F2C7C92
                    • Size 5.3MB
                    • SHA256 1f2f8f5d60dadbc6e4d3d36c88cc54f22af0a615b609609e748782dc26231174
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    cab5046A8AB272BF37297BB7928664C9503
                    • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\cab5046A8AB272BF37297BB7928664C9503
                    • Size 1010KB
                    • SHA256 e95d29cbb06bb323d9d43fc2ce61d4565b0866622a83d93df76430a0c252b433
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    vcRuntimeAdditional_x64
                    • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcRuntimeAdditional_x64
                    • Size 140KB
                    • SHA256 8909e5c1d917064983595a4e4717f758c2a8df8f59d7b31a5b79b2f95bd8f7cc
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    vcRuntimeMinimum_x64
                    • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcRuntimeMinimum_x64
                    • Size 140KB
                    • SHA256 e88d0915814e622cd1deca849efa23a0d58d5d756be44ebbb4d460d3dac9e816
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    logo.png
                    • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\.ba1\logo.png
                    • Size 1KB
                    • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    wixstdba.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\.ba1\wixstdba.dll
                    • Size 117KB
                    • SHA256 e7c8e7edd9112137895820e789baaaeca41626b01fb99fede82968ddb66d02cf
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    vcredist_x86.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\.be\vcredist_x86.exe
                    • Size 455KB
                    • SHA256 fd597b58a578cfa46e1818b3b4b795ca6d25225dc11ee86cd491f3d55d7b235d
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    MSI1E74.tmp
                    • Path C:\Windows\Installer\MSI1E74.tmp
                    • Size 1.7MB
                    • SHA256 a799cd19883435f466c21117d92d8977744a12a318aaccd0ebd7d4a36505df3b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    MSI557A.tmp
                    • Path C:\Windows\Installer\MSI557A.tmp
                    • Size 191KB
                    • SHA256 45c0cb88737e70555a6d85206318673fb0548b95d60e5b7adb2f44aa8df8e687
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    MSIE9AD.tmp
                    • Path C:\Windows\Installer\MSIE9AD.tmp
                    • Size 1.7MB
                    • SHA256 837d54f670fbef6f89e437ca8b599a8abbb8580421b0540c7b8cbca89ad0d674
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    ProgramIcon.exe
                    • Path C:\Windows\Installer\{2F50C2C0-0387-46A3-9C4E-188675EC5E48}\ProgramIcon.exe
                    • Size 352KB
                    • SHA256 4b3107ddff5ed64f39f315ea015fe55d3e1f62146e82b6441b33397edac9f3b4
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Windows\Temp\{43948132-AFF0-47DF-AE09-5F24BA2302BE}\.ba\license.rtf
                    • Size 9KB
                    • SHA256 8099dc3cf9502c335da829e5c755948a12e3e6de490eb492a99deb673d883d8b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.xml
                    • Path C:\Windows\Temp\{43948132-AFF0-47DF-AE09-5F24BA2302BE}\.ba\thm.xml
                    • Size 8KB
                    • SHA256 f13bae0ec08c91b4a315bb2d86ee48fade597e7a5440dce6f751f98a3a4d6916
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1028\license.rtf
                    • Size 17KB
                    • SHA256 44c76290f7a2e45940e8338912feb49bcf4e071cfa85d2d34762857743acbc8d
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.wxl
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1028\thm.wxl
                    • Size 2KB
                    • SHA256 8e2e660dfb66cb453e17f1b6991799678b1c8b350a55f9ebe2ba0028018a15ad
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1029\license.rtf
                    • Size 12KB
                    • SHA256 503c433dcde2f3a9e7d388a5ff2b0612e7d8f90f5188d5b2b60228db33044fde
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.wxl
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1029\thm.wxl
                    • Size 3KB
                    • SHA256 07fb3ec174f25dfbe532d9d739234d9dfda8e9d34f01fe660c5b4d56989fa779
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1031\license.rtf
                    • Size 12KB
                    • SHA256 28f63bad9c2960395106011761993049546607f8a850d344d6a54042176bf03f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.wxl
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1031\thm.wxl
                    • Size 3KB
                    • SHA256 8e0dca6e085744bfcbff46f7dcbcfa6fbd722dfa52013ee8ceeaf682d7509581
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1036\license.rtf
                    • Size 12KB
                    • SHA256 5c13a65870d770d1642a4259eecb436257ca39016a0500f747be9c79be0c7009
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.wxl
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1036\thm.wxl
                    • Size 3KB
                    • SHA256 704ddf2e60c1f292be95c7c79ee48fe8ba8534ceb7ccf9a9ea68b1ad788ae9d4
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1040\license.rtf
                    • Size 11KB
                    • SHA256 70ecf23c03b66a2b18e173332586afa8f00f91e02a80628f4f9cb2521e27f6ac
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.wxl
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1040\thm.wxl
                    • Size 3KB
                    • SHA256 0c57f40cc2091554307aa8a7c35dd38e4596e9513e9efae00ac30498ef4e9bc2
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1041\license.rtf
                    • Size 29KB
                    • SHA256 c3061a334bfd5f02b7085f8f454d5d3d97d477af14bab497bf31a7887bc90c5b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.wxl
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1041\thm.wxl
                    • Size 3KB
                    • SHA256 6b9bbf90d75cfa7d943f036c01602945fe2fa786c6173e22acb7afe18375c7ea
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1042\license.rtf
                    • Size 27KB
                    • SHA256 3d4e9c165cbeab829d608106f0e96450f839ffa8adbd755f0b51867e89da2ae0
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.wxl
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1042\thm.wxl
                    • Size 3KB
                    • SHA256 ad7608b87a7135f408abf54a897a0f0920080f76013314b00d301d6264ae90b2
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1045\license.rtf
                    • Size 13KB
                    • SHA256 6f94a99072061012c5626a6dd069809ec841d6e3102b48394d522a0c2e3aa2b5
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.wxl
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1045\thm.wxl
                    • Size 3KB
                    • SHA256 440b309fcdf61ffc03b269fe3815c60cb52c6ae3fc6acad14eac04d057b6d6ea
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1046\license.rtf
                    • Size 10KB
                    • SHA256 27891eec899be859e3b4d3b29247fc6b535d7e836def0329111c48741ec6e701
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.wxl
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1046\thm.wxl
                    • Size 3KB
                    • SHA256 f52b54a0e0d0e8f12cba9823d88e9fd6822b669074dd1dc69dad6553f7cb8913
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1049\license.rtf
                    • Size 31KB
                    • SHA256 1bb3fb55b8a13fa3bafffe72f5b1ed8b57a63bd4d8654bb6dc5b9011ce803b44
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.wxl
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1049\thm.wxl
                    • Size 4KB
                    • SHA256 7333bc8e52548821d82b53dbd7d7c4aa1703c85155480cb83cefd78380c95661
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1055\license.rtf
                    • Size 13KB
                    • SHA256 f80926604e503697247353f56856b31de0b3fc1319f1c94068363952549cc9b1
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.wxl
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\1055\thm.wxl
                    • Size 3KB
                    • SHA256 e5abe3cb3bf84207dac4e6f5bba1e693341d01aea076dd2d91eaa21c6a6cb925
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\2052\license.rtf
                    • Size 17KB
                    • SHA256 a808b4933ce3b3e0893504dbef43ebf90b8b567f94bd6481b6315ed9141e1b11
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.wxl
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\2052\thm.wxl
                    • Size 2KB
                    • SHA256 2ac8b7c19a5189662de36a0581c90dbad96df259ec00a28f609b644c3f39f9ca
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    license.rtf
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\3082\license.rtf
                    • Size 10KB
                    • SHA256 abc11bb2b04dff6afe2d4d4f40d95a7d62e5af352928af90daa3dade58dd59bd
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    thm.wxl
                    • Path C:\Windows\Temp\{8F6CE7D9-63C5-496F-82A7-FEE18A485C45}\.ba\3082\thm.wxl
                    • Size 3KB
                    • SHA256 9cbb2b312c100b309a1b1495e84e2228b937612885f7a642fbbd67969b632c3a
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    wixstdba.dll
                    • Path C:\Windows\Temp\{AE6F5C53-E90C-4DD3-9E66-E0C3DD3213C5}\.ba\wixstdba.dll
                    • Size 191KB
                    • SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    cab54A5CABBE7274D8A22EB58060AAB7623
                    • Path C:\Windows\Temp\{AE6F5C53-E90C-4DD3-9E66-E0C3DD3213C5}\cab54A5CABBE7274D8A22EB58060AAB7623
                    • Size 822KB
                    • SHA256 f4576ef2e843c282d2a932f7c55d71cc3fcbb35b0a17a0a640eb5f21731cc809
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    cabB3E1576D1FEFBB979E13B1A5379E0B16
                    • Path C:\Windows\Temp\{AE6F5C53-E90C-4DD3-9E66-E0C3DD3213C5}\cabB3E1576D1FEFBB979E13B1A5379E0B16
                    • Size 4.9MB
                    • SHA256 7327d37634cc8e966342f478168b8850bea36a126d002c38c7438a7bd557c4ca
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    vcRuntimeAdditional_x86
                    • Path C:\Windows\Temp\{AE6F5C53-E90C-4DD3-9E66-E0C3DD3213C5}\vcRuntimeAdditional_x86
                    • Size 180KB
                    • SHA256 be137dc2b1ec7e85ae7a003a09537d3706605e34059361404ea3110874895e3a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    vcRuntimeMinimum_x86
                    • Path C:\Windows\Temp\{AE6F5C53-E90C-4DD3-9E66-E0C3DD3213C5}\vcRuntimeMinimum_x86
                    • Size 180KB
                    • SHA256 a2ad58d741be5d40af708e15bf0dd5e488187bf28f0b699d391a9ef96f899886
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    VC_redist.x64.exe
                    • Path C:\Windows\Temp\{EB2724A1-7E8C-46B8-9E99-97AAFB4FC86A}\.cr\VC_redist.x64.exe
                    • Size 635KB
                    • SHA256 8cd998a0318f07a27f78b75edb19479f44273590e300629eff237d47643c496c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    VC_redist.x86.exe
                    • Path C:\Windows\Temp\{F1897225-BDC2-49AC-9913-D683325B0606}\.cr\VC_redist.x86.exe
                    • Size 634KB
                    • SHA256 81873c2f6c8bc4acaad66423a1b4d90e70214e59710ea7f11c8aeb069acd4cd0
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    dd_vcredist_amd64_000_vcRuntimeAdditional_x64.log
                    • Path C:\Windows\system32\dd_vcredist_amd64_000_vcRuntimeAdditional_x64.log
                    • Size 2KB
                    • SHA256 35e38ad8386cd3168b34f7a308fda4d069bc5b1dbb0306172280706d1eda40e7
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    memory/1764-670-0x0000000000950000-0x00000000009C7000-memory.dmp
                    Download

                    memory/2044-4437-0x00007FF608BE0000-0x00007FF60BAFF000-memory.dmp
                    Download

                    memory/2044-4438-0x00007FF608BE0000-0x00007FF60BAFF000-memory.dmp
                    Download

                    memory/2848-667-0x0000000000950000-0x00000000009C7000-memory.dmp
                    Download

                    memory/3796-669-0x0000000000950000-0x00000000009C7000-memory.dmp
                    Download

                    memory/4616-4441-0x00007FF608BE0000-0x00007FF60BAFF000-memory.dmp
                    Download

                    memory/4760-4184-0x00007FF608BE0000-0x00007FF60BAFF000-memory.dmp
                    Download

                    memory/4760-4186-0x0000000001D70000-0x0000000001D71000-memory.dmp
                    Download