Analysis

  • user interaction
    yes
  • max time kernel
    1049s
  • max time network
    1025s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/10/2026, 12:56

General

  • Target
    screen-recorder.exe
  • Size 2.2MB
  • Sample261023-p6tfcsch74
  • SHA256 f13fd8e10a9a2e23d219e2945966183b70ecd9c28a91a3e6843504537bf45dd7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Modifies firewall policy service 3 TTPs 1 IoCs
  • VMProtect packed file 4 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Badlisted process makes network request 1 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Downloads MZ/PE file 1 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Modifies Windows Firewall 2 TTPs 2 IoCs
  • Drops file in System32 directory 8 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 30 IoCs
  • Loads dropped DLL 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 6 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • Executes a command shell one-liner 1 TTPs 2 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 20 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 14 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Inno Setup is an open-source installation builder for Windows applications. 8 IoCs

    Inno Setup installer

  • Checks processor information in registry 2 TTPs 42 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 9 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 11 IoCs
  • Suspicious behavior: EnumeratesProcesses 34 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 34 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\screen-recorder.exe
    "C:\Users\Admin\AppData\Local\Temp\screen-recorder.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3740
    • C:\Users\Admin\AppData\Local\Temp\is-NJKG8.tmp\screen-recorder.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-NJKG8.tmp\screen-recorder.tmp" /SL5="$4011E,1700980,305152,C:\Users\Admin\AppData\Local\Temp\screen-recorder.exe"
      2⤵
      • Downloads MZ/PE file
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:5864
      • C:\Users\Admin\AppData\Local\Temp\AnyRec\AnyRec Screen Recorder\screen-recorder-x64.exe
        "C:\Users\Admin\AppData\Local\Temp\AnyRec\AnyRec Screen Recorder\screen-recorder-x64.exe" /user:administrator /sp- /VerySilent /LANG=us /TASKS="forallusers,desktopicon,quicklaunchicon,ceip" /DIR="C:\Program Files\AnyRec Studio\AnyRec Screen Recorder" /LOG="C:\Users\Admin\AppData\Local\Temp\AnyRec\AnyRec Screen Recorder\innosetup.log"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:5716
        • C:\Users\Admin\AppData\Local\Temp\is-PK3PU.tmp\screen-recorder-x64.tmp
          "C:\Users\Admin\AppData\Local\Temp\is-PK3PU.tmp\screen-recorder-x64.tmp" /SL5="$9026E,110707016,560128,C:\Users\Admin\AppData\Local\Temp\AnyRec\AnyRec Screen Recorder\screen-recorder-x64.exe" /user:administrator /sp- /VerySilent /LANG=us /TASKS="forallusers,desktopicon,quicklaunchicon,ceip" /DIR="C:\Program Files\AnyRec Studio\AnyRec Screen Recorder" /LOG="C:\Users\Admin\AppData\Local\Temp\AnyRec\AnyRec Screen Recorder\innosetup.log"
          4⤵
          • Drops file in Program Files directory
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:3176
          • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe
            "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe" --register
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Reads the TCP/IP host and domain name from the registry
            • Modifies registry class
            • Suspicious behavior: AddClipboardFormatListener
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SetWindowsHookEx
            PID:272
          • C:\Windows\SysWOW64\cmd.exe
            "C:\Windows\system32\cmd.exe" /C ""C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\mirrorinstall.bat""
            5⤵
            • Executes a command shell one-liner
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:2260
            • C:\Windows\SysWOW64\netsh.exe
              netsh advfirewall firewall add rule name="mirrorrender" dir=in action=allow program="C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\ScreencastV6.exe" enable=yes
              6⤵
              • Modifies Windows Firewall
              • Event Triggered Execution: Netsh Helper DLL
              • System Location Discovery: System Language Discovery
              PID:3660
          • C:\Users\Admin\AppData\Local\Temp\is-EREBV.tmp\CheckDirect3D11.exe
            "C:\Users\Admin\AppData\Local\Temp\is-EREBV.tmp\CheckDirect3D11.exe"
            5⤵
            • Executes dropped EXE
            PID:5060
          • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe
            "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe" --pop_after_install_force_url
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Reads the TCP/IP host and domain name from the registry
            • Modifies registry class
            • Suspicious behavior: AddClipboardFormatListener
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:5632
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.anyrec.io/thankyou/install-screen-recorder/
              6⤵
              • Drops file in Windows directory
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of WriteProcessMemory
              PID:1184
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ffdb22ac188,0x7ffdb22ac194,0x7ffdb22ac1a0
                7⤵
                  PID:5104
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1740,i,4500340833421146831,9868605784795525219,524288 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:11
                  7⤵
                  • System Time Discovery
                  PID:6016
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,4361614866617389901,2559661230959490567,262144 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
                  7⤵
                    PID:1548
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2408,i,3747788158548195857,7031560055219954248,524288 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:13
                    7⤵
                      PID:1516
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,14911055308798285712,2333523279940554654,2097152 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
                      7⤵
                        PID:4428
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3652,i,4738161876676690601,1567409144401385019,2097152 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
                        7⤵
                          PID:2872
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,16090589662012736623,4136392529505365277,2097152 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:1
                          7⤵
                            PID:248
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,12857668211974434258,5716112632456000036,2097152 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:9
                            7⤵
                              PID:5548
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3700,i,2588582769235144255,12940753936608338880,524288 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:14
                              7⤵
                                PID:4064
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3764,i,18279908608877705445,8682784016799892802,524288 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
                                7⤵
                                  PID:2344
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,8346995537838956808,5051137339043544335,524288 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:14
                                  7⤵
                                    PID:4784
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,4702540995918397260,15605228906242711729,524288 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:14
                                    7⤵
                                      PID:1528
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,4702540995918397260,15605228906242711729,524288 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:14
                                      7⤵
                                        PID:5020
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6476,i,14216223186798080177,14111215704351157118,524288 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:14
                                        7⤵
                                          PID:4144
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6652,i,8096547670704724908,8807540351582913596,524288 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:14
                                          7⤵
                                            PID:4580
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,11476560393977058446,15399034102173647646,524288 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:14
                                            7⤵
                                              PID:2208
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,15493922394025279738,13788287480188462533,524288 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:14
                                              7⤵
                                                PID:2888
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,12493074292848201781,13266497215314098683,524288 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:14
                                                7⤵
                                                  PID:2004
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,8977416839552028069,6391892601880464587,524288 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
                                                  7⤵
                                                    PID:4844
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,2827415887008993989,3855362223186055611,524288 --field-trial-handle=2340,i,4035400063772594687,6865595662527117908,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:14
                                                    7⤵
                                                      PID:1812
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                      • Suspicious use of FindShellTrayWindow
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:5056
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x22c,0x328,0x7ffdb22ac188,0x7ffdb22ac194,0x7ffdb22ac1a0
                                                        8⤵
                                                          PID:1632
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,683534872410475484,9318940365915635612,524288 --field-trial-handle=2220,i,5800344594558293302,8572388597590335618,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:11
                                                          8⤵
                                                          • System Time Discovery
                                                          PID:4684
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,1750229291644763345,2496555353028143855,262144 --field-trial-handle=2220,i,5800344594558293302,8572388597590335618,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
                                                          8⤵
                                                            PID:4492
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,3700385865395766178,8062867666352122914,524288 --field-trial-handle=2220,i,5800344594558293302,8572388597590335618,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:13
                                                            8⤵
                                                              PID:6096
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,18443313347712579738,7765221304053426007,524288 --field-trial-handle=2220,i,5800344594558293302,8572388597590335618,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:14
                                                              8⤵
                                                                PID:5356
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,18443313347712579738,7765221304053426007,524288 --field-trial-handle=2220,i,5800344594558293302,8572388597590335618,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:14
                                                                8⤵
                                                                  PID:2400
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5116,i,12405802934024550373,16226953270312685333,2097152 --field-trial-handle=2220,i,5800344594558293302,8572388597590335618,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:1
                                                                  8⤵
                                                                    PID:3228
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=5124,i,6758743909525505489,8163066859550316716,2097152 --field-trial-handle=2220,i,5800344594558293302,8572388597590335618,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:1
                                                                    8⤵
                                                                      PID:2452
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,201932316893149602,17273517354126918691,524288 --field-trial-handle=2220,i,5800344594558293302,8572388597590335618,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:14
                                                                      8⤵
                                                                        PID:2432
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5716,i,9480418705161681902,6529817981242905415,524288 --field-trial-handle=2220,i,5800344594558293302,8572388597590335618,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:14
                                                                        8⤵
                                                                          PID:1736
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                                                          8⤵
                                                                          • Drops file in Windows directory
                                                                          • Enumerates system info in registry
                                                                          • Modifies registry class
                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                          PID:1356
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffdb22ac188,0x7ffdb22ac194,0x7ffdb22ac1a0
                                                                            9⤵
                                                                              PID:4312
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,8696267201408023283,1928766773558754542,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=3312 /prefetch:11
                                                                              9⤵
                                                                              • System Time Discovery
                                                                              PID:1596
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,10870715740938233232,4695906491502372258,262144 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:2
                                                                              9⤵
                                                                                PID:1236
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2168,i,17949642088898240635,11616937786322216353,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:13
                                                                                9⤵
                                                                                  PID:2388
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,5888844410831790166,11386780043768753018,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:14
                                                                                  9⤵
                                                                                    PID:3112
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,5888844410831790166,11386780043768753018,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:14
                                                                                    9⤵
                                                                                      PID:4648
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,17567493244047928765,17802462685655729647,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:14
                                                                                      9⤵
                                                                                        PID:5236
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,14349307918614100057,14675262443557806562,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
                                                                                        9⤵
                                                                                          PID:3336
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,6734536517239670308,14388931589223348124,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:14
                                                                                          9⤵
                                                                                            PID:1920
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,4334306418153639935,2228956796229559444,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:14
                                                                                            9⤵
                                                                                              PID:5872
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,12762117831249744335,10925024085960951196,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:14
                                                                                              9⤵
                                                                                                PID:3728
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,11316104256480246606,16529598218855682070,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=800 /prefetch:14
                                                                                                9⤵
                                                                                                  PID:2444
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4280,i,7800682028332666658,15067313196195428486,262144 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:10
                                                                                                  9⤵
                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                  PID:4416
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3372,i,14710681172260497653,13659075780149860982,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:14
                                                                                                  9⤵
                                                                                                    PID:2668
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,1445438157460792692,17341262816783982944,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=4128 /prefetch:14
                                                                                                    9⤵
                                                                                                      PID:3224
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,15688494366014102312,7501314751517578646,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=4132 /prefetch:14
                                                                                                      9⤵
                                                                                                        PID:944
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4032,i,15666647624566695127,15060746008751064569,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=3388 /prefetch:14
                                                                                                        9⤵
                                                                                                          PID:3232
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,7790699353371788954,16948727201154358682,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:14
                                                                                                          9⤵
                                                                                                            PID:4592
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,11151634700131319493,8491285651998531509,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:14
                                                                                                            9⤵
                                                                                                              PID:5860
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,16738847041526432018,1955868885414850980,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=2988 /prefetch:14
                                                                                                              9⤵
                                                                                                                PID:800
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4692,i,15572244956922519556,11563049913513342136,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=4064 /prefetch:14
                                                                                                                9⤵
                                                                                                                  PID:684
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4692,i,5444710585540538605,13424771499446523047,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:14
                                                                                                                  9⤵
                                                                                                                    PID:736
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,6194780936371738447,12699923989978010281,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:14
                                                                                                                    9⤵
                                                                                                                      PID:5160
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,6813706897800066554,4104937757432345656,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
                                                                                                                      9⤵
                                                                                                                        PID:5444
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,7014141092375916926,16498421227095655084,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:14
                                                                                                                        9⤵
                                                                                                                          PID:5588
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,13293061821535453770,13531983815231381066,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
                                                                                                                          9⤵
                                                                                                                            PID:5700
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,17432731964098751725,8890057826921484463,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:14
                                                                                                                            9⤵
                                                                                                                              PID:4648
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,4960201270678690598,8445057898100957215,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:14
                                                                                                                              9⤵
                                                                                                                                PID:3744
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,12679199258320617062,15553317786916561832,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:14
                                                                                                                                9⤵
                                                                                                                                  PID:1296
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5600,i,17656854526491110384,12643003088101114954,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=3968 /prefetch:14
                                                                                                                                  9⤵
                                                                                                                                    PID:6124
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,8873265098062680064,7558620790752456446,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:14
                                                                                                                                    9⤵
                                                                                                                                      PID:2700
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,5165924228280381092,8848673491063590833,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:14
                                                                                                                                      9⤵
                                                                                                                                        PID:5416
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,6459175770549043473,4783369101326596242,524288 --field-trial-handle=3244,i,10950156262078666505,740213822447139956,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:14
                                                                                                                                        9⤵
                                                                                                                                          PID:4444
                                                                                                                                • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe
                                                                                                                                  "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe" --access_after_install_counting_url
                                                                                                                                  5⤵
                                                                                                                                  • Executes dropped EXE
                                                                                                                                  • Loads dropped DLL
                                                                                                                                  • Reads the TCP/IP host and domain name from the registry
                                                                                                                                  • Modifies registry class
                                                                                                                                  • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                  PID:5984
                                                                                                                            • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe
                                                                                                                              "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe" D
                                                                                                                              3⤵
                                                                                                                              • Executes dropped EXE
                                                                                                                              • Reads the TCP/IP host and domain name from the registry
                                                                                                                              • Checks processor information in registry
                                                                                                                              • Modifies registry class
                                                                                                                              • Suspicious behavior: AddClipboardFormatListener
                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                                              • Suspicious use of WriteProcessMemory
                                                                                                                              PID:3404
                                                                                                                              • C:\Users\Admin\AppData\Local\AnyRec Studio\AnyRec Screen Recorder\updater\AnyRec Screen Recorder_updater.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\AnyRec Studio\AnyRec Screen Recorder\updater\AnyRec Screen Recorder_updater.exe" -i "C:\Users\Admin\AppData\Local\AnyRec Studio\AnyRec Screen Recorder\download\AnyRec Screen Recorder_Low.exe" -u -d "C:/Program Files/AnyRec Studio/AnyRec Screen Recorder" -nn "AnyRec Screen Recorder" -n "AnyRec Screen Recorder" -l en -dpi 1 -bdpi 1 -title "Configuring, please wait..." -info "Please don't shut down or restart the computer during the configuration process." -hPId 3404 -restart -font Tahoma
                                                                                                                                4⤵
                                                                                                                                • Executes dropped EXE
                                                                                                                                • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                                                PID:4928
                                                                                                                                • C:\Users\Admin\AppData\Local\AnyRec Studio\AnyRec Screen Recorder\download\AnyRec Screen Recorder_Low.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\AnyRec Studio\AnyRec Screen Recorder\download\AnyRec Screen Recorder_Low.exe" /sp- /VERYSILENT /LANG=us "/DIR=C:\Program Files\AnyRec Studio\AnyRec Screen Recorder" /TASKS=forcurrentuser,desktopicon,quicklaunchicon
                                                                                                                                  5⤵
                                                                                                                                  • Executes dropped EXE
                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                                  PID:4840
                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\is-OK7O3.tmp\AnyRec Screen Recorder_Low.tmp
                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\is-OK7O3.tmp\AnyRec Screen Recorder_Low.tmp" /SL5="$50108,99536180,560128,C:\Users\Admin\AppData\Local\AnyRec Studio\AnyRec Screen Recorder\download\AnyRec Screen Recorder_Low.exe" /sp- /VERYSILENT /LANG=us "/DIR=C:\Program Files\AnyRec Studio\AnyRec Screen Recorder" /TASKS=forcurrentuser,desktopicon,quicklaunchicon
                                                                                                                                    6⤵
                                                                                                                                    • Drops file in Program Files directory
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                    • Suspicious use of FindShellTrayWindow
                                                                                                                                    • Suspicious use of WriteProcessMemory
                                                                                                                                    PID:828
                                                                                                                                    • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe
                                                                                                                                      "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe" --register
                                                                                                                                      7⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:4292
                                                                                                                                    • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\vlc\vlc-cache-gen.exe
                                                                                                                                      "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\vlc\vlc-cache-gen.exe" C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\vlc\plugins
                                                                                                                                      7⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      PID:5460
                                                                                                                                    • C:\Windows\SysWOW64\msiexec.exe
                                                                                                                                      "msiexec.exe" /i "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Bonjour64.msi" /quiet
                                                                                                                                      7⤵
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:2388
                                                                                                                                    • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                      "C:\Windows\system32\cmd.exe" /C ""C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\mirrorinstall.bat""
                                                                                                                                      7⤵
                                                                                                                                      • Executes a command shell one-liner
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      PID:1256
                                                                                                                                      • C:\Windows\SysWOW64\netsh.exe
                                                                                                                                        netsh advfirewall firewall add rule name="mirrorrender" dir=in action=allow program="C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\MirrorRender.exe" enable=yes
                                                                                                                                        8⤵
                                                                                                                                        • Modifies Windows Firewall
                                                                                                                                        • Event Triggered Execution: Netsh Helper DLL
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        PID:5720
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\is-7HTIB.tmp\CheckDirect3D11.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\is-7HTIB.tmp\CheckDirect3D11.exe"
                                                                                                                                      7⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      PID:5944
                                                                                                                                    • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe
                                                                                                                                      "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe" --pop_after_install_force_url
                                                                                                                                      7⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:124
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.anyrec.io/thankyou/install-screen-recorder/
                                                                                                                                        8⤵
                                                                                                                                          PID:3932
                                                                                                                                      • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe
                                                                                                                                        "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe" --access_after_install_counting_url
                                                                                                                                        7⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Reads the TCP/IP host and domain name from the registry
                                                                                                                                        • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                        • Suspicious use of FindShellTrayWindow
                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                        PID:1740
                                                                                                                                  • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe
                                                                                                                                    "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe" -l en
                                                                                                                                    5⤵
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    • Reads the TCP/IP host and domain name from the registry
                                                                                                                                    • Checks processor information in registry
                                                                                                                                    • Modifies registry class
                                                                                                                                    • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                    • Suspicious use of FindShellTrayWindow
                                                                                                                                    • Suspicious use of SendNotifyMessage
                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                    PID:1036
                                                                                                                                    • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\splashScreen.exe
                                                                                                                                      "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\splashScreen.exe" -l ZW4= -fsize MTA= -m1 PGZvbnQgY29sb3IgPSAjYjhiOWJiPkxvYWRpbmcgbGFuZ3VhZ2UuLi48L2ZvbnQ+ -c PGZvbnQgY29sb3I9I2I4YjliYj48cD5Db3B5cmlnaHQgPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsOyI+JmNvcHk7PC9zcGFuPiAyMDI1IEFueVJlYyBTdHVkaW8uIEFsbCByaWdodHMgcmVzZXJ2ZWQuPC9wPjwvZm9udD4= -v PGI+PGZvbnQgY29sb3IgPSAjYjhiOWJiPlZlcnNpb246IDEuMS4zNjwvZm9udD4= -m2 PGZvbnQgY29sb3IgPSAjYjhiOWJiPkZyYW1ld29yayBpbml0aWFsaXppbmcuLi48L2ZvbnQ+ -m3 PGZvbnQgY29sb3IgPSAjYjhiOWJiPkxvYWRpbmcgc2tpbi4uLjwvZm9udD4= -m4 PGZvbnQgY29sb3IgPSAjYjhiOWJiPlByZXBhcmluZyBtYWluIHdpbmRvdy4uLjwvZm9udD4= -f VGFob21h -fdpi MQ==
                                                                                                                                      6⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:2812
                                                                                                                                    • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\hwcodecinfo_vcu.exe
                                                                                                                                      "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\hwcodecinfo_vcu.exe" 984 1 1216
                                                                                                                                      6⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      PID:4052
                                                                                                                                      • C:\Windows\System32\Conhost.exe
                                                                                                                                        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                        7⤵
                                                                                                                                          PID:3932
                                                                                                                                      • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\hwcodecinfo_vcu.exe
                                                                                                                                        "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\hwcodecinfo_vcu.exe" 984 2 1216
                                                                                                                                        6⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        PID:5264
                                                                                                                                      • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\hwcodecinfo_vcu.exe
                                                                                                                                        "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\hwcodecinfo_vcu.exe" 984 3 1216
                                                                                                                                        6⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        PID:5836
                                                                                                                                      • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\D3DRenderTest.exe
                                                                                                                                        "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\D3DRenderTest.exe" 1376
                                                                                                                                        6⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                        PID:4204
                                                                                                                                      • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\ScreencastV6.exe
                                                                                                                                        "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\ScreencastV6.exe" 1468
                                                                                                                                        6⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Reads the TCP/IP host and domain name from the registry
                                                                                                                                        PID:368
                                                                                                                                        • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\hwcodecinfo.exe
                                                                                                                                          "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\hwcodecinfo.exe" 1376 20231019 20110 0 1156
                                                                                                                                          7⤵
                                                                                                                                          • Executes dropped EXE
                                                                                                                                          PID:1468
                                                                                                                                        • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\mux.exe
                                                                                                                                          "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\mux.exe" e 1376 1968
                                                                                                                                          7⤵
                                                                                                                                          • Executes dropped EXE
                                                                                                                                          PID:6080
                                                                                                                                        • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\MouseServer.exe
                                                                                                                                          "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\MouseServer.exe" 525024
                                                                                                                                          7⤵
                                                                                                                                          • Executes dropped EXE
                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                          PID:3256
                                                                                                                                      • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\HotKey.exe
                                                                                                                                        "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\HotKey.exe" 1507444
                                                                                                                                        6⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                        PID:5984
                                                                                                                                      • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\TaskScheduler.exe
                                                                                                                                        "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\TaskScheduler.exe" 20202 "C:/Users/Admin/AppData/Local/AnyRec Studio/AnyRec Screen Recorder/logs"
                                                                                                                                        6⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Reads the TCP/IP host and domain name from the registry
                                                                                                                                        • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                        PID:252
                                                                                                                                      • C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\HotKey.exe
                                                                                                                                        "C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\HotKey.exe" 1572980
                                                                                                                                        6⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                        PID:1924
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                              1⤵
                                                                                                                                PID:916
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                                                                1⤵
                                                                                                                                  PID:1936
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                  1⤵
                                                                                                                                    PID:3372
                                                                                                                                  • C:\Windows\system32\msiexec.exe
                                                                                                                                    C:\Windows\system32\msiexec.exe /V
                                                                                                                                    1⤵
                                                                                                                                    • Badlisted process makes network request
                                                                                                                                    • Enumerates connected drives
                                                                                                                                    • Drops file in System32 directory
                                                                                                                                    • Drops file in Windows directory
                                                                                                                                    • Modifies data under HKEY_USERS
                                                                                                                                    • Modifies registry class
                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                    PID:4716
                                                                                                                                    • C:\Windows\System32\MsiExec.exe
                                                                                                                                      C:\Windows\System32\MsiExec.exe -Embedding 2071AFD8D6668BC56C2092C7A3A84359
                                                                                                                                      2⤵
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:4696
                                                                                                                                    • C:\Windows\syswow64\MsiExec.exe
                                                                                                                                      C:\Windows\syswow64\MsiExec.exe -Embedding 75162D16721F6D8AA6764D555FCEE4F7
                                                                                                                                      2⤵
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:5720
                                                                                                                                    • C:\Windows\syswow64\MsiExec.exe
                                                                                                                                      C:\Windows\syswow64\MsiExec.exe -Embedding A3A9790FFB17978AD1EE28A33A7ED45A E Global\MSI0000
                                                                                                                                      2⤵
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:5116
                                                                                                                                    • C:\Windows\System32\MsiExec.exe
                                                                                                                                      "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files\Bonjour\mdnsNSP.dll"
                                                                                                                                      2⤵
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:4300
                                                                                                                                    • C:\Windows\syswow64\MsiExec.exe
                                                                                                                                      "C:\Windows\syswow64\MsiExec.exe" /Y "C:\Program Files (x86)\Bonjour\mdnsNSP.dll"
                                                                                                                                      2⤵
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:4512
                                                                                                                                  • C:\Windows\system32\AUDIODG.EXE
                                                                                                                                    C:\Windows\system32\AUDIODG.EXE 0x00000000000004C0 0x00000000000004B8
                                                                                                                                    1⤵
                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                    PID:1588
                                                                                                                                  • C:\Program Files\Bonjour\mDNSResponder.exe
                                                                                                                                    "C:\Program Files\Bonjour\mDNSResponder.exe"
                                                                                                                                    1⤵
                                                                                                                                    • Modifies firewall policy service
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    • Reads the TCP/IP host and domain name from the registry
                                                                                                                                    PID:248
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                    1⤵
                                                                                                                                      PID:2196
                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                      C:\Windows\system32\svchost.exe -k LocalService -p -s CaptureService
                                                                                                                                      1⤵
                                                                                                                                        PID:5224
                                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                                        C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                        1⤵
                                                                                                                                          PID:5140
                                                                                                                                        • C:\Windows\System32\SecurityHealthHost.exe
                                                                                                                                          \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                                                                                          1⤵
                                                                                                                                            PID:3584

                                                                                                                                          Network

                                                                                                                                                MITRE ATT&CK Enterprise v16

                                                                                                                                                Replay Monitor

                                                                                                                                                Loading Replay Monitor...

                                                                                                                                                Downloads

                                                                                                                                                e5a78be.rbs

                                                                                                                                                • Path C:\Config.Msi\e5a78be.rbs
                                                                                                                                                • Size 126KB
                                                                                                                                                • SHA256 561eca8203ecd8f11efe84b94a154f513c63726194df8d445ac2c89ff1716cbb
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                ACManager.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\ACManager.dll
                                                                                                                                                • Size 91KB
                                                                                                                                                • SHA256 1322fda237a1f64cac001c3069029059d356a043bc5ff6018293bff79949620e
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                AKUser.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AKUser.dll
                                                                                                                                                • Size 784KB
                                                                                                                                                • SHA256 ea260df7de169ef0d4f21e8bb365edd3d1bcf9d148a62f8cd2ea008019028094
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                AnyRec Screen Recorder.exe

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe
                                                                                                                                                • Size 188KB
                                                                                                                                                • SHA256 595ac27b65fea64571641f34e7f183742b57d1845e1a2a567c0ec24c66602546
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                AnyRec Screen Recorder.exe

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\AnyRec Screen Recorder.exe
                                                                                                                                                • Size 436KB
                                                                                                                                                • SHA256 b55b4a3eb9a7187deaf20a913746b4c9cb2aae59ea3039ec4eef5788e6d0a99a
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                CEIPG.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\CEIPG.dll
                                                                                                                                                • Size 408KB
                                                                                                                                                • SHA256 edbfd39eb9ebdc5a153846f64831c12e20c4aa06abd547b80c84db92a039f236
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                CommonCtrls.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\CommonCtrls.dll
                                                                                                                                                • Size 166KB
                                                                                                                                                • SHA256 f751afaa0f8f92654f576c29ea0f1d738accbdc091bb0105110bead111a284d0
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                D3DRenderTest.exe

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\D3DRenderTest.exe
                                                                                                                                                • Size 379KB
                                                                                                                                                • SHA256 ea0208de2dba4034651429f74455456bf65ec0a8a1f3913df76af263ece008c8
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                Framework.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Framework.dll
                                                                                                                                                • Size 4.1MB
                                                                                                                                                • SHA256 6aa5003305b8fb9170dd95ad744ccc682a9155d4031aafadded6ad1e7565b10b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                HotKey.exe

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\HotKey.exe
                                                                                                                                                • Size 280KB
                                                                                                                                                • SHA256 ce0f20fe5e18f544a3e294d11ba6e6d999fd9086908dd092323ae851b86fda20
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                ID3Tagger.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\ID3Tagger.dll
                                                                                                                                                • Size 625KB
                                                                                                                                                • SHA256 4469e3f33461847c1fc5521040224f0ce30835006781c69a8c803b670cdc6a4b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                MSVCP120.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\MSVCP120.dll
                                                                                                                                                • Size 644KB
                                                                                                                                                • SHA256 92faedd18a29e1bd2dd27a1d805ea5aa3e73b954a625af45a74f49d49506d20f
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                MouseServer.exe

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\MouseServer.exe
                                                                                                                                                • Size 281KB
                                                                                                                                                • SHA256 11a345a317a933978f75354a0d50830ab0d4d5ec22d552c00513df14763b802f
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-DQ0I3.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Package\5Point1\is-DQ0I3.tmp
                                                                                                                                                • Size 10KB
                                                                                                                                                • SHA256 e2e56ee5f27a744dcca08f244a693f8d948384f032c31fdc53673b40676a0431
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-GJ0VS.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Package\Stereo\is-GJ0VS.tmp
                                                                                                                                                • Size 10KB
                                                                                                                                                • SHA256 52b041f1f5a7c043edd484875e4de642ebd4cd46e9770ef3c830186aa4dfb634
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                Qt5Core.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Qt5Core.dll
                                                                                                                                                • Size 5.3MB
                                                                                                                                                • SHA256 465adcdba73ede2ef6dfc91b64c88990643c8a8dc442f5a91e7aff87f0110c4b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                Qt5Gui.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Qt5Gui.dll
                                                                                                                                                • Size 5.7MB
                                                                                                                                                • SHA256 31c57cf191e33b795da64dd3ee8891bca27f90ceee508d44da0272a0f65734be
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                Qt5Widgets.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Qt5Widgets.dll
                                                                                                                                                • Size 5.3MB
                                                                                                                                                • SHA256 8c64d6b1d462d1b516e64ed1af29035f700972e3d65406589944026dcf19c879
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-34VJK.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Cursors\is-34VJK.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 eec852b7d7a171080789369db4581cdc8eaeb0277d705c0513e2aaff5108d06d
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-G4ILE.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Cursors\is-G4ILE.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 c51843824c3adc4cb94b40d09189cb78d7054a4a34dae1c976eed5cee37a6ced
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-T4921.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Cursors\is-T4921.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 c1682e5a61105fe20948f2d3dc93f81924f2f6652c41be0ec5bee3e5a7dc34bf
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-QVVVE.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Icons\Whiteboard\is-QVVVE.tmp
                                                                                                                                                • Size 145KB
                                                                                                                                                • SHA256 396000c15cf0c0fd058e304da81b048818c93ddafc1d5ed7d9526910990c787a
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-0KVFB.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Images\Whiteboard\is-0KVFB.tmp
                                                                                                                                                • Size 394B
                                                                                                                                                • SHA256 8432359353cffa4bbabec05a041c9217a78c2b594fc2740be89e5e248a0a2524
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-2DLDI.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Images\Whiteboard\is-2DLDI.tmp
                                                                                                                                                • Size 545B
                                                                                                                                                • SHA256 426d7fb4bd87e76ae3618f3e1fd62834a8b86b3e0d190c0a17e2d9ccff89ba69
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-3INBN.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Images\Whiteboard\is-3INBN.tmp
                                                                                                                                                • Size 270B
                                                                                                                                                • SHA256 e5ecc62fe8881fae4fb430ffc0994ce9d13c8ed9d8b24aee865bc7c742097e64
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-B1HDK.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Images\Whiteboard\is-B1HDK.tmp
                                                                                                                                                • Size 415B
                                                                                                                                                • SHA256 962cedc6381e9a7fe78a9683378ad8680de9607dae59360e5e9f4c43ad28c769
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-H1S4N.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Images\Whiteboard\is-H1S4N.tmp
                                                                                                                                                • Size 367B
                                                                                                                                                • SHA256 969c4f6894f69e1636a0902fb9d3ed4dd2b40cebcefc3cdf6b46f4355dad6304
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-J0KNS.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Images\Whiteboard\is-J0KNS.tmp
                                                                                                                                                • Size 479B
                                                                                                                                                • SHA256 016e0f0de651e353c6954d248217573395ce907b84e96e8da4e8c489feb146ab
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-QU16P.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Images\Whiteboard\is-QU16P.tmp
                                                                                                                                                • Size 445B
                                                                                                                                                • SHA256 d3f76727986d6c9d82c382a35dce79e8107fffa0b3f96953060384c3520cb982
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-TDQTR.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Images\Whiteboard\is-TDQTR.tmp
                                                                                                                                                • Size 277B
                                                                                                                                                • SHA256 c2af487fdc6b073a1e5e73690319c2daa261a4a764f1d4e5f37ce6dea5c38ba4
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-07HGD.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Images\is-07HGD.tmp
                                                                                                                                                • Size 1KB
                                                                                                                                                • SHA256 7d7608f0fc09fa9cf501f1c55a681549e31e9f0905ae712ab6a78f8bf2e8caad
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-AF0I8.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Images\is-AF0I8.tmp
                                                                                                                                                • Size 1KB
                                                                                                                                                • SHA256 4ba27e41bb0cf759fefe81213b5d41df51f7dc88fae024fe07f922eb598d69ea
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-HVVL6.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Images\is-HVVL6.tmp
                                                                                                                                                • Size 1KB
                                                                                                                                                • SHA256 415eb998281b9ca360d0446cb16b143b85dd40ee647c388647411fa1fe62360c
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-QQDHM.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Images\is-QQDHM.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 965adf4be1cac5c38e7e8002f6bf29724f07f79002a686cc2a71864fe5ddcf3f
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                Del.png

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\Del.png
                                                                                                                                                • Size 5KB
                                                                                                                                                • SHA256 0c71c8340599fd3d8b30a703f372546e3996581b4d954c466537829728c0b29c
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-057N7.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-057N7.tmp
                                                                                                                                                • Size 7KB
                                                                                                                                                • SHA256 5e880da6abfa5cc84fad0d984bcb9f09945d10e53f4e15b16eea93bbdb0b5973
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-0SIJG.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-0SIJG.tmp
                                                                                                                                                • Size 5KB
                                                                                                                                                • SHA256 3cbb51c456b8a7ffc31886b24acd70f61e1cd5a7f7d7637d1c804577464c6878
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-0TECR.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-0TECR.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 395bfb5748016bf585785d0a55b36991f2ca459ab003678d4c1ee581bf39c3aa
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-2J1TU.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-2J1TU.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 ec81bab8fa288cb8e824ff209472a4ab912a2dac3649a156d84f24f5c3e414bc
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-2VHRN.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-2VHRN.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 d3be5a82265805ac6f473c569f12684e118a52e58c1f733a34e7c23db871f620
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-5A3CQ.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-5A3CQ.tmp
                                                                                                                                                • Size 7KB
                                                                                                                                                • SHA256 8c2fdb002eed340260a42371622f9342af27f50a4df7d341def5553522e60e43
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-5MRR7.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-5MRR7.tmp
                                                                                                                                                • Size 5KB
                                                                                                                                                • SHA256 cc8c3dc9a396a4db4378157fa12dd9e81d2dffaea538d74b92a337a170aeed0d
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-8OEIH.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-8OEIH.tmp
                                                                                                                                                • Size 6KB
                                                                                                                                                • SHA256 359d925cb747c8d440a6991385b030c0f913ad72bfcfab1764e119fb60fa560e
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-BKB5G.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-BKB5G.tmp
                                                                                                                                                • Size 5KB
                                                                                                                                                • SHA256 ac8b77ad3a0d0529e15931da7c178731a8df0be35c8c1dc310269f002ce75d42
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-BM7AB.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-BM7AB.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 d765f87bb99d505455d02b61b0264ef3baf117443a6f66e1c7c9da92cce91a62
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-C1AP5.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-C1AP5.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 da47664286092a59a0700c19298b326a27219fd8ba92d186ce6d60fe4827b6be
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-CK1TU.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-CK1TU.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 00b43a601606b649d8730fc74f196aeb3e0a9fe0858fd928dcb869a089b0adcd
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-D2J7M.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-D2J7M.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 45a8984c21a85e8225024006afcd6203c797f31c5b92b9b427f2c0d9b80ada31
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-DTKKP.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-DTKKP.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 701c7738ba7cae43d1c544d9b42068c53612d33a62c337cbbead81101d44771d
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-F3KB2.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-F3KB2.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 97875d97d851e1d6532c0b22f3057de3ccd8705f11969dbb2c97abe8790331a5
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-GUGAE.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-GUGAE.tmp
                                                                                                                                                • Size 6KB
                                                                                                                                                • SHA256 7c30a464d2cd20af080f4f8810178d25735dda2a83289b18d406af25dd628a8a
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-H7K55.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-H7K55.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 648b679b6bc01490962cd3a01c479cd557f176c79ed19477a78ab7a53b93c053
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-HPJOR.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-HPJOR.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 bbcabf15edb63448b4c01958db4cdcf3edac4ea27080e85080c0e593880a2082
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-I5OL5.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-I5OL5.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 35e191998b40150a5c716b3b075a7cbda86d88ddd8ec7dd0b36ea380b31b9b6d
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-LI3J8.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-LI3J8.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 1324fc4eea3856e0363e737da04d3929bf99b270dcbf04e32a684b97d83adbfe
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-M8F44.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-M8F44.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 a5f15971a858584e78eebb4afe83e886ed60c93f27c10f07eedb778074d72793
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-MT1D1.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-MT1D1.tmp
                                                                                                                                                • Size 8KB
                                                                                                                                                • SHA256 f1387e376dcf49b8ad64cc28f9652a1e50cf3d6ec46b136e6f7206d47d71ea04
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-NQKBL.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-NQKBL.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 72333f358d8dbad8fbd12544acde94ae14397994a9f2aeb805d3edf14561eb6d
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-O4QN2.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-O4QN2.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 7e3c3581240a46413dfaa385e8553a589bf716621e613a0562bdeca42d591b47
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-Q84SD.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-Q84SD.tmp
                                                                                                                                                • Size 6KB
                                                                                                                                                • SHA256 db999c2e3170e82b82d0e3a95ecf3e457cea4f977adbf1504706efbfca9f9a8b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-QRTJJ.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-QRTJJ.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 e23f1c9991d85bfb5bf126a0a3ba4abdd34390c7f80cef8c11bbb6d26bcd9c2b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-RKR9L.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-RKR9L.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 0f1feeacc5f42c67ef42e7e07594341798b27febae72a59db26dc3822a9f3efb
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-RVLRP.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-RVLRP.tmp
                                                                                                                                                • Size 5KB
                                                                                                                                                • SHA256 1166d90d3061e415e12160f45334fd0b34862de49b688f5b6e562002749967e1
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-SS3PJ.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-SS3PJ.tmp
                                                                                                                                                • Size 7KB
                                                                                                                                                • SHA256 5437956e24352d02c9544c1e7270b381f5d0d0a64cbb0b0bc00b3350224c49a1
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-THK1G.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-THK1G.tmp
                                                                                                                                                • Size 7KB
                                                                                                                                                • SHA256 697e5a3a68862afc5ea4b14b544896f2f528b7dfb93fc21c992f5cffbbe963b4
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-TMJ5N.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Large\is-TMJ5N.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 cbc14c76b424f5cef766a50121528ecf8194ac752eff73f4886cd6d89af60b66
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                Pause.png

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\Pause.png
                                                                                                                                                • Size 5KB
                                                                                                                                                • SHA256 b868386280bfa8ddc903c396ca026e0d5873a8423ec11aa92d7d9a29ae8854b0
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-0K9C3.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-0K9C3.tmp
                                                                                                                                                • Size 2KB
                                                                                                                                                • SHA256 a06da68697540092d0765456858bb7a8f14041531466a0d9cfcd974ae74f0cff
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-1A0G6.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-1A0G6.tmp
                                                                                                                                                • Size 5KB
                                                                                                                                                • SHA256 54440d6f0d579ce5deecc675c4de6372ef784a7c558c03eb8f1428f61964b7ad
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-2AP46.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-2AP46.tmp
                                                                                                                                                • Size 5KB
                                                                                                                                                • SHA256 3ea985be970d48d617c58cb8c1e68f808a281ca23db49b8aec120981d1742f36
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-2U45R.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-2U45R.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 343a6061c48b9e0c875af6b712173c6c96d416c5ace06f84ef582e364c13bcd3
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-4C7V6.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-4C7V6.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 ff7d644d93772e0e71c614b78bc7b879363ae7db8fe0e7d74b0f8f8bd7acddaa
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-5V9Q4.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-5V9Q4.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 03922c715fc5e4775cb3f9879e1d70e6decdecc31e19f218f44f17389bef48b2
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-9A4B3.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-9A4B3.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 30fb4a2360564f130063c25b7ebd1be63421f1520491d6473398ff6ae5e22099
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-A1KI6.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-A1KI6.tmp
                                                                                                                                                • Size 6KB
                                                                                                                                                • SHA256 4b52513b148f1ece2b1f201117d673a09ef06848a3686e9a251d4de2a7d69492
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-AEQ49.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-AEQ49.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 df7ac20eb2949e5408439b85567d0ffc8f96fe72780a4f09a001fa6e71e47014
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-BJASR.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-BJASR.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 3e9495b254bfda04a8410ee06f6d0ce4ed243df87b7b019744f992c57746c221
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-BMRUJ.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-BMRUJ.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 d022e9d963e83da8ad515cd049d2ad00e261bf453b26a006175a46d77e6bc046
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-FK737.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-FK737.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 2761016934c176dbdf4e7902693f90970e07e4366a40731c07ad67f1e2ec984a
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-FRT0C.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-FRT0C.tmp
                                                                                                                                                • Size 6KB
                                                                                                                                                • SHA256 3abab31a66c03b1804c115678e421e0ca0142ba67f5f089def20a4480e3721e3
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-G8VHP.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-G8VHP.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 2946c6877f94806ce0086438e47eb48e59aaafb04c457150b6384b7ab02ba9bc
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-HN5DJ.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-HN5DJ.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 0befc97edbc01f3af1ad492cc4721ecbc2b205a5f009f375329681f563282e22
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-I8705.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-I8705.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 d0791514cce6e46e6468e33f51767db04e86bb17ed7be0c79e10f93a1a4a8331
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-JOGSU.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-JOGSU.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 6029bdce72e0e08108cfae1ea2b9a5290e96acc5db98288ef5b3af27ee81c336
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-JR7QT.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-JR7QT.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 b84fb86511a53dd4e804f0e7339c327aa5324c80fa4ce2470e6f90409b5d1d2c
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-L3FJF.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-L3FJF.tmp
                                                                                                                                                • Size 5KB
                                                                                                                                                • SHA256 fb41a2322bf5d18f8dc9afc375c74aab031d7b8f63bc544265a7faaf9c10102b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-LLAFR.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-LLAFR.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 66b230d21af22e1064b0ae177f9c23078664154b9b23529822f7f830d50e272f
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-LUGVD.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-LUGVD.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 cd59f49b55e6b3756c0935502924e16b3d29d52a00d1fa7fe1c90c7dd49f5e4c
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-MPRUP.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-MPRUP.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 47114320b0348da08f211130b2dbd41fd5c07819d4a6ff1b37ba77d8f26dde5c
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-N3O76.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-N3O76.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 9344ff72ac1bdd1b0d3e0749be959cd6ccc1a5e8b1ecd4c33f0afd5395dafb90
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-OBTR9.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-OBTR9.tmp
                                                                                                                                                • Size 6KB
                                                                                                                                                • SHA256 57f113f0acd85bcfad103dd40f00edc3dbc87305a92a6c7eee53463b3e30ebd0
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-OR3M4.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-OR3M4.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 fa6f4f63067fb6fd1ccfef97660f7e027bd64c55887f2dc96831eea574f3089f
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-PQ1UP.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-PQ1UP.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 b5eacf7a09fd9c69eb108fd2a74f713f708e932f2e3c4ec180af282cbbc888f1
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-QVC6B.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-QVC6B.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 906b4c7771512cae2a4c31d3acb83393fe8ec6a9540bb483a81d2668622ba0f2
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-RJI07.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-RJI07.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 da2bb0ee0a135b874cd3f478ae73c3fd53d3d93e030854f0c9ceb4bfaf21e098
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-S48PD.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-S48PD.tmp
                                                                                                                                                • Size 6KB
                                                                                                                                                • SHA256 006d65f62b4296543428c5dabfb6e9c0b6723f04cc80d1691786970a1517a19e
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-SR1LH.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-SR1LH.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 3360ebc77962e91800cc4f0dbd7e3cdc8283718cc22d0dd55c678eb0430081b3
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-VR8AL.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Middle\is-VR8AL.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 c77ca61e638dd683ef3045e09a785752d26838567ede374ead2f3c9261f710dd
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-2PN88.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-2PN88.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 accafe204a78a36c3618b979b2155ddee362689e5d8f542f5a03b4fa25fdd858
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-2RGQI.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-2RGQI.tmp
                                                                                                                                                • Size 2KB
                                                                                                                                                • SHA256 4d1193f6dc98239517e019eb3889b8809a785abe78d356201d17cfdb492bf731
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-33MDT.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-33MDT.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 fa4fbd852552f45092e7e71d333de44cd76d41c2462f53a4222240288c75e41b
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-359CU.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-359CU.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 f04cb1c6b64a5e17df3a59bc9cdcdf47bfa6fcb868de01b99ea6ad4cf70027ee
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-38P9O.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-38P9O.tmp
                                                                                                                                                • Size 2KB
                                                                                                                                                • SHA256 6d546ba98c8873777d3e7227a2b4ff99fc6fecb1354c9c07abcb89a8b876718a
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-3IKOE.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-3IKOE.tmp
                                                                                                                                                • Size 2KB
                                                                                                                                                • SHA256 5336eda507ad852d3b9e122af94e479f1fb2e65844cb047b682214092118fd24
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-3MOTE.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-3MOTE.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 a0ac24cbb0d28d5bdc26bcd8db26e2487014cabb9e289b36bfa65c5573cda0ad
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-4GP8O.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-4GP8O.tmp
                                                                                                                                                • Size 2KB
                                                                                                                                                • SHA256 d5240e0602352ba346f00d0215a5ba01d384dc7957d537099761d41aad329249
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-6JV3H.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-6JV3H.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 f98f86e6055253d548dd832abeb78d8646ae5db320a8abd38485e741a0087932
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-88GEV.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-88GEV.tmp
                                                                                                                                                • Size 2KB
                                                                                                                                                • SHA256 d62eec736168d9fedda0e42f72d4ba30e9c7140970583dcab037728894d3f940
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-8BDMV.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-8BDMV.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 33b631b84261f741abc4f91a146b356748f5703a681c7c7f6bc404f2f9eb67fe
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-8P6MT.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-8P6MT.tmp
                                                                                                                                                • Size 2KB
                                                                                                                                                • SHA256 d94659350b7ae21b0530bad64adb80a654d558ce332a44181c8a79006d7dbf1b
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-8QB15.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-8QB15.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 0fddf6946d62f63ec9cf24df27f614d6d9e0bbedb16d401b4e2b9c9f9956edf2
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-95JIQ.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-95JIQ.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 646dd467426f36386bd153f5b488f42ed26d7e5bd5a0361a383f0bb6a6bd4c74
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-BVDR2.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-BVDR2.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 f7d39d2c8f4e03bbcf105f67e2512b3364a2df13d4ab8c333a8d19b8899d7cf4
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-C1Q8O.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-C1Q8O.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 02329d3670fb60bb0610ede98effb09cc26b9590d68b10490273b52a942b6663
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-CIGUI.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-CIGUI.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 e9d38c640a133a258af10493d080faec899777c37edeb4e0746d662d27de39dc
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-G4L0G.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-G4L0G.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 18d74aec6f422c6985d6c73fe3e184776107ef2f01c9a2bea07e6238c85a123a
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-H5CMS.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-H5CMS.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 ce3e88074eeefe3a19affd8c1762e3d00bb04e52c490d7d1950455160056850b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-HKVVP.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-HKVVP.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 540bfd7eef913262d32047a50dd36f71df087e7587e8eace462d16740bf3ae64
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-HQ971.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-HQ971.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 bdae36ba31ab14f9772af07bdbb579171970a5b1882a714f5974eee96365d9a2
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-I9T7L.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-I9T7L.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 85d8559ecb93842f4a37f0b20143527f3927778d0d0e29e8cbc4253e72098dbc
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-JT0TL.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-JT0TL.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 e8db759d4e7fc672ea61319c945c0f1bd4bffcac006b8083f030df15c191b173
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-M15EE.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-M15EE.tmp
                                                                                                                                                • Size 2KB
                                                                                                                                                • SHA256 227c55b0895185ed7dfdd204a6ddad57594af9a7bf98af760a149772a857ae07
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-P1D81.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-P1D81.tmp
                                                                                                                                                • Size 1KB
                                                                                                                                                • SHA256 4c5ae4c980cb96fdcd31627447376b67f3dc7a01acfe5b89692b7eb4cef6f849
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-PSIHE.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-PSIHE.tmp
                                                                                                                                                • Size 2KB
                                                                                                                                                • SHA256 741a77903e83cfccbd6e4a060475d0b622b7597d28eea7f4856b46f9f1b64c5c
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-QL5I2.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-QL5I2.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 f8174c49311842951709a9aae16abbfbcfe2ffbafb733552414a6cd69609d454
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-RJ758.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-RJ758.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 cf685da46b733790fa83352a34ddbcc9087d1630961cb441254398e6ee12d2e5
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-SH0PV.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-SH0PV.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 233ab574ef72b0a8a3937eacad01f5ea7ecedc4395ea4bbbfd1f39423d6bc1e6
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-SOLID.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-SOLID.tmp
                                                                                                                                                • Size 2KB
                                                                                                                                                • SHA256 965ab3fe5e2e6e085dce440d3d10644abc42de83b5714de51e3ef6a67a60208d
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-T33UU.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-T33UU.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 bfb75e33535800b817bd5dd759c5dd986d634a21478dd0f4c047c0983f3fa4c0
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-TO9TC.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Key\Small\is-TO9TC.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 8a48b63854398d441d32e5d22defec056b9749e8efb8ef1e920330348fee7af1
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                display.xml

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Profile\display.xml
                                                                                                                                                • Size 110KB
                                                                                                                                                • SHA256 dba9b073cac64b263a1604d19f4bfa917b34794db40af52b0d8e3f4195764a7d
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                format.xml

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\Profile\format.xml
                                                                                                                                                • Size 1.4MB
                                                                                                                                                • SHA256 e95bacdf04dbbb2e6620f855ef45e0651fadd6b81edf3f3c85b6e0f7707a0f60
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-3H9LQ.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\clrsTab\is-3H9LQ.tmp
                                                                                                                                                • Size 8KB
                                                                                                                                                • SHA256 433bed6d2cca83bf6ddb184ac2ac6bcd33ced42ce048dc15d30c1157d57c1005
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-ETU58.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\clrsTab\is-ETU58.tmp
                                                                                                                                                • Size 5KB
                                                                                                                                                • SHA256 031ac99f849b896fa49d36378dd417c7050cef6471a5aefb69665fdc9e368cd6
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-OBFKC.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\clrsTab\is-OBFKC.tmp
                                                                                                                                                • Size 145B
                                                                                                                                                • SHA256 a41bebd6de8f0cafb02fe0efc6cb06368f4b89e0ae0fdc7d788bd3fab1dba787
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-0JCR7.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-0JCR7.tmp
                                                                                                                                                • Size 57KB
                                                                                                                                                • SHA256 f5608a911c992a35fc6e102d4d31cbf2283c7a355ede004e85800a7a7cb68129
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-0PL9O.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-0PL9O.tmp
                                                                                                                                                • Size 61KB
                                                                                                                                                • SHA256 05beb715f05bdaf6576e5ff2c854155896877fba036cd9dd22b672108acae3da
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-1EE1D.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-1EE1D.tmp
                                                                                                                                                • Size 56KB
                                                                                                                                                • SHA256 e4592614486a9fba6741aa84e4fc8fecd013baac5da54f5a4bea5c3a96ac5235
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-1ET6T.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-1ET6T.tmp
                                                                                                                                                • Size 72KB
                                                                                                                                                • SHA256 ff9afeac04a81d6afd806cf42543997b4d459840b6d218c043ff83faef88cae8
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-2527E.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-2527E.tmp
                                                                                                                                                • Size 67KB
                                                                                                                                                • SHA256 40b3546e75b3954be0eec7ceb6d8718c900829c8ba85d7a4523367cd728b3dae
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-2HJMS.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-2HJMS.tmp
                                                                                                                                                • Size 69KB
                                                                                                                                                • SHA256 8ba1f095acd04efe1513077c99c5eee9b8b37c7eace120376c5a3e9936d4cb3f
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-35MVU.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-35MVU.tmp
                                                                                                                                                • Size 58KB
                                                                                                                                                • SHA256 6748a609078bf2ef3714e77a2944587795cb15207b783c504ff56c7343546b18
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-38BJU.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-38BJU.tmp
                                                                                                                                                • Size 70KB
                                                                                                                                                • SHA256 d81437737a28d529db2c41084d71c21328c1ff5ef9b30310e237f0d6ad7c417c
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-3AUMK.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-3AUMK.tmp
                                                                                                                                                • Size 61KB
                                                                                                                                                • SHA256 8a4a5a572137b39b02175a8cea94c47001a1ad5de23cde1490734aab71161a0f
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-3J1M0.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-3J1M0.tmp
                                                                                                                                                • Size 60KB
                                                                                                                                                • SHA256 829321ebd8191813481b24205d32fc04c8cc9095e4135bec5b9e54f3917a22f0
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-55F57.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-55F57.tmp
                                                                                                                                                • Size 58KB
                                                                                                                                                • SHA256 b4fd8cee523375f81d9c809cf9c0a087608627b142b3a5bd0f0885fb8830036c
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-6EJLM.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-6EJLM.tmp
                                                                                                                                                • Size 61KB
                                                                                                                                                • SHA256 904ec48f5c9a4dda6b1c91c8b270df051a0df61c7401c0990f43c92344c4f0b7
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-6LIFB.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-6LIFB.tmp
                                                                                                                                                • Size 72KB
                                                                                                                                                • SHA256 86d74757288db637c79473c5aaa8b2b703453b64fad087f5d562677ed6cef2ea
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-6SSDE.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-6SSDE.tmp
                                                                                                                                                • Size 65KB
                                                                                                                                                • SHA256 8d85efdc080038596812623ef03a1190072268fdf72943d7d397d29cf0dcba46
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-6VKC3.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-6VKC3.tmp
                                                                                                                                                • Size 64KB
                                                                                                                                                • SHA256 568fa234e1c2f98d4e8b14d9f1af99e8a167bb273a81a42e80184b1494446ee0
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-71AOG.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-71AOG.tmp
                                                                                                                                                • Size 66KB
                                                                                                                                                • SHA256 0912c331d5650859cfb58f1be8decae7357abfc864cb4f9e0166acaf091b9c6a
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-7S2E1.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-7S2E1.tmp
                                                                                                                                                • Size 71KB
                                                                                                                                                • SHA256 5867831ea89f93fe5ff72127154ea4dcf6d0ed806ae3d7c948ce1d0045cd3063
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-92BIK.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-92BIK.tmp
                                                                                                                                                • Size 61KB
                                                                                                                                                • SHA256 d2658b63401407806cb479badc297a24da8bd8aee3da581f02b5e82051e74883
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-982D6.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-982D6.tmp
                                                                                                                                                • Size 69KB
                                                                                                                                                • SHA256 43b77841ccd3de7379a3ce770ff7ae6e8be17f36f1de4437d69eff1124add392
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-9C5IP.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-9C5IP.tmp
                                                                                                                                                • Size 59KB
                                                                                                                                                • SHA256 a5402eb66711d16d369d89f8890bd345c5e084dfa25da5f924680eaf0f719897
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-9D61N.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-9D61N.tmp
                                                                                                                                                • Size 52KB
                                                                                                                                                • SHA256 d9e417642b4b512c9903e419209f0a08fa8ee046472a7894b88c7cf6e440d414
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-9TDPA.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-9TDPA.tmp
                                                                                                                                                • Size 68KB
                                                                                                                                                • SHA256 fd03074f49880d18fe54754e60ebd06402286af598e081fb48ebe8025aaf8eae
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-A2QTV.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-A2QTV.tmp
                                                                                                                                                • Size 68KB
                                                                                                                                                • SHA256 0a1b3677d8cd5b83defc4dc64c59a49d516bcef9947438dbc1818db7f423ba1e
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-ABA37.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-ABA37.tmp
                                                                                                                                                • Size 68KB
                                                                                                                                                • SHA256 cf534cea35c00934f2f2717720ede4a295e86f25ea251581886b30f595ab1ba2
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-B2GA2.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-B2GA2.tmp
                                                                                                                                                • Size 70KB
                                                                                                                                                • SHA256 be1fab600007820da37aca730fcb0b3ec905cdcd92eb9d28f4fe84c3fd238580
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-BNIRT.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-BNIRT.tmp
                                                                                                                                                • Size 59KB
                                                                                                                                                • SHA256 b017225c0f01d08ca2b742a5f020c5a28270b815e68695f6c91e242ce1ce890a
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-DAHEF.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-DAHEF.tmp
                                                                                                                                                • Size 69KB
                                                                                                                                                • SHA256 ddc7693fd781c13949288b05da02784c6a29c1638e320fcbb048581b72fb284b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-DLAUU.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-DLAUU.tmp
                                                                                                                                                • Size 68KB
                                                                                                                                                • SHA256 84b4746bd4be700676abe1ac9da5760cbdf3b5e70d6db713a09e6e9ee23bd968
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-EHLF7.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-EHLF7.tmp
                                                                                                                                                • Size 62KB
                                                                                                                                                • SHA256 42a7533d2e3b33f34f200a46b952204539ee0e519749b65c4683568f9a30373c
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-EK8L8.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-EK8L8.tmp
                                                                                                                                                • Size 71KB
                                                                                                                                                • SHA256 13b8999d07f7608d1ee28c4dfa0a6ba8432dadd65062d970c3e5c601e92930d2
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-F8LL7.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-F8LL7.tmp
                                                                                                                                                • Size 68KB
                                                                                                                                                • SHA256 3d54bdb446c8f1ad9760f3586d16d2b53b3e0dd9b0875d7d2dffe9a561fdaf88
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-FF0VM.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-FF0VM.tmp
                                                                                                                                                • Size 69KB
                                                                                                                                                • SHA256 411d510d61baed643ed6566c2ae9629d4fb315fded587bb2a1b0d064d0d07435
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-FUDEA.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-FUDEA.tmp
                                                                                                                                                • Size 68KB
                                                                                                                                                • SHA256 272eb9463eb1bb33f21e2f5bfa79f9a868d71aceb5d811710c844a5f4bd473d4
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-GH25Q.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-GH25Q.tmp
                                                                                                                                                • Size 59KB
                                                                                                                                                • SHA256 b6c01185f35f039bd1939722e7df83d3d90879fb7bdd93fd9466c0e171b8bd82
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-H9CC2.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-H9CC2.tmp
                                                                                                                                                • Size 63KB
                                                                                                                                                • SHA256 fcab8b6ae27e40d9ccff8914b2867f9bcdb1b27dd1cea564ea831815f72c21e3
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-IAKPV.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-IAKPV.tmp
                                                                                                                                                • Size 69KB
                                                                                                                                                • SHA256 d7ce400ec9d6abd32ac401334d476e173b4bec87bca56da57e361e32c7a0179d
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-IPOGN.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-IPOGN.tmp
                                                                                                                                                • Size 53KB
                                                                                                                                                • SHA256 2a5d2085d21d4677ae5655b1b186b2449bb5690aaf5866ad7a7a79fe5f33ffde
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-K26VQ.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-K26VQ.tmp
                                                                                                                                                • Size 65KB
                                                                                                                                                • SHA256 03806edfba0f5393a2609377e125e9699a58f4095360e150721afbea1ff5593b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-K60O0.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-K60O0.tmp
                                                                                                                                                • Size 67KB
                                                                                                                                                • SHA256 7afafdc8e0ee86652b0d495211f681adf0f403b5d02a360c4bf3dff26ad38cc5
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-KC54G.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-KC54G.tmp
                                                                                                                                                • Size 67KB
                                                                                                                                                • SHA256 71f5936ac99ef91126bdcc41d4cd076e1b29044d24848ea57f92f325af81af96
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-KIK8E.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-KIK8E.tmp
                                                                                                                                                • Size 61KB
                                                                                                                                                • SHA256 7503729f508eb5982b4a7482127f0fe068f092406a5904b2f812233e7b8ccb1f
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-KJ0Q2.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-KJ0Q2.tmp
                                                                                                                                                • Size 64KB
                                                                                                                                                • SHA256 7737d45aa5f72f4dd2ebd7b6c2d3e14e901e09e95eaebaac050c456e00821a11
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-LNLO0.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-LNLO0.tmp
                                                                                                                                                • Size 70KB
                                                                                                                                                • SHA256 c4f64d059e9e80a007df4d34e5e4361b0e23ab5d81b9e361d434f26b94772753
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-M47LQ.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-M47LQ.tmp
                                                                                                                                                • Size 66KB
                                                                                                                                                • SHA256 7eda730713795e8befc4bd5d96523c774077ac7e8c7749650c1b78628e6e59fc
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-MC757.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-MC757.tmp
                                                                                                                                                • Size 67KB
                                                                                                                                                • SHA256 8d9274442bb890c8b0b0bc9b4a27b7ce90c9340327decca826d8a8dc04fc7ba0
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-MGKOG.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-MGKOG.tmp
                                                                                                                                                • Size 55KB
                                                                                                                                                • SHA256 d95b20b0fc6f0dbfc2a0059defb88834e2c63868afb9a119e79018b6dbf62ab4
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-N0I26.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-N0I26.tmp
                                                                                                                                                • Size 63KB
                                                                                                                                                • SHA256 b7b6ebdc186a414be9a12e2dbbecd9c041faf5792ec30f4c181b4e4ef4c0d50a
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-N0IEP.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-N0IEP.tmp
                                                                                                                                                • Size 55KB
                                                                                                                                                • SHA256 78169b2827b7d2c88493a3b8bdf366f884e79b5df12b7d13183dc83b5ac0847c
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-NG3QM.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-NG3QM.tmp
                                                                                                                                                • Size 71KB
                                                                                                                                                • SHA256 32d4a4794931aedefec80d4e0d8db0a7e3d38f42bcbe9fc46cfabc067fd6dd45
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-O26HG.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-O26HG.tmp
                                                                                                                                                • Size 73KB
                                                                                                                                                • SHA256 3ccd261b19cdfcdd1a3a17c5814dcbde19546a7ad72887de7d7304980a9a3cad
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-O8A4V.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-O8A4V.tmp
                                                                                                                                                • Size 53KB
                                                                                                                                                • SHA256 c9f16285c3ca47e6df34f3643556a7d62d5a28b78260d5ed6a7588f242503392
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-OBJ3Q.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-OBJ3Q.tmp
                                                                                                                                                • Size 67KB
                                                                                                                                                • SHA256 2135142b7d64f87dc5dc39ff5eb29fddf4fc1eb8e1721b7922a787a4f3b81727
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-PJ9C7.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-PJ9C7.tmp
                                                                                                                                                • Size 68KB
                                                                                                                                                • SHA256 485adc33986493e4da914697659930e46b5f334ee5c3ab6dc0e077f55fb363a5
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-PJ9HL.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-PJ9HL.tmp
                                                                                                                                                • Size 63KB
                                                                                                                                                • SHA256 76117f9c546ce591ccdfcc1f010d8c4b91881a41584239bb85643269db392fd6
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-PL942.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-PL942.tmp
                                                                                                                                                • Size 72KB
                                                                                                                                                • SHA256 e1dd6433f0f9e88b470f6470af36b7241baa4213557e130b8099cd5511364b2d
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-PN9I5.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-PN9I5.tmp
                                                                                                                                                • Size 56KB
                                                                                                                                                • SHA256 2a7280b1ecd08a50f76256cc8f3de6b1a5ef24654e5be8b700c327feedcf217a
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-QAL40.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-QAL40.tmp
                                                                                                                                                • Size 72KB
                                                                                                                                                • SHA256 7197babbd9142f1a3bdeb192d77ebe95075ffe9ebadf6f7051570413fd608fc8
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-QQN2T.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-QQN2T.tmp
                                                                                                                                                • Size 69KB
                                                                                                                                                • SHA256 894b57e75227257ef475312377814242563540342c0ae3ae1c54a883427f2f51
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-QTOQJ.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-QTOQJ.tmp
                                                                                                                                                • Size 62KB
                                                                                                                                                • SHA256 89ea7037d36a5decbf887d99d0a67bb1e51c77c6946ed7cce1730f463b626764
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-R3425.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-R3425.tmp
                                                                                                                                                • Size 67KB
                                                                                                                                                • SHA256 b14494da0c2b70d858d178ecce2e66dc1da4c8f3f0cffd7c406b700fd2c39086
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-R92UB.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-R92UB.tmp
                                                                                                                                                • Size 61KB
                                                                                                                                                • SHA256 64f480108ca978352e53f67052dda59a6736fafa325fbc12cfd10907a7f4d3b1
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-RQ00L.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-RQ00L.tmp
                                                                                                                                                • Size 55KB
                                                                                                                                                • SHA256 e21d44310adaf46a19ac084883973830fbfaf7bcecb65a1f85987dbc6c4b325d
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-SHUFF.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-SHUFF.tmp
                                                                                                                                                • Size 65KB
                                                                                                                                                • SHA256 efd1f65c4668f8ed7c77b81f189bcad6f3727effb1d84f9998f388568580d873
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-SP9G6.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-SP9G6.tmp
                                                                                                                                                • Size 70KB
                                                                                                                                                • SHA256 5738c1e0934e773ff3018b915f6ece940a4ea62d8584d1427a48c34d7cef936b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-TILTI.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-TILTI.tmp
                                                                                                                                                • Size 66KB
                                                                                                                                                • SHA256 a0271c84ac75f352c1055be7505d85a605bc92521bb312f83d7032f8fa56a55f
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-TPFNE.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-TPFNE.tmp
                                                                                                                                                • Size 70KB
                                                                                                                                                • SHA256 cfcf3fd8aab9c1277b916bcafb41d971515c132be9f016f52e997886aeedf362
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-U4ET9.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-U4ET9.tmp
                                                                                                                                                • Size 53KB
                                                                                                                                                • SHA256 8bcd04e65dc5f4b672e2354732de82572166361f350ec0b7990f399cdb38e648
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-U9F85.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-U9F85.tmp
                                                                                                                                                • Size 64KB
                                                                                                                                                • SHA256 ca758ec480e13cb0532659c4571732fbf013bb145fe8dcda42d408e4c95f870e
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-UPN03.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-UPN03.tmp
                                                                                                                                                • Size 68KB
                                                                                                                                                • SHA256 0402b42ba3e85ed8c6421bb026aa2d7e564a293fe3cb779b1e85f26ff957419e
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-UVI7Q.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-UVI7Q.tmp
                                                                                                                                                • Size 70KB
                                                                                                                                                • SHA256 b37cece26f09c08a7fdf2af0b201180e62222d0497fa9b93360c8964b2b7cc0e
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-V7EAL.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-V7EAL.tmp
                                                                                                                                                • Size 47KB
                                                                                                                                                • SHA256 ecf3edae9b3497a64d19e3b983a134ce2ed2da48053e7e7107223842f1c5dc24
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-VN24U.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-VN24U.tmp
                                                                                                                                                • Size 67KB
                                                                                                                                                • SHA256 f45d4ee050f118b6f8185e6191c0170bda3e595c4384445bfe9c27ddd0ed73d1
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-VSOSH.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\countdown\is-VSOSH.tmp
                                                                                                                                                • Size 38KB
                                                                                                                                                • SHA256 a86b3941d6a6963e9f95c993992675b1443a005bda6702ae51cafd354e841e08
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-0LVPO.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji1\is-0LVPO.tmp
                                                                                                                                                • Size 21KB
                                                                                                                                                • SHA256 33f8adb3d015e26a37ae0064e458da0e4c76ae9abb346a5fbf226a8ed0b06af1
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-4LGQ5.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji1\is-4LGQ5.tmp
                                                                                                                                                • Size 12KB
                                                                                                                                                • SHA256 5f0f53cb9ad7c9fc7210ddf8d7fb56ad7c1799f3bd47cc1954abc0a44f856e23
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-5OTRV.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji1\is-5OTRV.tmp
                                                                                                                                                • Size 17KB
                                                                                                                                                • SHA256 26aadd17ee10f0f0f0c2e7e88aeb677342d4861ea9469650de4f666ded1e5d44
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-741ND.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji1\is-741ND.tmp
                                                                                                                                                • Size 10KB
                                                                                                                                                • SHA256 29fdac8061f842055951bf8a2ac698f3bfaf3229f0af314975862ff87f9c96a1
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-7R7RM.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji1\is-7R7RM.tmp
                                                                                                                                                • Size 7KB
                                                                                                                                                • SHA256 87d5946133d5a01193b90d2b6b9da48ac360880f12025eea72d1e2a72aa52a6c
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-A7FAP.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji1\is-A7FAP.tmp
                                                                                                                                                • Size 8KB
                                                                                                                                                • SHA256 c2d6478bb0a5d75ef0caf4ec38736b72296d14c608babdeab0feb976536d85e5
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-AJ5KH.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji1\is-AJ5KH.tmp
                                                                                                                                                • Size 7KB
                                                                                                                                                • SHA256 d4c3bbd36ff897df5253ff1044d60ba973d9f9fc8862d40d8110a3477bf8cd14
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-G7MKP.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji1\is-G7MKP.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 fe56ed35ff51fcf318540fd4cbf07cf60a34b8182bc494b82b25171585311f92
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-NMRS7.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji1\is-NMRS7.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 3c9885311d06f0df0eeb763055ff0e3efcdea4a9694d7c256db170fb2776ebc1
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-SM07N.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji1\is-SM07N.tmp
                                                                                                                                                • Size 8KB
                                                                                                                                                • SHA256 a113559f17ed195ebbb6304db089a55366563bc6a37b4a93f3a8ece7a5841650
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-0KI19.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji2\is-0KI19.tmp
                                                                                                                                                • Size 10KB
                                                                                                                                                • SHA256 09a51ff6501eb08d81093dd72b777cf192254d41a7bcbc989ad98e59513ff7bc
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-18443.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji2\is-18443.tmp
                                                                                                                                                • Size 10KB
                                                                                                                                                • SHA256 5d9337b3b29289052b340fbd60ae5d28a8759ec383326d7f01fcfd7bf125f18d
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-3O9CV.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji2\is-3O9CV.tmp
                                                                                                                                                • Size 6KB
                                                                                                                                                • SHA256 b0dacb59efd84679a13923eae51292fc57cbfa8bcd71c26abf12d483550a42b6
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-611FT.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji2\is-611FT.tmp
                                                                                                                                                • Size 6KB
                                                                                                                                                • SHA256 941b7efb9d3f425fc63fea036f165be96b427fbdf4f78aa42999c9132756208f
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-76CSF.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji2\is-76CSF.tmp
                                                                                                                                                • Size 7KB
                                                                                                                                                • SHA256 cc03ad7832f76c8d56e4badcf9ed91acfd0e4818e3a1bca2b9ebdf6c4c73666e
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-80MDL.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji2\is-80MDL.tmp
                                                                                                                                                • Size 7KB
                                                                                                                                                • SHA256 319566f5c5d70c11c2867d3c9071339f10e5c1fa6b8a6a0e86f2d3b3a4191abf
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-BRC7H.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji2\is-BRC7H.tmp
                                                                                                                                                • Size 5KB
                                                                                                                                                • SHA256 0443603c6e8a229465ec2aee48fb0c84147f2de44a512c445c837f5155d22c61
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-DJAAS.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji2\is-DJAAS.tmp
                                                                                                                                                • Size 9KB
                                                                                                                                                • SHA256 ee7d7a215f6510bb5da73c2bc3fbfcc23fd5ba312a1c599fd56d49ab52cb2226
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-IJBL4.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji2\is-IJBL4.tmp
                                                                                                                                                • Size 6KB
                                                                                                                                                • SHA256 9a115787d621c88730696c093f6c85b4437a3de0c9b6275a8a5171499323afa4
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-VF9LH.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji2\is-VF9LH.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 e63ab430df029c1dee69e0fa189752d31ab2ec33961eb3e6bb28afb2f659f454
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-0E42A.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji3\is-0E42A.tmp
                                                                                                                                                • Size 36KB
                                                                                                                                                • SHA256 312e98ccd670ebaf775370eb7d0836d2dc3a5d29b391c69e4dad6097ab5cd17b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-6564I.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji3\is-6564I.tmp
                                                                                                                                                • Size 44KB
                                                                                                                                                • SHA256 6e250e6bceeb8a2addc9d09466a587b9c056b7a859e5ec6da93c9327bbb471d0
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-CVOJ1.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji3\is-CVOJ1.tmp
                                                                                                                                                • Size 40KB
                                                                                                                                                • SHA256 a0331ef6180d21226d2ebfe9f743d6250862db6eb2cd1ea41b077137a0cdfab7
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-HT4SC.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji3\is-HT4SC.tmp
                                                                                                                                                • Size 36KB
                                                                                                                                                • SHA256 dc65edf667438868e99fa1a747db61276d4551e901537c61cb3f64027f5d9760
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-K73D7.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji3\is-K73D7.tmp
                                                                                                                                                • Size 38KB
                                                                                                                                                • SHA256 21e9b9e1b027a3fd5db396140f8d671939a04101aafcbb22eb31a058d93a112a
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-OK9GP.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji3\is-OK9GP.tmp
                                                                                                                                                • Size 44KB
                                                                                                                                                • SHA256 4646ce6409c57c312996d1abafde1a3eaf004877a3677a6d19028e0268acd7a6
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-SM2QJ.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji3\is-SM2QJ.tmp
                                                                                                                                                • Size 41KB
                                                                                                                                                • SHA256 4cf67e196712e38c29865dd37563a414b4c7e9c610acfd1fb518a43493e67cfd
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-U0AES.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\emoji\emoji3\is-U0AES.tmp
                                                                                                                                                • Size 32KB
                                                                                                                                                • SHA256 970312e41c1be69f31253a86a74bb3e8856fb7e432c6e862970b330220d9f51a
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-QNV1K.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\is-QNV1K.tmp
                                                                                                                                                • Size 338B
                                                                                                                                                • SHA256 ef47e13e260cd80148e13a03d2e8be67bfdb766cf52ceff058b7365b229db82b
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-LVOA9.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\playaudiobg\is-LVOA9.tmp
                                                                                                                                                • Size 50KB
                                                                                                                                                • SHA256 28c7a8681d3798da32dad2625aa9223db9bf4779665c21d7ab258a40a0ff385d
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-07GTF.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\wav\is-07GTF.tmp
                                                                                                                                                • Size 12KB
                                                                                                                                                • SHA256 2d55fe0e379023c9cb84e4b66fa6a4f4f85eb05fe893c096e43a2929c9a26480
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-5PER1.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\wav\is-5PER1.tmp
                                                                                                                                                • Size 24KB
                                                                                                                                                • SHA256 4f935edc60e75ffed27bb31d44cb826f86bc4a6bb467d70a60b6ee5e3b347fc3
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-D9I1K.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\wav\is-D9I1K.tmp
                                                                                                                                                • Size 188KB
                                                                                                                                                • SHA256 8f4053727d1049e465f62cc42762387e0f3074392494d6b0374b72fdf0a85a2b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-DO25N.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\wav\is-DO25N.tmp
                                                                                                                                                • Size 12KB
                                                                                                                                                • SHA256 622740b09a3b344900d29ff3e8cacdfcdffd2b9f242a71239b3bce383c1386bc
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-I1EGJ.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\wav\is-I1EGJ.tmp
                                                                                                                                                • Size 44KB
                                                                                                                                                • SHA256 43cd9da69ce2ebeaa2a3005986563433d39889640b4c9b02ff065ff81585325c
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-J29M3.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Resource\wav\is-J29M3.tmp
                                                                                                                                                • Size 71KB
                                                                                                                                                • SHA256 5a8f08725624be10e866b0ab3a322fbc9dcd225774d467160ca4559de63e6754
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                ScreencastV6.exe

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\ScreencastV6.exe
                                                                                                                                                • Size 2.9MB
                                                                                                                                                • SHA256 b67ba0503fd21be4f09f5276178ef28e66e8a7045cd95ab153f928af35e6ed62
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                TaskScheduler.exe

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\TaskScheduler.exe
                                                                                                                                                • Size 77KB
                                                                                                                                                • SHA256 201ad3860bc216d0fa041a864b21fe659cb0356a73820e3c03383db9fce69938
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                Utility.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\Utility.dll
                                                                                                                                                • Size 25KB
                                                                                                                                                • SHA256 41ee96c1b8925c89054ebbca547b247149c34cf16c41318f3683f2d0ef058761
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                app.ico

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\app.ico
                                                                                                                                                • Size 156KB
                                                                                                                                                • SHA256 7735d595bb36d6d71ebe9f99ec1afca3aead84bd000d7c1630c6876ab9ec442b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                hwcodecinfo.exe

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\hwcodecinfo.exe
                                                                                                                                                • Size 574KB
                                                                                                                                                • SHA256 f2489a0a8f79b0c8c5bfccdb1b935e62cbe8c6739a9081ba5bc4e5d63686eead
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                hwcodecinfo_vcu.exe

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\hwcodecinfo_vcu.exe
                                                                                                                                                • Size 397KB
                                                                                                                                                • SHA256 8d317da0e9403d233f25c0f9d06848d8583ad450365688a57739ca331c979b14
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-503CK.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\is-503CK.tmp
                                                                                                                                                • Size 375B
                                                                                                                                                • SHA256 6792e2f608c180db0f8e145628808b3575956a6e15d4d9bdd519a368af89aa31
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-6A8AP.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\is-6A8AP.tmp
                                                                                                                                                • Size 115B
                                                                                                                                                • SHA256 ec83860eee875b91835d39ca42485a9f7e6171a1ead0af1ab26b52e5870d807c
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-6BEL0.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\is-6BEL0.tmp
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 6ca79e203368029a79f8f0560c56294720d9ea6547615ea561dad82609d95192
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-6NGUJ.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\is-6NGUJ.tmp
                                                                                                                                                • Size 1.9MB
                                                                                                                                                • SHA256 081ce2069c609c528bcd40e505db3364a01dccc87cb381201878a719c3d74b10
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-6TF6I.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\is-6TF6I.tmp
                                                                                                                                                • Size 412B
                                                                                                                                                • SHA256 03f78dac41bc68431bef10e6235c1faf1aa7ac071b48a40a27eaa4fe2303c9fe
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-8VPDM.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\is-8VPDM.tmp
                                                                                                                                                • Size 130KB
                                                                                                                                                • SHA256 cacb009d0bd992f77d6a50ca588ca6d949514bd4826940fcd37a2876a0f928e8
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-ATNPN.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\is-ATNPN.tmp
                                                                                                                                                • Size 27KB
                                                                                                                                                • SHA256 0e0764957595cbcd3df28dbb47d0f55cd0a1a6ce934e88ef46b0fe43c329a131
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-ILUMJ.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\is-ILUMJ.tmp
                                                                                                                                                • Size 2.6MB
                                                                                                                                                • SHA256 53be81cc6e2dc95a1041e8f3d8f500fad4259ab20a1aac151b5fc7a64d354a93
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-L5O3D.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\is-L5O3D.tmp
                                                                                                                                                • Size 119B
                                                                                                                                                • SHA256 ae9d441059d3719b82cce07b91a444bd4d92ec0158577d16f55b05d0c5d45d38
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                is-M8RVM.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\is-M8RVM.tmp
                                                                                                                                                • Size 6KB
                                                                                                                                                • SHA256 5426cd5b7a4c61eaf6af5375a8a59303e79b9c8ed499eefa419ea8363f0fac3a
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-U49NU.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\is-U49NU.tmp
                                                                                                                                                • Size 196KB
                                                                                                                                                • SHA256 21f8ebd8d29536ffc4c9619079e0212fa464198454c9b72c2fc3ff0dc3b66279
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                libcurl.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\libcurl.dll
                                                                                                                                                • Size 496KB
                                                                                                                                                • SHA256 ca304d2e2083a1f7f34a818039f6487e99e04ae83a6ee7501044629da1045ea1
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                libusb0.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\libusb0.dll
                                                                                                                                                • Size 79KB
                                                                                                                                                • SHA256 eb3d9103e9bfff9aead73fa833c550ebea38b0833c5bf0254e6b9129911d5f9a
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                libusbK.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\libusbK.dll
                                                                                                                                                • Size 100KB
                                                                                                                                                • SHA256 a1247cbf5a080f2d0844bc77bac44ef4c81a00240647db47656747717dd8e884
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                main.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\main.dll
                                                                                                                                                • Size 5.6MB
                                                                                                                                                • SHA256 2cad4eff36c0c5adf9473b80a886f02994b5ba22929a8a8ab9109c2b6c1ed8c2
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                mirrorinstall.bat

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\mirrorinstall.bat
                                                                                                                                                • Size 139B
                                                                                                                                                • SHA256 49acc246bf48e627bf40237e2a8cecb9fb2bf257a236570d375dd057f0b5c10a
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                msvcr120.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\msvcr120.dll
                                                                                                                                                • Size 940KB
                                                                                                                                                • SHA256 d28c7ab34842b6149609bd4e6b566ddab8b891f0d5062480a253ef20a6a2caaa
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                mux.exe

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\mux.exe
                                                                                                                                                • Size 17.4MB
                                                                                                                                                • SHA256 baaf30fee0d01e3525c1053826b623043db80a60d631e99ee78a6c6b7cdba8ca
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                qwindows.dll

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\platforms\qwindows.dll
                                                                                                                                                • Size 1.2MB
                                                                                                                                                • SHA256 a78c3f2f9802451df42f81da8f1f7680f104c0339641c7fd511d01f19eab6a4b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                affiliate.xml

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\product\affiliate.xml
                                                                                                                                                • Size 5KB
                                                                                                                                                • SHA256 4a2575d8dc7496fd8ba6167ed93d673687330e066df35e8ed2515013707aa9d4
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                is-EEM9A.tmp

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\product\is-EEM9A.tmp
                                                                                                                                                • Size 1KB
                                                                                                                                                • SHA256 8c51d4a8bc580f9b6fb36010ebbf77991af76fae960f59e02e712299a6a59c43
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                splashScreen.exe

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\splashScreen.exe
                                                                                                                                                • Size 243KB
                                                                                                                                                • SHA256 59e230a07ad5b50ed17055032edd631e88f142dd50b98fcbaa69a5776ae3a3cc
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                plugins.dat.5460

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\vlc\plugins\plugins.dat.5460
                                                                                                                                                • Size 83KB
                                                                                                                                                • SHA256 514fe0dfec55a7006e8b6562524b34d998bc03dcf28fba466da436efa501c3f5
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                vlc-cache-gen.exe

                                                                                                                                                • Path C:\Program Files\AnyRec Studio\AnyRec Screen Recorder\vlc\vlc-cache-gen.exe
                                                                                                                                                • Size 133KB
                                                                                                                                                • SHA256 860b1211b80d429f59f841f0359c6de9da4ea914f1575674f48a0de27ecd5fa6
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                dns_sd.jar

                                                                                                                                                • Path C:\Program Files\Java\jre-1.8\lib\ext\dns_sd.jar
                                                                                                                                                • Size 16KB
                                                                                                                                                • SHA256 3818abdee5b1d3d77ae4a5ace25a638b2d7d624605f8e8ce14dd6d4c6639c00c
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                00c1ddaf-1091-431a-a165-bfbc9c1d5832.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\00c1ddaf-1091-431a-a165-bfbc9c1d5832.tmp
                                                                                                                                                • Size 34KB
                                                                                                                                                • SHA256 605c0a8ea415fba97d4bfa85779362311c2c192bec43c6b85946a7af30c00b97
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                3333d49a-5101-40b2-af32-dc36ac49a0b5.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3333d49a-5101-40b2-af32-dc36ac49a0b5.tmp
                                                                                                                                                • Size 37KB
                                                                                                                                                • SHA256 4cb618895cf4d2cbdbf4fcf77b5f67f2ab283855b91c6492255d3661aea5799b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                555029be-6391-4edc-ba96-464558aee5c1.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\555029be-6391-4edc-ba96-464558aee5c1.tmp
                                                                                                                                                • Size 37KB
                                                                                                                                                • SHA256 9dc0be2e716e267d02573da660f8f1bba472639e74f20024722dd0b1173bd3a3
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                5b0ddddb-df3a-462c-a56a-a97ee44fff24.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5b0ddddb-df3a-462c-a56a-a97ee44fff24.tmp
                                                                                                                                                • Size 34KB
                                                                                                                                                • SHA256 0ed84f7ba9890bd8202bb5ffe91b32cb8712d62c2c6a71849d1bbd232f803d60
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                820beb2b-f648-4057-8b28-a98e03a3c38f.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\820beb2b-f648-4057-8b28-a98e03a3c38f.tmp
                                                                                                                                                • Size 38KB
                                                                                                                                                • SHA256 724da154b1c58be8fb0294f76e64a123c34e1410d76042d07e10ef8d875a6a06
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                8b6eb5d1-aee5-41f3-a7af-20ed2066835b.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8b6eb5d1-aee5-41f3-a7af-20ed2066835b.tmp
                                                                                                                                                • Size 34KB
                                                                                                                                                • SHA256 e82ab923deff6c8814e232730d625cf27dc0d9ebc9eb050d66533b72188c3395
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                916ecf9a-c4f7-48a9-ab16-0f31e626f1fd.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\916ecf9a-c4f7-48a9-ab16-0f31e626f1fd.tmp
                                                                                                                                                • Size 105KB
                                                                                                                                                • SHA256 70186446beefb5f52a8af72dc666f019127ca772ab346b24c242d8d83b3dbd41
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                settings.dat

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                • Size 280B
                                                                                                                                                • SHA256 54a604899198f01e1a2f5ec52bac53679a6d2775840ba8c81ab97c59f718adf8
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                settings.dat

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                • Size 280B
                                                                                                                                                • SHA256 fe09a9e94fbd795d6fab442dc426ef79e7bd47dbd80086b003cb1cd34d18db58
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                settings.dat

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                • Size 280B
                                                                                                                                                • SHA256 2906444a3f5095bd2950856223a78dd49cdfd497c944d67e123b3a4df5d65c7b
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                settings.dat

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                • Size 280B
                                                                                                                                                • SHA256 99cf53c96515f20ef3af1d564765df98a0ecb7e37ac142c3a92a9dca6a269301
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                settings.dat

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                • Size 280B
                                                                                                                                                • SHA256 a8d94816833d49a5477da73f51abff86f38e400a5828ac2d382e6a819cde5b37
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                388f8523-2182-42a0-b5ec-94140b389b5a.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\388f8523-2182-42a0-b5ec-94140b389b5a.tmp
                                                                                                                                                • Size 14KB
                                                                                                                                                • SHA256 eb436a9fd42d1b115300ee3692884ceb9f16b0e4c580043a7fc59b6882362ae1
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                3cf7d6e6-2b72-4b16-aa2f-3fc397d8657f.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3cf7d6e6-2b72-4b16-aa2f-3fc397d8657f.tmp
                                                                                                                                                • Size 12KB
                                                                                                                                                • SHA256 9af01dfb06743e9d5deec3e3536e67331cd47382d15a487131deebbb9d169fed
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                47104fc8-4e9a-43ca-a5b7-fb148d931f89.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\47104fc8-4e9a-43ca-a5b7-fb148d931f89.tmp
                                                                                                                                                • Size 414B
                                                                                                                                                • SHA256 8b519e3aed196a3907d864de350183212ab77c39a52ab4d6bcbcf65f21231890
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                5775210f-82dc-4fb6-b836-464785c0e84a.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5775210f-82dc-4fb6-b836-464785c0e84a.tmp
                                                                                                                                                • Size 12KB
                                                                                                                                                • SHA256 c3bdb758cc41135a284d1db80848fe98b65ccfe2b9c0cd01849ac9c581025749
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                635d0d34-dfe1-4345-a067-42c1f25fe5d2.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\635d0d34-dfe1-4345-a067-42c1f25fe5d2.tmp
                                                                                                                                                • Size 13KB
                                                                                                                                                • SHA256 697d98bfd4b419ce560f19ae3b15a54788536699158feb4932ba682a5159ee89
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                63c6b939-68fa-4148-9e29-7b4715651c96.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\63c6b939-68fa-4148-9e29-7b4715651c96.tmp
                                                                                                                                                • Size 6B
                                                                                                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                7f5510b9-b68d-45f3-9b42-759bcdac1db1.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7f5510b9-b68d-45f3-9b42-759bcdac1db1.tmp
                                                                                                                                                • Size 14KB
                                                                                                                                                • SHA256 ba7e5d19fd4f854fe0b473c4bd3a83b1cf428e4955dfe45f22f837ec1df65f69
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                LOG

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
                                                                                                                                                • Size 331B
                                                                                                                                                • SHA256 94bc31d653fee0dbb4f01d9843aabb299c0fd4dd3841378f77efa283d97abb69
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                LOG.old

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                • Size 331B
                                                                                                                                                • SHA256 f0d740aa1d2d78b50f6b3867e4bc30d8826a04ad17c473d177b9fb01c754df2a
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                temp-index

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 e3316f777b6202474b1ed12838f87303437bb919fb35d7a9f6b888b91351c8bb
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                temp-index

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 3d93defaa770d9577a2a574fa36201295beab900f02eca0521b807ff746d4cea
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                data_1

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
                                                                                                                                                • Size 264KB
                                                                                                                                                • SHA256 d377a2cece3f818f8ecbdd63de44437baf9c0f99eb637c89ceb9fff15af37b10
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                f58be644-4298-471d-a59f-63a2051d3c10.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f58be644-4298-471d-a59f-63a2051d3c10.tmp
                                                                                                                                                • Size 2B
                                                                                                                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                dasherSettingSchema.json

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
                                                                                                                                                • Size 854B
                                                                                                                                                • SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                17915f7f-c3f9-483e-9a41-526c6643691b.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\17915f7f-c3f9-483e-9a41-526c6643691b.tmp
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 f30bf31051027471a94f4ebbaf0bd624d21fba60237b447387675d9a9caad926
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                1af99b6c-cb34-428f-9f6c-cb5610c4423e.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1af99b6c-cb34-428f-9f6c-cb5610c4423e.tmp
                                                                                                                                                • Size 40B
                                                                                                                                                • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                269a65cd-49a6-4c8f-9ca8-6a4d60690caf.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\269a65cd-49a6-4c8f-9ca8-6a4d60690caf.tmp
                                                                                                                                                • Size 5KB
                                                                                                                                                • SHA256 01aa6cccaaff1114c1cb3f717bc72749518df3e4fb1c7c2b4d30ba9c3e1034f3
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                43fe3b43-a324-4bb9-9c6b-1761f5dc3cec.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\43fe3b43-a324-4bb9-9c6b-1761f5dc3cec.tmp
                                                                                                                                                • Size 856B
                                                                                                                                                • SHA256 b344a7e46677916a5094c2adb1880d6f40812cb95d65d54aafa2ba61e3aee3cb
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                75d4e085-1cde-422b-b308-150e897b992d.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\75d4e085-1cde-422b-b308-150e897b992d.tmp
                                                                                                                                                • Size 2B
                                                                                                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                sync_diagnostic.log

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                • Size 4KB
                                                                                                                                                • SHA256 7371ba3cc861d9912b1303dd8c783e808b8e357420c02f07ac8e1242d72a15d4
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                b3721716-1db0-438a-9878-39497e73eab6.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b3721716-1db0-438a-9878-39497e73eab6.tmp
                                                                                                                                                • Size 14KB
                                                                                                                                                • SHA256 2a36a94813f1f30ca76283671967b126b31551a28c8e974db9d0c6dc88f4f8f0
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                cf759587-1627-429f-8929-09fc607c7dcb.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cf759587-1627-429f-8929-09fc607c7dcb.tmp
                                                                                                                                                • Size 12KB
                                                                                                                                                • SHA256 5acae44d49d6812f11a2b5fb9584d99b8f11449f0f848d17a61588d3201ce2f6
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                eaa1677d-9858-4347-9d17-8e382982c418.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eaa1677d-9858-4347-9d17-8e382982c418.tmp
                                                                                                                                                • Size 27KB
                                                                                                                                                • SHA256 79da7d81e5a1f7c389cbc0a561db56554cd7a6d18e1ca34791d38676fa5e48df
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                fa69c5a5-340a-4ffe-9614-89395ac77969.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fa69c5a5-340a-4ffe-9614-89395ac77969.tmp
                                                                                                                                                • Size 70KB
                                                                                                                                                • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                OperationConfig

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                                • Size 3KB
                                                                                                                                                • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                b2b26f75-ae0a-4b64-b6bb-aa29c2817965.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b2b26f75-ae0a-4b64-b6bb-aa29c2817965.tmp
                                                                                                                                                • Size 22KB
                                                                                                                                                • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                a93cfcf2-f39f-4210-bb52-3ce39258c5f8.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a93cfcf2-f39f-4210-bb52-3ce39258c5f8.tmp
                                                                                                                                                • Size 38KB
                                                                                                                                                • SHA256 6bb3286f26cbfcc72e73d154c017da3fe45adb12453d4477de9fa738222bf48b
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                0ef98ad3-7696-4804-8fa0-98630d717dda.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\0ef98ad3-7696-4804-8fa0-98630d717dda.tmp
                                                                                                                                                • Size 492B
                                                                                                                                                • SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                2f883459-5abf-41de-9a9f-8c024138c99c.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\2f883459-5abf-41de-9a9f-8c024138c99c.tmp
                                                                                                                                                • Size 732B
                                                                                                                                                • SHA256 556feddcbd9b9cd3e28eadee8e310af21c5251e941f1ce8a66aeb0ce40bbe84d
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                465109ac-4a65-4b15-a375-59dbea680d15.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\465109ac-4a65-4b15-a375-59dbea680d15.tmp
                                                                                                                                                • Size 1KB
                                                                                                                                                • SHA256 2c65858889b7b877cd4c74e21df408e18f5241ad3ee472ce50780a9c5b6a08dd
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                51485329-2353-49b5-9ae2-bb2069071858.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\51485329-2353-49b5-9ae2-bb2069071858.tmp
                                                                                                                                                • Size 972B
                                                                                                                                                • SHA256 f2095e18ded6e24eb65ca55c2ae3f239e5c775c2d548fcd7220fdcc5188fd5c2
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                651be25c-e40b-4326-bd8b-d5147109380e.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\651be25c-e40b-4326-bd8b-d5147109380e.tmp
                                                                                                                                                • Size 2KB
                                                                                                                                                • SHA256 9425b0d5e1e06eb33a4470e982e50173869589fef450b432133846ad240733c9
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                7f579583-49e9-4c75-9857-10f330f94c50.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\7f579583-49e9-4c75-9857-10f330f94c50.tmp
                                                                                                                                                • Size 1KB
                                                                                                                                                • SHA256 6277631451c6db9c340ba1b03f5caeba5566d3e48d55077d288f6067e908322f
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                8433b02a-4c1f-4822-aca4-e0df698c5df9.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\8433b02a-4c1f-4822-aca4-e0df698c5df9.tmp
                                                                                                                                                • Size 132B
                                                                                                                                                • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                9b1f4ccc-5308-4efc-93c8-1b01a1aacc97.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\9b1f4ccc-5308-4efc-93c8-1b01a1aacc97.tmp
                                                                                                                                                • Size 2KB
                                                                                                                                                • SHA256 f08117bf4ad345bcd702e13c1143188c63d4e8566f092a7e343a456a0e498ef1
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                a08939d9-d5ae-47b9-980d-5dcc9a8c7636.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\a08939d9-d5ae-47b9-980d-5dcc9a8c7636.tmp
                                                                                                                                                • Size 1KB
                                                                                                                                                • SHA256 4ccbe5a78c5da551aa333e204dc997aef7632457bc60581fcc5ac32ad928bd1e
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                b205d3ab-eccc-488e-a7ac-dee3818a2781.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\b205d3ab-eccc-488e-a7ac-dee3818a2781.tmp
                                                                                                                                                • Size 1KB
                                                                                                                                                • SHA256 6daa62fe0ceb8d79bbe8742d84a2198627d6c73eac892ab5053bfd04659dcf88
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                b2c1c5b1-0f16-4e46-ac23-089a94993c7e.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\b2c1c5b1-0f16-4e46-ac23-089a94993c7e.tmp
                                                                                                                                                • Size 1KB
                                                                                                                                                • SHA256 587427555fb49ac38d5004ecbf7e64434b2209204280866feb147fd94340fdd0
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                bbc816ed-54e7-4be7-b653-b1729342b71d.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\bbc816ed-54e7-4be7-b653-b1729342b71d.tmp
                                                                                                                                                • Size 252B
                                                                                                                                                • SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                c5619947-252a-408c-8fa6-f77a3bc76b35.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\c5619947-252a-408c-8fa6-f77a3bc76b35.tmp
                                                                                                                                                • Size 1KB
                                                                                                                                                • SHA256 6f518b9bf64fecf0718befd65bb6639b34ec41431e7a1dfef068bfc6901c2392
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                c92bfd36-466e-4e02-ba20-3057b9a93674.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\c92bfd36-466e-4e02-ba20-3057b9a93674.tmp
                                                                                                                                                • Size 372B
                                                                                                                                                • SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                d6c40db0-35fb-4eee-8c7d-17d1b4284ccc.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\d6c40db0-35fb-4eee-8c7d-17d1b4284ccc.tmp
                                                                                                                                                • Size 852B
                                                                                                                                                • SHA256 8bc825a30631771ae614094fd07267a0f3350af6ac0fee62fe078d20f34e8420
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                e61a7afa-6010-4c1d-8e89-f497cb4b3c93.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\e61a7afa-6010-4c1d-8e89-f497cb4b3c93.tmp
                                                                                                                                                • Size 612B
                                                                                                                                                • SHA256 aefe41ba49514b111597c7f1d7c4be25749a5c72259d4deeeba6393a98942c23
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                eafc804e-3a9c-48a9-bd22-b253b08c9c21.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\eafc804e-3a9c-48a9-bd22-b253b08c9c21.tmp
                                                                                                                                                • Size 1KB
                                                                                                                                                • SHA256 80f83cce1309679414504d3126d73a46836cf06ab9e8bb5dee034f985cd2cfd2
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                f503c361-3e69-4598-8138-a6e254fc33ef.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\f503c361-3e69-4598-8138-a6e254fc33ef.tmp
                                                                                                                                                • Size 1KB
                                                                                                                                                • SHA256 de30e3ad9cab596064b10031bf9d7695809de957b5a607049d376404d92f28f6
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                d140cce4-509e-4e55-96fd-5367c3aeaea1.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d140cce4-509e-4e55-96fd-5367c3aeaea1.tmp
                                                                                                                                                • Size 59KB
                                                                                                                                                • SHA256 06c74562f957bb91777df9f49cff5132724754c9178693eb88552d1dd612fdcf
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                e9a71cbe-5566-4a49-bb8f-d38ebeb3c208.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e9a71cbe-5566-4a49-bb8f-d38ebeb3c208.tmp
                                                                                                                                                • Size 38KB
                                                                                                                                                • SHA256 f6f25a4ddfe40c6d3eee07a506b267d01e8e70440da8c68edb2ef3e2008e43f1
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                                                                                                                • Size 158KB
                                                                                                                                                • SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                b99d1494-c586-43b1-bc12-1a680e7ba357.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b99d1494-c586-43b1-bc12-1a680e7ba357.tmp
                                                                                                                                                • Size 132B
                                                                                                                                                • SHA256 cf4125d94d82b448cb33d6f462cf53eec00f2ee8165fa00f1b9c3bdba48e3328
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                dfc4988c-0e3c-4f40-b8c3-7f4b8b483fe6.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\dfc4988c-0e3c-4f40-b8c3-7f4b8b483fe6.tmp
                                                                                                                                                • Size 13B
                                                                                                                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                f324b6b4-932d-406a-aa17-87adad2d5261.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f324b6b4-932d-406a-aa17-87adad2d5261.tmp
                                                                                                                                                • Size 38KB
                                                                                                                                                • SHA256 0f97fcefcc95eaf451121323077b76a41587a9de343ece5ea2b8857ef673e609
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                83b9a81b-70fd-46ff-940d-d8be5505801a.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\83b9a81b-70fd-46ff-940d-d8be5505801a.tmp
                                                                                                                                                • Size 1B
                                                                                                                                                • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                8476c536-e39b-4889-940f-6aac5d976155.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\8476c536-e39b-4889-940f-6aac5d976155.tmp
                                                                                                                                                • Size 10KB
                                                                                                                                                • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                homepage.bmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-7HTIB.tmp\homepage.bmp
                                                                                                                                                • Size 824B
                                                                                                                                                • SHA256 32992e19f58ca64d44fb7351a547b077c1d20eea33940b0fdcabddda9176626a
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                setup.bmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-7HTIB.tmp\setup.bmp
                                                                                                                                                • Size 601KB
                                                                                                                                                • SHA256 dbdf88bd190538c74469ef3e6afd936e20c703071dabbc4c6b754786dfa3b1d1
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                CheckDirect3D11.exe

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-EREBV.tmp\CheckDirect3D11.exe
                                                                                                                                                • Size 147KB
                                                                                                                                                • SHA256 a6e0e0b4ba9bc7bacaa7afe47eba81754da6551e69ce201c0df72fbae5f1fd24
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                aff.ini

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-EREBV.tmp\aff.ini
                                                                                                                                                • Size 2KB
                                                                                                                                                • SHA256 ab96d897ca745f240c6ecd366e2598fbc85e1f1522c8efa7c523405a0358755c
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                DownloadManager.dll

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-I0B8A.tmp\DownloadManager.dll
                                                                                                                                                • Size 396KB
                                                                                                                                                • SHA256 0b2c52426d65b4634a568b287a12921cfe1f04b0fe5541c538f8d386475cba0e
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                DuiLib_u.dll

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-I0B8A.tmp\DuiLib_u.dll
                                                                                                                                                • Size 577KB
                                                                                                                                                • SHA256 16d1f5a63530e34f97a75c5c0aa74057cb91afb6be6ffa9169df553d4b64073a
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                OnlineInstall_u.dll

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-I0B8A.tmp\OnlineInstall_u.dll
                                                                                                                                                • Size 607KB
                                                                                                                                                • SHA256 efe3366c281e4345b469f6bda17c23cbfd0ea4fc820bd678cc0cc349972af2fa
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                libcurl.dll

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-I0B8A.tmp\libcurl.dll
                                                                                                                                                • Size 657KB
                                                                                                                                                • SHA256 593e0e0262f0bb1a67639f0eddda5922292a935c102c604285a20e8b2d9a5c6e
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                skin_da.xml

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-I0B8A.tmp\skin_da.xml
                                                                                                                                                • Size 12KB
                                                                                                                                                • SHA256 27b7bbc7ceb4c544ca1b8468742e4c4f1cdb9c940de54cb482228f4490478dc9
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                zlib1.dll

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-I0B8A.tmp\zlib1.dll
                                                                                                                                                • Size 196KB
                                                                                                                                                • SHA256 b5f139e1ecd192057f7cbb27b16d44fe0f48becd5514a7a9963b04c924a32e4d
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                screen-recorder.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-NJKG8.tmp\screen-recorder.tmp
                                                                                                                                                • Size 1.6MB
                                                                                                                                                • SHA256 0ffe44adc506b52f49cf0a28865b62b33361f50fd9493f59d472c625e42c1e5d
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                screen-recorder-x64.tmp

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-PK3PU.tmp\screen-recorder-x64.tmp
                                                                                                                                                • Size 1.9MB
                                                                                                                                                • SHA256 ac0dded2607cf45eb47fe364bb8bb47b4a48897fd4b58f7d4f6a58114802f851
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                content.js

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1184_2001770656\CRX_INSTALL\content.js
                                                                                                                                                • Size 9KB
                                                                                                                                                • SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                messages.json

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1184_2083137353\CRX_INSTALL\_locales\en_CA\messages.json
                                                                                                                                                • Size 711B
                                                                                                                                                • SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                Discount_temp.xml

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\{64CD0A4E-6816-4B4A-91F0-F7AB70AA9D82}\Discount_temp.xml
                                                                                                                                                • Size 11KB
                                                                                                                                                • SHA256 0c6e2a4958ac3235b009da202b5c5b398080367841f36c45754d6648c7eda450
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                en.png

                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\{64CD0A4E-6816-4B4A-91F0-F7AB70AA9D82}\Purchase_Discount_img\en.png
                                                                                                                                                • Size 2KB
                                                                                                                                                • SHA256 b1e8dc8957f3068ced6ec93793f28b493355ac9eb8f65edf19916686a7592374
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                MSI8688.tmp

                                                                                                                                                • Path C:\Windows\Installer\MSI8688.tmp
                                                                                                                                                • Size 75KB
                                                                                                                                                • SHA256 8764d060558a9d4ef24adb43201d5178033171a649ad497f79ce3b6cc8eda98a
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                MSI88DD.tmp

                                                                                                                                                • Path C:\Windows\Installer\MSI88DD.tmp
                                                                                                                                                • Size 75KB
                                                                                                                                                • SHA256 2adf199f6baf245f0b07d31a3a1401d4262c3e6c98b8f10df923ceb2c937291e
                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_1199358924\manifest.json
                                                                                                                                                • Size 238B
                                                                                                                                                • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_1626730662\manifest.json
                                                                                                                                                • Size 177B
                                                                                                                                                • SHA256 976e13362933c4e9d37530c32a043728f47136ff030f249ade8210d4d1300df6
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                Other

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_178734390\Sigma\Other
                                                                                                                                                • Size 34B
                                                                                                                                                • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_178734390\manifest.json
                                                                                                                                                • Size 132B
                                                                                                                                                • SHA256 de864bf0ab8abacfba536d4e9764eca658f903bd2457f955e128c4ee181c7e58
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_1824010201\manifest.json
                                                                                                                                                • Size 43B
                                                                                                                                                • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_1840555957\manifest.json
                                                                                                                                                • Size 80B
                                                                                                                                                • SHA256 abe933f0db95b1a75786da21de82feb5270ffa7ae072270923da2437710d93ba
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_1879556590\manifest.json
                                                                                                                                                • Size 53B
                                                                                                                                                • SHA256 e1cd8395b2a987ed86c356bfae0952ae09f0cb012030690d6e23615698478f77
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_1950752570\manifest.json
                                                                                                                                                • Size 119B
                                                                                                                                                • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_202230883\manifest.json
                                                                                                                                                • Size 102B
                                                                                                                                                • SHA256 4a918873dddefc4e395c8a9f8580c8f03c9a37512eb7da6e6454730be756fdac
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_208577618\manifest.json
                                                                                                                                                • Size 160B
                                                                                                                                                • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_314004695\manifest.json
                                                                                                                                                • Size 165B
                                                                                                                                                • SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_374645649\manifest.json
                                                                                                                                                • Size 165B
                                                                                                                                                • SHA256 880b2b81f96f7ec0799e2939e82955327f65a8e4edadfdd89cfebb70d8fb6f2e
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_44484805\manifest.json
                                                                                                                                                • Size 118B
                                                                                                                                                • SHA256 cc33e26f3b2efe862336389207db045cc7a916940213b9d33d845c82c12c8712
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                LICENSE

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_461607486\LICENSE
                                                                                                                                                • Size 1KB
                                                                                                                                                • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_461607486\manifest.json
                                                                                                                                                • Size 85B
                                                                                                                                                • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_518767659\manifest.json
                                                                                                                                                • Size 72B
                                                                                                                                                • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_758039340\manifest.json
                                                                                                                                                • Size 119B
                                                                                                                                                • SHA256 306b47ad1400901a8a6e9c7a28e580cef84cfcb7f79a7daed81791c218bc00fb
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_926832886\manifest.json
                                                                                                                                                • Size 135B
                                                                                                                                                • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                manifest.json

                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1356_994377686\manifest.json
                                                                                                                                                • Size 141B
                                                                                                                                                • SHA256 fe8c5046a79693a9b7f32bfc3ed7c8fdf84c5d186f5326a527ac508345a44009
                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                memory/124-4703-0x00007FFDB0C10000-0x00007FFDB109D000-memory.dmp

                                                                                                                                                memory/124-4702-0x0000000061F00000-0x0000000062449000-memory.dmp

                                                                                                                                                memory/272-2175-0x00007FFDC5490000-0x00007FFDC5512000-memory.dmp

                                                                                                                                                memory/272-2125-0x00007FFDB3F80000-0x00007FFDB4366000-memory.dmp

                                                                                                                                                memory/272-2177-0x00007FFDB3EE0000-0x00007FFDB3F7C000-memory.dmp

                                                                                                                                                memory/272-2176-0x00007FFDB3F80000-0x00007FFDB4366000-memory.dmp

                                                                                                                                                memory/272-2098-0x00007FFDB2C70000-0x00007FFDB3206000-memory.dmp

                                                                                                                                                memory/272-2124-0x00007FFDC5490000-0x00007FFDC5512000-memory.dmp

                                                                                                                                                memory/272-2022-0x0000000061F00000-0x0000000062449000-memory.dmp

                                                                                                                                                memory/272-2116-0x00007FFDB0860000-0x00007FFDB109C000-memory.dmp

                                                                                                                                                memory/272-2126-0x00007FFDB3EE0000-0x00007FFDB3F7C000-memory.dmp

                                                                                                                                                memory/828-4693-0x0000000000400000-0x00000000005E5000-memory.dmp

                                                                                                                                                memory/1740-4705-0x00007FFDB0C10000-0x00007FFDB109D000-memory.dmp

                                                                                                                                                memory/1740-4704-0x0000000061F00000-0x0000000062449000-memory.dmp

                                                                                                                                                memory/3176-207-0x00000000023C0000-0x00000000023C1000-memory.dmp

                                                                                                                                                memory/3176-2076-0x0000000000400000-0x00000000005E5000-memory.dmp

                                                                                                                                                memory/3176-1995-0x00000000023C0000-0x00000000023C1000-memory.dmp

                                                                                                                                                memory/3176-1993-0x0000000000400000-0x00000000005E5000-memory.dmp

                                                                                                                                                memory/3404-2094-0x0000000061F00000-0x0000000062449000-memory.dmp

                                                                                                                                                memory/3404-2639-0x00007FFDB3F80000-0x00007FFDB4366000-memory.dmp

                                                                                                                                                memory/3404-2251-0x00007FFDB3F80000-0x00007FFDB4366000-memory.dmp

                                                                                                                                                memory/3404-2640-0x00007FFDB3EE0000-0x00007FFDB3F7C000-memory.dmp

                                                                                                                                                memory/3404-2159-0x00007FFDB3EE0000-0x00007FFDB3F7C000-memory.dmp

                                                                                                                                                memory/3404-2158-0x00007FFDB3F80000-0x00007FFDB4366000-memory.dmp

                                                                                                                                                memory/3404-2157-0x00007FFDC5490000-0x00007FFDC5512000-memory.dmp

                                                                                                                                                memory/3404-2638-0x00007FFDC5490000-0x00007FFDC5512000-memory.dmp

                                                                                                                                                memory/3404-2095-0x00007FFDB2C70000-0x00007FFDB3206000-memory.dmp

                                                                                                                                                memory/3404-2250-0x00007FFDC5490000-0x00007FFDC5512000-memory.dmp

                                                                                                                                                memory/3404-2252-0x00007FFDB3EE0000-0x00007FFDB3F7C000-memory.dmp

                                                                                                                                                memory/3740-189-0x0000000000400000-0x0000000000454000-memory.dmp

                                                                                                                                                memory/3740-2107-0x0000000000400000-0x0000000000454000-memory.dmp

                                                                                                                                                memory/3740-0-0x0000000000400000-0x0000000000454000-memory.dmp

                                                                                                                                                memory/4292-4696-0x0000000061F00000-0x0000000062449000-memory.dmp

                                                                                                                                                memory/4292-4699-0x00007FFDB0C10000-0x00007FFDB109D000-memory.dmp

                                                                                                                                                memory/4840-2696-0x0000000000400000-0x0000000000492000-memory.dmp

                                                                                                                                                memory/4840-4606-0x0000000000400000-0x0000000000492000-memory.dmp

                                                                                                                                                memory/4928-2292-0x0000000060DA0000-0x00000000612E9000-memory.dmp

                                                                                                                                                memory/5632-2187-0x00007FFDC5490000-0x00007FFDC5512000-memory.dmp

                                                                                                                                                memory/5632-2189-0x00007FFDB3EE0000-0x00007FFDB3F7C000-memory.dmp

                                                                                                                                                memory/5632-2129-0x00007FFDB3EE0000-0x00007FFDB3F7C000-memory.dmp

                                                                                                                                                memory/5632-2128-0x00007FFDB3F80000-0x00007FFDB4366000-memory.dmp

                                                                                                                                                memory/5632-2108-0x00007FFDD5710000-0x00007FFDD5712000-memory.dmp

                                                                                                                                                memory/5632-2127-0x00007FFDC5490000-0x00007FFDC5512000-memory.dmp

                                                                                                                                                memory/5632-2064-0x0000000061F00000-0x0000000062449000-memory.dmp

                                                                                                                                                memory/5632-2112-0x00007FFDB0860000-0x00007FFDB109C000-memory.dmp

                                                                                                                                                memory/5632-2097-0x00007FFDB2C70000-0x00007FFDB3206000-memory.dmp

                                                                                                                                                memory/5632-2188-0x00007FFDB3F80000-0x00007FFDB4366000-memory.dmp

                                                                                                                                                memory/5716-200-0x0000000000400000-0x0000000000492000-memory.dmp

                                                                                                                                                memory/5716-1990-0x0000000000400000-0x0000000000492000-memory.dmp

                                                                                                                                                memory/5716-2090-0x0000000000400000-0x0000000000492000-memory.dmp

                                                                                                                                                memory/5864-2106-0x0000000000400000-0x00000000005A7000-memory.dmp

                                                                                                                                                memory/5864-6-0x00000000022A0000-0x00000000022A1000-memory.dmp

                                                                                                                                                memory/5864-190-0x0000000000400000-0x00000000005A7000-memory.dmp

                                                                                                                                                memory/5864-2100-0x0000000000400000-0x00000000005A7000-memory.dmp

                                                                                                                                                memory/5984-2291-0x0000000061510000-0x0000000061790000-memory.dmp

                                                                                                                                                memory/5984-2096-0x00007FFDB2C70000-0x00007FFDB3206000-memory.dmp

                                                                                                                                                memory/5984-2110-0x00007FFDB0860000-0x00007FFDB109C000-memory.dmp

                                                                                                                                                memory/5984-2290-0x0000000061790000-0x0000000061842000-memory.dmp

                                                                                                                                                memory/5984-2288-0x00007FFDB3EE0000-0x00007FFDB3F7C000-memory.dmp

                                                                                                                                                memory/5984-2132-0x00007FFDB3F80000-0x00007FFDB4366000-memory.dmp

                                                                                                                                                memory/5984-2071-0x0000000061F00000-0x0000000062449000-memory.dmp

                                                                                                                                                memory/5984-2286-0x00007FFDC5490000-0x00007FFDC5512000-memory.dmp

                                                                                                                                                memory/5984-2131-0x00007FFDB3EE0000-0x00007FFDB3F7C000-memory.dmp

                                                                                                                                                memory/5984-2289-0x00007FFDB3F80000-0x00007FFDB4366000-memory.dmp

                                                                                                                                                memory/5984-2130-0x00007FFDC5490000-0x00007FFDC5512000-memory.dmp

                                                                                                                                                memory/5984-2248-0x0000000061790000-0x0000000061842000-memory.dmp

                                                                                                                                                memory/5984-2249-0x0000000061510000-0x0000000061790000-memory.dmp