Overview

overview

6

Static

static

1

trial_vegaspro14.exe

windows10-2004-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    432s
  • max time network
    391s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    29/10/2026, 19:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    trial_vegaspro14.exe
  • Size 4.1MB
  • Sample261029-ypeqbaev41
  • SHA256 9584c07341d36b617820a78a7581e99c6b2197dd74c37a604f4655d17e73dfd7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoverypersistenceprivilege_escalationspywaretrojan

Malware Config

Signatures

  • Downloads MZ/PE file 3 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in System32 directory 22 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 64 IoCs
  • Direct Volume Access: Opens a physical disk for reading 1 TTPs 1 IoCs

    Opens a raw handle to a physical disk, which bypasses file system access controls and is used for disk inspection, anti-VM checks and privilege checks.

    defense_evasion
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 45 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 7 IoCs
    defense_evasion
  • Modifies data under HKEY_USERS 5 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs
  • Suspicious use of SetWindowsHookEx 29 IoCs
  • Suspicious use of WriteProcessMemory 62 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\trial_vegaspro14.exe
    "C:\Users\Admin\AppData\Local\Temp\trial_vegaspro14.exe"
    1⤵
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4060
    • C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\MxDownloadManager.exe
      "C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\MxDownloadManager.exe" -s VEGAS_Pro_14_Edit_trial -r -ic
      2⤵
      • Downloads MZ/PE file
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Modifies system certificate store
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4728
      • C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\VEGAS_Pro_14.0.0.270_Trial_14_0_0_270.exe
        "C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\VEGAS_Pro_14.0.0.270_Trial_14_0_0_270.exe"
        3⤵
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        • Modifies Control Panel
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:4120
        • C:\Windows\SYSTEM32\msiexec.exe
          "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\redist.msi" /quiet /norestart /Liwear "C:\Users\Admin\AppData\Roaming\Sony\msvcrt_redist_29102026-080145.log"
          4⤵
          • Suspicious use of AdjustPrivilegeToken
          PID:5108
      • C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\MUSIC_MAKER_32.0.2.11_INT_230823_12-32_9BE021E9_32_0_2_11.exe
        "C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\MUSIC_MAKER_32.0.2.11_INT_230823_12-32_9BE021E9_32_0_2_11.exe"
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:4256
        • C:\Users\Admin\AppData\Local\Temp\mgxzedgxrkb\product\mm32_setup.exe
          "C:\Users\Admin\AppData\Local\Temp\mgxzedgxrkb\product\mm32_setup.exe" -m C:\Users\Admin\AppData\Local\Temp\mgxzedgxrkb\SetupValues.dat
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of SetWindowsHookEx
          PID:3716
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1780
    • C:\Windows\System32\MsiExec.exe
      C:\Windows\System32\MsiExec.exe -Embedding 8ABD5790C8C89C4EB3B261AA094A8F0D
      2⤵
      • Loads dropped DLL
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:1940
      • C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
        "C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe" Install "C:\Program Files\VEGAS\VEGAS Pro 14.0\bdmux\BdMuxServer.exe"
        3⤵
        • Drops file in Windows directory
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1028
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 22c -InterruptEvent 0 -NGENProcess 21c -Pipe 228 -Comment "NGen Worker Process"
          4⤵
          • System Location Discovery: System Language Discovery
          PID:3496
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2f4 -InterruptEvent 0 -NGENProcess 2d0 -Pipe 2f0 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:860
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2e0 -InterruptEvent 0 -NGENProcess 2fc -Pipe 2d0 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:4624
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 324 -InterruptEvent 0 -NGENProcess 2ec -Pipe 2fc -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:1976
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2e0 -InterruptEvent 0 -NGENProcess 330 -Pipe 310 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:2016
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2e8 -InterruptEvent 0 -NGENProcess 30c -Pipe 324 -Comment "NGen Worker Process"
          4⤵
          • System Location Discovery: System Language Discovery
          PID:1124
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2e0 -InterruptEvent 0 -NGENProcess 2f4 -Pipe 2cc -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:1820
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 318 -InterruptEvent 0 -NGENProcess 30c -Pipe 314 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:216
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 338 -InterruptEvent 0 -NGENProcess 31c -Pipe 334 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:4104
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 338 -InterruptEvent 0 -NGENProcess 348 -Pipe 2dc -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:4488
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 33c -InterruptEvent 0 -NGENProcess 348 -Pipe 31c -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:732
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2e8 -InterruptEvent 0 -NGENProcess 338 -Pipe 318 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:2192
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 354 -InterruptEvent 0 -NGENProcess 360 -Pipe 364 -Comment "NGen Worker Process"
          4⤵
          • System Location Discovery: System Language Discovery
          PID:1224
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 338 -InterruptEvent 0 -NGENProcess 2e8 -Pipe 34c -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:2488
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 344 -InterruptEvent 0 -NGENProcess 35c -Pipe 2e8 -Comment "NGen Worker Process"
          4⤵
          • System Location Discovery: System Language Discovery
          PID:2024
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 368 -InterruptEvent 0 -NGENProcess 354 -Pipe 348 -Comment "NGen Worker Process"
          4⤵
          • System Location Discovery: System Language Discovery
          PID:5012
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 34c -InterruptEvent 0 -NGENProcess 354 -Pipe 32c -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:4312
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 308 -InterruptEvent 0 -NGENProcess 36c -Pipe 350 -Comment "NGen Worker Process"
          4⤵
          • System Location Discovery: System Language Discovery
          PID:1664
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 308 -InterruptEvent 0 -NGENProcess 344 -Pipe 30c -Comment "NGen Worker Process"
          4⤵
          • System Location Discovery: System Language Discovery
          PID:912
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 368 -InterruptEvent 0 -NGENProcess 340 -Pipe 338 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:2976
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 354 -InterruptEvent 0 -NGENProcess 374 -Pipe 34c -Comment "NGen Worker Process"
          4⤵
          • System Location Discovery: System Language Discovery
          PID:4624
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 354 -InterruptEvent 0 -NGENProcess 360 -Pipe 340 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:3004
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2ec -InterruptEvent 0 -NGENProcess 304 -Pipe 35c -Comment "NGen Worker Process"
          4⤵
          • System Location Discovery: System Language Discovery
          PID:1904
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 354 -InterruptEvent 0 -NGENProcess 358 -Pipe 328 -Comment "NGen Worker Process"
          4⤵
          • System Location Discovery: System Language Discovery
          PID:2736
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2ec -InterruptEvent 0 -NGENProcess 368 -Pipe 304 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:1948
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2f8 -InterruptEvent 0 -NGENProcess 234 -Pipe 2c8 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:1232
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2f8 -InterruptEvent 0 -NGENProcess 2b4 -Pipe 224 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:3212
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 22c -InterruptEvent 0 -NGENProcess 2e4 -Pipe 2ac -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:2744
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2bc -InterruptEvent 0 -NGENProcess 2ec -Pipe 368 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:1652
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2e4 -InterruptEvent 0 -NGENProcess 2b8 -Pipe 2bc -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:4820
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2ec -InterruptEvent 0 -NGENProcess 2b4 -Pipe 2b0 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:3272
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2ec -InterruptEvent 0 -NGENProcess 2d4 -Pipe 2e4 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:4156
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2f8 -InterruptEvent 0 -NGENProcess 2b4 -Pipe 2b8 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:4212
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 374 -InterruptEvent 0 -NGENProcess 330 -Pipe 354 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:4868
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 374 -InterruptEvent 0 -NGENProcess 2ec -Pipe 22c -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:4760
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2f8 -InterruptEvent 0 -NGENProcess 320 -Pipe 2d4 -Comment "NGen Worker Process"
          4⤵
          • System Location Discovery: System Language Discovery
          PID:2792
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
          C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 330 -InterruptEvent 0 -NGENProcess 374 -Pipe 320 -Comment "NGen Worker Process"
          4⤵
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:4424
    • C:\Windows\System32\MsiExec.exe
      "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\mchammer_x64.dll"
      2⤵
      • Loads dropped DLL
      • Modifies registry class
      PID:2844
    • C:\Windows\System32\MsiExec.exe
      "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sffrgpnv_x64.dll"
      2⤵
      • Loads dropped DLL
      • Modifies registry class
      PID:2300
    • C:\Windows\System32\MsiExec.exe
      "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack1_x64.dll"
      2⤵
      • Loads dropped DLL
      • Modifies registry class
      PID:2496
    • C:\Windows\System32\MsiExec.exe
      "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack2_x64.dll"
      2⤵
      • Loads dropped DLL
      • Modifies registry class
      PID:4988
    • C:\Windows\System32\MsiExec.exe
      "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfppack3_x64.dll"
      2⤵
      • Loads dropped DLL
      • Modifies registry class
      PID:4032
    • C:\Windows\System32\MsiExec.exe
      "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfresfilter_x64.dll"
      2⤵
      • Loads dropped DLL
      • Modifies registry class
      PID:5104
    • C:\Windows\System32\MsiExec.exe
      "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sftrkfx1_x64.dll"
      2⤵
      • Loads dropped DLL
      • Modifies registry class
      PID:1200
    • C:\Windows\System32\MsiExec.exe
      "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx1_x64.dll"
      2⤵
      • Loads dropped DLL
      • Modifies registry class
      PID:732
    • C:\Windows\System32\MsiExec.exe
      "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx2_x64.dll"
      2⤵
      • Loads dropped DLL
      • Modifies registry class
      PID:5092
    • C:\Windows\System32\MsiExec.exe
      "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\sfxpfx3_x64.dll"
      2⤵
      • Loads dropped DLL
      • Modifies registry class
      PID:4764
    • C:\Windows\System32\MsiExec.exe
      "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\xpvinyl_x64.dll"
      2⤵
      • Loads dropped DLL
      PID:728
    • C:\Windows\syswow64\MsiExec.exe
      "C:\Windows\syswow64\MsiExec.exe" /Y "C:\Windows\SysWOW64\CDDBControl.dll"
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      PID:3020
    • C:\Windows\syswow64\MsiExec.exe
      "C:\Windows\syswow64\MsiExec.exe" /Y "C:\Windows\SysWOW64\CDDBUI.dll"
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      PID:4212
    • C:\Windows\syswow64\MsiExec.exe
      "C:\Windows\syswow64\MsiExec.exe" /Y "C:\Program Files\VEGAS\VEGAS Pro 14.0\x86\sfvstproxystubx86.dll"
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      PID:3596
    • C:\Windows\System32\MsiExec.exe
      "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files\VEGAS\VEGAS Pro 14.0\sfvstwrap.dll"
      2⤵
      • Loads dropped DLL
      PID:3088
    • C:\Windows\System32\MsiExec.exe
      C:\Windows\System32\MsiExec.exe -Embedding B6E19B269FC8C081FCB31E1A52C30C7E E Global\MSI0000
      2⤵
      • Loads dropped DLL
      PID:1696
    • C:\Program Files\VEGAS\VEGAS Pro 14.0\vegas140.exe
      "C:\Program Files\VEGAS\VEGAS Pro 14.0\vegas140.exe" /register /user 1085
      2⤵
      • Drops file in System32 directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Direct Volume Access: Opens a physical disk for reading
      • Modifies system certificate store
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3200
      • C:\Program Files\VEGAS\VEGAS Pro 14.0\ErrorReportLauncher.exe
        "C:\Program Files\VEGAS\VEGAS Pro 14.0\ErrorReportLauncher.exe"
        3⤵
        • Executes dropped EXE
        PID:3476

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        e5c5f32.rbs
        • Path C:\Config.Msi\e5c5f32.rbs
        • Size 67KB
        • SHA256 615e912fd14fac2c2307c1d75beb797920f79c3df132ee11f470d6a87fa520b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        e5c5f37.rbs
        • Path C:\Config.Msi\e5c5f37.rbs
        • Size 356KB
        • SHA256 764c97f5c0c267fcab670649938babe12fc27672b231d871e973db424b8c01f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        local_de_DE.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_de_DE.cfg
        • Size 66B
        • SHA256 29deb5cf1069418d89bf302b18356e7588c93d7167ff888f73dc91aea71dc1a4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_de_DE.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_de_DE.cfg
        • Size 122B
        • SHA256 f5e588dc8e4da2b8cc4bab169bea0f065817a245f3a2650aa919fe64ad388d3a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_de_DE.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_de_DE.cfg
        • Size 300B
        • SHA256 0485200a17c22bfc12f0b1dc9ef331f8795ab1ca547854eb56b456285cdb6005
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_de_DE.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_de_DE.cfg
        • Size 1020B
        • SHA256 d6560a37eca49babd699f32cb93ec7d48b270d5d665ddb151b8144708ce93def
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_de_DE.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_de_DE.cfg
        • Size 2KB
        • SHA256 557c16ffd8acfb88c464daa8f786c67a6de3901af584f0afcfbffdfcf884089f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_de_DE.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_de_DE.cfg
        • Size 4KB
        • SHA256 11dcf7ecdfbf36b33c2607d50a62b636d064de34639098cff22d13cd37c799ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        local_en_US.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_en_US.cfg
        • Size 168B
        • SHA256 8bd567e43b8699c8d1a225a87ee682f2f4968feed02ae18907c71b75006fc466
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_en_US.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_en_US.cfg
        • Size 486B
        • SHA256 30d6aff97c934514a7d8d19620b5e458f42607d6654a514e82c61bc5984b91cd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_en_US.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_en_US.cfg
        • Size 726B
        • SHA256 78501d2954845b2e969bc74295fea3569226619cbc357a80e011ce1dbdadebf3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_en_US.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_en_US.cfg
        • Size 3KB
        • SHA256 dfd1349dbd4a77d2509ae2423615df81027fd05c5215043824bbb5077af8cd63
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_en_US.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_en_US.cfg
        • Size 4KB
        • SHA256 daaab438336ba368af79e7b7800d97904e693979899e047e038edff294e137fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        local_es_ES.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_es_ES.cfg
        • Size 1016B
        • SHA256 57a366c77edb08986e60a1a9f1458cf781edbc6a40d85b171a259c21470fb1f0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_es_ES.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_es_ES.cfg
        • Size 1KB
        • SHA256 f53e391a4e2ff49469813ff59a9d045253ca77a28a0f44f83393822dcb2f6628
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_es_ES.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_es_ES.cfg
        • Size 2KB
        • SHA256 9ba6a5573f395c6c2c4ca56617149f8bbc1e3adb7ab634f27c0e717fc1b4e739
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_es_ES.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_es_ES.cfg
        • Size 3KB
        • SHA256 4059e732a30cd41fea5927a3493efca2731554c4d84aed692d1dc7b7060ea044
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_es_ES.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_es_ES.cfg
        • Size 4KB
        • SHA256 e171b0001ad7a083bdeee6a8a82b3459b1698419c1538930fb50a5ba6d3ad3f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        local_fr_FR.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_fr_FR.cfg
        • Size 390B
        • SHA256 a1f16ba34d8fafe5eec1ed7bd47da9e44bf305a05ced54eba7097771b25a4cc8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_fr_FR.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_fr_FR.cfg
        • Size 846B
        • SHA256 699f8248386c47603b6aa87e8a017dce8a01ba12f9217253f5053dc45f0e7873
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_fr_FR.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_fr_FR.cfg
        • Size 4KB
        • SHA256 0d833a66186dd8fd520472533802c473981804ab7337e7cd3e8049fbb44ba9cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        local_ja_JP.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_ja_JP.cfg
        • Size 1018B
        • SHA256 c613d478b01c9ebcd3418f29ddcb226f7819be59a8c1890a070a6eacec840afc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_ja_JP.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_ja_JP.cfg
        • Size 1KB
        • SHA256 a297315a67bf323d1f1316cccc18fe0a2a8344c4a771ec2b799b8dc3173898b5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_ja_JP.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_ja_JP.cfg
        • Size 2KB
        • SHA256 7ad9712229856a2f13fe656a5e947ae5bf8862d67d55ad81ed37df5d17ab21cb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_ja_JP.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_ja_JP.cfg
        • Size 3KB
        • SHA256 a0d3072e5f5e81e41f6475c8948c59dd3d5f606b11a4ddcf7b663a757b263669
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        local_ja_JP.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Language\local_ja_JP.cfg
        • Size 4KB
        • SHA256 2edb380a7a6999446fbeda3d595fdf81f3e3accef50cee24e56bc364cd53c6a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnlockFormServiceCenter_fi_FI.rtf
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\Protein\Forms\UnlockFormServiceCenter_fi_FI.rtf
        • Size 2KB
        • SHA256 5a31feaa4bdbc96da11a4f68a7fcb36bb791dc073b41e109f7d085dd008790bc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        WidgetLibrary.dll
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\WidgetLibrary.dll
        • Size 715KB
        • SHA256 5192b0fbbf5dad02fd54587c6e94e8f57d3415b65d3fd9b38dd9cff76f7b8728
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        install.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\install.cfg
        • Size 96B
        • SHA256 b06d244557f51c479442c4c36df75e6dcbfd84d6151e5344c33155feade8eca4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        install.cfg
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\install.cfg
        • Size 854B
        • SHA256 31f0c1e043410455a242db3cfdb4ab617420775331a79a9e77b60fe1ba296399
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vegas140.exe
        • Path C:\Program Files\VEGAS\VEGAS Pro 14.0\vegas140.exe
        • Size 35.5MB
        • SHA256 610e2b4f58ffae6ef8e27e76443d5b84ebaf6ee4110400d13fc5e3ad86551a06
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        installation.ini
        • Path C:\ProgramData\VEGAS\VEGAS_Pro_14\installation.ini
        • Size 402B
        • SHA256 64cd8a0d793e3badfc016ab1a0082033bdb958f04b50daf41a8104766b3c35c7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        103621DE9CD5414CC2538780B4B75751
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751
        • Size 808B
        • SHA256 3dd5ea8a14eb665ba6057d424f94e5e83757ffaab456578dbf038af04053b19e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        1B1495DD322A24490E2BF2FAABAE1C61
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1B1495DD322A24490E2BF2FAABAE1C61
        • Size 355B
        • SHA256 12fd0590708bb38d8039bc994178acee8a3d220f0cd194b0f1c2fc9ba622f927
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        22D536C4B4AD2CEF7AC6B7789FD235E3
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\22D536C4B4AD2CEF7AC6B7789FD235E3
        • Size 283B
        • SHA256 251ed08cc8f5873098ea5ee083034e7cd99ece955920e12a42e50306a94cb6eb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        40C68D5626484A90937F0752C8B950AB
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\40C68D5626484A90937F0752C8B950AB
        • Size 834B
        • SHA256 f64b94c786a213df5f80716f98b2e4f90edb77609b43dce1c788792f460a53dd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        EA618097E393409AFA316F0F87E2C202_675E7626D87928BA02C459BA366C4DAC
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EA618097E393409AFA316F0F87E2C202_675E7626D87928BA02C459BA366C4DAC
        • Size 5B
        • SHA256 bebe2853a3485d1c2e5c5be4249183e0ddaff9f87de71652371700a89d937128
        • MD5 SHA1 SHA512
        Submit Download

        ECF3006D44DA211141391220EE5049F4
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\ECF3006D44DA211141391220EE5049F4
        • Size 79KB
        • SHA256 bd25aac21aa713f2ac35ec19fe4cac34e00ca70cc2a4a7148d02063489afec5e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        103621DE9CD5414CC2538780B4B75751
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751
        • Size 192B
        • SHA256 bc2c7e9f26a03c9988795604eb63c67502b8b331292262de39a5065081466598
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        1B1495DD322A24490E2BF2FAABAE1C61
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1B1495DD322A24490E2BF2FAABAE1C61
        • Size 192B
        • SHA256 9eae963e2debd0055273249d68bfd05b5b9a65b93d053f8a33079e7ecfb7251e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        22D536C4B4AD2CEF7AC6B7789FD235E3
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\22D536C4B4AD2CEF7AC6B7789FD235E3
        • Size 192B
        • SHA256 1493200242bf644ae72c014ad55fbc294751fc32c31cf2c6281a74d30dfd821f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        40C68D5626484A90937F0752C8B950AB
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40C68D5626484A90937F0752C8B950AB
        • Size 180B
        • SHA256 6a46ce5b73ca970bd8579a00f63505a5a02aa3db987931363458cecf38a6594f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        EA618097E393409AFA316F0F87E2C202_675E7626D87928BA02C459BA366C4DAC
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EA618097E393409AFA316F0F87E2C202_675E7626D87928BA02C459BA366C4DAC
        • Size 398B
        • SHA256 0465f2cb22048a2a4e121d97fdb8d163b3f1f30e613e3443dfc88be463efd858
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ECF3006D44DA211141391220EE5049F4
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\ECF3006D44DA211141391220EE5049F4
        • Size 170B
        • SHA256 d62072708d2be4598bd4cd3c1d6e7dc3b3e93627b600ae59cd96690fe28ee478
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        EULA_fra.rtf
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\EULA_fra.rtf
        • Size 35KB
        • SHA256 eb49e6483f9c809abc471244a54db2c5e980c7564391e9209587d75e338b125f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        inst_banner.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\inst_banner.bmp
        • Size 281KB
        • SHA256 f283b9f7d9de3609ea80f343e802d493f28091adb2d4272bd7b676a1db326ee6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        redist.msi
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\redist.msi
        • Size 6.0MB
        • SHA256 0cb8b3e7113f279c30badd4c4865ff4fd8d653d1b71a2d9aa7a297152dea0dbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        request.ini
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\request.ini
        • Size 151B
        • SHA256 83b31db9d0fb7204373e94e64de5a0442bc951e8071ede45bbe3b548977adeb6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vegas.ico
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas.ico
        • Size 352KB
        • SHA256 336c87a804e4e2b8a18088e50d3afbaa75143a2304b6552054f3e3685cf1c6d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vegas140.msi
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140.msi
        • Size 2.7MB
        • SHA256 2cd2950a89ca0356310407f1e2c50b572cea5f6505a5a956385a0b69799f5506
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ac3studioplug.cab
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\ac3studioplug.cab
        • Size 1.5MB
        • SHA256 1174b67c8bbe0ef724f8cd6bbd5c5ac453cbb7c2b6e9118b8934430a78222e21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        autorun.dat
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\autorun.dat
        • Size 20B
        • SHA256 1761fd6ae23db6e83ed04efb8cc9ca7c4c536e91043ac9004d443ac1eee0f533
        • MD5 SHA1 SHA512
        Submit Download

        cddb.cab
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\cddb.cab
        • Size 742KB
        • SHA256 e08fb121a4bc4e6e4c1e0a9da60b10b12246f945504deabde804d3748fa690e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        errorreport.cab
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\errorreport.cab
        • Size 3.4MB
        • SHA256 e67b84d9d21e80a91f7f07471c70750d32fcf2a674a40fd283d8893e20d5fb97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mchammer.cab
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\mchammer.cab
        • Size 1.1MB
        • SHA256 9822e8bfe8b7ead2a465586fbbb44f12c8c95a409a5f36600d64be1a1aaa82ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfmarket.cab
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\sfmarket.cab
        • Size 886KB
        • SHA256 ec20f5e60fb0623cab854a2ec555f281ceb8ed07090a160e3751b9b44e2e7c48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfppack1.cab
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\sfppack1.cab
        • Size 1.3MB
        • SHA256 8c22f8ead6cc7dcf2b7fea591c281f56400843852f04ea5b5e972feffec2efd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfppack2.cab
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\sfppack2.cab
        • Size 1.4MB
        • SHA256 a24013fe0528d35a12eed7c86ce32003524faceb8d3ed304743427be53520248
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfppack3.cab
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\sfppack3.cab
        • Size 1.3MB
        • SHA256 7df3f84260217cfd13537074eba1d79a9e688ebac31cebf5bb88521f2b82f233
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfpublish.cab
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\sfpublish.cab
        • Size 1.1MB
        • SHA256 d7481e7e9bf4a9e914e7e37de4fb66b2fd4b9efeaa910a2c75bc565379c24110
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfresfilter.cab
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\sfresfilter.cab
        • Size 1.0MB
        • SHA256 82f197bbcbc413822a2c23d8da0c8e8db32b06a22607d2ff9701d2c7b8983a51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sftrkfx1.cab
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\sftrkfx1.cab
        • Size 1.2MB
        • SHA256 293e09b01b7c792d30ab5a2f9e112cdb86c813bfe8fd2c34d468fcfc36782715
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfxpfx1.cab
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\sfxpfx1.cab
        • Size 1.1MB
        • SHA256 6c58421fc0ba0a3df9feb398b9a1b9e2d27df94c7a34d84da31328ac3daa085c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfxpfx2.cab
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\sfxpfx2.cab
        • Size 1.1MB
        • SHA256 c87b464690011de4a4d8beec22527aafec75f8a47b05d9c61417eddd4f8a97b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfxpfx3.cab
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\sfxpfx3.cab
        • Size 1.2MB
        • SHA256 d1f0bab544d51d1bfd22160207a18b61c31a85eccdfe83c57e17e0fadd3a2cee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sonyinstall_x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\sonyinstall_x64.dll
        • Size 3.0MB
        • SHA256 7a679410002709fc21bf9a5b56c1fd097a556eb31b71547e309f24b23a9d92fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vegas140.udat
        • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\vegas140\vegas140.udat
        • Size 604KB
        • SHA256 883986d00df7669a1d573a76317f036521232b0ad80a1b5f9cefbbda788f8932
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CPleaseWait.ini
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\Bitmaps\mxgui.4.0\CPleaseWait.ini
        • Size 2KB
        • SHA256 2a4c025203881c60934ff7de148d342ad5213335c321749cfe603c0ee91cf5c2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ProgressDialogTemplates.ini
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\Bitmaps\mxgui.4.0\ProgressDialogTemplates.ini
        • Size 1KB
        • SHA256 c60d3542f97ee43f99e006b34d444b25444c257318e37b1ff55764309d2a317a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ProgressDialogTemplates.png
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\Bitmaps\mxgui.4.0\ProgressDialogTemplates.png
        • Size 38KB
        • SHA256 9cf7ce3d45c97311e6a400413c61befccf9bf6e9820d5886414829d1d2f2ca86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Install.cfg
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\Install.cfg
        • Size 173B
        • SHA256 235fff60338e335e3afc2558376a97a4d0a82cdc9ac3ef17535564aa7c81a12f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        MFL_rel_u_vc12.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\MFL_rel_u_vc12.dll
        • Size 2.1MB
        • SHA256 c89c9ee592c1b11e061e6b3d381a266f05837d4fa29033c699fa7eaf08553889
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MxDownloadManager-en_us.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\MxDownloadManager-en_us.dll
        • Size 140KB
        • SHA256 15a7714cefd03bd03311b589a8f920284af6beca658f804db165d999e79f5485
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MxDownloadManager.exe
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\MxDownloadManager.exe
        • Size 4.2MB
        • SHA256 0bdffe866e95b9dc08984d6e51bd3661a4528ec1d5c0eeb67d4ebb631d438042
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PlayRIpl.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\PlayRIpl.dll
        • Size 20KB
        • SHA256 3db5f0d218be84cd4adfe2699f21d3114a9e430f69d065fb9081c08f5c11ddbe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PlayRIplPX.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\PlayRIplPX.DLL
        • Size 624KB
        • SHA256 caf460990add3bdf6e8e836535ff33016787f6020232e77505b37092460213d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SetupInfo.ini
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\SetupInfo.ini
        • Size 3KB
        • SHA256 341daf213c3d9dff9e02e8f20ab78af064f62f9367409b75afb2e4a91dabbe0f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        VistaCooperation_rel_u_vc12.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\VistaCooperation_rel_u_vc12.dll
        • Size 1.7MB
        • SHA256 effb6bc1f82710264abbf1fe2e8bde7b618148872c046a6419bc8c5e7fe3fbe9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CMxDownloadManagerDlg.ini
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\bitmaps\mxgui.4.0\CMxDownloadManagerDlg.ini
        • Size 7KB
        • SHA256 d4a45bd57343c2b66a62d13de38d7e302dd8119dafebe3ebb3ceae255aacd978
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CMxDownloadManagerDlg_1.ini
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\bitmaps\mxgui.4.0\CMxDownloadManagerDlg_1.ini
        • Size 7KB
        • SHA256 7e32961abed918cad096fd74779f9f151b25a7bfa9e151495602e39a10116cf8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Logo.png
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\bitmaps\mxgui.4.0\Logo.png
        • Size 4KB
        • SHA256 63a0002efbbb5698778ca16e61cd47654450614423bbd75d20f3f6e2bc3ac8ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Promo.png
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\bitmaps\mxgui.4.0\Promo.png
        • Size 156KB
        • SHA256 cc3d50016f0fce659b457ed3c57b91f801e04f18fe16c11fea5c969dcdb023b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        controlTemplates.ini
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\bitmaps\mxgui.4.0\controlTemplates.ini
        • Size 3KB
        • SHA256 ba50c265de5e05f6671bbd300689671ba8d18e04f047bc6b53ca21749a05b8ac
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        generalTemplates.ini
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\bitmaps\mxgui.4.0\generalTemplates.ini
        • Size 321B
        • SHA256 1ba202395050ff1d2415eb23b5615611e22f0fa6c0be0828c8220ced49a06aab
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dm.xml
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\dm.xml
        • Size 1KB
        • SHA256 b9211d7e370e247a50495fa376cb3b9ad9d9bfd12f7722f105bdf221d66df880
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ijl20.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\ijl20.dll
        • Size 2.3MB
        • SHA256 ef8c2c043cdcc960a0082076eaa21542807ad47c895fabf5ade33f843ac0de13
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        installed.xml
        • Path C:\Users\Admin\AppData\Local\Temp\mgxbqetll13\installed.xml
        • Size 35B
        • SHA256 8f49354f824579622074cc96a4e85f0e0e003f17367b6426cf3c0226a7c46fd6
        • MD5 SHA1 SHA512
        Submit Download

        MAGIX_ASIO_es-ES.mst
        • Path C:\Users\Admin\AppData\Local\Temp\mgxzedgxrkb\addon\MagixAsio\MAGIX_ASIO_es-ES.mst
        • Size 56KB
        • SHA256 102bf292101c75b0dfdd863be21b7f10529736d815f2d299815b259527615580
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MAGIX_ASIO_fr-FR.mst
        • Path C:\Users\Admin\AppData\Local\Temp\mgxzedgxrkb\addon\MagixAsio\MAGIX_ASIO_fr-FR.mst
        • Size 60KB
        • SHA256 083f3c00e93e3b83edf6dd6f86834942e01b74e1d2664e6a8952802bca3b09cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _0wa6mtt.cab
        • Path C:\Users\Admin\AppData\Local\Temp\mgxzedgxrkb\addon\MagixAsio\_0wa6mtt.cab
        • Size 36B
        • SHA256 a32e0a83001d2c5d41649063217923dac167809cab50ec5784078e41c9ec0f0f
        • MD5 SHA1 SHA512
        Submit Download

        Soundpool_80s_Nostalgia_Drive_setup.xml
        • Path C:\Users\Admin\AppData\Local\Temp\mgxzedgxrkb\addon\Soundpool_80s_Nostalgia_Drive\Soundpool_80s_Nostalgia_Drive_setup.xml
        • Size 109B
        • SHA256 bdd6e41f0e69549e75faac9141cda7d275fe286c7746cca549adee7414296594
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Soundpool_80s_Nostalgia_Drive_setup_x64.ms_
        • Path C:\Users\Admin\AppData\Local\Temp\mgxzedgxrkb\addon\Soundpool_80s_Nostalgia_Drive\Soundpool_80s_Nostalgia_Drive_setup_x64.ms_
        • Size 2.4MB
        • SHA256 41980adb5f5bdbac187caa074ec081b5d0f9b34c8b4c185d92b867ad5438c3b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Soundpool_80s_Nostalgia_Drive_zh-TW.mst
        • Path C:\Users\Admin\AppData\Local\Temp\mgxzedgxrkb\addon\Soundpool_80s_Nostalgia_Drive\Soundpool_80s_Nostalgia_Drive_zh-TW.mst
        • Size 56KB
        • SHA256 e79f0868ec7c02ac4b2e1caab8424bb435af116e5c02605d9aa245d1a1bc669e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MultiContentInst.dat
        • Path C:\Users\Admin\AppData\Local\Temp\mgxzedgxrkb\addon\Soundpool_Drum_Bass_Infinity_Part_2\MultiContentInst.dat
        • Size 313B
        • SHA256 b900547d95ce0b3f9c9dd9a465c429afa3349122134f40a6ef8084fbe2098a9e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Soundpool_Drum_Bass_Infinity_Part_2_ja-JP.mst
        • Path C:\Users\Admin\AppData\Local\Temp\mgxzedgxrkb\addon\Soundpool_Drum_Bass_Infinity_Part_2\Soundpool_Drum_Bass_Infinity_Part_2_ja-JP.mst
        • Size 68KB
        • SHA256 2619d4638aa95111a2a5c43e3c24fd9bf57a24a8371ec33047ca6c786677d425
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mm32_setup.exe
        • Path C:\Users\Admin\AppData\Local\Temp\mgxzedgxrkb\product\mm32_setup.exe
        • Size 4.6MB
        • SHA256 04da10dfb49ff276496f797fa06eef85349bc7f5009225c7ecdca427856e5fd1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        0f5007522459c86e95ffcc62f32308f1_af1ca008-3e9a-4dd1-9ae2-69693d68292f
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2101206053-1414382737-268919432-1000\0f5007522459c86e95ffcc62f32308f1_af1ca008-3e9a-4dd1-9ae2-69693d68292f
        • Size 1KB
        • SHA256 caeeb31f9f60115030aeccd8bb1ecbc82f90a1304b0823fff94ee76a3b13887c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        0f5007522459c86e95ffcc62f32308f1_af1ca008-3e9a-4dd1-9ae2-69693d68292f
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2101206053-1414382737-268919432-1000\0f5007522459c86e95ffcc62f32308f1_af1ca008-3e9a-4dd1-9ae2-69693d68292f
        • Size 1KB
        • SHA256 f0411604c4aeb4173228ea9565c711444658a1744052321c31addafd7df32313
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        msvcrt_redist_29102026-080145.log
        • Path C:\Users\Admin\AppData\Roaming\Sony\msvcrt_redist_29102026-080145.log
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512
        Submit Download

        MSI945B.tmp
        • Path C:\Windows\Installer\MSI945B.tmp
        • Size 123KB
        • SHA256 c03b47bcbe6c28cfa612950814ca383dddd0d4a527cc17f1750b8385d4917aad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ngen.log
        • Path C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen.log
        • Size 42KB
        • SHA256 db5670660fabe5f7423e8442bc3704c9109bb55947161937119f65dd8dfe2d1b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DLLDEV32i.dll
        • Path C:\Windows\SysWOW64\DLLDEV32i.dll
        • Size 117KB
        • SHA256 385f91801084f419df113cbcc6d48f8f38ae1d43f05e62f0cdedcfa242d777c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Accessibility.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\2c68539db75e583ae627fdd72a15be71\Accessibility.ni.dll
        • Size 25KB
        • SHA256 55588bf1f5b0979b2efb09a755d5c6827946040e0ff8a118d8003377c26d03d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        BdmuxInterface.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\BdmuxInterface\e31d8687ce8ba9c43621207919d33313\BdmuxInterface.ni.dll
        • Size 14KB
        • SHA256 a682efe1f12bf535a1bd1e3a891fe1c1462f86a6d963f91240d91f8824c35bea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        BdmuxServer.ni.exe
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\BdmuxServer\6efb28fa29a127ff0d19782f5447bd3b\BdmuxServer.ni.exe
        • Size 19KB
        • SHA256 9ed22a5d6e4acd2bd8d343e1857cbd2709a2d4bb4810812069b55e69803f4548
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.VisualC.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\574e82db6b0f08cfa6c354a8c530eee2\Microsoft.VisualC.ni.dll
        • Size 15KB
        • SHA256 32a2b9d92ec3446635a6f9cb21acfb662ba5a1f1b5e725d6ec763438426a9962
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Configuration.Install.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\611ffd8fff7c0284ff774f1020615bfa\System.Configuration.Install.ni.dll
        • Size 138KB
        • SHA256 3fe4993755e07639419a3905f331abb6dc156968c6f2e49bcd14156d6bf729e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Configuration.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\50c39c809e312905339e9d74496ecd00\System.Configuration.ni.dll
        • Size 955KB
        • SHA256 88d7bf86a81d78d6cc26e3e740cb2552b0daab107a6fe57ff29b3a8b4c765d01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Data.OracleClient.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\0e0f9e36df1c27f4678f09942864c9af\System.Data.OracleClient.ni.dll
        • Size 1.1MB
        • SHA256 5d24f91ebb1824af1d1b61ec43d3d50f025678570b5bf3f873f41e0640e36dae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Data.SqlXml.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\2bf6d78fa46125ef60dd084028ef4d8c\System.Data.SqlXml.ni.dll
        • Size 2.4MB
        • SHA256 e2db1ccf6218e8aef23603a2672348161351ece68b78f5e1b74301bf2a9f354f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Data.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\eaae44035dbd83a24255786d2aa9eef1\System.Data.ni.dll
        • Size 6.3MB
        • SHA256 548f3755733ca180ea1a4e7782dcbc17006922b80586e9208b413be95d2154da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Deployment.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\6a2516126ffd58d75fd9b63d965be6e3\System.Deployment.ni.dll
        • Size 1.6MB
        • SHA256 9cd9d565f993759fd579bd153782d66332a6df9d4f38668fc0612d5fd6c3efbf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Design.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Design\b345b1f734ea3aea3540caf55869215a\System.Design.ni.dll
        • Size 10.2MB
        • SHA256 7a1135452728669b1cb452c58a969a9c30f5e5cadc048d4b03a21f99adf6528d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.DirectoryServices.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\16ebe8df2036040bf7b16fbb0b441d63\System.DirectoryServices.ni.dll
        • Size 1.1MB
        • SHA256 f8cca9ed968d1f6244dda022faa84032e6ebec36168d4fb396ad8d01597f356a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.DirectoryServices.Protocols.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\2d96546698256d818114d8a17215f513\System.DirectoryServices.Protocols.ni.dll
        • Size 444KB
        • SHA256 7dddd2359338f8c5e8879d64c4a8583c930fa98b079fc6edad0e96e3d027cbcd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Drawing.Design.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\30bacfb052519296a25d585d62d65f0e\System.Drawing.Design.ni.dll
        • Size 203KB
        • SHA256 7aba2361cde5cf74436533f0da387b83c7e47ed254c2a92fdc9085445e20739e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Drawing.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\14ad09938f3197fce462d47b2194bd45\System.Drawing.ni.dll
        • Size 1.5MB
        • SHA256 a549546bdf9b32979033c151fe1ca370f2661570f4637d21138ac4ace369a73a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.EnterpriseServices.Wrapper.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\bd2663637d8b93a187e67959328f54fe\System.EnterpriseServices.Wrapper.dll
        • Size 273KB
        • SHA256 99721a4cc07d7a13f56f8a1f541ecbd27c79e9afbed0cc5e670640ac61d38751
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.EnterpriseServices.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\bd2663637d8b93a187e67959328f54fe\System.EnterpriseServices.ni.dll
        • Size 613KB
        • SHA256 90f1074270765c0908c6527ca8a86d4199b241e87f2dc5c84ada42c5d966776e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.Remoting.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\b7f272c19ef36ca26a6716b3ce65ba06\System.Runtime.Remoting.ni.dll
        • Size 756KB
        • SHA256 d3e76742f3c6266a039769e51a4b5f419f5d016a1d68b70e8bb136bd2dd590e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.Serialization.Formatters.Soap.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\bfa1161e5e8a708ebafb06503d3ea591\System.Runtime.Serialization.Formatters.Soap.ni.dll
        • Size 303KB
        • SHA256 8f8dd22755618fc224856a4a116f9434bac9aa3b1ad023fba70233f74d4a760e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\6358a966b003f859eb24e6c49d3bb7fa\System.Security.ni.dll
        • Size 705KB
        • SHA256 497a442b45d20a888bd7f57b2bd3b39867752b1304109a414ccca565f1bdd9eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ServiceProcess.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\abc482a81715bf779d3138355f99283f\System.ServiceProcess.ni.dll
        • Size 219KB
        • SHA256 043568069f8dd1438c3d5f9e93f02329c25793e614dd39acf0ad1322e8175f9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Transactions.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\391b0d05b44d909e89c784995e964aa1\System.Transactions.ni.dll
        • Size 612KB
        • SHA256 b728af1b74b97e7ca828c7eaf297a100b384ad1d90df35304cd56a6e28580849
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Web.RegularExpressions.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\01d6f732622814b1e863a201924278f0\System.Web.RegularExpressions.ni.dll
        • Size 248KB
        • SHA256 90c450b59896e2a0996cb3405e87ba053465ff26fe7a4099fc521398f282e796
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Web.Services.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\4c1da9372aeef07827689ca3afe5d28e\System.Web.Services.ni.dll
        • Size 1.8MB
        • SHA256 985d5c5e0781573a6bcc50bef8eaa624303cee239b0ed8b6921f570d4e21b336
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Web.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\e2dbd9e164bfad626e4b00b772242ecc\System.Web.ni.dll
        • Size 11.4MB
        • SHA256 9df42ff477f9b36e0c2f116182239953c6476b9cc019a9ab4912294926108538
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Forms.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d0c47ad5e4d501b35e43a088535e589f\System.Windows.Forms.ni.dll
        • Size 11.9MB
        • SHA256 6f83ea368ba764c5f2832ba4975c0cb2ffc000708c1ecf603f3130016e39d142
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Xml.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\4e31e183cb14c0cb0ef25463997f7af9\System.Xml.ni.dll
        • Size 5.2MB
        • SHA256 1d669ecca4017e8be44b1dafb52155a77d5632acdda10ad94688abe5f06f6480
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Vegmuxdh.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\Vegmuxdh\c9ca1187a97a369179ebbbccf15751ec\Vegmuxdh.ni.dll
        • Size 29KB
        • SHA256 c1e16c8ac8617ebf61f89dff9affd484473b78cbf44cb11d658e11d750a3ac96
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Vegmuxdw.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\Vegmuxdw\1cd84e4219dbc1d47dafe39b2f1d1aa1\Vegmuxdw.ni.dll
        • Size 635KB
        • SHA256 e3140c848bfbcb4b6dd04cfe6956fb3e1f2724a4ab8bc5523cb5cc1b137148ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Vegmuxfa.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\Vegmuxfa\efce9942776789a4280ac49be4e7c3b0\Vegmuxfa.ni.dll
        • Size 301KB
        • SHA256 8b8407318776c119c7ead0f6303707401be0eeca7508b25e5fbbdac8cdb7c3e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Vegmuxfb.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\Vegmuxfb\2235ff0cae529f86fb3dc515248a70a4\Vegmuxfb.ni.dll
        • Size 747KB
        • SHA256 f6b07ec031759f85c1eaf184334dc84f137b36d16fd37f20b7856153a0510b7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Vegmuxfc.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\Vegmuxfc\05c9198caf78ae3048d71845476b3ae2\Vegmuxfc.ni.dll
        • Size 133KB
        • SHA256 6e6de029b47b488df2554641b04d18ceeb98a1cca862778a809a7ac7d9130206
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Vegmuxfo.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\Vegmuxfo\ac8ea1cc356e0532107df13de5ef3c8b\Vegmuxfo.ni.dll
        • Size 1.1MB
        • SHA256 836200aced0a21b62af3fb03c824b0a3aa64bc4eeabc304c8f5ef96eecee4cea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Vegmuxmc.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\Vegmuxmc\8764db574a0b0d3290c4c2bde537f46f\Vegmuxmc.ni.dll
        • Size 139KB
        • SHA256 506bbc63b7dc90957548b3b874d3e5f02313726bab01e83c7fe40646ba0f67dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Vegmuxrt.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\Vegmuxrt\f2aa13b4b3ce06a7cbabf8ba698b0bda\Vegmuxrt.ni.dll
        • Size 35KB
        • SHA256 963114dd741bd70b05e9ca8d9bff707d517aeb60d160bcb679cb6ab1629fe99b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Vegmuxtw.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\Vegmuxtw\80dc3b5fa810f98bed0177bb4515cf06\Vegmuxtw.ni.dll
        • Size 207KB
        • SHA256 0ea769568e2385f79001a7cbb37a964d0a0f0bc4e167d80193ead24e448eb81a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mux.net.ni.dll
        • Path C:\Windows\assembly\NativeImages_v2.0.50727_32\mux.net\f10fec09dc4a248bf6475832bec881b8\mux.net.ni.dll
        • Size 311KB
        • SHA256 906b39066e48ce64d82dbdf739968ffef7dda5760e47128aba9d562cd3e7c8f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/728-2005-0x00000267BDB70000-0x00000267BDB86000-memory.dmp
        Download

        memory/732-1996-0x000001B0A92A0000-0x000001B0A92B6000-memory.dmp
        Download

        memory/1200-1993-0x000002723AA20000-0x000002723AA36000-memory.dmp
        Download

        memory/1976-2071-0x0000000005810000-0x0000000005858000-memory.dmp
        Download

        memory/2300-1978-0x0000023D36600000-0x0000023D36616000-memory.dmp
        Download

        memory/2496-1982-0x00000177DC140000-0x00000177DC156000-memory.dmp
        Download

        memory/2844-1975-0x0000028AFF820000-0x0000028AFF836000-memory.dmp
        Download

        memory/3200-2018-0x0000000003710000-0x00000000039F2000-memory.dmp
        Download

        memory/3200-2019-0x0000000003A00000-0x0000000003C6B000-memory.dmp
        Download

        memory/3200-2016-0x00007FF691940000-0x00007FF693F5F000-memory.dmp
        Download

        memory/3496-2051-0x0000000005C70000-0x0000000005CB8000-memory.dmp
        Download

        memory/3496-2052-0x0000000005E10000-0x0000000005E5F000-memory.dmp
        Download

        memory/4032-1987-0x00000270B7610000-0x00000270B7626000-memory.dmp
        Download

        memory/4728-125-0x00000000012A0000-0x00000000014E6000-memory.dmp
        Download

        memory/4728-119-0x0000000000EB0000-0x00000000010DB000-memory.dmp
        Download

        memory/4728-129-0x0000000002D60000-0x0000000002DFC000-memory.dmp
        Download

        memory/4728-122-0x00000000010E0000-0x000000000129A000-memory.dmp
        Download

        memory/4760-2325-0x0000000008240000-0x000000000828F000-memory.dmp
        Download

        memory/4764-2002-0x000001F2562D0000-0x000001F2562E6000-memory.dmp
        Download

        memory/4988-1984-0x000002A00DB40000-0x000002A00DB56000-memory.dmp
        Download

        memory/5092-1999-0x0000021A69F00000-0x0000021A69F16000-memory.dmp
        Download

        memory/5104-1990-0x000001C86AC70000-0x000001C86AC86000-memory.dmp
        Download