1ef64572d4248729f4a7d2cb623feed965cfb55847628c04b676f97360ccd7d8

Analysis

max time kernel
149s
max time network
130s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/05/2026, 11:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-17_314ef089bab7c0e1291abc9a367c5ca6_elex_stealc_stop.exe
Size 27.1MB
Sample260517-nbxc4afv3x
SHA256 1ef64572d4248729f4a7d2cb623feed965cfb55847628c04b676f97360ccd7d8
MD5 314ef089bab7c0e1291abc9a367c5ca6
SHA1 4c883f56cbf610be591cded1a399f61f01f943a8
SHA512 e521a5482e0858d4b1c5bcece76a868d8d334a03c22cdc1d3bb1eb087267d869ae68ff69a97717184f9f7f78fe06babcbcc909a5791885f9f2c619a7c38f4912
SSDEEP 786432:yLxykIoNvZohg63jSh/la5zR6bEPID+RY:yLotV3jSp85zkEPC+RY
TLSH
T1385733512FBA4170E2B32AB2967C92603E767F215B3081CB96543D6FBE726C19934373
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

discovery

Malware Config

Signatures

Detects executables packed with SmartAssembly 1 IoCs

resource	yara_rule
behavioral2/memory/3140-1013-0x00000220721F0000-0x0000022072250000-memory.dmp	INDICATOR_EXE_Packed_SmartAssembly

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\IES\VAConnect 7\SharpDX.Direct3D11.dll	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Base Plate\DG#1 Ex 4.6.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Bolted End Plate\TrainingVideo_8ES.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Bolted End Plate\TrainingVideo_8ES.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Bolted Flange Plate\AISC V16 Ex II.B-1.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Double Angle Bolted Welded\TrainingVideo.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Shear Tab\AISC V16 Ex II.A-17C.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Wood Bolted Shear\SS WSM Theta.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Wood Fastener Withdrawal\TrainingVideo_RingShank.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Bolted End Plate\Example 4.3.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Shear Tab\AISC V16 Ex II.A-17A.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Wood Bolted Shear\SS WSM.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\WW.Cad.dll	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\VAConnect.exe	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Base Plate\ACI355.3R Ex 8.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Shear Tab\TrainingVideo.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Shear Tab\TrainingVideoCoped.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Ab3d.DXEngine.dll	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Microsoft.SqlServer.Types.dll	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Bolted End Plate\TrainingVideo_4ES.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Shear Tab\AISC V16 Ex II.A-17C.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Wood Bolted Shear\TrainingVideo.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Ab3d.PowerToys.dll	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\System.Collections.Immutable.dll	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Base Plate\DG#1 Ex 4.5.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Bolted End Plate\TrainingVideo_4E.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Column Splice\Example 4.4.1 Seismic Design Manual.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Double Angle Bolted Welded\AISC V16 Ex II.A-2B.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Double Angle Welded Bolted\AISC V16 Ex II.A-2A.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\ActiproSoftware.Shared.Wpf.dll	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Shear Tab\AISC V16 Ex II.A-19A.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\PLUSManaged.dll	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\PLUSManaged.XmlSerializers.dll	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\SharpDX.DXGI.dll	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Bolted End Plate\TrainingVideo_4E.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Base Plate\DG#1 Ex 4.5.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Bolted Flange Plate\TrainingVideo.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Double Angle Bolted\TrainingVideo.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Shear Tab\AISC V16 Ex II.A-19B.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Microsoft.ReportViewer.Common.dll	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Beam Over HSS\TrainingVideo.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Double Angle Welded\AISC V16 Ex II.A-3.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\WW.dll	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Column Splice\TrainingVideo.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Welded Flange Plate\TrainingVideo.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\EngineSupportLink.dll	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Column Splice\TrainingVideo.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Wood Fastener Withdrawal\TrainingVideo_WoodScrew.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Beam Over HSS\Example 4.1.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Bolted End Plate\Example 4.4.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Shear Tab\TrainingVideo.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Gigasoft.ProEssentialsWpf.Dll	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Double Angle Welded\TrainingVideo.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Double Angle Welded Bolted\TrainingVideo.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Shear Tab\AISC V16 Ex II.A-17A.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Shear Tab\LargeEccentricity.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Wood Fastener Withdrawal\NDS E2.1b.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Base Plate\TrainingVideo.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Shear Tab\LargeEccentricity.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Base Plate\DG#1 Ex 4.6.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Base Plate\TrainingVideo.txt	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Base Plate\TrainingVideoFEA.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Examples\Beam Over HSS\TrainingVideo.vxp	msiexec.exe
File created	C:\Program Files\IES\VAConnect 7\Newtonsoft.Json.dll	msiexec.exe

Drops file in Windows directory 16 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Installer\e5890f0.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI91BC.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI9249.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI9289.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI950B.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\~DF1D2F9455609B2C6A.TMP	msiexec.exe
File created	C:\Windows\Installer\e5890f0.msi	msiexec.exe
File created	C:\Windows\SystemTemp\~DF1174F14168A2F0B3.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI92B9.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\Installer\e5890f4.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File created	C:\Windows\Installer\SourceHash{DB453879-4B85-4381-832B-EAC93DD10B76}	msiexec.exe
File created	C:\Windows\SystemTemp\~DFDD3A4015B41FD606.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\~DF2DCFB2F8485A6657.TMP	msiexec.exe

Executes dropped EXE 2 IoCs

pid	Process
1752	setup-vx7.exe
3140	VAConnect.exe

Loads dropped DLL 6 IoCs

pid	Process
1752	setup-vx7.exe
1752	setup-vx7.exe
6092	MsiExec.exe
6092	MsiExec.exe
6092	MsiExec.exe
6092	MsiExec.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	setup-vx7.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-17_314ef089bab7c0e1291abc9a367c5ca6_elex_stealc_stop.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\F9BCCAC50	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FCD9983AC	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FCAA02B25	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\PackageCode = "0A99D894FADA8C848AA5C5DAA01E257E"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\SourceList\PackageName = "setup-vx7.msi"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.vxp	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.vxp\UserChoice	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FE187A447	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\ProductName = "VAConnect 7"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VAConnect.project\ = "VAConnect Project File"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FED4F1BEF	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FAC107C18	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\SourceList\Net	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.vxp\UserChoice\ProgID = "VAConnect.project"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FEATURE_ID	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FB9A461AC	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FD16786F7	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\F45DCA81C	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\F5715CD46	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\F957ABE24	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\InstanceType = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FF6326D91	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FD5F1869E	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\F4C7C1A56	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FDACBECCA	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FFC8EF3E0	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\DeploymentFlags = "2"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\SourceList\Media	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\SourceList\LastUsedSource = "n;1;C:\\PROGRA~3\\{498D9~1\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\setup-vx7.exe\IsHostApp	setup-vx7.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\.vxp\OpenWithProgIDs\VAConnect.project	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VAConnect.project	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\F4803295D	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\F54A822E7	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\F635E6379	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\setup-vx7.exe	setup-vx7.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.vxp\OpenWithProgIDs	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VAConnect.project\Shell	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FD6513C80	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VAConnect.project\Shell\Open\Command\ = "\"C:\\Program Files\\IES\\VAConnect 7\\VAConnect.exe\" \"%1\""	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\F16B97EF0	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\F49321DCB	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\F3368A0AE	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\AuthorizedLUAApp = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\SourceList\Net\2 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\mia1"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\VAConnect.project\Shell\Open\Command	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FA601CFB	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\Language = "1033"	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\Clients = 3a0000000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FB29FA744	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FC082C817	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FA99E73BA	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FD2DFE9E2	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FBFC0EA2E	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\SourceList\Net\1 = "C:\\PROGRA~3\\{498D9~1\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\F904A5521	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\FE4EF1797	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\F98734745	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\SourceList	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\978354BD58B4183438B2AE9CD31DB067\SourceList\Media\1 = ";"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VAConnect.project\Shell\Open	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\978354BD58B4183438B2AE9CD31DB067\F55F47182	msiexec.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3044	msiexec.exe
3044	msiexec.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeIncreaseQuotaPrivilege	1752	setup-vx7.exe
Token: SeSecurityPrivilege	1752	setup-vx7.exe
Token: SeTakeOwnershipPrivilege	1752	setup-vx7.exe
Token: SeLoadDriverPrivilege	1752	setup-vx7.exe
Token: SeSystemProfilePrivilege	1752	setup-vx7.exe
Token: SeSystemtimePrivilege	1752	setup-vx7.exe
Token: SeProfSingleProcessPrivilege	1752	setup-vx7.exe
Token: SeIncBasePriorityPrivilege	1752	setup-vx7.exe
Token: SeCreatePagefilePrivilege	1752	setup-vx7.exe
Token: SeBackupPrivilege	1752	setup-vx7.exe
Token: SeRestorePrivilege	1752	setup-vx7.exe
Token: SeShutdownPrivilege	1752	setup-vx7.exe
Token: SeDebugPrivilege	1752	setup-vx7.exe
Token: SeSystemEnvironmentPrivilege	1752	setup-vx7.exe
Token: SeRemoteShutdownPrivilege	1752	setup-vx7.exe
Token: SeUndockPrivilege	1752	setup-vx7.exe
Token: SeManageVolumePrivilege	1752	setup-vx7.exe
Token: 33	1752	setup-vx7.exe
Token: 34	1752	setup-vx7.exe
Token: 35	1752	setup-vx7.exe
Token: 36	1752	setup-vx7.exe
Token: SeShutdownPrivilege	1752	setup-vx7.exe
Token: SeIncreaseQuotaPrivilege	1752	setup-vx7.exe
Token: SeSecurityPrivilege	3044	msiexec.exe
Token: SeCreateTokenPrivilege	1752	setup-vx7.exe
Token: SeAssignPrimaryTokenPrivilege	1752	setup-vx7.exe
Token: SeLockMemoryPrivilege	1752	setup-vx7.exe
Token: SeIncreaseQuotaPrivilege	1752	setup-vx7.exe
Token: SeMachineAccountPrivilege	1752	setup-vx7.exe
Token: SeTcbPrivilege	1752	setup-vx7.exe
Token: SeSecurityPrivilege	1752	setup-vx7.exe
Token: SeTakeOwnershipPrivilege	1752	setup-vx7.exe
Token: SeLoadDriverPrivilege	1752	setup-vx7.exe
Token: SeSystemProfilePrivilege	1752	setup-vx7.exe
Token: SeSystemtimePrivilege	1752	setup-vx7.exe
Token: SeProfSingleProcessPrivilege	1752	setup-vx7.exe
Token: SeIncBasePriorityPrivilege	1752	setup-vx7.exe
Token: SeCreatePagefilePrivilege	1752	setup-vx7.exe
Token: SeCreatePermanentPrivilege	1752	setup-vx7.exe
Token: SeBackupPrivilege	1752	setup-vx7.exe
Token: SeRestorePrivilege	1752	setup-vx7.exe
Token: SeShutdownPrivilege	1752	setup-vx7.exe
Token: SeDebugPrivilege	1752	setup-vx7.exe
Token: SeAuditPrivilege	1752	setup-vx7.exe
Token: SeSystemEnvironmentPrivilege	1752	setup-vx7.exe
Token: SeChangeNotifyPrivilege	1752	setup-vx7.exe
Token: SeRemoteShutdownPrivilege	1752	setup-vx7.exe
Token: SeUndockPrivilege	1752	setup-vx7.exe
Token: SeSyncAgentPrivilege	1752	setup-vx7.exe
Token: SeEnableDelegationPrivilege	1752	setup-vx7.exe
Token: SeManageVolumePrivilege	1752	setup-vx7.exe
Token: SeImpersonatePrivilege	1752	setup-vx7.exe
Token: SeCreateGlobalPrivilege	1752	setup-vx7.exe
Token: SeRestorePrivilege	3044	msiexec.exe
Token: SeTakeOwnershipPrivilege	3044	msiexec.exe
Token: SeRestorePrivilege	3044	msiexec.exe
Token: SeTakeOwnershipPrivilege	3044	msiexec.exe
Token: SeRestorePrivilege	3044	msiexec.exe
Token: SeTakeOwnershipPrivilege	3044	msiexec.exe
Token: SeRestorePrivilege	3044	msiexec.exe
Token: SeTakeOwnershipPrivilege	3044	msiexec.exe
Token: SeRestorePrivilege	3044	msiexec.exe
Token: SeTakeOwnershipPrivilege	3044	msiexec.exe
Token: SeRestorePrivilege	3044	msiexec.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
3020	2026-05-17_314ef089bab7c0e1291abc9a367c5ca6_elex_stealc_stop.exe
1752	setup-vx7.exe
1752	setup-vx7.exe
1752	setup-vx7.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
1752	setup-vx7.exe
1752	setup-vx7.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3020 wrote to memory of 1752	3020	2026-05-17_314ef089bab7c0e1291abc9a367c5ca6_elex_stealc_stop.exe	80
PID 3044 wrote to memory of 6092	3044	msiexec.exe	82
PID 1752 wrote to memory of 3140	1752	setup-vx7.exe	84

C:\Users\Admin\AppData\Local\Temp\2026-05-17_314ef089bab7c0e1291abc9a367c5ca6_elex_stealc_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-17_314ef089bab7c0e1291abc9a367c5ca6_elex_stealc_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:3020
- C:\ProgramData\mia603C.tmp\setup-vx7.exe
  .\setup-vx7.exe /m="C:\Users\Admin\AppData\Local\Temp\2026-0~1.EXE" /k=""
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:1752
- - C:\Program Files\IES\VAConnect 7\VAConnect.exe
    "C:\Program Files\IES\VAConnect 7\VAConnect.exe"
    3⤵
    - Executes dropped EXE
    PID:3140

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3044
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 19C232C8B450F012CEBD0AA76C425338
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:6092

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e5890f3.rbs

Path C:\Config.Msi\e5890f3.rbs
Size 166KB
SHA256 9d72a3e23dc5942f3ef3b189b4bae063d876ad98573ac78981a279f76522061e
MD5 ecedb7d9ba8996a20ab73d45711c18f3
SHA1 fa8fe5b1aac3b5c804e012a5e734246c7c2e2d0d
SHA512 d42d5083054a999071af8d0f9d5e58ba9ccef0c7e85f3b77fb79a013f4b94d1c3fea5c09ec482d92a0586011a36d7c7436be89e9bd23df49b30f4ef6bc115724
SSDEEP 3072:vZm8oppppppppppppc/qqXBOTpU9GgtYvEdDZCXzgRIi:vZroppppppppppppc/qqxOTpU9GgtYvI
TLSH
T146F3CC828A14C783E98B1B34FE7337013B36E5D993D9824F468D9264D9C27D45FF8A89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReportStyles.xml

Path C:\ProgramData\IES\Customer\VisualAnalysis Reports\ReportStyles.xml
Size 74B
SHA256 cc296302fa81abe58f7df4470e255a0dfe63aac7dbc067b4d80609c15a92423d
MD5 895e5f3d8c7e60ddfc71e34752fdfa80
SHA1 f9a677aefa5d533306fd603158a1300d29887bb8
SHA512 122234b7b3e2577be4ddc14090030e5e7cff99f8f463c7b9f81aab6297f29239a45c91c88ad25e30c5c1b01d50a6b8fad03810b3904c66d817e0bea8d7a593f3
TLSH
T1DCA002306618DCAE4A6079B6477BCA2C77A83217167118444C538AB64E5D15D0694159
MD5 SHA1 SHA512 TLSH

Submit Download

mia.lib

Path C:\ProgramData\mia603C.tmp\mia.lib
Size 592KB
SHA256 f4bb9cf2e03832f23b407d4bdef1d44d4dfd6a510f2fdc1a6be263241914b55b
MD5 6017c5f8ea6382684def62597535b277
SHA1 1ed79b319b3b0e47bd3b08c194b4cfe1a06f12a8
SHA512 65a0e4505294c621c031f64051017c9bee36ef4b5f793c39010a516e84443cd85dbf092a1b4d6526abefd499994739326e0b55b2480523de7c8189b6dd3ff0f6
SSDEEP 6144:77mkzB4Do4JUqptRCwCzae0LYPpeBnVZ8w4toZAcLrJa/liSVHUPk:nmkzB+dtRRReCYRo38KLg/lIk
TLSH
T112D47D5DAA47C239D98A1270856E57BAD639F0440321C0C3ABAD8D9C7E339D27B372D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ab3d.DirectX.Client.Settings.dll

Path C:\ProgramData\mia603C.tmp\offline\16B97EF0\C40D6012\Ab3d.DirectX.Client.Settings.dll
Size 41KB
SHA256 1008afe8ac9ba3ca25827548e21b2fc65a2f3156b950ac000d1442ed3bc7f43b
MD5 8cdf3f2bfcec716a847765ca95357539
SHA1 cc019b0f132d19d8af6c52e989c0056393ac4873
SHA512 d3eacaf8b1c28d2c748f5b0986e4c4df3df1168b296e2122ae466ab15c133142180c2b6604db379b062e8a38f6e2415f21d4a6ae8bc03bf452e079b44e664489
SSDEEP 768:I3BhgPcgbe3NYjTO2d4cbkdgrCtoLlgmrac2o:IRqPcgKkwcIg6oL+Tcb
TLSH
T12B132A5073FC062AE5FB1F7A78B802600A797B4A6637E3AD0C84558D18B37818B75777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ab3d.DXEngine.dll

Path C:\ProgramData\mia603C.tmp\offline\18750269\C40D6012\Ab3d.DXEngine.dll
Size 875KB
SHA256 d07167c879bea3665932f91e9c9be8b79130ee53941d3ff7440747bb3c89b8c2
MD5 71ca864284e93e282764efe7cd0e81c2
SHA1 35c885fa76c7357bf06c321c61be109d4bafeb9d
SHA512 433c65085f07badfa215296e9db32bd4f81890daa01198ff030591309b559b1dc8c1873e3d624c06d62234459ea6d2cd07347a9a2fb9cf2bba74e92a3ead4425
SSDEEP 12288:FgSWKwAtSr4vO9hUnoQzmt5EY34oBBY8a1YGHWFNEIFnvE:6SxTv0CnoQzmt5EY34o/YokkEIZE
TLSH
T1161518076B909937D60E4377C9E76B3873B5A4422FE7D3CB968C66212CA338A5C13197
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VAConnect.exe

Path C:\ProgramData\mia603C.tmp\offline\3368A0AE\3B7654D8\VAConnect.exe
Size 32.1MB
SHA256 389901e2e9a6e054eb1757135957465ed6003793c559330f73903a8b6a640e72
MD5 a5849bb9a11866e9c48c7d35e48e84a6
SHA1 04f0f60d3b47f9bbb3745cdfd3b598e18ae527d0
SHA512 16736faa3ef333cd4cbee354c3ea78ca604015ef2a727a518a59949acc5962d5c45c6acf905860d2c31505ab32fda0cf85e7ee61ca970b737aa4d2adeebea4ac
SSDEEP 393216:HKNfRCD1WCRXvemOsPvJiXff4C4Uzvkx+uj/8yjKkEXzfv3XIaspnE:H8RCD1WCRNOJQUMTj/8yjKxzfXspE
TLSH
T15777BF26A1C36757D03E443251212A50FFB3AE937353834AB28E27B79FB5F895903726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SharpDX.DXGI.dll

Path C:\ProgramData\mia603C.tmp\offline\36BD0AA6\C40D6012\SharpDX.DXGI.dll
Size 145KB
SHA256 bc0243134c93c55ea105d0e9c2a43b6030e973290d0a061cf3a61986a2268a88
MD5 d2edde626c241549eab636aa87fb5d38
SHA1 8d836febd477b3ec44cc37f4f0aecdaa1d7db788
SHA512 490878e20ed764e81e42b8f43faf2adc0810dcd2f65d36f6d6980411617fae9543f0d7b6f110e5363be494097ba3b30dcf3695aea41314fbe19c6a59a55538d1
SSDEEP 1536:x/xP0dmNHRIfvXyTjUxk0+8shTbRqpzMA1JhkrIAcFpZMD9hVRg5bT+02nBJdbea:x/OSSfP60kpVxbUuZKq/4qaTXc
TLSH
T1CDE321826D7483B4E9CF7FBEE695B92A5523F1110481B64612E27A004BC52438F9FFDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ACI350StrengthWind.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\ACI350StrengthWind.xml
Size 6KB
SHA256 881e6daece89960a70200ec5a7d86ad3bebbdbcab7032ae49261a423f44b4ac8
MD5 7e7342b32d98ad226c581b252256fbf6
SHA1 6640073d948f89cfea42708fb83342816ddf277f
SHA512 074689012fccecc8882482a15f43297e01f5d8a984a3ef8a458a6cf1f060ee7371dd13a99e30b4e4b7943c57bd1f0d5837765b881f0bac9b81e319a7c04fc57e
SSDEEP 192:BUJ6gbzbkb0SF4xeRet2K3wcJlepuBo5Uz:BUJ6gbzbkb0SF4xeReticJlepuBQUz
TLSH
T1AAD19C949AD39D439577B2223F75CA20FEA5D5DB45243EA1F0EC07272FB90790633A22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ASCE 7-05 ASD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\ASCE 7-05 ASD.xml
Size 3KB
SHA256 85fa4322bae2f9f81f268c9d254e8beaf92c1bb7c4c1e34b64e4a0a884d2fc8a
MD5 94b2fdf6e3715fff35d0b66ff621083e
SHA1 9d441d0f0014d363be0b96feee4e45e75f018c3c
SHA512 06caa601de1ae2c4b42dc40957dd8e966250b3bb5df3e8c1d92733ed3cc3699004f09badcb3b73d9a3f8eb21959015019adc7988d7487b89beb04922ebb9c40d
TLSH
T16871298465D2A443A93F92653B35C690FEE3C1EB5A143FA0F0ADC7279F745681233A72
MD5 SHA1 SHA512 TLSH

Submit Download

ASCE 7-05 LRFD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\ASCE 7-05 LRFD.xml
Size 2KB
SHA256 552b5c77c56ec81ae7fb4dbdc69a5855a7fd9618dcbff6921ce77e15744c7d61
MD5 6b020d97fd816353727327ae23822967
SHA1 1866fd722b4e7245b4b25c839b55fc6fa79c8377
SHA512 20168c82b872f1e30c567946d3770cf02315b4af55bed3153b89895b23e7af29c85d0a7d4a9a4e35c4cae4d31a8d55d41b1f3ec733c7467a99fd812ff0e1cb1c
TLSH
T1535190886BC24843953BB2653F75CA24FDA5C9CB44603FA1F09947276FBD0790633AB6
MD5 SHA1 SHA512 TLSH

Submit Download

ASCE 7-10 ASD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\ASCE 7-10 ASD.xml
Size 3KB
SHA256 5e684f479c737dc3ca26493e57592cf4537c0fc08267a0c79955acd8189904d7
MD5 4368d241585e736eda57184e58186f3f
SHA1 99ef30ae3da7f029285a38d4b677fa7b0b9a2049
SHA512 825a77ced0bc1daea78881975a5cb8f760c78d55a83f41052ca302630195e0d6542eedfe16d66f8851425cb39a28b29d17d99c959678481d250ab94081a96180
TLSH
T11461F78461D2A443A93F92663B75C294FDE3C1EB68143FA1F0AD87279F744781233A76
MD5 SHA1 SHA512 TLSH

Submit Download

ASCE 7-10 LRFD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\ASCE 7-10 LRFD.xml
Size 3KB
SHA256 11830b5121030cc7c321dcd9cbb12f49dac072ca9172b6b28f1142213b5f53e5
MD5 88e1dda8dede71bc407fd268c6a6032f
SHA1 10d01d3df260a27fdd58e3228c7bf853c36b9a27
SHA512 9b8a2d169e201e194cd043af61bcd00977580af8574e89fa8dd2703fbb1b978a9c0824679a39243df8012bec982845ff4abed2335f0166ac5ed20ae9f8ac3a6f
TLSH
T100615788ABC35843953BB2613F65CA24FD65C5DB54203FA1F09D832B6FBD0790633A66
MD5 SHA1 SHA512 TLSH

Submit Download

ASCE 7-16 ASD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\ASCE 7-16 ASD.xml
Size 8KB
SHA256 824305cf37b69bb2b9919e5ae4e0cdec47a17d810ffc140cf55c01b84019fca0
MD5 b4b5b2040355fd21103c48e4a9de7dbf
SHA1 4b44fd67e0e8b9fc1552f4f8455f49d021f70b07
SHA512 cae3541949d6f7c24ac451b3faf6da69809465b8e4f0881d3b2b467e228dc005877afa5aec42e3e947ba9a773b64c89149885a615b355fd990267aaea4fd49e7
SSDEEP 192:hw2ZRLcu35mH3I+IZIYVFIFHmXrzICRILIC9QcVER7Zm1TRLhK7a43JIRkRAnz:hw2ZRLcu35mH3I+IZIcqFHcrzImILICD
TLSH
T10B12F88561D29043983F82763B79C6A0FDE2D5EB64243FA0F19982375FB4C7816339B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ASCE 7-16 LRFD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\ASCE 7-16 LRFD.xml
Size 9KB
SHA256 afa50ef7fa4068e0a7b2db12b9be5f48d48da7ed1c1ff38bb02cd671424131eb
MD5 d643c6a6f5092bcc3960c827d09a20c4
SHA1 cc85d0d42d2df9e26d52b13529315ad5fd3efd9a
SHA512 1dcab15509427d0207648a2b9d1e9cc34f153bd3abfdbdccd522100eaea6ba844cf5bedd783bb7bf6047d0d80b1013becbf10da2ebd5e89e9a408532da3f1e22
SSDEEP 48:35kO40g4Ez4WaIXWIIHgUqqgSqcGgUqSmqLoqmmqj38C2rj7c7EgIzglmgeuRgL9:6BAdAmtQRUANEjeUPr4zYTITbEgz
TLSH
T137126B84ABC25803953BB2663F69CB10FDA5C1DB55603FE0F19C82276F79079023397A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ASCE 7-22 ASD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\ASCE 7-22 ASD.xml
Size 8KB
SHA256 25a4cfaee490ae97c55603285e84d8049771ff2a4df53ec764f032ef24565e70
MD5 82a466a56c88605a232825d2617fb0be
SHA1 e8ed974fcaf16ef168db44eb28b3040b98d93445
SHA512 6190164bd6084b6367880a3e1f87bf8ac7f72bafb298166b305f6f9baae4f29ca6e2431366d6d4acf84f95ed6812c9221eda1a77f3a7016afaa2d043ede5a27a
SSDEEP 192:0w2ZRLcV35VH3IvIZIlzF3FHXrzI7ILIC9797yTRLhK7a4egszkRAnz:0w2ZRLcV35VH3IvIZIl53FHXrzI7ILIb
TLSH
T13212F88561D29043983F82763B79C6A0FDE2D5EB64243FA0F19982375FB4C7816339B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ASCE 7-22 LRFD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\ASCE 7-22 LRFD.xml
Size 9KB
SHA256 ec11c85351ade0258320c711a985def4cb806859ffce89e463f8eb2b8441082a
MD5 7f943402730c0cc6d8525c8fb2f2411d
SHA1 ca748d056a113ebfd613fd354a0c567fc8879d8a
SHA512 9a005fa6c2533045deacd0a84e325b049012c961694a5b322fbfff1787e43286896f30709a736671681142db58b2bacbf3e48c3bdee735b5169f847e5b93c092
SSDEEP 192:9AdAGDtQYOUA+oEjHkUBrCzXs4RTdk4TbEgz:9AdAWtQdUAZEj1ez
TLSH
T198125C84AAC25843953BB2663F79CB20FDA5D1DB55203FE0F19C82276F7907902739B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Deflections.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\Deflections.xml
Size 897B
SHA256 fda8360982a2d633992919b55a9de9f796fb16ce036244c2a34b8221d8f3af7f
MD5 247d2ae6da158bc7791143195a09f729
SHA1 5ddb2c00847f27a002526ee992ff42b48b9ab7cd
SHA512 2fc4342999eca26842478707549a501d952f7f39f365d26ce719ac9fa90a981fa4bac79cff321fd8b6409ffd45abd25a8ad44bc13da7cc1d53aa403ebb42a714
TLSH
T19611A58461E24152A83FC2263E79C560FEB2D1DB88206F20F1A98B335F744BC027397B
MD5 SHA1 SHA512 TLSH

Submit Download

DeflectionsStrengthWind.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\DeflectionsStrengthWind.xml
Size 910B
SHA256 5d1cd360623be35f4582cd951844e25ab0143fb677f1e31bddd1f4f8e8ad9e89
MD5 507600c5272ffa1a5001f3aca64b4a88
SHA1 3c75d4c619f090d03040de710c9be919bceac7b3
SHA512 99526ec5c115732c2e46217fdb708815e13c9d7e1112596b41561b6a5e2495dfaf322c2e541abb84867ce1253f54c0a10f45dd401f6f00bfd75cf8ddfb264f6c
TLSH
T16C11968461E14012A83BC2663E79C660FDA2D1DB84206F20F1A98B235F740BC0673A7B
MD5 SHA1 SHA512 TLSH

Submit Download

IBC 2009 ASD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\IBC 2009 ASD.xml
Size 2KB
SHA256 1c915c01029e15f2067e1d8600bdaa43d1ac7b2ca6077a18fe70956e0b774373
MD5 b30cd5a7427a5280cf73330079de721c
SHA1 e0cb30055bec8b18bb0c429cd6a1e805e6783963
SHA512 2b9699148293f5dc18a03ad61ea4fe74cbb2be3d0dc35abac2807401e7641420a005d524bb277dc474f2602b6506a48deb222edf7595231dfbb458cd7978e353
TLSH
T11E51F58461D39043A83F92757A35C2A4FDE2D4EB68143FA1F0AD87279F784681233566
MD5 SHA1 SHA512 TLSH

Submit Download

IBC 2009 LRFD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\IBC 2009 LRFD.xml
Size 2KB
SHA256 c32bc2cc5eb84d73f3c5554914888c9c6fbbff42b66553d7e7cd594af298c64d
MD5 e77a60d8fd6bd4b860a304db7c5255eb
SHA1 474017dd7d622e9490b6fa81acc45acf839a0a30
SHA512 eabd855406b2b1691812d2e9719dff49cf1d65b774017885e73febedd83a896f2bffaccba37cc91e4cc1959ebf4cf9e7ae97ab9448c326af6db1f8f6164b4393
TLSH
T136516C84AAC24853993BB2513F74CA20FDA985DF54603FA1F09C47675FBC07A0233AB6
MD5 SHA1 SHA512 TLSH

Submit Download

IBC 2012 ASD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\IBC 2012 ASD.xml
Size 3KB
SHA256 3f955127b19b0f866663f8e0f6db5e3f22f6501c1007d728728ef5958b46a4d3
MD5 1963e5d5ac1e6450371b2390c127a589
SHA1 bfb1455179cebb82a373f1689b63f012bc6961bd
SHA512 db88ea60babdccb5e04b38c9bed96d428575133749570bb06538865839560cb75b1a89f9bc33917328a2a0bf897ea94b137f7656bef03c2d25b72aab03b2c572
TLSH
T14D61F48461D2A043A93F92657B35C2A0FDE3C5EB68143FA1F1AD87279F784781233976
MD5 SHA1 SHA512 TLSH

Submit Download

IBC 2012 LRFD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\IBC 2012 LRFD.xml
Size 3KB
SHA256 949e33551c79c1b3297f055177d95da36ba4743f9e7254680f2eda6cfd56d725
MD5 afe050de6b4bfbbe37771ee6f510b0c1
SHA1 06039093c00647e06232d07c99f31b34e0aae99e
SHA512 4729683a4d79f6aca404c53d2e51b763a5e9a5fb9cb62c78106075bb62af917f21e6763a476b24b510c5d4eaa29ecd935e2c41a14d43e33ef4f5102763de1eab
TLSH
T1FA614084AAC25843593BB2553F75C920FDA585CB64603FE2F09C47276FB90790233AB6
MD5 SHA1 SHA512 TLSH

Submit Download

IBC 2015 ASD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\IBC 2015 ASD.xml
Size 3KB
SHA256 9f1420e25fc112ba74a22c5577de5d0189308d4cd0c6d754cd7ae648b1d229bb
MD5 ed98e593388bf51d9d9b2bc52b154375
SHA1 8467c97a395744eda26274abf6bada1a396286ec
SHA512 83169c37f1d8980171bc91e87bb0b7f9e93246ec2c4e41ea290dc65ed0ba25ff8171d8f8cdf7cefe59aa9d3ad28ba491e31159c5c999d75b4bd6334a0301da52
TLSH
T14E61F48461D29043A93F92657B35C2A0FDE3C5EB68143FA1F1AD87279F784781233976
MD5 SHA1 SHA512 TLSH

Submit Download

IBC 2015 LRFD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\IBC 2015 LRFD.xml
Size 3KB
SHA256 625d2f85557760f681bd8e70b2dab62bc47c0bcf7f7178c6f774af1289e554d0
MD5 9d818a78fd963a9938d3ac27c83d87bb
SHA1 db6bc271983af6ff906cb8bec007d1cab0082d85
SHA512 80a411cca9581653f7ae266fb16e567f2bab457993f574ba2e47651408797bf40331ce7b82693a2aed770b3330097112c4ed364090230213f4b0fb6d8dc43708
TLSH
T1ED615084AAC35843593BB2553F75C920FDA585CB64603FE2F09C47276FB90790233AB6
MD5 SHA1 SHA512 TLSH

Submit Download

IBC 2018 ASD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\IBC 2018 ASD.xml
Size 3KB
SHA256 3fba333d6e3eae590fa203ff65b9c8dfcffcd7ddc78a4b6cffd7acf6175beebd
MD5 838bb13544ecdc7b83793a885b5776de
SHA1 8db63aa4a844a01c1d78b91632525467cc39651b
SHA512 6ccd6808a2bd2b60336f4ca5897a9d53fb2275bffae8368fd115bb51b9acb08495278649e0825769d33aabcc07962b2d7d9ac268d4db21d49bb257271e2752aa
TLSH
T1AA61F48461D29043A93F92657B35C2A0FDE3C5EB68143FA1F1AD87279F784781233976
MD5 SHA1 SHA512 TLSH

Submit Download

IBC 2018 LRFD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\IBC 2018 LRFD.xml
Size 3KB
SHA256 231f81999dac922303ffa88e8cffaa44e08f63a2230d7641464d225ec3affc08
MD5 5e665dfa6ee7c6be6a7596301ce104f2
SHA1 97bd1cab6077bc03ecb9844451c8f6e98bfb45b5
SHA512 440dba090c6d03a8095c12e347e177decb28d1f3b384df2693ac7efada01180d8437adfc5a9d5063dd81c6f51b337d20fecf9642930c3cf07b84f67cdbf60da4
TLSH
T1C9615084AAC35843593BB2553F75C920FDA585CB64603FE2F09C47276FB90790233AB6
MD5 SHA1 SHA512 TLSH

Submit Download

IBC 2021 ASD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\IBC 2021 ASD.xml
Size 8KB
SHA256 ab3213280f640b014f02ec75bbf959c96026872c95fdfd4d82e0866c603976ef
MD5 9ffbb456bbfedf09427568deb13c466f
SHA1 19a54ac0bbbb78df88af920d5ccd536ad6426df7
SHA512 45ae706bb15bce880843d615bbdd6599f0fd2cb82cd03391cc63a9596a95046cd823540962a50897f6b4d3b8dc66baff06770a15966061ad93c5b2a7378f2d99
SSDEEP 192:tw2ZRLcu35mH3I+IZIYVFIFHmXrzICRILIC9QcVER7Zm1TRLhK7a43JIRkRAnz:tw2ZRLcu35mH3I+IZIcqFHcrzImILICD
TLSH
T18312F88561D29043983F82763B79C6A0FDE2D5EB64243FA0F19982375FB4C7816339B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IBC 2021 LRFD.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\IBC 2021 LRFD.xml
Size 9KB
SHA256 8f95bb41f6fbedfee7f226a4ed2231b9ec3dad65a3435284de50803c36b8859b
MD5 2ee7836fe668412cb6dcb904d064c7fe
SHA1 21d36b75a3bca5b593b7357aa2832d2c77e689a0
SHA512 32182fece21b4dd592d031a4b3539bdae413ea77feb2d155101237d43935cb6e314e184e81e0a391263307fdbcd352e9e11a028acee9c1edc76218fe8898fa00
SSDEEP 48:358O40g4Ez4WaIXWIIHgUqqgSqcGgUqSmqLoqmmqj38C2rj7c7EgIzglmgeuRgL9:2BAdAmtQRUANEjeUPr4zYTITbEgz
TLSH
T1A3126C84ABC25803953BB2663F69CB10FDA5C1DB55603FE0F19C82276F79079063397A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NBC 2015.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\NBC 2015.xml
Size 6KB
SHA256 52661715037f01b9e1e6904770257ecd10b15b6f96c46c8a4ff7500d6986efda
MD5 3f5b1ddcf8ba4ade1035a2c177fac273
SHA1 59056f12ea2a2a1d2d5df42d8b92e58bfa8f3823
SHA512 2a792fc15abf49803e2326ce0dfd6d6a005b01698ad14054250ee4960f6ae41197dcae6ffe677084956bd7c6be183f71cb8051f13983a613b39e24d12a4a49f0
SSDEEP 48:35dOuUAhTXTcP+znyBomsBomFBoP5wBY8zyM34BoHBoQBoM7BTVK8J2BhOsBM0B6:/tvKOp6az
TLSH
T110D1158CAAD284529437A3663F7AC668FDA1D1CB48507F64F1A943371F7A0B90233977
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WoodDeflections.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\32ECF617\WoodDeflections.xml
Size 912B
SHA256 683e45f5f375276d5c0613386d18131a4f1de2dfc4d80d893ff505f7dc6f5a27
MD5 a548b6781f751c58b5f514bd62293718
SHA1 141ef3313d06c963d0e11ce1844d10f8ecb17ffc
SHA512 648c619b900706ff62faf79b9e1922829c4329b90d2cd336e68cec861026d7cb2d20d17a093c424943bf5485dcc873514ac026fff9271c5f2896dacbb7a1c5c8
TLSH
T1AB11BA8461E14152A83BC2663E79C660FEB2D1DB84243F20F1A987335F754BC027397B
MD5 SHA1 SHA512 TLSH

Submit Download

Trucks.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\7721E996\Trucks.xml
Size 739B
SHA256 5bb0791031e9a31f6ba14ed6cf36f18b825f71b58af2abccd6f6ee85d10db0d1
MD5 a22b6fef59d43ab917810fa7701d296c
SHA1 be14f8c88c1abb4dd4ec53a30549a778ee04bc22
SHA512 bd9c17f4c5e83d5cc796245bc196d759cef4e9389a29d3e76612de86a84a0b9fd6793d5b3c0a11d9f6d3cd0e5d82ca7f92308e5d4d30d4b4f7543c97321b5106
TLSH
T15C01750012CB61CB5B7712C8795B131DEE6750334BFB9465349C94738F3CAB21197322
MD5 SHA1 SHA512 TLSH

Submit Download

AISC.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\AISC.png
Size 290B
SHA256 0b6ab6cde31523c1694bdf9f4f40c1442b14f7c24f20de503a21e87e7d03166c
MD5 75b7756d3b628d084b54e172841db4df
SHA1 99bf3a84c4cf7fa0f4cbab801a3eff0c41aac6cd
SHA512 bae22d9081c75ddd049973a740bdbe5bc80139df89808dbbada834fb3067cbcca5764871338a1101d0a5b00a71b71b67ef78046c5cab836f558ecf1b1d7b14c5
TLSH
T1F7D02BC731C0FDAC884E2137629700E59C52728679D6731EEE3B94AD8F6D1DD48AA305
MD5 SHA1 SHA512 TLSH

Submit Download

Aluminum.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\Aluminum.png
Size 356B
SHA256 863e755d229c72180af83e4d3f793a7d0ba75d168f6b98fc1519b3b63edeefe6
MD5 70c9046cff924d25875a51419e38aa2a
SHA1 feab73d054c0798c1fd846389f512323e18e9841
SHA512 aec2350d435f405a923a42406d3629a11e064d38190429f22feafaba463a80d8af4252d76083b122edc9c03eed2932a20a1e01278fbceaf82b42e0e8455581b8
TLSH
T1EBE0C0CF251CA6DD9DC58BBAD39303E04B67A41F5A497A025855EA399D369CC1682204
MD5 SHA1 SHA512 TLSH

Submit Download

Australian.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\Australian.png
Size 246B
SHA256 b1aee19cf5108b1cb5b5fa62de2c3fc7ee46f47df5061e16110460b559bb3286
MD5 5d24ccc6307423ddd54adedaca8e7bf9
SHA1 72ac174c8a9e14a51b73fd84393fdcca827d7d8f
SHA512 9b8c47720317fb70a6f025c1961bc01ee009e86c82831e5920486d3b767a289fd5e46c5ee3a86921d69e333d5a244e54b36dee4c1c2d1660eee8bebe2af3f62c
TLSH
T1A8D095CE738D6C7EC04F1B3792730500B0D34962B010660CFC2606184D3F158091F34D
MD5 SHA1 SHA512 TLSH

Submit Download

BentC.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\BentC.png
Size 305B
SHA256 ea478e26a81e58028b07c37b28785b08d3c49e4abc14fffefa68509fd97c20e4
MD5 7b431e50888e4ed327b76a77408986dc
SHA1 46ef0d1f7f0c3795a8cc048b42e51b80d710667d
SHA512 a3ec40690450a746f9209e74cf52bf5c1d5dd59d6b1f66a462e56eecb84046aedfef35e76885c222d1ceadafe88ca62b821ecb9e056b47eb75f26e928a1641ff
TLSH
T1DFE07DCA9AD2A5789B49A675238310684B1380163A5324541D3B52164FBC988619D742
MD5 SHA1 SHA512 TLSH

Submit Download

BentHat.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\BentHat.png
Size 239B
SHA256 2bc0f44cc7102848d9f2254ac2909a2142ebbfd396f26970a4e5cc12507457dd
MD5 257cf8f842db302d4f40941327e2865d
SHA1 931a391129a78e41dc5f3e2695756a1ac1e792ef
SHA512 e367f7dbf4c3382421c7ab755e917db20a78a661bcf956ec9d5b2e91781be67d9977765060db9a2b90d2ced5d6ab99026e5ec4c93e34b3999c0a44cf7578a460
TLSH
T1C5D097D20ECE8CE89A1A413313CF10A19933068B21722800B00FA0282C2179E0AB9301
MD5 SHA1 SHA512 TLSH

Submit Download

Blob.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\Blob.png
Size 428B
SHA256 d79abf46f0169a96fbb7919c44e3d023868cfb693891b752e0d4c37348fbc357
MD5 a0891b1cba252fff843a3f3591dd560c
SHA1 79d3ae573490b9a8a6d4593f42da4a857c4721d6
SHA512 fbb7ac44f1d658f640752e096e756d2fe701ec32b5b637acd15742f837534c26092cbefdad6dd4ed4c7426412bba8b17d80df03d158920f07946b95cd69b1529
TLSH
T122E023D75D0CE4B85C4D0522D2D78B11F9E34404EF732509A00B003D1E621040EC3641
MD5 SHA1 SHA512 TLSH

Submit Download

BlobCat.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\BlobCat.png
Size 385B
SHA256 acf734b88110b99c46449db9eee0550efdf6ef81876deba3c9a3193ea712c9b8
MD5 bfa22fcd8479e2cfbe03dc6236381181
SHA1 b95ce500c144754d0318427d813f26bc85f5c16e
SHA512 7c47864dca43f9c6055ced0c091e6ec80bc95e6f35e1db09460f01fa74bec63958dc816f1a77d87b0d1bfa2177ff8a80390e7c2405bbd957dae5d3796d295f26
TLSH
T1C1E0614A69883959DE58972761A3121152B301556820914D68C39C2F1E79BAC7CE1356
MD5 SHA1 SHA512 TLSH

Submit Download

CISC.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\CISC.png
Size 564B
SHA256 66b3cc2f5d7c821ae553d0a123d8572b5badcfa243c83a2387ed704b6e4d1e16
MD5 afd42a770cbb82595bcb8d7e33ed164b
SHA1 9642a820b2edf7982fdc5621e619b76eae2c8845
SHA512 21b101e34acd7890f9aa4e6023b7c563c09d2202d5f76c4c5fdc52342931b6abfe76e45074d9e486d8d7861af97fb9320976a8530f87295eb7d5434f7abcc8a3
TLSH
T1D5F0E1CBAA44E8FD4008103E635784A75DA262556712210D390A8ADE73C959C86EE751
MD5 SHA1 SHA512 TLSH

Submit Download

Cable.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\Cable.png
Size 250B
SHA256 bd3831c5a22522972e71c4377bb8f722b478589a065cf0c6352d80e7ba2de97c
MD5 6e356a56b7ffae3631ae804273d95daf
SHA1 2e7100a7f8bce62726126ed829208cd0e60ab345
SHA512 e938680d7c7e4dd82eb0e36f68c4e65bfec090eaa81524d63cc585b280483ee636afe276a6f981208e8cc3eb5d4db722b9d89fdbcf0ea250713eac21f8587c03
TLSH
T1E9D097E706E8AE1C86462E370BF38094782303FFB849B0AD3807D0298D3B66A49B1300
MD5 SHA1 SHA512 TLSH

Submit Download

Euro.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\Euro.png
Size 454B
SHA256 4cd64de644dbc4010c2c8f1da8cbb17190e244cbafa660ffce37c51923643dac
MD5 b193e65f13102ae44cadee1f5ff0b04e
SHA1 393f6799fd5cc4bf78482124f9e3bcb5df9fb40b
SHA512 cd7aae3e7632c5df07d4e04fcd1d581664348931e4b6752fadb37792bc04c996e2f4712dd4777e9d82cc5084085872851bb0f04c3158f2989b86f06377e8c66e
TLSH
T110F023C95EDFCC759C4E0EB703A9554C2F6F167341D2104E1D4405D74B30E285C98302
MD5 SHA1 SHA512 TLSH

Submit Download

NDS.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\NDS.png
Size 872B
SHA256 4940c74c010adc535c9f0cdf01a36940c6c8e0ba356f1d246f5456efd633f256
MD5 29894e1f9a7675fbae6a055b1d550d0a
SHA1 2e23c0176c0da2d623dd972f8c5e2581490b1866
SHA512 a1d82a229cb0aa618c3a667b475ec24a7bf363b18a449118d8b4523b50cfa380cbf1e1de2d7881dd9457376bb7f62d3cef4d030e29fdce244ad008923e90571d
TLSH
T1D71163E214E1F860DCAA023057738E555967203CA4E792D4F829262034058F857817D4
MD5 SHA1 SHA512 TLSH

Submit Download

NDS_Dimension.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\NDS_Dimension.png
Size 329B
SHA256 7c4d94b098b2ae9cd53bdc2124ff476fe336310fc244484823c6a33db283d62e
MD5 b7bb0080b97d15bf704dd44e981925ad
SHA1 b81d4ea734ba0378097c26705f6cdc174a851780
SHA512 e4bf330dfd12c4335e76743fa9d245f9fd55f8fe0fa9277a2619457e7bdeddbe44a7299eac29dac81b5482cb5e58233b4863b6b269a292f22cf2e8ca1c8e2d2f
TLSH
T136E0C0F39A52CC0ADD70D4E3D19E00400952224985187E46018568723F51A8439C0966
MD5 SHA1 SHA512 TLSH

Submit Download

NDS_Glulam.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\NDS_Glulam.png
Size 298B
SHA256 25c8777b05bef2b5cb9ee877b70500f7c3c12354b1a5c7478effac57e927d8e4
MD5 6cc9c589e26c4d0774c0e400870bc9bf
SHA1 59385a66b940fea58cda45eaba1163e8c8b3ebd3
SHA512 d3a9d75717c32f30ab7107072d140ba3bf22ce9fccf7d62f4463868afc821340f1d4aa780b7aa5bda2cf492c2a7ab6d8abc75e44c5757edfb14cef2d72dcb0f0
TLSH
T1B5E07D8FA3C77A2686C5D8735602608D450D025351926A481651CB3E8EA494CD545820
MD5 SHA1 SHA512 TLSH

Submit Download

NDS_Post.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\NDS_Post.png
Size 416B
SHA256 aa1a9ae94054d317ae67b0d5e6108949d6ff62d073e45f51a946b48a20d9f5aa
MD5 da1586ebb000a4c9b8b09af4c9987c86
SHA1 47949488ff48c389b2bb3774a829503239faca56
SHA512 b298963e4be28fa5cb811f96e4c68bdfffcf532c14d5f1d62f7378aba133c9c3554e377ed5a1fa03448bf3ab5a8bcf8165ae77d932a8ae692e1fe4982ce26b41
TLSH
T1C9E081F7920BA0FDE44650F3415B3645C51B2EB88A393186C41C883EEF3A60F9880802
MD5 SHA1 SHA512 TLSH

Submit Download

NDS_Timber.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\NDS_Timber.png
Size 143B
SHA256 d37f630d42d0cf40a917982995e6e3e2c64ebc0d3de00414e0b27db1fd016811
MD5 ce280795a460468111e82018205b982d
SHA1 9cbd21f8b780520d7155391fc32139a70cc5578a
SHA512 9a5bd6db19e2994ef8a404ecdd0e10b8b5d712c46266530af9f69a950032bc3a57bcc24b13487becd88e72cb3b7151bdf89d122035339e3c51e44a7308f32e40
TLSH
T15DC08CB2D862ACBED24401B31A1AB435906F64ACA2482B0172D99432420209488A8642
MD5 SHA1 SHA512 TLSH

Submit Download

Rebar.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\Rebar.png
Size 288B
SHA256 99826bfaab2a26ccaf4e82381d0c1c0cdd38759adf719552089fc721ae40770e
MD5 0c40c5f353307285ec0047685273bbdc
SHA1 e975de5cf505dd583766ed179fb1508d1d2223e7
SHA512 dd2d88dc8efbb548b375d2bf1bab06e28137642c52b0086a1504f819324387792774b1ada43a8738621a178d1978626fe2116b1d02c946a8832d2dbcf9b161a9
TLSH
T102D0EBEA0EC68CEA936A1067737BC9009F3E01437036B162908FC2BC0B31AC45481200
MD5 SHA1 SHA512 TLSH

Submit Download

SJI.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\SJI.png
Size 1KB
SHA256 e7bed55c9a30dad98838f313949aa73c56b41e71c8c63309ac6b6a8b73b36acb
MD5 f46cb5a898d637a031d64774e3185e41
SHA1 76ab38997f817332a09cbf897e77728da58548f3
SHA512 fb18cdf29e905da7cab69b28dc0fd405817581fc85f0ba14e0601fea368fc7880c7b6c08bf853cc531b2663e994c2be300c6b4cd51d945b3a2838e9dfce551ec
TLSH
T1B3210AE5782A172F2691CA6C3B8335A0A81BDC9DF001374C85B9A405485E9E4F8F7F97
MD5 SHA1 SHA512 TLSH

Submit Download

STI.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\STI.png
Size 768B
SHA256 77dc391006773fb66562b703f615f998af658484a319b8561940082870fa1aca
MD5 6c88ac0b20a02a4dcabca585e44acdf9
SHA1 f5ace01018471360a377524cc954be9d61d01b89
SHA512 72ed606d0a81ff1c4fbd91d462a480bce2c4917682bc09ab4ad1b9ef576c60ebaa88ca08b03317d6fa1278690c16f3f1b643e19cb6379dc9173b37d315bb1970
TLSH
T1D001C5BA975C840AAC8743EBA333A480228108F9910B28BF0F2B35894C5CC810A083C1
MD5 SHA1 SHA512 TLSH

Submit Download

SquareTubeShape.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\SquareTubeShape.png
Size 172B
SHA256 9df535ed670665c20b9129f4138a75b3650f326552ec33f3b76f16c5161ac21a
MD5 b00ffd342e14e24c50e8eef70fad0f94
SHA1 4ab83ed79ce85c33bba50137de17b5dbfe970cea
SHA512 ca2d18e770846f3d2faac737bba79d2ecec6a8a290b236cd1c99695435809eebecf0f3cb368702cbb7cc3f0f87c3d2bda6f8cecafc2f6a87753981ec7e9be9f3
TLSH
T1ACC080DB49445D6DD50E41B3939B10206D2741962652FD8C5D6A443915747849655308
MD5 SHA1 SHA512 TLSH

Submit Download

Track.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\944B1A3\Track.png
Size 278B
SHA256 a9e4d0c0a1834051388d8ef6ea4db9290cb8897f88aaf6412cb434d35b10180b
MD5 bdf5ef208854a46cb327188585b0c26b
SHA1 6a5fd53d17e5c90eeea6d1424996ee5fcacd830a
SHA512 8a5db0ecd7a5e84f6eb4c9843755c6551046a418ab7069d50a0d59ea0ce8473bddb9e50881452f80e769178f05f6f09b12aa2e7f3fae5abd0438ad6402221bbd
TLSH
T19DD02BDB0799DCF8C99A15770247C521D9222AE321462657586E419446384DC6DC6202
MD5 SHA1 SHA512 TLSH

Submit Download

ReportStyles.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\9D6D109D\ReportStyles.xml
Size 38KB
SHA256 7991e91e0105660b763bbf0b70e418534492256ba74cd81092a5878ea37f7a3e
MD5 11b7a28dd344428c7b278f0c8481127f
SHA1 80d79f4b789f7d4114349f890b0424b7b011b43f
SHA512 144bf3aa1b487b9dd151c47fd4c6c7ec99ca70426fde69f8962b49f8fa9a75a9bc8d4f3b551e3cfabe01dcfd7f97176405e24b22f0fb3e9d41c6e4f9e305a031
SSDEEP 96:sqSd3R1JQIhUASd3R1JQIhCGIuwOgSd3R1JQIh+40c88yhSd3R1JQIhoss0vsLz:S4G
TLSH
T14C035AC940E5751561F3D27AFA4C4899EFB223AF68007060B58DC6A39FFA60DD523B39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Spectrums.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\A5CC5716\Spectrums.xml
Size 566B
SHA256 70281b052d276427b7aae61991bee2ad7edbf039bf3515fa3bef970ff6851cae
MD5 487145ab1e5de77e771b8c57a8d52c04
SHA1 a3a203d22c40dc185b47bac78d8bdcdebc04262f
SHA512 9f88642a736d81a92dc5a9e4befb93ef038861cc2a536abb832b60f859cf82c89405d5fd51a7cd1295936ed9684653d01c16e246e66c67fde2a937b89f57c450
TLSH
T161F0B4C9B2CBD25064378B248E1ACE04DF84A2BB019A904271E3A2E39F741806F43A26
MD5 SHA1 SHA512 TLSH

Submit Download

ReportStyles.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\BE145A1C\ReportStyles.xml
Size 40KB
SHA256 4e51904c742b9b380c04f1b362971bb4c4013c6c9ce7c35fbccbd354190cac59
MD5 11714786286bee4621f24e202f9bd707
SHA1 ab975604f6ef0dfb8abb0a79e5f1ec2a8b1d923a
SHA512 1e92f0b3c15dae6ba86d8a9e2317d048516db218a71e8367a41184c05bf299484939d73fddf696d4135fac81bf64757e0ec3299009e9f33515cbce3cd6b79b40
SSDEEP 96:sBg+6J6ay+CaqxBtKqk2s9Dg+6J6ay+CaqxBtKqk2sDNCGvd/B5F4kGDhjg+6J6h:VmvCSd/aciVlZg3Pa4teP
TLSH
T1B40337D590E4B61650B2E35AFA085C6ADFB153FF2400A0A4F94CC2936FF650ED653B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IESUnitStyles.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\C4FB41A2\IESUnitStyles.xml
Size 13KB
SHA256 f467863363d47a93d37a3de4c2e926022fb910135729b3d5fef4403bad1bcfb6
MD5 b97c93c3174fffd690e6bf76b315fc54
SHA1 1340019e771ca9be280ddfbda07a900d08fdcea7
SHA512 917e822e372fab31135db119483d69434de5e4531c9fc8d81ab6d92ed9cd6749ec9148d523d03eab73bd7759b619b32400e83a6ea05f323eac5551df2edece5f
SSDEEP 384:O66uDWWuBCkuDWc6grZ6b7r6Zui0AuipB:oPWtkfsgAdB
TLSH
T1905257A9D4E5B9D10035021D7A111120FD2311B3736DA965743EB38B6FB89A8F893B3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Readme.txt

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\C4FB41A2\Readme.txt
Size 516B
SHA256 41765b20209c3df0f628f198f79cba75f4a65603ae618d061a0deac5f7db7a24
MD5 43cca93a4078d688506a24fe9ae1104d
SHA1 9bf6da83ea3c92de1b3edc7fbadd25275bef9d3a
SHA512 95564eccaa26afdf240aa9f168ebae5389de60c22f767c8a6387c61067575e3328fc9df0d446c8128dc28edab142b042198e380099a41ad744cf13bcf03b90ef
TLSH
T1F9F00E86EFB893AB6CC9D2D11A2D0150DFCBF09847C780023C42C0180181A54B70EB2E
MD5 SHA1 SHA512 TLSH

Submit Download

ReportLogo.png

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\C4FB41A2\ReportLogo.png
Size 316B
SHA256 24d17492102390e9e34a9d611f32f5a5f5ff39b0a75b460844f092cc70016540
MD5 9a24b1d060fbba1403330fe6af9f5dd6
SHA1 ced9b3364aab8a53ebc6816a1f57884a969db6fd
SHA512 e699a1a01901770cc313283070c88c76dad192e3858e49054d8fd8f2ebc0894daba57e120afbdf83ecb39fce015f90e7871bc532ed357cf527f08173f234d8f7
TLSH
T167E072928003D87AE1AD0032214B1E6FC92328E923073E3E8A16EB23804225D1F21C62
MD5 SHA1 SHA512 TLSH

Submit Download

UnitMap.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\C4FB41A2\UnitMap.xml
Size 28KB
SHA256 0b10e9ba83eda2163c420a59f101a60a83fb03efa39d82e22ad8a073d65b0f2f
MD5 9d3605659b5136260ce7ab328809f547
SHA1 05856bb41b05ea4a172b0fdff4be99dfb06b587d
SHA512 4a8078f3a6341838890da7b85499345a7da0bfa40943523475866b96f07127c4ae860ec45ec91847f144bf34ae632c85ce37eafa4a6a5c5291865a781cb75411
SSDEEP 192:3HY7j60JiU1zTjhn+qfN7g85cngehUCHv1yQktcngehUCEoD7PjpG9:A9fN88eG+GroD7PjpG9
TLSH
T147D2DA3D4AC8DB27F0B25BA069412A41FB7046538D968A72B0CC57530FBB6BDDC53B86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AISC.xml

Path C:\ProgramData\mia603C.tmp\offline\45DCA81C\D05147A3\AISC.xml
Size 1.3MB
SHA256 8fd7c9d41be7eb901822548a19f4cf1d37989bb7b839da4ecaa29a9b3b9280a1
MD5 27934c4d067284f5121342fb9eea1db9
SHA1 3f9867d540946d700e62a3a189892ff1e8c58230
SHA512 705c8250a37050b70f8c8c7f6bcfe7f07fb04bb956ed95b380c9894ce3bca0162449b7982ba1be5425bc726957ea6b91947b6ea5ab4c817e9b9b4d466fdfb1c0
SSDEEP 1536:naOpicp7EY8VdwTWGI0y3B79TtZaj1wBmYxUkohx32caw0fLwT5/bnToUVkxZaic:nJOT4zAgqcWly8oby0G0Pwa+w5
TLSH
T1DA55AE58F6E5473E14B508640121AC5FCE92E7AB8B4B6E9C33CFC1671FB22950D87BA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup-vx7.exe

Path C:\ProgramData\mia603C.tmp\setup-vx7.exe
Size 5.4MB
SHA256 5e748e48ea711af68da5b6664fe55f112f9aa72ff35956c2103ea890c9e5eac4
MD5 f0d4469c28ed613533650f0e5a973842
SHA1 9eb3fcb3fa45c3a46338ff53d7753f3695b747f0
SHA512 5ba7fa52175584c9563ddfffbe9da33ec6b7dda4468c19496a06d72cf93a9843e00eb9935fad987b302e8f21c95fa143ea8ce5d0c132158b9067b764bf854594
SSDEEP 98304:yRGM9e21FD9qp5S6dfuROecwYg+lV5v2a3H2R7K13icjqsNTUOJh:yz0kmHS68IeJAlVDH3FFh
TLSH
T158464B6267C480B7E0631B324D6E85947D767E302B60C88B7BA47E4E2F75B81A934377
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup-vx7.msi

Path C:\ProgramData\mia603C.tmp\setup-vx7.msi
Size 820KB
SHA256 58e9c49be30996e5616e79299e4471d1e32d4152f4fb0380117b6db823092850
MD5 3a50eaeb91284e7ef9f7fe3db4a4ed3d
SHA1 4b30fd2fbdfc1c2983137e722b08a8b6fb26f47a
SHA512 f3dd2dd01683d5050b9c848dbeabfcfedabcec3e02a005a5d4e064df42846e3815b7b811f5d52fe5a5b78460bbbd04ca89ce6b8183cd47a753373b703fe54afc
SSDEEP 12288:qL1uSxKxmE0lBKXsbzlDSJjQ8guBoN2KA2wKc7wMz7:qLESx20zW5BqPA2fc7wMz7
TLSH
T13805A2A3A28245B7D05106381EEBD320A87EED7526E33F162DA47E4F4EB50C1197F6C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup-vx7.res

Path C:\ProgramData\mia603C.tmp\setup-vx7.res
Size 3.1MB
SHA256 6a635a45f40d6e69b14549f2c9d99b87b52cb6858e96669224d0402050d1ad75
MD5 52b5a80b48d9b912f60c0daa41285977
SHA1 8457201f2e3ac19bfb8e2a1bad6b2a54b046819a
SHA512 068830dc787f2540d10151ef9ec23b691d2387e9fd87403e1a4c02ca9cdd6bdeec4a9d49fa2d82b2097d0333e4b0a8198731a31a932af8aa7b560155c28df840
SSDEEP 49152:nOQuSCBUS0htjyoaE28vM2+eLUmingOR0SpvPEv+7mC3o5:n48vXKEUo5
TLSH
T110E53A72EE81523AD056253A143F93447C7E6F2632607C4EAFE43D5F2E365816A3A237
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup.bmp

Path C:\ProgramData\mia603C.tmp\setup.bmp
Size 1.4MB
SHA256 25bcd68931ff363349abe3afc8ca575e0c3d1c06b85eafa5f901a534328b85c8
MD5 d9d9b5e7d294d99e353bb662e3b75c9b
SHA1 0d19fd7f0d884537bac3edf002478532f22a5641
SHA512 cfe031d16edfba047b55ee5ec007ac92777ca84bb8f994371c4d4c7106468a616b0fca6f0a154092e24eec0fc54b4c1f5b54d6576f048c73732cca51bfd06b2e
SSDEEP 3072:6dc/plJSFx9ASThS+W9oEafbBbuzNn7cExcGI8PfyAzVDYxsbEQJBh/CYlDzOXU1:6d1dOkwF7d6CnJzOYbhCYKUmKDx7v
TLSH
T180652AFB9BC36297CC885BF9470AB4B56E6848D66F0CF2CEC07CE1632A64C545181B76
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7z.dll

Path C:\Users\Admin\AppData\Local\IIIQF\7z.dll
Size 170KB
SHA256 b8521abda09ec17ddad36528c1bc50395dc8c5f7c11c026a5b3ff23110c54182
MD5 31cad6a3edd1c32981ad6b565cbeac94
SHA1 9338978c85a9423ee2a38cba027f79192d684f1b
SHA512 02e198b8ef192de55db35ae00a16a80b3309a9373a596c20d617b43dd7159a635bc303f371859e704375521a1242d02754807e2e9dfef63ffd06993b24c17d3d
SSDEEP 3072:xyljBP/VZjAISqyTFjoZAO1h7BTF1rJa//diUTTBXJxO8hlIhb0:xeBnVZ8w4toZAcLrJa/liSVHU
TLSH
T1CA04AF11B6A6C4F4D34F2132D96A3FB663B9D2848F6548C37BA0DE6E2E329C1D53520D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

componentstree.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\componentstree.dfm
Size 11KB
SHA256 e66906ae14698ba433a81e136e1aff974a188cdaf6fa4dbdae47b1eb185b1d5b
MD5 0354881e1ecd1efcdf57157cfbdb4f94
SHA1 f7dc317d0b7a92edaa2ade693f9552886be284d0
SHA512 d4916afde2aa828a94a1213e1dd51510b39c66a79dec2436ee5cc47db593ac87106eabdfcac7e6e209c8caacf88d4346d4ead48f3f71fc8d63368c578281e842
SSDEEP 192:c45jRUHblPiFV6spnkMl4nM4HiKRF2ZCEPPO/ObXKLvqR4sBWkUW2oy:cF0LTlL4CKOZCAGljsUkUW7y
TLSH
T1BC327FF5BF997019E9DBD04F53CF0AAFAC324003E176826F89311C596889A55B3AB711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

destination.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\destination.dfm
Size 11KB
SHA256 6b09aa35701ea8ba3700076e6d7443c7af1bc64b9c992277110c5647bc29ad64
MD5 4d95419efc2f8bb3605e8e79aff91fc9
SHA1 71799727e5715cadcc2856f9d3d65c5c4715414a
SHA512 a108dbf1150c86126c549cb09690788385ee3d87f498174a0a8a5f7d5f6ed6664dc79014d51b739d12b9a405da879d1813f9d9e93d214e77ddcde6993d28aff1
SSDEEP 192:Zw5jRUa4lbFV6spnkMl4nM4HiKRF2ZCEPPO/ObXKLvqR4sBWkUWS:ZG4hLTlL4CKOZCAGljsUkUWS
TLSH
T19A327DF9BF99701CE5CBD04B93CF1AAFAC314042E176426F893118596889765B397B42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

finish.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\finish.dfm
Size 16KB
SHA256 ea86dc94c1ef8fc6ed57228e1304c92521e715fe74e911cb3eec633624f0ced2
MD5 96219b651c649c6c2e6f6879347aeacf
SHA1 8c2b34caf357e2948a479f3c53ab6be2b904a361
SHA512 f7f13426917193fd7786d49be2db3a350f485dafe8bc277c0338d745e4af97ff5a1bc43a823f35a431e2720905c77d674cea6f7c532e9b1750cde744946e7bcf
SSDEEP 384:E5JXE05FXl737qLcLTlL4CKOZCAGljsUkUWJ:Er35t5LTxsOZCv4UwJ
TLSH
T19372AEFDEFA4301DE5DAF247838F2B9FAD31400AE237562D4931185E6048A55B2A7B41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

finish.dfm.miaf

Path C:\Users\Admin\AppData\Local\Temp\mia1\finish.dfm.miaf
Size 1KB
SHA256 6492feb41031c64c70fa8fabaabccde4846f9438b017d152c68c4b356c6a167a
MD5 2fe4e500443ecb1e27a767bee9a18c63
SHA1 887a5789cdac46bea2829870df02ad6b87a92270
SHA512 9475eb0e7509493a23dea491cfa0a9a1db0d339c216f1e38512df18a74d80c69b6c8ce9c10131047227ffa3e979d5d6f144748569cfd9209c47977d770d94dd4
TLSH
T124316F1F9D241ABD11B5F59709C31140F22077CCDBB49A06A47AA4CAF254F35A3CBCBA
MD5 SHA1 SHA512 TLSH

Submit Download

icon.ico

Path C:\Users\Admin\AppData\Local\Temp\mia1\icon.ico
Size 94KB
SHA256 06d45be14cd6d8ba2ff5ccc5e8cad6bdd6ff98db4064bce936d5c006d5df13fa
MD5 ef66df299737af4467e2b7fdc6cb1d63
SHA1 78efea6f6a2186f01647454555368e10c28162cd
SHA512 bbf5f47db3ec65575e62c757785d64c4811b6ea4a4c9c61fd22a43bfc1f85019d07f60685b87eaea0ce73eab2479a7242ded59bf56eae0d41516726c3479745d
SSDEEP 192:SZbxA117ACGV0TFOmRGCIlyrEd/Ngx2IV4yPQjp32M9l1/5M2FpWEs14EnJxuy80:hWZP3HA7
TLSH
T1C193F2F02C679679D6A884B207CD4A91BC5D1F0B4990050BB970BD7FB8B27639B421BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installaware.png

Path C:\Users\Admin\AppData\Local\Temp\mia1\installaware.png
Size 1KB
SHA256 9865981840daa40183650f2f4737e904b3b048629216622a410fcdcc515c9221
MD5 81ff3f2b95c9b0250eb7502aa6994c0c
SHA1 3c8b97d2cc1f35302d2ebc1b4563d096000dcf94
SHA512 1c1752d47357e722d2e4f47d3ba8c47b03fe09ed0291168d02e428092619dd31ba576d5606bce86c246fddf183fba0ea9eea14a7ba940139bda9f58dc82603f5
TLSH
T18E11D8E8246277755A3BB753067606E3D3CB94AA4E74BD8C3000A85053B3F4D3D02E02
MD5 SHA1 SHA512 TLSH

Submit Download

licensecheck.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\licensecheck.dfm
Size 15KB
SHA256 5dbdb0e718ceca0dc560a95b34660e8e0f5805f21a457b444ba08e10f21cab7c
MD5 d628c74997624ebf0a80646ffb44e28f
SHA1 4c5e9b438cb369b636585a0c2018b6ac45894e28
SHA512 14906d29bf088fe72d2403de21ae3df6b3fffd150749c0e409642f09927eb0bab40b2ee951817eef6b9982249c852e1833f32c7d078230bdfc8b76b188913599
SSDEEP 192:1Ae25jRUHCLSDS0tKg9E05TmL/NNxvplPYFV6spnkMl4nM4HiKRF2ZCEPPO/ObX2:1BpJXE056bp+LTlL4CKOZCAGljsUkUWS
TLSH
T147628DFAEF94301CF5CAB08253CF5A9FED31501AE27A427E486104996458F25A7E7B41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

licensecheck.dfm.miaf

Path C:\Users\Admin\AppData\Local\Temp\mia1\licensecheck.dfm.miaf
Size 134B
SHA256 fa082d1a986c183d474db7867058ca1319ee07adb7aa131ec6a65ed7e2446118
MD5 fde0c4e52d8aae629e67739e73dc1101
SHA1 0634dae366f408fb43d67c4d0f41be5082cb446c
SHA512 3c9b279da6bf20b20541a8da67a22bbb7ec155634c5307f2cc14133f137a9919b858c72b615fc688c93ca321c8763715e36e831769d93266dfded4eb35353d8e
TLSH
T1D1C02B17EC002E5F07BAF109C8000D0329029446220DB3000219018D88B8F0A33EC833
MD5 SHA1 SHA512 TLSH

Submit Download

mFileBagEXE.dll

Path C:\Users\Admin\AppData\Local\Temp\mia1\mFileBagEXE.dll
Size 1.4MB
SHA256 6c708c5d1e70c206ce035ca5efe8448f11a6f10b2c3bb3d130bd7d9ef4f26245
MD5 165d9d340db8596327f446cf21e9fbb9
SHA1 2617a50bcf5b498ea6f76aa5b0a79b632501a2e5
SHA512 cfacef9ff6703a89e0a97e29e42915b5aeb7454459e6f3bf9d0b9f0331ba437008c65f329e968b8d736d6f163dedd9fd4ac1786ad4a0106f2f243b64fc61c60f
SSDEEP 24576:1ncVNtXGsJ512F2QCw1FZOiZBBiSdxUshGR5T3x9DCJ9nN4QcmRVU6iS:1XY9S1dZBUSYshO3vCRIc/9
TLSH
T1BA655C2369C0D33AD05A3A3B443BD7486CBE7A283265BC4A6FE41D5D4E27680793F617
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mMSIExec.dll

Path C:\Users\Admin\AppData\Local\Temp\mia1\mMSIExec.dll
Size 1.3MB
SHA256 e87a83c91bebcd736da574cf791b902ae6dd1cf79f91fe97ceec73743f21fdcf
MD5 dd88380bf86545dc6ff4fce51695e291
SHA1 d8dcbeb3aa52d135a614187567080570241a604c
SHA512 6cc47239bb1c92270402843b2071d2fb400d0ef76c9ba927b79fc200287b59242e95a702e86256c6370f6f8eb0539cc135b3ef07c5d4005f05023db707cdfab9
SSDEEP 24576:EPm3mUFHlLsBXTZGZQ2crKYAKRBaSTGkvwIAsJlpC1IMXVP:EPm2goth0KR0STGkvZlg1IMXd
TLSH
T128554B33E342623ED066363E543BA7185C3F6A223265BC4EAFE44C5D4E666C1393E257
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

maintenance.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\maintenance.dfm
Size 13KB
SHA256 38c7bdc7bf25b83b781da8a9c76f0d37cfe6552cdaccc2d930397c982ff7fdc0
MD5 285f90867436e3264b622c8f553c9969
SHA1 3aac56182756f5f7f4bfaabf9c7d98cab1dd5cbd
SHA512 946c427991d14647e632aa70046e6bde81f4496625d1383ceee520765dd21dca0a8e42eb4bbe01c5699e62bc8fb803c315a3060faaa086c9ffb6f634559ac93e
SSDEEP 384:1bVxB/XJuOuqgLTlL4CKOZCAGljsUkUWY:1bVx1XJ7upLTxsOZCv4UwY
TLSH
T170528EFAEF69701DE1C6D0CF538F1BDF9C325006D636825E453124596588B28B2F7B52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prereq.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\prereq.dfm
Size 15KB
SHA256 11585cd1bcfcf0dd05029a4baf371cc066a601e86c77ed917a2592d2ae412b16
MD5 bd05a55d045248468fb8d49c46aa5646
SHA1 e2385f8a753849ca2bd18d7abe411563c2d926d9
SHA512 0d6c1667ccbb87c5f9200c84f1027caab4e5470a04848e82c91d4de34f06ac3c9e71b3701f325df2793760811b20915300579e5d9acbedc00ac499bb68ecd890
SSDEEP 384:43JXE05eSWvVkyLTlL4CKOZCAGljsUkUW3:4l35eSODLTxsOZCv4Uw3
TLSH
T1B272BEFAAF94701DF1CAA08613CF5B9FAD31101AD677473DC86164992048B09F7EBB52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

progress.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\progress.dfm
Size 17KB
SHA256 738896095674cb6d55c55949745a84e9930d59afdd1e80cec3863a12ad555b31
MD5 2823202c1bf8f7cdaa54954f2752cea2
SHA1 74a8bf1596ce14ffe9644fc22aecddaf9def39b3
SHA512 4a7399684329fa996ba4520d6a94d91f26ece7faae7a64186310c86356a4812a4c21d059e9fba3efa90b1e6dc35721e650c9fb33ecdc74db74aa3b53f39636f6
SSDEEP 384:KrY/O5kLJXE05EUkVhctNekW+xpLTlL4CKOZCAGljsUkUWm:KrYmk35zm6RLTxsOZCv4Uwm
TLSH
T1A782CFF95FA87029F5CBF086A3CF0A9BEC32501B9632813D893148CD6488A51F3A7752
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

progressprereq.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\progressprereq.dfm
Size 19KB
SHA256 1cda7f01a1925e69aa54057f8be2d6e114604a038a26e9292755d64b743242fa
MD5 35b5ec8e5725d4b9eee2c4b2fd5c423e
SHA1 56b5a37b6faf57fa2366afd2734400a8b66068dc
SHA512 676c54709c081dc5b9288c99530d0b26310c14a06674e39424a27cf450a26c721400b1e887f08d448b48900c57917ad812d26f9fabd8e477996bbfe057021073
SSDEEP 384:2xXJrNkEJXE05NiVG+U+BI5mFpLTlL4CKOZCAGljsUkUWm:2xZrl35NqU++kLTxsOZCv4Uwm
TLSH
T1CC92C0FEAB9C702FE1DBE08513CF17AFAD301009E163466EC47154AD6488A25B3B7752
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

readme.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\readme.dfm
Size 15KB
SHA256 c7b4ecc8fc7574b8cabfe688eeecadf3dba5ce26877e73e78c9333be07ebff32
MD5 c3b5a987a157ee65c45362455cf38b4e
SHA1 acdc93b6d8e8e8aba958d2bbdc579216dd8c631b
SHA512 25f591204085e1f4802bea5918f1dc5f5e593fb5542ee7e96f525d1fcddeaa64e627a238fc65b940bd7c6f9621d3d1415a3d8d1e95150a7f55f0703e5bf588ec
SSDEEP 384:tVJXE05tfmogeM1LTlL4CKOZCAGljsUkUWz:tH35tfGeKLTxsOZCv4Uwz
TLSH
T19E729EF6EF99701DE4DBF08313CF468FED31101AE2B6432E8960549E6495B2473A7B11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

registration.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\registration.dfm
Size 15KB
SHA256 9ef6bb3720702f047701c09e184c99f70c9a2613ef01c5bbf825a40fe18ad932
MD5 72bbb88b1ab45366edd1bf68fd678c01
SHA1 0f12868f73cfd8a9334f78f300fc9185bba067fc
SHA512 306a8890cd244c57d241c3de4672483eca30d3390c5b1134953d94c51c7b2463189e073cebc73247bac34d54807072ef2a5d3ee204dbf247c1c52dd684e19c41
SSDEEP 384:wOJXE05ADa9+EIcLTlL4CKOZCAGljsUkUWl:wO35ADsLTxsOZCv4Uwl
TLSH
T1B772AEFAAFA4701DE4CBA10663CF469FAC31105AD176866E897014EC2449B58F3FB711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

registration.dfm.miaf

Path C:\Users\Admin\AppData\Local\Temp\mia1\registration.dfm.miaf
Size 218B
SHA256 4e5ee72b6f00571f0ceb8f8c51519e68b4b597e7dc4e4bd7bff0cc38807ebef8
MD5 188d78e86f52bf3f82bc567339268e81
SHA1 949ed916f5a813020d40c068ee24e010701b73f6
SHA512 7876002feb629d9e8dade3b04321ee8796b979d36b7199cc99b8a8d402c599dcfc970fdd2b7287fc921814f1eadf374e915d66c170075de3b372c40a7d68fc6a
TLSH
T104D09227A866224DC339F42AD561081599C18C80930AA62073ACA98C54B471836CCD33
MD5 SHA1 SHA512 TLSH

Submit Download

registrationwithserial.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\registrationwithserial.dfm
Size 16KB
SHA256 4feaba554177135df891cd420920ee42551399f4bd99ab6e4aef11e41d5ce47d
MD5 148d19acb1248b9b7075fa6830e702d4
SHA1 093bac26c070dea9e1cf8497283e484fe2801381
SHA512 305ab7a692433ddd02e2898fb5ae4cb441743b39861b55ee519429dbfe58b030d7e3c1b0d0032b0904ea1fdb610e2f84533eedfc8a06de9f1ba59ef9808407b4
SSDEEP 384:LVzvJXE05p/CkGGahMunLTlL4CKOZCAGljsUkUWA:LVB35vahMunLTxsOZCv4UwA
TLSH
T191729FFAEF64701EF6CBA08753CF1BDBAC21810AD52742B98961149D20C8B68B7D7743
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

registrationwithserial.dfm.miaf

Path C:\Users\Admin\AppData\Local\Temp\mia1\registrationwithserial.dfm.miaf
Size 722B
SHA256 daa5742d80e19668753d435da0937a4409d22af73fbaf9df22ec4cbc34ff5d45
MD5 5d78380ebdad86764f26b73474df4900
SHA1 d2574cd9fb599e81c6099738d9d7974ce4039afd
SHA512 3533a9d8f4b1d8bd703856b150b8cba99ca8cf55ef2182eb7b7326bf742c2b4b5cea896b818fb690e0678689a8b452f22f5f548124d0b8302d776e8b2335b26d
TLSH
T1D701922BA8662A5DC378F86ED8901D17D1514CC293076691717E20DD64D471837CC93B
MD5 SHA1 SHA512 TLSH

Submit Download

setup-vx7.msi

Path C:\Users\Admin\AppData\Local\Temp\mia1\setup-vx7.msi
Size 824KB
SHA256 b4cc3b6746d98239894e951addbf5ce3b5df5229afee24aaebe501bf690ca593
MD5 2decab6c05a2f5a9b823358335200d8b
SHA1 3b23e600dcbcaa9c98c166292db1df8d76bd2c14
SHA512 29087e69e433e10922bc2dffa394470cb78c75636fe6a97c9a6f7641e3d666406c6216070d3b4c73d36bf1bd52c4d8f02d2dfe16673267a174a46d42b558ed8b
SSDEEP 12288:aLvhsxyxm7jQBKXsbzlDSJjQ8guBoN2KA2wKc7wMz7:aL5sxxjKW5BqPA2fc7wMz7
TLSH
T19805A2A3A28245B7D05106381EEBD320A87EED7126E33F162DA47E4F4EB50C1197F6D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setuptype.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\setuptype.dfm
Size 23KB
SHA256 9065a86fdf3e553baad7b79623e889858d1780d4226beef0bbd127bcc04ec274
MD5 ed7ffd3d2e03d466c24505d117c3ed6c
SHA1 9614345913104b664507f7f9de83bfa7750b79e2
SHA512 b5534d3f7a9febcf06446f9897bfd2dd901a7d4d71b1a678b5c0cb78a14a6ac0ae394dfaac851c8ca6268ca6c49d4e1fcd2101617fb23d61f8cfe51731c8bb02
SSDEEP 384:Y9JXE05Dj6CvgJXE05US2CJJXE05Y8C4OLTlL4CKOZCAGljsUkUWU:Yf35o35UV035pELTxsOZCv4UwU
TLSH
T179B2BEFFEFA0300DF58AB44247CF1687A9312029E17B163D84A165EC24D4F26B7AB761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setuptype.dfm.miaf

Path C:\Users\Admin\AppData\Local\Temp\mia1\setuptype.dfm.miaf
Size 370B
SHA256 543f97888ad39b83984161cbbd1d43c4a846d89d2508132da97d767df143fd67
MD5 38c404f79fa570b4c3b3cc20ee619ea8
SHA1 607568ffeefb96e166181261b548a150d8cd6a4d
SHA512 9aabe8b60d693b11be74b13bdf9157136e8ae58a75555e2a6dadbdb6bfa55abe17cc9ce9f793f8f6a86f1f4f9b239721a170dd71c7e675dfbc78aaff10b302ad
TLSH
T111E0122FD915547D1334F06248969989FEA025D4C352178280B540EAF980F5C934D9F6
MD5 SHA1 SHA512 TLSH

Submit Download

startinstallation.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\startinstallation.dfm
Size 15KB
SHA256 9935e6045765fea14a5e0de21d8b863ac7baf16a28e93b9641801722438c0a31
MD5 3ca50baf4af3620a0919e316013c4faf
SHA1 6823d6dfd03fb9d15787b8e77fd650fad516b042
SHA512 d07f738a14909f87f80db8818898008a60e7c73d40ca3e63a4686d919c22cf38fbdab438e81de321825478069360ecd511e81c283bf2a2f40d8f30a517dec831
SSDEEP 384:YOJXE05cwApFwyLTlL4CKOZCAGljsUkUWr:YO35mFPLTxsOZCv4Uwr
TLSH
T1DB62AEFAEB94701CF5DAA08343CF5A5FAD31010AD676436D856164EE2484E29F3E7B01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

startmenu.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\startmenu.dfm
Size 14KB
SHA256 448cbb839d39bbca821e5cf8cbde18639d469506a39880273d755e47eab55704
MD5 036319c6e17fb405ffd9972529dbd2ec
SHA1 76871edc40c6bbc768442a91fd94bb5fe076044d
SHA512 9ddb9806ca82a0a3dbececd7eaec674c836303d6deb0e9473c9a8085c7101a85e81e2087571f75df532a10e9a8276156d929f7b9ba93f18da642c12715d4ebf7
SSDEEP 192:xS5jRU4PFtSDS0tKg9E05TS2kZ42H5cRvFV6spnkMl4nM4HiKRF2ZCEPPO/ObXKd:x6OJXE05ouTLTlL4CKOZCAGljsUkUWU
TLSH
T12B62AEF9AF69B01CE1C7E08203CF2B9FAC311016D57642AD897154DE5484F69B3EBB12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

welcome.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\welcome.dfm
Size 12KB
SHA256 de42b4f72280453d2efe3a6cf54c8850e178cefaeabe05be82921974a0481f8a
MD5 5fc27f22c0a475cc31a079c12cc0b696
SHA1 ed297abd346e8d3d9e652dacb24574c6d25784bd
SHA512 5e48870ba6372cb4380ebad3a2f511bd462d07018c68f95088ac17e5ef2aff4c1811ce6f71de8cb96ed0ba6684b17f5ec09f062dc9f559ee3a25548409d4b66f
SSDEEP 384:7vVxB/XJuOuMyLTlL4CKOZCAGljsUkUW3:7vVx1XJ7uLLTxsOZCv4Uw3
TLSH
T1B4428EF6EF69701DE187E0CB53CF6A9BAC3240079636425E457115586188B28A7E7B02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wizard.dfm

Path C:\Users\Admin\AppData\Local\Temp\mia1\wizard.dfm
Size 12KB
SHA256 86a4bf8cb055279d05fdea72bfe48ec330eb430b8f1bc54a2c63ef28dbf540c6
MD5 2c3c9843d9ce9dce13988e221a95ce57
SHA1 6006718511d7b34d17e403f829a985142040fcaf
SHA512 8428ed46957b7c0f14ce5f2bf7eb6bd716d65773fa63589f909e22fe91be43978a49818ac4d8683d35017af8a9c4a1ad7af0315baae92ddd7d3d4b7803edb59d
SSDEEP 384:CXVxB/XJuOuVyLTlL4CKOZCAGljsUkUWr:CXVx1XJ7uYLTxsOZCv4Uwr
TLSH
T1AE429EF6EF69701DE1C7D0CB53CF6B9B9C324006D53A425F492125696548B28E7F7B02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI92B9.tmp

Path C:\Windows\Installer\MSI92B9.tmp
Size 141KB
SHA256 fb73f1e2a71635f6f1f10fb7c7b738e4ce5125c3841b1a656a5f2cd406bddfb2
MD5 6484bee1546feb56595eaacf5d019c55
SHA1 cbfe2ebe0485e447f1887f52d5a3cfa480a8fbbe
SHA512 538a1b8981baf6f35fe58cc862faa5af27d68e93572c5e4ef6719e1cf4a9b1a4ac9e61ffa22ebc1e9aec0fdeb88af54fe8834b8c384b596a889c07e63c031ece
SSDEEP 1536:bzfplpotJ+Tc5x5XJAIu7+zc2X5X1DznQyrvDklgXUEfbSorHqSCdZQVTbe6Kion:bjbp4gcXsnuRfklg8orHqnzT9ioO
TLSH
T108E3C663E28209F7E051093829B79330F9EF66B526E337165D954E8F4DF90C21DBDA22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1752-1007-0x0000000000400000-0x00000000009AC000-memory.dmp

Download

memory/1752-495-0x0000000000400000-0x00000000009AC000-memory.dmp

Download

memory/1752-493-0x000000000045D000-0x000000000045E000-memory.dmp

Download

memory/1752-641-0x0000000000400000-0x00000000009AC000-memory.dmp

Download

memory/1752-642-0x0000000000400000-0x00000000009AC000-memory.dmp

Download

memory/3140-1008-0x0000022051AD0000-0x0000022053AF2000-memory.dmp

Download

memory/3140-1009-0x000002206EF30000-0x000002206EFEA000-memory.dmp

Download

memory/3140-1010-0x000002206E200000-0x000002206E208000-memory.dmp

Download

memory/3140-1011-0x0000022072150000-0x0000022072188000-memory.dmp

Download

memory/3140-1012-0x0000022072110000-0x000002207211E000-memory.dmp

Download

memory/3140-1013-0x00000220721F0000-0x0000022072250000-memory.dmp

Download

memory/3140-1014-0x00000220721C0000-0x00000220721C8000-memory.dmp

Download