Overview

overview

7

Static

static

3

BorisFX Mo....1.exe

windows10-2004-x64

7

BorisFX Mo....1.exe

windows11-21h2-x64

Analysis

  • user interaction
    yes
  • max time kernel
    214s
  • max time network
    250s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/06/2026, 04:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    BorisFX Mocha Pro 2025.5 Adobe v12.5.1.exe
  • Size 987.4MB
  • Sample260604-e266jshz2x
  • SHA256 ca20b267a2af456a55abef4ad3542207fc81e4dd9aae0347072a751b0a5b72a4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
bootkitdefense_evasiondiscoveryinstallerpersistencespywaretrojan

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops desktop.ini file(s) 2 IoCs
  • Writes to the Master Boot Record (MBR) 1 TTPs 2 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

    installer
  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 4 IoCs
  • Modifies system certificate store 2 TTPs 8 IoCs
    defense_evasionspywaretrojan
  • Runs net.exe
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BorisFX Mocha Pro 2025.5 Adobe v12.5.1.exe
    "C:\Users\Admin\AppData\Local\Temp\BorisFX Mocha Pro 2025.5 Adobe v12.5.1.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1120
    • C:\Users\Admin\AppData\Local\Temp\is-T1ALK.tmp\BorisFX Mocha Pro 2025.5 Adobe v12.5.1.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-T1ALK.tmp\BorisFX Mocha Pro 2025.5 Adobe v12.5.1.tmp" /SL5="$90142,1034167496,1015808,C:\Users\Admin\AppData\Local\Temp\BorisFX Mocha Pro 2025.5 Adobe v12.5.1.exe"
      2⤵
      • Executes dropped EXE
      • Drops desktop.ini file(s)
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4596
      • C:\Windows\system32\net.exe
        "C:\Windows\system32\net.exe" stop RLM-BorisFX
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:2704
        • C:\Windows\system32\net1.exe
          C:\Windows\system32\net1 stop RLM-BorisFX
          4⤵
            PID:4720
        • C:\Users\Admin\AppData\Local\Temp\is-48UKN.tmp\vc_redist.x64.exe
          "C:\Users\Admin\AppData\Local\Temp\is-48UKN.tmp\vc_redist.x64.exe" /q /norestart
          3⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:1240
          • C:\Windows\Temp\{46D47871-1D4C-4747-B13B-198211FDC1D7}\.cr\vc_redist.x64.exe
            "C:\Windows\Temp\{46D47871-1D4C-4747-B13B-198211FDC1D7}\.cr\vc_redist.x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\is-48UKN.tmp\vc_redist.x64.exe" -burn.filehandle.attached=692 -burn.filehandle.self=696 /q /norestart
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:5000
        • C:\Program Files\Adobe\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\mochapro.exe
          "C:\Program Files\Adobe\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\mochapro.exe"
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Writes to the Master Boot Record (MBR)
          • Drops file in Program Files directory
          • Checks processor information in registry
          • Enumerates system info in registry
          • Modifies system certificate store
          • Suspicious behavior: AddClipboardFormatListener
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of WriteProcessMemory
          PID:4368
          • C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\bfx-license-tool\bfx-license-tool.exe
            "C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\bfx-license-tool\bfx-license-tool.exe" --check-subscriptions --feature=all --productline Mocha
            4⤵
            • Executes dropped EXE
            • Writes to the Master Boot Record (MBR)
            • Checks processor information in registry
            • Enumerates system info in registry
            • Suspicious use of AdjustPrivilegeToken
            PID:740

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          GPU.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\GPU.dll
          • Size 1.4MB
          • SHA256 b6b6265ff5aa1731d39dcfe1ab632cc404a177ad8551738e1f1e73963721d23f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          GUI.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\GUI.dll
          • Size 15.7MB
          • SHA256 c28742a99785b3a17012de4416606fa3c93a78ab61b2376a9afb3600d36bb456
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Imath-3_1.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\Imath-3_1.dll
          • Size 334KB
          • SHA256 00f30882352eeb1e9c2280bd0209e27ba91a7736636db6b5f996fb14b4a34345
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OpenColorIO.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\OpenColorIO.dll
          • Size 6.4MB
          • SHA256 6f2aa0aa879cea1b7c9782ff9822b046e17ebe4709020ab9efe9e0cbbca76925
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Qt5Gui.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\Qt5Gui.dll
          • Size 6.3MB
          • SHA256 02d2807f7f5ad08b981e73528ffbcbbdb66e6080f6ede71c405923bea7292019
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Qt5Widgets.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\Qt5Widgets.dll
          • Size 5.3MB
          • SHA256 925ff966aa3d3fca9031d1523f91afd499a176080d98429cec3f17526f7a69c7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Qt5Xml.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\Qt5Xml.dll
          • Size 210KB
          • SHA256 a24e1653f33e301c6e01531c84af11593ef106398cf17617ac24d866ded8a3cd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          bfx_core.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\bfx_core.dll
          • Size 467KB
          • SHA256 44fd979bfd71f1da787b5298ce4447c59174f55f103830fd1ee3d12f425dc94b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          bsc.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\bsc.dll
          • Size 6.5MB
          • SHA256 8dddc85519726055271df01f1de19e74f80f01ea3c0883275615b03aea5e3cfe
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          gandalf.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\gandalf.dll
          • Size 1.9MB
          • SHA256 3a5aaead96c51ffaf418e9f62ab19b4ef739e1256259a68910e5ed3ba70fc63d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          is.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\is.dll
          • Size 1.9MB
          • SHA256 07c08b17cd7c6958bcb619c36d9a166257e994ebbcdf327a81833b95d9c787ae
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          layercam.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\layercam.dll
          • Size 9.5MB
          • SHA256 a33add778d5d89c8b7c4e8025ed932c8ca4b55cb9e508f94a15596e8f8912fd2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          mochapro.exe
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\mochapro.exe
          • Size 420KB
          • SHA256 361542fe4d6d2a3130ed285a4345b63fc8cc4f9e137c5c0b583168172e1c0895
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          mvt.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\mvt.dll
          • Size 571KB
          • SHA256 6788d152f74fcc265d761d8bb8e08a63527914c4d376c560b70eb8a46a5fd799
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          oberon.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\oberon.dll
          • Size 2.1MB
          • SHA256 cc372abff8fb9e24d113fb5ce74c8aaec645bd39f5729588cc8279020152241c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          opencv_calib3d455.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\opencv_calib3d455.dll
          • Size 3.1MB
          • SHA256 fa957470ba0aa691aa02cf550ec797b0490b7a9dfc00e1a3d582e82e4d73f828
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          opencv_core455.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\opencv_core455.dll
          • Size 16.7MB
          • SHA256 efa37dd31574ebc570b2545794390f3d5f4cb15b29d2bededc490e8bc83179df
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          opencv_imgproc455.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\opencv_imgproc455.dll
          • Size 28.1MB
          • SHA256 35083314f4cd1cb23b0951c34e652f74ab0417c86c727675be1d5f30e054e77d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          png.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\png.dll
          • Size 277KB
          • SHA256 18951bc92c311eb87bd990f818cf4e3723b7b2b61e45748d13849bc81bdaa1fe
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          prm.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\prm.dll
          • Size 1.5MB
          • SHA256 e0ca4d44678c782784b07c8c68bf62eb5b4454f1d4c646093335b0311206d10e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          is-0S2DD.tmp
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\usd\usdShaders\resources\shaders\is-0S2DD.tmp
          • Size 1KB
          • SHA256 f200ce8c46927df71a168f06a8101b84fd4a698c244c8619c56f3d7636cd04cd
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          usd_ms.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\usd_ms.dll
          • Size 21.3MB
          • SHA256 7d68d62b8a12898b5197e88cbfabd11835a561549f9852f461393d38957e1c3d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          zlib.dll
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\zlib.dll
          • Size 143KB
          • SHA256 af410f15160ffac1b598dd987d26c127ddd57cf5990e785ec096a45e5d014dae
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Mocha Pro Plugin Release Notes.pdf
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\help\Mocha Pro Plugin Release Notes.pdf
          • Size 2.0MB
          • SHA256 9e9ebc551351e394a3b62d4767175046fef0c52c148c68a661321af83355e9c9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Mocha Pro Plugin UserGuide.pdf
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\help\Mocha Pro Plugin UserGuide.pdf
          • Size 35.3MB
          • SHA256 c627324fc0b9cf4713e100003b23005cac315f835e781e2f3de7868332cf3018
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          is-LLSA6.tmp
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\python\lib\site-packages\shiboken2_generator\is-LLSA6.tmp
          • Size 2KB
          • SHA256 65a22e12f8fbbf806f27b0ace8a6b5267934408821084399eb0f1b258e4f7edc
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          is-5BNPB.tmp
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\python\lib\test\cjkencodings\is-5BNPB.tmp
          • Size 1KB
          • SHA256 a6bbfb8ecb911d13581f7713391f8c0ceea1edd41537fdb300bbb4d62dd72e9b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          is-DLHOV.tmp
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\python\lib\test\test_importlib\builtin\is-DLHOV.tmp
          • Size 142B
          • SHA256 8962a375442bddd8d49865f3bf601c2c7a741fe947d8ec667358bb640cd0d19b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          is-G9H5T.tmp
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\python\lib\test\test_importlib\is-G9H5T.tmp
          • Size 58B
          • SHA256 cb9a3ce8f18e7d0a0cadb73cc9264772462de953499534736998d3c54f8c7c3c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          is-3O8IT.tmp
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\python\lib\test\test_importlib\namespacedata01\is-3O8IT.tmp
          • Size 4B
          • SHA256 054edec1d0211f624fed0cbca9d4f9400b0e491c43742af2c5b0abebf0c990d8
          • MD5 SHA1 SHA512
          Submit Download

          is-3IKKG.tmp
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\qml\QtQuick\Controls.2\designer\is-3IKKG.tmp
          • Size 2KB
          • SHA256 a3fff66cd7217029792e7fce403cc658b0ea03b2d3a2860f57479c8ea6bc1372
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          is-I7LEV.tmp
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\qml\QtQuick\Controls.2\designer\is-I7LEV.tmp
          • Size 2KB
          • SHA256 91d7772e4a193e91a093d59451508cdb89448eaffb4febda26789777afbacf3d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          is-OHIMB.tmp
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\ocio\default\luts\is-OHIMB.tmp
          • Size 92KB
          • SHA256 cca228596b733b0c6815b33da62c6714d75c38e1514a3a548e1866c9a9373377
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          desktop.ini
          • Path C:\Program Files\ADOBE\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025\desktop.ini
          • Size 50B
          • SHA256 78f6dc976b708f4721d39fe40c47c9d171bdda11c28285b8b5fb4e9a5d4a88b1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Qt5Core.dll
          • Path C:\Program Files\Adobe\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\Qt5Core.dll
          • Size 5.8MB
          • SHA256 959104f084af390631cfb04a6b01bd363438fc01dd88283e55a6cda9d9788aea
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Qt5Network.dll
          • Path C:\Program Files\Adobe\Common\Plug-ins\7.0\MediaCore\BorisFX\MochaPro2025.5\Resources\mochaui\bin\Qt5Network.dll
          • Size 1.3MB
          • SHA256 41d70d0beb01c6f1ffaa13280f57bac4d5499660b6000f64ab9c1caf4fbd5c0b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          .9jidfk8k
          • Path C:\ProgramData\SafeNet Sentinel\Sentinel LDK\018763e1-8352-0bf8-8877-e9fd7b75a741\.434e4631\.9jidfk8k
          • Size 120B
          • SHA256 09bafb9230a150a66cd2eda0fc5c746f1a500bb3dd8d85f5b03be07d44ee2f27
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          VC_redist.x64.exe
          • Path C:\Users\Admin\AppData\Local\Temp\is-48UKN.tmp\VC_redist.x64.exe
          • Size 24.5MB
          • SHA256 8f9fb1b3cfe6e5092cf1225ecd6659dab7ce50b8bf935cb79bfede1f3c895240
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BorisFX Mocha Pro 2025.5 Adobe v12.5.1.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\is-T1ALK.tmp\BorisFX Mocha Pro 2025.5 Adobe v12.5.1.tmp
          • Size 3.7MB
          • SHA256 0e88820b8a5b83889ec6d0b8a5e5bc324587123445b2b02604203b69b74bc910
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vc_redist.x64.exe
          • Path C:\Windows\Temp\{46D47871-1D4C-4747-B13B-198211FDC1D7}\.cr\vc_redist.x64.exe
          • Size 670KB
          • SHA256 bd25d6a5c9ef835802ba25100ce66c9402dbca74d309db5fbaefa1532af31d5a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          logo.png
          • Path C:\Windows\Temp\{EE468B9D-2EF7-4DCE-B3CC-2C27258D677A}\.ba\logo.png
          • Size 1KB
          • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          wixstdba.dll
          • Path C:\Windows\Temp\{EE468B9D-2EF7-4DCE-B3CC-2C27258D677A}\.ba\wixstdba.dll
          • Size 215KB
          • SHA256 e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          memory/740-9227-0x00007FFC502C0000-0x00007FFC50513000-memory.dmp
          Download

          memory/740-9230-0x00007FFC43ED0000-0x00007FFC44411000-memory.dmp
          Download

          memory/740-9229-0x00007FFC4D8D0000-0x00007FFC4DD9C000-memory.dmp
          Download

          memory/740-9228-0x00007FFC4FFC0000-0x00007FFC50218000-memory.dmp
          Download

          memory/1120-7-0x0000000000400000-0x0000000000506000-memory.dmp
          Download

          memory/1120-8951-0x0000000000400000-0x0000000000506000-memory.dmp
          Download

          memory/1120-0-0x0000000000400000-0x0000000000506000-memory.dmp
          Download

          memory/4368-9036-0x000002DED7990000-0x000002DED7991000-memory.dmp
          Download

          memory/4368-9011-0x000002DED9EE0000-0x000002DEDA0E2000-memory.dmp
          Download

          memory/4368-9405-0x00007FFC44420000-0x00007FFC4A4E8000-memory.dmp
          Download

          memory/4368-9406-0x00007FFC511B0000-0x00007FFC51686000-memory.dmp
          Download

          memory/4368-9409-0x0000000064940000-0x00000000649C4000-memory.dmp
          Download

          memory/4368-9408-0x00007FFC510E0000-0x00007FFC511A5000-memory.dmp
          Download

          memory/4368-8947-0x00007FFC5F420000-0x00007FFC5FDB1000-memory.dmp
          Download

          memory/4368-9400-0x00007FFC4A4F0000-0x00007FFC4C4D8000-memory.dmp
          Download

          memory/4368-9398-0x000002DEBB0D0000-0x000002DEBC082000-memory.dmp
          Download

          memory/4368-8949-0x000002DEBB0D0000-0x000002DEBC082000-memory.dmp
          Download

          memory/4368-9399-0x00007FFC51690000-0x00007FFC517E4000-memory.dmp
          Download

          memory/4368-9397-0x0000000010000000-0x00000000103DD000-memory.dmp
          Download

          memory/4368-8952-0x000002DEBB0D0000-0x000002DEBC082000-memory.dmp
          Download

          memory/4368-9032-0x000002DED7990000-0x000002DED7991000-memory.dmp
          Download

          memory/4368-8987-0x000002DEBB0D0000-0x000002DEBC082000-memory.dmp
          Download

          memory/4368-9033-0x000002DED7990000-0x000002DED7991000-memory.dmp
          Download

          memory/4368-9009-0x000002DED9A90000-0x000002DED9ED2000-memory.dmp
          Download

          memory/4368-9039-0x000002DED7990000-0x000002DED7991000-memory.dmp
          Download

          memory/4368-9038-0x000002DED7990000-0x000002DED7991000-memory.dmp
          Download

          memory/4368-9037-0x000002DED7990000-0x000002DED7991000-memory.dmp
          Download

          memory/4368-9365-0x00007FFC50510000-0x00007FFC508E1000-memory.dmp
          Download

          memory/4368-9035-0x000002DED7990000-0x000002DED7991000-memory.dmp
          Download

          memory/4368-9361-0x00007FFC50B30000-0x00007FFC50EA8000-memory.dmp
          Download

          memory/4368-9034-0x000002DED7990000-0x000002DED7991000-memory.dmp
          Download

          memory/4368-9364-0x00007FFC4EB60000-0x00007FFC4F197000-memory.dmp
          Download

          memory/4368-9031-0x000002DED7990000-0x000002DED7991000-memory.dmp
          Download

          memory/4368-9040-0x000002DED7990000-0x000002DED7991000-memory.dmp
          Download

          memory/4368-9041-0x000002DED7990000-0x000002DED7991000-memory.dmp
          Download

          memory/4368-9043-0x000002DED79A0000-0x000002DED79A1000-memory.dmp
          Download

          memory/4368-9044-0x000002DED79A0000-0x000002DED79A1000-memory.dmp
          Download

          memory/4368-8948-0x0000000010000000-0x00000000103DD000-memory.dmp
          Download

          memory/4368-8934-0x00007FFC5FDC0000-0x00007FFC60319000-memory.dmp
          Download

          memory/4596-1490-0x0000000000400000-0x00000000007BB000-memory.dmp
          Download

          memory/4596-8884-0x0000000000400000-0x00000000007BB000-memory.dmp
          Download

          memory/4596-1842-0x0000000000400000-0x00000000007BB000-memory.dmp
          Download

          memory/4596-1494-0x0000000000400000-0x00000000007BB000-memory.dmp
          Download

          memory/4596-2961-0x0000000000400000-0x00000000007BB000-memory.dmp
          Download

          memory/4596-9-0x0000000002AB0000-0x0000000002AB1000-memory.dmp
          Download

          memory/4596-8950-0x0000000000400000-0x00000000007BB000-memory.dmp
          Download

          memory/4596-7475-0x0000000000400000-0x00000000007BB000-memory.dmp
          Download

          memory/4596-8-0x0000000000400000-0x00000000007BB000-memory.dmp
          Download

          memory/4596-1148-0x0000000000400000-0x00000000007BB000-memory.dmp
          Download

          memory/4596-1488-0x0000000000400000-0x00000000007BB000-memory.dmp
          Download

          memory/4596-5-0x0000000002AB0000-0x0000000002AB1000-memory.dmp
          Download

          memory/4596-1492-0x0000000000400000-0x00000000007BB000-memory.dmp
          Download