Analysis

  • max time kernel
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/06/2026, 04:31

General

  • Target
    APD_612_T82IV.exe
  • Size 12.8MB
  • Sample260630-e5tpmaew5v
  • SHA256 364653ca51a093f8109ef172045ef6bb1b3c5c4374ea4fd5360be35a12ccec13
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Port Monitors 1 TTPs 20 IoCs

    Adversaries may use port monitors to run an adversary supplied DLL during system boot for persistence or privilege escalation.

  • Drops file in Drivers directory 1 IoCs
  • Sets service image path in registry 3 TTPs 1 IoCs

    This determines the executable launched when a service starts. It can be used to establish persistence.

  • Drops file in System32 directory 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 22 IoCs
  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 8 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\APD_612_T82IV.exe
    "C:\Users\Admin\AppData\Local\Temp\APD_612_T82IV.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3408
    • C:\Users\Admin\AppData\Local\Temp\APD6\Setup\Setup.exe
      "C:\Users\Admin\AppData\Local\Temp\APD6\Setup\Setup.exe"
      2⤵
      • Boot or Logon Autostart Execution: Port Monitors
      • Drops file in System32 directory
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3256
      • C:\Windows\SysWOW64\extrac32.exe
        C:\Windows\system32\extrac32.exe /L "C:\Users\Admin\AppData\Local\Temp\EPSON_Advanced_Printer_Driver_6_For_TM-T82IV\" /E "C:\Users\Admin\AppData\Local\Temp\EPSON_Advanced_Printer_Driver_6_For_TM-T82IV\TPDBase.cab"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:4008
      • C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 6\DriverPack\TMUSB\Setup.exe
        "C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 6\DriverPack\TMUSB\Setup.exe" -s2
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:5408
        • C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 6\DriverPack\TMUSB\TMUSB800\Setup.exe
          "C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 6\DriverPack\TMUSB\TMUSB800\Setup.exe" -s2
          4⤵
          • Drops file in Drivers directory
          • Sets service image path in registry
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:6128
          • C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 6\DriverPack\TMUSB\TMUSB800\TMUSB64\dpinst.exe
            TMUSB64\dpinst.exe /s /se /sw /sa /el
            5⤵
            • Drops file in Windows directory
            • Executes dropped EXE
            • Checks SCSI registry key(s)
            PID:484
          • C:\Windows\SYSTEM32\cmd.exe
            cmd /c chcp 437 && pnputil /enum-drivers > C:\Users\Admin\AppData\Local\Temp\TMUSB.txt
            5⤵
            • Suspicious use of WriteProcessMemory
            PID:4584
            • C:\Windows\system32\chcp.com
              chcp 437
              6⤵
                PID:2788
              • C:\Windows\system32\pnputil.exe
                pnputil /enum-drivers
                6⤵
                  PID:5816
          • C:\Windows\SysWOW64\rundll32.exe
            rundll32 printui.dll,PrintUIEntry /ia /f "C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 6\DriverPack\Driver\TM-T\EA6INSTMT.INF" /m "EPSON TM-T(203dpi) Receipt6"
            3⤵
            • Drops file in Windows directory
            • System Location Discovery: System Language Discovery
            PID:1796
          • C:\Windows\system32\pnputil.exe
            "C:\Windows\system32\\pnputil.exe" -a "C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 6\DriverPack\Driver\TM-T\EA6INSTMT.INF"
            3⤵
            • Drops file in Windows directory
            PID:2148
          • C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 6\DriverPack\PrinterReg\PrinterReg.exe
            "C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 6\DriverPack\PrinterReg\PrinterReg.exe" /install /dev=TM-T82IV
            3⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of SetWindowsHookEx
            PID:3272
      • C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 6\DriverPack\PrinterReg\APDLog.exe
        "C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 6\DriverPack\PrinterReg\APDLog.exe"
        1⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:3876
      • C:\Windows\System32\spoolsv.exe
        C:\Windows\System32\spoolsv.exe
        1⤵
        • Boot or Logon Autostart Execution: Port Monitors
        • Drops file in System32 directory
        • Drops file in Windows directory
        • Loads dropped DLL
        • Checks SCSI registry key(s)
        • Modifies data under HKEY_USERS
        PID:6000
      • C:\Windows\system32\DrvInst.exe
        DrvInst.exe "4" "d" "C:\Windows\system32\spool\tools\Microsoft Print To PDF\prnms009.Inf" "9" "43057df13" "0000000000000178" "WinSta0\Default" "000000000000015C" "208" "C:\Windows\system32\spool\tools\Microsoft Print To PDF"
        1⤵
        • Drops file in System32 directory
        • Drops file in Windows directory
        PID:5260
      • C:\Windows\system32\DrvInst.exe
        DrvInst.exe "4" "8" "C:\Users\Admin\AppData\Local\Temp\{43d11d31-79cd-2b42-b7af-d87b2d3215f9}\tmusb64.inf" "9" "40bb771fb" "0000000000000184" "WinSta0\Default" "000000000000016C" "208" "c:\program files (x86)\epson\epson advanced printer driver 6\driverpack\tmusb\tmusb800\tmusb64"
        1⤵
        • Drops file in System32 directory
        • Drops file in Windows directory
        • Checks SCSI registry key(s)
        • Modifies data under HKEY_USERS
        PID:3112
      • C:\Windows\system32\DrvInst.exe
        DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{f4e0e7bd-9dc5-624f-9140-36c8027156cb}\ea6instmt.inf" "9" "4713f3a5f" "000000000000016C" "WinSta0\Default" "0000000000000198" "208" "c:\program files (x86)\epson\epson advanced printer driver 6\driverpack\driver\tm-t"
        1⤵
        • Drops file in System32 directory
        • Drops file in Windows directory
        • Checks SCSI registry key(s)
        • Modifies data under HKEY_USERS
        PID:2664

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            Setup.log

            • Path C:\ProgramData\EPSON\EPSON Advanced Printer Driver 6\TM-T82IV\Setup.log
            • Size 2KB
            • SHA256 a70662dcb384fa71ddb0bb330232c05d09b8026bd9de63dba4ece14dba840da0
            • MD5 SHA1 SHA512 TLSH

            Setup.log

            • Path C:\ProgramData\EPSON\EPSON Advanced Printer Driver 6\TM-T82IV\Setup.log
            • Size 3KB
            • SHA256 ba2f278d8239597b375bd9aae2f61d2f51bc54c86b57c8a50a99ad6c7c3c16ed
            • MD5 SHA1 SHA512 TLSH

            Setup.log

            • Path C:\ProgramData\EPSON\EPSON Advanced Printer Driver 6\TM-T82IV\Setup.log
            • Size 4KB
            • SHA256 f63a9d66e4dd0be6fce1a0e7bdb5692c3e35c58a2891fb29ef2752b8c0a07bce
            • MD5 SHA1 SHA512 SSDEEP TLSH

            APD5.zip

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\APD5.zip
            • Size 11.9MB
            • SHA256 5fbb45fd3f28cefa39867b99d970f8ba71e4f9d0955be75718dea2dde86048a0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6INSTMT.CAT

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\EA6INSTMT.CAT
            • Size 33KB
            • SHA256 d7c97a64c4afc4e4c9dffcb800fc3c3c416ad0f4744d62e86d440d94dae6ba01
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6INSTMT.INF

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\EA6INSTMT.INF
            • Size 27KB
            • SHA256 9b1b0a88359ab323c42b18385bbfdcf2a5372540da0caadc67ad43eaab2a455f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6INSTMTA.CAT

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\EA6INSTMTA.CAT
            • Size 32KB
            • SHA256 60855fd81d0371bc45ed2434609f2cd8b057139945ca2a69a162398c6ba28c81
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6INSTMTA.INF

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\EA6INSTMTA.INF
            • Size 14KB
            • SHA256 bd06af05c6a551617e6895f51481c5b4c81dc509ba4b6bcfa1ac6a051450616a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6MDLTMT180.GPD

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\EA6MDLTMT180.GPD
            • Size 14KB
            • SHA256 d52af6d790f7b60eb9138ade47f7df85f37942d67f09ff8e838b1d3d202de93c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6MDLTMT180_1.GPD

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\EA6MDLTMT180_1.GPD
            • Size 14KB
            • SHA256 c8c358e40c5fb7866c69f0aabe41dc0671e6aab10dc21bc2268e18d77f6618a8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6MDLTMT203.GPD

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\EA6MDLTMT203.GPD
            • Size 14KB
            • SHA256 d945f2a9fd89984e5fc25a48df9bfd2c3c21fdc3c09533712c139ed8ae1965ef
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6MDLTMT203_1.GPD

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\EA6MDLTMT203_1.GPD
            • Size 14KB
            • SHA256 cd6eae1a0c6ad9938eb683b16de46d50fa76b29c34b0e1eb088ae3753cf3a873
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6PIITMT.INI

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\EA6PIITMT.INI
            • Size 210B
            • SHA256 ac58233dcae8531c3d7071c4e01dabf1e0130495df05488485a252a04773c077
            • MD5 SHA1 SHA512 TLSH

            EA6RESTM.DLL

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\EA6RESTM.DLL
            • Size 646KB
            • SHA256 c094a585039c1fd19b98be6e3bb43769879cda1e86118600bd13c7f783d87a23
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6Bcd0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\amd64\EA6Bcd0.dll
            • Size 419KB
            • SHA256 5e73993f2d2c5036a856842bd9125b033fe09ba6c7cf6d1fd394222efa4254bc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6BcdR0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\amd64\EA6BcdR0.dll
            • Size 566KB
            • SHA256 6e3d75d9e87079f40f5358cdbd2749e389b82238c4957f27ea953fdac26073e5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6LMTM.DLL

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\amd64\EA6LMTM.DLL
            • Size 325KB
            • SHA256 71c351bc4dacb5225c467a3b50144b800e503cf4412ce10bc3aabeb227f6caea
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6RDPTM.DLL

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\amd64\EA6RDPTM.DLL
            • Size 1.4MB
            • SHA256 0ae895df3282ae1d1114ca6b7216f2724252b2e93d5c8303567ffd00a1e745b2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6UIPTM.DLL

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\amd64\EA6UIPTM.DLL
            • Size 1.2MB
            • SHA256 badc482273cc0712bd990091172669e042c87fd638b59bb3290d05dd4ceaab19
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6Bcd0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\arm64\EA6Bcd0.dll
            • Size 1.1MB
            • SHA256 2ba3b281474beb815aa090a14cf6e9fe85661066d6f5bfac64b2ae5d7eb2c3ed
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6BcdR0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\arm64\EA6BcdR0.dll
            • Size 135KB
            • SHA256 87436ef12c286c86a67e79b5d0d2f6e2fe8044f1f61fd2e6019797d40c3670bd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6LMTM.DLL

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\arm64\EA6LMTM.DLL
            • Size 317KB
            • SHA256 6fd0643368981b13f88b39bbcdd40ba42d446f67ab0ca2715afd483f2307048a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6RDPTM.DLL

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\arm64\EA6RDPTM.DLL
            • Size 1.4MB
            • SHA256 e23646e789ceb74a6a4280d5142a3d7c1c9fc1143d66c17139972bad492ae720
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6UIPTM.DLL

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\arm64\EA6UIPTM.DLL
            • Size 1.2MB
            • SHA256 092e26d1899f5e59014e0217072c0ac19b89310357aec4157e46627bf51043d7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6Bcd0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\i386\EA6Bcd0.dll
            • Size 249KB
            • SHA256 39b6db7fb10d3cad014da82dbec5321b961feb3b94274f01cb4e9b6413718e63
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6BcdR0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\i386\EA6BcdR0.dll
            • Size 37KB
            • SHA256 03aebd384beb94d948dad768f9fb7643e53d54078cc7c0f857cec9346dc9739b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6LMTM.DLL

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\i386\EA6LMTM.DLL
            • Size 269KB
            • SHA256 86b72d0c0855cbc6b5fbf8c6afb32ea6665fad5121ee9f50482eecbfa453d8a4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6RDPTM.DLL

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\i386\EA6RDPTM.DLL
            • Size 1.3MB
            • SHA256 841777168fc62c6770cb1aa6f1f2bef30006b441d8a7ab829acd2adfd994c42c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6UIPTM.DLL

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Driver\TM-T\i386\EA6UIPTM.DLL
            • Size 1.1MB
            • SHA256 9afcb70e9d1cc0881b3f4e530199a8ac272569226fa43d8ac57087e50dd2391a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6PM.dll

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PortMonitor\arm64\EA6PM.dll
            • Size 786KB
            • SHA256 f86cd554cefba4749ab637df8049963400d7e3a98027678ee194b1de3bb46d5f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6PM.dll

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PortMonitor\win32\EA6PM.dll
            • Size 537KB
            • SHA256 432d0ccf1382ecbe737a17b23cbdbe79dc081fdc04785f12207d302d41426a72
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EA6PM.dll

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PortMonitor\x64\EA6PM.dll
            • Size 698KB
            • SHA256 324fbde89b85280d5e62f3782579a42be5cee9d6468a4568954ff006675f9cb0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            APDLog.exe

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PrinterReg\APDLog.exe
            • Size 303KB
            • SHA256 68cd069c8e16e43251c9dba6d79b2fec0bd98fef4f1678425ab6a75c323615d9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Info-ZIPlicense.txt

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PrinterReg\Info-ZIPlicense.txt
            • Size 3KB
            • SHA256 ec4184ccaabe0abe93c05ece2762f6dea58cd76eba541b9065574d9dca5ff3dd
            • MD5 SHA1 SHA512 TLSH

            APDNetSetting.exe

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PrinterReg\NetworkSettingTool\APDNetSetting.exe
            • Size 2.5MB
            • SHA256 445c08da0350f260c6bfebc2d11547b39f7c1d5392f024f08b9cb7e00d38755a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            FWCtrl.dll

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PrinterReg\NetworkSettingTool\FWCtrl.dll
            • Size 81KB
            • SHA256 25c787a36be9b2ec890d4b450852539c1972eefb8d8a5ea5b4c73a187fef8d83
            • MD5 SHA1 SHA512 SSDEEP TLSH

            String.ini

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PrinterReg\NetworkSettingTool\Resources\EN\String.ini
            • Size 22KB
            • SHA256 b54db0e7afdfc43ef237d93049361e61988f1dc76d9e201bc6b493f3a61460d2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            String.ini

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PrinterReg\NetworkSettingTool\Resources\FR\String.ini
            • Size 25KB
            • SHA256 941e48799065140856da3ff4db3a5a273dacb4771da076983fca70cfab03aaf4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            String.ini

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PrinterReg\NetworkSettingTool\Resources\JA\String.ini
            • Size 15KB
            • SHA256 2ca069da5bb5e143f53f122d1d8be701b1b5a6bfe62f932b79067b805cd8ca79
            • MD5 SHA1 SHA512 SSDEEP TLSH

            PrinterReg.exe

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PrinterReg\PrinterReg.exe
            • Size 3.3MB
            • SHA256 4b80c5b0244c148dceb8ae1801f22fa68eb81c6503cc36d88a41f510e818c7c0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Resource.ini

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PrinterReg\Resource\English\Resource.ini
            • Size 7KB
            • SHA256 bf5ac567608fbf02bdfcfb8be41f0e04a51de53fda7b9a12cbb2db9852cd51fc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Resource.ini

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PrinterReg\Resource\French\Resource.ini
            • Size 8KB
            • SHA256 b1f6649d26e95464ad94a3eb578620392e3fd5a7389b3389d9a27bf397cbd951
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Resource.ini

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PrinterReg\Resource\Japanese\Resource.ini
            • Size 5KB
            • SHA256 f16b572ecd62251e5eb918e51f6117cc663932ab507044f7018b9e8f8c29167b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Resource.ini

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PrinterReg\Resource\SimplifiedChinese\Resource.ini
            • Size 4KB
            • SHA256 5ef7b5af00876272300248ebfbc55d8624d1113d62a19821b0d2b7bdc311b523
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ZIP32.DLL

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\PrinterReg\ZIP32.DLL
            • Size 158KB
            • SHA256 12689a60e22fd93761ef1b7723581e56b01dd9369cc90ce91f590c5f1ce50b3d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Setup.exe

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Setup\Setup.exe
            • Size 858KB
            • SHA256 a2c9e8af9274dc7fad79781437a2596e8de96ebc57e7d90045a59d9aed1739df
            • MD5 SHA1 SHA512 SSDEEP TLSH

            TM-T82IV.ini

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Setup\TM-T82IV.ini
            • Size 31KB
            • SHA256 314518104cdd2a458440326e0758648a4bc4426fa0b6f21694d0f5d095e653ec
            • MD5 SHA1 SHA512 SSDEEP TLSH

            TPDBase.cab

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\Setup\TPDBase.cab
            • Size 121KB
            • SHA256 d0e8861a285dd4e841124dbab627f30cf6ef714f3894f2c0060602fad346082f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Setup.exe

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\TMUSB\Setup.exe
            • Size 61KB
            • SHA256 10da51e46d446b1eebe5e80e8343ba8296fa7375ab49167aa3d069251b4be406
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Setup.exe

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\TMUSB\TMUSB710\Setup.exe
            • Size 90KB
            • SHA256 ad9ebc3ae95216ffaf0b02ad1919da7a510b9f91c03e704bbaa95e8811674b80
            • MD5 SHA1 SHA512 SSDEEP TLSH

            DPInst.exe

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\TMUSB\TMUSB710\TMUSB64\DPInst.exe
            • Size 843KB
            • SHA256 18cf3dabf006bd1001d1c68370a15fb06ca47498a0021d8100df2e20976a6740
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dpinst.xml

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\TMUSB\TMUSB710\TMUSB64\dpinst.xml
            • Size 1KB
            • SHA256 12dbecc696081497040beccb66676f59725777bb7380f2adcc32bf5941ffeec3
            • MD5 SHA1 SHA512 TLSH

            tmusb64.cat

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\TMUSB\TMUSB710\TMUSB64\tmusb64.cat
            • Size 8KB
            • SHA256 94980c82c4ee4b0ef1c4618fab4536e55c024295cdddab9d106a7b888311ff5f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            readme_e.txt

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\TMUSB\TMUSB710\readme_e.txt
            • Size 9KB
            • SHA256 45c6984b9e37ea7c8b7db09e9982f5d963e6ee3670c821f25e88ebfb7b4b8d41
            • MD5 SHA1 SHA512 SSDEEP TLSH

            readme_j.txt

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\TMUSB\TMUSB710\readme_j.txt
            • Size 9KB
            • SHA256 069fa98157c1f859a861aacc4f7b1a1303c9b2b46280fd59a0c48362cef64f40
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dpinst.xml

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\TMUSB\TMUSB800\TMUSB64\dpinst.xml
            • Size 1KB
            • SHA256 5bc6dd9d40738d6f2dbe6161a596ac35d7a6c32005b7eb0a79c5a0c6acf673bf
            • MD5 SHA1 SHA512 TLSH

            licenseE.txt

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\TMUSB\TMUSB800\TMUSB64\licenseE.txt
            • Size 85KB
            • SHA256 09b8c3fdd6df6bf26821e3e95ef666492548866c491ed50ac4c74f26266e547e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            licenseJ.txt

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\TMUSB\TMUSB800\TMUSB64\licenseJ.txt
            • Size 36KB
            • SHA256 49f6c099b188ea4e2ed4eefe4d43eed32a8aaed362c7951982da46a4b9135c36
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnZip32.Dll

            • Path C:\Users\Admin\AppData\Local\Temp\APD6\UnZip32.Dll
            • Size 137KB
            • SHA256 3ee2a868a45760ad81337998dfbee020816238499c5601bff4b7945765a215e5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LA_EN.TXT

            • Path C:\Users\Admin\AppData\Local\Temp\EPSON_Advanced_Printer_Driver_6_For_TM-T82IV\Resource\English\LA_EN.TXT
            • Size 96KB
            • SHA256 0b00db432e605bb1976e3965bd02b1965e9a189b7d90f30488336ea051356e30
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Resource.ini

            • Path C:\Users\Admin\AppData\Local\Temp\EPSON_Advanced_Printer_Driver_6_For_TM-T82IV\Resource\English\Resource.ini
            • Size 13KB
            • SHA256 efb41647730bef9eb196fdc6c06c26175f20eaa7b984ae5c18f04fcff943a94b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LA_FR.TXT

            • Path C:\Users\Admin\AppData\Local\Temp\EPSON_Advanced_Printer_Driver_6_For_TM-T82IV\Resource\French\LA_FR.TXT
            • Size 117KB
            • SHA256 b0ede0ee7194e7e7d27020bd0a7e852b0f58249d7f2f233fb7f8f4163407c01e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Resource.ini

            • Path C:\Users\Admin\AppData\Local\Temp\EPSON_Advanced_Printer_Driver_6_For_TM-T82IV\Resource\French\Resource.ini
            • Size 14KB
            • SHA256 5baed2b3113355505599116ac453701dac1606e54986072e0fa603a1b3d6f915
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LA_JA.TXT

            • Path C:\Users\Admin\AppData\Local\Temp\EPSON_Advanced_Printer_Driver_6_For_TM-T82IV\Resource\Japanese\LA_JA.TXT
            • Size 41KB
            • SHA256 20513a5d330d5293a90e7cbcb2861c5d9ef3370c0729e494ec7fe8c70811db7c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Resource.ini

            • Path C:\Users\Admin\AppData\Local\Temp\EPSON_Advanced_Printer_Driver_6_For_TM-T82IV\Resource\Japanese\Resource.ini
            • Size 9KB
            • SHA256 5a608062e2c257ebf4d046688ac83366943caf9b1ea1e02dc009983620d333eb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LA_CN.txt

            • Path C:\Users\Admin\AppData\Local\Temp\EPSON_Advanced_Printer_Driver_6_For_TM-T82IV\Resource\SimplifiedChinese\LA_CN.txt
            • Size 26KB
            • SHA256 56b127b4dc09dd95c1277de732a10980e6e00e26422c5d6d8333be42d088a576
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Resource.ini

            • Path C:\Users\Admin\AppData\Local\Temp\EPSON_Advanced_Printer_Driver_6_For_TM-T82IV\Resource\SimplifiedChinese\Resource.ini
            • Size 6KB
            • SHA256 e9d1bf5e37bc771eca86ed7362563c7f5eee72b037146c72141313250282c7df
            • MD5 SHA1 SHA512 SSDEEP TLSH

            install.ico

            • Path C:\Users\Admin\AppData\Local\Temp\EPSON_Advanced_Printer_Driver_6_For_TM-T82IV\install.ico
            • Size 361KB
            • SHA256 c78b0a8ff02cba8bed7055d1939690fab9a324de6ba20dd257a56b2cd0469b2c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ea6instmt.inf_amd64_23e17478a655b625.ini

            • Path C:\Windows\System32\DriverStore\FileRepository\ea6instmt.inf_amd64_23e17478a655b625.ini
            • Size 1KB
            • SHA256 9b88fa4754351bf3010743df2e99b5e8b4026b8964f33b450087e5ba9bea2694
            • MD5 SHA1 SHA512 TLSH

            tmusb64.inf_amd64_36083d8cc53a6889.ini

            • Path C:\Windows\System32\DriverStore\FileRepository\tmusb64.inf_amd64_36083d8cc53a6889.ini
            • Size 416B
            • SHA256 e60d96034437274ef2ddec76196a7b30637360cff9290164d30ab316b90bb4f6
            • MD5 SHA1 SHA512 TLSH