Overview

overview

8

Static

static

3

configurat...er.exe

windows10-2004-x64

8

configurat...er.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/07/2026, 06:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    configuration-suite-installer.exe
  • Size 36.1MB
  • Sample260709-hpyv7aex5s
  • SHA256 703f466285030db5702e51ad5dcf021fa0d293707a883ee6fea5a5ac567ec698
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryransomwarespywaretrojan

Malware Config

Signatures

  • Executes dropped EXE 23 IoCs
  • Loads dropped DLL 14 IoCs
  • Enumerates connected drives 3 TTPs 64 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 36 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 45 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 20 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 53 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 64 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 15 IoCs
  • Modifies registry key 1 TTPs 3 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 38 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\configuration-suite-installer.exe
    "C:\Users\Admin\AppData\Local\Temp\configuration-suite-installer.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:4412
    • C:\Users\Admin\AppData\Local\Temp\configuration-suite-installer.exe
      /i "C:\Users\Admin\AppData\Roaming\Deep Sea Electronics plc\DSE Configuration Suite\2.220.2.0\install\Config Suite.msi" AI_SETUPEXEPATH="C:\Users\Admin\AppData\Local\Temp\configuration-suite-installer.exe" SETUPEXEDIR="C:\Users\Admin\AppData\Local\Temp\"
      2⤵
      • Enumerates connected drives
      • System Location Discovery: System Language Discovery
      • Modifies system certificate store
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4464
      • C:\Users\Admin\AppData\Local\Temp\configuration-suite-installer.exe
        "C:\Users\Admin\AppData\Local\Temp\configuration-suite-installer.exe" /i "C:\Users\Admin\AppData\Roaming\Deep Sea Electronics plc\DSE Configuration Suite\2.220.2.0\install\Config Suite.msi" EXECUTEACTION="INSTALL" SECONDSEQUENCE="1" CLIENTPROCESSID="4464" AI_MORE_CMD_LINE=1
        3⤵
        • Enumerates connected drives
        • System Location Discovery: System Language Discovery
        PID:4224
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2760
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 1D46CAF2540AE6370CA3BCBFD5E7C3C8 C
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:5472
    • C:\Windows\system32\srtasks.exe
      C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
      2⤵
        PID:2728
      • C:\Windows\syswow64\MsiExec.exe
        C:\Windows\syswow64\MsiExec.exe -Embedding C63AF594D97BA1714E98496AF1F6E957
        2⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of SetWindowsHookEx
        PID:1192
      • C:\Windows\syswow64\MsiExec.exe
        C:\Windows\syswow64\MsiExec.exe -Embedding 8CF0592A5B1176E35745A35FC1D6CA53 E Global\MSI0000
        2⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:3328
        • C:\Windows\SysWOW64\Cmd.exe
          "C:\Windows\System32\Cmd.exe" /c UninstallDriver.bat
          3⤵
          • Drops file in Program Files directory
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:3728
          • C:\Windows\SysWOW64\reg.exe
            REG.exe Query HKLM\Hardware\Description\System\CentralProcessor\0
            4⤵
            • System Location Discovery: System Language Discovery
            • Checks processor information in registry
            • Modifies registry key
            PID:3992
          • C:\Windows\SysWOW64\find.exe
            Find /i "x86"
            4⤵
            • System Location Discovery: System Language Discovery
            PID:1456
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "Old\P815\ftdiport.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:5712
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "Old\P815\ftdibus.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:988
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "Old\P813\ftdiport.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:5384
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "Old\P813\ftdibus.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:2972
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "Old\P810\ftdiport.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:3424
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "Old\P810\ftdibus.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:4264
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "P813-P815\dse_ftdiport.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:5984
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "P813-P815\dse_ftdibus.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:3944
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\CDMUninstaller.exe
            CDMUninstaller.exe 0403 e619
            4⤵
            • Executes dropped EXE
            • Drops file in Program Files directory
            • System Location Discovery: System Language Discovery
            • Checks SCSI registry key(s)
            PID:4068
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\CDMUninstaller.exe
            CDMUninstaller.exe 0403 8372
            4⤵
            • Executes dropped EXE
            • Drops file in Program Files directory
            • System Location Discovery: System Language Discovery
            • Checks SCSI registry key(s)
            PID:5464
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\CDMUninstaller.exe
            CDMUninstaller.exe 0403 e618
            4⤵
            • Executes dropped EXE
            • Drops file in Program Files directory
            • System Location Discovery: System Language Discovery
            • Checks SCSI registry key(s)
            PID:3324
        • C:\Windows\SysWOW64\Cmd.exe
          "C:\Windows\System32\Cmd.exe" /c InstallDriver.bat
          3⤵
          • Drops file in Program Files directory
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:2060
          • C:\Windows\SysWOW64\reg.exe
            REG.exe Query HKLM\Hardware\Description\System\CentralProcessor\0
            4⤵
            • System Location Discovery: System Language Discovery
            • Checks processor information in registry
            • Modifies registry key
            PID:2328
          • C:\Windows\SysWOW64\find.exe
            Find /i "x86"
            4⤵
            • System Location Discovery: System Language Discovery
            PID:3280
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "Old\P815\ftdiport.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:1480
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "Old\P815\ftdibus.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:564
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "Old\P813\ftdiport.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:2476
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "Old\P813\ftdibus.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:4008
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "Old\P810\ftdiport.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:3540
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "Old\P810\ftdibus.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:2244
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "P813-P815\dse_ftdiport.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:3132
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /u "P813-P815\dse_ftdibus.inf" /c /q
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies data under HKEY_USERS
            PID:632
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\CDMUninstaller.exe
            CDMUninstaller.exe 0403 e619
            4⤵
            • Executes dropped EXE
            • Drops file in Program Files directory
            • System Location Discovery: System Language Discovery
            • Checks SCSI registry key(s)
            PID:4016
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\CDMUninstaller.exe
            CDMUninstaller.exe 0403 8372
            4⤵
            • Executes dropped EXE
            • Drops file in Program Files directory
            • System Location Discovery: System Language Discovery
            • Checks SCSI registry key(s)
            PID:2612
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\CDMUninstaller.exe
            CDMUninstaller.exe 0403 e618
            4⤵
            • Executes dropped EXE
            • Drops file in Program Files directory
            • System Location Discovery: System Language Discovery
            • Checks SCSI registry key(s)
            PID:3656
          • C:\Windows\SysWOW64\reg.exe
            REG.exe Query HKLM\Hardware\Description\System\CentralProcessor\0
            4⤵
            • System Location Discovery: System Language Discovery
            • Checks processor information in registry
            • Modifies registry key
            PID:1832
          • C:\Windows\SysWOW64\find.exe
            Find /i "x86"
            4⤵
            • System Location Discovery: System Language Discovery
            PID:2900
          • C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
            dpinst64.exe /path ".\P813-P815" /c /lm /sa /sw /f
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            PID:6052
    • C:\Windows\system32\vssvc.exe
      C:\Windows\system32\vssvc.exe
      1⤵
      • Checks SCSI registry key(s)
      PID:1484
    • C:\Windows\system32\DrvInst.exe
      DrvInst.exe "4" "1" "c:\program files (x86)\common files\dse p8xx drivers\p813-p815\dse_ftdibus.inf" "9" "44cc0fecf" "0000000000000114" "WinSta0\Default" "00000000000000EC" "208" "c:\program files (x86)\common files\dse p8xx drivers\p813-p815"
      1⤵
      • Drops file in System32 directory
      • Drops file in Windows directory
      • Modifies data under HKEY_USERS
      • Suspicious use of WriteProcessMemory
      PID:3340
      • C:\Windows\system32\rundll32.exe
        rundll32.exe C:\Windows\system32\pnpui.dll,InstallSecurityPromptRunDllW 20 Global\{2B6ECF44-9C28-4803-B157-7C2C70C19391} Global\{10C18170-8E4E-4502-AA26-1FC8E926BC8B} C:\Windows\System32\DriverStore\Temp\{be043b17-0dc9-854e-9a60-24e4432eaaf4}\dse_ftdibus.inf C:\Windows\System32\DriverStore\Temp\{be043b17-0dc9-854e-9a60-24e4432eaaf4}\DSE_ftdibus.cat
        2⤵
        • Drops file in System32 directory
        • Modifies data under HKEY_USERS
        PID:204

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          CDMUninstaller.exe
          • Path C:\Program Files (x86)\Common Files\DSE P8xx Drivers\CDMUninstaller.exe
          • Size 562KB
          • SHA256 5eaf27dc743b7740d235f64c08adc2075924172a0a180da638cee7267dd6b657
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Driver_InstallUtility.dll
          • Path C:\Program Files (x86)\Common Files\DSE P8xx Drivers\Driver_InstallUtility.dll
          • Size 6KB
          • SHA256 5201ed00df512b6857caa9e9f2fe376adaebb9d569b579ada4be44590955e2ba
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ftdibus.inf
          • Path C:\Program Files (x86)\Common Files\DSE P8xx Drivers\Old\P810\ftdibus.inf
          • Size 2KB
          • SHA256 e01c9d2170bdc2b855c08dcd04c0d1f904e126a0987d609da18ec67fa28c183a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          ftdiport.inf
          • Path C:\Program Files (x86)\Common Files\DSE P8xx Drivers\Old\P810\ftdiport.inf
          • Size 4KB
          • SHA256 8487acaec59dea8de795f1c0bb3301260f34b8b8522b1df24d3032ce15e7da1f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ftdibus.inf
          • Path C:\Program Files (x86)\Common Files\DSE P8xx Drivers\Old\P813\ftdibus.inf
          • Size 4KB
          • SHA256 a7f390639f07cc49d926b5cc1fbc91bdad1f89f6d33972c41d4eeccf8b4d58ae
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ftdiport.inf
          • Path C:\Program Files (x86)\Common Files\DSE P8xx Drivers\Old\P813\ftdiport.inf
          • Size 4KB
          • SHA256 1f5f960b2d807f568def7170b0fe48a6447fe12dbac3bc1818cb6597e8e7adc1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ftdibus.inf
          • Path C:\Program Files (x86)\Common Files\DSE P8xx Drivers\Old\P815\ftdibus.inf
          • Size 3KB
          • SHA256 771796dff829d276e91136c89f5d5bcc954caa9a2cc7926a3bda0e07bbb0afb5
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          ftdiport.inf
          • Path C:\Program Files (x86)\Common Files\DSE P8xx Drivers\Old\P815\ftdiport.inf
          • Size 4KB
          • SHA256 471b07e4ae53d6edac2ab927af53becdc196178e656ffd704e750cca520505a8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          dse_ftdibus.inf
          • Path C:\Program Files (x86)\Common Files\DSE P8xx Drivers\P813-P815\dse_ftdibus.inf
          • Size 12KB
          • SHA256 b75086e5e467d0780725ab370c964d4724bb045448bb4bedb6e35a30975214c3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          dse_ftdiport.inf
          • Path C:\Program Files (x86)\Common Files\DSE P8xx Drivers\P813-P815\dse_ftdiport.inf
          • Size 13KB
          • SHA256 13f09042b9e925240b185ec223b0a6cfe29369f65d347ab3167b0b852e837b40
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UninstallDriver.bat
          • Path C:\Program Files (x86)\Common Files\DSE P8xx Drivers\UninstallDriver.bat
          • Size 2KB
          • SHA256 d82b28b08f7b65e0c32c2324533669075d48508e60fe56ba35ca8b46eb72d126
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          checkOS.txt
          • Path C:\Program Files (x86)\Common Files\DSE P8xx Drivers\checkOS.txt
          • Size 1KB
          • SHA256 bc08bf2552b87a5a4312d6c0a4e2a3df4530e1ef903189baaae8200e82c870bf
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          dpinst64.exe
          • Path C:\Program Files (x86)\Common Files\DSE P8xx Drivers\dpinst64.exe
          • Size 1.0MB
          • SHA256 181bf85d3b5900ff8abed34bc415afc37fc322d9d7702e14d144f96a908f5cab
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DSE Scada Suite Configuration Tool.exe
          • Path C:\Program Files (x86)\Deep Sea Electronics plc\DSE Configuration Suite\DSE Scada Suite Configuration Tool.exe
          • Size 20KB
          • SHA256 201f8459fa065ba68203a5a494d57192f55219b23e378b437745b90abf37a071
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DSE Scada Suite.exe
          • Path C:\Program Files (x86)\Deep Sea Electronics plc\DSE Configuration Suite\DSE Scada Suite.exe
          • Size 20KB
          • SHA256 8074b0b9c48a6787e8fc8306eca238c8e086ec0919277a5df24f42d17ef1df41
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DSEConfigSuite.exe
          • Path C:\Program Files (x86)\Deep Sea Electronics plc\DSE Configuration Suite\DSEConfigSuite.exe
          • Size 20KB
          • SHA256 1b9053e87e1efc174f1527c12921f403c64617ae7373b9318e8c1ad501546992
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Software Update.exe
          • Path C:\Program Files (x86)\Deep Sea Electronics plc\DSE Configuration Suite\Software Update.exe
          • Size 235KB
          • SHA256 6ef9840c853d09b8598e27d3601a81e0dd5ded79f0fb90ba451330ee253c9183
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AEACCDA8653DD8D7B2EA32F21D15D44F_1D669C0ACC05EE6811E229332EDD8906
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AEACCDA8653DD8D7B2EA32F21D15D44F_1D669C0ACC05EE6811E229332EDD8906
          • Size 637B
          • SHA256 2cd2c1a18215b0fd7ae7e16cd49bf9e3be68581a8700b0b0d5fc1542ed559cee
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          B2FAF7692FD9FFBD64EDE317E42334BA_93702E680A5530C052C8D2BA33A2225F
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_93702E680A5530C052C8D2BA33A2225F
          • Size 1KB
          • SHA256 ec051aa5e159ab29a0eb35d922de0803a34ebbff549e28109ad6eb872f49d965
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          AEACCDA8653DD8D7B2EA32F21D15D44F_1D669C0ACC05EE6811E229332EDD8906
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AEACCDA8653DD8D7B2EA32F21D15D44F_1D669C0ACC05EE6811E229332EDD8906
          • Size 484B
          • SHA256 25a64ae008854690c63ee6d734e81c8fa798e99b5a11455197f6cc698028e0bc
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          B2FAF7692FD9FFBD64EDE317E42334BA_93702E680A5530C052C8D2BA33A2225F
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_93702E680A5530C052C8D2BA33A2225F
          • Size 482B
          • SHA256 6c179fb3059068eff0f79e4a3dad4ded8d363b57b71498d7cd01dccd0eab5a0f
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Banner.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_4464\Banner.jpg
          • Size 3KB
          • SHA256 64f2063d175b22811eebcd686ab46df59c08126fa96de344143161c8457aa761
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          InstallDrivers_log.txt
          • Path C:\Users\Admin\AppData\Local\Temp\InstallDrivers_log.txt
          • Size 505B
          • SHA256 8dad009d06061185b19101cc4e820e9d0e77029792663c15dc19ef57c1e1a7e8
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          MSI2D0.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\MSI2D0.tmp
          • Size 48KB
          • SHA256 02ca99212b699c7efb1f0c3a62d873911212777132366c894fd094fe226cb5bc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MSI4B5.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\MSI4B5.tmp
          • Size 245KB
          • SHA256 4a3c2bad890e08cdf6c51230b950ef689983bda0d698d748bbbee1589c1c18d0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UninstallOldDrivers_log.txt
          • Path C:\Users\Admin\AppData\Local\Temp\UninstallOldDrivers_log.txt
          • Size 516B
          • SHA256 8c6c8440abcde425dc0efdcc678cd99bcc1165cfb3516ceaa501a6c2de9e79a1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          dotNetCustAct.dll_1_Config.xml
          • Path C:\Users\Admin\AppData\Local\Temp\dotNetCustAct.dll_1_Config.xml
          • Size 116B
          • SHA256 82e2546c004816b3ffafa0386628df324c29a1b2443f27c1e5aae5bc42d230ed
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Config Suite.msi
          • Path C:\Users\Admin\AppData\Roaming\Deep Sea Electronics plc\DSE Configuration Suite\2.220.2.0\install\Config Suite.msi
          • Size 3.4MB
          • SHA256 06181f85a2d459ef2d8419bba3835aaae50cf2c8e62a4623d7f1a8c758ce889e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          disk1.cab
          • Path C:\Users\Admin\AppData\Roaming\Deep Sea Electronics plc\DSE Configuration Suite\2.220.2.0\install\disk1.cab
          • Size 16.8MB
          • SHA256 a2410e77102d83add8daa378a5d4e57375e6c0e926c376210cfff278204ab687
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DPINST.LOG
          • Path C:\Windows\DPINST.LOG
          • Size 4KB
          • SHA256 7a544b72f70c5cd0783224f1d5ae68cf3d72ea99ebbb099301fa9fec0bd25e9e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DPINST.LOG
          • Path C:\Windows\DPINST.LOG
          • Size 6KB
          • SHA256 c01246450c39c11a1f30f74ebe7303948dc78cde86051492c2138de1cf2f0f0f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DPINST.LOG
          • Path C:\Windows\DPINST.LOG
          • Size 8KB
          • SHA256 adb86000d27936ab188f3582096c9d29f2c6da904bba0ae407f18de22dc8c0f8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DPINST.LOG
          • Path C:\Windows\DPINST.LOG
          • Size 10KB
          • SHA256 0911d6dc85d9ea1a7e518a802a5bbb2c67c52437bcb44959915791e51d450deb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DPINST.LOG
          • Path C:\Windows\DPINST.LOG
          • Size 13KB
          • SHA256 f9ac2683db495acab760a466a55f5d8ff799f2ae3f0e47fdd8154900c4c2d7b0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DPINST.LOG
          • Path C:\Windows\DPINST.LOG
          • Size 16KB
          • SHA256 3a59efd25ff619fbb2a0a487e6722452a555b2a8d51e0230a037fb3770bed80b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DPINST.LOG
          • Path C:\Windows\DPINST.LOG
          • Size 17KB
          • SHA256 12995ebf2d613027dcbe92a083a8501c23a5235807bc3788f41dadeb3bd15324
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MSI36D.tmp
          • Path C:\Windows\Installer\MSI36D.tmp
          • Size 52KB
          • SHA256 be84bad40cc5e7f8e2de51ad242a54dac8a25d6977d1ce7eaf8aa9838e6f610f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MSIF8CE.tmp
          • Path C:\Windows\Installer\MSIF8CE.tmp
          • Size 103KB
          • SHA256 0067378faeadbb1f90bce05585432b2e84f8d2c432791496208fcc0c31def396
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          metadata-2
          • Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
          • Size 26.1MB
          • SHA256 fe5c66b19aefbaf22d7cf4e4cd9ede98df9311e62eaa517ac2b20b350c2bfd7c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          {a430d5e0-05d7-431c-911e-3264eb646434}_OnDiskSnapshotProp
          • Path \??\Volume{93100e7f-0000-0000-0000-d08302000000}\System Volume Information\SPP\OnlineMetadataCache\{a430d5e0-05d7-431c-911e-3264eb646434}_OnDiskSnapshotProp
          • Size 6KB
          • SHA256 d173ba41447c1bc0ceb798bde5d0e22a8c0de9749a22d955d0f10cea9c7ba0c3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          memory/3328-220-0x0000000002FA0000-0x0000000002FA8000-memory.dmp
          Download

          memory/3328-216-0x0000000002F50000-0x0000000002F6A000-memory.dmp
          Download

          memory/4412-0-0x0000000003110000-0x0000000003111000-memory.dmp
          Download

          memory/4412-41-0x0000000003110000-0x0000000003111000-memory.dmp
          Download