Analysis

  • max time kernel
    150s
  • max time network
    144s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/08/2026, 00:22

General

  • Target
    2026-08-01_814ca0b6aae46456466bbe9dafff82bb_coinminer_elex_wannacry.exe
  • Size 46.8MB
  • Sample260802-anx89sam91
  • SHA256 ab3052085172a0e6a0443af80d0295bc4773b1939eaec0114ca1e3eb228d28cf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 2 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 4 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-01_814ca0b6aae46456466bbe9dafff82bb_coinminer_elex_wannacry.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-01_814ca0b6aae46456466bbe9dafff82bb_coinminer_elex_wannacry.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4648
    • C:\Users\Admin\AppData\Local\Temp\7zS82253279\setup.exe
      .\setup.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:6896

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Accessible.tlb

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\Accessible.tlb
        • Size 2KB
        • SHA256 6125ed6b0c1b38a508bd062bb22e2d5fa9def0535a64b3992f7abc8aef88c438
        • MD5 SHA1 SHA512 TLSH

        AccessibleHandler.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\AccessibleHandler.dll
        • Size 156KB
        • SHA256 29b0365254fce71b97c1ce2b6dd2e7016794d15811d105a0db503a553e54bed7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AccessibleMarshal.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\AccessibleMarshal.dll
        • Size 20KB
        • SHA256 15c968c9020a5151c8ec150560822f055e64f0de32f37d33cfa2ff5d908c4c30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        IA2Marshal.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\IA2Marshal.dll
        • Size 70KB
        • SHA256 f77aa0801f0e548d4273149cf94621504223ef7e3af3d1a5222e46c43e5c294d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MapiProxy.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\MapiProxy.dll
        • Size 14KB
        • SHA256 88471f0f92adefe6a4b4552aa05420fea14121608d9104f127b3e8b5a0782206
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-console-l1-1-0.dll
        • Size 18KB
        • SHA256 4ceaf28cadfd0929b44e9c686b93432a7151504c8ffe2a6afe516f9b16538131
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-datetime-l1-1-0.dll
        • Size 17KB
        • SHA256 69b84f7318798a91143e3d273ae9c0bedaabba930e3702447d493e2b8dd70725
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-debug-l1-1-0.dll
        • Size 17KB
        • SHA256 290030199e8b47d6bcf466f9fc81fee7e6aebc2c16a3f26dd77019f795658956
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 18KB
        • SHA256 573aed3f3eb436f9b7c24d51be3be2105deb8149ebda9b964660930c957b2410
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-file-l1-1-0.dll
        • Size 21KB
        • SHA256 74075b7af84378cee0d035c020b320ee52a120b21f71a4972093c9e23d534830
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-file-l1-2-0.dll
        • Size 18KB
        • SHA256 d9973270a952b4ce615104520051e847b26e4b1cc330a5a95ba1ae128f0dfdeb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-file-l2-1-0.dll
        • Size 18KB
        • SHA256 144d3a28e43e47fc1cce956255cc80467d4a6fbbb8f612ec6d85f62de030a924
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-handle-l1-1-0.dll
        • Size 18KB
        • SHA256 d6bc1509fd2d4ea07e661f2f59395b4d71907d16f59942443a5d460df343dbf4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-heap-l1-1-0.dll
        • Size 18KB
        • SHA256 f60267cab87dfc1accf912c212186112aba38742f621549d6bc8d67e217e7234
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 18KB
        • SHA256 f93ddef4ac14ef778790f3f00057ab6cafc0c99dff52cc24f523d63917719970
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 18KB
        • SHA256 f8e8d85035bcb478ce2ab47a6476a8c756a7c8fa05bad66b9a03ece6a2ced141
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-localization-l1-2-0.dll
        • Size 20KB
        • SHA256 6475f20f46814d28845c2fa73e9c283a8504483fa16d911325588c778cf76c26
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-memory-l1-1-0.dll
        • Size 18KB
        • SHA256 dc41da54e717aef60228ee11d10669c31d3ddd532eee9ecad944c09b71b762dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 18KB
        • SHA256 b0ae48eb5ff51fa038e1ed23c7c48d266c20c2af3f9907ee6906bb0346df7f9e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 19KB
        • SHA256 1cd9cff9f7d24b22993a207cb81f15ce2792fa5f941e77e8280db00db6a273ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 20KB
        • SHA256 2658242ccd090181ed944f682c435e5fb880f3b21d1811d43b93478901d701b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 18KB
        • SHA256 ae574c9b8a2467c3ee0ac3e862255e93a02627bce146ad7b720b99905dc224fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-profile-l1-1-0.dll
        • Size 17KB
        • SHA256 cffb2007c31932b092cda3a0a39f1cfcc5766b6a1c05e5eaeabc53660cbbe786
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 18KB
        • SHA256 eae3cd8747da3b435846901a1dbe0e430666d3d8d7ba6e54307cff5d6ee0592f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-string-l1-1-0.dll
        • Size 18KB
        • SHA256 7b5393e2cb79f0396d5d97510e8f0955a2586aacaf60eb8de3676006cb81dc5c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-synch-l1-1-0.dll
        • Size 20KB
        • SHA256 5d1a854a0c5121e2e8866dad26545f7f8c2d2f1b15ed7f1ed0b72654a1fc299b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-synch-l1-2-0.dll
        • Size 18KB
        • SHA256 9566b81b1c6db1727a4bb3a7a3de12247ff5297f34548593280ec31f2b2e2c65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 19KB
        • SHA256 1f98f9e044d32e61445c5fab3c80c2f37ca6bab3d5b22cd5611fb5df73db04a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-timezone-l1-1-0.dll
        • Size 18KB
        • SHA256 5909e928d791f67a13e3130033cb0e2178f5167a644c3ab5336322d38356db47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-core-util-l1-1-0.dll
        • Size 18KB
        • SHA256 070afbdbe5b3f3b76b6b7ea2dbb9f8deff81c6ec8706eef9080671543e2ae28b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-conio-l1-1-0.dll
        • Size 19KB
        • SHA256 1d4464fe335470452e58d613028dde2f105edf969d411e90ba7ca9e343c3fc89
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-convert-l1-1-0.dll
        • Size 22KB
        • SHA256 91c5966932287078d0e616d8e0369347991f39765749bbffa1ed3a9df49776d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-environment-l1-1-0.dll
        • Size 18KB
        • SHA256 8d9d3e905d072c4465e4787dd5bd843d3a5dd5ac5ad9d7f232032b25facc82ab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 20KB
        • SHA256 8f9361d02f68392127fe264655eac4fef4a4a1bf63571f184ce26faa98670702
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-heap-l1-1-0.dll
        • Size 18KB
        • SHA256 76dad3e04c9ff61b40ae1c9e039837cd1c077d59b6a008643e4fbf2dbdb564dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-locale-l1-1-0.dll
        • Size 18KB
        • SHA256 ba1458f730ff90009483c763926d1c74383480e529541c0ef5d4de44e7a4f14c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-math-l1-1-0.dll
        • Size 27KB
        • SHA256 5f2bb085217304006c81c55214c6093ec476e554e31808026e424da82f58aa0e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 25KB
        • SHA256 0aa2cf2cc029c95fc053374071d7873edddc410ff8858720ee5c29bfee62dddc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-private-l1-1-0.dll
        • Size 69KB
        • SHA256 c1e206aa4c8014dcfdad15c16f50fbf4e3ce8e76e9406af923131ebc001dd5ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-process-l1-1-0.dll
        • Size 19KB
        • SHA256 36589e9738a9358065d5a72f4276505d6c2f78101508bede05bdcceea46a8cd8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 22KB
        • SHA256 11aca97acda31203aeee496c9f183b49db1c54d0efa48888a15ab4ea47ee080f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 24KB
        • SHA256 cf7bbe93ae75a1c46a38204a6acef71bf2f5e3cd34501825601900e07d3d7b15
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-string-l1-1-0.dll
        • Size 24KB
        • SHA256 b516d1772b75714f039440cf5d070b87a187d2f67b7f891c94cf1c60330fbfa7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-time-l1-1-0.dll
        • Size 20KB
        • SHA256 a4b0f75854949980d410c5da90c36ddb94be292431c89fd3e992f9d5f8ee9983
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\api-ms-win-crt-utility-l1-1-0.dll
        • Size 18KB
        • SHA256 d675ee0c418c4cd7ff0c19c2d945331c8e6072a51abbca548e7d9d2f1bf288dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        application.ini

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\application.ini
        • Size 575B
        • SHA256 1ce18de40a35b8daac20dc11a13c770ba809c8e64f70e82d1f52b476a952a1fa
        • MD5 SHA1 SHA512 TLSH

        blocklist.xml

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\blocklist.xml
        • Size 256KB
        • SHA256 b28e2b33fc031b775290366ed12e661ec5f59e90508359536a48c0702d81f136
        • MD5 SHA1 SHA512 SSDEEP TLSH

        crashreporter-override.ini

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\crashreporter-override.ini
        • Size 909B
        • SHA256 0c44e9c4dd98efe9aef7acb529c622d727b343855afda3a21e76095ae4790bbb
        • MD5 SHA1 SHA512 TLSH

        crashreporter.exe

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\crashreporter.exe
        • Size 239KB
        • SHA256 5ffbabc031cdf8002a718885f497d71e0ea762dbd6b9fb9c5ac20af7f054fb66
        • MD5 SHA1 SHA512 SSDEEP TLSH

        crashreporter.ini

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\crashreporter.ini
        • Size 4KB
        • SHA256 e6423c0b7fc5383feb7039522bb4ab74c36f67e5e7ce86cff026041cce210a53
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\d3dcompiler_47.dll
        • Size 4.7MB
        • SHA256 25344c5f87042e8315ab951dbe2cf8d4148069dc48b2748bead0321eb5ea035f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dependentlibs.list

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\dependentlibs.list
        • Size 519B
        • SHA256 26281ede7f45216576a25dbddcfa505417f2de896012d4002077a3e027beac1d
        • MD5 SHA1 SHA512 TLSH

        freebl3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\freebl3.dll
        • Size 882KB
        • SHA256 efef56ee9cc62ddf6d7be461fc4af3d0d775a4dba2b4cd779e8aa7d5eaec44a7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ldap60.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\ldap60.dll
        • Size 197KB
        • SHA256 3a874902793975bf683bd5d65160019624cbcfc85866a752b60e41efe279fc50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ldif60.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\ldif60.dll
        • Size 17KB
        • SHA256 132fd363af9604d2b5c9eba7921996daa36ea375285d29a65e735da4bea86286
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lgpllibs.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\lgpllibs.dll
        • Size 36KB
        • SHA256 de6dedabbeb5a19c1d67374e67c69e02cd681b29e65ab8df20ee4bab2db86d91
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\libEGL.dll
        • Size 39KB
        • SHA256 5573d329e374539a63b8e02e0f865eecf23644d6f2fb7644395ebc9df7f48346
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\libGLESv2.dll
        • Size 4.6MB
        • SHA256 fa07868bc7a38a2258330b78daea2ca05fac7fd098bfbdd6b7cf0e31c212e1a0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        license.txt

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\license.txt
        • Size 16KB
        • SHA256 cde215e5b42363eb28ca2462c4558ff4807b38f383c537624c31e44657ac58f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        minidump-analyzer.exe

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\core\minidump-analyzer.exe
        • Size 813KB
        • SHA256 725735f1a688e6fc0cea398cc928857dffb84e9f64ad16042d9c985f8c12913b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        setup.exe

        • Path C:\Users\Admin\AppData\Local\Temp\7zS82253279\setup.exe
        • Size 619KB
        • SHA256 e48e71debef347b172e194fe13b6919f59dd347eb1b4377765aa88e1b1b40f65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        InstallOptions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsj73FE.tmp\InstallOptions.dll
        • Size 15KB
        • SHA256 c7fef6457989d97fecc0616a69947927da9d8c493f7905dc8475c748f044f3cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsj73FE.tmp\System.dll
        • Size 12KB
        • SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UAC.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsj73FE.tmp\UAC.dll
        • Size 18KB
        • SHA256 0d21041a1b5cd9f9968fc1d457c78a802c9c5a23f375327e833501b65bcd095d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ioSpecial.ini

        • Path C:\Users\Admin\AppData\Local\Temp\nsj73FE.tmp\ioSpecial.ini
        • Size 1KB
        • SHA256 6b86e6cd2f0dfe9f85d7b4f04c820af290e48f7c91d315bc8820250c3ea57b12
        • MD5 SHA1 SHA512 TLSH

        options.ini

        • Path C:\Users\Admin\AppData\Local\Temp\nsj73FE.tmp\options.ini
        • Size 1KB
        • SHA256 2f23c5c88d73dc2d7ba7b4f3bf010d61d3ccc5453b9d7c3f9b0b9fd54a22c1ce
        • MD5 SHA1 SHA512 TLSH

        shortcuts.ini

        • Path C:\Users\Admin\AppData\Local\Temp\nsj73FE.tmp\shortcuts.ini
        • Size 924B
        • SHA256 3ac86c342d4ffedbc712a1a8f23a987d6dcd1d3ad4b3686e0d808711f2b53170
        • MD5 SHA1 SHA512 TLSH

        memory/4648-0-0x0000000000400000-0x0000000000435000-memory.dmp

        memory/4648-483-0x0000000000400000-0x0000000000435000-memory.dmp