Analysis

  • user interaction
    yes
  • max time kernel
    272s
  • max time network
    246s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    06/08/2026, 04:17

General

  • Target
    Y17C_C1_ULWT_PP-inst-J1.exe
  • Size 437.1MB
  • Sample260806-ewq75sshkc
  • SHA256 8e07e94d955f0a4081f218076ec02fb27ae9e603c178b31dfefd2c9dbaa59560
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Run Powershell and hide display window.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 54 IoCs
  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 8 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 56 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 10 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Y17C_C1_ULWT_PP-inst-J1.exe
    "C:\Users\Admin\AppData\Local\Temp\Y17C_C1_ULWT_PP-inst-J1.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1880
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden -ExecutionPolicy Bypass -File .\setup.ps1
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1472
      • C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\start.exe
        "C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\start.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:3120
        • C:\Windows\SysWOW64\msiexec.exe
          "C:\Windows\system32\msiexec.exe" /i "C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\\Msi\AppLogLib.msi" /q
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of SetWindowsHookEx
          PID:5500
        • C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\InstUI.exe
          "C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\\InstUI.exe"
          4⤵
          • Enumerates connected drives
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Checks SCSI registry key(s)
          PID:2716
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Adds Run key to start application
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3208
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 1BC8D614D797CCA26F88FD93530A4587 E Global\MSI0000
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4312
      • C:\Windows\system32\pnputil.exe
        -a "C:\Program Files (x86)\Brother\DriverTemp\M17A\Printer\BRPRM17A.INF"
        3⤵
        • Drops file in Windows directory
        PID:2524
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 4AD1E6D81ADB0034B5425357914D9600 E Global\MSI0000
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4476
      • C:\Windows\system32\PnPUtil.exe
        -a "C:\Program Files (x86)\Brother\DriverTemp\M17A\Scanner\brimm17a.inf"
        3⤵
        • Drops file in Windows directory
        PID:2252
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 1EAAA8B5AEE7F21F3DD05C5574A1C519 E Global\MSI0000
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1360
      • C:\Windows\system32\PnPUtil.exe
        -a "C:\Program Files (x86)\Brother\DriverTemp\M17A\Port\brpom17a.inf"
        3⤵
        • Drops file in Windows directory
        PID:5684
  • C:\Windows\system32\DrvInst.exe
    DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{fd3af6ba-e4a3-ff49-bac8-0d7a246dfdd7}\BRPRM17A.INF" "9" "47a8c61a3" "0000000000000174" "WinSta0\Default" "0000000000000184" "208" "C:\Program Files (x86)\Brother\DriverTemp\M17A\Printer"
    1⤵
    • Drops file in System32 directory
    • Drops file in Windows directory
    • Checks SCSI registry key(s)
    • Modifies data under HKEY_USERS
    PID:4016
  • C:\Windows\system32\DrvInst.exe
    DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{dd46f7a8-f2da-c645-a9cd-98e7ddc88dbf}\brimm17a.inf" "9" "44a32f6af" "0000000000000188" "WinSta0\Default" "0000000000000174" "208" "C:\Program Files (x86)\Brother\DriverTemp\M17A\Scanner"
    1⤵
    • Drops file in System32 directory
    • Drops file in Windows directory
    • Checks SCSI registry key(s)
    • Modifies data under HKEY_USERS
    PID:1988
  • C:\Windows\system32\DrvInst.exe
    DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{5518fdf9-7297-7349-a4ea-fe48f3e3d453}\brpom17a.inf" "9" "4e6a93217" "0000000000000178" "WinSta0\Default" "0000000000000170" "208" "C:\Program Files (x86)\Brother\DriverTemp\M17A\Port"
    1⤵
    • Drops file in System32 directory
    • Drops file in Windows directory
    • Checks SCSI registry key(s)
    • Modifies data under HKEY_USERS
    PID:4196

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        e5a0709.rbs

        • Path C:\Config.Msi\e5a0709.rbs
        • Size 8KB
        • SHA256 72658fb2448c2d7203a348ac3df5c3714d4d0b706b8148e90921e26a136f817f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e5a070e.rbs

        • Path C:\Config.Msi\e5a070e.rbs
        • Size 58KB
        • SHA256 b4cfcf80f3e5c1a822453c5f82ed70648aadc2c8c5fe60ec8605b419ed30d378
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e5a0713.rbs

        • Path C:\Config.Msi\e5a0713.rbs
        • Size 37KB
        • SHA256 3fc8d8cd45d7d2714dea6992bbf5f576b441276393729922984b36b14f7fea5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e5a0718.rbs

        • Path C:\Config.Msi\e5a0718.rbs
        • Size 10KB
        • SHA256 912a1af1b064d30ceaeaf765fa3d21493d3527b444ef95f75ca91fed883514db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BRSHL2390DW17A.DSI

        • Path C:\PROGRA~2\Brother\DRIVER~1\M17A\Printer\BRSHL2390DW17A.DSI
        • Size 3KB
        • SHA256 dd33788b595f259e71c35835e9a0f675d94da7c29ac7d4316ac201ce728181d0
        • MD5 SHA1 SHA512 TLSH

        BRSMB7715DW17A.DSI

        • Path C:\PROGRA~2\Brother\DRIVER~1\M17A\Printer\BRSMB7715DW17A.DSI
        • Size 3KB
        • SHA256 81f5499150bdf4e760a9683e0e07cad17e3b3e77396a57da5ca80715e6106338
        • MD5 SHA1 SHA512 TLSH

        BRSML2710DW17A.DSI

        • Path C:\PROGRA~2\Brother\DRIVER~1\M17A\Printer\BRSML2710DW17A.DSI
        • Size 3KB
        • SHA256 e1a57893a05d3dd9b3f30bde0d2452865f58a1bc744bb9e66e78e1de714fc147
        • MD5 SHA1 SHA512 TLSH

        BRSPB7520DW17A.DSI

        • Path C:\PROGRA~2\Brother\DRIVER~1\M17A\Printer\BRSPB7520DW17A.DSI
        • Size 3KB
        • SHA256 b31efaaa5b118a64ba1970fd407d81f9b7bd70db00b69405ea5aba4674ab447b
        • MD5 SHA1 SHA512 TLSH

        BRSPL2550DN17A.DSI

        • Path C:\PROGRA~2\Brother\DRIVER~1\M17A\Printer\BRSPL2550DN17A.DSI
        • Size 3KB
        • SHA256 bece2f0de8407c5c9f4a972b1d18b46ae4b27b731465677afa7e2d4391a192d6
        • MD5 SHA1 SHA512 TLSH

        BRSPL2551DN17A.DSI

        • Path C:\PROGRA~2\Brother\DRIVER~1\M17A\Printer\BRSPL2551DN17A.DSI
        • Size 3KB
        • SHA256 ccfda9305a72cd7a6e57541a2cc3c95868f570ac5fa6b4f01d7bc5cd95d3ee4d
        • MD5 SHA1 SHA512 TLSH

        BRPRM17A.INF

        • Path C:\Program Files (x86)\Brother\DriverTemp\M17A\Printer\BRPRM17A.INF
        • Size 31KB
        • SHA256 a0bae49c0622ac1869b715e71a462edccc7916d7e9639e74cfcf25d5045ee6f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        brem7490d17a.da_

        • Path C:\Program Files (x86)\Brother\DriverTemp\M17A\Printer\brem7490d17a.da_
        • Size 65B
        • SHA256 df130ae450cebb479ca59e2352f02db02549e3b9acbed6eda59a683eff1484a5
        • MD5 SHA1 SHA512 TLSH

        setup.lnk

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup.lnk
        • Size 1KB
        • SHA256 508a36cb0078a2e061ebb047a77282afb7f5c730733d33b6ee229b6669e7495f
        • MD5 SHA1 SHA512 TLSH

        setup.ps1

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup.ps1
        • Size 984B
        • SHA256 cecf97339803fc54864e173fd45fe5f2232721f6254090eec4eec3967df54d54
        • MD5 SHA1 SHA512 TLSH

        HowToGuide.msi

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Msi\HowToGuide.msi
        • Size 452KB
        • SHA256 7679567f787c91369c583069331fcd9d82f7db2e0dd290df84e39d555e532ed4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UsbRepairTool.msi

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Msi\UsbRepairTool.msi
        • Size 2.1MB
        • SHA256 d8041ed4d1f2b131571f1734e7d7e04ce602e2219c97e4265b373c0029d9cc4c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        brpsm17a.msi

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Msi\brpsm17a.msi
        • Size 9.9MB
        • SHA256 6a27c4c35e7e3c4afe33f4d8ae6d3b26f0cf3e26072d40b589079e8340f10c90
        • MD5 SHA1 SHA512 SSDEEP TLSH

        basic.css

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\chn\basic.css
        • Size 97B
        • SHA256 3617f30095549ea4832f0fb7daa20438915719a70fc85a1f35b1566e1e55ee4a
        • MD5 SHA1 SHA512 TLSH

        copy.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\chn\copy.html
        • Size 182B
        • SHA256 24297c7ae73833e7fafe282615e50769120765833f01c1b34bbb53305347a028
        • MD5 SHA1 SHA512 TLSH

        accesspoint.gif

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\chn\img\accesspoint.gif
        • Size 2KB
        • SHA256 e934d1c5865dc4efda1637e77006b639f1a808d68baaa1c88ed43afc679371a7
        • MD5 SHA1 SHA512 TLSH

        aosslogo.gif

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\chn\img\aosslogo.gif
        • Size 2KB
        • SHA256 2de1e57769251429bdd10c36273ce9177cfedf2ffe6da697bae4b3150151eedb
        • MD5 SHA1 SHA512 TLSH

        apseal.gif

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\chn\img\apseal.gif
        • Size 6KB
        • SHA256 9d821bba7056a01a5a6f1050fd56edbd07aa070ec63bb0c2bd39b5d95ce2f6ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        books.gif

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\chn\img\books.gif
        • Size 2KB
        • SHA256 aaee80aaf4bc8538e35935d6b878c0d810ec073c1493c038914d31ccc47dd397
        • MD5 SHA1 SHA512 TLSH

        check.jpg

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\chn\img\check.jpg
        • Size 4KB
        • SHA256 406b165bc951fb63868a5f6b97cc83a022e904d3e657d14efcaf42073cef90b8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        key.gif

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\chn\img\key.gif
        • Size 1KB
        • SHA256 62f335a63a7d9b70c226748bfbe07de6d0e729f5468056519dc96585162e445c
        • MD5 SHA1 SHA512 TLSH

        wireless_bar.gif

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\chn\img\wireless_bar.gif
        • Size 6KB
        • SHA256 8929917e98204cb4b2b602b2b53b3f2c654d7d67246dfafdac3306f87ad9d29d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wireless_bar2.gif

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\chn\img\wireless_bar2.gif
        • Size 77B
        • SHA256 311beffab014b3e860b738ff7c6e0a39a87967b6872d48403bd14a12aabfbfb8
        • MD5 SHA1 SHA512 TLSH

        wpsLogo.gif

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\chn\img\wpsLogo.gif
        • Size 4KB
        • SHA256 4739175471bf56fe962a5369d2185c96e3573c2a6e3ba89ffd36d72667e9d59a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        eng.txt

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\eng.txt
        • Size 7KB
        • SHA256 d363525e04846fa7c35ee807c46c1f06aea4db9c8cfddc8f799a333997dd082c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        glossary.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\glossary.html
        • Size 6KB
        • SHA256 fcc55ea1f1008572f84539f9286f9984e60f5728d466527c63ab58a0ce23fc5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        help_authentication.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\help_authentication.html
        • Size 5KB
        • SHA256 827e81d0c45db8bde6a75c0ab281fdd57d403184ce6f2f1f7051f0a9c5ec6dac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        help_available_networks.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\help_available_networks.html
        • Size 2KB
        • SHA256 53b21bc08aa554a2e6a0f302d8287a90be0e921e31ef0f5375d5997fde7262bc
        • MD5 SHA1 SHA512 TLSH

        help_certificate.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\help_certificate.html
        • Size 3KB
        • SHA256 b538f9ae6dddc1bb71987aa52138b0e0ebbb8fd99d3dc137c779f2e13c6dd01a
        • MD5 SHA1 SHA512 TLSH

        help_howto_networkkey.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\help_howto_networkkey.html
        • Size 1KB
        • SHA256 1ba89513429e8cad2ccb53bafdd69cce6ae3a9f9f7022953b47543ffe6c00813
        • MD5 SHA1 SHA512 TLSH

        help_howto_ssid.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\help_howto_ssid.html
        • Size 1KB
        • SHA256 bca4ee51dc48e9a52bbba81b99fe38d81be28c0fc147e2d2a9d496c18916e751
        • MD5 SHA1 SHA512 TLSH

        help_ip_configuration.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\help_ip_configuration.html
        • Size 1KB
        • SHA256 d498550cbda1d6841aa1b5bae06cd92c9bed8bad0a147b495028414c82a31548
        • MD5 SHA1 SHA512 TLSH

        help_leap_authentication.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\help_leap_authentication.html
        • Size 1KB
        • SHA256 cb138938a9e0dc6ba554515c43479ee6e687024fd154087d80e95bf70da14524
        • MD5 SHA1 SHA512 TLSH

        help_network_key.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\help_network_key.html
        • Size 1KB
        • SHA256 ccb17b09682ec3562d0161a3928813ac002034ac81fdeb7dc1377da6e86ce468
        • MD5 SHA1 SHA512 TLSH

        help_network_name.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\help_network_name.html
        • Size 1KB
        • SHA256 55dc7be0ee59d9e8b753bcf9358b45fe2db6678293b9456bd8f1f5d16478447f
        • MD5 SHA1 SHA512 TLSH

        help_settings_confirmation.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\help_settings_confirmation.html
        • Size 1KB
        • SHA256 d009b546a119267ed5d36ba2c3b2d2fad391177885ebf60cc18f8b299fa4a763
        • MD5 SHA1 SHA512 TLSH

        top_bar.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\top_bar.html
        • Size 1KB
        • SHA256 b8556551b761c4d58548fff89e0739464f3d6c1b4b3d4a2f24cfc713b4b8e875
        • MD5 SHA1 SHA512 TLSH

        troubleshooting.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\troubleshooting.html
        • Size 9KB
        • SHA256 bfdb9fa3fc44a1fcc80b5926158b83e7f9127b2b3ea562d879eddbf3c9396105
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wdsw.ini

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\eng\wdsw.ini
        • Size 739B
        • SHA256 5046d1412d71f38a73f535651dfac1353cdc603f0e1c3d4e6e3fcbb7b3cf042d
        • MD5 SHA1 SHA512 TLSH

        help_automatic_step.html

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\jpneng\help_automatic_step.html
        • Size 2KB
        • SHA256 340465d84b0b9f2b0d7791e23157cc1d93f046d71972bcf0473711d5b05edcba
        • MD5 SHA1 SHA512 TLSH

        eng.txt

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\wlan_assistant\eng\eng.txt
        • Size 2KB
        • SHA256 1156cf85bee9f5d4ea39890fb592ffae46390251fe445aa721040b2a250eaf79
        • MD5 SHA1 SHA512 TLSH

        waw.ini

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\Install\Wlan_wiz\wlan_assistant\eng\waw.ini
        • Size 513B
        • SHA256 4a2f635eb558db98a7470d593c43631b25ad0c9ec8b4751b404880cc618b9263
        • MD5 SHA1 SHA512 TLSH

        BolService.dll

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\BolService.dll
        • Size 19KB
        • SHA256 fc34c1da82ac57b2b598c636f630a7a2789fab4c548943794f1f0382432dd990
        • MD5 SHA1 SHA512 SSDEEP TLSH

        InstUI.INI

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\InstUI.INI
        • Size 388B
        • SHA256 37153aede0461709b048153b1dd1a4092c7bfde8dcbfafbbb56ca5bbe083dbff
        • MD5 SHA1 SHA512 TLSH

        InstUI.exe

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\InstUI.exe
        • Size 2.0MB
        • SHA256 27edb53e95d4a76849712f9579b74fdac01f33b1e43c7db0e21a46ae3e96de84
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AppLogLib.msi

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\Msi\AppLogLib.msi
        • Size 316KB
        • SHA256 b0d576dbc278a96b913fc466c2f408dd9bc58f05ad030457742b67cf1f210cf5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Resource.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\Resource.dat
        • Size 613KB
        • SHA256 fe1c719139dab60ceadb669a8d988c6b568135bb119f5f0ff84ad8bd38be9e1e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Start.ini

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\Start.ini
        • Size 616B
        • SHA256 f4d6471b6c37f7f05ad1a644f7f0774792b1af22a9782cf39bf60e0a1a959930
        • MD5 SHA1 SHA512 TLSH

        connectionType_LAN.png

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\image\connectionType_LAN.png
        • Size 16KB
        • SHA256 92fffc4f3b715711e95f7f3c147a43698c6ef3c2bff3898cb1f80cc322c89844
        • MD5 SHA1 SHA512 SSDEEP TLSH

        connectionType_USB.png

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\image\connectionType_USB.png
        • Size 22KB
        • SHA256 3dca42cf0b59e38e17766c3ee6b1d0607aa7ac959484b290df063ad0d93efa61
        • MD5 SHA1 SHA512 SSDEEP TLSH

        connectionType_Wifi.png

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\image\connectionType_Wifi.png
        • Size 19KB
        • SHA256 973d8b581fdbe4b3d3214f932226e83ff485a4510eba38225e295b5c8be509b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        langaru.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langaru.dat
        • Size 2KB
        • SHA256 b12f8f209664738885918ca9f2b94e77b83adde89805806a6bf7d23bf6fada34
        • MD5 SHA1 SHA512 TLSH

        langbul.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langbul.dat
        • Size 2KB
        • SHA256 a074d99302d8c63d4cb27668ebde8abbb73ec44eaa48e2364336c92a22ca61b8
        • MD5 SHA1 SHA512 TLSH

        langchn.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langchn.dat
        • Size 2KB
        • SHA256 c7524f50966c80e85ab0ea407877f5e668643853f5e120801defe7df3d43bfb6
        • MD5 SHA1 SHA512 TLSH

        langchneng.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langchneng.dat
        • Size 2KB
        • SHA256 e3f97ee06562105efbfd40e5ab3623a2ce526effc30aaf2304e6e761e31e9896
        • MD5 SHA1 SHA512 TLSH

        langcht.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langcht.dat
        • Size 2KB
        • SHA256 a84e57318c3492173ff26846069266b51697e22640baae51f7e3ffaf1e1feebc
        • MD5 SHA1 SHA512 TLSH

        langcze.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langcze.dat
        • Size 2KB
        • SHA256 b96fb73d0a1511fecbb09e2915949116c2fb75ea99455b2483dd03a8a00c80e9
        • MD5 SHA1 SHA512 TLSH

        langdan.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langdan.dat
        • Size 2KB
        • SHA256 9f2b7cd9db2e1940bf59f25f306f4afe7622da26e20b18a94dd83a18e9eb9731
        • MD5 SHA1 SHA512 TLSH

        langdut.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langdut.dat
        • Size 2KB
        • SHA256 6d1f2129a8b4072adbbf9c0344dd59752c2155c5985f25e77310cc53ddff3387
        • MD5 SHA1 SHA512 TLSH

        langeng.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langeng.dat
        • Size 2KB
        • SHA256 6b5523c90fad6c2a88717e43d955defa804e707ab22b583688470df1ec35ba78
        • MD5 SHA1 SHA512 TLSH

        langfin.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langfin.dat
        • Size 2KB
        • SHA256 5075fcdb5604421c5f50d1d65fe3bf61b68b947147726fbed8e9c18c7135a70d
        • MD5 SHA1 SHA512 TLSH

        langfrc.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langfrc.dat
        • Size 2KB
        • SHA256 c070c97ebb90b7bf2171fa0e94200d721ac50da684b94191f76be911528991b9
        • MD5 SHA1 SHA512 TLSH

        langfre.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langfre.dat
        • Size 2KB
        • SHA256 2d246586705640e0c24918d8802233a8dc40d46818081109575a35227eea3da1
        • MD5 SHA1 SHA512 TLSH

        langger.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langger.dat
        • Size 2KB
        • SHA256 80b40276fe4d6b4ed2f54ac77f91edd10cdbba21128e2ee1afa141a67f95d81a
        • MD5 SHA1 SHA512 TLSH

        langhrv.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langhrv.dat
        • Size 2KB
        • SHA256 a0cf3232e82acdfd252c950794f11eb8bc9e0abdf7d1bd45b0218e14e738bfe1
        • MD5 SHA1 SHA512 TLSH

        langhun.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langhun.dat
        • Size 2KB
        • SHA256 b7b16af145aab5e5108f1dc582ea6847c230e25ed2ea9bf84079498954f5f2f2
        • MD5 SHA1 SHA512 TLSH

        langind.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langind.dat
        • Size 2KB
        • SHA256 1fd66f0514855e8534a1ac5ae70851ed02fd8c88a7a8877c8a167b9c47437e92
        • MD5 SHA1 SHA512 TLSH

        langita.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langita.dat
        • Size 2KB
        • SHA256 2c3321c7eec72e5aee7c594effb01a1801c08989ae44fca2a3b2979c0668963a
        • MD5 SHA1 SHA512 TLSH

        langjpn.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langjpn.dat
        • Size 2KB
        • SHA256 45e9463e6d132d7a356d6efe570b86e1490b486a78acc2a067010eb701f0c5b4
        • MD5 SHA1 SHA512 TLSH

        langkor.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langkor.dat
        • Size 2KB
        • SHA256 342cd0c2eca36578dbdd80e80db499d9ed5533b64afeff97493fbe16b8c5832e
        • MD5 SHA1 SHA512 TLSH

        langnor.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langnor.dat
        • Size 2KB
        • SHA256 812f377556b0df4e190e01ae380c479c7de9f8d5e794bc378248e0135c318d03
        • MD5 SHA1 SHA512 TLSH

        langpol.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langpol.dat
        • Size 2KB
        • SHA256 351fcb387de9a4470af8a974d744715ce4a4ea459669081f4a1804d8bfde3603
        • MD5 SHA1 SHA512 TLSH

        langpor.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langpor.dat
        • Size 2KB
        • SHA256 2c1d51e7190cdb2b48d30e0192474b8e869c6be5ecdf7b6c24e845766e7493d0
        • MD5 SHA1 SHA512 TLSH

        langptb.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langptb.dat
        • Size 2KB
        • SHA256 0050296c68bbe67dde7a3f2e05417d54dee2aff6c1c8d434566cadcd24fee6a9
        • MD5 SHA1 SHA512 TLSH

        langrom.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langrom.dat
        • Size 2KB
        • SHA256 bb00bb759cc79c20a81e9cd119e34e46f39acf70f3dac6d7ce362bbf2bac8f35
        • MD5 SHA1 SHA512 TLSH

        langrus.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langrus.dat
        • Size 2KB
        • SHA256 abaa89388fcf78ab960930261786a50a3b4a05c03fa47f5497292c1c8b09776a
        • MD5 SHA1 SHA512 TLSH

        langslv.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langslv.dat
        • Size 2KB
        • SHA256 5621207b351840aaf3c95dd2301a9e5cf178eff902cb475898919c66873f296f
        • MD5 SHA1 SHA512 TLSH

        langspa.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langspa.dat
        • Size 2KB
        • SHA256 5281ebfe2c947474e2eddc126c9137414824b18bdcef90b777e5d3125f29c264
        • MD5 SHA1 SHA512 TLSH

        langsrl.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langsrl.dat
        • Size 2KB
        • SHA256 7d98e462e284926b9697724b6ad939bcb7bff980c5e47f598dc8b5200b790185
        • MD5 SHA1 SHA512 TLSH

        langsvk.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langsvk.dat
        • Size 2KB
        • SHA256 872b5a859f7663e5d819240dad391353dad83e570def13d906fe0d9978138e30
        • MD5 SHA1 SHA512 TLSH

        langswe.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langswe.dat
        • Size 2KB
        • SHA256 85a7764f5e7985a7560ea151885715b72419d3c996b57ee4ce163e507cc9b272
        • MD5 SHA1 SHA512 TLSH

        langtha.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langtha.dat
        • Size 2KB
        • SHA256 93dc7294beaf2033a24679741dd75458d7619f88a7046e58db2b3d629ade42f0
        • MD5 SHA1 SHA512 TLSH

        langtrk.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langtrk.dat
        • Size 2KB
        • SHA256 bd6d66cdf61634f56fde13cf7e4b5c3d6e15c22ec084f5abf4c04098c15fc891
        • MD5 SHA1 SHA512 TLSH

        langukr.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langukr.dat
        • Size 2KB
        • SHA256 5252b01d971f70cb8d95947bbbefed240ea5a60c7c738b294f05b43518774360
        • MD5 SHA1 SHA512 TLSH

        langusa.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langusa.dat
        • Size 2KB
        • SHA256 0d47a75aa181f57f92356d69f311ed8752990ed7460f1190210517a4ad681e87
        • MD5 SHA1 SHA512 TLSH

        langvit.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\lang\langvit.dat
        • Size 2KB
        • SHA256 bd39850633629103124bb0efc5609eea592a62813d504665464fad03aa9dc0d5
        • MD5 SHA1 SHA512 TLSH

        license.txt

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\license\eng\license.txt
        • Size 20KB
        • SHA256 17e31f9488ea475df2f0fa307f5d0eb6ed84429807eac45b05e427dde4f41995
        • MD5 SHA1 SHA512 SSDEEP TLSH

        brprm17a.msi

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\msi\brprm17a.msi
        • Size 21.6MB
        • SHA256 9ae62a579b021906c18731390a2d2726eeaafdb889d445255eaed37634a3e2f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        series001.dat

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\series\series001.dat
        • Size 2KB
        • SHA256 476530010a392b4caa47f67e1b0f646f8e60fafdcb1982323956b85772d21b65
        • MD5 SHA1 SHA512 TLSH

        start.exe

        • Path C:\Program Files (x86)\Brother\package\Y17C_C1_ULWT_PP-inst-J1\setup\install\start.exe
        • Size 1.7MB
        • SHA256 1d60e8d416404743a158ee8062394c4a0ab3fba84ed04570145680c2efd4586f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SET460A.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\{fd3af6ba-e4a3-ff49-bac8-0d7a246dfdd7}\SET460A.tmp
        • Size 68B
        • SHA256 d171988d8e522eb90a5f914656622f1cda8da0979e12e2116bcd5f07bc5bf826
        • MD5 SHA1 SHA512 TLSH

        MSI42B0.tmp

        • Path C:\Windows\Installer\MSI42B0.tmp
        • Size 302KB
        • SHA256 6ef5621492ebfc7e52b09e5f28991dde823c8b54e60712a10664cd65115e28e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e5a0710.msi

        • Path C:\Windows\Installer\e5a0710.msi
        • Size 13.9MB
        • SHA256 712714a05506e314d942bab1df0afcdacacd109311b46e833e77a6356acf3d96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        brimm17a.inf_amd64_40252e411a818061.ini

        • Path C:\Windows\System32\DriverStore\FileRepository\brimm17a.inf_amd64_40252e411a818061.ini
        • Size 1KB
        • SHA256 d25bf859e1fffff80e77528bdd2339708c1430904e5f9bb5cb8ca82893a11b8e
        • MD5 SHA1 SHA512 TLSH

        brimm17a.inf_amd64_40252e411a818061.ini

        • Path C:\Windows\System32\DriverStore\FileRepository\brimm17a.inf_amd64_40252e411a818061.ini
        • Size 5KB
        • SHA256 b31ba4e83663c9f0e60f0cfd009e55e954e96bde078b505a2a624bd8d7a7927e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        brimm17a.inf_amd64_40252e411a818061.ini

        • Path C:\Windows\System32\DriverStore\FileRepository\brimm17a.inf_amd64_40252e411a818061.ini
        • Size 14KB
        • SHA256 b17e36497adf582fa0ace3bf424d419a89975c9ea9ec3df68e0e387f00fac508
        • MD5 SHA1 SHA512 SSDEEP TLSH

        brpom17a.inf_amd64_3da1f56fbb2df48b.ini

        • Path C:\Windows\System32\DriverStore\FileRepository\brpom17a.inf_amd64_3da1f56fbb2df48b.ini
        • Size 835B
        • SHA256 b43ec4c582007a1a7838e2e79431a82c98ec97ffd1287e0f22798425736a14bf
        • MD5 SHA1 SHA512 TLSH

        brprm17a.inf_amd64_1457f6b077b53c36.ini

        • Path C:\Windows\System32\DriverStore\FileRepository\brprm17a.inf_amd64_1457f6b077b53c36.ini
        • Size 2KB
        • SHA256 fcf475047e3e351a35ff8ee8315ad8ed232431a02014ac2f57b15a3e60001217
        • MD5 SHA1 SHA512 TLSH

        brprm17a.inf_amd64_1457f6b077b53c36.ini

        • Path C:\Windows\System32\DriverStore\FileRepository\brprm17a.inf_amd64_1457f6b077b53c36.ini
        • Size 6KB
        • SHA256 e5db21bfd911b373969ca800d9cfe53f7baf1a046d5cdf1aa03ba545095922fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        brprm17a.inf_amd64_1457f6b077b53c36.ini

        • Path C:\Windows\System32\DriverStore\FileRepository\brprm17a.inf_amd64_1457f6b077b53c36.ini
        • Size 20KB
        • SHA256 70389eb1962131f29e54640b9c9ae94475e76e95b7d2c110a8a026729c6af1e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/1472-2855-0x0000000006420000-0x0000000006486000-memory.dmp

        memory/1472-2851-0x00000000743C0000-0x0000000074B7C000-memory.dmp

        memory/1472-2864-0x0000000006EA0000-0x0000000006EC2000-memory.dmp

        memory/1472-2859-0x0000000006910000-0x000000000692E000-memory.dmp

        memory/1472-2858-0x0000000006490000-0x00000000067EB000-memory.dmp

        memory/1472-2854-0x0000000006330000-0x0000000006396000-memory.dmp

        memory/1472-2865-0x0000000008180000-0x000000000873A000-memory.dmp

        memory/1472-2853-0x0000000005B40000-0x0000000005B62000-memory.dmp

        memory/1472-2852-0x00000000743C0000-0x0000000074B7C000-memory.dmp

        memory/1472-2860-0x0000000006970000-0x00000000069BC000-memory.dmp

        memory/1472-2939-0x00000000743C0000-0x0000000074B7C000-memory.dmp

        memory/1472-2849-0x0000000003580000-0x00000000035B6000-memory.dmp

        memory/1472-2848-0x00000000743D2000-0x00000000743D3000-memory.dmp

        memory/1472-2938-0x00000000743D2000-0x00000000743D3000-memory.dmp

        memory/1472-2850-0x0000000005C30000-0x000000000627A000-memory.dmp

        memory/1472-2863-0x0000000006E50000-0x0000000006E6A000-memory.dmp

        memory/1472-2862-0x0000000007B20000-0x0000000007BB6000-memory.dmp

        memory/2716-2935-0x0000000008430000-0x0000000008438000-memory.dmp

        memory/2716-2896-0x0000000005EB0000-0x0000000005F42000-memory.dmp

        memory/2716-2888-0x0000000000210000-0x000000000040E000-memory.dmp

        memory/2716-2893-0x0000000004DA0000-0x0000000004DAC000-memory.dmp

        memory/2716-2936-0x00000000084F0000-0x000000000852E000-memory.dmp

        memory/2716-2937-0x0000000008470000-0x000000000847E000-memory.dmp

        memory/2716-4232-0x0000000000C80000-0x0000000000C9C000-memory.dmp

        memory/2716-4233-0x0000000009020000-0x000000000902A000-memory.dmp