Analysis

  • user interaction
    yes
  • max time kernel
    299s
  • max time network
    301s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    18/08/2026, 01:29

General

  • Target
    axis-device-manager-download.html
  • Size 201KB
  • Sample260818-bwebsstyg1
  • SHA256 c612dd30ab382bac7684aaac85db6d6532821fa6b7ec99036a1275554eed49a9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 13 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies file permissions 1 TTPs 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 5 IoCs
  • Modifies system certificate store 2 TTPs 12 IoCs
  • Scheduled Task/Job: Scheduled Task 1 TTPs 1 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 46 IoCs
  • Suspicious use of WriteProcessMemory 40 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\axis-device-manager-download.html
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3788
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffaf81dc728,0x7ffaf81dc734,0x7ffaf81dc740
      2⤵
        PID:2716
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,18084092155939772003,13319666921289050044,262144 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2000 /prefetch:2
        2⤵
          PID:1232
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,17912028732705049616,15807972324958703043,524288 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2264 /prefetch:3
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:1940
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,8511709502935028764,18165557422383556873,524288 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2540 /prefetch:8
          2⤵
            PID:1300
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,18365128627599485581,664335623494292844,2097152 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3228 /prefetch:1
            2⤵
              PID:5016
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,18189204295959565333,2665899044846024674,2097152 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3316 /prefetch:1
              2⤵
                PID:3588
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4392,i,6394421500341635233,16071303990988206851,2097152 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4436 /prefetch:2
                2⤵
                  PID:1376
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4680,i,6995861803663839555,10905080383049945327,2097152 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4712 /prefetch:1
                  2⤵
                    PID:4692
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6016,i,10267884984126847239,11204462390795236272,524288 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5872 /prefetch:8
                    2⤵
                      PID:2124
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4416,i,9293701028979635843,18432374708544761915,524288 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5244 /prefetch:8
                      2⤵
                        PID:2228
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4868,i,14406950395626183284,14975750223673662445,524288 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5272 /prefetch:8
                        2⤵
                          PID:2108
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5200,i,11227132907599649253,5280437894009135619,524288 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5248 /prefetch:8
                          2⤵
                            PID:4544
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4460,i,4435270181427379529,9251955127773931237,2097152 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5180 /prefetch:1
                            2⤵
                              PID:3972
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4688,i,12231055252464211893,9175470623607686097,2097152 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5204 /prefetch:1
                              2⤵
                                PID:1000
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3948,i,14353920310110615007,3724703710850796385,2097152 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4672 /prefetch:1
                                2⤵
                                  PID:2552
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6128,i,2512797922231624938,12585444578640577182,524288 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4752 /prefetch:8
                                  2⤵
                                    PID:216
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=2984,i,7513068147944983461,920347688094796212,262144 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5248 /prefetch:8
                                    2⤵
                                    • Suspicious behavior: EnumeratesProcesses
                                    PID:1428
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3372,i,335795708998982244,12952599055800076660,524288 --field-trial-handle=2008,i,9234004391067580202,10680013915623291122,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3516 /prefetch:8
                                    2⤵
                                      PID:4128
                                  • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                    "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                    1⤵
                                      PID:3664
                                    • C:\Windows\system32\svchost.exe
                                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                      1⤵
                                        PID:2852
                                      • C:\Windows\System32\rundll32.exe
                                        C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                        1⤵
                                          PID:4236
                                        • C:\Users\Admin\Downloads\AXISDeviceManagerSetup.exe
                                          "C:\Users\Admin\Downloads\AXISDeviceManagerSetup.exe"
                                          1⤵
                                          • Executes dropped EXE
                                          • System Location Discovery: System Language Discovery
                                          • Suspicious use of WriteProcessMemory
                                          PID:4424
                                          • C:\Users\Admin\AppData\Local\Temp\is-UD3QE.tmp\AXISDeviceManagerSetup.tmp
                                            "C:\Users\Admin\AppData\Local\Temp\is-UD3QE.tmp\AXISDeviceManagerSetup.tmp" /SL5="$40262,194465208,124928,C:\Users\Admin\Downloads\AXISDeviceManagerSetup.exe"
                                            2⤵
                                            • Executes dropped EXE
                                            • Drops file in Program Files directory
                                            • System Location Discovery: System Language Discovery
                                            • Suspicious use of FindShellTrayWindow
                                            • Suspicious use of WriteProcessMemory
                                            PID:2152
                                            • C:\Users\Admin\AppData\Local\Temp\is-P7SBO.tmp\AdmSetupSystemRequirements.exe
                                              "C:\Users\Admin\AppData\Local\Temp\is-P7SBO.tmp\AdmSetupSystemRequirements.exe" --FileSystem
                                              3⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:848
                                            • C:\Users\Admin\AppData\Local\Temp\is-P7SBO.tmp\_isetup\_setup64.tmp
                                              helper 105 0x4C8
                                              3⤵
                                              • Executes dropped EXE
                                              PID:1072
                                            • C:\Program Files\Axis Communications\AXIS Device Manager\AdmSetupActions.exe
                                              "C:\Program Files\Axis Communications\AXIS Device Manager\AdmSetupActions.exe" InstallOrUpgradeServerRegistry
                                              3⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:2296
                                            • C:\Program Files\Axis Communications\AXIS Device Manager\AdmSetupActions.exe
                                              "C:\Program Files\Axis Communications\AXIS Device Manager\AdmSetupActions.exe" AutoStart Add "Start AdmAdmin" "C:\Program Files\Axis Communications\AXIS Device Manager\AdmAdmin.exe"
                                              3⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • Suspicious use of WriteProcessMemory
                                              PID:5036
                                              • C:\Windows\SYSTEM32\schtasks.exe
                                                "schtasks.exe" /CREATE /TN "Start AdmAdmin" /XML C:\Users\Admin\AppData\Local\Temp\sh1qetuf.3de /F
                                                4⤵
                                                • Scheduled Task/Job: Scheduled Task
                                                PID:1288
                                            • C:\Windows\system32\icacls.exe
                                              "icacls" "C:\ProgramData\Axis Communications\AXIS Device Manager Server" /inheritance:r /grant:r *S-1-5-32-544:(OI)(CI)F /grant:r *S-1-5-18:(OI)(CI)F
                                              3⤵
                                              • Modifies file permissions
                                              PID:3016
                                            • C:\Program Files\Axis Communications\AXIS Device Manager\AdmSetupActions.exe
                                              "C:\Program Files\Axis Communications\AXIS Device Manager\AdmSetupActions.exe" InstallService "C:\Program Files\Axis Communications\AXIS Device Manager\AdmService.exe" true
                                              3⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:4868
                                            • C:\Program Files\Axis Communications\AXIS Device Manager\AdmSetupActions.exe
                                              "C:\Program Files\Axis Communications\AXIS Device Manager\AdmSetupActions.exe" AutoStart Run "Start AdmAdmin"
                                              3⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • Suspicious use of WriteProcessMemory
                                              PID:2072
                                              • C:\Windows\SYSTEM32\schtasks.exe
                                                "schtasks.exe" /RUN /TN "Start AdmAdmin"
                                                4⤵
                                                  PID:1412
                                              • C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\AdmClient.exe
                                                "C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\AdmClient.exe"
                                                3⤵
                                                • Executes dropped EXE
                                                • Enumerates connected drives
                                                PID:5720
                                          • C:\Program Files\Axis Communications\AXIS Device Manager\AdmAdmin.exe
                                            "C:\Program Files\Axis Communications\AXIS Device Manager\AdmAdmin.exe"
                                            1⤵
                                            • Executes dropped EXE
                                            • Loads dropped DLL
                                            • Suspicious behavior: EnumeratesProcesses
                                            • Suspicious use of FindShellTrayWindow
                                            • Suspicious use of SendNotifyMessage
                                            PID:4848
                                          • C:\Program Files\Axis Communications\AXIS Device Manager\AdmService.exe
                                            "C:\Program Files\Axis Communications\AXIS Device Manager\AdmService.exe"
                                            1⤵
                                            • Executes dropped EXE
                                            • Loads dropped DLL
                                            • Modifies data under HKEY_USERS
                                            • Modifies system certificate store
                                            • Suspicious behavior: EnumeratesProcesses
                                            • Suspicious use of WriteProcessMemory
                                            PID:2124
                                            • C:\Program Files\Axis Communications\AXIS Device Manager\DeviceManagerServer.exe
                                              "C:\Program Files\Axis Communications\AXIS Device Manager\DeviceManagerServer.exe"
                                              2⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • Drops file in System32 directory
                                              • Modifies data under HKEY_USERS
                                              • Modifies system certificate store
                                              PID:2940
                                          • C:\Program Files\Axis Communications\AXIS Device Manager\AdmAdmin.exe
                                            "C:\Program Files\Axis Communications\AXIS Device Manager\AdmAdmin.exe"
                                            1⤵
                                            • Executes dropped EXE
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:4716
                                          • C:\Windows\system32\wbem\WmiApSrv.exe
                                            C:\Windows\system32\wbem\WmiApSrv.exe
                                            1⤵
                                              PID:5128

                                            Network

                                                  MITRE ATT&CK Enterprise v16

                                                  Replay Monitor

                                                  Loading Replay Monitor...

                                                  Downloads

                                                  Axis.ClientCommunication.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Axis.ClientCommunication.dll
                                                  • Size 118KB
                                                  • SHA256 b94ae426d745ef3562296c599189030c0769b257864c0452ad5f0b9e9d6a52f5
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Castle.Core.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Castle.Core.dll
                                                  • Size 76KB
                                                  • SHA256 0376429e87207c83e4ce89c92e21df967cd43e3170e269ec51278d381588a7d3
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  AdmClient.exe

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\AdmClient.exe
                                                  • Size 640KB
                                                  • SHA256 e2b9c2264e033c257ffeaa2ec82c687c8fc87eba2f98137ba0c5bc15bb0dc5ed
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  AdmSetupActions.exe

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\AdmSetupActions.exe
                                                  • Size 37KB
                                                  • SHA256 f5c233c66600f891c305fac50365165255f8f4af79b8d8d441acfa889172e359
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  AutoFac.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\AutoFac.dll
                                                  • Size 216KB
                                                  • SHA256 c24386310cb24870f8ec6f0a7a5038bfbcbf6b9381a7b1134fbabe67f6c732d0
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Axis.DependencyInjection.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Axis.DependencyInjection.dll
                                                  • Size 34KB
                                                  • SHA256 0bc41eea2717014d4a37e9ef0c0e2e34cb17e8d8067c9a7f90e64c10438ef494
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Axis.Firmware.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Axis.Firmware.dll
                                                  • Size 35KB
                                                  • SHA256 471dd89f4e62e98188689b54d4baa3804c794b038900050d66fee2bc8826ec14
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Axis.Net.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Axis.Net.dll
                                                  • Size 264KB
                                                  • SHA256 5122d1e046ce46636710986278dae83cc75df46b5506c8b1708318ec168314a2
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Axis.Remoting.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Axis.Remoting.dll
                                                  • Size 327KB
                                                  • SHA256 22d94e38e4e238c3df3fef71d819cfb6d95580b24011e63253a73648891b729a
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Axis.SystemReport.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Axis.SystemReport.dll
                                                  • Size 50KB
                                                  • SHA256 4f6a2f7dc7bed8d40bdf99f5386970a1d8ecc4577da2489f20c69a0909395dd7
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Axis.Telemetry.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Axis.Telemetry.dll
                                                  • Size 23KB
                                                  • SHA256 65fd01c46f4ec2ee6b147070965e5e71706a4f2867537c7e98f0a4db1b8787bc
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Axis.Themes.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Axis.Themes.dll
                                                  • Size 290KB
                                                  • SHA256 da16369b1c65e58c2b965c06961873113d7b3455a5053f7b5e7ff75826bdfef7
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Axis.UI.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Axis.UI.dll
                                                  • Size 732KB
                                                  • SHA256 7fa5c5ff09f52ae5bcb29cb4137deaabd14ce17f63220c424b04a07f753476a0
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  LicenseAgreement.rtf

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\LicenseAgreement.rtf
                                                  • Size 299KB
                                                  • SHA256 49f20a397d5fed9ae79cd7047f17555f7f377b6518cbdc5b15963f7baf857c56
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Microsoft.ApplicationInsights.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Microsoft.ApplicationInsights.dll
                                                  • Size 158KB
                                                  • SHA256 1eb337eb64ba4c78a0d98b87a39736395f8fb2d005d9b3428132941d22a4beee
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Microsoft.Bcl.AsyncInterfaces.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Microsoft.Bcl.AsyncInterfaces.dll
                                                  • Size 26KB
                                                  • SHA256 80678203bd0203a6594f4e330b22543c0de5059382bb1c9334b7868b8f31b1bc
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Microsoft.Expression.Interactions.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Microsoft.Expression.Interactions.dll
                                                  • Size 89KB
                                                  • SHA256 f3b14defbd05493b8573016b08b86e5b5d53b486b0457fd75f67bf8bff04be38
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Microsoft.Practices.Composite.Presentation.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Microsoft.Practices.Composite.Presentation.dll
                                                  • Size 17KB
                                                  • SHA256 df8cd5f39b2b7466435a21674bb2e7944e7bb822b27ad80badb9aef0b6b19cca
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Microsoft.Practices.Composite.UnityExtensions.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Microsoft.Practices.Composite.UnityExtensions.dll
                                                  • Size 5KB
                                                  • SHA256 898055e0264616690e513e5f85c55a9cd32d1909e380fd72d3c503cc50b570d7
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Microsoft.Practices.Composite.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Microsoft.Practices.Composite.dll
                                                  • Size 19KB
                                                  • SHA256 9c64ccf6a4d22cac29939ac614a49c8a43d064cfddf21e6a3516926183f4164f
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Microsoft.Practices.ObjectBuilder2.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Microsoft.Practices.ObjectBuilder2.dll
                                                  • Size 68KB
                                                  • SHA256 a024e9c3e7ffbb6f8deefaace038c61ce139fd9be6460b9e4d78fd45dff0dbb8
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Microsoft.Practices.Unity.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Microsoft.Practices.Unity.dll
                                                  • Size 68KB
                                                  • SHA256 21352c99eb29869a74987628163df45e7b09841aec73d5473d6f32a9890a3676
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Newtonsoft.Json.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\Newtonsoft.Json.dll
                                                  • Size 695KB
                                                  • SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  System.Buffers.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\System.Buffers.dll
                                                  • Size 20KB
                                                  • SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  System.Memory.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\System.Memory.dll
                                                  • Size 138KB
                                                  • SHA256 bf3fb84664f4097f1a8a9bc71a51dcf8cf1a905d4080a4d290da1730866e856f
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  System.Numerics.Vectors.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\System.Numerics.Vectors.dll
                                                  • Size 113KB
                                                  • SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  System.Runtime.CompilerServices.Unsafe.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\System.Runtime.CompilerServices.Unsafe.dll
                                                  • Size 17KB
                                                  • SHA256 37768488e8ef45729bc7d9a2677633c6450042975bb96516e186da6cb9cd0dcf
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  System.Text.Encodings.Web.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\System.Text.Encodings.Web.dll
                                                  • Size 77KB
                                                  • SHA256 e9c4f5eed186cb129c527c4b8d67d163ea2f2396e9d8b96e30b5e7c12203ce84
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  System.Threading.Tasks.Extensions.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\System.Threading.Tasks.Extensions.dll
                                                  • Size 25KB
                                                  • SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  System.ValueTuple.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\System.ValueTuple.dll
                                                  • Size 24KB
                                                  • SHA256 e905d102585b22c6df04f219af5cbdbfa7bc165979e9788b62df6dcc165e10f4
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  System.Windows.Interactivity.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\System.Windows.Interactivity.dll
                                                  • Size 39KB
                                                  • SHA256 4aace8c8a330ae8429cd8cc1b6804076d3a9ffd633470f91fd36bdd25bb57876
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  WindowsClientApi.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\WindowsClientApi.dll
                                                  • Size 391KB
                                                  • SHA256 2cea30afae2e373f13c38c2fc69b7e896c5bb34ae6d544fec79ebe461ff73abd
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  is-V328U.tmp

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\de\help\is-V328U.tmp
                                                  • Size 1KB
                                                  • SHA256 b0723dbf98d42836913ea4aedf140869ae4bcd92773de72b45419cd8636e16d7
                                                  • MD5 SHA1 SHA512 TLSH

                                                  is-BPMKP.tmp

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\fr\help\is-BPMKP.tmp
                                                  • Size 2KB
                                                  • SHA256 5082a9b61287514cf4a004b8c81e07d315a4d664ce50b17c5892f919bd16ecbf
                                                  • MD5 SHA1 SHA512 TLSH

                                                  is-8F9F3.tmp

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\is-8F9F3.tmp
                                                  • Size 16KB
                                                  • SHA256 6d275221e4476e619555ea15b571008abce89de2676e81de445332ff72612004
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  is-Q4686.tmp

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\is-Q4686.tmp
                                                  • Size 200KB
                                                  • SHA256 c287e9b07a8251828f35914364c89a37db606b0c1d64457f9eb8fa2258f0dee3
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  is-NMN11.tmp

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\Client 5.34.172\it\help\is-NMN11.tmp
                                                  • Size 1KB
                                                  • SHA256 6d3a251a6602198b3e2dade662534d189ab3140ed30034b901c131a39f9fc74d
                                                  • MD5 SHA1 SHA512 TLSH

                                                  DeviceCommunication.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\DeviceCommunication.dll
                                                  • Size 80KB
                                                  • SHA256 e1444b9d39c47b10f437aa23905a157d1a19338a3a6ad7b1f070f19b5a4b6108
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  System.Text.Json.dll

                                                  • Path C:\Program Files\Axis Communications\AXIS Device Manager\System.Text.Json.dll
                                                  • Size 629KB
                                                  • SHA256 86c3f263ae9b4469ab1266c80471087082447eb4a38e6b97bf5e84de15c07a1d
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  ADMSetup.log

                                                  • Path C:\ProgramData\Axis Communications\AXIS Device Manager\5.34.172\DebugLogs\Installation\ADMSetup.log
                                                  • Size 813B
                                                  • SHA256 8cd82c786adf9f71c7b3057cc3e3721bc8a76c12213d6dc4fc7917b443a1fc7d
                                                  • MD5 SHA1 SHA512 TLSH

                                                  AdmSetupSystemRequirements.exe.log

                                                  • Path C:\ProgramData\Axis Communications\AXIS Device Manager\5.34.172\DebugLogs\Installation\AdmSetupSystemRequirements.exe.log
                                                  • Size 945B
                                                  • SHA256 8978023e2848add2a2b6f93c75d54abd236447941e71b83b380ea07624c24942
                                                  • MD5 SHA1 SHA512 TLSH

                                                  BookmarkMergedSurfaceOrdering

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                  • Size 6B
                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                  • MD5 SHA1 SHA512

                                                  BrowsingTopicsState

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                  • Size 414B
                                                  • SHA256 5112fc430aa59e1d8841aebc741d1e88a54d7a2b9467b913b7e4976c2b690bd9
                                                  • MD5 SHA1 SHA512 TLSH

                                                  temp-index

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                  • Size 288B
                                                  • SHA256 eff95f5e7297a46be1122117922dcc67f877998d5a2408cd1ad6e3469bedda92
                                                  • MD5 SHA1 SHA512 TLSH

                                                  the-real-index

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                  • Size 1KB
                                                  • SHA256 95f05b3ef8b5740527426c48e910d9171d0fd3914b2ec8887198b97c91451417
                                                  • MD5 SHA1 SHA512 TLSH

                                                  Network Persistent State

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                  • Size 7KB
                                                  • SHA256 4f371de93de036959a3b7bfd2c593c080ac2a334050f518a186b54400fcaa0c4
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Network Persistent State

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                  • Size 13KB
                                                  • SHA256 61b8e61b42feddb896b10a2d4f29e10d05ac8fc1afb16736ec6cd9a00bb586ef
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Network Persistent State

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                  • Size 14KB
                                                  • SHA256 762c1a1792a214512934080aaf3a77445d01f11fefe01f9fc5625c3e06089ef6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  SCT Auditing Pending Reports

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                  • Size 2B
                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                  • MD5 SHA1 SHA512

                                                  Preferences

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                  • Size 13KB
                                                  • SHA256 94405426d58bbbfaf5b70995d27b6cddd0b2d4e72b847057aa6239453dae81b1
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Preferences

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                  • Size 13KB
                                                  • SHA256 f9ac169345f76eb93ff5145aac06aefd52272181a748c88f46792316f080afcb
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Preferences

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                  • Size 13KB
                                                  • SHA256 c992fffe8dfa1bfc8a91231c8bfe9ec518a231fd1b871e8d94a7389c3e280727
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Preferences

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                  • Size 12KB
                                                  • SHA256 578907bf33bc9cc35c80e2cf819e48fdada267251528bf46b50a3b1d77801f47
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Preferences

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                  • Size 13KB
                                                  • SHA256 4e3a2920d8a99f33a4cec5ba3c3a60a70f3dcb0e049be31cdb8824a0d77dabb7
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Preferences

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                  • Size 12KB
                                                  • SHA256 2bc143ce4c47367ee0e216ef67d1c008159c1467df44849dc85a7e047c77cb56
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Preferences

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                  • Size 12KB
                                                  • SHA256 6a9c8eae8d9ec4c020b1187467a5c4ed65e848c6bedc06edcdd42ad44c53785c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Secure Preferences

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                  • Size 17KB
                                                  • SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  the-real-index

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                  • Size 144B
                                                  • SHA256 dfeb0e804350e5a6d14c420fa47b1add7152157ec0fd3ea20d8e10bdea61e9f5
                                                  • MD5 SHA1 SHA512 TLSH

                                                  the-real-index

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                  • Size 120B
                                                  • SHA256 e7ee909dc9e2a23cdc13fa5b996b5a2cb261f4c7edd5bfb777f92e33df465336
                                                  • MD5 SHA1 SHA512 TLSH

                                                  the-real-index~RFe585530.TMP

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585530.TMP
                                                  • Size 96B
                                                  • SHA256 14b66cc16a2bd7f2e05fc9b1550eb585a03d10cd354795c5057a009b913ea7e4
                                                  • MD5 SHA1 SHA512 TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                  • Size 169KB
                                                  • SHA256 ec115bce793809bb11f73359406cc5258ae1babdde8950e6df40f3483c3324de
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                  • Size 115KB
                                                  • SHA256 2a8a4ab77ac22a15dd118bd28e1fde02a2e13338f0bd06b40614399672cf3195
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                  • Size 117KB
                                                  • SHA256 d1337b6a5821e2cac7aae3f1710bd40bc90fdb3334b361690a753f0329662d3d
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                  • Size 116KB
                                                  • SHA256 29d65312c3c40f9f2c528bdd2394dc4ff3af694a9b5fd2de7daf7438a0e0f239
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                  • Size 116KB
                                                  • SHA256 f4f01b44769cb244ad52a4e6691a2e0ced452cae833129ab4d522a051fe703c3
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  AdmSetupActions.exe.log

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\AdmSetupActions.exe.log
                                                  • Size 1KB
                                                  • SHA256 317c03403e67487405f506e0e91faa8f0403cf2fd9a59a30c4744744573496db
                                                  • MD5 SHA1 SHA512 TLSH

                                                  WMSDKNS.XML.bak

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML.bak
                                                  • Size 9KB
                                                  • SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  cert-e91ec773-248f-4dcb-bd1a-2a0b8456ee46

                                                  • Path C:\Users\Admin\AppData\Local\Temp\cert-e91ec773-248f-4dcb-bd1a-2a0b8456ee46
                                                  • Size 1011B
                                                  • SHA256 2c1f0995e5cd03497ba6cb3a9703a1f728ba990993d22c2a8c8f0882902d2b07
                                                  • MD5 SHA1 SHA512 TLSH

                                                  AdmConfig.dll

                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-P7SBO.tmp\AdmConfig.dll
                                                  • Size 40KB
                                                  • SHA256 d9dcd606b7784b1bd7783e2843466686a413775e3d3e89037175bb836c8547c0
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  AdmSetupSystemRequirements.exe

                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-P7SBO.tmp\AdmSetupSystemRequirements.exe
                                                  • Size 26KB
                                                  • SHA256 0af6930c99b84d02f59b55043c1915e869663b9d49d62b3b309b25724254232a
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  AdmSetupSystemRequirements.exe.config

                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-P7SBO.tmp\AdmSetupSystemRequirements.exe.config
                                                  • Size 1KB
                                                  • SHA256 1dd8f5cfc67175726445f3ffcf626b789368f61c59062a5cbbdd8dc04cde8d3e
                                                  • MD5 SHA1 SHA512 TLSH

                                                  Axis.Core.dll

                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-P7SBO.tmp\Axis.Core.dll
                                                  • Size 124KB
                                                  • SHA256 3ed566df489d18384db2238dc75765f787aeda1e33ba1a5ae586354c5474fce2
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Axis.Log4NetLogger.dll

                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-P7SBO.tmp\Axis.Log4NetLogger.dll
                                                  • Size 28KB
                                                  • SHA256 f1e2285f50aab6229d2c7359a02e117e44ad919ca3f1c558e9a990385130dc38
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  CA.Core.dll

                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-P7SBO.tmp\CA.Core.dll
                                                  • Size 706KB
                                                  • SHA256 8a2af35b11d6fa01ff3dacc05671eea9053283f215df6ded21aaf3749af1a138
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  _setup64.tmp

                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-P7SBO.tmp\_isetup\_setup64.tmp
                                                  • Size 6KB
                                                  • SHA256 388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  log4net.dll

                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-P7SBO.tmp\log4net.dll
                                                  • Size 280KB
                                                  • SHA256 dcc1f1edc4bdfc8ce31859b52a313614979f73932b2ba42bdac6b62a4b638315
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  AXISDeviceManagerSetup.tmp

                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-UD3QE.tmp\AXISDeviceManagerSetup.tmp
                                                  • Size 1.1MB
                                                  • SHA256 579a379b4a50c83683e541c474457b9f28b233e4aa555d765db0d523f8ccc4f9
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  sh1qetuf.3de

                                                  • Path C:\Users\Admin\AppData\Local\Temp\sh1qetuf.3de
                                                  • Size 1KB
                                                  • SHA256 824158d6b9ec049b45656cef0c9791e09883f795f84c9d6a59ecff07c8e76863
                                                  • MD5 SHA1 SHA512 TLSH

                                                  cert-fdb60152-b89f-42f9-bf73-f37ca7c7c75a

                                                  • Path C:\Windows\Temp\cert-fdb60152-b89f-42f9-bf73-f37ca7c7c75a
                                                  • Size 1011B
                                                  • SHA256 50c20493a23ae98f0d92cfab9c7deaff52a75c495c6cfc40f74aad3fe340ed32
                                                  • MD5 SHA1 SHA512 TLSH

                                                  memory/848-437-0x000002384DD40000-0x000002384DD48000-memory.dmp

                                                  memory/848-451-0x0000023868220000-0x000002386826C000-memory.dmp

                                                  memory/848-443-0x00000238680D0000-0x00000238680F2000-memory.dmp

                                                  memory/848-441-0x0000023868160000-0x0000023868212000-memory.dmp

                                                  memory/848-445-0x000002384E290000-0x000002384E29A000-memory.dmp

                                                  memory/848-449-0x00000238680A0000-0x00000238680AC000-memory.dmp

                                                  memory/2124-1974-0x00000221BF420000-0x00000221BF436000-memory.dmp

                                                  memory/2124-2037-0x00000221CA4D0000-0x00000221CA4DA000-memory.dmp

                                                  memory/2124-1978-0x00000221BFB40000-0x00000221BFB7A000-memory.dmp

                                                  memory/2124-2005-0x00000221BFCE0000-0x00000221BFCF4000-memory.dmp

                                                  memory/2124-1979-0x00000221C03B0000-0x00000221C05B8000-memory.dmp

                                                  memory/2124-2047-0x00000221CA7B0000-0x00000221CA7D0000-memory.dmp

                                                  memory/2124-2006-0x00000221BF630000-0x00000221BF640000-memory.dmp

                                                  memory/2124-1980-0x00000221BFA50000-0x00000221BFA66000-memory.dmp

                                                  memory/2124-2042-0x00000221CA650000-0x00000221CA666000-memory.dmp

                                                  memory/2124-2041-0x00000221CA5E0000-0x00000221CA5EC000-memory.dmp

                                                  memory/2124-1988-0x00000221C01A0000-0x00000221C0240000-memory.dmp

                                                  memory/2124-1981-0x00000221BFB80000-0x00000221BFBB0000-memory.dmp

                                                  memory/2124-1977-0x00000221C0090000-0x00000221C019A000-memory.dmp

                                                  memory/2124-2039-0x00000221CA540000-0x00000221CA548000-memory.dmp

                                                  memory/2124-2038-0x00000221CA4C0000-0x00000221CA4CA000-memory.dmp

                                                  memory/2124-1973-0x00000221BFC10000-0x00000221BFCD6000-memory.dmp

                                                  memory/2124-2036-0x00000221CA520000-0x00000221CA536000-memory.dmp

                                                  memory/2124-2029-0x00000221C45D0000-0x00000221C45E8000-memory.dmp

                                                  memory/2124-2028-0x00000221C45A0000-0x00000221C45A8000-memory.dmp

                                                  memory/2124-2027-0x00000221C4590000-0x00000221C4598000-memory.dmp

                                                  memory/2124-2009-0x00000221C0C60000-0x00000221C0CA6000-memory.dmp

                                                  memory/2124-1968-0x00000221BF380000-0x00000221BF394000-memory.dmp

                                                  memory/2124-2019-0x00000221C3EF0000-0x00000221C3F16000-memory.dmp

                                                  memory/2124-2008-0x00000221C0040000-0x00000221C004C000-memory.dmp

                                                  memory/2124-1966-0x00000221BF640000-0x00000221BFA00000-memory.dmp

                                                  memory/2124-1967-0x00000221BF1E0000-0x00000221BF1F0000-memory.dmp

                                                  memory/2124-1970-0x00000221BF240000-0x00000221BF24C000-memory.dmp

                                                  memory/2124-1971-0x00000221BFAA0000-0x00000221BFB3E000-memory.dmp

                                                  memory/2124-1972-0x00000221BFD00000-0x00000221BFEBA000-memory.dmp

                                                  memory/2124-1976-0x00000221BFEC0000-0x00000221BFF72000-memory.dmp

                                                  memory/2124-1975-0x00000221BF3A0000-0x00000221BF3A6000-memory.dmp

                                                  memory/2124-1969-0x00000221BF1F0000-0x00000221BF1FC000-memory.dmp

                                                  memory/2152-2079-0x0000000000400000-0x000000000052D000-memory.dmp

                                                  memory/2152-1522-0x0000000000400000-0x000000000052D000-memory.dmp

                                                  memory/2152-2026-0x0000000000400000-0x000000000052D000-memory.dmp

                                                  memory/2152-461-0x0000000000400000-0x000000000052D000-memory.dmp

                                                  memory/2152-456-0x0000000000400000-0x000000000052D000-memory.dmp

                                                  memory/2152-2046-0x0000000000400000-0x000000000052D000-memory.dmp

                                                  memory/2152-454-0x0000000000400000-0x000000000052D000-memory.dmp

                                                  memory/2152-2089-0x0000000000400000-0x000000000052D000-memory.dmp

                                                  memory/2152-418-0x0000000000400000-0x000000000052D000-memory.dmp

                                                  memory/2152-2003-0x0000000000400000-0x000000000052D000-memory.dmp

                                                  memory/2152-419-0x0000000000400000-0x000000000052D000-memory.dmp

                                                  memory/2152-463-0x0000000000400000-0x000000000052D000-memory.dmp

                                                  memory/2296-1900-0x000001726E900000-0x000001726E90C000-memory.dmp

                                                  memory/2296-1904-0x000001726EC20000-0x000001726EC76000-memory.dmp

                                                  memory/2296-1889-0x00000172544E0000-0x00000172544EC000-memory.dmp

                                                  memory/2296-1902-0x000001726EB80000-0x000001726EBBC000-memory.dmp

                                                  memory/2296-1908-0x000001726ECF0000-0x000001726ED54000-memory.dmp

                                                  memory/2296-1914-0x000001726E920000-0x000001726E930000-memory.dmp

                                                  memory/2296-1916-0x000001726E9A0000-0x000001726E9B6000-memory.dmp

                                                  memory/2296-1912-0x000001726EBC0000-0x000001726EBEA000-memory.dmp

                                                  memory/2296-1910-0x000001726E910000-0x000001726E91A000-memory.dmp

                                                  memory/4424-413-0x0000000000419000-0x000000000041A000-memory.dmp

                                                  memory/4424-411-0x0000000000400000-0x0000000000429000-memory.dmp

                                                  memory/4424-455-0x0000000000400000-0x0000000000429000-memory.dmp

                                                  memory/4424-2092-0x0000000000400000-0x0000000000429000-memory.dmp

                                                  memory/4848-1933-0x0000027892060000-0x0000027892094000-memory.dmp

                                                  memory/4848-1932-0x00000278AA940000-0x00000278AA9FA000-memory.dmp

                                                  memory/4848-2022-0x00000278AB6A0000-0x00000278AB6A8000-memory.dmp

                                                  memory/4848-2023-0x00000278AB6B0000-0x00000278AB6B8000-memory.dmp

                                                  memory/4848-2024-0x00000278AC050000-0x00000278AC058000-memory.dmp

                                                  memory/4848-1952-0x00000278AA7D0000-0x00000278AA7EA000-memory.dmp

                                                  memory/4848-1949-0x00000278AABF0000-0x00000278AAC3C000-memory.dmp

                                                  memory/4848-1987-0x00000278AADA0000-0x00000278AADCA000-memory.dmp

                                                  memory/4848-1989-0x00000278AB2B0000-0x00000278AB2D2000-memory.dmp

                                                  memory/4848-1955-0x00000278920D0000-0x00000278920E0000-memory.dmp

                                                  memory/4848-1986-0x00000278AB270000-0x00000278AB2AA000-memory.dmp

                                                  memory/4848-1999-0x00000278AB670000-0x00000278AB696000-memory.dmp

                                                  memory/4848-1931-0x0000027890280000-0x000002789036E000-memory.dmp

                                                  memory/4848-2040-0x00000278AD220000-0x00000278AD23E000-memory.dmp

                                                  memory/4848-1960-0x00000278AAD50000-0x00000278AAD94000-memory.dmp

                                                  memory/4848-1962-0x00000278AAE50000-0x00000278AAEF4000-memory.dmp

                                                  memory/4848-1982-0x00000278AADF0000-0x00000278AAE40000-memory.dmp

                                                  memory/4848-1984-0x00000278AB1F0000-0x00000278AB228000-memory.dmp

                                                  memory/4848-1983-0x00000278AAAD0000-0x00000278AAADE000-memory.dmp

                                                  memory/4848-2001-0x00000278AAC90000-0x00000278AAC9A000-memory.dmp

                                                  memory/4848-2000-0x00000278AAC80000-0x00000278AAC88000-memory.dmp

                                                  memory/4848-1990-0x00000278AC080000-0x00000278AC5A8000-memory.dmp

                                                  memory/4848-1985-0x00000278AB4F0000-0x00000278AB5A2000-memory.dmp

                                                  memory/4868-1934-0x000001CA6BC00000-0x000001CA6BC0A000-memory.dmp

                                                  memory/4868-1947-0x000001CA6BC50000-0x000001CA6BC62000-memory.dmp

                                                  memory/4868-1948-0x000001CA6C5C0000-0x000001CA6C5FC000-memory.dmp

                                                  memory/5720-2091-0x0000022A7C9C0000-0x0000022A7C9CA000-memory.dmp

                                                  memory/5720-2090-0x0000022A7C980000-0x0000022A7C98C000-memory.dmp

                                                  memory/5720-2086-0x0000022A7D140000-0x0000022A7D94A000-memory.dmp

                                                  memory/5720-2094-0x0000022A7E250000-0x0000022A7E25A000-memory.dmp

                                                  memory/5720-2085-0x0000022A7A3D0000-0x0000022A7A472000-memory.dmp

                                                  memory/5720-2106-0x0000022A7E850000-0x0000022A7E858000-memory.dmp

                                                  memory/5720-2126-0x0000022A7D000000-0x0000022A7D076000-memory.dmp

                                                  memory/5720-2127-0x0000022A7CE40000-0x0000022A7CE5E000-memory.dmp