Analysis

  • max time kernel
    149s
  • max time network
    185s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/08/2026, 12:14

General

  • Target
    Clip Studio Paint EX v4.0.0/CSP_400w_setup.exe
  • Size 442.4MB
  • Sample260822-pegmgsyvay
  • SHA256 5f0da6c57f6428f5b2c3f456e96484d05565c2ce0603c7b96654fccdd5c1a97e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 8 IoCs
  • Loads dropped DLL 23 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies registry class 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 11 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Clip Studio Paint EX v4.0.0\CSP_400w_setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Clip Studio Paint EX v4.0.0\CSP_400w_setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1352
    • C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\CSP_400w_setup.exe
      C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\CSP_400w_setup.exe -package:"C:\Users\Admin\AppData\Local\Temp\Clip Studio Paint EX v4.0.0\CSP_400w_setup.exe" -no_selfdeleter -IS_temp -media_path:"C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\" -tempdisk1folder:"C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\" -IS_OriginalLauncher:"C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\CSP_400w_setup.exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4404
      • C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\ISBEW64.exe
        C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{0F0BC371-3F89-47A4-9F48-901BBAE8D22F}
        3⤵
        • Executes dropped EXE
        PID:1016
      • C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\ISBEW64.exe
        C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{1D478017-20C8-4AB4-93B0-5D2B3201AC1A}
        3⤵
        • Executes dropped EXE
        PID:4692
      • C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\ISBEW64.exe
        C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{557EB499-AACB-4DE2-A31D-C264721034E9}
        3⤵
        • Executes dropped EXE
        PID:4680
      • C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\ISBEW64.exe
        C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{FEBF7393-F646-4955-A76B-4AD0A01EF095}
        3⤵
        • Executes dropped EXE
        PID:2500
      • C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\ISBEW64.exe
        C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{FF962B8A-7AEC-494B-A585-AD2F37D62F2A}
        3⤵
        • Executes dropped EXE
        PID:4388
      • C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\ISBEW64.exe
        C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{90B5CB4E-07CB-48CF-8DC6-152B97BA86E9}
        3⤵
        • Executes dropped EXE
        PID:1676
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\LipPreview.dll"
        3⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4080
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\LipPreview.dll"
          4⤵
          • Loads dropped DLL
          • Modifies registry class
          PID:4832
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\ClipPreview.dll"
        3⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4816
        • C:\Windows\system32\regsvr32.exe
          /s "C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\ClipPreview.dll"
          4⤵
          • Loads dropped DLL
          • Modifies registry class
          PID:564
      • C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\setup.exe
        C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\setup.exe -s TargetDir="C:\Program Files\CELSYS" Language="english" AbortOnFileError="true"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:4320
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 4320 -s 736
          4⤵
          • Program crash
          PID:1808
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Checks SCSI registry key(s)
    • Suspicious use of AdjustPrivilegeToken
    PID:2544
  • C:\Windows\system32\srtasks.exe
    C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2644
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4320 -ip 4320
    1⤵
      PID:456

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          setup.ini

          • Path C:\Program Files (x86)\InstallShield Installation Information\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\setup.ini
          • Size 2KB
          • SHA256 2480cdb243c88f4aab14605e3c5dcea4e262e7dcd6034f2e8ac0c61b33e39e38
          • MD5 SHA1 SHA512 TLSH

          ClipPreview.dll

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\ClipPreview.dll
          • Size 1.1MB
          • SHA256 de7861528a2ede91e65db7dc5380bb892fca3a8541ead76402b9b946bfef2536
          • MD5 SHA1 SHA512 SSDEEP TLSH

          LipPreview.dll

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\LipPreview.dll
          • Size 913KB
          • SHA256 6d6483f8c1eccd2bc342bfcdd87150e6de56705f92b4a4d68b8f54ba2e48e68c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          def864A.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Action\english\def864A.tmp
          • Size 12KB
          • SHA256 e2deeb4527e1e958066009a57bfde331aa5e998883418a5c7b2f2bf79bd8833d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          BrushPreset.bfps

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\BrushPreset\chinese_tc\BrushPreset.bfps
          • Size 132KB
          • SHA256 19bf401bd83df5fb3ecc3b549c3111c25c8a0d89561f53d45e3fcfcbc3012acf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0018751.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\ColorSet\english\0018751.tmp
          • Size 664B
          • SHA256 7ed72062997aaac8d52c868b1fa542d96ef0a1e8c8f35053a0133dd1006e84dc
          • MD5 SHA1 SHA512 TLSH

          0028754.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\ColorSet\english\0028754.tmp
          • Size 4KB
          • SHA256 c6b8c74570d9c62f50c9e746e3b5c216c2d39f30e66ffbd341e8ffe37a4e62ed
          • MD5 SHA1 SHA512 SSDEEP TLSH

          def87E6.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\GradationSet\english\def87E6.tmp
          • Size 10KB
          • SHA256 bb245f6a82765fe054fd7c1f188bada52dc3e3d16b3ea6c41e488c75f7a4b9fd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Mix886A.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\MixPalette\chinese_sc\Mix886A.tmp
          • Size 208B
          • SHA256 bbf97139afb14eb9fcd9e655a580c1eaadc4528d418870e2d881edf95061e97e
          • MD5 SHA1 SHA512 TLSH

          Mix887D.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\MixPalette\chinese_sc\Mix887D.tmp
          • Size 28KB
          • SHA256 9f50415605cf72a788b7febd6b7186b88bc94976d98c90730cc5c7d3299ff39a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          x2.8921.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\PretrainedWeights\SuperResolution\x2.8921.tmp
          • Size 2KB
          • SHA256 e6c5e56ff53b0b87d23500efa6d52227e35634c745910ce8c1f91aba47424a94
          • MD5 SHA1 SHA512 TLSH

          x3.8955.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\PretrainedWeights\SuperResolution\x3.8955.tmp
          • Size 2KB
          • SHA256 1a19bcda2e9a09baa829f14cac088486de9877bff1e7565ee0e31e41b6f48096
          • MD5 SHA1 SHA512 TLSH

          x3.caffemodel

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\PretrainedWeights\SuperResolution\x3.caffemodel
          • Size 162KB
          • SHA256 581841243358dd57ef7c25fe9ad47371281dce1c7155ceb2d93216e2a31fe98b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          x3_denoise.caffemodel

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\PretrainedWeights\SuperResolution\x3_denoise.caffemodel
          • Size 162KB
          • SHA256 e8c418ad1cf212e126d319300ab0f315c00dc0e56da2c437426e5796ccf7ef78
          • MD5 SHA1 SHA512 SSDEEP TLSH

          x4.897A.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\PretrainedWeights\SuperResolution\x4.897A.tmp
          • Size 2KB
          • SHA256 b5ca250b3ddca65a49af4d0eb0979905e7e4c2646cc902ca5e44c8705faa380b
          • MD5 SHA1 SHA512 TLSH

          Def89AC.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\chinese_sc\Def89AC.tmp
          • Size 24KB
          • SHA256 9fab804a66700c5f55e3a8394bcff4c644a05721b04d7533817182a7197f5c30
          • MD5 SHA1 SHA512 SSDEEP TLSH

          EditImageTool.todb

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\chinese_tc\EditImageTool.todb
          • Size 832KB
          • SHA256 320d82e402fae02beef76d657feafe81b8a153387d75cdbddace0858b17af84c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Edi8AC3.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\english\Edi8AC3.tmp
          • Size 837KB
          • SHA256 cb2ba56d3778091443f4e983e131fdba4fed324c454d539088eca20f6b406ac3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UXE8B33.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\english\UXE8B33.tmp
          • Size 708KB
          • SHA256 8b096197fa0a56810a35704bc8494f7a4645fbc232ae1c83e2710d759ba8ce3d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UXEditImageTool.todb

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\french\UXEditImageTool.todb
          • Size 708KB
          • SHA256 82083088a7eed5932f8477064c8bf8bdc35646fbfff445b33eec284264149da0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          EditImageTool.todb

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\german\EditImageTool.todb
          • Size 838KB
          • SHA256 069e795fc09bfd284d5cc661145dcc663a9e7a548cf277a79cc95c2b9f4713e6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          presetAndroid_0.spws

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Android\chinese_tc\presetAndroid_0.spws
          • Size 140KB
          • SHA256 e55ebab1501114e25b4af2967abca6356c946e48297ba82e83c84407b80d40ab
          • MD5 SHA1 SHA512 SSDEEP TLSH

          presetAndroid_1.spws

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Android\chinese_tc\presetAndroid_1.spws
          • Size 192KB
          • SHA256 1fc3e5accf99e90edb6efa2adc4d35b1d7ee55c57e8ed2137d5588ada2c56bc8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          presetAndroid_2.spws

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Android\chinese_tc\presetAndroid_2.spws
          • Size 148KB
          • SHA256 b8119fe79fa29792d36e3ce3f859f3026b4df1439d25d829c8c0d722ecb9124b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          presetMac_1.spws

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Mac\chinese_tc\presetMac_1.spws
          • Size 140KB
          • SHA256 e6f8eb8349ee1fdf0b33a3c5890357319bcc4099f791c4d4dac36a9cc9c1beeb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          presetMac_2.spws

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Mac\chinese_tc\presetMac_2.spws
          • Size 140KB
          • SHA256 dc1bfa6b099ac9268fcb10222ecb92d6ab4963b8088b7ecb4b0c92de25bec8ab
          • MD5 SHA1 SHA512 SSDEEP TLSH

          presetMac_3.spws

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Mac\chinese_tc\presetMac_3.spws
          • Size 144KB
          • SHA256 3f02dce4876794c57caf9e0ab3ed0ded438c15c2a552097c9242d67b0c8d0693
          • MD5 SHA1 SHA512 SSDEEP TLSH

          presetWin_2.spws

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Win\chinese_tc\presetWin_2.spws
          • Size 140KB
          • SHA256 c7f175aa5e61b0cef1389e21e0ebe26dd76fc21f8d2078b48df71101ac278138
          • MD5 SHA1 SHA512 SSDEEP TLSH

          presetWin_3.spws

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Win\chinese_tc\presetWin_3.spws
          • Size 144KB
          • SHA256 8d510d18ac9eb7b8e86f825708c238307c5532bb9b16dc3e7235e883b18e1281
          • MD5 SHA1 SHA512 SSDEEP TLSH

          presetWin_1.spws

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Win\japanese\presetWin_1.spws
          • Size 140KB
          • SHA256 c0e28bd8890a21340cb24105e96eeeb04f7639db09fe57b83c6fd35d2700c7c3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          05F65E3.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\chinese_tc\05F65E3.tmp
          • Size 150B
          • SHA256 708f9c7a9e4dd2544efd34c0416f511594cd9410a60003e4de2f899e2446d525
          • MD5 SHA1 SHA512 TLSH

          A9B6715.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\chinese_tc\A9B6715.tmp
          • Size 395B
          • SHA256 af638d332ed549be7e4c9afded5d0be9f1ea031e2c069507a0ed0e27790e9217
          • MD5 SHA1 SHA512 TLSH

          B8D672A.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\chinese_tc\B8D672A.tmp
          • Size 205B
          • SHA256 9a253cf678c6a42e57c8d1d4db5340d4ff5d6fabb0530e766f0c862b5a2c03a8
          • MD5 SHA1 SHA512 TLSH

          BFA673D.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\chinese_tc\BFA673D.tmp
          • Size 11KB
          • SHA256 aa71c872379b87ebed28014a515f8e9f7fea16babc686441dd5093e10068cd7a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          F406784.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\chinese_tc\F406784.tmp
          • Size 237B
          • SHA256 faf0fa18eb46424369df4e4885d0c62e42cae4897bbbbf849628e16d173dc0e3
          • MD5 SHA1 SHA512 TLSH

          0236799.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\0236799.tmp
          • Size 1KB
          • SHA256 d901df27322f3c8d9056bf7b8caba361d42b8d02684c9eb164c11a96138c6f4a
          • MD5 SHA1 SHA512 TLSH

          0A267AC.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\0A267AC.tmp
          • Size 17KB
          • SHA256 10276d56fa25b52a3f2cab69c3e16a1aaa0c3d799d358c4c2f1bb1a0d84d5d2b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          2D467BF.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\2D467BF.tmp
          • Size 5KB
          • SHA256 c7fc43ab66546e78bb2ef9d31fb8267e7e6f83cf7895bcb4802205a3128e5057
          • MD5 SHA1 SHA512 SSDEEP TLSH

          3CC67C2.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\3CC67C2.tmp
          • Size 8KB
          • SHA256 df5961624d5f9e9915b1c9ac0838a7035163a8718979ddc74817a94cd4b6d722
          • MD5 SHA1 SHA512 SSDEEP TLSH

          3D567D5.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\3D567D5.tmp
          • Size 562B
          • SHA256 4f99bee0690e091a494db3ebaafb9b5257044443461eebfdac0d8093e45206cd
          • MD5 SHA1 SHA512 TLSH

          3FE67E8.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\3FE67E8.tmp
          • Size 255B
          • SHA256 5ab65901be6dbe5bbd3591caaff8ace445e47dba06716afb3504150114e9186d
          • MD5 SHA1 SHA512 TLSH

          46B67FB.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\46B67FB.tmp
          • Size 67KB
          • SHA256 2a6bffa2ab41f67ccacf998c89be4c2a812f50400b45f79e89167509fa20cc8a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          48B680D.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\48B680D.tmp
          • Size 8KB
          • SHA256 fc5e37560315790875b24906cd9c9c2fd631a5f4df42a83324847a7b845fc2d0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          4CB6820.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\4CB6820.tmp
          • Size 1KB
          • SHA256 d6e5c438edf8c20203540884c471cc76ce587eec3e70d0b01ccb269a9475c861
          • MD5 SHA1 SHA512 TLSH

          4ed6833.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\4ed6833.tmp
          • Size 1019B
          • SHA256 36430ebaa4f8b7d7b31d6cd075f3a1fa2325e4dd713d72b611dc9dbf7ebb7412
          • MD5 SHA1 SHA512 TLSH

          5496836.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\5496836.tmp
          • Size 305B
          • SHA256 982525b18c1e56288d468b9b384e7f1c5d1c1717e5bc7a74bab2fe929e37379b
          • MD5 SHA1 SHA512 TLSH

          5636858.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\5636858.tmp
          • Size 267KB
          • SHA256 430a11f5c8619731a2e7605745fd06a4c0330f1300b45b21029ec7e476d66ef4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          58F687A.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\58F687A.tmp
          • Size 324B
          • SHA256 89d740313a6e5636d41de2d78ea149645ed82109e6e554408d94dc918e20412a
          • MD5 SHA1 SHA512 TLSH

          5B0688D.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\5B0688D.tmp
          • Size 2KB
          • SHA256 0bf5667b67a5c2d8d89fc98b3a96f1331065158a63ccc7dc92ab2512d2d971a6
          • MD5 SHA1 SHA512 TLSH

          61F6890.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\61F6890.tmp
          • Size 20KB
          • SHA256 33f268457f12d88f373fd1e562c769e4ae6debc536ba0187bcb90a120f1d2207
          • MD5 SHA1 SHA512 SSDEEP TLSH

          7426910.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\7426910.tmp
          • Size 3.1MB
          • SHA256 069ad42df07b96ea826b5e8c13842c8e8565ec02950f065b2a4fd59b804feebc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          7D46961.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\7D46961.tmp
          • Size 580B
          • SHA256 23664df0af3bc215c78704e8d2eeb4b118df67e268aadc15a425dbd2abe3521f
          • MD5 SHA1 SHA512 TLSH

          7F96983.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\7F96983.tmp
          • Size 47KB
          • SHA256 e68aeb63cd9de3636d637187a838953c37f78b65edd70393e7c76c07f7f6cb42
          • MD5 SHA1 SHA512 SSDEEP TLSH

          8AF69A5.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\8AF69A5.tmp
          • Size 17KB
          • SHA256 1579f8368c4015274c1a90deb88f53a51b1d94c4e54e5580eca51724b09f51c7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          97C69B8.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\97C69B8.tmp
          • Size 17KB
          • SHA256 337eba8f49f40e136a0366c84625a4a075c1d81b5d59b30e043f0bfb3c98600c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          9D76A57.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\9D76A57.tmp
          • Size 229B
          • SHA256 0b1d80352a05ce0367fc534908fa483e19a8f610b6d618311978dbde0ae36338
          • MD5 SHA1 SHA512 TLSH

          9D96A6A.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\9D96A6A.tmp
          • Size 304B
          • SHA256 364caebc4627fe356ca94760bb29dd8853e77f451d55cccec31591067c329014
          • MD5 SHA1 SHA512 TLSH

          B4E6A7E.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\B4E6A7E.tmp
          • Size 2KB
          • SHA256 ef22fb0a93816787a2d87c82fa1543a75941329f2f4de68b3bb0251fd8fb9dd9
          • MD5 SHA1 SHA512 TLSH

          B7D6AA0.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\B7D6AA0.tmp
          • Size 384B
          • SHA256 858a4666397489a9169d14a688cc917220a11e3f883f9e7035c427daf9989554
          • MD5 SHA1 SHA512 TLSH

          BFA6AB3.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\BFA6AB3.tmp
          • Size 11KB
          • SHA256 85e90d66d981ac6ab84f01360fb262c489af067f7d30d48e2bf2dc221cf38a73
          • MD5 SHA1 SHA512 SSDEEP TLSH

          C506AB6.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\C506AB6.tmp
          • Size 561B
          • SHA256 5a90e30397fc33b1a8a4bebfcef427f8fe57c444719950fa158c88f7b20fee8f
          • MD5 SHA1 SHA512 TLSH

          D6B6AC9.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\D6B6AC9.tmp
          • Size 513B
          • SHA256 df02e4854b1cdae97ad0ec393ae534e58d7d1b50e7b1d83b363d33bd480b97c7
          • MD5 SHA1 SHA512 TLSH

          DD76ADC.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\DD76ADC.tmp
          • Size 108KB
          • SHA256 70e281a84394e0fe11f66dbced75eb5c882786a9d335b1cf8ef2fe5b6300c8a8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          DE96AFE.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\DE96AFE.tmp
          • Size 10KB
          • SHA256 9767388fea67839ccf7bbc8e12c8ab5161cf5c5a75d417ba94fc98fad101ca75
          • MD5 SHA1 SHA512 SSDEEP TLSH

          E796B11.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\E796B11.tmp
          • Size 299KB
          • SHA256 e2ca989994cc47ebac987de915685472bd3f87fdd664c402d6b166384ba11b41
          • MD5 SHA1 SHA512 SSDEEP TLSH

          F2A6B42.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\F2A6B42.tmp
          • Size 25KB
          • SHA256 0496d16fc58574110107706ab76ae18bd30c23622e17d9f17da4b39d699203bd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          FCB6B57.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\FCB6B57.tmp
          • Size 4KB
          • SHA256 ef548b04787b7898cd1a131377a7ccf9902d503d450fec6e62f5411babacfdfe
          • MD5 SHA1 SHA512 SSDEEP TLSH

          BFA6CAF.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\french\BFA6CAF.tmp
          • Size 11KB
          • SHA256 f5feb44cbc7c2b7d4ef6c24372a679309fc0720daf4e891fd13018effe81a522
          • MD5 SHA1 SHA512 SSDEEP TLSH

          BFA6E4E.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\german\BFA6E4E.tmp
          • Size 11KB
          • SHA256 7c9388a01892f5bc5e0bc65860de09b80215d5c451b8391b6f11d35e173a694c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          BFA700C.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\indonesian\BFA700C.tmp
          • Size 11KB
          • SHA256 772a333d04eeb1ab60404aafcb837683d1d22186f52cc26d87d8fa01ef0773c0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          BFA71DA.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\japanese\BFA71DA.tmp
          • Size 12KB
          • SHA256 f7be0627ac9e063c1ea0f42e5115ef185b20dd227f1980b69259df07826de58e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          BFA7379.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\korean\BFA7379.tmp
          • Size 11KB
          • SHA256 49ce930af854df8094a4f38134eb83e77595395ec665675c90cac7f5a6857e47
          • MD5 SHA1 SHA512 SSDEEP TLSH

          877761C.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\other\877761C.tmp
          • Size 48KB
          • SHA256 253be2040f3a156c3b7fbf017433a8f1246b81ab8375d251605fced74d9acad5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          BFA78E9.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\portuguese\BFA78E9.tmp
          • Size 11KB
          • SHA256 4ad601ad01de21aafa712de89e9071c24eb5ea2b37e2c1a49a536ff32aae282d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          BFA7AB7.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\spanish\BFA7AB7.tmp
          • Size 11KB
          • SHA256 13f8386cf9010ab13a3dff8e6dae20553fa63dff7f573daae556ab2fbd114d80
          • MD5 SHA1 SHA512 SSDEEP TLSH

          BFA7C63.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\thai\BFA7C63.tmp
          • Size 12KB
          • SHA256 70e86e901bb44c1c9da57c3b128ab7601753d835af5b13ff5b878d230c756c23
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msv5F2D.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\scan\msv5F2D.tmp
          • Size 411KB
          • SHA256 d769fafa2b3232de9fa7153212ba287f68e745257f1c00fafb511e7a02de7adf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msv5F6E.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\scan\msv5F6E.tmp
          • Size 755KB
          • SHA256 60c06e0fa4449314da3a0a87c1a9d9577df99226f943637e06f61188e5862efa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          BFA7CCB.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\scan\resource\english\BFA7CCB.tmp
          • Size 95KB
          • SHA256 16c22249290009b9d56167d24a42f79312cd36ab336fe73223663293443029f3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          E797D3B.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\scan\resource\english\E797D3B.tmp
          • Size 2.1MB
          • SHA256 3119f7be73025787ed911994b5bfa145ba125c2278e2fe6823ec946dd0873598
          • MD5 SHA1 SHA512 SSDEEP TLSH

          EEAB25AD-7B24-4778-8ABC-3A2EBD6DD701

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\scan\resource\english\EEAB25AD-7B24-4778-8ABC-3A2EBD6DD701
          • Size 43KB
          • SHA256 ecc1415a2f6f1b63dce618f28ce64261ee88e6907cba4b628b39d60f0713221c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vco603D.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\scan\vco603D.tmp
          • Size 49KB
          • SHA256 887c58e0b5e315f2d9714bd4d0f8126ef615d5792baaae4c7b75409fdecb5c45
          • MD5 SHA1 SHA512 SSDEEP TLSH

          6DA942E.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\updater\resource\english\6DA942E.tmp
          • Size 2KB
          • SHA256 29fe6a1721bfc0a4c7f120c0918e5cc8820d6524046a8d622afda0f6d7fac140
          • MD5 SHA1 SHA512 TLSH

          E799451.tmp

          • Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\updater\resource\english\E799451.tmp
          • Size 262KB
          • SHA256 4438a9c73159dbbc73890aea19b1240f159c2f94ce8eee73ce19df31ff2c22a6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cloD4A1.tmp

          • Path C:\ProgramData\CELSYS\CLIPStudio\Common\Material\Install\Paint106\0ad3c5b5b6-ea4e-a3a4-6fb5-a0bbd7d127\cloD4A1.tmp
          • Size 2B
          • SHA256 03b26944890929ff751653acb2f2af795cee38f937f379f52ed654a68ce91216
          • MD5 SHA1 SHA512

          xxxD4C6.tmp

          • Path C:\ProgramData\CELSYS\CLIPStudio\Common\Material\Install\Paint106\0ad3c5b5b6-ea4e-a3a4-6fb5-a0bbd7d127\xxxD4C6.tmp
          • Size 20B
          • SHA256 34a5b25345108d065a96156e2b528fcfe146c814dcb503901d0b17c33eb93e7f
          • MD5 SHA1 SHA512

          0x0404.ini

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\0x0404.ini
          • Size 10KB
          • SHA256 5d31e009a36325032ab1521d2b1ca1a5be89bb969d1948d4fe99c387b1055db1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0x0407.ini

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\0x0407.ini
          • Size 25KB
          • SHA256 b4d2bf8ddeee1e2acc5dfaa14ac602a69f52195c38eab4660408fd879ad41a56
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0x0409.ini

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\0x0409.ini
          • Size 22KB
          • SHA256 cdb316d7f9aa2d854eb28f7a333426a55cc65fa7d31b0bdf8ae108e611583d29
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0x040a.ini

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\0x040a.ini
          • Size 25KB
          • SHA256 4e42d96cf24224d3ed43e7e14227b96fde3b43235636480f8861db0b048ffddf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0x040c.ini

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\0x040c.ini
          • Size 26KB
          • SHA256 d31b120f79c2fb8cd6f3fd7ede220a30ca3bb84e4d3c8b05c1bcc833734d13cf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0x0411.ini

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\0x0411.ini
          • Size 14KB
          • SHA256 3f0778538202a35483c084fb0b109f693a9853f64d6452daa5c92ac75620aadc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0x0412.ini

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\0x0412.ini
          • Size 14KB
          • SHA256 9416c7b55d1fd9dc06f20e1e3ebbac1357217113833553d49586e339360529c7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0x0416.ini

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\0x0416.ini
          • Size 23KB
          • SHA256 af54db26c9464b7a610d7eb73f06f36b43ac51e879ac4d21a1c70eb4524a2b24
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0x041e.ini

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\0x041e.ini
          • Size 22KB
          • SHA256 372dc097b80442810781d777cdd23296a0558be58b3418f4ea088cbcd7f661b2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0x0421.ini

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\0x0421.ini
          • Size 24KB
          • SHA256 af34e34cb979dae26a2ed08673e0ea20fcdb5d1f7ee9acf42f93afe16a64521c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          CSP_400w_setup.exe

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\CSP_400w_setup.exe
          • Size 914KB
          • SHA256 bf9384ccf1e3c24b0b311067b126d894749b8e69a25acb7d77a35cc84d8db005
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ISSetup.dll

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\ISSetup.dll
          • Size 1.6MB
          • SHA256 633c437e6a992e811de3bca4e4357ef07b5030d7b5cfe81b25a201533cbcd53a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          data1.hdr

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\data1.hdr
          • Size 618KB
          • SHA256 54c4be543d8f23a6b5d13844d8e75c268c5c025c79d6a6c8e7d142c33170bf6e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          layout.bin

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\layout.bin
          • Size 848B
          • SHA256 993fa54274eee794e9d45e45bb653d437a12d53416650b29b4bc527f7b300c36
          • MD5 SHA1 SHA512 TLSH

          setup.inx

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\Disk1\setup.inx
          • Size 263KB
          • SHA256 be4304e80c12294a2a7a8ef1e7231562c92f9e3ba2e45281eedb621baec562f6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          setup.ini

          • Path C:\Users\Admin\AppData\Local\Temp\{065DFF1A-4886-4DD5-AD39-EFD61E5A8781}\setup.ini
          • Size 2KB
          • SHA256 ea239b8e11fd28a85387e9b7a5324a60fd29fdbf113aa9f89f62096b6bef101e
          • MD5 SHA1 SHA512 TLSH

          ISBEW64.exe

          • Path C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\ISBEW64.exe
          • Size 198KB
          • SHA256 9523ee07e5591102b16b48a9d7059ddaef997adabac0430d1c2a660d5a45e4ee
          • MD5 SHA1 SHA512 SSDEEP TLSH

          DIFxData.ini

          • Path C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\DIFxData.ini
          • Size 84B
          • SHA256 6bc8b890884278599e4c0ca4095cefdf0f5394c5796012d169cc0933e03267a1
          • MD5 SHA1 SHA512 TLSH

          FontData.ini

          • Path C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\FontData.ini
          • Size 37B
          • SHA256 a7e91b042ce33490353c00244c0420c383a837e73e6006837a60d3c174102932
          • MD5 SHA1 SHA512

          InstallshieldSupportModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\InstallshieldSupportModule.dll
          • Size 184KB
          • SHA256 2a27b247c1387082036bcd83fb20dbef9d923b0ffa56573c093d0b71edf6d57b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _isres_0x0409.dll

          • Path C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\_isres_0x0409.dll
          • Size 1.8MB
          • SHA256 d79fc7fdc396927dac03419eea2f9a326c920a094074eb070aca712cdf0629c6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _isuser_0x0409.dll

          • Path C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\_isuser_0x0409.dll
          • Size 361KB
          • SHA256 9d20c6dd64b6947fd54248d710119bb04bc025c7f6f12172ad233ff4f37ad860
          • MD5 SHA1 SHA512 SSDEEP TLSH

          isrt.dll

          • Path C:\Users\Admin\AppData\Local\Temp\{A6C87950-6664-4AAE-BE4E-F770AB22B99C}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\isrt.dll
          • Size 1.1MB
          • SHA256 423d365b5737f925019c17b478a515b488cc55ea990e6ebeb9a77cdc7e2279e0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          memory/4404-131-0x00000000059D0000-0x0000000005B97000-memory.dmp