Analysis

  • max time kernel
    149s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/09/2026, 18:06

General

  • Target
    LINEAR_Installation_Center.exe
  • Size 35.6MB
  • Sample260925-wp4y4ashne
  • SHA256 9047f7399c9aecc3f0d5ce9dcc0ec48987af6653f91750ac9b3ca00befaeae2b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Enumerates connected drives 3 TTPs 48 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Indicator Removal: File Deletion 1 TTPs

    Adversaries may delete files left behind by the actions of their intrusion activity.

  • Checks computer location settings 2 TTPs 5 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Discovers running processes 1 TTPs 1 IoCs

    Running process information can be used to identify security tools or plan follow-on actions.

  • Drops file in System32 directory 23 IoCs
  • UPX packed file 10 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 18 IoCs
  • Executes dropped EXE 15 IoCs
  • Loads dropped DLL 18 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 16 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 7 IoCs
  • Modifies registry class 64 IoCs
  • Runs .reg file with regedit 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 20 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 17 IoCs
  • Suspicious use of WriteProcessMemory 18 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\LINEAR_Installation_Center.exe
    "C:\Users\Admin\AppData\Local\Temp\LINEAR_Installation_Center.exe"
    1⤵
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2404
    • C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\System32\cmd.exe" /C del "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\*.reg" /f /s /q & del "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\*_ext.infx" /f /s /q
      2⤵
      • System Location Discovery: System Language Discovery
      PID:1776
    • C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\Setup.exe
      "C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\Setup.exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4072
      • C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linSetup.exe
        "C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linSetup.exe"
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:2776
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\tasklist.cmd" "
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:4208
          • C:\Windows\system32\tasklist.exe
            tasklist.exe /FI "WINDOWTITLE eq LINEAR Installation Center"
            5⤵
            • Discovers running processes
            • Suspicious use of AdjustPrivilegeToken
            PID:4224
        • C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Setup.exe
          "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Setup.exe" /z"silent;TargetDir:C:\Program Files (x86)\LINEAR Software\Installation Center" /L1033
          4⤵
          • Enumerates connected drives
          • Checks computer location settings
          • Drops file in Program Files directory
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:2972
          • C:\Users\Admin\AppData\Local\Temp\{9DE78F22-F5C1-433A-9450-497541419FA7}\ISBEW64.exe
            C:\Users\Admin\AppData\Local\Temp\{9DE78F22-F5C1-433A-9450-497541419FA7}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{6D1A831B-0ADD-4852-BADD-DB56F73A75DE}
            5⤵
            • Executes dropped EXE
            • Suspicious use of SetWindowsHookEx
            PID:3184
          • C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\3rdParty\VCRedist_2019\vcredist_x64.exe
            "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\3rdParty\VCRedist_2019\vcredist_x64.exe" /q /norestart
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:784
            • C:\Windows\Temp\{56A920F4-089A-4375-8041-3029D7F84336}\.cr\vcredist_x64.exe
              "C:\Windows\Temp\{56A920F4-089A-4375-8041-3029D7F84336}\.cr\vcredist_x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\3rdParty\VCRedist_2019\vcredist_x64.exe" -burn.filehandle.attached=568 -burn.filehandle.self=576 /q /norestart
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:64
              • C:\Windows\Temp\{44D2C0E8-31E8-4316-8DAA-B57809680916}\.be\VC_redist.x64.exe
                "C:\Windows\Temp\{44D2C0E8-31E8-4316-8DAA-B57809680916}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{4D642C7F-E7E7-4C66-9085-207AAD3F2C84} {5CB76498-D723-4994-A4BE-A8FE9E5649D0} 64
                7⤵
                • Adds Run key to start application
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of SetWindowsHookEx
                PID:4380
              • C:\Windows\SysWOW64\WerFault.exe
                C:\Windows\SysWOW64\WerFault.exe -u -p 64 -s 1268
                7⤵
                • Program crash
                PID:1252
          • C:\Windows\SysWOW64\regedit.exe
            regedit.exe /s /i "C:\Users\Admin\AppData\Local\Temp\liNearInstallerSolutions.reg"
            5⤵
            • System Location Discovery: System Language Discovery
            • Modifies registry class
            • Runs .reg file with regedit
            PID:2796
          • C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe
            "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe" "HKLM\SOFTWARE\Wow6432Node\liNear GmbH\Installations" /GGU:CW
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of SetWindowsHookEx
            PID:3472
          • C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe
            "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe" "HKLM\SOFTWARE\Wow6432Node\liNear GmbH\Env" /GGU:W
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of SetWindowsHookEx
            PID:3096
          • C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe
            "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe" "HKLM\SOFTWARE\Wow6432Node\REHAU\Env" /GGU:W
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of SetWindowsHookEx
            PID:4576
          • C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe
            "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe" "HKLM\SOFTWARE\Wow6432Node\Viega\Env" /GGU:W
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of SetWindowsHookEx
            PID:2320
          • C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe
            "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe" "HKLM\SOFTWARE\Wow6432Node\Viessmann\Env" /GGU:W
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of SetWindowsHookEx
            PID:4532
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2912
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Checks SCSI registry key(s)
    • Suspicious use of AdjustPrivilegeToken
    PID:2444
  • C:\Windows\system32\srtasks.exe
    C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
    1⤵
      PID:3276
    • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
      "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" /burn.runonce
      1⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3716
      • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
        "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260925190748.log"
        2⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2884
        • C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
          "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" -burn.filehandle.attached=516 -burn.filehandle.self=536 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260925190748.log"
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:2220
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 64 -ip 64
      1⤵
        PID:4948

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            e594bca.rbs

            • Path C:\Config.Msi\e594bca.rbs
            • Size 19KB
            • SHA256 59d92d087a10590987c0e2fe7c6176557ff7c630d493339c02ccb8efabbaa451
            • MD5 SHA1 SHA512 SSDEEP TLSH

            e594bd6.rbs

            • Path C:\Config.Msi\e594bd6.rbs
            • Size 19KB
            • SHA256 54d9cb38e37994c056219036d53d399282c8d79ef23e9e5694d2fe2c18301d20
            • MD5 SHA1 SHA512 SSDEEP TLSH

            e594bda.rbs

            • Path C:\Config.Msi\e594bda.rbs
            • Size 8KB
            • SHA256 8ba5c6c4d3a0d9e356f286180662c9a516cb1e7f5c184cbefa0e20fb7eb753a3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            0x0407.ini

            • Path C:\Program Files (x86)\InstallShield Installation Information\{37542156-35A8-453d-A9C5-A664E29AB948}\0x0407.ini
            • Size 6KB
            • SHA256 97e039ed49f5b6773c7ef4161c3d2a0a67d71750fd94ded2bb93584aa50ced8e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            0x040c.ini

            • Path C:\Program Files (x86)\InstallShield Installation Information\{37542156-35A8-453d-A9C5-A664E29AB948}\0x040c.ini
            • Size 7KB
            • SHA256 0cedade6efc7c37f1752db677cbcefc67b4c55efe4c28261f9a3b90ea49aa6f4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            0x0410.ini

            • Path C:\Program Files (x86)\InstallShield Installation Information\{37542156-35A8-453d-A9C5-A664E29AB948}\0x0410.ini
            • Size 6KB
            • SHA256 4371c4799ccac6f265c9309c4b154848a92a1cb909792499e9238030ea8db0c2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            0x0413.ini

            • Path C:\Program Files (x86)\InstallShield Installation Information\{37542156-35A8-453d-A9C5-A664E29AB948}\0x0413.ini
            • Size 6KB
            • SHA256 67359039011df6cfd1030aed7d30836c9cd89485e691385235972570b65c8db5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            0x0415.ini

            • Path C:\Program Files (x86)\InstallShield Installation Information\{37542156-35A8-453d-A9C5-A664E29AB948}\0x0415.ini
            • Size 6KB
            • SHA256 6ac27bbb4cb586ba3b962754d80eb70a37ef35fc0f00dec6bd139523ac93da88
            • MD5 SHA1 SHA512 SSDEEP TLSH

            0x0419.ini

            • Path C:\Program Files (x86)\InstallShield Installation Information\{37542156-35A8-453d-A9C5-A664E29AB948}\0x0419.ini
            • Size 6KB
            • SHA256 898a39250187d7fcdd75c6c16e9f2ea848f015108df0bdba9242b5278ced618a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            0x041f.ini

            • Path C:\Program Files (x86)\InstallShield Installation Information\{37542156-35A8-453d-A9C5-A664E29AB948}\0x041f.ini
            • Size 6KB
            • SHA256 f11559c4d14d4d64777e7f987cc1c3f71ed55c2a6f44fd794e397ff34f2cd7af
            • MD5 SHA1 SHA512 SSDEEP TLSH

            104375d2.rra

            • Path C:\Program Files (x86)\InstallShield Installation Information\{37542156-35A8-453d-A9C5-A664E29AB948}\104375d2.rra
            • Size 48KB
            • SHA256 9ffd064c3e1452b30a06040d86793a3373f9ebf32152bf5c76191e7aa7815803
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Setup.exe

            • Path C:\Program Files (x86)\InstallShield Installation Information\{37542156-35A8-453d-A9C5-A664E29AB948}\Setup.exe
            • Size 304KB
            • SHA256 f08d037f4a693b997874cf344f30c4450548765e0a046ccb7a8f3b8db962fd6e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            setup.ini

            • Path C:\Program Files (x86)\InstallShield Installation Information\{37542156-35A8-453d-A9C5-A664E29AB948}\setup.ini
            • Size 1KB
            • SHA256 bb73c4b952997de918aea501db128bdda7056ed7eb6c83714f7dc333fdd999fd
            • MD5 SHA1 SHA512 TLSH

            CopyInfo.png

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\CopyInfo.png
            • Size 368B
            • SHA256 2d20e5fbd1c623449835b9dee3f73e53ba3ddf7016ab77f25ecf15a7e29802b2
            • MD5 SHA1 SHA512 TLSH

            LINE57da.rra

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\LINE57da.rra
            • Size 363KB
            • SHA256 476db1faaa604480b7c96eea4952d84f798f861b3640d9064f65f8a996a67d9d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LINEAR_About.png

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\LINEAR_About.png
            • Size 11KB
            • SHA256 f63eb63800a4af7bf766688d5126f76bd9d849000974404475fd8689a091df77
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LINEAR_About.png.inf

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\LINEAR_About.png.inf
            • Size 150B
            • SHA256 98c41b1947ca9153e4fe76505f69b2cec6a10efc1791828d4327a8d526515ad6
            • MD5 SHA1 SHA512 TLSH

            Map_BEL.regionx

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_BEL.regionx
            • Size 324B
            • SHA256 18399a7f5371534360f8750f810b5e9cbec1f9814ebc3380dab764d745c4fcd1
            • MD5 SHA1 SHA512 TLSH

            Map_DEU.regionx

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_DEU.regionx
            • Size 243B
            • SHA256 3abc46713c01ed947beb3da76dc8c5f8d152f510ece835e208d80b5ce38a2efe
            • MD5 SHA1 SHA512 TLSH

            Map_FRA.regionx

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_FRA.regionx
            • Size 277B
            • SHA256 9ffb34f82718bb37f2580716df764a1756476aaf7a95ba8c6dad6374cdc65c5d
            • MD5 SHA1 SHA512 TLSH

            Map_INT.regionx

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_INT.regionx
            • Size 380B
            • SHA256 e5d360de8e4e62b7a292ed4b68933cd049e3afddb2a1ddd2670f78fad0ede1e6
            • MD5 SHA1 SHA512 TLSH

            Map_ITA.regionx

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_ITA.regionx
            • Size 258B
            • SHA256 f5bb04ae4ed3ad070bd8e85b5f0021672ea89a4ce91474c86ba56754176bde14
            • MD5 SHA1 SHA512 TLSH

            Map_KAZ.regionx

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_KAZ.regionx
            • Size 268B
            • SHA256 ae02c1c5a0a406a5cdbe8c6bc8dea45019d32be105280771c31dceeefc33d8e5
            • MD5 SHA1 SHA512 TLSH

            Map_OES.regionx

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_OES.regionx
            • Size 315B
            • SHA256 b0fa30cd52478e60ef50fbd2f0329a01ed16efd77ceac271c970f591c339deab
            • MD5 SHA1 SHA512 TLSH

            Map_POL.regionx

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_POL.regionx
            • Size 251B
            • SHA256 857415a0b9675da58afc92b0a78ec4befc3f92db9e06e7d10ba3c09469520125
            • MD5 SHA1 SHA512 TLSH

            Map_RUS.regionx

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_RUS.regionx
            • Size 274B
            • SHA256 41f45eb0f5d55353c3556dec784092e1828a12f506e5920edebf411bf9306928
            • MD5 SHA1 SHA512 TLSH

            Map_TUR.regionx

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_TUR.regionx
            • Size 268B
            • SHA256 098dad8a8bba859079e56271d06d8e174fe25d64e8f9914c672a8b11154d6129
            • MD5 SHA1 SHA512 TLSH

            Map_UKR.regionx

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_UKR.regionx
            • Size 253B
            • SHA256 040bd4b5fa12289cb4670ebf22ea6c7e0e8dcfb8c23597a8179887bbd032857b
            • MD5 SHA1 SHA512 TLSH

            LINEAR_Datasets_DE.htm

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Datasets_DE.htm
            • Size 1KB
            • SHA256 da0b2d43b8f26aa7dcf32638dbb3320ced9c30bdbf6d48d6c399dad21d85029c
            • MD5 SHA1 SHA512 TLSH

            LINEAR_Datasets_EN.htm

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Datasets_EN.htm
            • Size 1KB
            • SHA256 7daba6996c8604948b4e6e7757d5001424510118620409800c6ad5b685a29ee4
            • MD5 SHA1 SHA512 TLSH

            LINEAR_Datasets_banner_DE.png

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Datasets_banner_DE.png
            • Size 305KB
            • SHA256 208c671dd4a125f28fdcefffb9d755155606a402f0d4dad2ebeb1aadd06d7faf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LINEAR_Datasets_banner_EN.png

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Datasets_banner_EN.png
            • Size 305KB
            • SHA256 deb390bb342b1612a7c101f6c201d22d2accdcb9723f1fef41a1cf72680cae8f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LINEAR_Programs_DE.htm

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Programs_DE.htm
            • Size 1KB
            • SHA256 105a324490b01b54957ee0d823b084768dbeb9bd4d4a2fffea4aa4141b6aeb3c
            • MD5 SHA1 SHA512 TLSH

            LINEAR_Programs_EN.htm

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Programs_EN.htm
            • Size 1KB
            • SHA256 bf000ef769d6af695fa9403fa9b124f445b653f8f4af5dcf100fd2a2f0d5ca13
            • MD5 SHA1 SHA512 TLSH

            LINEAR_Programs_banner_DE.png

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Programs_banner_DE.png
            • Size 333KB
            • SHA256 83f330c0fbdefd57e624b95f0a57d601fabe1432f2f59243920a05a99911734f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LINEAR_Programs_banner_EN.png

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Programs_banner_EN.png
            • Size 333KB
            • SHA256 fceb05a9cb286e114cca2f8a677e50ed6da561a57cb209907b093e95ed4b78c1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LINEAR_SampleProjects_DE.htm

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_SampleProjects_DE.htm
            • Size 1KB
            • SHA256 614940d163aae10e3e4028de030c082bb52d53859ee49e5766bd6f8629099250
            • MD5 SHA1 SHA512 TLSH

            LINEAR_SampleProjects_EN.htm

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_SampleProjects_EN.htm
            • Size 1KB
            • SHA256 557aa57fcab50740cf300e31807263a0d5e4f602a361a87140365879ecfd21e2
            • MD5 SHA1 SHA512 TLSH

            LINEAR_SampleProjects_banner_DE.png

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_SampleProjects_banner_DE.png
            • Size 305KB
            • SHA256 fa6ab16890f61667f0e2f70549b26667799efb878d0eb7ba201ca850690a9f5b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LINEAR_SampleProjects_banner_EN.png

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_SampleProjects_banner_EN.png
            • Size 305KB
            • SHA256 ab8d16afaacc0985b0c941eeb1821a9be8ee927a8568e8e351fce3ce5a3d6285
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LINEAR_Updates.htm

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Updates.htm
            • Size 834B
            • SHA256 db54f5cda64bdc9aadeb77b29beff6c9db320e76525ce40eb108d7842d81b0fb
            • MD5 SHA1 SHA512 TLSH

            LINEAR_Updates_banner.png

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Updates_banner.png
            • Size 104KB
            • SHA256 943b1c8409067f98d200bca2a68e8b8cb9a8f5185657eecc3e5f50b7c43f4996
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LINEAR_external_link.png

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_external_link.png
            • Size 237B
            • SHA256 7e2a35fec6792ca6db28dc2a5258a0c83d8af207b32ec94d14cbeb71eb114c29
            • MD5 SHA1 SHA512 TLSH

            LINEAR_external_link_white.png

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_external_link_white.png
            • Size 1KB
            • SHA256 ef6dcc04041357a91dcb83f5847741d3b763c6bca98f65513b511ad3bb7509d7
            • MD5 SHA1 SHA512 TLSH

            filter.ppx

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\filter.ppx
            • Size 2KB
            • SHA256 e532cecf35debe4522f0e4508c3947f8161b4ede13a8e273c2308aecbd6cbe34
            • MD5 SHA1 SHA512 TLSH

            linInstaller_Revision.prdx

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\linInstaller_Revision.prdx
            • Size 4KB
            • SHA256 fce60f7987f5b72e7ad2c819d4b16835a16d3b9121265445b7dc4c86c65c37c8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Comm5e53.rra

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm5e53.rra
            • Size 116KB
            • SHA256 c6f40436b0d629d4268790a2652372003e602cf871d698d4c3cde713457216e3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Comm5e81.rra

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm5e81.rra
            • Size 115KB
            • SHA256 32f0c403997ff2c792088953336d0fc66c3a673ff97df914e5abbb7ac8efab50
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Comm5ea1.rra

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm5ea1.rra
            • Size 110KB
            • SHA256 32e894a1a40b68057b4aad942ec2cf5635b2e18b402cf047d04e38c19597b45f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Comm5edf.rra

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm5edf.rra
            • Size 114KB
            • SHA256 014f13dc3890ebc5d4b5814cbbb6dff04368b3295760137a476a0c7f6700bf01
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Comm5efe.rra

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm5efe.rra
            • Size 139KB
            • SHA256 4d75ec5ba6c040d6a54d9f29940dc304d1b17874746d2cac2369b85403fe997d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Comm5f2d.rra

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm5f2d.rra
            • Size 112KB
            • SHA256 29c271c47570c812e7907c55ee79a5ede9a8d32ab14918b00a7add827d9fa136
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CommV1_140x64.dll

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\CommV1_140x64.dll
            • Size 1.8MB
            • SHA256 bb46fae21fb19584f36e3694643a120bea852478421992468df5d7dd656e61c8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CommV1_dict.EN

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\CommV1_dict.EN
            • Size 111KB
            • SHA256 533db2345ac6b46ecddffbc6d801ed7c073f1e0b367c4fb93073af0fb79944f5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LicenceManager_140x64.dll

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_140x64.dll
            • Size 467KB
            • SHA256 11ddd86abd0e726860bb2948d47adbd63942410a1fe7928f57639f2d9b1d578f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LicenceManager_dict.EN

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.EN
            • Size 13KB
            • SHA256 62ef52434d111f3cdc4d439e7c077422bba8153e2eb560f9af1532bcdfa27edb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LicenceManager_dict.FR

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.FR
            • Size 15KB
            • SHA256 1adca782d88e1b0636eaf5daadc83ae8d49ebbc5c8bbc9fa5dd5216480867e6f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LicenceManager_dict.IT

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.IT
            • Size 14KB
            • SHA256 dad21c365552c6696b6177904f3d3650592310267db873a07a12739f1c6ecbd4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LicenceManager_dict.NL

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.NL
            • Size 14KB
            • SHA256 ef124ec1cb58066cd714cde12bd6263e2f24e32d8d9b8ee68e1246b0f63e13b3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LicenceManager_dict.PL

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.PL
            • Size 14KB
            • SHA256 db00c9a8d4691adb0f9ac1f18351e5be04df040bbae22f772ffa44e082d6bc9f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LicenceManager_dict.RU

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.RU
            • Size 18KB
            • SHA256 a3685f95dd388fbe5c74be348d7b46c0c3132e56de1c5a586bc32aef8eda3e65
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LicenceManager_dict.TR

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.TR
            • Size 14KB
            • SHA256 4ef2594f91c95ad21d9f6cb2f6e8e9cabed95a83990471b3a2c98ed9a13fa689
            • MD5 SHA1 SHA512 SSDEEP TLSH

            OnlineCheck_140x64.dll

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_140x64.dll
            • Size 129KB
            • SHA256 da4aaec58802ef8e331503a9901c8e2950c81f30d09a51147b9277f4dc9d54b1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            OnlineCheck_dict.EN

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.EN
            • Size 1KB
            • SHA256 da95e506e04661d5188940efa0e1c7408db28a1db4923b4ad6d3ccbb2da17844
            • MD5 SHA1 SHA512 TLSH

            OnlineCheck_dict.FR

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.FR
            • Size 1KB
            • SHA256 1a841bce5df1bda20f1d8213ef427518effc9b6e24795d91aaf66a29f83c83bd
            • MD5 SHA1 SHA512 TLSH

            OnlineCheck_dict.IT

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.IT
            • Size 1KB
            • SHA256 2f5fe384b2084bd2fb89d6ec9c61ee936c63dd771e94c09d926393f032bc0ed9
            • MD5 SHA1 SHA512 TLSH

            OnlineCheck_dict.NL

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.NL
            • Size 1KB
            • SHA256 2957d167bd81f52e6258f9f599bb65e2b4af7f9bd63055a6a2ca9167d176c67e
            • MD5 SHA1 SHA512 TLSH

            OnlineCheck_dict.PL

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.PL
            • Size 1KB
            • SHA256 7039e413e4b10f29961427257791b6d15e964a201991de29c324b868bbf8b5e4
            • MD5 SHA1 SHA512 TLSH

            OnlineCheck_dict.RU

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.RU
            • Size 1KB
            • SHA256 72b4bb35bf1a71c6ba962e0a5c478d82d4c9dfc03c27e96ee4de541cb5ca44d1
            • MD5 SHA1 SHA512 TLSH

            OnlineCheck_dict.TR

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.TR
            • Size 1KB
            • SHA256 a8cf15635fd66061c3dff88d404b1899b5b60a5d32e3415d9ec8a90df87452d8
            • MD5 SHA1 SHA512 TLSH

            OpenXLSX.dll

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OpenXLSX.dll
            • Size 751KB
            • SHA256 c9dc13b444276f2915ee902719a3d6ab2c538f07deb6a3e0d6513bd548b2d4b7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SendEmail.exe

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Support\SendEmail.exe
            • Size 30KB
            • SHA256 3c4d5ee90996d1d8df76d8cb999b198badce3b3360121a35d8a410acb3c78d4c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hasp_windows_x64_69057.dll

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\hasp_windows_x64_69057.dll
            • Size 6.2MB
            • SHA256 b0f5f92627f98524d1816816ae6b27eedb621b195f3b194f2d4af49153099495
            • MD5 SHA1 SHA512 SSDEEP TLSH

            liNear.Common_140x64.dll

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\liNear.Common_140x64.dll
            • Size 307KB
            • SHA256 739a661ebcb5c66831062298492775313de8fb42c820de4b397d44718cfca9e6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            liNearGL_140x64.dll

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\liNearGL_140x64.dll
            • Size 298KB
            • SHA256 04d3daa28d9f385d2f7732a15a9d4a0cdfcd2e8b50786af2294fea839cc5fca5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linCatalogs_140x64.dll

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_140x64.dll
            • Size 139KB
            • SHA256 f05b87a31cbc72aeffb6d64f5bba57065ddd66165272354fc1f2c7a6919a8d3b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linCatalogs_dict.EN

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.EN
            • Size 87B
            • SHA256 184f405a8eca5990b5be6c621549daea38f773ce496501a93853fc0362919ad5
            • MD5 SHA1 SHA512 TLSH

            linCatalogs_dict.FR

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.FR
            • Size 104B
            • SHA256 4612af32dcfc6475d7f3a5a122270455d8376454e089a0947f77bb9969494534
            • MD5 SHA1 SHA512 TLSH

            linCatalogs_dict.IT

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.IT
            • Size 103B
            • SHA256 92bc53ed4d4bf7174780c9ada393c626501fae1aefe7cb28e44a8b62ab21eb6f
            • MD5 SHA1 SHA512 TLSH

            linCatalogs_dict.NL

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.NL
            • Size 102B
            • SHA256 20137d0b547c40a81348e2b93872eedef08808784f241bab874d26ded39edb64
            • MD5 SHA1 SHA512 TLSH

            linCatalogs_dict.PL

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.PL
            • Size 91B
            • SHA256 b1df2ae12fd7037ad454e9610dcfc399c0ad3c245533c189692d501891e51861
            • MD5 SHA1 SHA512 TLSH

            linCatalogs_dict.RU

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.RU
            • Size 120B
            • SHA256 d3904aa6a9c4346b96015bfb31dfa20a2e7a5a37dae79b4bb07774f9cf3250b0
            • MD5 SHA1 SHA512 TLSH

            linCatalogs_dict.TR

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.TR
            • Size 98B
            • SHA256 8ae58134c514f59f03b43b40a71dfdba76c0334f4c5a175b0f0227a66ce0c2aa
            • MD5 SHA1 SHA512 TLSH

            sntl_adminapi_windows_x64.dll

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\sntl_adminapi_windows_x64.dll
            • Size 372KB
            • SHA256 13f3926155abc33487a8ad58ddc3930e48fd8c2adc16d82b31771a41bfface5b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libcurl.dll

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\x64\libcurl.dll
            • Size 610KB
            • SHA256 640d085a7d3ed60b88ccbc266f45a24c3163a74b0b2c1e3eed81ed0f9481126e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linI574e.rra

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\linI574e.rra
            • Size 25KB
            • SHA256 577a9f52ee466b03667660ee05496dc39bd23b85add7aa741d1fee3018c9f087
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linInstaller_dict.EN

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.EN
            • Size 24KB
            • SHA256 8c5e61273b22cfa58cc55077fe3b90e040d93c09091f0db599da69696b9795a5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linInstaller_dict.FR

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.FR
            • Size 27KB
            • SHA256 05dd3ab4be4461b50752c931bf32bf8546ec516fa1809dd049e6789a26f61a5f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linInstaller_dict.NL

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.NL
            • Size 24KB
            • SHA256 ce4de6f293cfc216b7037a28a0de733c72f06ddaddb267fb341dd8db3aa89a7f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linInstaller_dict.PL

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.PL
            • Size 20KB
            • SHA256 8917c39d0a170a7a4c454fa2879d6d73f2d964639a7e7df09a7e8027637f6979
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linInstaller_dict.RU

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.RU
            • Size 33KB
            • SHA256 9d923cbb816eec23e270f86992919fd92a20ef44d0cb91d84af845b6adb903a4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linInstaller_dict.TR

            • Path C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.TR
            • Size 25KB
            • SHA256 02d6b9a11aa2ae52fa2c26803f0d2c42a487a066a9848f3d721249e5efe6f7cc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dd_vcredist_amd64_20260925190748_000_vcRuntimeMinimum_x64.log

            • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260925190748_000_vcRuntimeMinimum_x64.log
            • Size 2KB
            • SHA256 15cf3381ccd14a2d341092a7f66b08453240c510d08b2eb88ecfe3642a9f2e88
            • MD5 SHA1 SHA512 TLSH

            0x0409.ini

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\0x0409.ini
            • Size 5KB
            • SHA256 57e020c41ad0566fb55415a40167a0c3da89584bc4e5f961d8e8c646f80c5590
            • MD5 SHA1 SHA512 SSDEEP TLSH

            1033.mst

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\1033.mst
            • Size 48KB
            • SHA256 8ddd9bf1c226a6b4ac4fe65b5dbc61dc20329f583c2612cbd27671ed4a5ecafd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            1045.mst

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\1045.mst
            • Size 52KB
            • SHA256 483f4d96c7550e52511f70b53d8a909eeff7526d88138b9085658a92ceb327b0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vcredist_x64.exe

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\3rdParty\VCRedist_2019\vcredist_x64.exe
            • Size 24.2MB
            • SHA256 3642e3f95d50cc193e4b5a0b0ffbf7fe2c08801517758b4c8aeb7105a091208a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CD.1

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\CD.1
            • Size 71B
            • SHA256 b7ae4a012f776edfeba6a1849891129e0aa6ba3657233d6520730c60c0bf1352
            • MD5 SHA1 SHA512 TLSH

            RegDACL.exe

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe
            • Size 88KB
            • SHA256 75649251b0cf2b10ab2c00ddb178b91e4fbcb7f569bfa456cd4a728c167f5375
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ISSetup.dll

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\ISSetup.dll
            • Size 4.2MB
            • SHA256 3a1c1edf8e717d10e2fba46526a45d53dde312bf5d0f53fc0d2eab238e800016
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LINEAR Installation Center.infx

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\LINEAR Installation Center.infx
            • Size 1KB
            • SHA256 9ca4f7c5faf3173c662bcd888f3f91947a489104c652bed2eaab4ee41dbea3f2
            • MD5 SHA1 SHA512 TLSH

            LINEAR Installation Center.msi

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\LINEAR Installation Center.msi
            • Size 321KB
            • SHA256 355222d9ee0fd6097b080f3773a5fccf7a7e8650b0695b6c195cd1a2403fa063
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linInstaller.exe

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Program Files\linInstaller.exe
            • Size 410KB
            • SHA256 e7c4c36b9eebe5e20279865f198a1f95b16759191f783fe91781e45e5c56d9a6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Setup.exe

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Setup.exe
            • Size 314KB
            • SHA256 7c9e3e712dd218c9535099185c5cd96d932df11e2853b981fac3bb71abce8d64
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Setup.ini

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Setup.ini
            • Size 1KB
            • SHA256 2d88f87adecc02c73f43fb105591a7ff4ddc32bc3cd20fea065270b9e0bcc58a
            • MD5 SHA1 SHA512 TLSH

            License_PL.txt

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\EULA\License_PL.txt
            • Size 24KB
            • SHA256 987161ab4749c9c9567412900fa485b5fe906f0a3e187b65f1b6e2b2db364820
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MSVCP100.dll

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\MSVCP100.dll
            • Size 411KB
            • SHA256 d769fafa2b3232de9fa7153212ba287f68e745257f1c00fafb511e7a02de7adf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Setup.exe

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\Setup.exe
            • Size 216KB
            • SHA256 c69cecda6ce3b281fbd42c2c98800051b99bad4407952a0bf4b3a280e835417c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Setup_LINEAR_InstallationCenter.png

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\Setup_LINEAR_InstallationCenter.png
            • Size 7KB
            • SHA256 314a8e82c4c5fc0ad91eabc7e01a2e8ea9d83498841bc375d276e7e558995cca
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CommV1_100x32.dll

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\Tools\CommV1_100x32.dll
            • Size 390KB
            • SHA256 bd59367458aefe37e5f986e7a12e49f8775c514ba9f24f07015f7bb75e3a5795
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CommV1_140x64.dll

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\Tools\CommV1_140x64.dll
            • Size 1.8MB
            • SHA256 a6024c69258c53cadd2de914e06577c076173b0c8f040f9c0fad2bf9bd7f68b0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CommV1_dict.EN

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\Tools\CommV1_dict.EN
            • Size 111KB
            • SHA256 742fb77e6bb2d7426c5a6c40a1228d4b3b1058fcd125216252294d9b2b6540d8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linInstUtil_100x32.dll

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linInstUtil_100x32.dll
            • Size 76KB
            • SHA256 79193e04dd49d5784dc26990a66b65d5d84bfe11ea99d831d1976845aa124af6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linInstUtil_140x64.dll

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linInstUtil_140x64.dll
            • Size 100KB
            • SHA256 2f5ce63c6dc679c8ca8a74f8c8b6585eb724b6bd8819a79cb8c9d18b4b8c24c9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linInstUtil_dict.EN

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linInstUtil_dict.EN
            • Size 7KB
            • SHA256 8588af448e478d4635eb2fbc7509d3ef7d9de02e4704685d5235b01f775c456b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linSetup.exe

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linSetup.exe
            • Size 241KB
            • SHA256 6c3f1af9fe5ccb771a56ab705697bbbf2a4129894df8b1e8e6d7f25bed3f887f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linSetup.ico

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linSetup.ico
            • Size 363KB
            • SHA256 1680c1e544482e6ce8a2952686f441d68a8dfd10c42efd4850dbbce53ab36af3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            linSetup.inf

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linSetup.inf
            • Size 210B
            • SHA256 13ed7072061d1cf6c98264fc3c232824ad77a2cb2f72ce9edcc9f3474b2246a1
            • MD5 SHA1 SHA512 TLSH

            linSetup_dict.EN

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linSetup_dict.EN
            • Size 6KB
            • SHA256 2fc9fcf12b25f0745bea32d2707109f2ed5515da09cd101a11b6580281b613e2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mfc100u.dll

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\mfc100u.dll
            • Size 4.2MB
            • SHA256 24bb6838defd491df5460a88bed2d70b903a2156c49fb63e214e2c77251eca71
            • MD5 SHA1 SHA512 SSDEEP TLSH

            msvcr100.dll

            • Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\msvcr100.dll
            • Size 755KB
            • SHA256 60c06e0fa4449314da3a0a87c1a9d9577df99226f943637e06f61188e5862efa
            • MD5 SHA1 SHA512 SSDEEP TLSH

            tasklist.cmd

            • Path C:\Users\Admin\AppData\Local\Temp\tasklist.cmd
            • Size 110B
            • SHA256 097a0951b6d5225cb053937b2fce84515a53c05719f0f77c11deb4d9e44f57fb
            • MD5 SHA1 SHA512 TLSH

            tasklist.txt

            • Path C:\Users\Admin\AppData\Local\Temp\tasklist.txt
            • Size 64B
            • SHA256 943b315e065238b7073b033f534ef954b6b6461fb3f03a3f5b8555b11bc4c0a2
            • MD5 SHA1 SHA512 TLSH

            ISBEW64.exe

            • Path C:\Users\Admin\AppData\Local\Temp\{9DE78F22-F5C1-433A-9450-497541419FA7}\ISBEW64.exe
            • Size 117KB
            • SHA256 6647c180d9d9c5daeb7a41cacc96ca6722e08bb4a43a04364d37406261dd9804
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ISRT.dll

            • Path C:\Users\Admin\AppData\Local\Temp\{9DE78F22-F5C1-433A-9450-497541419FA7}\ISRT.dll
            • Size 203KB
            • SHA256 793b3384751f12793d24cf769438aaa7bec47a6b0f22397e8588e83cb8fe4b61
            • MD5 SHA1 SHA512 SSDEEP TLSH

            _isres.dll

            • Path C:\Users\Admin\AppData\Local\Temp\{9DE78F22-F5C1-433A-9450-497541419FA7}\_isres.dll
            • Size 120KB
            • SHA256 1e154a29673d129414ab56b995d04afcfa1a02af47dabaa28cd11c25f7d6026a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            logo.png

            • Path C:\Windows\Temp\{44D2C0E8-31E8-4316-8DAA-B57809680916}\.ba\logo.png
            • Size 1KB
            • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
            • MD5 SHA1 SHA512 TLSH

            wixstdba.dll

            • Path C:\Windows\Temp\{44D2C0E8-31E8-4316-8DAA-B57809680916}\.ba\wixstdba.dll
            • Size 191KB
            • SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
            • MD5 SHA1 SHA512 SSDEEP TLSH

            cab2C04DDC374BD96EB5C8EB8208F2C7C92

            • Path C:\Windows\Temp\{44D2C0E8-31E8-4316-8DAA-B57809680916}\cab2C04DDC374BD96EB5C8EB8208F2C7C92
            • Size 5.4MB
            • SHA256 cc001c20f85e16015e0d23eb0c3a9bc3c3cdcc1adda53f88ac77dd29705ba01a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            cab5046A8AB272BF37297BB7928664C9503

            • Path C:\Windows\Temp\{44D2C0E8-31E8-4316-8DAA-B57809680916}\cab5046A8AB272BF37297BB7928664C9503
            • Size 962KB
            • SHA256 8fafd6d0754ee53125902df1b67ef2db86eb7af4c097522f2fb58443501fecdd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vcRuntimeAdditional_x64

            • Path C:\Windows\Temp\{44D2C0E8-31E8-4316-8DAA-B57809680916}\vcRuntimeAdditional_x64
            • Size 188KB
            • SHA256 7489cdde6a0c8aadb3253f22c460c2dc8099ba677f42d46b277f7040327c9b28
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vcRuntimeMinimum_x64

            • Path C:\Windows\Temp\{44D2C0E8-31E8-4316-8DAA-B57809680916}\vcRuntimeMinimum_x64
            • Size 188KB
            • SHA256 e55a6c147daab01c66aed5e6be0c990bbed0cb78f1c0898373713343ef8556cd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vcredist_x64.exe

            • Path C:\Windows\Temp\{56A920F4-089A-4375-8041-3029D7F84336}\.cr\vcredist_x64.exe
            • Size 635KB
            • SHA256 8cd998a0318f07a27f78b75edb19479f44273590e300629eff237d47643c496c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            memory/2320-803-0x0000000000400000-0x000000000041D000-memory.dmp

            memory/2972-373-0x0000000006F00000-0x0000000006F90000-memory.dmp

            memory/2972-342-0x0000000010000000-0x0000000010196000-memory.dmp

            memory/2972-372-0x0000000006E70000-0x0000000006EFE000-memory.dmp

            memory/2972-375-0x0000000010000000-0x0000000010196000-memory.dmp

            memory/2972-686-0x0000000010000000-0x0000000010196000-memory.dmp

            memory/2972-390-0x0000000010000000-0x0000000010196000-memory.dmp

            memory/2972-391-0x0000000006E70000-0x0000000006EFE000-memory.dmp

            memory/3096-804-0x0000000000400000-0x000000000041D000-memory.dmp

            memory/3472-806-0x0000000000400000-0x000000000041D000-memory.dmp

            memory/4532-802-0x0000000000400000-0x000000000041D000-memory.dmp

            memory/4576-805-0x0000000000400000-0x000000000041D000-memory.dmp