9047f7399c9aecc3f0d5ce9dcc0ec48987af6653f91750ac9b3ca00befaeae2b

Analysis

max time kernel
150s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 18:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LINEAR_Installation_Center.exe
Size 35.6MB
Sample260925-wp4y4ashne
SHA256 9047f7399c9aecc3f0d5ce9dcc0ec48987af6653f91750ac9b3ca00befaeae2b
MD5 43d0db6e310ddb06c8c215c48acfd8d5
SHA1 591889aa03b151a61fc6b6950a89e8dbb60d7825
SHA512 94b4bfea2b4036b3ff55fa79610ac9956e2b4f787ad0b37b250b1bbeb6385f2c94ecb65c531653e07800f02be0d049928a451d29361ac398edb8727eeb64a87b
SSDEEP 786432:zQgTiajmRdnN+J++bM9T2kKpcCi3r73veGqLIeEiOBb:8gTy3nNIvMd2za3n3vUIe9OBb
TLSH
T1CF8733361E91D89DE2720E753AB03DC801EEFD073923AAE75E6539EB963C5480B4B1C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution persistence ransomware upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 3 IoCs

Detects file using ACProtect software.

resource	yara_rule
behavioral2/files/0x000d00000001c48f-342.dat	acprotect
behavioral2/files/0x000d00000001c521-367.dat	acprotect
behavioral2/files/0x000d00000001c523-375.dat	acprotect

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{5af95fd8-a22e-458f-acee-c61bd787178e} = "\"C:\\ProgramData\\Package Cache\\{5af95fd8-a22e-458f-acee-c61bd787178e}\\VC_redist.x64.exe\" /burn.runonce"	VC_redist.x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{5af95fd8-a22e-458f-acee-c61bd787178e} = "\"C:\\ProgramData\\Package Cache\\{5af95fd8-a22e-458f-acee-c61bd787178e}\\VC_redist.x64.exe\" /burn.runonce"	VC_redist.x64.exe

Enumerates connected drives 3 TTPs 64 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\I:	VC_redist.x64.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\B:	VC_redist.x64.exe
File opened (read-only)	\??\H:	VC_redist.x64.exe
	\??\F:\	Setup.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\D:	VC_redist.x64.exe
File opened (read-only)	\??\Y:	Setup.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\G:	VC_redist.x64.exe
File opened (read-only)	\??\I:	Setup.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\A:	VC_redist.x64.exe
File opened (read-only)	\??\L:	VC_redist.x64.exe
File opened (read-only)	\??\T:	VC_redist.x64.exe
File opened (read-only)	\??\L:	Setup.exe
File opened (read-only)	\??\R:	Setup.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\M:	VC_redist.x64.exe
File opened (read-only)	\??\Y:	VC_redist.x64.exe
File opened (read-only)	\??\K:	Setup.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\U:	VC_redist.x64.exe
File opened (read-only)	\??\G:	Setup.exe
File opened (read-only)	\??\W:	Setup.exe
File opened (read-only)	\??\X:	Setup.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\Q:	VC_redist.x64.exe
File opened (read-only)	\??\S:	VC_redist.x64.exe
File opened (read-only)	\??\V:	VC_redist.x64.exe
File opened (read-only)	\??\B:	Setup.exe
File opened (read-only)	\??\J:	Setup.exe
File opened (read-only)	\??\P:	Setup.exe
File opened (read-only)	\??\U:	Setup.exe
File opened (read-only)	\??\V:	Setup.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\D:	Setup.exe
File opened (read-only)	\??\O:	Setup.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\R:	VC_redist.x64.exe
File opened (read-only)	\??\Z:	VC_redist.x64.exe
	\??\F:\	msiexec.exe
File opened (read-only)	\??\N:	Setup.exe
File opened (read-only)	\??\Q:	Setup.exe
File opened (read-only)	\??\T:	Setup.exe
File opened (read-only)	\??\Z:	Setup.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\W:	VC_redist.x64.exe
File opened (read-only)	\??\M:	Setup.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\S:	Setup.exe
File opened (read-only)	\??\X:	VC_redist.x64.exe

Indicator Removal: File Deletion 1 TTPs
Adversaries may delete files left behind by the actions of their intrusion activity.
defense_evasion

File Deletion
T1070.004

Discovers running processes 1 TTPs 1 IoCs

Running process information can be used to identify security tools or plan follow-on actions.

discovery

Process Discovery

T1057

pid	Process
3036	tasklist.exe

Drops file in System32 directory 51 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\mfc140u.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfcm140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140deu.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcruntime140_1.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140esn.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140jpn.dll	msiexec.exe
File created	C:\Windows\system32\mfc140rus.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_1.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140cht.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140ita.dll	msiexec.exe
File created	C:\Windows\system32\mfc140cht.dll	msiexec.exe
File created	C:\Windows\system32\mfc140kor.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcamp140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfcm140u.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140kor.dll	msiexec.exe
File created	C:\Windows\system32\mfc140deu.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_2.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vccorlib140.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_atomic_wait.dll	msiexec.exe
File created	C:\Windows\system32\vcamp140.dll	msiexec.exe
File created	C:\Windows\system32\vcruntime140_threads.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140chs.dll	msiexec.exe
File created	C:\Windows\system32\mfc140chs.dll	msiexec.exe
File created	C:\Windows\system32\mfc140fra.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_atomic_wait.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_codecvt_ids.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_2.dll	msiexec.exe
File created	C:\Windows\system32\vcruntime140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140enu.dll	msiexec.exe
File created	C:\Windows\system32\mfc140esn.dll	msiexec.exe
File created	C:\Windows\system32\mfc140u.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcomp140.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_1.dll	msiexec.exe
File created	C:\Windows\system32\vcomp140.dll	msiexec.exe
File created	C:\Windows\system32\mfc140.dll	msiexec.exe
File created	C:\Windows\system32\mfc140enu.dll	msiexec.exe
File created	C:\Windows\system32\mfcm140u.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\concrt140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140fra.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140rus.dll	msiexec.exe
File created	C:\Windows\system32\mfc140ita.dll	msiexec.exe
File created	C:\Windows\system32\mfc140jpn.dll	msiexec.exe
File created	C:\Windows\system32\mfcm140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcruntime140.dll	msiexec.exe
File created	C:\Windows\system32\concrt140.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_codecvt_ids.dll	msiexec.exe
File created	C:\Windows\system32\vccorlib140.dll	msiexec.exe
File created	C:\Windows\system32\vcruntime140_1.dll	msiexec.exe

UPX packed file 13 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/files/0x000d00000001c48f-342.dat	upx
behavioral2/memory/5760-344-0x0000000010000000-0x0000000010196000-memory.dmp	upx
behavioral2/files/0x000d00000001c521-367.dat	upx
behavioral2/memory/5760-371-0x0000000008040000-0x00000000080CE000-memory.dmp	upx
behavioral2/memory/5760-369-0x0000000008040000-0x00000000080CE000-memory.dmp	upx
behavioral2/files/0x000d00000001c523-375.dat	upx
behavioral2/memory/5760-377-0x0000000008110000-0x00000000081A0000-memory.dmp	upx
behavioral2/memory/5760-379-0x0000000010000000-0x0000000010196000-memory.dmp	upx
behavioral2/memory/5760-381-0x0000000008040000-0x00000000080CE000-memory.dmp	upx
behavioral2/memory/5760-498-0x0000000010000000-0x0000000010196000-memory.dmp	upx
behavioral2/memory/5760-499-0x0000000008040000-0x00000000080CE000-memory.dmp	upx
behavioral2/memory/5760-832-0x0000000010000000-0x0000000010196000-memory.dmp	upx
behavioral2/memory/5760-833-0x0000000008040000-0x00000000080CE000-memory.dmp	upx

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINE35a8.rra	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Onli3bb2.rra	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Onli3c4f.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.NL	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\linI32e8.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.TR	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.FR	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.RU	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\LINE33e2.rra	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\linI3411.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_POL.regionx	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINE3588.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_SampleProjects_banner_EN.png	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm36b1.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\CommV1_dict.NL	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.IT	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_ITA.regionx	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_140x64.dll	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.TR	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linC3ab8.rra	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Onli3c6e.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\CopyInfo.png	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_345f.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_UKR.regionx	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_140x64.dll	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\linInstaller_Revision.prdx	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINE350b.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Programs_EN.htm	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\hasp377c.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.FR	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\LINEAR.ico	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Programs_banner_EN.png	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\CommV1_dict.RU	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.NL	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\linI33d3.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\LINEAR_About.png	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_SampleProjects_banner_DE.png	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\LINEAR_About.png.inf	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_RUS.regionx	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Datasets_banner_EN.png	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm370f.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.IT	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\liNe3b35.rra	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Onli3c9d.rra	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Copy33e2.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_BEL.regionx	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_FRA.regionx	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\CommV1_dict.FR	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.PL	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\liNearGL_140x64.dll	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm36f0.rra	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_3440.rra	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINE3579.rra	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Lice3aa9.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_external_link_white.png	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_SampleProjects_EN.htm	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linC3ac8.rra	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\liNe3ba3.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.EN	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Lice3a8a.rra	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Onli3c8d.rra	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\LINE3402.rra	Setup.exe
File created	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_3421.rra	Setup.exe
File opened for modification	C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_NED.regionx	Setup.exe

Drops file in Windows directory 23 IoCs

description	ioc	Process
File created	C:\Windows\Installer\e5a1aa6.msi	msiexec.exe
File created	C:\Windows\SystemTemp\~DFB4D0A41D0F1BA16B.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\e5a1a7e.msi	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\Installer\e5a1a91.msi	msiexec.exe
File created	C:\Windows\Installer\SourceHash{59CED48F-EBFE-480C-8A38-FC079C2BEC0F}	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI3EB3.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\~DF4ABCCBDF35FF97D9.TMP	msiexec.exe
File created	C:\Windows\Installer\e5a1a90.msi	msiexec.exe
File created	C:\Windows\SystemTemp\~DFEB930AAF8F351892.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\e5a1a91.msi	msiexec.exe
File created	C:\Windows\SystemTemp\~DF08492498D2699689.TMP	msiexec.exe
File created	C:\Windows\Installer\e5a1a7e.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI1EA5.tmp	msiexec.exe
File created	C:\Windows\Installer\SourceHash{B8B3BB4A-A10D-4F51-91B7-A64FFAC31EA7}	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI2211.tmp	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File created	C:\Windows\SystemTemp\~DF042F608B5F7B5870.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\~DF18D194176B2DAE6C.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\~DF82699D16ED375E7E.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI3905.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\~DF85E5899D2AE5DCEE.TMP	msiexec.exe

Executes dropped EXE 16 IoCs

pid	Process
2948	Setup.exe
764	linSetup.exe
5760	Setup.exe
4344	ISBEW64.exe
716	vcredist_x64.exe
3372	vcredist_x64.exe
2424	VC_redist.x64.exe
468	VC_redist.x64.exe
3080	VC_redist.x64.exe
5908	VC_redist.x64.exe
5308	VC_redist.x64.exe
2724	RegDACL.exe
3028	RegDACL.exe
1552	RegDACL.exe
5468	RegDACL.exe
5600	RegDACL.exe

Loads dropped DLL 19 IoCs

pid	Process
2948	Setup.exe
2948	Setup.exe
2948	Setup.exe
2948	Setup.exe
2948	Setup.exe
764	linSetup.exe
764	linSetup.exe
5760	Setup.exe
5760	Setup.exe
5760	Setup.exe
5760	Setup.exe
5760	Setup.exe
5760	Setup.exe
5760	Setup.exe
5760	Setup.exe
5760	Setup.exe
5760	Setup.exe
3372	vcredist_x64.exe
5908	VC_redist.x64.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2392	cmd.exe

Program crash 2 IoCs

pid	pid_target	Process	procid_target
1672	3372	WerFault.exe	109
4192	5908	WerFault.exe	114

System Location Discovery: System Language Discovery 1 TTPs 17 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LINEAR_Installation_Center.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vcredist_x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RegDACL.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RegDACL.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RegDACL.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RegDACL.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vcredist_x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RegDACL.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 00000000040000000463f4e358e8ea170000000000000000000000000000000000000000000000000000000000000000000000000000000000001071020000000000c01200000000000000000000000027010100008838010463f4e30000000000001071020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0830200000000006025c501000000000000000000000700010000e841010463f4e3000000000000d08302000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030a9c701000000000000050000000000000000000000070001000098d4e30463f4e300000000000030a9c7010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030a9cc0100000000000005000000000000000000000007000100009854e60463f4e300000000000030a9cc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\29	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2b	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\28	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\29	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2A	msiexec.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\liNear.Updater.Package\shell\open\command\ = "C:\\Program Files (x86)\\LINEAR Software\\Installation Center\\linInstaller.exe \"%1\" /Manufacturer \"liNear GmbH\" /Edition:liNearSolutions"	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.lid\ = "liNear.License.File"	regedit.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\Version = "237536274"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\SourceList\PackageName = "vc_runtimeAdditional_x64.msi"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\SourceList\Net	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\SourceList\LastUsedSource = "n;1;C:\\ProgramData\\Package Cache\\{59CED48F-EBFE-480C-8A38-FC079C2BEC0F}v14.40.33810\\packages\\vcRuntimeAdditional_amd64\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.40,bundle	VC_redist.x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.linupdater	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\liNear.Updater.Package\shell\open	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\liNear.License.File\ = "liNear License File"	regedit.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\InstanceType = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\SourceList\Media	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.40,bundle\DisplayName = "Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33810"	VC_redist.x64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\09A86F63C932FD435BC8463B1035EC53	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8A567BD6FA501A947AD1F646E53EEC14\SourceList\Media	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\liNear.Updater.Package\DefaultIcon	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.40,bundle\Dependents\{5af95fd8-a22e-458f-acee-c61bd787178e}	VC_redist.x64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\8800A266DCF6DD54E97A86760485EA5D	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14\Version = "14.40.33810"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\A4BB3B8BD01A15F4197B6AF4AF3CE17A\Language = "1033"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\A4BB3B8BD01A15F4197B6AF4AF3CE17A\DeploymentFlags = "3"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.40,bundle	VC_redist.x64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8A567BD6FA501A947AD1F646E53EEC14\SourceList	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\liNear.License.File\DefaultIcon	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\A4BB3B8BD01A15F4197B6AF4AF3CE17A\VC_Runtime_Minimum	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\A4BB3B8BD01A15F4197B6AF4AF3CE17A\Servicing_Key	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\A4BB3B8BD01A15F4197B6AF4AF3CE17A	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\A4BB3B8BD01A15F4197B6AF4AF3CE17A\SourceList\LastUsedSource = "n;1;C:\\ProgramData\\Package Cache\\{B8B3BB4A-A10D-4F51-91B7-A64FFAC31EA7}v14.40.33810\\packages\\vcRuntimeMinimum_amd64\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.40,bundle\ = "{5af95fd8-a22e-458f-acee-c61bd787178e}"	VC_redist.x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14\Dependents\{5af95fd8-a22e-458f-acee-c61bd787178e}	VC_redist.x64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8A567BD6FA501A947AD1F646E53EEC14\SourceList\Net	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\88AAB0B9F51EF1A3CA0C2B609EDD7FC1	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\A4BB3B8BD01A15F4197B6AF4AF3CE17A\Provider	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\A4BB3B8BD01A15F4197B6AF4AF3CE17A\AdvertiseFlags = "388"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\A4BB3B8BD01A15F4197B6AF4AF3CE17A\SourceList	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.40,bundle\Version = "14.40.33810.0"	VC_redist.x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.lid	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\liNear.License.File\shell	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\AuthorizedLUAApp = "0"	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D\SourceList\Media	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\A4BB3B8BD01A15F4197B6AF4AF3CE17A\Version = "237536274"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\A4BB3B8BD01A15F4197B6AF4AF3CE17A\Assignment = "1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\A4BB3B8BD01A15F4197B6AF4AF3CE17A\SourceList\Net\1 = "C:\\ProgramData\\Package Cache\\{B8B3BB4A-A10D-4F51-91B7-A64FFAC31EA7}v14.40.33810\\packages\\vcRuntimeMinimum_amd64\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14\Version = "14.40.33810"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14\ = "{59CED48F-EBFE-480C-8A38-FC079C2BEC0F}"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\Language = "1033"	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\Clients = 3a0000000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.40,bundle\Version = "14.40.33810.0"	VC_redist.x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\A4BB3B8BD01A15F4197B6AF4AF3CE17A\SourceList\Media\1 = ";"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\liNear.License.File\shell\open	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\ProductName = "Microsoft Visual C++ 2022 X64 Additional Runtime - 14.40.33810"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\Assignment = "1"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\88AAB0B9F51EF1A3CA0C2B609EDD7FC1	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\88AAB0B9F51EF1A3CA0C2B609EDD7FC1\F84DEC95EFBEC084A883CF70C9B2CEF0	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D\SourceList\Net	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14\ = "{B8B3BB4A-A10D-4F51-91B7-A64FFAC31EA7}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.40,bundle\DisplayName = "Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33810"	VC_redist.x64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\8A567BD6FA501A947AD1F646E53EEC14	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\liNear.Updater.Package\ = "liNear Update Package"	regedit.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\AdvertiseFlags = "388"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\SourceList\Media\1 = ";"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\09A86F63C932FD435BC8463B1035EC53\A4BB3B8BD01A15F4197B6AF4AF3CE17A	msiexec.exe

Runs .reg file with regedit 1 IoCs

pid	Process
5888	regedit.exe

Suspicious behavior: EnumeratesProcesses 20 IoCs

pid	Process
764	linSetup.exe
764	linSetup.exe
764	linSetup.exe
764	linSetup.exe
764	linSetup.exe
764	linSetup.exe
764	linSetup.exe
764	linSetup.exe
764	linSetup.exe
764	linSetup.exe
764	linSetup.exe
764	linSetup.exe
5508	msiexec.exe
5508	msiexec.exe
5508	msiexec.exe
5508	msiexec.exe
5508	msiexec.exe
5508	msiexec.exe
5508	msiexec.exe
5508	msiexec.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	3036	tasklist.exe
Token: SeSecurityPrivilege	5508	msiexec.exe
Token: SeCreateTokenPrivilege	5760	Setup.exe
Token: SeAssignPrimaryTokenPrivilege	5760	Setup.exe
Token: SeLockMemoryPrivilege	5760	Setup.exe
Token: SeIncreaseQuotaPrivilege	5760	Setup.exe
Token: SeMachineAccountPrivilege	5760	Setup.exe
Token: SeTcbPrivilege	5760	Setup.exe
Token: SeSecurityPrivilege	5760	Setup.exe
Token: SeTakeOwnershipPrivilege	5760	Setup.exe
Token: SeLoadDriverPrivilege	5760	Setup.exe
Token: SeSystemProfilePrivilege	5760	Setup.exe
Token: SeSystemtimePrivilege	5760	Setup.exe
Token: SeProfSingleProcessPrivilege	5760	Setup.exe
Token: SeIncBasePriorityPrivilege	5760	Setup.exe
Token: SeCreatePagefilePrivilege	5760	Setup.exe
Token: SeCreatePermanentPrivilege	5760	Setup.exe
Token: SeBackupPrivilege	5760	Setup.exe
Token: SeRestorePrivilege	5760	Setup.exe
Token: SeShutdownPrivilege	5760	Setup.exe
Token: SeDebugPrivilege	5760	Setup.exe
Token: SeAuditPrivilege	5760	Setup.exe
Token: SeSystemEnvironmentPrivilege	5760	Setup.exe
Token: SeChangeNotifyPrivilege	5760	Setup.exe
Token: SeRemoteShutdownPrivilege	5760	Setup.exe
Token: SeUndockPrivilege	5760	Setup.exe
Token: SeSyncAgentPrivilege	5760	Setup.exe
Token: SeEnableDelegationPrivilege	5760	Setup.exe
Token: SeManageVolumePrivilege	5760	Setup.exe
Token: SeImpersonatePrivilege	5760	Setup.exe
Token: SeCreateGlobalPrivilege	5760	Setup.exe
Token: SeCreateTokenPrivilege	5760	Setup.exe
Token: SeAssignPrimaryTokenPrivilege	5760	Setup.exe
Token: SeLockMemoryPrivilege	5760	Setup.exe
Token: SeIncreaseQuotaPrivilege	5760	Setup.exe
Token: SeMachineAccountPrivilege	5760	Setup.exe
Token: SeTcbPrivilege	5760	Setup.exe
Token: SeSecurityPrivilege	5760	Setup.exe
Token: SeTakeOwnershipPrivilege	5760	Setup.exe
Token: SeLoadDriverPrivilege	5760	Setup.exe
Token: SeSystemProfilePrivilege	5760	Setup.exe
Token: SeSystemtimePrivilege	5760	Setup.exe
Token: SeProfSingleProcessPrivilege	5760	Setup.exe
Token: SeIncBasePriorityPrivilege	5760	Setup.exe
Token: SeCreatePagefilePrivilege	5760	Setup.exe
Token: SeCreatePermanentPrivilege	5760	Setup.exe
Token: SeBackupPrivilege	5760	Setup.exe
Token: SeRestorePrivilege	5760	Setup.exe
Token: SeShutdownPrivilege	5760	Setup.exe
Token: SeDebugPrivilege	5760	Setup.exe
Token: SeAuditPrivilege	5760	Setup.exe
Token: SeSystemEnvironmentPrivilege	5760	Setup.exe
Token: SeChangeNotifyPrivilege	5760	Setup.exe
Token: SeRemoteShutdownPrivilege	5760	Setup.exe
Token: SeUndockPrivilege	5760	Setup.exe
Token: SeSyncAgentPrivilege	5760	Setup.exe
Token: SeEnableDelegationPrivilege	5760	Setup.exe
Token: SeManageVolumePrivilege	5760	Setup.exe
Token: SeImpersonatePrivilege	5760	Setup.exe
Token: SeCreateGlobalPrivilege	5760	Setup.exe
Token: SeBackupPrivilege	1784	vssvc.exe
Token: SeRestorePrivilege	1784	vssvc.exe
Token: SeAuditPrivilege	1784	vssvc.exe
Token: SeShutdownPrivilege	2424	VC_redist.x64.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2948	Setup.exe
764	linSetup.exe
764	linSetup.exe
764	linSetup.exe
764	linSetup.exe
5508	msiexec.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4568 wrote to memory of 1676	4568	LINEAR_Installation_Center.exe	89
PID 4568 wrote to memory of 2948	4568	LINEAR_Installation_Center.exe	91
PID 2948 wrote to memory of 764	2948	Setup.exe	92
PID 764 wrote to memory of 2392	764	linSetup.exe	93
PID 2392 wrote to memory of 3036	2392	cmd.exe	96
PID 764 wrote to memory of 5760	764	linSetup.exe	98
PID 5760 wrote to memory of 4344	5760	Setup.exe	100
PID 5760 wrote to memory of 716	5760	Setup.exe	108
PID 716 wrote to memory of 3372	716	vcredist_x64.exe	109
PID 3372 wrote to memory of 2424	3372	vcredist_x64.exe	110
PID 468 wrote to memory of 3080	468	VC_redist.x64.exe	113
PID 3080 wrote to memory of 5908	3080	VC_redist.x64.exe	114
PID 5908 wrote to memory of 5308	5908	VC_redist.x64.exe	118
PID 5760 wrote to memory of 5888	5760	Setup.exe	120
PID 5760 wrote to memory of 2724	5760	Setup.exe	121
PID 5760 wrote to memory of 3028	5760	Setup.exe	122
PID 5760 wrote to memory of 1552	5760	Setup.exe	123
PID 5760 wrote to memory of 5468	5760	Setup.exe	124
PID 5760 wrote to memory of 5600	5760	Setup.exe	125

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\LINEAR_Installation_Center.exe
"C:\Users\Admin\AppData\Local\Temp\LINEAR_Installation_Center.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4568
- C:\Windows\SysWOW64\cmd.exe
  "C:\Windows\System32\cmd.exe" /C del "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\*.reg" /f /s /q & del "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\*_ext.infx" /f /s /q
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1676
- C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\Setup.exe
  "C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\Setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2948
- - C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linSetup.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:764
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\tasklist.cmd" "
      4⤵
      Executes a command shell one-liner
      Suspicious use of WriteProcessMemory
      PID:2392
    - - C:\Windows\system32\tasklist.exe
        
        tasklist.exe /FI "WINDOWTITLE eq LINEAR Installation Center"
        5⤵
        Discovers running processes
        Suspicious use of AdjustPrivilegeToken
        
        PID:3036
  - - C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Setup.exe
      "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Setup.exe" /z"silent;TargetDir:C:\Program Files (x86)\LINEAR Software\Installation Center" /L1033
      4⤵
      Enumerates connected drives
      Drops file in Program Files directory
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of WriteProcessMemory
      PID:5760
    - - C:\Users\Admin\AppData\Local\Temp\{6F100C28-BF19-42FD-AA3A-2972E25D31BE}\ISBEW64.exe
        
        C:\Users\Admin\AppData\Local\Temp\{6F100C28-BF19-42FD-AA3A-2972E25D31BE}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{4A3BA444-83AE-4E55-94C9-A5301AD151F0}
        5⤵
        Executes dropped EXE
        
        PID:4344
    - - C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\3rdParty\VCRedist_2019\vcredist_x64.exe
        
        "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\3rdParty\VCRedist_2019\vcredist_x64.exe" /q /norestart
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:716
      - C:\Windows\Temp\{834C9976-0DE5-41AA-A54E-CDE1D54C485D}\.cr\vcredist_x64.exe
        
        "C:\Windows\Temp\{834C9976-0DE5-41AA-A54E-CDE1D54C485D}\.cr\vcredist_x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\3rdParty\VCRedist_2019\vcredist_x64.exe" -burn.filehandle.attached=736 -burn.filehandle.self=740 /q /norestart
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:3372
        
        C:\Windows\Temp\{AA9F40B2-7943-4585-B421-85191B9A61F6}\.be\VC_redist.x64.exe
        
        "C:\Windows\Temp\{AA9F40B2-7943-4585-B421-85191B9A61F6}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{9DD81EC3-EB4D-4E36-BE6D-ECDEA52608A4} {CC689883-78EA-4989-BA33-2989947461F0} 3372
        7⤵
        Adds Run key to start application
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Modifies registry class
        Suspicious use of AdjustPrivilegeToken
        
        PID:2424
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 3372 -s 964
        7⤵
        Program crash
        
        PID:1672
    - - C:\Windows\SysWOW64\regedit.exe
        
        regedit.exe /s /i "C:\Users\Admin\AppData\Local\Temp\liNearInstallerSolutions.reg"
        5⤵
        System Location Discovery: System Language Discovery
        Modifies registry class
        Runs .reg file with regedit
        
        PID:5888
    - - C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe
        
        "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe" "HKLM\SOFTWARE\Wow6432Node\liNear GmbH\Installations" /GGU:CW
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:2724
    - - C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe
        
        "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe" "HKLM\SOFTWARE\Wow6432Node\liNear GmbH\Env" /GGU:W
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:3028
    - - C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe
        
        "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe" "HKLM\SOFTWARE\Wow6432Node\REHAU\Env" /GGU:W
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:1552
    - - C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe
        
        "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe" "HKLM\SOFTWARE\Wow6432Node\Viega\Env" /GGU:W
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:5468
    - - C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe
        
        "C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Common Files\RegDACL.exe" "HKLM\SOFTWARE\Wow6432Node\Viessmann\Env" /GGU:W
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:5600

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:5508

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:1784

C:\Windows\system32\srtasks.exe
C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
1⤵
PID:5204

C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
"C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" /burn.runonce
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:468
- C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
  "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260925190755.log"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:3080
- - C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
    "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" -burn.filehandle.attached=556 -burn.filehandle.self=576 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260925190755.log"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:5908
  - - C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe
      "C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{61AE097C-3BFD-4282-A47E-A24BD841C5D5} {16FA17BB-568E-4A6D-89E2-6060C54CE69F} 5908
      4⤵
      Adds Run key to start application
      Enumerates connected drives
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      Modifies registry class
      PID:5308
  - - C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 5908 -s 1044
      4⤵
      Program crash
      PID:4192

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3372 -ip 3372
1⤵
PID:2652

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 5908 -ip 5908
1⤵
PID:2840

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e5a1a83.rbs

Path C:\Config.Msi\e5a1a83.rbs
Size 19KB
SHA256 d5ec48095c3d21e36e9b2113eb457be65a6596a5cfdff2bfb1fac0868da31430
MD5 d89057010713ddd8819bde75cd197649
SHA1 883a906f0fff5443aa35633ba17a9d17ea0d61bd
SHA512 04889fe8ce71d26a624f6856fd8e9de646e0d5050e4701d0aaa3005e2e97546d41edc6f354e1d96286af6961f5ef6c17edce321bda2772f49624d15c89880776
SSDEEP 192:RvRu1kRa15dXcFUADIc1f+W+y4+ogPHF7:RvRu6RaTeC81f/c4F7
TLSH
T1C092FD426A80C9E3D8766B30CD635B653B76DBD59350438B50DC90308F93BCA2F9DA9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5a1a8f.rbs

Path C:\Config.Msi\e5a1a8f.rbs
Size 19KB
SHA256 48ef89c165172441255ac1b177e2a895558208b8ffb4bb9d4ef03e0c87fc754a
MD5 a7da4e876775972251167e1190854cbb
SHA1 1c80ca1091972465a416a17b232d46501956c489
SHA512 b9dd17d8c5195452b3bb2ab3921f8973ebc7f8649119bfb65c10226325b59117bb0981899929651f58712fa18a8dda32a9888ca3f7ad0c0ff3778c00cc3c0ae7
SSDEEP 192:RODG+fVvI+qFDw1WNRg3qugw9CBPp/I4p/jT7E99fMuRF5bpm:RIG+fVvIrFDw1WNRHzpbpQMuRs
TLSH
T16F92FD41FA4485E3D8A62B70CD8757243B7AD7EEA311434B01CD91308EE77CA6F9A74A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5a1a96.rbs

Path C:\Config.Msi\e5a1a96.rbs
Size 21KB
SHA256 a298682fb6e84986db8b712449f26a67d7ad55bf66cbf9d6c39c4fba09966742
MD5 e8bbb8eae9c7ab665c37441ed2657005
SHA1 517a40c26db7f8684c1644f0bcc69bdfd7dedd96
SHA512 a50cde6364199c063280c520a69e150718e81c30958066ef2bd88f288bd6fc8ac2ab8b64b7be59c30f6909ecfb0edd88e0b7f3d93a61f7a766b089faee6e94a5
SSDEEP 384:6dR7GRrnAKxNAUhUC7xJjrMNYPzIbSfYQc1U0LSDgBvkP:6TyTAKhkmt
TLSH
T1DAA20D03768099E3C86627B1DD671BA93F73D7D99350434B10ACD1388F633C72E5AA9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5a1aa5.rbs

Path C:\Config.Msi\e5a1aa5.rbs
Size 21KB
SHA256 e73cfbdddf84116bcc21c1d68c55ac749df265ce24bf25225eea20d746722da8
MD5 1e70b90cbf5756b9058969d95244e919
SHA1 6ae154efadc4a2bf69d0b0a2c7d6a07e1bf510a8
SHA512 45ba83c969e148c5685171e04eeb40332a294df4a51933065881b613d16898b1ec92de83f39b0e587b950230034000ec486d952feca95033800e5a64e3e186e2
SSDEEP 384:1lBiqbjuPTdpTAyjI40JLIsalckU72eC6YTvTvfvck3kLsY:1lBiqbjuPTdpTAy8hJLGT73Uk32sY
TLSH
T1CCA2FD43A604D693C8AB2B71CD572B55373AC3DAA3A6434B06CC91704F837C71F9E69A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CopyInfo.png

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\CopyInfo.png
Size 368B
SHA256 2d20e5fbd1c623449835b9dee3f73e53ba3ddf7016ab77f25ecf15a7e29802b2
MD5 80863077cf55c1ccbaa716f3f17390de
SHA1 7a443c617cc8cd0c1313a2e7527009d833d0a32c
SHA512 4385f62ad40ded73490bc2d306da6fee8dbe8a8fa605217c172b764c44879ab8df4f6c288c596a6993b10eaa1790ed53a8eeabb3ef56bf67572046c7bd7f6c69
TLSH
T1E2E026E27281B935C40D743055DFC8D0983128E844809E451683229C3E346BEB8D3EDC
MD5 SHA1 SHA512 TLSH

Submit Download

LINE33e2.rra

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\LINE33e2.rra
Size 363KB
SHA256 476db1faaa604480b7c96eea4952d84f798f861b3640d9064f65f8a996a67d9d
MD5 11162b640af76e770735c038912bfc3a
SHA1 71349a080fec883992306817eaa57b2d8971a35d
SHA512 71bb9a8ae3d4a3fd97247582dd844760d387cb4490bf83f3a9ea7882d63b8e688a21cf88b9fdcee76cdb6cbbd4d0aecbe24294caf8556e44d899f49d922bb3e5
SSDEEP 3072:aBgb9lF8SEUGWab8BHpKqcxWFLsPo3VMLZrN9qwmndZzzc+cuqdF5h+M7SqKuV69:i8/
TLSH
T1278453351E91E90ED2610F712EF038D801EFDE877957A6E74D2B3EAB993864C0B861C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LINEAR_About.png

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\LINEAR_About.png
Size 11KB
SHA256 f63eb63800a4af7bf766688d5126f76bd9d849000974404475fd8689a091df77
MD5 b351e1b1689e8194c147b172c4a60da8
SHA1 53e4c555f867f45c8cee9971d35bafa1ee3919d5
SHA512 563fd326b0dc04a64953803b5cd3b930d3f768ac45b311859c2f7e71bbef05fb0c91b743df85e3a97b0f42b7bc0e1a2364a8d47ef4ab8e409743604319dcb37c
SSDEEP 192:oFmVxtjKfu3nxy7XF1UyDILXj2MyWqhR1BiFwHh3alDvdpyN1zNtO:mmVJsF1UFXRyhRJWvCN1zTO
TLSH
T11A428D593A540FF2C530A26771EF4342DCA5409722D3E202DF64EA2F6FE7A51EE61E90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LINEAR_About.png.inf

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\LINEAR_About.png.inf
Size 150B
SHA256 98c41b1947ca9153e4fe76505f69b2cec6a10efc1791828d4327a8d526515ad6
MD5 17f0a97792a1f18b4570fa949b156db7
SHA1 f70362021f11b850d7a6f26d57acbee2ea4d1651
SHA512 0e249dce9e97da9f95d99b2c9d6ba1fcd6da4c8e24bb0893fbe23e91a6ff9165c6ec45d071081a475db2dd57c7d413a56db81daaeb705a8947b02773753dd230
TLSH
T1FBC08CA1881604BC05A2AA61B320FCA632DA0294856AEE008210D01C32A480ACC3E005
MD5 SHA1 SHA512 TLSH

Submit Download

Map_BEL.regionx

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_BEL.regionx
Size 324B
SHA256 18399a7f5371534360f8750f810b5e9cbec1f9814ebc3380dab764d745c4fcd1
MD5 26137723d749b3effd47c3fb71ee7fee
SHA1 dccc5c86d518c87b813021e52ce67a8bd39036f7
SHA512 92f423fc87db72c1f87aa19be898e355f3a5025f0d85d79473695306af47930abb63ad772d6801c0b41df2a08ea25656fcf2545ce0345caa2511e6fe1df8440a
TLSH
T14AE0264097B28C48B7E4F96D00DDA0C4140B67AC084B91186CA42F4A8D04B5FE595BB6
MD5 SHA1 SHA512 TLSH

Submit Download

Map_DEU.regionx

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_DEU.regionx
Size 243B
SHA256 3abc46713c01ed947beb3da76dc8c5f8d152f510ece835e208d80b5ce38a2efe
MD5 be944e6d8bd3a4cf0b71786b50dd2f0e
SHA1 7c400de8fcd905aa08bdb1f2cfd66a85e8fd934f
SHA512 abb2d68e829b129de3974e42eb0ed2f7db7a797e28dcc134f81adcdf2d661d0af032e78595b2cb3bbc1750c40b1aabea2b03cf054e055018f843d6273a249939
TLSH
T13ED05E94066B1C95A274B82A16EBF085280B27A4085FA12A68357D1A0F0198EF8D9FF2
MD5 SHA1 SHA512 TLSH

Submit Download

Map_FRA.regionx

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_FRA.regionx
Size 277B
SHA256 9ffb34f82718bb37f2580716df764a1756476aaf7a95ba8c6dad6374cdc65c5d
MD5 439ff9d9f2aa132540570f7a271386ee
SHA1 7399fc83888544c46cfd57f842235bb1238240b7
SHA512 5ab233c7e0e03234c739414cd23b9624dcd8bfb59b8cd6a351c106f2730a90433c01a88842cc854794560ac4f4fc1cdbbb43746cbd4e1ff51a732f17498d703b
TLSH
T14BD02B4441533CD1AE34F07654EC9144404F13B01E8F93196C70AD8A9E14D1E95CAFD1
MD5 SHA1 SHA512 TLSH

Submit Download

Map_INT.regionx

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_INT.regionx
Size 380B
SHA256 e5d360de8e4e62b7a292ed4b68933cd049e3afddb2a1ddd2670f78fad0ede1e6
MD5 5e99330b85609db7ce90d7135a8b2c90
SHA1 c876191329e096f8c98074da38b7285f6a013e47
SHA512 0a95f6a7ac0341d5a413380ebaac276d1c97acb4e5bec554a35413263a3d4e51c8cbdf9d7bf1470fd4f18786df26f4429071db66cae17ec2489c5fd5c3e9c08f
TLSH
T1A6E068015223CDC65768F8AE10EED4C118471FE00C4B5224ACA11E471E29B4E94C8B7A
MD5 SHA1 SHA512 TLSH

Submit Download

Map_ITA.regionx

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_ITA.regionx
Size 258B
SHA256 f5bb04ae4ed3ad070bd8e85b5f0021672ea89a4ce91474c86ba56754176bde14
MD5 5abc28aa09abc8db0b5c10eb4edc59fa
SHA1 5a9839b4afdd0af11495303e5beed733b60dbeab
SHA512 6db841eb223e0a967ca4fb1fb330a3102fa4df3df900086859399f45fdcdf3c2f7821b874a8c584dc07df2f43811c82be30fc2b3d4d92c48da376d5bde1701d5
TLSH
T170D02B618B16CC023234D87011F660068807A360060FA208A8B17C06AE11A5ED488BA3
MD5 SHA1 SHA512 TLSH

Submit Download

Map_KAZ.regionx

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_KAZ.regionx
Size 268B
SHA256 ae02c1c5a0a406a5cdbe8c6bc8dea45019d32be105280771c31dceeefc33d8e5
MD5 2c23c1c5797eaffe11c1774f45d6c0cf
SHA1 de747487ef822e626727ae88bfec8682ef777183
SHA512 0cfd90c9e80b52907bf1d2235429a93bba16539356ca78341df84bb8dcba4fbb7bc6d24725d6f18960ba16935f7d3d4ffe0068b35d1d4f8c537add0beb7eaa7d
TLSH
T1E1D02BA0857618257374903614ECE005100F13B00C1BD19CF8B45F0D8E1280EF99BF81
MD5 SHA1 SHA512 TLSH

Submit Download

Map_NED.regionx

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_NED.regionx
Size 279B
SHA256 f21b4fb6d0fa3da7acbe6a96bbcf4e88b354b453b161e8c7756d7f9985459c6f
MD5 de6b7ebebba37f484a06d7b7d5c00e35
SHA1 dc76da91744b17875f443b8029a74b9f1772086c
SHA512 f6997049bfcad60f5d214438fc9a4d6a02816d4552cee335ad49dd9926d855f15a1c2573dacc313b91b6817147828c5bab988de837a007a6e7c79134eda9f0d4
TLSH
T12ED02B409BF28809EBF4B8BC10E45085004B936C240F911C3CA06F0BCE04E1FE6A8F93
MD5 SHA1 SHA512 TLSH

Submit Download

Map_OES.regionx

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_OES.regionx
Size 315B
SHA256 b0fa30cd52478e60ef50fbd2f0329a01ed16efd77ceac271c970f591c339deab
MD5 ad3b699157cada20349afde416f67cb9
SHA1 16eb20884d391eec646c7d9b7d28795341d4ca72
SHA512 a7fe8734163f85f47b39069b0e30e39ee587a5d6ef2a1bf42967e3af83faac440bef33772b70bad56c7b1a6cbdaaf355dab72de023492d681fb6497b89ce3092
TLSH
T17BE02651016B98C5A271F85932D9F0C529073B90149FA23968203D090E1484EA5C8FF1
MD5 SHA1 SHA512 TLSH

Submit Download

Map_POL.regionx

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_POL.regionx
Size 251B
SHA256 857415a0b9675da58afc92b0a78ec4befc3f92db9e06e7d10ba3c09469520125
MD5 93a4e5bf81502fb9ab81166cae180672
SHA1 0f2c2f8faa7ba07033713e75646ad178ac3b4d30
SHA512 8fbc89566172a0d3569431ea4a15de81ce8af09d545970f37531b95f5d2a8a2ddd6326ce0057917e9c86150d879f2537a5d773c03c141f0d13a90b0516ef5df3
TLSH
T144D02E90E63B5C003BB0A0A010E8A085000B23F2080FE10C38236C0A0E0578FA989B8B
MD5 SHA1 SHA512 TLSH

Submit Download

Map_RUS.regionx

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_RUS.regionx
Size 274B
SHA256 41f45eb0f5d55353c3556dec784092e1828a12f506e5920edebf411bf9306928
MD5 4f530698d8f3b70f33af0dd34eb6918f
SHA1 1716454e74ad23aa0c90de459a9799e93da9b128
SHA512 e05557e335105121e010e601a644f56b8dd01168865f042d355fda9e950366ba22f2312aa4a8f00f1e6d5b4556899f2484e6df7befd8619aa6ebc11084c371a4
TLSH
T16AD02BB1957758257375902438ECD00911073374181FD159E8B49F1E8E0290FF88BFD2
MD5 SHA1 SHA512 TLSH

Submit Download

Map_TUR.regionx

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_TUR.regionx
Size 268B
SHA256 098dad8a8bba859079e56271d06d8e174fe25d64e8f9914c672a8b11154d6129
MD5 36f61b6eea383fa925a141c3980412f1
SHA1 71f14b62e0bccd60249b4615dd8d2c8144d321c0
SHA512 ce3d17e1b300dd0cd8124e773747685723973bc4f57b4076660accbdc4fafa9423ffcd1cf46c13fcd7471730cecb23d5f381d39ca735d6b84ee9da7b04e3e821
TLSH
T1ADD02BD243934C483E34E01EA8FC70682007F3F45CAF91193861DC564E04A0EE499F92
MD5 SHA1 SHA512 TLSH

Submit Download

Map_UKR.regionx

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\Regions\Map_UKR.regionx
Size 253B
SHA256 040bd4b5fa12289cb4670ebf22ea6c7e0e8dcfb8c23597a8179887bbd032857b
MD5 bef149d2e20c6fb78311265ffbf36551
SHA1 bcd14d3c236aef71b56d53a1cbed5b7a3c8d496c
SHA512 654fa524f93417f9fab38915777808104c39bb648ff90320e85948c7167fd383bbd87a73dcd4e7ba8ddb9ac5670622cff42451551131c653a401decc13024b42
TLSH
T157D05BB2456658357774903519EDE045110B6374141FE25DE8F4EE0E8E1290EF48BFE5
MD5 SHA1 SHA512 TLSH

Submit Download

LINEAR_Datasets_DE.htm

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Datasets_DE.htm
Size 1KB
SHA256 da0b2d43b8f26aa7dcf32638dbb3320ced9c30bdbf6d48d6c399dad21d85029c
MD5 3d90af1cc3c7583ae1d2042f1ef65991
SHA1 cfbc35d27906afff51930a8c05201b8bdbec9c8a
SHA512 f3e7db0bccf7e9831cd0bb6551d6ed37be6b650399bd0147cac84ad919adcddde56c3c0e61b407467b57b1e8b680edad532ec1364aa88c11f8aa38c7d64597fa
TLSH
T10D312095C1D6010D517293249BF7E79CFBD145A3830246A4BFEC62839F7929882A3B8C
MD5 SHA1 SHA512 TLSH

Submit Download

LINEAR_Datasets_EN.htm

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Datasets_EN.htm
Size 1KB
SHA256 7daba6996c8604948b4e6e7757d5001424510118620409800c6ad5b685a29ee4
MD5 e92460a21162ccf317605dc49892027b
SHA1 b054fb2e08b03eb51e216bb67a50a0586ffacb37
SHA512 a7ea90e94b61612d0014e220187257f04feedc1690bfc158449d854fb7e40b033919538833fe6d20118d1ade8de65e9f2fa5a55f8d798e9dfcccb7ac3413b078
TLSH
T15D311285D582010D517283249BF39799FFD25193870246A87FDC71D39F3A59C92A3BCC
MD5 SHA1 SHA512 TLSH

Submit Download

LINEAR_Datasets_banner_DE.png

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Datasets_banner_DE.png
Size 305KB
SHA256 208c671dd4a125f28fdcefffb9d755155606a402f0d4dad2ebeb1aadd06d7faf
MD5 4ca845c4bb162a0cceecdfa797a61048
SHA1 f4aaa2e6f5c468ab247fabf4ce61e89f56505b74
SHA512 e062576ef5e108e0d873faca5b1740420ea4a0232488e9452bf3492b8353890a3c3bfd640a00d48094cac2c97b7ed77b780249072ec23a131115fae28e9a8bb0
SSDEEP 6144:XpvMljhkDMYZY6gqsFWcJWlWLrchKqsGqmvimcm94YKlawoz:Xpv+kGWbir7Nfm94Flrc
TLSH
T1F364236BDE122F5D34C280D3D67354E71CE3163CAB128AFA495E9270313F103AAA976D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LINEAR_Datasets_banner_EN.png

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Datasets_banner_EN.png
Size 305KB
SHA256 deb390bb342b1612a7c101f6c201d22d2accdcb9723f1fef41a1cf72680cae8f
MD5 5aa8f676f5b46c663f840af731a73978
SHA1 a749cb6e856f0f04ca99ac5f8d56fc0be7b1b11e
SHA512 b81e8220d6115bd0a5dcd11ded86263b5018d2771a1770d96ae525f071c358107519cf3c78792021a9abaa947791e2635ee2ee846b72e339bcbbd20bffff952c
SSDEEP 6144:CaB+u+g2CmmspvwWbWnylhE6OnhdtaFB5yXjOqRVA48rgqYT1SYV9scWe/M:CaB+Zg3spvDgYS6uhOFBkXjOUA4sW1SN
TLSH
T1516422A5D9FE09680D63E313201EA11EB5D89E5AB873DCB2D18DA49868DFC1419B40FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LINEAR_Programs_DE.htm

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Programs_DE.htm
Size 1KB
SHA256 105a324490b01b54957ee0d823b084768dbeb9bd4d4a2fffea4aa4141b6aeb3c
MD5 2a11f619e2bf7dc131b587e8fe9e54ec
SHA1 11966212f50c5369ef5381708376676392794f96
SHA512 a802ab0a5c889787e1a92f9dcde79bd11b798b96a1011c11f30f5ed0d2b350409f259796f11748efcac3712be387f76c30ddcebda43bb01a4d7fadd5afab0275
TLSH
T19821DDA9D182054D4232D360ABF7A6D9FF820593874601C4BFEC7683AF3A68C4163BCC
MD5 SHA1 SHA512 TLSH

Submit Download

LINEAR_Programs_EN.htm

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Programs_EN.htm
Size 1KB
SHA256 bf000ef769d6af695fa9403fa9b124f445b653f8f4af5dcf100fd2a2f0d5ca13
MD5 8bcf3d2d048cdcd49021e4e9ecb1ef6c
SHA1 0be2710c506c92d3ab558f9b6ff47a3f879b1d27
SHA512 7456d608cf1ac891647dbe39bf3a847062e0c0b1ec394f01bcf6df154ae5bf53fd5e69cd0c0f7c66fa04f9f66e3eae8ee34d2b753d50e855de9651b6b23daa98
TLSH
T18321EBA9D182050D0272D360ABF7A6E8FF820093870201C4BFEC7683AF3668C4163B8C
MD5 SHA1 SHA512 TLSH

Submit Download

LINEAR_Programs_banner_DE.png

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Programs_banner_DE.png
Size 333KB
SHA256 83f330c0fbdefd57e624b95f0a57d601fabe1432f2f59243920a05a99911734f
MD5 dec500e7fc1f8af029a0e4f5296bf8ed
SHA1 2ccf0e3f6fe1e30f7a79af6fa0caad3c2189acc7
SHA512 08073091f8be0ed9c5e1f3893634a8df2d90b711001be40ddf2ff8462422f7bb2ba0a9c6b0ec2ae21537cf5910713fa9c5942c70ad30c0d54e428212a5d84a3c
SSDEEP 6144:ToW9rnw3zSRU5CvLRHP8dkR46xOPwHE3pkNzoFP8H1Gxw412+HpytrTfw:trnC+uMLtkeRBxOYHqktoFP8VGB12gMi
TLSH
T1B77423E44395E9E48FA4628B0B3E481B26C28B445F77B3E1B17D82C015F7934AC91AB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LINEAR_Programs_banner_EN.png

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Programs_banner_EN.png
Size 333KB
SHA256 fceb05a9cb286e114cca2f8a677e50ed6da561a57cb209907b093e95ed4b78c1
MD5 22400c807d37f48f60d2f2dbef3d3cf1
SHA1 d4be2a4899696e42e76fae6e56db1b999cb8c0ce
SHA512 d3e039d11f3d93d420f2d3933f2a44c95eb9641cbd8890163c02f466188c26e39d4490ad11b56eb87267f7e2ee5f4e6539e9660fd2357a6daf3cb0d4c4ce5792
SSDEEP 6144:YoJR7icwmgv2stNif9QYlDrf0BKMawQj3OuKMu778H1Gxw412+3+yA:TR7icdgvbQLlDQBza/7fKMu778VGB123
TLSH
T1C27423A91CB682C89E0A91E20B3F8C4D9762C6D5DFB0FFF92126C1657B77065B046B13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LINEAR_SampleProjects_DE.htm

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_SampleProjects_DE.htm
Size 1KB
SHA256 614940d163aae10e3e4028de030c082bb52d53859ee49e5766bd6f8629099250
MD5 40c92d4ae85efbc09af4075e77b7d931
SHA1 a84bcf8b2dbb411bb46cfbeccad56b2895592010
SHA512 4637c9d0a48d33871e9b6ada489da5a71aa3bfa681914565d1c53501898911e0000ca295337490f44520bdfd0c9a505f9fe3f93116813f621d63d68dc8202a43
TLSH
T1F7315395D192010D117283309BF3D799FFD606A387428264BBEC72839F7819C42A3BCC
MD5 SHA1 SHA512 TLSH

Submit Download

LINEAR_SampleProjects_EN.htm

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_SampleProjects_EN.htm
Size 1KB
SHA256 557aa57fcab50740cf300e31807263a0d5e4f602a361a87140365879ecfd21e2
MD5 5fffde975438a0b7adb02da47015095d
SHA1 68491cab36b5863bbeac99f36a901a2eeff0c96d
SHA512 72a06ffdccbed69f18fd56dbf03c3cc572128b3770d8148e83752603f7c9258797ee48e3e431bbb00944cdcea57a57fbbb58f086190aab8ac20542f586b68963
TLSH
T1EF31FF95D1820109127283309BF39698FBD60297874286587FEC76829F7919892A3BCC
MD5 SHA1 SHA512 TLSH

Submit Download

LINEAR_SampleProjects_banner_DE.png

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_SampleProjects_banner_DE.png
Size 305KB
SHA256 fa6ab16890f61667f0e2f70549b26667799efb878d0eb7ba201ca850690a9f5b
MD5 f30974871e7bbcf5aaada90d6a2799a0
SHA1 2be81939cc4ad32fa2159b612b336d911d84e754
SHA512 61a2886e6321707ca612f4b8fa9712345335010548f7efa31eec4996ec45e6c0520692bfe289cdfc2578e227d321f14e818fd53834a03df67ff45c664c379cd3
SSDEEP 6144:8QYIjkLfYpVv9EDLCunseredyGQQwVZbh/stknuu+qKbR9L:8Jip56DLCmHedZ2ni6n6bLL
TLSH
T1386423988DBFF68904F080F26F6AD80922BDDAB56FCFC35A95908FD45260C1DF113656
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LINEAR_SampleProjects_banner_EN.png

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_SampleProjects_banner_EN.png
Size 305KB
SHA256 ab8d16afaacc0985b0c941eeb1821a9be8ee927a8568e8e351fce3ce5a3d6285
MD5 760eda7d2736b4d0e44aba6b1ce7b1e7
SHA1 fa66bd2dfe55f23506a668effd4ee24dd8bc99d0
SHA512 4fb25ed0fc7662161e0bb10ecb6c0161bded9d32fdeac74abda1678e95a17d5d24c6e8d99db938ef9f9abcbace6d575429fd5b1d52cd4cca1106b4c13ed59187
SSDEEP 6144:yNDxm7WgKwoi7EG5wl5cEqHlpN7KNDv2K1x+XLSGh5J1LGxTYQp+G7Ko6V6mOEZ+:cYfKwoi7xA5/qHlpoteKmXLSwZLGxTPf
TLSH
T17764239C4632AA17B1DD00749788D059245B9AA9FB15B760F5460E21F0BFC1FC1EFAA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LINEAR_Updates.htm

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Updates.htm
Size 834B
SHA256 db54f5cda64bdc9aadeb77b29beff6c9db320e76525ce40eb108d7842d81b0fb
MD5 11d95633af9421e690aca96ef00f7619
SHA1 75d476775a62987f0ef179d1cc5ef532df782083
SHA512 5f5166df05bbb2f53f60dde8f1a2835527d24c7561329e7242f9840cd00f79566e87f3273424ea7c07f7db0f2a3e3de5fe69ab374835e812983f1bff0d76d050
TLSH
T1BF019CA2554618190272C3B06BE2F25ADE8541C393420584FDEC219B4FF7A48D5D3BCA
MD5 SHA1 SHA512 TLSH

Submit Download

LINEAR_Updates_banner.png

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_Updates_banner.png
Size 104KB
SHA256 943b1c8409067f98d200bca2a68e8b8cb9a8f5185657eecc3e5f50b7c43f4996
MD5 fd9ebe1f1b64fb4784f9392d3b116083
SHA1 b4c4230b3f258b43af6d16c8e9febd5978163d01
SHA512 a0dd9eb41712a732ff6ba34e6af87418fbcf7977cc93256c071d94679d4091cac17941603a3e09ab6c6d9ec79bf87aeb5a4fced5b90dd2a5ea5b1f542c663ec7
SSDEEP 3072:iZ55L8hHxPB5V54b+gi4D6P5tPgfUr6M1nGtfI:EfLOdf2xGh6M1Gy
TLSH
T1FFA312DE455271B0D39AA32B50A2C350959F5C20D2BE562F612B2E3BEFD77DE4938023
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LINEAR_external_link.png

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_external_link.png
Size 237B
SHA256 7e2a35fec6792ca6db28dc2a5258a0c83d8af207b32ec94d14cbeb71eb114c29
MD5 3d327634a324bf35fddb0764ae04a639
SHA1 d66497df8b70eea8061ffaf3c3350f06d8504776
SHA512 a626566988f040e6fb5a7e7cbfbd402740a6b1a964ca8bcf3a20de758466de406a3a3230de812602a7da227209e611cf712a37795e8e24cb1725e496bf901a82
TLSH
T128D097EF00203CA3E70A86710B0D22F864B39E0CC478002C0083892A76AA60E6184210
MD5 SHA1 SHA512 TLSH

Submit Download

LINEAR_external_link_white.png

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\WelcomePage\LINEAR_external_link_white.png
Size 1KB
SHA256 ef6dcc04041357a91dcb83f5847741d3b763c6bca98f65513b511ad3bb7509d7
MD5 e5855cd6cf2b119f39512f01b5fe9182
SHA1 f5f286ec7d46878441a48278261d8b1b4092b44b
SHA512 36f8d59301caa9e82e3182c085d1460e324645dbf56d469e441bb36fe9f0693b21dca04615596082679f8c95589b8ccaeca3ed0784ed1dd166e3935feb4c35ee
TLSH
T1DA11468DF6507882904CD8C10CEF802BED334548E6F0F9576A8ED49B59701FA41795CB
MD5 SHA1 SHA512 TLSH

Submit Download

filter.ppx

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\filter.ppx
Size 2KB
SHA256 e532cecf35debe4522f0e4508c3947f8161b4ede13a8e273c2308aecbd6cbe34
MD5 00a711334fac83d885b0841d806f8cfc
SHA1 1058db87df6a9857b289d13de08bbe608372db63
SHA512 23aaa127d6ccfe213b29c37b1d5fd0157819b7fd2e101fa551ec1878d302e25fb874f2fcbb8fcd5f21f1df70142857430e8acafe8f9ef4cc0882df99e5d2d894
TLSH
T17A5170EA06B350F9FA1EC4E443CD4428F1A3B5B404D8941BA3B6678D7839EC227CDD95
MD5 SHA1 SHA512 TLSH

Submit Download

linInstaller_Revision.prdx

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Support\linInstaller_Revision.prdx
Size 4KB
SHA256 fce60f7987f5b72e7ad2c819d4b16835a16d3b9121265445b7dc4c86c65c37c8
MD5 596044f367f3cf4c8e997a63bea02854
SHA1 509624a72f8704dbd6cafc385b78eb339386d1ec
SHA512 51eb24f9ba4a006147971f928d8425bbe6441efc415241e4c645dfbfbe5e321aa913900d81b6cd9fa3202f62953462ccf19ee7e02c1ed8ff8a6917aaf6c527e3
SSDEEP 96:56zCU3S3OJv4yBCMV0u72Q3XUtWEZM0dEYwf:58JQyBCMV0kA3dGf
TLSH
T1129148F116077ED8D2C5CCE6F93088A6921B1F9102B8E3D613609E359B2EC734AF2C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Comm36c1.rra

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm36c1.rra
Size 116KB
SHA256 c6f40436b0d629d4268790a2652372003e602cf871d698d4c3cde713457216e3
MD5 b7b43ed7973dd36f2030eb3291fa2803
SHA1 fdba417365927659c176021c0dae8f92707b7d7e
SHA512 5390a618e2aa42f5273a5e4b73361442afb34120647053cf43b7b3399e1d2ee0745f909208aecab9fb98b6ad99903e244d4b2e54a87be24340a4ce506d2fd11c
SSDEEP 3072:GaNaKKS3+Brl05wn4z86TgzTYpWKcIKH0ST1QdcEBVCEeLHa8RVkHMSrG5Y+IFvR:GaNaKKS3+Bx0Jz86TgzTYpWKcIKH0ST8
TLSH
T1B0C3103836C613D3CECE83A272D315327D29E3A5F5CA46008ADB894D345BE61BA1D76D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Comm36c1.rra

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm36c1.rra
Size 115KB
SHA256 32f0c403997ff2c792088953336d0fc66c3a673ff97df914e5abbb7ac8efab50
MD5 b1ee24ccca13a046905b8db5e745914a
SHA1 4ec2c0ffa46dacaf29a66934971fa07631103cd4
SHA512 60d51556c85f0216076afe933437d50f1988838cf07129954fe674910eeaaa28acc1954070d64faf15720d470cc001d9b010c24ec6e8e1c58e654c4d5d51d8dd
SSDEEP 3072:A07aKKSevl6Att1GHItIIIkKIIXFzlIEYmeKilxswc7ZzSK9PJYoTdjLnSRhqM/E:A07aKKSevl6Att1GHItjoIuHqKilxswc
TLSH
T112C3FF3926C513D3CE9F8390B2D215717E2AE3E9F98A16008ACF460D345FE61B92DB5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Comm36f0.rra

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm36f0.rra
Size 110KB
SHA256 32e894a1a40b68057b4aad942ec2cf5635b2e18b402cf047d04e38c19597b45f
MD5 0c3c9a9ed8438a78e86b7c27c2b0e881
SHA1 8569cd5237082fba40a1bcfe7d43a8222893456f
SHA512 15fc1a91002fd10c90a31b9a09e29ef660e70b39b1b6cfba4cdbb1ebbb9ee781b6a9f586218edf5363bbe856a31d559ea86161280d1bd3f9d7d084cf499393d7
SSDEEP 3072:C27aKKSNleAlqThFFAhSW6aQGnVP3aSxhi40zRb2DIVi8XQZBPzFDHmumsUM0gLg:C27aKKSNleAlChmSW6aQGnVP3aSxhi4q
TLSH
T17DB30F3976C613D7CECE83D172D205313D2AE3A4F9C90A448A8F855E346BE61B92D61E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Comm370f.rra

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm370f.rra
Size 114KB
SHA256 014f13dc3890ebc5d4b5814cbbb6dff04368b3295760137a476a0c7f6700bf01
MD5 176ab93937139b1b21b421fd9045a344
SHA1 cdc961bd0471946f8179454996b8c54e984bdbac
SHA512 cb6d3e5a0d39206b3258c395586b0bb4712eb10e5a4d22f124f7ab4350ec65c7a6ae67f6dee3d31dd6980348e9fc78026d418a6e342bc627b98a0aaf7cdce50a
SSDEEP 3072:GC4SaKKSR9ilvvT9I2uqhJVCLzwbrIJthC+E8MaQDtEJRMQO8EnbVEwgtZ2hUWhE:GC4SaKKSR9ilpI2uqhJVCLzwbrGthtEI
TLSH
T18BB3103871C603D7DFDE83D172D205713D6EA768F9890A008ADF460D742BEA1B92E65E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Comm373e.rra

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm373e.rra
Size 139KB
SHA256 4d75ec5ba6c040d6a54d9f29940dc304d1b17874746d2cac2369b85403fe997d
MD5 2fa35c38e3cc6d798511e250194bb9aa
SHA1 350e582e6c31f1ce7b29b2ffe2e0f8418989d057
SHA512 437c39e8833a609ac818866d6bcb88a9290896f1b4e6f8942bb691f9462824c4d0caa0d972bc42f81cde296261fba7b21b2a6ab5c8ac2e85de63852d86360504
SSDEEP 3072:ak04YcYb55WoC3vLUWdq24CVXd7/QyOg3LydahG/fPAHD4vSVOLKt62ECeRy3zNQ:ak04YcYb55WXVQbsNrNJb2Nn4jE0YqFw
TLSH
T160D3DF3422CA13C78649929EF6846A243C6E92FDBEDA1701478A2D7D38F7D20D52D71F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Comm375d.rra

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Comm375d.rra
Size 112KB
SHA256 29c271c47570c812e7907c55ee79a5ede9a8d32ab14918b00a7add827d9fa136
MD5 566edcc05468b8ac0cf595f0e6a23438
SHA1 366561eb1bb0ce82e175f3f47033a076c332c60e
SHA512 e5a1e74df8173b1af831a22c8d6edcf4b481020ac1424ad5b24c365685808e84d306a9031a0f5dfee3f6e0a2aed1f0b91484706370979ec66fd034e91cf64d71
SSDEEP 3072:2l7aKKSqi+Xv/uRk0vfQejo4PzddDcWP8asv9xdGVuQYDpCecA7rkAgTM7OlGuHB:2l7aKKSqi+XvkQejo4PzddDcWP8asv94
TLSH
T142B3FE3836C623DBCB9E83D172C204313D2AE769F9C94A00CADB4A5D751BE71B92D61D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CommV1_140x64.dll

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\CommV1_140x64.dll
Size 1.8MB
SHA256 bb46fae21fb19584f36e3694643a120bea852478421992468df5d7dd656e61c8
MD5 82a484d3e86633e805af09b60cd0eff1
SHA1 4684217d7e201a31c70516152df27ba353745390
SHA512 fae75775d5b1d1306efe84aabd0234e5b440d2411e505cf7f90f215a310519c615fa22b347a4e9ad7fd75aa025c653e9f2892d57409d4309d63e7441f4136283
SSDEEP 24576:Oh46ALVoeSBNstv4QX6bsSyh2fPZE0x4JyVCBVS3p/Ygh0lhSMXlFTtDodVb6VgG:Oq6uyfBg4em3/4oVeV2QVVTtUd6VgEZ9
TLSH
T1A295AF07B7A60265D1A6E27CC947CE02D6F6B8004961CB1F9EA97F9B1F23F10691FB44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CommV1_dict.EN

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\CommV1_dict.EN
Size 111KB
SHA256 533db2345ac6b46ecddffbc6d801ed7c073f1e0b367c4fb93073af0fb79944f5
MD5 ad260ebdab1cd6f522866281f5be4819
SHA1 97f78b06a1a28fd21dfa6633d19e2c29bada129d
SHA512 7017ab13fb99a656c27ba53bcd00c60cfcd61d53cfa6b5fa62087ad7c2b62f949dd6a10bc76df73b40c29ad9a278c7eb092643e5a81e3ffc4f7f22952bb60fae
SSDEEP 3072:ifraKKSA+leAEFlflApngSqi2upDk2NWJoJChOsjyGNEce1b5AQQQgMC3EmrQaHQ:ifraKKSA+leAEFlongSq8pDk2NWJoJC6
TLSH
T144B3003832D613D3CE8E83E176D215317E3AE3A5F5C906008ADF494E351BEA1B92E65D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LicenceManager_140x64.dll

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_140x64.dll
Size 467KB
SHA256 11ddd86abd0e726860bb2948d47adbd63942410a1fe7928f57639f2d9b1d578f
MD5 4365aabecccaca7e5355b1a117ffc25a
SHA1 8613eadc73deb92ad24fbc5b2f78abbabfe3f0e6
SHA512 5ec8d3f30d864a86f5e857aadb4d13a3eb12470a7d93c1f55e15b6b743d99e377c77c88d0c30a8e2e23ffb975188e5fc10ebae8913c3eec1414ae4db50c55a18
SSDEEP 6144:ZJU6ZWqoAIuitqQgfxaACiOoGUKro25Ar2yIaH+dPiC5o7KfpZiKPr2N2wF:ZTZ1oETvJaApzKMmfaH+Jc76NAF
TLSH
T1FCA45B57E6A442A4E1A7D67CCA2B8A06F7F178554370CB8F57A1DE6E2F337A05938300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LicenceManager_dict.EN

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.EN
Size 13KB
SHA256 62ef52434d111f3cdc4d439e7c077422bba8153e2eb560f9af1532bcdfa27edb
MD5 7a247206ffbd9aa08f94dedcc2588d13
SHA1 ffea616ffc280ea8fe3720b4550740e25fd5fb52
SHA512 4e003e664d5b100ae2abddbb4a4696e3091ec207f78f92de67ea71ef305bbe9432ba093f33936c9b429e06e7343de4560c87a8e1eb1911f048da5a99acf7ade7
SSDEEP 384:ROWBg01A9ZP0IZpoVSRcutt9Xb8keFEV9wA1mVP3NFzHRNKd8ZL+4:00yF0ApsGcKTbhfCrjKd8ZK4
TLSH
T1DC52E837BCC533278AC10355FB851A9F772AE019237B13424368C268A3159FA89FF4E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LicenceManager_dict.FR

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.FR
Size 15KB
SHA256 1adca782d88e1b0636eaf5daadc83ae8d49ebbc5c8bbc9fa5dd5216480867e6f
MD5 fa444f207def978e57dc8ca59bdfff3d
SHA1 d2fd96ccdc0e6917e0407f25347f61a16c511a0e
SHA512 0797f64bf6bfb8f51602805a04ce79c1313ff28981f5de036c5f7729486c67fc1ab667bdaf98ce2966abaaa5a17719a4ecae8b891f5c0ea140e3221b8b86bf08
SSDEEP 384:63AyKQodI/TIHgViKL1dvmPQiLdB0xlknttTP+QWsdJCLiksHgNU:4KQodcO0iKL1dvYvZ2UntRVDCeCq
TLSH
T12D62D87EACDD33839BC10332F782AF5FB669D205965B93458291C25983458FDCAEE078
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LicenceManager_dict.IT

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.IT
Size 14KB
SHA256 dad21c365552c6696b6177904f3d3650592310267db873a07a12739f1c6ecbd4
MD5 49462bd97b9da8246a8af4cf473b9fb6
SHA1 157788540384c830bca46de879e2e5850499f0fe
SHA512 9d2f3beffe283aec06d85ab081cec29332480e67d92a2b9db477ed27524a3c23be3263ffc8317f854c6d9420142b6c51d90f2bf5cedd12994f49d1e97ef22b21
SSDEEP 192:yr4j6APs0Na+Sh8Zyy/1Va+rIx/JQJ2jC0VeYicdIwz6zQ78OcKs24SrZSi0DvPt:R6AjUPmZy2Vi/JQ4jC0TdIw7ZkL23e
TLSH
T14762C97AECD533129E420356F3C1AA2FF76FF4C9AF5A1100839DC259938A9B599FE410
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LicenceManager_dict.NL

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.NL
Size 14KB
SHA256 ef124ec1cb58066cd714cde12bd6263e2f24e32d8d9b8ee68e1246b0f63e13b3
MD5 d72d7a513f799872567f4e8d06f98c39
SHA1 7e59e1658f635807275807ebf98fe5c75f5e674a
SHA512 784dcf3a186601f05d423131055e440b68707dd2c516abad6dd1b7b9451971a225bf2d48b59f580f717d5c38e354a51fd95d41c1db829d076d92cc1f61163c2c
SSDEEP 384:lZEIA5Hn2gsK4PTpVdJCb27QF9JzdSru7NEZPZLKwW:lGH2gsDLHdJCAQpcru6ZPZ2wW
TLSH
T1DD62DA37ACE93319D7C12349F7C21E6F731BE11943AA425A83ACC1758717DBA897D061
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LicenceManager_dict.PL

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.PL
Size 14KB
SHA256 db00c9a8d4691adb0f9ac1f18351e5be04df040bbae22f772ffa44e082d6bc9f
MD5 176c12272e82d15d36d7b09cfbf145ee
SHA1 1b063fab99644a584a4553f79615d6bf36230945
SHA512 41811e1a2ed68f63004f48755ec1df2c88a270f32722d4fbd7f834ebb61af7b206ff89c0e3842b3913ab79e4fbe23343a01a076aad051a2e6881f35bfe195fcb
SSDEEP 384:2iA6Npx0qVZ/cB66SJ1E9rP2lJbYIweBKBF4LIHN:nNpFZ/cc6+Qr+lVYmIY8t
TLSH
T1C3523C778CD523968760534AF3C26F5E3A5EC449622F8305834EC27E832B9BA85FE475
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LicenceManager_dict.RU

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.RU
Size 18KB
SHA256 a3685f95dd388fbe5c74be348d7b46c0c3132e56de1c5a586bc32aef8eda3e65
MD5 d09fe62450486988c1aa37376fe1f57f
SHA1 1a0d5bfdab5e0423e619db9860e47516461d74ec
SHA512 a410ef3546705d98617928842b5eaf61013a101e886f1520760033f2b8a58febcd67c483ed9de26ddb09ea9c1a684d6dda9bc32f1a91aeb4c17af2cd671c8e43
SSDEEP 384:L24A6r8xlhVV0AvXAU77zBlk0vQqWyx4LlV2:Nr8jB0AvQU73BvA3RY
TLSH
T1B1924E6119EA31AB0141B22FE944BE0E39DB91FE3FAB536603606D7E31E2074C67D51B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LicenceManager_dict.TR

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\LicenceManager_dict.TR
Size 14KB
SHA256 4ef2594f91c95ad21d9f6cb2f6e8e9cabed95a83990471b3a2c98ed9a13fa689
MD5 8b12264c59e31b9baa8de78e9f0c689a
SHA1 e731c125c12381e85ac165f39a0f893ef057fbde
SHA512 33a1dd90a078b11aebc64a714535463b586cfb683b5dd7501fed6bdf3e8882e641729ffce94ec83e9c820e0ef36bdf687723f6544489b8c6f10e815b7f99cb59
SSDEEP 192:vn80rlAPmAKMEmH1Va+fGpvHkIEAjLFcFq2inaEklyEFlWVrIWagmKyrEQifva53:EiAuiLVVn4vrEAjLFbaEklb9dILHL6
TLSH
T17662D6556CDA3B2E8651134AF2C01B0FB55FA006237291A6831CC277E7099F78EFE92D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OnlineCheck_140x64.dll

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_140x64.dll
Size 129KB
SHA256 da4aaec58802ef8e331503a9901c8e2950c81f30d09a51147b9277f4dc9d54b1
MD5 a2a5d66d69890529181174b34d6d4cd8
SHA1 f9a468e114bae706b9db83f990555f15a5e7552b
SHA512 97c22af32571c6804fa7b40eeabaf0caaf76953a423b311101cba280af53a01f7a871c11ed26aa22516c6df3d11d439ecbbeee9d122bd9067eb6ea9f0a7c6a5d
SSDEEP 3072:X4SXojf+xhC40onjmODb7e2iDn5wPzL1EbNkhj6:X4SXOf+O40gjmobinbGs
TLSH
T14AD3385F73986A69D122CA78C88B4F4AD3B3F4520A61D71F03388A6E5F333513D69B49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OnlineCheck_dict.EN

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.EN
Size 1KB
SHA256 da95e506e04661d5188940efa0e1c7408db28a1db4923b4ad6d3ccbb2da17844
MD5 7f43bb2c399afb0317a1bc38e0179098
SHA1 3272f91456dc5f8bdda8a3d6ef53be938fe79da2
SHA512 05b942c8b92875b17e4e6591446bfa69bb72d5923e2d41a4a3c09f0487047745f1afaf6bfbaf667912a7e67c7ad13486c09c07a1d03ba0b2e269e88e49b98561
TLSH
T1711133861AF6E37929A3951FD7869A11F62390C607075208439C893B7193876833F1A3
MD5 SHA1 SHA512 TLSH

Submit Download

OnlineCheck_dict.FR

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.FR
Size 1KB
SHA256 1a841bce5df1bda20f1d8213ef427518effc9b6e24795d91aaf66a29f83c83bd
MD5 f07f8bd9f2db2736759f97561620d24d
SHA1 e83557bc3881932134992841268fe2126a954a99
SHA512 99a7d295ac8d1e91d876efd104046eae54dda1e97c5fbe8434a4a79c36cdf9983d9234ab7fcaf458654d044d77ec598bf75e5b6df60722d1b5950782859a0936
TLSH
T1DE21204A18FD737479C3662BE383ED02F27D5016120B630803AE863922DB87A432B272
MD5 SHA1 SHA512 TLSH

Submit Download

OnlineCheck_dict.IT

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.IT
Size 1KB
SHA256 2f5fe384b2084bd2fb89d6ec9c61ee936c63dd771e94c09d926393f032bc0ed9
MD5 7310738f42602641d0930ca6cd2d716e
SHA1 e4dc601c2780b3ab2622df4d878653be8854cbce
SHA512 2faf844c7e44dc7f993ea4ac08063303c46cf528dbb497831f60ceed49102af19a2c0fbb1d4df1bbee3f6161957f58fef5be466ab6d24f949012ddc44d58dd6e
TLSH
T1FC21215605FA9378A993121FD7C5ED03F73BA0C70A0B210453AC8A3972C6C76422B1B3
MD5 SHA1 SHA512 TLSH

Submit Download

OnlineCheck_dict.NL

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.NL
Size 1KB
SHA256 2957d167bd81f52e6258f9f599bb65e2b4af7f9bd63055a6a2ca9167d176c67e
MD5 163d8301cd875f6fcd4b3759ec0a40c6
SHA1 0ec430eb344432e985def5c518ce16566339cd0c
SHA512 c7a858a471d2dc46b46784959258e3455c9227ffd88293aefce9b2408ff02dacc892aeb271f3bc828433123647d3b0419d71f8604246307b042f37ee4e833496
TLSH
T14421410B19F9637976D3931BEEC2DC02B676C283068F510483CD8A3A7253CBA423B063
MD5 SHA1 SHA512 TLSH

Submit Download

OnlineCheck_dict.PL

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.PL
Size 1KB
SHA256 7039e413e4b10f29961427257791b6d15e964a201991de29c324b868bbf8b5e4
MD5 106fbc5210030d6dbd521291e76b231b
SHA1 66d9f049a9d1017cd600c0209113481113b3acee
SHA512 d963986a0ccad20fcc80fb0fca75d49731208063486d50500d2714abd64e6812257dac136b6e8b53b11af2060d14a68ceef381040e6bd3b1dee35c38224dcd1f
TLSH
T19221145106FA1BA87651550EDBC2DF19F82AC0965B0B200A038F493961C3FF7423B6B6
MD5 SHA1 SHA512 TLSH

Submit Download

OnlineCheck_dict.RU

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.RU
Size 1KB
SHA256 72b4bb35bf1a71c6ba962e0a5c478d82d4c9dfc03c27e96ee4de541cb5ca44d1
MD5 a09735977c1e7766daaecff7e4e19c7d
SHA1 e2ff0efcc69eca8b9676426dd5370d6a05b8a4e1
SHA512 be83ee588cfc09ef78775d9718c51df56b4097b3d63bd953d8cf9223fc6c2057a3a5d987f2abd3c78765729edbf8fa969c58a827cac8c7bbc778240c25b7ebb7
TLSH
T1C4218C5205FA73ED2252F22FD685AD05BD7691FD2B2B830903AC9E3E25F3125422F163
MD5 SHA1 SHA512 TLSH

Submit Download

OnlineCheck_dict.TR

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OnlineCheck_dict.TR
Size 1KB
SHA256 a8cf15635fd66061c3dff88d404b1899b5b60a5d32e3415d9ec8a90df87452d8
MD5 8b9704d836f3272882d33cf69df8549e
SHA1 eb58ceadc6e3d484612c13d63a2ed3be809c6316
SHA512 e77ce2c4c926e2a78ba64cb0d32c2b8da7084d47d51a20f07a98610a5f8ed002f3d625c9969cca3672998fd9f0a060e07a31cb8fd575eea196f3222d826a7e75
TLSH
T103211EA506FB6778A3B3A25FCBD1EE12F43B915223076901579C893B31838B6823B417
MD5 SHA1 SHA512 TLSH

Submit Download

OpenXLSX.dll

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\OpenXLSX.dll
Size 751KB
SHA256 c9dc13b444276f2915ee902719a3d6ab2c538f07deb6a3e0d6513bd548b2d4b7
MD5 c90d3bbc7fae9ccb77c549f1ad5075c9
SHA1 aaa6c8c013adf78cb8ffb4bf29484f2cf67fb551
SHA512 07fea4b8304bbe4c2b0f0c16b4b9e41d6d208afe202d463286b958508376a203c5c87434ba749a9070a99cc5ff931f51105dca182b36a0e0a1da180d49d3651d
SSDEEP 12288:shVvH3YUw+9JsCA5MhTY5FfgoahiUqRCdVMzJ:66p+98rahlo
TLSH
T1ECF449972B5962A9E06BD33C56475822F2B63841237A8EEF43D141362F477E09F7E360
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendEmail.exe

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\Support\SendEmail.exe
Size 30KB
SHA256 3c4d5ee90996d1d8df76d8cb999b198badce3b3360121a35d8a410acb3c78d4c
MD5 dc288c006234939f7bdd646303ca3855
SHA1 52bfcd76c94b5317822cffa7772f6b2013a2f3d6
SHA512 1498c732376925a572bca8512ad3259ffb62721f2b72140f0e87731448c11c2ab782d622689261796f41e5d63b991743b6cfa867722c64d83b128080d630b13f
SSDEEP 384:HtxHCdyPCIFwmaw5QZ9fOmZsHLkJkPxh8E9VF0NyqFyIYi9PKJy8RbmL4nNyT2Ve:HPgynlkk7PxWEslYiO5AL0Ve
TLSH
T1A0E26C23C6845C02DD9B9E3174E1B622AF71B6852DD1C2DB220EC2555F45382BEF93F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hasp_windows_x64_69057.dll

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\hasp_windows_x64_69057.dll
Size 6.2MB
SHA256 b0f5f92627f98524d1816816ae6b27eedb621b195f3b194f2d4af49153099495
MD5 692dce637ec5217132859b897114cee9
SHA1 32712dc750c398aa5fae14b750c18fdcd9845b62
SHA512 56cbebb9f62c3467d755cca02558fce71869e1cb7b0484bc9fdb1306b8209ce3fc0ad6d4574cc8977b506e199331cce14e3ebd723d46873f6562740b764443a6
SSDEEP 98304:EiDw8fV7CZg+Mgu33q//F/LTae+cvhTauEMrnWHod7J6:EiN97Hc/HvlauEMrnWHod7Q
TLSH
T11956AE17D36D03EDE069E5759D28633E91B43C13AAB4934A30A036A55FF0ECD831AB6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

liNear.Common_140x64.dll

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\liNear.Common_140x64.dll
Size 307KB
SHA256 739a661ebcb5c66831062298492775313de8fb42c820de4b397d44718cfca9e6
MD5 dd6fc11ccc9fa9f96c6ea7eb8b6a3a8d
SHA1 6a4125b3c1452c53d20709b7726efd118826442e
SHA512 dea8d865d227b95d0159205a7012a9ae28e56b1cc11fece860c1a3bdf142ac7f291adfd7a6a20783717bb245d726eccf70d2800aa216e511a546207bdb16a732
SSDEEP 6144:/NtKurc//c/RtjTnhph0lhSMXlBXBWfNahcLQq:/nc/kptfnhph0lhSMXl+Nae
TLSH
T16F64CF17F7A69079F28A86B48D930E0AEBB37C454BD1534F13D8A9927F633516E1E302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

liNearGL_140x64.dll

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\liNearGL_140x64.dll
Size 298KB
SHA256 04d3daa28d9f385d2f7732a15a9d4a0cdfcd2e8b50786af2294fea839cc5fca5
MD5 c6a335798b1bf893cc0021e5660631fa
SHA1 d857941687025dacef5cccedb59451594788991c
SHA512 db1b3d9d208910a0fa5f66ec2dc4c40518795c224425a59be6044fde2d85b9c30246306e6b487bcf52a384ec04e5bcd69dfb318ee7613033d327cc54305033e8
SSDEEP 6144:Z786g6K8l15vFjpKNqInCZdpN4T+p9zu74egOjRGvD:NPgGvFjpKNqInQdpN4T+phedG
TLSH
T1AD541891B2655E68DA13C038C9238C8AC5E2BC451750D96F0B77AFAD4FBB330695EE07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linCatalogs_140x64.dll

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_140x64.dll
Size 139KB
SHA256 f05b87a31cbc72aeffb6d64f5bba57065ddd66165272354fc1f2c7a6919a8d3b
MD5 93232d32727abc0deb894bcc37ce0782
SHA1 3320d422000d260b62a6d5bd1771b116a8e3d5c3
SHA512 0f0b53ab72d92789752ae43e23b91fea6698b66f00d2e7d26aabea9ca04c0bcff75e88bf0227631d1d67e55f872ce7871ddd628196ea14c93f2a659ad7b233fc
SSDEEP 3072:fPUJZ5b2Evdig04yAuW/MthmLRdcnF/XOSh+yLdfxuXy:fCN2Evdig3uW/chm6VBxKy
TLSH
T1ADD32A4EB389A726C222D73DC88B0E46D2F5F4010625C37E876E97295E276527D2EF4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linCatalogs_dict.EN

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.EN
Size 87B
SHA256 184f405a8eca5990b5be6c621549daea38f773ce496501a93853fc0362919ad5
MD5 1a2339bfa40e46dba49c2c615f5fb417
SHA1 a63f1535afc07e341167807ef773fea70455629a
SHA512 553233810eadf5817a7a2b864a1346217aaa47d779a1e0fa4ebbba8a8ad5787373bb8bcf024ed7e772ad90c993c80462605d919ef3e6810c4dd37fbf9730666b
TLSH
T1A1B01244108C868E6805736592CE8CB2301147160F00109D5509D0010A82819872245D
MD5 SHA1 SHA512 TLSH

Submit Download

linCatalogs_dict.FR

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.FR
Size 104B
SHA256 4612af32dcfc6475d7f3a5a122270455d8376454e089a0947f77bb9969494534
MD5 a9a42926b963b8a59f31ca3d6122de81
SHA1 b25d3254ff05cc31490cf94e7752d7bbe8ffb9e4
SHA512 b2af6a607b42e3669b357c5dd5176158a38d54765c935db6b7ee2fddd98a26b484fe3a29ad28499868631b53385919f22b4bb302961837553db86602911be4e0
TLSH
T191B01215A4C8825FAA88A25AD4CCD8B33112830985007299AA4CD036368743DC7A744D
MD5 SHA1 SHA512 TLSH

Submit Download

linCatalogs_dict.IT

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.IT
Size 103B
SHA256 92bc53ed4d4bf7174780c9ada393c626501fae1aefe7cb28e44a8b62ab21eb6f
MD5 5bf1004ab082096cef5153bbd3352059
SHA1 6acf05da8ca999372c41c834e8f6ea6bd170710b
SHA512 47b76a9a82b7d99517ad961677d89f65c31cd69255ef8466fb37108e88effd32cf9309d51835159bfeb6af3b06b735376eb88f8aaa73920c928784da4890c7a7
TLSH
T1CFB0122429C8074F55C963DAF4DDCBB625120EC71F00328D6601D2456486819CD7781E
MD5 SHA1 SHA512 TLSH

Submit Download

linCatalogs_dict.NL

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.NL
Size 102B
SHA256 20137d0b547c40a81348e2b93872eedef08808784f241bab874d26ded39edb64
MD5 a1d0bcc2c3b8e6dba76a4683ef5d3a17
SHA1 27d0bc8b4ba992cba942d2a1459d8dc4cadfd783
SHA512 8e12c74e512d58234c3830c0ee7bf62a5266cd19d0eadbb5f36a264e6793fa683feb1ce417fa56f7026b262bc114e3afafefebcf073138c55032ac4ad6c7674e
TLSH
T127B0122412C8028E700975AFD8DC9BF230270715C7A020CFF609C403198792EDD3740D
MD5 SHA1 SHA512 TLSH

Submit Download

linCatalogs_dict.PL

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.PL
Size 91B
SHA256 b1df2ae12fd7037ad454e9610dcfc399c0ad3c245533c189692d501891e51861
MD5 d77bdb95cb491754b0d9f32ef5853edc
SHA1 17878cc9e938ca5e4038c62741cfd160f2378292
SHA512 00836e35b2a6d7401acd5134a4d428534f96236cfe3db587116ff38464ac4c35fd9a036a3fc4d6bc2cd49c5675a1232e1f06561e952e2ff0527a5935d463dda9
TLSH
T15CB0120016CC4359A0486385C0CD89F0205902424E4863CD5102E00A2D86815AB6248E
MD5 SHA1 SHA512 TLSH

Submit Download

linCatalogs_dict.RU

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.RU
Size 120B
SHA256 d3904aa6a9c4346b96015bfb31dfa20a2e7a5a37dae79b4bb07774f9cf3250b0
MD5 6a44a1adc19c2ddcfde24cf77bc94fa8
SHA1 d0528052752266055d876e2ee0c76f7e2fc74938
SHA512 e5b6e90930583a90b88c0dae6064e063838290f8d6a018aec97413884dfeeea96b9cb6d0ea03856b68710d5e7d9986b994ca2cf1d71ce8d061b7940e9e3ad730
TLSH
T1B0B09B005054F39F540972C9D4C99961344685FF5A5452875F349D2515E3D15871D84D
MD5 SHA1 SHA512 TLSH

Submit Download

linCatalogs_dict.TR

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\linCatalogs_dict.TR
Size 98B
SHA256 8ae58134c514f59f03b43b40a71dfdba76c0334f4c5a175b0f0227a66ce0c2aa
MD5 00f520bba202d904dae4731da34f5316
SHA1 6ae1e796849c7f8bdc4abc2ab812dfb842bc9e14
SHA512 b3371cc7cb6e599ed7b707ac302b14e3f3265905f0a9203b0fa4711326e1a1dbee726c09a37482ceef009631c8be35dd15db4a41d6d88bfc94825b6d459b7ab3
TLSH
T1D6B0121415CA424979847E8D90DC4CF0F206070B575435CB5A40D047158200D8D9348C
MD5 SHA1 SHA512 TLSH

Submit Download

sntl_adminapi_windows_x64.dll

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\sntl_adminapi_windows_x64.dll
Size 372KB
SHA256 13f3926155abc33487a8ad58ddc3930e48fd8c2adc16d82b31771a41bfface5b
MD5 204e7b9fd7c55336809bb538d83551e9
SHA1 49224dab429d664bf984c9c4543f9f8597e2444e
SHA512 9873054272186ce34b7bcb935bde9f5b1efee261874ffc9da216b2a7412cd0734cdff31384babb7adaa5431fc4903c2f4809cfa98b662e25ba66ee737c027938
SSDEEP 6144:i1y9qi+a694vDpVJTVGNzrfsv0fMZ+gTzGWXB1TualA9pq:8y+h94VVJTVGe+MZ+gTdWpq
TLSH
T16F8449A2E29468F9D2BBE13CE1E50717E7E17428432593DB53914E2A1F13BECA63D350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcurl.dll

Path C:\Program Files (x86)\LINEAR Software\Installation Center\Tools\x64\libcurl.dll
Size 610KB
SHA256 640d085a7d3ed60b88ccbc266f45a24c3163a74b0b2c1e3eed81ed0f9481126e
MD5 8ccbf790f4e196f28a02ad3538d64b4e
SHA1 23bb68f7baa66a93d5f091057a629974ae6e9436
SHA512 ff650ffeda4d9c7e3339e34e6e3101ba37e3c22901d5e18d326ef613178a47f1c7076076238cc92da3c6fdc55a466f58ef5dbbd838147bec09b28b1207307855
SSDEEP 12288:nHcuH2G56lb1NzSbZZ7b9XBkwDns0DWTkQ0Im6U2DDbDWxp1:nHzHt56lb1oHbMYJWTkQ0Im6U2DDbDWd
TLSH
T1BFD46B56A3F410A9D567C138C6438627E7B3B4551360A7DF17B0CABA2F23BE2673A350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linInstaller.exe

Path C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller.exe
Size 410KB
SHA256 e7c4c36b9eebe5e20279865f198a1f95b16759191f783fe91781e45e5c56d9a6
MD5 7670b9f4eea26a0b13ca4578c0d3fce2
SHA1 91cebf1712e0bd08d74338591f763eb75a979692
SHA512 ce7f0630e2e9502b69727b46ae3463587ee7199baa510c4056aa063f2a9d9d169b4071dc5fdcae06303882b750ce80bd0577b47d573618df6525ab5c969508ff
SSDEEP 12288:qEb0mSl0mVBSs0Sh2d+aW6ADlWqNB8qNlWAK:qQ0m2VQRVd+aW6ADlWqNB8qNlWAK
TLSH
T125946C1FD7A942E9E063C578C9938E46E6B77C1616E0C62B4378AD5AEF33210FD19306
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linInstaller_dict.EN

Path C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.EN
Size 24KB
SHA256 8c5e61273b22cfa58cc55077fe3b90e040d93c09091f0db599da69696b9795a5
MD5 c7bd1aa8d406d3373e9e577f9a17246d
SHA1 39565365934a91d15284831bb13e7f90565bb5ad
SHA512 223493a4c25cdd2053102723a048009e52dfd5c7b397c1b8c779a398178a4e00c6530a1f2a80c65abd70e9abcff7e5189162654d7103e16dad50adfb7dc6b784
SSDEEP 384:f8Kiaagj+R/t9b0rHv0fs75KPLS7qV1oEiTRz0P0c8ITOwPMbPXA4jXp3Lfqyhjr:f8KianChDb0rH9ivQzj5q8rb
TLSH
T121B2D61A27E5637891D3138BE6CA9F61BB64D097031B211923ACC69E721BC75877F073
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linInstaller_dict.FR

Path C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.FR
Size 27KB
SHA256 05dd3ab4be4461b50752c931bf32bf8546ec516fa1809dd049e6789a26f61a5f
MD5 376c550a0e0b7bd25161d1eb655a7bcc
SHA1 842e2a7ddc144a2e1a4dc86a26e95000beb1b037
SHA512 227ce6e6b842e4bdca71818fef53966778cddeb6a3488cd5d758b5d7029c78d707150e9b328fdc9caf3f8dbb4bc380f282e609f3e6d4be7ea7a9ca8be89d14f1
SSDEEP 768:Cm3vi0K47O4n9p5O8vouB/D/S+b464oq0afDbjT5kjPgi9IY96WQ3uBZs:tvVK4a4tOGouB/D/S+t4VX7PT5CPgi+D
TLSH
T1CBD2B65E9AE463B576C21317F3829F23B778D20A170BE14497EDC28A150B8F9C36E4B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linInstaller_dict.IT

Path C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.IT
Size 25KB
SHA256 577a9f52ee466b03667660ee05496dc39bd23b85add7aa741d1fee3018c9f087
MD5 e8751edbc6bb0058f5846c78a0f2231f
SHA1 5526f15ea3caa0f59a8cc51cd2bf0c4ce2b341b1
SHA512 25bcdaf615bdc2364c574d12a24acad4bdbb1864dda8de7a9b43aedbe065876f37e42874502e1aa1218cade309bcdacabe7132d6f89b9ce941d04e3eeaa7da7b
SSDEEP 384:a5IbWiihrIbVyQrUqXoRIQWn/oDqaL0dxn+XpiXCBsEBHcqDslJQEfpTtBpy:a5dthFQrrYRQDdJpy
TLSH
T1FBC2C72656D66374A5D3134EE1C29F42F7A6E4CA6A0B310463AEC34F738BDB1C39D522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linInstaller_dict.NL

Path C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.NL
Size 24KB
SHA256 ce4de6f293cfc216b7037a28a0de733c72f06ddaddb267fb341dd8db3aa89a7f
MD5 3bb67253b1239bd707679dbe404ec767
SHA1 2322df2a3726a3f17fd5a8604ffd3455f3e65772
SHA512 1c1eb6e5871767f4787ba1737b51b7bf7ecff95f8e5386d5f121e6e863c1dcb3152e2f510897bf25c5f0ed09c2a5aaad400dbd03c69374e7ce9348b0fea50b30
SSDEEP 384:39tp03UwykeDAUp8NFf3dVT/0mAHDbLXKQS31G55tti9Xdni5XuYK9HpJG:39tpKUwaAoMmKQTvuFNp0
TLSH
T12DB2F7025AD1A37DA2D3134EF2C56F63F761C14B476F615CA3ECC2AB6113C79826D462
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linInstaller_dict.PL

Path C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.PL
Size 20KB
SHA256 8917c39d0a170a7a4c454fa2879d6d73f2d964639a7e7df09a7e8027637f6979
MD5 cbb6cc73c07c043d919d8bca3d681c9f
SHA1 662f2015db08c3f848038dbb636ca956f50826d6
SHA512 14648d37c6cc3a4d5abc4fbab41a32bfbd883d66b04c3cc1ccfe347e28e9317c2ca31e9dce93fbd4eef66ed25bb7286421907a35faa9f21fb9f9d0e7661fff4f
SSDEEP 384:Bql3QwR9Pkqk0KklH4N9VRvVJGz+tQfc6gGdFGnsSjzNpqWBlKmALa/jklB0DcAW:BqGwR51C7NpCrys6nBlKmALagT9q1U/
TLSH
T18B92B64656F253B8A5E3438AF0C28F51BBB8D0864B17210A57EEC25F5607CBA857FC72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linInstaller_dict.RU

Path C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.RU
Size 33KB
SHA256 9d923cbb816eec23e270f86992919fd92a20ef44d0cb91d84af845b6adb903a4
MD5 8e3fc2c6827926f3f58a2b0da7ff5fea
SHA1 59b5e14c446ac82b5926344b359d7d5453eddb41
SHA512 89c97ad79b08d3d5449b86c8aee9a35d734346d1b86c87fe474bdbc5484e983bde394ff0dbbf0d9c517b3d3ebf6042c7824487ca63b6b149b34081a32643ece0
SSDEEP 384:r0m/c3dTjULLwnM0qTxJ5zHS1q48de+GVwZqFtyMroE0CnEE8j4EDTJvQx4Wzo2a:r0m/aCMM0qTxDG6eLvrrq3E0rtubPgd
TLSH
T111F2EB6116EA22EE5242B20FD944AE097DEA85FE3F67631607A46D7F31F3074C22D613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linInstaller_dict.TR

Path C:\Program Files (x86)\LINEAR Software\Installation Center\linInstaller_dict.TR
Size 25KB
SHA256 02d6b9a11aa2ae52fa2c26803f0d2c42a487a066a9848f3d721249e5efe6f7cc
MD5 fa164b047996d0edabf75599743ce441
SHA1 3e203b07cbd5b6992d7f1920f6b961f604a540d4
SHA512 dbc9ff15dd6147bcab025b5d0c12dcb22ae95531f8cece46c5892ae892a230619fc7ea4fdf9101cd28585c4cc3d226f65957dfba7dbeecd44ee98297cf0359dc
SSDEEP 384:yzY6O8iaCMykB1GqDDEwoBVdocLtnTv1lVV/t91br8prPpucJRA2cM9dijYePK:yznMkBzDDEHDXKdiNPK
TLSH
T1EDC2C74229F7677CE3A3138FF1C14F62F69AE24327327845976CC12B56079B6836E918
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

state.rsm

Path C:\ProgramData\Package Cache\{5af95fd8-a22e-458f-acee-c61bd787178e}\state.rsm
Size 1KB
SHA256 36fc2cfed012ff7bd8bd657996f87d79d86f60b83d830fedcac81b5e4de9aefc
MD5 b7707c10e9ccec72c084c3d0080f35fc
SHA1 f2dc4ce65b8ea7a8dad232b884905625b2bdcd94
SHA512 4efa97e842c53d89bd6dd4b12528f51803ac0a67f14d328807b2b2afbc2df9e01494bb1acf9d30ccd5572d486f409600a76654caf4af94744ce0150a12092502
TLSH
T191218065AFE69119F3B7AF707DF506058DBABC210931E52D0284214F8E32695EA60B26
MD5 SHA1 SHA512 TLSH

Submit Download

dd_vcredist_amd64_20260925190755_000_vcRuntimeMinimum_x64.log

Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260925190755_000_vcRuntimeMinimum_x64.log
Size 2KB
SHA256 33c97427abd9122cf70558d8e345e09f2cf1ad53d9e5cfea4e671dd801333fc5
MD5 5d0fcc2953fe65250e0e4585231e7445
SHA1 ab6f8721b280ef095932d17d0ed1ef53d7898a93
SHA512 8ff8a815a930626ed9423573754a85e2303e092481a6715dcb9a53c991110daad4f10222fe4e9c266341c42d735e4e25921dd0a32134c822ec7fb310c03e142d
TLSH
T1A141F2701FE50819B2B75617EFF385626A33BDC768349F4C2249831A066BD0259FC76A
MD5 SHA1 SHA512 TLSH

Submit Download

0x0409.ini

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\0x0409.ini
Size 5KB
SHA256 57e020c41ad0566fb55415a40167a0c3da89584bc4e5f961d8e8c646f80c5590
MD5 52d179ad79966752ec40a678fd8b0062
SHA1 f12df9b03090286d1093b5421aea3acc358cc032
SHA512 b5fb5002f1947a765a83c9a960c378b04adfe7acebbd8be79dca07c73d7ff96f5e988d8b6995c8ba6156a74ecdb0084e543090704080ea3095dbb80835cdf9c5
SSDEEP 96:VXoB2Ahl8/T3INLfRtMx76U0KOFWgVQMG2Uub0QAg80SbtEBapIx0KsLK3E0cTBY:JIYT3wLfRA0v/tBAvCSEB90C
TLSH
T189C1754E4FA6837E2861031AB16F2650F326956D5363D167B1EF005C7383E1893BB6E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1033.mst

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\1033.mst
Size 48KB
SHA256 8ddd9bf1c226a6b4ac4fe65b5dbc61dc20329f583c2612cbd27671ed4a5ecafd
MD5 63b60aa4fc7d4c6b3b5184b624e20b2f
SHA1 bbd9f41d30121a067d0d69386b46bc70847dbcc2
SHA512 3b3648a6de47abfc72655c7400690d665fb1a8477082f9b7e7857aea2fe144fcd7660af60c659436521d1b247a4669c1f228cd13c15c4734dd20d89af2e2238d
SSDEEP 384:EOf5tOXCTiWsW5rueNKn9Kqxdkc8dUjUjOs05rvFy/WyccAaXVc:EKayTiWsW5rueHc8dCu05ceyga
TLSH
T13323C74FB784413FCA9183BA6A09676B5AB08C7C8762123A54DE729C3EF125C63F70D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1045.mst

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\1045.mst
Size 52KB
SHA256 483f4d96c7550e52511f70b53d8a909eeff7526d88138b9085658a92ceb327b0
MD5 c01fd29bf15de31531fe8e1198e1720e
SHA1 f6e21e959a9216c48e615181c9d327b64c3d25a6
SHA512 ce179d4f8494e82dbb2294bc05b57ef46aba5725898eb9e384c75108dfeafd6000a5abcfd1f26026106b0d076d888c462aace45977dffe627a38fcb02e53502f
SSDEEP 384:Ba5tOXCTsZT8sTQlTsQqZGfuVaJWzEG0hMVFrF9jLbEDnBvLhe+eyffIU2bn2GUR:BaayTEA9qZCCFbrE1vrfHwAKeic
TLSH
T19E33E80EB4D88809EFB963FEA592078709E94C84CB23065A99DE330D5DF351D53F68D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcredist_x64.exe

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\3rdParty\VCRedist_2019\vcredist_x64.exe
Size 24.2MB
SHA256 3642e3f95d50cc193e4b5a0b0ffbf7fe2c08801517758b4c8aeb7105a091208a
MD5 1d545507009cc4ec7409c1bc6e93b17b
SHA1 84c61fadf8cd38016fb7632969b3ace9e54b763a
SHA512 5935b69f5138ac3fbc33813c74da853269ba079f910936aefa95e230c6092b92f6225bffb594e5dd35ff29bf260e4b35f91adede90fdf5f062030d8666fd0104
SSDEEP 786432:tSp+Ty2SfUfnbDDko5dFMYqlQbgAVLSElbmucMuZZxs6Sf:4p+Ty2SfWnHDk8FjVbfzPTq4
TLSH
T19F4733339648042AEBE34573AD99F5241D38A52C63024DF6EAECDD5E177829237FB702
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CD.1

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\CD.1
Size 71B
SHA256 b7ae4a012f776edfeba6a1849891129e0aa6ba3657233d6520730c60c0bf1352
MD5 400bdda5ff257bb349c85298690c3b88
SHA1 5c363802c22555c9e11dfeb32b505113e49717cb
SHA512 480a6b0015ddc9ff4aaffe5b589fdd6184ad0934b2ab26344838ead3a74b2a1ae7a015983da6e394957acf43d7e30352a87c2a268a8806c30814603e4ce9fd57
TLSH
T136A024D0015D41501103037551010C00F33055F005DDC05CD41174034113F74031D751
MD5 SHA1 SHA512 TLSH

Submit Download

ISSetup.dll

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\ISSetup.dll
Size 4.2MB
SHA256 3a1c1edf8e717d10e2fba46526a45d53dde312bf5d0f53fc0d2eab238e800016
MD5 2131d042b1f3e5e4bcda69dd45dada04
SHA1 4d86210346aad68be5af3f23ccc6ecf1188831af
SHA512 a60f8801dd3878fd739aad48bcfcb682fd44e8f27338a728e867bf16f5ad65123c0ba87c4a537b9851bc313aae2ce638162378cabfcbc91e6fa74da4ce80e9dd
SSDEEP 98304:DhrkVsUsHPgoqZSfwEJrNV5C2x7b1YhN4X7xWTXiMDpZy5yx5X:DOsUGPXwEJrNVo2x7pi4X7xWTXiMDpA4
TLSH
T1FF168C372F9CD461C8C4297B49C77D79D73EE20A64225160BCE89B0B362366C196EBDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LINEAR Installation Center.infx

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\LINEAR Installation Center.infx
Size 1KB
SHA256 9ca4f7c5faf3173c662bcd888f3f91947a489104c652bed2eaab4ee41dbea3f2
MD5 9094f6392be6a125380d43e8161199ad
SHA1 60645e27f26079239b60eb2b0ea45151baac2c7b
SHA512 e0d6eee67013eefdca97bdfafc4d035474ce5ce5c32283c61d4a6461a8b1b17c04a46a13daa9b63004643baab1881d0ccbc89cef78d5bc7ae2af168c112544c8
TLSH
T1AD2144F848828FD60E48C8647C48D42442C67B74AADDC072228CFD89B6A9F87DAA5752
MD5 SHA1 SHA512 TLSH

Submit Download

LINEAR Installation Center.msi

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\LINEAR Installation Center.msi
Size 321KB
SHA256 355222d9ee0fd6097b080f3773a5fccf7a7e8650b0695b6c195cd1a2403fa063
MD5 7d0f7f858a8a876cf8d37287137423a3
SHA1 bf72bb1b98eb9e7467622c2fb613701d7b659b7a
SHA512 f58ac68606a8922b366338a5b84f6f025aaf0f93ac0a31943c37805e564e0cc59c65f17333fc9459d8d56e15750aa1801793ab0d578d402cbcd08a5d4c68f044
SSDEEP 3072:XgguG+10+P/vTYhm0DITBM5vtmF2/BUiKdCFG/cmzmaSTqNb9YfMU0E9QsJB9cWp:XgguGOMNlUiKQeNZluaZA
TLSH
T1EE647E02B95B029BE3C6863584161FB5EFF56D78CB720235B9D9F2282F74270256BDC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Setup.exe

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Setup.exe
Size 314KB
SHA256 7c9e3e712dd218c9535099185c5cd96d932df11e2853b981fac3bb71abce8d64
MD5 b381c9257155cbd98f98cb27f5be8214
SHA1 ceab94ef5a918bf4fa85f80fd5d1fa8f758e5472
SHA512 049c437c463ca1d86895e5b4086838934b7b74f0dfb5763579a88195c2e58ec47b59c5ae24f829c530a8b0a89c5c5b5d873770907c44c15932c3379c2d5aa0d7
SSDEEP 6144:8ZKlg1Vlhw/aAa1Zg30ZTNWSG6/7aDtWCn54YqcDe/5pXsGKLu8Ne:820VlhganzrWSG6zIWC5kcDeRtmxe
TLSH
T145649F027F908933E94314319A5A1FA6EAFFED332D315487D788565CBA726C3D22172B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Setup.ini

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\LINEAR Installation Center\Setup.ini
Size 1KB
SHA256 2d88f87adecc02c73f43fb105591a7ff4ddc32bc3cd20fea065270b9e0bcc58a
MD5 6003e96d581ffe4b21bc48cbe4e0e3e2
SHA1 5d2415f2fe0f9886ea62740521060ec57fa28bd0
SHA512 e8cf4de13d8d938448f28e19a00c242dab133d9582f644cea5d7d192a6807e4ccf39a8533d6a5e3121614540211356d39d29c17c33b83feaf6b3e6dfd3c920d2
TLSH
T1D941A15072BB05ADA317716B6EBA06C329C222504D16B21DE78847F5DFADE1B033F2A5
MD5 SHA1 SHA512 TLSH

Submit Download

License_PL.txt

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\EULA\License_PL.txt
Size 24KB
SHA256 987161ab4749c9c9567412900fa485b5fe906f0a3e187b65f1b6e2b2db364820
MD5 cef3f12dc2f31aa490b8dfd59de4dc2e
SHA1 2c9df402eb2baeb4471d7eebdc51f57488ce0fe7
SHA512 cbdad2495509628f295c202b9b51fb09b63d299d8944b79c1c206cf86ea039a595589a1bf347bbe87c6ebedf275a92d30b4605abd8db3045f5ff9e6773c47f60
SSDEEP 768:ZeIHBff8o72T9rUic5DpYbRCVonH+S+rgNC84Ck0X:ZFhff8o72T9rUic5DpgRzH+q4v8
TLSH
T1B4B2C8BE320613B1168303222A2A95C5F3765178397B97907479D25C2376D7883B7EEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSVCP100.dll

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\MSVCP100.dll
Size 411KB
SHA256 d769fafa2b3232de9fa7153212ba287f68e745257f1c00fafb511e7a02de7adf
MD5 e3c817f7fe44cc870ecdbcbc3ea36132
SHA1 2ada702a0c143a7ae39b7de16a4b5cc994d2548b
SHA512 4fcf3fcdd27c97a714e173aa221f53df6c152636d77dea49e256a9788f2d3f2c2d7315dd0b4d72ecefc553082f9149b8580779abb39891a88907f16ec9e13cbe
SSDEEP 12288:zNb8zxr1aWPaHX7dGP57rhUgiW6QR7t5qv3Ooc8UHkC2ejGH:zNb8Fpa6aHX7dGP5Kv3Ooc8UHkC2eKH
TLSH
T10E9428237A4649F5E1D223F46289932143F9FCA40721B3C3E2EFE1A99F583D56A33951
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSVCR100.dll

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\MSVCR100.dll
Size 755KB
SHA256 60c06e0fa4449314da3a0a87c1a9d9577df99226f943637e06f61188e5862efa
MD5 bf38660a9125935658cfa3e53fdc7d65
SHA1 0b51fb415ec89848f339f8989d323bea722bfd70
SHA512 25f521ffe25a950d0f1a4de63b04cb62e2a3b0e72e7405799586913208bf8f8fa52aa34e96a9cc6ee47afcd41870f3aa0cd8289c53461d1b6e792d19b750c9a1
SSDEEP 12288:yMmCy3nAgPAxN9ueqix/HEmxsvGrif8ZSy+rdQw2QRAtd74/vmYK6H3BV0eAI:dmCy3KxW3ixPEmxsvGrm8Z6r+JQPzV4I
TLSH
T1B2F49D11B692C073C1B221300629D7B25D7BB8711035946BBBD59F3E1FB47C2EA277AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Setup.exe

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\Setup.exe
Size 216KB
SHA256 c69cecda6ce3b281fbd42c2c98800051b99bad4407952a0bf4b3a280e835417c
MD5 8774e44e18136a75b39c25dec3bcd202
SHA1 fa396552b40d64387fa7ef279853c1650d08a79c
SHA512 fbe3f5d1ca163773e85996ed2f62efb693ee1e586056c55e9e19d63b9c21973449a91f8e5c2d20dc4a600364c3a68eeef063285529a51aae141606abfed93f36
SSDEEP 3072:Ahme+m88HBMfPKLYdhNR6ILMh35zSYaQUJ7n9O9Vj/m1qGYrG3Ns:vtPRhNNLM1MDn9O9VbrG3i
TLSH
T1B8245C7137D1C874D97B0F3019B4666400A5FC322D62A267BB847FAF38358969E38E67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Setup_LINEAR_InstallationCenter.png

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\Setup_LINEAR_InstallationCenter.png
Size 7KB
SHA256 314a8e82c4c5fc0ad91eabc7e01a2e8ea9d83498841bc375d276e7e558995cca
MD5 ebf263242111453e3cbdadef0144f36f
SHA1 a138b6dc9ba937a30a13f0ce780695352ff832d2
SHA512 65264f639e4c37c9e2557a4d834f913d55cf045109dea5d85f2b3da3f8c449edb52b2267a7d1e00d3f2f2627fb6d4ec2d8651c1b3a5d0a41e97fc029a7ed9bfb
SSDEEP 192:F5OBIJbuLV2bQ/9maKD92VsUtCJVHzsL8cn9p9ev:rOauLV2b+d2UtQNsYcnb9ev
TLSH
T149F1B01E8AC6D180EEB82D6B4253C4C88445379E38FB6830BB380E5533826FD9A58447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CommV1_100x32.dll

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\Tools\CommV1_100x32.dll
Size 390KB
SHA256 bd59367458aefe37e5f986e7a12e49f8775c514ba9f24f07015f7bb75e3a5795
MD5 4cc0e8a4976619e47715231bf0f2a403
SHA1 a1fb6b4ead4229b6cdb083c27211d34e3420b1e0
SHA512 508fbba567c3fbef0554bec9c8c63fb5bdd0af7b086e8bf6b598e549c881e0b8f3536265154dd91d28f1defc654df9c759b76199937bbfa8978f2cd2d07a02ae
SSDEEP 6144:03IqzymiyJHwAtX4DzZtqUBKX6XXn4n3g8DVM7KKwX6mOZdy/sv0d0vY8:2OT7AN4D6hqXX4n3giVM7Pwq9
TLSH
T1E0847BA3F6D19735C17B073AA884125D64FDE9200FF1C263E3684B1EAC75A83D919B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CommV1_140x64.dll

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\Tools\CommV1_140x64.dll
Size 1.8MB
SHA256 a6024c69258c53cadd2de914e06577c076173b0c8f040f9c0fad2bf9bd7f68b0
MD5 e7098c048507a45dfa7e60da1b9f2993
SHA1 8e6121e6b45b94ff9c6fd79e790326579d1da6dc
SHA512 a7a457dba0c2f580df9a0b25cb89041b6e35e07f3736f94303096aa7686fe6025b8e090c680ddecb9c25a0fcf2f985b52b227478084209a5292387392b4401af
SSDEEP 49152:+VcORUJU+OANnROxTwFih95tdW6NTHKoDbgl:tU
TLSH
T113856D46E795436AD1A3D338CABB8B42D6F3B44449618B1BDD667B5E2F37F20090EB40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CommV1_dict.EN

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\Tools\CommV1_dict.EN
Size 111KB
SHA256 742fb77e6bb2d7426c5a6c40a1228d4b3b1058fcd125216252294d9b2b6540d8
MD5 1a31844d6ff7367b003c5d6c18e037ea
SHA1 fe7aa94572e675879be4b1b0c65783c55688db38
SHA512 c289f8301d6b8c604a3c15bbf6b5e0c6b0d4a37cf5ee465d19bb11c83b9624432e8905b0c40aa944da7d479ebfdcf7a3061a27029c4fd9f4cd3eb3f933b6d2f5
SSDEEP 3072:C/raKKS3leAIlflApngSqi2upDk2NWJoJChOsjyGNEce1b5AQQQgMC3EmrQaHJXi:C/raKKS3leAIlongSq8pDk2NWJoJChO1
TLSH
T17AB3003832D613D3CE8E83E176D215317E3AE3A5F5C906008ADF494E351BEA1B92E65D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linInstUtil_100x32.dll

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linInstUtil_100x32.dll
Size 76KB
SHA256 79193e04dd49d5784dc26990a66b65d5d84bfe11ea99d831d1976845aa124af6
MD5 f338df7d775092504c1e559f4a2cc342
SHA1 5fefe71bb27161fdfa9021a5457a2adef78bc353
SHA512 3d976488521afbc8cb398365ff39e716849241c2b45475ea51f968bca9527d5426682a0ab8c72464865066f5b663350856f170374cd07e00dae6de2ac26cd7e2
SSDEEP 1536:pIIs0eHplvEb6KAVdiMPiibkgiz5OfiEBWNTqIm:mJBE2K5qk5lOfiEBWNTqX
TLSH
T18A73185336C155B1F27B07392AD8625593EEEC312CE180475B8B578E2F30A92ED68F0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linInstUtil_140x64.dll

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linInstUtil_140x64.dll
Size 100KB
SHA256 2f5ce63c6dc679c8ca8a74f8c8b6585eb724b6bd8819a79cb8c9d18b4b8c24c9
MD5 8e4a80a70ab60844e6baf336db620157
SHA1 e81711cc20c760fa3e00c8f9fa23a82944e33a1a
SHA512 de32ca90138968e42bde394af8699dc038c3416a73fbbb23c345fb026a996ba585c06c7ba37f1240fff898cdd2f53f9ca4ec0d356f40548eff51d54d38544e19
SSDEEP 3072:l0zojKxk/sQ8SHCDFy3jPjRiogOdGwy8ENzrdDJ4y:Sojgk/s7SHCDFmjPQpNzrdDJ
TLSH
T12AA33A2F27D442A5E122EA78D9AB5F46D3B2F4110D31871F03368AAE1F33B527D19B91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linInstUtil_dict.EN

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linInstUtil_dict.EN
Size 7KB
SHA256 8588af448e478d4635eb2fbc7509d3ef7d9de02e4704685d5235b01f775c456b
MD5 f681465977be4138fb9345667e63845f
SHA1 9b4cca8ef12a32a1a4c81875479bea6c934fcec9
SHA512 6eac29376530d2a674415602b2b785cc36fa3280c970db792c1f2e25fe17b45a1b3a952f78b480c2942ce5efdf7ccce0765f59281730ddbfc9ac9104be88aeb9
SSDEEP 192:PRwSPp298GtngBMzLehZ3Bj7YEe6CeCFIzMN:PHPMn9LMJPPCeC1
TLSH
T1DFE1615E1EF5937A2DC3135EE24B59B17BA9E0D80217622C47DEC1112297EB187AF053
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linSetup.exe

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linSetup.exe
Size 241KB
SHA256 6c3f1af9fe5ccb771a56ab705697bbbf2a4129894df8b1e8e6d7f25bed3f887f
MD5 688be4e339565c2a2009263a9c69515c
SHA1 6f158d44a3efc4cf120e3c791000cc861c37fe83
SHA512 ea79f4a2988db6f901bafa3805a02dcaa62b5a0666a5f9478dcc266e6b4b8bb49015bffd113e28d2116b4564170477a1a46745037a81bd212fc1e289f5abedb0
SSDEEP 3072:Knq/FD2TMtvNVyubl7+2qs+MidW27iZR4C82ewcdWXZxJFec/eOW:sq2MFyubl7+2qs+B/wcgpx0
TLSH
T18034391F63A0B1E1D267C634D9A64E89E373FC722B22975F07347A3E1E32640BE24655
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linSetup.ico

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linSetup.ico
Size 363KB
SHA256 1680c1e544482e6ce8a2952686f441d68a8dfd10c42efd4850dbbce53ab36af3
MD5 87818da433c2a87333d8dadc19e9213f
SHA1 b06cfd4fa2ac354dba7a3f8efc4319b6d83427d5
SHA512 a7b5a7f2054d3e7d3f4c61b63851d38512c2b3a46e335cccbc84d0ee540409a10498d29ff4a7736ffc15dd3fd46593c7f67b04115e263a5402480dab65c111fb
SSDEEP 3072:aBgbeyiapu8RrC1gkHKXTWv6obnLb144JTfAWbQv07sbAxF9c2Xuf70vlHgHX0A/:iVRXwT
TLSH
T1058461352F61EA4DD2600E713EF039D801AEDE877957A6E38D263DEB953C24D0B9A0C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

linSetup.inf

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linSetup.inf
Size 210B
SHA256 13ed7072061d1cf6c98264fc3c232824ad77a2cb2f72ce9edcc9f3474b2246a1
MD5 bc5fd7d825d97161acbb78770a9d74b6
SHA1 085b88f9568edee2ba4cde95fa57bac20ac2762c
SHA512 497dbdaf4082e99e6eb954c537d92ef73316359a38072e3e57324f7640a6afed79009f124660788a53ccc50d57102d40ef488d101f22187f68a43a3df044346b
TLSH
T190D0A7B1662A87274793D67687071841F8395E08871D400C117145B395B2681822A7E4
MD5 SHA1 SHA512 TLSH

Submit Download

linSetup_dict.EN

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\linSetup_dict.EN
Size 6KB
SHA256 2fc9fcf12b25f0745bea32d2707109f2ed5515da09cd101a11b6580281b613e2
MD5 427744754a36b3950e8433a420ba89e0
SHA1 762a4a13e61d3eae126804eb6e52615cc5888a17
SHA512 23d83763619237332b0972264545204d51bd25d5d4873bbdfebd2024a0cf71744f02d2938b72bcef2f404e96d4dcd6b53a98d3cdbe40ce12957993641a825966
SSDEEP 96:Ox9dp7hOmNMDUNMMUC7R2AyLUdiRJz2luLfEvEfCfGEOU2iLJI3RTVC3Vzgl/5e:WRNbKu7Re+ghkeEcK+tII3LEIhe
TLSH
T13BD165A927F9637DA9D3034FE3829E953295E0D60327222C97DFC25A6507DB147AF803
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mfc100u.dll

Path C:\Users\Admin\AppData\Local\Temp\linInstaller\Setup\mfc100u.dll
Size 4.2MB
SHA256 24bb6838defd491df5460a88bed2d70b903a2156c49fb63e214e2c77251eca71
MD5 f32077df74efd435a1dcdf415e189df1
SHA1 2771393d56ff167275bf03170377c43c28ee14e1
SHA512 fb708e0949854998fb80635138c80ac05d77dca3089d3e5974663ddf2376d6a03535dae1a068514c3b58bc06c8e4078b37cfb6bc90f080f7f31fefc972a34850
SSDEEP 98304:jsWbb5oF0MUVVsK3vOGH+1TSlUE7vrffTTnm7ulf67NACOub7FLOAkGkzdnEVomK:jx5x3Ii6F7FLOyomFHKnPA+
TLSH
T1E5268D217EC941B5CDD721B0069DB679932EECE4273006D351953BEBE8383C16D39AAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tasklist.cmd

Path C:\Users\Admin\AppData\Local\Temp\tasklist.cmd
Size 110B
SHA256 097a0951b6d5225cb053937b2fce84515a53c05719f0f77c11deb4d9e44f57fb
MD5 d802c27e396aaf98752e269fd2646e6c
SHA1 145d68c5df5f1c8318226a61c8e686199fb087d7
SHA512 9e803eb669e12cebec97d102797282fccab95d175f1373e60647513dcc0d365c012bf40054e1e948e1e4b83c00511f6bc73e2fb87303bcfa5610137268b39e8f
TLSH
T115B0228003FBCFBC00C00A3F8828C088E320C0022F2F030C8230CC0E023080EB3823A2
MD5 SHA1 SHA512 TLSH

Submit Download

tasklist.txt

Path C:\Users\Admin\AppData\Local\Temp\tasklist.txt
Size 64B
SHA256 943b315e065238b7073b033f534ef954b6b6461fb3f03a3f5b8555b11bc4c0a2
MD5 dea052a2ad11945b1960577c0192f2eb
SHA1 1d02626a05a546a90c05902b2551f32c20eb3708
SHA512 5496b10e2a77aee11055d71bdaaed835df1770e85fa4d0f9433330470bbcf76c932c04778a0b47f4193eee14813db2e2b19ecc50b4a6a193faa19b4019705917
TLSH
T12AA0220F3A8003AC008003830288E2820F0C20CC8B22803230C30888000A038B83B0F2
MD5 SHA1 SHA512 TLSH

Submit Download

ISBEW64.exe

Path C:\Users\Admin\AppData\Local\Temp\{6F100C28-BF19-42FD-AA3A-2972E25D31BE}\ISBEW64.exe
Size 117KB
SHA256 6647c180d9d9c5daeb7a41cacc96ca6722e08bb4a43a04364d37406261dd9804
MD5 1d461686b0e32f2decb587c895a05402
SHA1 a91882f1522d556ab463aaa6fafb82c4064a3218
SHA512 1f2df1ffd636900e012c65fe457ae5f1f1d7478baf1f0eac07ff9ace639e3483021af263f3d96bd084352f0c95b73f431565f9b73590e44b94a8cd800da82e3d
SSDEEP 3072:cgSXSllhg1QWIUtSfW8lSBwWhvcWLJYnldW:+XSDwZIuSOJVGIYnlc
TLSH
T1C7C33992B2D484F5D166923989D64782E7B2F8244B6063CF23B0A36E1F3B7D46E3D750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ISRT.dll

Path C:\Users\Admin\AppData\Local\Temp\{6F100C28-BF19-42FD-AA3A-2972E25D31BE}\ISRT.dll
Size 203KB
SHA256 793b3384751f12793d24cf769438aaa7bec47a6b0f22397e8588e83cb8fe4b61
MD5 eddad4bc2b7e8c423deb9f2711fe653b
SHA1 7423ba67726bc90f96f42002c25f4a1f5334029b
SHA512 3515a044950944f58e2989b32368749ffed52786dcaf03c10d49e96cbd0c13c6f9ac5bb1d136ebb0045801a7c10278ba91e945cf72a78c1c641149e9dc9e3b0f
SSDEEP 3072:aNWobwUDGSmR/1j5+RFfpN/jmokaiQgGXcJij5ZRxwl16k5NqYMtZqb:aNWobwUDdmnjQbsGXcJiU6k5Npb
TLSH
T1331412021124509CF9F2DEB836317433DFDAB6406BE0D98B16A1CFB91AE46345F6929E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_isres.dll

Path C:\Users\Admin\AppData\Local\Temp\{6F100C28-BF19-42FD-AA3A-2972E25D31BE}\_isres.dll
Size 120KB
SHA256 1e154a29673d129414ab56b995d04afcfa1a02af47dabaa28cd11c25f7d6026a
MD5 e54601d8a464a455de081d63d4b7927d
SHA1 0ff6da399c123394cca3b4cc64a41d8037787b73
SHA512 5a213430fb8dc6a19c24122f8d9cd03479ee7ae421eac77d1026f16bf520a1f113d43380e2a60d5f0133e09aa7ad323a7ef9d1cccc3eea1e905f09701b118e05
SSDEEP 3072:QLKfpXPvsTx5IHx0dF4Xs5hrAGRhjsPfBraOhpidb5u:QLKftokR0AXs5ThOBhrii
TLSH
T1EFC3028AFF6C0A75EACC183700664D125A23F69D761CBF4B174AC06DF4D93277E14A29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcredist_x64.exe

Path C:\Windows\Temp\{834C9976-0DE5-41AA-A54E-CDE1D54C485D}\.cr\vcredist_x64.exe
Size 635KB
SHA256 8cd998a0318f07a27f78b75edb19479f44273590e300629eff237d47643c496c
MD5 ae0540106cfd901b091d3d241e5cb4b0
SHA1 97f93b6e00a5069155a52aa5551e381b6b4221eb
SHA512 29bb486bfdd541ba6aed7a2543ff0eb66865af737a8fb79484fb77cb412c3b357c71c16addf232c759d3c20c5e18128df43c68d1cba23f1c363fd9e0b7188177
SSDEEP 12288:1nMwHskY7gjcjhVIEhqgM7bWvcsi6aV/LIysU40vy3W/ceKSHMsiFyY6XN:ZMysZgjS1hqgSC/izDfHjymk4HM5yJ
TLSH
T13CD49E3295614036E6F106B3B928E2347D7CE21827148DAEE3E8ED5D3EA849177F7247
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.png

Path C:\Windows\Temp\{AA9F40B2-7943-4585-B421-85191B9A61F6}\.ba\logo.png
Size 1KB
SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
MD5 d6bd210f227442b3362493d046cea233
SHA1 ff286ac8370fc655aea0ef35e9cf0bfcb6d698de
SHA512 464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b
TLSH
T1CF312CF34748B7A7D30581351471819AD242FFD8F9CE291E35CD5307664018115C75CF
MD5 SHA1 SHA512 TLSH

Submit Download

wixstdba.dll

Path C:\Windows\Temp\{AA9F40B2-7943-4585-B421-85191B9A61F6}\.ba\wixstdba.dll
Size 191KB
SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
MD5 eab9caf4277829abdf6223ec1efa0edd
SHA1 74862ecf349a9bedd32699f2a7a4e00b4727543d
SHA512 45b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2
SSDEEP 3072:OXoiFK6b0k77I+QfaIl191rSJHvlalB+8BHkY6v53EfcUzN0m6I+WxBlnKzeZuqt:OXoQNb++gDrSJdr8BHkPh3wIgnK/IU1a
TLSH
T103149E11B5D0907AE7FB1A385938B5216D7FBA201B60C99E17589D6F2DF02C0AF35B23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab2C04DDC374BD96EB5C8EB8208F2C7C92

Path C:\Windows\Temp\{AA9F40B2-7943-4585-B421-85191B9A61F6}\cab2C04DDC374BD96EB5C8EB8208F2C7C92
Size 5.4MB
SHA256 cc001c20f85e16015e0d23eb0c3a9bc3c3cdcc1adda53f88ac77dd29705ba01a
MD5 d5a3fd8ad806f66d33d652d5913a95b3
SHA1 7b1bb6cdbe700acc2434dc52c40cdd96a6462a17
SHA512 594d710133f44049546c62c3c89614415ad776c24f3ada0a8d1724e6daf27f941eba43a05a096d90cdf51ad51c02462edd6308e2aa393cb8325fde256ed77037
SSDEEP 98304:NaaTUerJ34CXBLnYWnyGjC1L9qjYhZt5wU46YRHARFrxj6I92Z5VvD7DE9Z0yZ:MrKtZnYWnyGjCB9qjcZtZLMUx2fgX0K
TLSH
T1B846333C851442D31E67E72BDB6ADA2686A411ED02936CD29F7D3B8351643DFB1E3B08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab5046A8AB272BF37297BB7928664C9503

Path C:\Windows\Temp\{AA9F40B2-7943-4585-B421-85191B9A61F6}\cab5046A8AB272BF37297BB7928664C9503
Size 962KB
SHA256 8fafd6d0754ee53125902df1b67ef2db86eb7af4c097522f2fb58443501fecdd
MD5 8eccd85b6c4273a28a54b0687feb6a96
SHA1 be791128af5713d407df2f7436ea8de1a80ca725
SHA512 9fdcb359a5748d0d920e1e12cf31de42fa224840fd11e5878f7caff7c4495b4facacf1a58cdaf0caadd0d9a3af871870b755245d2c1af33f07f3229b85101da0
SSDEEP 24576:OL3yPDQmtxkqlwM+Ewlhxt4Rw9egzUoW4IgbDzV:EYQ1NB9j469egz55X
TLSH
T16225338318089343E5671824E32CF5673D397E9B630D979A8E618F8F8393F56169C7AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcRuntimeAdditional_x64

Path C:\Windows\Temp\{AA9F40B2-7943-4585-B421-85191B9A61F6}\vcRuntimeAdditional_x64
Size 188KB
SHA256 7489cdde6a0c8aadb3253f22c460c2dc8099ba677f42d46b277f7040327c9b28
MD5 5fc68510b7425822a9d0928567ffbd1b
SHA1 f506d97ceac3c435ce6bafda7c47d9a35fc57714
SHA512 4dd4d99ace30eb1add9ae225f159f68636d42d1899acb50f616717f05045e402a2bbb76e4d86569a08ae74bb161b3911a73910fcc7044429da34159cf6b9f473
SSDEEP 3072:RviOApBgbxkK3zoGCK4Kr1kNM+BxWy2bDZRJdZcX:RvipBaTDo1j//SZhZc
TLSH
T12B14AF12B5848032D5EA1E344578E7A15F3D7EA09E60DE5F33A4B26C1EB13C09F36E66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcRuntimeMinimum_x64

Path C:\Windows\Temp\{AA9F40B2-7943-4585-B421-85191B9A61F6}\vcRuntimeMinimum_x64
Size 188KB
SHA256 e55a6c147daab01c66aed5e6be0c990bbed0cb78f1c0898373713343ef8556cd
MD5 0d00edf7e9ad7cfa74f32a524a54f117
SHA1 eea03c0439475a8e4e8e9a9b271faaa554539e18
SHA512 0b6730fa8d484466a1ee2a9594572fa40fb8eea4ec70b5d67f5910436ee1d07c80a029cf1f8e488a251439ac1121fd0a76a726836e4cb72dd0fe531ce9692f6a
SSDEEP 3072:ZviOApBgbxkK3zoGCK4Kr1kNM+BxWy2bDZRJd7A:ZvipBaTDo1j//SZh7
TLSH
T1E014AF12B5808032D5EE1E344578E6A16F3D7EA09E60DE5B3364B26C1EB17C09F36E66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1552-803-0x0000000000400000-0x000000000041D000-memory.dmp

Download

memory/2724-804-0x0000000000400000-0x000000000041D000-memory.dmp

Download

memory/3028-801-0x0000000000400000-0x000000000041D000-memory.dmp

Download

memory/5468-802-0x0000000000400000-0x000000000041D000-memory.dmp

Download

memory/5508-532-0x00000273A2AB0000-0x00000273A3454000-memory.dmp

Download

memory/5508-838-0x00000273A2AB0000-0x00000273A3454000-memory.dmp

Download

memory/5600-805-0x0000000000400000-0x000000000041D000-memory.dmp

Download

memory/5760-499-0x0000000008040000-0x00000000080CE000-memory.dmp

Download

memory/5760-498-0x0000000010000000-0x0000000010196000-memory.dmp

Download

memory/5760-371-0x0000000008040000-0x00000000080CE000-memory.dmp

Download

memory/5760-381-0x0000000008040000-0x00000000080CE000-memory.dmp

Download

memory/5760-369-0x0000000008040000-0x00000000080CE000-memory.dmp

Download

memory/5760-344-0x0000000010000000-0x0000000010196000-memory.dmp

Download

memory/5760-379-0x0000000010000000-0x0000000010196000-memory.dmp

Download

memory/5760-832-0x0000000010000000-0x0000000010196000-memory.dmp

Download

memory/5760-833-0x0000000008040000-0x00000000080CE000-memory.dmp

Download

memory/5760-377-0x0000000008110000-0x00000000081A0000-memory.dmp

Download