Analysis
- user interaction
yes - max time kernel
150s - max time network
136s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 16:22
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
General
- Target setup.exe
- Size 65.3MB
- Sample260930-tvnsyscf97
- SHA256 05412ace0817df3ff83e209158cd9ac914aa71fd11b34c4c2dae4b32966985ff
- MD5 097d54d4612d3a9889e9fda6bac154c1
- SHA1 67b9fd3d022c162ae0779fe774fac9296a515f31
- SHA512 8e630b03d836532e9cc1a3e56efb0e7e2c339fd88fcddd5e37801decf964076829b0ca5da45dca79cd0a9a8f8a50bbfd65ac3385dca691e39a0020abddeffb76
- SSDEEP 1572864:lAUn1TvbijkZHrEb3FiJ023u6PsICsfjr2rvh9FA:lAUVbWUHob80wu1O3qv5A
- TLSH T19AE733AEF298B23FE4662A3445B382109477B751B626CC1B13FC754DDF356202E3EA52
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Asset Keeper Pro\TaxForms\2019\is-FL704.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-K5BU5.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-4SDPR.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\is-29JPO.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-UC008.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-9S85M.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-VJ0L0.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-BO9A8.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-0OOVV.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-HJGQO.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-AB5FH.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-MOHU6.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-73R59.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-90C15.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-FFOAP.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-TTPMU.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-EK7TG.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-VSEOO.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-Q981A.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-PBNCE.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\is-3L5D9.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-OOG7U.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-FH2U2.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-4K1RI.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\TaxForms\2019\is-KH4SN.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\TaxForms\2025\is-RLPRK.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\TaxForms\PPR\OK\is-IVKC5.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-4IT0P.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-OKQON.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-MDIAM.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-4KFKK.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\TaxForms\2024\is-LSKUL.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\TaxForms\2024\is-JHEKI.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\TaxForms\2024\is-VF6R6.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-FED2K.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-HLPQ8.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-NM84R.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-FQP20.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-HG8K7.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-ET7S6.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-EIRK4.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-JG6VJ.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-84T8O.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-QQVVO.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-DIGKI.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-U7CKT.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\is-F0UN1.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-9CRIA.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-LIC6P.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-J47JR.tmp setup.tmp File opened for modification C:\Program Files\Asset Keeper Pro\api-ms-win-core-sysinfo-l1-1-0.dll setup.tmp File opened for modification C:\Program Files\Asset Keeper Pro\api-ms-win-crt-heap-l1-1-0.dll setup.tmp File created C:\Program Files\Asset Keeper Pro\is-1M8O1.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-SKO0E.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-E3SAQ.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-260UT.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-OL13F.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-D9CPG.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-SRRTK.tmp setup.tmp File opened for modification C:\Program Files\Asset Keeper Pro\AKPRO Libs\RegExx64.dll setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-BHIFC.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-3UKI9.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\Help\HTML\is-BTB8O.tmp setup.tmp File created C:\Program Files\Asset Keeper Pro\unins000.dat setup.tmp - Executes dropped EXE 2 IoCs
pid Process 4280 setup.tmp 1784 akpro.exe - Loads dropped DLL 39 IoCs
pid Process 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe 1784 akpro.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname akpro.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain akpro.exe - System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language setup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language setup.tmp - Inno Setup is an open-source installation builder for Windows applications. 3 IoCs
Inno Setup installer
resource yara_rule behavioral2/memory/1200-1-0x0000000000400000-0x00000000004D8000-memory.dmp innosetup behavioral2/memory/1200-8-0x0000000000400000-0x00000000004D8000-memory.dmp innosetup behavioral2/memory/1200-1708-0x0000000000400000-0x00000000004D8000-memory.dmp innosetup - Modifies registry class 11 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AKPRODataFile\shell setup.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ akpro.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.akp\ = "AKPRODataFile" setup.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AKPRODataFile\ = "Asset Keeper Pro Data File" setup.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AKPRODataFile\DefaultIcon setup.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AKPRODataFile\shell\open\command setup.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AKPRODataFile\shell\open setup.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AKPRODataFile\shell\open\command\ = "\"C:\\Program Files\\Asset Keeper Pro\\akpro.exe\" \"%1\"" setup.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.akp setup.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AKPRODataFile setup.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AKPRODataFile\DefaultIcon\ = "C:\\Program Files\\Asset Keeper Pro\\AKPRO_data.ico,0" setup.tmp - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4280 setup.tmp 4280 setup.tmp - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1784 akpro.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4280 setup.tmp - Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 1200 wrote to memory of 4280 1200 setup.exe 89 PID 4280 wrote to memory of 1784 4280 setup.tmp 92
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup.exe"C:\Users\Admin\AppData\Local\Temp\setup.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1200 -
C:\Users\Admin\AppData\Local\Temp\is-O2PA1.tmp\setup.tmp"C:\Users\Admin\AppData\Local\Temp\is-O2PA1.tmp\setup.tmp" /SL5="$400A6,67573884,832512,C:\Users\Admin\AppData\Local\Temp\setup.exe"2⤵
- Drops file in Program Files directory
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4280 -
C:\Program Files\Asset Keeper Pro\akpro.exe"C:\Program Files\Asset Keeper Pro\akpro.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
PID:1784
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\Appearance Pakx64.dll
- Size 242KB
- SHA256 d381ce32bf1e44a8695a4af71077b2e6768720072b9633d102a60cece7519e80
- MD5 a83a0a989508cd04eab717ccd07ff099
- SHA1 57ead0fcc30f64c75e188ac5df3af7a5e8c49a69
- SHA512 48a8d82cc21382ba122f43883b5d5cb1ab51bbc32d192e375b967be2362f43993edbeb024e053118544b84bcbbaea18d4797a88faa36cb050705d90af7b190a3
- SSDEEP 3072:eoGEpFW1so8a5TFFYftPUM1zEJsx7eHH3vdIXc9fOPjDlYCTmP3DrsTvdwJ:eojpc1jNkVNwsVXX4OrG7P3/srdwJ
- TLSH T169342B1EB29048A9DD1B92BCD58B888BD3B5B45107C042DF1BF083E98E977E4953FB19
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\Cryptox64.dll
- Size 696KB
- SHA256 594a18f4ee93f88b9ca915fae3b106f63c5a0abeb0c55bec9fce93a9efb3feca
- MD5 f9d2cded4503d6e724462ab726f4fa06
- SHA1 bbf7e096c9a6733e9ceac4a92ea6ccd860f9101d
- SHA512 4cca67c5868e3e7987e8e3ea695075417c18742c42ff1393ee9472f0e8cfe8442d952d35daae995232eb04230f5e51b6dfbe9df9b55cbceb171a9bfa91ee56fa
- SSDEEP 12288:Yx7dYWnfkk/20Bs2ahECv7WYgeWYg955/155/4Bvh3CUpHdC16l6zHodM:Yx6Wnfkk/Ts2a6mZvh3XHdCMl6zH0M
- TLSH T1CEE46D07FA258090C4A6E13D89A38996FBB278944BB1AFC71390675E9FB77D44B3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\EHObjectArray9021.dll
- Size 30KB
- SHA256 bd88b99a0f8ee7ce531571b4b1eca3b5af49e7114b2bf7d94e6ecaa418c78b39
- MD5 e20c814426fc9712c46337fda086d31c
- SHA1 21f25bb338a01e2604c831903247ea478af293fc
- SHA512 f7e7eb440196a6caeb2ecac9a6c28446357d304839706b373fd550e2dab2291b3f1023d9228863af7c85b3a69293329b0a0a457188eb6fc51dfc4a2a5dd19a9e
- SSDEEP 384:yXoIcs6GAWW/zDw0+sFWMUtyFEqC4imUlSe9d4XwGHB6xjy1pyv2L5KqR8QBJF6O:yrSrA22liM4rj5KqRnQ3
- TLSH T1A9D2E94DB74841B0E12B917CCA574D9AD224F12517A293CF066C47EE1EA7BCAAC3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\EHPictureButton8101.dll
- Size 53KB
- SHA256 d5725d701f036a9fd8010f619c9a17e7ec85cf66491351dbb658ac3d7362d531
- MD5 d51809b68e133b774dd50f8c17b8edd8
- SHA1 f6a08fce68344989a081baadfb6e1acdd051f888
- SHA512 e985be5d5d4738e80753355af67ac401c1ebb488f18fcbd9fb8d60dfacfe2d0ad5e054cc615ddde31774a5aaf345388a0b06ef134ae398511e6e28cc925c21b3
- SSDEEP 1536:3oPrikewIJ4esahuoV35VqyBVAt5w/+LIjKVhBD5:YPriUIJ4esahuoV35zVAt5w/+sjKVT9
- TLSH T12133D54A77144030E03B44388D5B6E8AE628FE04077693DF05B8BAAD1EB3BD6763B755
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\GZipx64.dll
- Size 151KB
- SHA256 0d72a0714737df489668420208ac68f4a9911e3a31a29027f0aac102ecc3074c
- MD5 1e02cde01fb906f331f75dc10d0381ef
- SHA1 10947b91c2db584c378a8f5739d45f923f47f27e
- SHA512 8083891adb20362d5f8bc01e286608887d9c8cb0e6cf0b28b3a6ec6ef2e6fb583a06f2587e8dcd83ab3dbfceed2e237001e4f4c39e5027241a500aaa49c2bfcf
- SSDEEP 3072:YYOt/LYLJ+zB59dgoHY/W6PDOgacW7ZTBfxlN7H/eT5SSLdwhj:YYOt/8LBo4/W+1acMZTBZXLMS0dwhj
- TLSH T187E38B5672E410A2E1A6D134C9DB4627E3B2F010236597CF51948BB92F63EF27B393E4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\MBS_MacOSX_MacOSX_Plugin_21346.dll
- Size 86KB
- SHA256 cc97e82d4aa9bfd3c8b5fc6d39a7cbfdf3835e4c68cc65363952f103a1dbf296
- MD5 7fd410bf770320fb6739bed2107811f3
- SHA1 a6dc5a7130168956686373ea50f85f12e548a4ea
- SHA512 684e9523e1260c9c757ccf23c4444384d9c95bf2f6e5167004bd03879ad2081711a3f26c6a6577c4e639c6da9e3aa31f195a779a4cd0f00fc08f5417484ef91b
- SSDEEP 1536:2dLr5W/DcI6h4MSOZO/c/BgMriBug/7eEEqout/+DOzaYZZtjQ1i8nh0FF2N:2dLYDcIK4CZO/cJgM9g/7eEGut/+DWa5
- TLSH T133836BBA77A80132D052D27C84BB8D05D7B2F9816B7557CF0290934E1F737DC6A3A629
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\MBS_Main_Registration_Plugin_21346.dll
- Size 184KB
- SHA256 1aad6754059562e93e205faac29da112886df1c7e71f36690f6864494b6b412a
- MD5 d6c2221fb844332b4db8387fa6ceabc0
- SHA1 6118daeed8598947b0a9bea0208b95ba22eaa58c
- SHA512 1f0bc7c1be299cb1274fbdeaca82c14406d264a980806736a51f80fb87a11ba5f76c7a0bd593ef6da6d733a923cff22c4464af17aef7b58c30bf19f41f8731f9
- SSDEEP 3072:u0QwTmfgaQaJERtqGe/UF6g9+Tafllmx4DFAGJpROYEmut/9wJMq6rIen22g9b8Q:YfgaQaJEvdebjx4+GJpQmI3LrI9B8n2H
- TLSH T178046B26B69800B8ECA39138E9DA5903E7F1785127319BDF1790637A1F73BE5663E304
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\MBS_SQL_SQL_Plugin_21346.dll
- Size 1.4MB
- SHA256 5528e48f55a08e70e83598d97cdf6d0cd65ba1bae25af8efb769343899d972a7
- MD5 c965b21ee8c715e4d7c537d2c29423b8
- SHA1 8d4fa23d7bda88e546482c1f276e54a5b360d37c
- SHA512 e9136dcddb1d853bb1279a947506d4b9b76897c55520f2f6156647c0e2ba28813b751331bbaafdc881ba22321ce683154fab7e33f54dfc18a9b1878316c0be1f
- SSDEEP 24576:kSpKwc9jX6y+k66alUZGeu2GBTaqgCmL7flGlQjuqBDH0JDc3n2Fq:kSMwcX6y+k66alUZGfNmfflXuqBDU5Xs
- TLSH T1B6655C3EABB88165E0A7C138C5A3C55BE6F174429F3197CF41A50A1E3E37BE0953A721
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\MBS_Util_Files_Plugin_21346.dll
- Size 200KB
- SHA256 329f6300de0abb2e65ba5a9a18880778649d803e6a9b3c493a012bd564cc73fb
- MD5 4f235154848d5aa4848578c742a7b522
- SHA1 728867b6a38ce50c58a09f2bb4968a689e5f3331
- SHA512 4f551e2e3d9eaae8a1070be290c5ca8ae4b74778959ebcc7055a1242303972d05e8c88ea40323a4016a65f3d1b72914d0af73162dc0845c4cfdba5fbb7318605
- SSDEEP 6144:SwWQQmtTM4o9j5lJtIAyKu+qUnYH8n2Fx:SwWQQUTM4YlMKu+pn2Fx
- TLSH T16C14F897B69040B6DC8AD479886F9D02E3B9F010A7B183CB0E70913E5E777CD6D39629
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\MBS_Util_UUID_Plugin_21346.dll
- Size 83KB
- SHA256 7f8ce09839b9201247a0e70b29dc6905ebbfebdda64cb6a74da12dec2aa28c9c
- MD5 372dc82c6c6c43dc192e44996eb0de87
- SHA1 33f5901cee84cff0a00b1f3bee80d8f21e2aff14
- SHA512 940bbd1d4df23374d2daba2dbe207d6c35325569bbf1b50741d98cd16453e2d8bf16cdf6931581f571cca32457d0bb9014c7a09e9d5c8a4056080937c9a1573c
- SSDEEP 1536:ePzmmY7r/V0gFeLsxu+Jn1Hu97ssfcEEqxut/sP4a4Du2heVSdHo8nh0FF8A:ePzmmY7r/V0GeB+V89wsfcErut/sga4i
- TLSH T188836D9B77A85278E4878278E4FB5D42D3B1B5016B3153DF0760530A0F33AE92E3E65A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\MBS_Win_Win_Plugin_21346.dll
- Size 271KB
- SHA256 6dbe10f7c483af73b8e45031d4e6fa902677d9fd8952ab5bd2cb0d62f58db01d
- MD5 dd762c4a91f3efef4edf96146d1c392c
- SHA1 05c4deece4b3e0132acc56349d0c2c3b5733223c
- SHA512 686ad2f4825c867357920628b53eaacc590eb134ceab21ffce956bd67366dae740cc04d6437a9c4e2e68928a0854ec4f78328777f7398c20dfc635671a34e565
- SSDEEP 6144:lnNN65+NMwW9DDBERJwtOIUcJRXPc4iiu3f+bSdgXKI/Pd8n2FWu:leE+wW9S3lIUcJRbu3f+mgXK/n2FWu
- TLSH T1D4445A6A7BB44874DC56C13ACD878941E7B278201B60D7DF0BA0536E8F3BBE97939211
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\ODBCPluginx64.dll
- Size 287KB
- SHA256 9cf4b21411445d9b9d8424ffba1e6ea4c2cbca27f85c8f31e5bbd16697044763
- MD5 c2033affa56a0f8b5e6c81d488324331
- SHA1 a7e54abf2b70c296c79692aadc0b9342af12258e
- SHA512 aebd0355e0acba9df1420882f52602fbb67a8d8b9a5309efd7c8596aad57850ba04c752ce1d63412d5f754a9238401ecdd60d31d9b3a0668d17ba495a8f85817
- SSDEEP 6144:RB63tGicyej+5sJG93TcF2JdyHpuomV35xVdw/+ZVI60puyWMUdw:XmtGiUyIF2QuomV35xVdw/+ZVIXp1WMg
- TLSH T18D543A2A3285097CF56B517C4A535E02E7B2B8051362C7DF33AC46A61F6BBD1BA3B710
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\RegExx64.dll
- Size 379KB
- SHA256 f12c0e4915276f5dfc5a30fd6a147e84299d2b8cffeaf198e4aadc6f6cd87ecd
- MD5 49e4659ed88531effc3f0f9cf2d346c6
- SHA1 f5d006e6538239dae0dd8eff06d3258c866f3804
- SHA512 85b4a395942d3e109d88f765faaf926cf1fd32e6ccb96beb16c7b5dfe5835abcfda380a02b7662831a9db7e52302d104a3bebcdf755bf8293fac09791e2f2ecb
- SSDEEP 6144:jcgsjF4TnImgJHVEZY/aXFyg9cDkwtdSkDdSQjlX5497M+KuomV35xVwwq+w25Mo:jcX4TImlYgA1LXa9g+KuomV35xVwwq+D
- TLSH T1B3840851B7BD07C0DB76C032B2936326FEB336991770B9D72E41A6706B136B0093E65A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\SQLiteDatabasex64.dll
- Size 1.7MB
- SHA256 30a5e5befd501489b1fc2726414955a117df3fd5841bb37224487f53417bddd3
- MD5 4222c27b3557269642176802c840e29b
- SHA1 9d048601eb4f00ad4c8a42885eff388e05a689ed
- SHA512 a29a9bb4be30700b12a3909cc071124e71f16e4493bf31a3c41a938659128843589d1a18b0a6bb2b546d1f2b0f8e0272f5444a934b98e595599f8c0086d13bd0
- SSDEEP 49152:UdYu8rcN+CQbxq87gmQr65TpfSQA2pR0uV5mO9:F0HKTN9
- TLSH T14E858D4BB2B400BDC06BC179852B560BE7B274051774A7DF1590CAA96F63FE227BE324
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Libs\Shellx64.dll
- Size 36KB
- SHA256 2a08a23c8f07b9a452ffbc93504e6474b527d1846a25ff7c4004176f3b93a2c5
- MD5 9924bfd5af0c1ce84a092a3279c456d5
- SHA1 982064cdeb972e6fcef21d00c92f9dd32bd670fa
- SHA512 b10247457b1d1871cbd67bf379ade170152ec338591e606927c6db315ee81e7c9a3c31280024bbc8d2439027f6dfd17fd3c53cab0a844f6ba49871f3142b0967
- SSDEEP 384:z72PEyDA9uGpi38mYgS026St3NNpnqjjVo9mNuZmzaJBFutEQlYjYpwKANyY8dGJ:yxcm3JCFqlnNuZmzaJBFssAdcvVLk5Py
- TLSH T1ABF26B5AAB945586D917943CC4A71E2BE3F2FA013F50C2DF6330964E2F723D07A79286
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-AISBC.tmp
- Size 1KB
- SHA256 c133b31a564af53b6e831db333a6107ce8bdb844e773b7dbbf71f2931f0f2c2f
- MD5 0c5d4e135ad6067029c55aa0bffa7845
- SHA1 2a498f496295c52bea4983e0f19d03dcc8343f7e
- SHA512 1caccb739ed2cdd611e6f071feb1ee424925bca4d5b56236cac77bf1b36ba176e2ad15040cacf36e4ae9ed7568ddabdc2c5a0f054ef5b69884e358797eba5f74
- TLSH T19B21CAEB37ED0DBD84059971BA05A0115D9289781D139D4DC454E654327BE5FB480391
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Asset Keeper Pro\AKPRO Resources\is-LPDTR.tmp
- Size 1KB
- SHA256 a851bd685c9511ef44e09398c541e796522726fdf3766947236fec076e1a4283
- MD5 0da3a25166024d7d00e7ba8bd291e1ee
- SHA1 a597880b21b6456941c7a26ae8177b9be45e04a0
- SHA512 3134c5b55507d6e2c7adcf815c4929bcd0432901f0627774dd1b510710cfdac54cbabdb2272057d4651397f02762a550ee2aafbf4cee32a256bdd4e944c7c1c7
- TLSH T10B11B585E82A085BCC3C609BAF87D412F86326896172C5E185A5B28EFE1A64E01F5338
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Asset Keeper Pro\VCRUNTIME140.dll
- Size 117KB
- SHA256 642ae52687a7a6bfb03d0b20dc7e07f4b11ceca634f7eb7ba184d6711ab51a51
- MD5 c22ab531881b21277ba168e6f311d225
- SHA1 948c3acd2702737949b2b3a030e1d2a2181fb4af
- SHA512 8d3d39a7a469a5a5be1650f25293b9318277ea1ba828883bc6605e28ed66b4b1e2dd4796836fa9fd3517aa4deb9ca0fb51d699fa0a1ed1c9b43ae070c63b930e
- SSDEEP 1536:PI2v39UXigCBs29DdxfggO6vMMKZsY24fkUxoecbdhGRdVzVZgz2B:PiwskD8B6vMMEs54uecbdkRXEc
- TLSH T1B2C38C4572A002FBD16AC274C1A35E17FB75B84487A0A7CF03B58A690F53BE1AE3D385
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\XojoGUIFramework64.dll
- Size 4.1MB
- SHA256 593e6458d9c0e976e27228473afa7a8944fc42d01e89c4771504718e643ef251
- MD5 b607f7d01601d1709925cc1deb4da3eb
- SHA1 5f5ed1e975d015fa5190bd5a2c93ef7b80936a6c
- SHA512 ac278a5d850acadb8deaffd821c9a5523d2e81892cafab07a99b3097344bb75a1fdc8ffefb564ca14dff6f09d5662bce1f292023fc09ea11298049e37250997f
- SSDEEP 49152:iYsxXIsGZuYQyb0oka/jy75TxnbkB3Q53s1HKrQzPdJyZfyU4xqq8GdywurYU/Wi:FdB3ks11hDxqqFWzWXChD
- TLSH T169166B1662E91099E467C03D8AAB9416EAF23C141334E6DF0461C75A6F77BF0BABF740
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\akpro Libs\EHObjectCollection9021.dll
- Size 40KB
- SHA256 644620d7e498cfc5a3216d942f457acb242d51c2ebdcce3082ec418ea3c44b89
- MD5 45f47b8c2997850f675fb71d686a644f
- SHA1 e5b76f21edda1969253d160c46fbe21f1f5239f0
- SHA512 1fdd3295af27b8dd7ec75b99f5a386f24f8a2c35d1fb20517a16ead6658d9a8fcaa2292a03f158ffba06edd1ab7a2a29992d0f1e2bfc7be68d460b5f178ff39e
- SSDEEP 768:NXwjPS4/mHnLyz1EG7DCuvqVQ4Qkzc0Zg:NXwjP1m+EuvqVQ4Qmc0Zg
- TLSH T10A13E459BB994070D127827C89A3CE19E3B1F56197B2A3CF067803DE2E677E8213E350
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\akpro Libs\GUIKitx64.dll
- Size 78KB
- SHA256 aeffa8d17971b9aa1af6dc7296ec777cbc0229bafc4bb90d7cc57cfce3d5eee5
- MD5 18589feaf148f87823be6cab91bcbd38
- SHA1 c78549b4dae11cbbf3db68cfb647b53c60647532
- SHA512 2244148c86488ca3a78af578e770e303f775a519c4a66afaa87674b54c394a7c42d9cf8c18ba59182b3b8dfb57d8f01c0ab2e41478fe4de3cb815f6fdc6b6f47
- SSDEEP 1536:wGMLesvw7bPWNltl0ALnwjoKqC1wQ8jlt7dcvJ:wG8Y3PW8ALwjo6SQ8jlt7dwJ
- TLSH T16C73F62E66C13086EA69A17885374A16D6F1F8123741A3CF5374039D2FF7BE5B63A2C1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\akpro Libs\Internet Encodingsx64.dll
- Size 30KB
- SHA256 f5b51b0d37ca18ebfe4920174c47c9e83c2da084d59b78b01d676a3d292d3493
- MD5 ea07996b87005ec450b9d0f24c21b097
- SHA1 da76c6d2a84509eba83be3dbeda5ac7763e954d4
- SHA512 280f38f9d4f50e32cc4dbbda99ec37ed80edae0cb87674852957f395a87db03b2d833e8543b6a74b9b8ff5749c6659e109b270a853f78d5da528cfbe39ac06d7
- SSDEEP 384:ltICWKeKTnN3j9uksw2T6kx/cj6VF3iF9jk4pwKANyY8dGV6skmL4/y8RWvqh:SKpJvsjjx/MuF3K9AgdcvVLk50E
- TLSH T137D29C66BAA03491F947AA34A4B75A07E5B1F20337517ACF133045692FF67803A6C3DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\akpro Libs\MBS_Compression_Zip_Plugin_21346.dll
- Size 231KB
- SHA256 5834283e14914c2fa4ec9527fdaa6afac9bd350bde53eeb54d8c36cabfbef778
- MD5 dc8005b1c0658e79f43fa7c5deae8c5f
- SHA1 1ebd6a18471e1404970e3149b1f0d3455e025984
- SHA512 f051409d006a4664f0f5a3f7dd618533c16e3c1b5e4874eb38c111a3a27037a1328bd97462e78f884c7da0a943dc7366929a7b2d01eeb086555de8eac9dbace6
- SSDEEP 6144:HjIRolMf7L8eyKHVjNeNlRiXkSGQVqYhwx9Q788n2Fp:HjTlMf35ReNlRiUSGQVq4d5n2Fp
- TLSH T118348E5A77B400B4E967807CC9C7DA4AD3B174001B219BCF4B90637E5F37BE4663A2A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\akpro Libs\MBS_DynaPDF_dynapdf_Plugin_21346.dll
- Size 9.5MB
- SHA256 4ccaa3f153fa8b6a34ddaddf9fc194e03dcc96aa1ba11bb7432d63e0c5266bbc
- MD5 a54fdb1e927d83a20611e2e848acb19b
- SHA1 8de98f3b947d159e6419687fe25d6ca12c658562
- SHA512 1da698856f94c678f6edafb4739b76d696f7754ee602763a4ecdba75bc3ad4837691f2dac58ccee4fedfda0b246777972b870548af1e2522dd701eb0f94b897f
- SSDEEP 98304:jfi07rtEvziHxCg7OC+VvPw8sbhMw6Uwtd:G07rtE7iMgqCdbhMWwtd
- TLSH T1BAA6BE0AB7B500E5D877C038D167C60BE7B274511B209BEB5191862EAF33BE46A7B731
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\akpro Libs\MBS_Util_SystemInformation_Plugin_21346.dll
- Size 227KB
- SHA256 60f69218cbacf01a9a1f947cde480b50a6e6a493d15398f75c152fbf57b90bc9
- MD5 b8dc7efaee7178711b5563f1707dac90
- SHA1 1780b4e4fc40ecbcea4409acfac5bd12970dcc65
- SHA512 8ae15382c16ea7f0653b2bcf2fe2d2f9756af4e559e725679a9d67040b6c09d7f2137151391df86c435b577d0d4d7fa3e165652a5b8123830dfba40b7580a8f6
- SSDEEP 3072:elF9P4WhN0NwloQYz1e64zEoWutx0om7vG399o8n2F39:wJ4WVoQS4cVv7Og8n2F39
- TLSH T175341886B350D8A6D85DC13AC8C292E2D3703D055F2CC7D77690732C1D766AA9A3A6CE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\akpro Libs\MBS_XL_XL_Plugin_21346.dll
- Size 8.7MB
- SHA256 58222a57239a71fe3ff2e49924f9ae85067494a8c74bbbac17b84ee4576f8d3f
- MD5 d6f0f9575314fa49332631ede95017c0
- SHA1 1001fe5a34dcbc8afe73dc0451e810bcaef36588
- SHA512 cc570b836d8bb027718346a4f70c5541504e7dcd458d3256450c77919d9246ee624b00ab38ab0f47535afe16a7076c7f70457facb44f0e50ffe07168855d90a0
- SSDEEP 49152:5Kc8LELTajHEoPKWp0YkTyEkk6QRovhAth8J8g3UTpWdsbxRihwHiCMoNPtvMQOX:b882Ghm0DOb27gTOSeFolT6GCS+m6Fe
- TLSH T188963B4A97A884AAC277E278D597AF43F2F2B0641F3167CB1621055E2F377E04E3D621
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\akpro Libs\REALSQLDatabasex64.dll
- Size 1.0MB
- SHA256 262fee34a3aa5abccf45d6969c60645075c463e773f4dcae6da3239b071716f7
- MD5 a5e523b674aca47b5ec58f14e793eb25
- SHA1 01840f4e1d1637d30efc2337c37f42754b30a438
- SHA512 9541fcb366131c1d158503cbcf067d20bc9272e4d68663d39285730d72f25f44fcf7e306411fc11b7bd14476638a9229cc89349a431d445a2bd8811b0d2b01cc
- SSDEEP 24576:JRCzvQZXN2ExOmDbGdvaFdcgZTX82+qW4Uh0OZCNuV5Hb2f745L:uD2NxbQvbgZR05XZCNuV5Hb2f78
- TLSH T173257C57A7B900ADD6ABD275851B8613E7B1B04913209FEF01E1CA652F53FE22B7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\akpro Libs\SSLSocketx64.dll
- Size 2.3MB
- SHA256 5ad3b4222bd5cfae66d120a879ba59a9636602b12faa76e7a8318130d086daf4
- MD5 fe296aec81b56595434fa9e0dcbc05ad
- SHA1 1749a16602747a4fe56e6b027333245318ff9932
- SHA512 995472113ced136a2b3d80cad86880ce38be3952028ff7c2d3a138601ec2c8a20b25a0153eba761c1adb109412eaebc72caaa8a98325e3c26eb19d0a4790b0c1
- SSDEEP 49152:+OVwASOrGtlqgpIU6iyxhN7G1XaTU6AUoCIjzHtk26QoyPrwAqRmw:sO+MnxD+Ld6vowANw
- TLSH T1CCB59D56E7A800E4D9B6C17CD9579537E3F2B42913B0ABDF06A8C6790F13BE1223A741
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\msvcp140.dll
- Size 561KB
- SHA256 7b8a6f283884e6448559dcf510b00c1a885bfb8e598ea05cd2c290c874657326
- MD5 6c3ad90ee8d03a4ce68dbb34b0d72b1e
- SHA1 55157b5aabd167dc9dbd158a5c7ad435101652e7
- SHA512 6d1626906c9d924254839a1fb9115047a8f49864338ec8902431af5d5c9ab65596208ca71f0c7e8094c103f47c788fc1a9b8e9f347471fa81adfe3aa9367065a
- SSDEEP 12288:ZSTTigI46Bb3SUPvRgrKtzL4paQEKZm+jWodEEVPLwtQV:ZUStQaQEKZm+jWodEE9CQV
- TLSH T1ABC41923B74905E0E195E3B8A1878316D7F1BC4A8312A3C792FB96AD2F573D1673B250
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\msvcr120.dll
- Size 940KB
- SHA256 ad32240bb1de55c3f5fcac8789f583a17057f9d14914c538c2a7a5ad346b341c
- MD5 9c861c079dd81762b6c54e37597b7712
- SHA1 62cb65a1d79e2c5ada0c7bfc04c18693567c90d0
- SHA512 3aa770d6fba8590fdcf5d263cb2b3d2fae859e29d31ad482fbfbd700bcd602a013ac2568475999ef9fb06ae666d203d97f42181ec7344cba023a8534fb13acb7
- SSDEEP 24576:FkZ+EUPoH5KTcAxt/qvRQdxQxO61kCS9mmWymzVPD:FkMAlM8ixQI5C6wl
- TLSH T10525BE4676A106FAD463D2B4C9A79607E2B2B85B1530D7AF02E0866D3F23B30975F317
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Asset Keeper Pro\vcruntime140_1.dll
- Size 48KB
- SHA256 0e560532e721b6938dafe4055eedd0251ba5eb5994cd96937cebbcf16a7ddae5
- MD5 7e986e7469d9ab3b1138353418da1793
- SHA1 77903692aae688f6d5b04511d5006c66ce4daf8b
- SHA512 6c8951ae9a0e329cf32eed8bf32bd83294e7a1cf7f16dd716cedbed4caf39e56e62c5f639091f9711922443ada7dbc61dffcace093211d70a85821f19883cbea
- SSDEEP 768:uzzO6ujT3MbR3vXCz6Sz2q83yvjdsrU9zcgElebe9zVFZ:rq/XU63Cjd9zcZebazDZ
- TLSH T176235C9067788486D49F95B0C1D6EF537D78FAD24B40968F0BA0D1982F637C1EB3D21A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\AKPRO\REGINFO.PW
- Size 1024B
- SHA256 ba17212f1a7826fb97ad4b58ab91122ebde634d61430207081f3a50a779dca77
- MD5 ff49bbbcbd554593ad3d444e1b63743a
- SHA1 5b60ddc78935004ddb28116ed6d7710f77c02ab4
- SHA512 5f05d2f9c42a1b59e249dd3c60ee620d27340526583b53fc9d9b8f8943a9e54ea7e391c1378e5215ed67d7192d195eea90be3fda7d09de094c07d0a9d9bab2b5
- TLSH T11B110280A3C44C41C4D019B2546317580B04E55481418F131900100068029C40811945
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-O2PA1.tmp\setup.tmp
- Size 3.1MB
- SHA256 cd543d79c6117e3def182124508a8b62ef946aa2e629757655b72a2172df142e
- MD5 061559948c23dd08055266bc5351509c
- SHA1 73cf70ce7ece2c78f853601605463aa1bf39c32f
- SHA512 f05f717cc4b0a13bdff1925d9153c8e5a25d82faab98e44e6384b5bd8037be5b3bb0533861791a22f3b89ee30db4821bc7b507a0d7920f3a74ef205fc4826b97
- SSDEEP 49152:2WGtLBcXqFpBR6SVb8kq4pgquLMMji4NYxtJpkxhGjIHTbQ333TY:6tLutqgwh4NYxtJpkxhGj333T
- TLSH T1AAE53A17F28C713ED06B3A364A3385909837FA6179168C279BFC794C8F365942A3E647
- MD5 SHA1 SHA512 SSDEEP TLSH