Overview

overview

7

Static

static

3

setup.exe

windows10-2004-x64

7

setup.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    151s
  • max time network
    147s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    06/10/2026, 16:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    setup.exe
  • Size 64.9MB
  • Sample261006-tskzaa1zbs
  • SHA256 24c433b024bfbd80fda78df8c72d4ad8fbc774bd04194eba9306917d3d54543e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 11 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 24 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 27 IoCs
  • Drops file in Windows directory 20 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 24 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 9 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\setup.exe
    "C:\Users\Admin\AppData\Local\Temp\setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:4120
    • C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\setup.exe
      .\setup.exe /m="C:\Users\Admin\AppData\Local\Temp\setup.exe" /k=""
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:3876
      • C:\Program Files (x86)\Yaskawa\Drive Wizard 2010 Industrial Edition\YDWI.exe
        "C:\Program Files (x86)\Yaskawa\Drive Wizard 2010 Industrial Edition\YDWI.exe"
        3⤵
        • Executes dropped EXE
        • Drops file in Program Files directory
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • Checks SCSI registry key(s)
        • Suspicious use of SetWindowsHookEx
        PID:6128
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:5136
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 80185556C90123B765EA47C80C36B730
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:1056
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:5164

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          e596ad9.rbs
          • Path C:\Config.Msi\e596ad9.rbs
          • Size 45KB
          • SHA256 60091947c7f3cc8d8c39b5676302e454a888d7e02034c944bc6a0ee600118e11
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          YDWI.INF
          • Path C:\Users\Admin\AppData\Local\Temp\YDWI.INF
          • Size 11KB
          • SHA256 b064d2330171bd4fa54f3c91353506a6ac803790c512cc4db177d8efc49c1c27
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cabinet.dll
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\Microsoft Windows Installer 2.0\mWinRun.dll\ansi\cabinet.dll
          • Size 54KB
          • SHA256 cb535e27870708f94f46ecb75bf6a5dff17422c28b9f21c2c80ab7b1fcf1f715
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          imagehlp.dll
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\Microsoft Windows Installer 2.0\mWinRun.dll\ansi\imagehlp.dll
          • Size 103KB
          • SHA256 a01ea2839b8b9676631cc7d5a9e8d6d64c2cae5cfba8d7e74d6e9f4b0e122331
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          msimain.sdb
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\Microsoft Windows Installer 2.0\mWinRun.dll\ansi\msimain.sdb
          • Size 131KB
          • SHA256 aeec814144d4253d3167360ec6399f542d9123e4d5878808bac279d6436b3c8d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          msls31.dll
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\Microsoft Windows Installer 2.0\mWinRun.dll\ansi\msls31.dll
          • Size 164KB
          • SHA256 841fde9b24476a7ed364a3e4a1470ac9b7358bc92f29fca4a06aab557d140850
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          mspatcha.dll
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\Microsoft Windows Installer 2.0\mWinRun.dll\ansi\mspatcha.dll
          • Size 28KB
          • SHA256 6007da6bb72fe138dd4ae622c78c5337e3eaf9e8020b748b4a6918563ec988f6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          riched20.dll
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\Microsoft Windows Installer 2.0\mWinRun.dll\ansi\riched20.dll
          • Size 421KB
          • SHA256 1c2508fb55ddc459d0327f2017471545c87420443391567094e768fb34032da1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          shfolder.dll
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\Microsoft Windows Installer 2.0\mWinRun.dll\ansi\shfolder.dll
          • Size 20KB
          • SHA256 6f0443a62fd444c4254f902f668543b867a0577504915d22cd75328f73cd4472
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          usp10.dll
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\Microsoft Windows Installer 2.0\mWinRun.dll\ansi\usp10.dll
          • Size 307KB
          • SHA256 4d8ff1f53c3babf9bfd11b2ebcd44e2698cfe3bc80c6f0cbc64c0d191ea1fc1b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          A1000.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\13E77719\DA32D891\A1000.jpg
          • Size 4KB
          • SHA256 9be80e2b43f1924f370572014545f36fbf9d1d4f6d96ec3feb115bdf59d625d5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          V7.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\149DA734\DA32D891\V7.jpg
          • Size 15KB
          • SHA256 cddf4d06fa2b54a98a01940cefb982d0810fc05c9e933cede319d36ad88bd824
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          YDWI_PROJECT.ico
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\28AD7649\DA32D891\YDWI_PROJECT.ico
          • Size 17KB
          • SHA256 a997602e32cd112d556996a9eb3efc31b141ddeaafecf431c893e962257d6458
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MONREPORT_IND.fr3
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\4484C32A\DA32D891\MONREPORT_IND.fr3
          • Size 11KB
          • SHA256 aa5e23ff6471f6e91aaaf2c6546711381f7a4aa4add0d68e52c672db9481fe5f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TOEP_A1000.pdf
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\4558D1EE\DA32D891\TOEP_A1000.pdf
          • Size 7.8MB
          • SHA256 deec938affb2f70c03496b5e6ba01b24ca4a66c2df7e17ab35daf6b4888144c2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          YDWI_STD.YDWIDATA
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\4B60A7A5\DA32D891\YDWI_STD.YDWIDATA
          • Size 43.5MB
          • SHA256 8349a6d5be1d2acc1430f3e293d106721428c3e211daf74c6e73fb252eb97f21
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TOEP_J1000.pdf
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\4C5EA05\DA32D891\TOEP_J1000.pdf
          • Size 8.8MB
          • SHA256 43d76f1dbdc1c0a37f2dd16fce93f213d7b872c9049c3ce8b40a875e091bb703
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PRMREPORT_IND.fr3
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\517E0F29\DA32D891\PRMREPORT_IND.fr3
          • Size 10KB
          • SHA256 1c42af7412fbb3761d3f2a13a5a95a3740a34bfa9c5a7489b29c44158eeb8dae
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          YDWI_TR_PROJECT.ico
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\660C960\DA32D891\YDWI_TR_PROJECT.ico
          • Size 17KB
          • SHA256 886c60618971437d4825f104227f12f49de123f2e53ac746cdddd5b8abc12486
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          V1000.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\6C235F5\DA32D891\V1000.jpg
          • Size 17KB
          • SHA256 c015d6b99e37b5d8db11b93cc343d29974e6de330c2a5796aba459de6390f9cf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          STATUSREPORT_IND.fr3
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\6E770237\DA32D891\STATUSREPORT_IND.fr3
          • Size 27KB
          • SHA256 c0466ec5a2e20242382e9db60a45fbb5445f73c23095d3adca2ce1d592d4668e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          J1000.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\75158559\DA32D891\J1000.jpg
          • Size 17KB
          • SHA256 83984e2d18d1891dfba98c3bd2523fd088754458f1d501e415dd0e332df597ab
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          P7.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\76B209C8\DA32D891\P7.jpg
          • Size 14KB
          • SHA256 5314ef1d398f3ddd59ae3c7358f836d94369c6f21d6195b142557a94bb6734b2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          YDWI.exe
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\8ADE573F\DA32D891\YDWI.exe
          • Size 25.3MB
          • SHA256 c2daad8a3abd9428e1ff866ddd3e5a923791adbc8a3e5f729ecedf6ca27eb8f2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          J7.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\8D15ECD\DA32D891\J7.jpg
          • Size 17KB
          • SHA256 7716102d2f331aeaf6af3e827464921536b6c95117693a8df269334fa25a7945
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          American.adm
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\94811334\DA32D891\American.adm
          • Size 294KB
          • SHA256 0fa3c118125488f8ecc9bcabd9047e98a800a3bac1b219d444ac7094230819c4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          F7.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\9B8DA0E0\DA32D891\F7.jpg
          • Size 14KB
          • SHA256 12788c01ad738e8e90c1df77e0ca76453f78da200f3eb29f60b5bbbd845664db
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          YDWIHLP.chm
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\9C893B0A\DA32D891\YDWIHLP.chm
          • Size 4.6MB
          • SHA256 8a7a191b1dd8199864efc2e6fb45984f8bcc0789841e66a9f6e35728db64e087
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          G7.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\A47F80FA\DA32D891\G7.jpg
          • Size 14KB
          • SHA256 976cf7f92311a38685dd6cc3b4c824aeb59a5fc697a89f44b6a35ef2eb5ed283
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TOEP_V1000.pdf
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\B1C49437\DA32D891\TOEP_V1000.pdf
          • Size 7.2MB
          • SHA256 0ecd66964ab6efe1abbb1764d0adea5c992530516e8f6c2ef8087f7b7289e89b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          YDWIHLP.hlp
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\BD0045F0\DA32D891\YDWIHLP.hlp
          • Size 5.7MB
          • SHA256 0a503539aeada64bbca52019e45f821a7f8bbebdeb6d0c3298147ae34f082c76
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TM.F7.01.pdf
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\C869D873\DA32D891\TM.F7.01.pdf
          • Size 5.9MB
          • SHA256 821c658820a8b6b93f663280a8e42e67593255c73eb34ef86dd98d0487da297b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TRENDREPORT_IND.fr3
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\CD0C310B\DA32D891\TRENDREPORT_IND.fr3
          • Size 15KB
          • SHA256 03e587bddc3aca6204bb261767b20599e0bf025430912e1e960d20aaa82ed802
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          YDWIHLP.cnt
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\E2A333A6\DA32D891\YDWIHLP.cnt
          • Size 1KB
          • SHA256 3d8283add26a916e6591d178d2af97b8a3122d5eed34cf36ea017346db89a9a0
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          YDW_IND_REV.RTF
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\OFFLINE\EF258A56\DA32D891\YDW_IND_REV.RTF
          • Size 57KB
          • SHA256 0c0d047057215057ce3df5953f83e00e46fe603218798eda0068353f66d900bf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          mWinRunExec.dll
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\data\mWinRun.dll\mWinRunExec.dll
          • Size 397KB
          • SHA256 f947e2f8e2867f66ac77a89d6daefd172796a93ce8a4aae0553ca56135f6f803
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          mia.lib
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\mia.lib
          • Size 561KB
          • SHA256 e42b865c76b5a2f5c96e5759c4ea6d492e1db773f98c5f57b4b0ce1ea3c52498
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          setup.exe
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\setup.exe
          • Size 2.6MB
          • SHA256 321f6f3ab0d0f9a18ca43de5311034cdf816c3bec59ad337a9807954ffd88b53
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          setup.msi
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\setup.msi
          • Size 26.2MB
          • SHA256 ef8c96d76beda89eaf8de95784a25584d0f9ad0b74906effc80f863dd11e5d1f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          setup.res
          • Path C:\Users\Admin\AppData\Local\Temp\mia1E7B.tmp\setup.res
          • Size 1.9MB
          • SHA256 d70570bdfc5bff0db1b590f664a4b165f6641d93453d46028c10cfe6831069bc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          finish.dfm
          • Path C:\Users\Admin\AppData\Local\Temp\mia1\finish.dfm
          • Size 157KB
          • SHA256 984a34337fc921bccba721b8361d3806459d2f37cbf117f5cc35d6bd0d6fef6d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          finish.dfm.miaf
          • Path C:\Users\Admin\AppData\Local\Temp\mia1\finish.dfm.miaf
          • Size 1KB
          • SHA256 55757f0e3c9ef3eda55fc680e2e7f0d072b5e8c9a0195a160086de6335dfca5e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          license.rtf
          • Path C:\Users\Admin\AppData\Local\Temp\mia1\license.rtf
          • Size 121KB
          • SHA256 6bd1dd2f3a6c0062d0c1fd9da156f5d412fbf25db0bfc53154d53a5566957eee
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          licensecheck.dfm
          • Path C:\Users\Admin\AppData\Local\Temp\mia1\licensecheck.dfm
          • Size 31KB
          • SHA256 c1e2b73702be7ea8e2bb9cec1f9d210757d67eb950d8a22ea39e0e2c5f9af6b0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          mMSIExec.dll
          • Path C:\Users\Admin\AppData\Local\Temp\mia1\mMSIExec.dll
          • Size 428KB
          • SHA256 e4a73a8e28d24ea7c584144f39e18d92d0c14fed08d6d05f878ce646f24eb330
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          prereq.dfm
          • Path C:\Users\Admin\AppData\Local\Temp\mia1\prereq.dfm
          • Size 31KB
          • SHA256 2aa0603adaa5058a1c118c8f2faacd333d31112ec4c75689f765e4bc3af69473
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          prereq.dfm.miaf
          • Path C:\Users\Admin\AppData\Local\Temp\mia1\prereq.dfm.miaf
          • Size 370B
          • SHA256 62ee20b127f44c2d91bbcc9a232689dd3f1bc3359e606257bf3b115d4cbbdd2c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          progress.dfm
          • Path C:\Users\Admin\AppData\Local\Temp\mia1\progress.dfm
          • Size 42KB
          • SHA256 8b4d56464b9f2050b89134f7bcc8cd0fafe946ce062f320915b0404685bda111
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          progress.dfm.miaf
          • Path C:\Users\Admin\AppData\Local\Temp\mia1\progress.dfm.miaf
          • Size 292B
          • SHA256 4aedbf26e568e62b47517e91fbcc818a5b95bd7fdb8a7dc5b826c0bd194077a6
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          progressprereq.dfm
          • Path C:\Users\Admin\AppData\Local\Temp\mia1\progressprereq.dfm
          • Size 41KB
          • SHA256 9495ae09659ea231157d576bf325cf8a55c191a493cf9ea39979cbc3497b281b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          readme.dfm.miaf
          • Path C:\Users\Admin\AppData\Local\Temp\mia1\readme.dfm.miaf
          • Size 128B
          • SHA256 d5de1f79d4aea2327a85379fb51ac3157907809043aa1e4aa34878e3e9787442
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          startinstallation.dfm
          • Path C:\Users\Admin\AppData\Local\Temp\mia1\startinstallation.dfm
          • Size 155KB
          • SHA256 af00c29e992e19d6dbe9d8dc5535bed62475f09b6e79eae64b92e6b7cc801170
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          welcome.dfm
          • Path C:\Users\Admin\AppData\Local\Temp\mia1\welcome.dfm
          • Size 155KB
          • SHA256 39056a7647f8135edf8d8d80f81c53153cce7e5bcc858ecc81be6f0075692a26
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          {4757A97D-4F77-4EBA-85D3-9268C2E9AE95}
          • Path C:\Users\Admin\AppData\Local\Temp\{4757A97D-4F77-4EBA-85D3-9268C2E9AE95}
          • Size 7KB
          • SHA256 ad676a249974bf7ce082848e31cdcd657a5d5e18cf88d952bc204542ec7aed58
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MSI6E60.tmp
          • Path C:\Windows\Installer\MSI6E60.tmp
          • Size 90KB
          • SHA256 08c72daa01f1420d4bb22046afbd2cdebf76d5e70bacd7ee133c3675642dbe23
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MSI6EFD.tmp
          • Path C:\Windows\Installer\MSI6EFD.tmp
          • Size 48KB
          • SHA256 bc0ed4db8de326d7c19c7939ea915f38ed472ce6816289b859858ab012d5f985
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MSI6F1D.tmp
          • Path C:\Windows\Installer\MSI6F1D.tmp
          • Size 44KB
          • SHA256 9e6418c6b426c57d04673ad2ea1691cf052bd5b35b0af0566c2043a8ebde33a4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MSI6F5D.tmp
          • Path C:\Windows\Installer\MSI6F5D.tmp
          • Size 43KB
          • SHA256 0acadf47a54cdf59a3bb68f6146400c7a071d9ad797c6bbd0e6c27e19ca091b5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MSI72CC.tmp
          • Path C:\Windows\Installer\MSI72CC.tmp
          • Size 200KB
          • SHA256 101e2c61d6b6c89fae9889460eb686a732eb150ba1b5aaf5c186069da304c566
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MSI730B.tmp
          • Path C:\Windows\Installer\MSI730B.tmp
          • Size 28KB
          • SHA256 00972e810316ed4bb96003f9b0796d2d475ab3d0fdb96b2e57fce124ce382847
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          e596ad6.msi
          • Path C:\Windows\Installer\e596ad6.msi
          • Size 26.2MB
          • SHA256 9609a6898269ccd7e1a7cc830fde74c40e0055e1e1f368a0e3758d9efc244421
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          memory/3876-220-0x0000000005F70000-0x0000000005FDD000-memory.dmp
          Download

          memory/3876-143-0x0000000000400000-0x00000000006B5000-memory.dmp
          Download

          memory/3876-319-0x0000000000400000-0x00000000006B5000-memory.dmp
          Download

          memory/3876-256-0x0000000000400000-0x00000000006B5000-memory.dmp
          Download

          memory/3876-227-0x0000000000400000-0x00000000006B5000-memory.dmp
          Download

          memory/3876-226-0x0000000000400000-0x00000000006B5000-memory.dmp
          Download

          memory/3876-142-0x00000000005E7000-0x00000000005E9000-memory.dmp
          Download

          memory/3876-224-0x0000000000400000-0x00000000006B5000-memory.dmp
          Download

          memory/3876-350-0x0000000000400000-0x00000000006B5000-memory.dmp
          Download

          memory/3876-223-0x0000000000400000-0x00000000006B5000-memory.dmp
          Download

          memory/3876-379-0x0000000000400000-0x00000000006B5000-memory.dmp
          Download

          memory/5136-323-0x000001F6C14D0000-0x000001F6C1E74000-memory.dmp
          Download

          memory/6128-421-0x0000000000400000-0x0000000001E0B000-memory.dmp
          Download

          memory/6128-446-0x0000000000400000-0x0000000001E0B000-memory.dmp
          Download

          memory/6128-448-0x0000000000400000-0x0000000001E0B000-memory.dmp
          Download

          memory/6128-474-0x0000000000400000-0x0000000001E0B000-memory.dmp
          Download