Windows Analysis Report
b2 ControlCenter Setup V3.75.exe

Overview

General Information

Sample name: b2 ControlCenter Setup V3.75.exe
Analysis ID: 1533000
MD5: f02023e1e165fb92adaab5bf1ef98ed9
SHA1: 9de491da46b50716d1b8164221c9b84a111fdfc2
SHA256: 2a92ac98ae89f214cd10b1ca5eb26316bb588f73d5e0a2642c1768712ffb0aad
Infos:

Detection

Score: 48
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Injects code into the Windows Explorer (explorer.exe)
Writes to foreign memory regions
Allocates memory with a write watch (potentially for evading sandboxes)
Checks for available system drives (often done to infect USB drives)
Contains long sleeps (>= 3 min)
Creates a process in suspended mode (likely to inject code)
Creates files inside the system directory
Deletes files inside the Windows folder
Drops PE files
Drops PE files to the windows directory (C:\Windows)
Enables debug privileges
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Found dropped PE file which has not been started or loaded
May sleep (evasive loops) to hinder dynamic analysis
Queries the volume information (name, serial number etc) of a device
Stores files to the Windows start menu directory
Uses 32bit PE files
Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Classification

Uses 32bit PE files
Source: b2 ControlCenter Setup V3.75.exe Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
Source: b2 ControlCenter Setup V3.75.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Checks for available system drives (often done to infect USB drives)
Source: C:\Windows\System32\msiexec.exe File opened: z:
Source: C:\Windows\System32\msiexec.exe File opened: x:
Source: C:\Windows\System32\msiexec.exe File opened: v:
Source: C:\Windows\System32\msiexec.exe File opened: t:
Source: C:\Windows\System32\msiexec.exe File opened: r:
Source: C:\Windows\System32\msiexec.exe File opened: p:
Source: C:\Windows\System32\msiexec.exe File opened: n:
Source: C:\Windows\System32\msiexec.exe File opened: l:
Source: C:\Windows\System32\msiexec.exe File opened: j:
Source: C:\Windows\System32\msiexec.exe File opened: h:
Source: C:\Windows\System32\msiexec.exe File opened: f:
Source: C:\Windows\System32\msiexec.exe File opened: b:
Source: C:\Windows\System32\msiexec.exe File opened: y:
Source: C:\Windows\System32\msiexec.exe File opened: w:
Source: C:\Windows\System32\msiexec.exe File opened: u:
Source: C:\Windows\System32\msiexec.exe File opened: s:
Source: C:\Windows\System32\msiexec.exe File opened: q:
Source: C:\Windows\System32\msiexec.exe File opened: o:
Source: C:\Windows\System32\msiexec.exe File opened: m:
Source: C:\Windows\System32\msiexec.exe File opened: k:
Source: C:\Windows\System32\msiexec.exe File opened: i:
Source: C:\Windows\System32\msiexec.exe File opened: g:
Source: C:\Windows\System32\msiexec.exe File opened: e:
Source: C:\Windows\SysWOW64\msiexec.exe File opened: c:
Source: C:\Windows\System32\msiexec.exe File opened: a:
Creates files inside the system directory
Source: C:\Windows\System32\msiexec.exe File created: C:\Windows\Installer\600481.msi
Source: C:\Windows\System32\msiexec.exe File created: C:\Windows\Installer\SourceHash{D7F46775-46B0-4E89-8069-65CC2FA60046}
Source: C:\Windows\System32\msiexec.exe File created: C:\Windows\Installer\MSI77F.tmp
Source: C:\Windows\System32\msiexec.exe File created: C:\Windows\Installer\inprogressinstallinfo.ipi
Source: C:\Windows\System32\msiexec.exe File created: C:\Windows\Installer\MSI7ED.tmp
Source: C:\Windows\System32\msiexec.exe File created: C:\Windows\Installer\600483.msi
Source: C:\Windows\System32\msiexec.exe File created: C:\Windows\Installer\600483.msi
Deletes files inside the Windows folder
Source: C:\Windows\System32\msiexec.exe File deleted: C:\Windows\Installer\MSI77F.tmp
Uses 32bit PE files
Source: b2 ControlCenter Setup V3.75.exe Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
Source: classification engine Classification label: mal48.evad.winEXE@14/69@0/0
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe File created: C:\Users\user\AppData\Local\Downloaded Installations
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Mutant created: NULL
Source: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe File created: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process created: C:\Windows\SysWOW64\explorer.exe
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process created: C:\Windows\SysWOW64\explorer.exe
Source: b2 ControlCenter Setup V3.75.exe Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe File read: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\_ISMSIDEL.INI
Source: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
Source: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe File read: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe
Source: unknown Process created: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe "C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe"
Source: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe Process created: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe "C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe" /q"C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe" /tempdisk1folder"C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}" /IS_temp
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process created: C:\Windows\SysWOW64\msiexec.exe "C:\Windows\system32\MSIEXEC.EXE" /i "C:\Users\user\AppData\Local\Downloaded Installations\{B1B7EEAC-19DF-4A66-92D0-4A9FA0D4FD78}\b2 ControlCenter.msi" SETUPEXEDIR="C:\Users\user\Desktop" SETUPEXENAME="b2 ControlCenter Setup V3.75.exe"
Source: unknown Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 3D0F18109D3614DB0081A4658BA6B54A C
Source: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe Process created: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe "C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe" /q"C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe" /tempdisk1folder"C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}" /IS_temp
Source: C:\Windows\System32\msiexec.exe Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 4A9F0DD437EA1637B8442FC35E2B2DD0
Source: C:\Windows\SysWOW64\msiexec.exe Process created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe "C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe"
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process created: C:\Windows\SysWOW64\msiexec.exe "C:\Windows\system32\MSIEXEC.EXE" /i "C:\Users\user\AppData\Local\Downloaded Installations\{B1B7EEAC-19DF-4A66-92D0-4A9FA0D4FD78}\b2 ControlCenter.msi" SETUPEXEDIR="C:\Users\user\Desktop" SETUPEXENAME="b2 ControlCenter Setup V3.75.exe"
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process created: C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\explorer.exe
Source: C:\Windows\System32\msiexec.exe Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 3D0F18109D3614DB0081A4658BA6B54A C
Source: C:\Windows\System32\msiexec.exe Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 4A9F0DD437EA1637B8442FC35E2B2DD0
Source: C:\Windows\SysWOW64\msiexec.exe Process created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe "C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe"
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process created: C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\explorer.exe
Source: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe Section loaded: apphelp.dll
Source: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe Section loaded: kernel.appcore.dll
Source: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe Section loaded: uxtheme.dll
Source: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: msi.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: aclayers.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: sfc.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: sfc_os.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: msi.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: srpapi.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: tsappcmp.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: textinputframework.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: coreuicomponents.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: coremessaging.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: ntmarta.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: coremessaging.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: wintypes.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: wintypes.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: wintypes.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: propsys.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: textshaping.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: netapi32.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: wkscli.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: version.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: mscoree.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: msihnd.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: dwmapi.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: pcacli.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: oleacc.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: windowscodecs.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: apphelp.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: aclayers.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: sfc.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: sfc_os.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: msi.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: tsappcmp.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: userenv.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: profapi.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: sspicli.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: netapi32.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: wkscli.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: netutils.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: srclient.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: spp.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: powrprof.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: vssapi.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: vsstrace.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: umpdc.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: wldp.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: mscoree.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: version.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: rstrtmgr.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: ncrypt.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: ntasn1.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: windows.storage.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: pcacli.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: mpr.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: ntmarta.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: cabinet.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: propsys.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: linkinfo.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: ntshrui.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: srvcli.dll
Source: C:\Windows\System32\msiexec.exe Section loaded: cscapi.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: aclayers.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: sfc.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: sfc_os.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: msi.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: propsys.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: edputil.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: urlmon.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: iertutil.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: wintypes.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: appresolver.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: bcp47langs.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: slc.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: sppc.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: aclayers.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: sfc.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: sfc_os.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\msiexec.exe Section loaded: msi.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: mscoree.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: apphelp.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: version.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: vcruntime140_clr0400.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: ucrtbase_clr0400.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: ucrtbase_clr0400.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: cryptsp.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: rsaenh.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: dwrite.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: msvcp140_clr0400.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: windows.storage.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: wldp.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: profapi.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: dwmapi.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: d3d9.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: d3d10warp.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: urlmon.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: iertutil.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: srvcli.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: netutils.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: windowscodecs.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: mscms.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: userenv.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: coloradapterclient.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: windowscodecsext.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: wtsapi32.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: winsta.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: powrprof.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: umpdc.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: textshaping.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: dataexchange.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: d3d11.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: dcomp.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: dxgi.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: twinapi.appcore.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: resourcepolicyclient.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: dxcore.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: textinputframework.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: coreuicomponents.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: coremessaging.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: ntmarta.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: wintypes.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: wintypes.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: wintypes.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: msctfui.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: uiautomationcore.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: propsys.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: d3dcompiler_47.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: sspicli.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: windows.applicationmodel.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: amsi.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: wsock32.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: bluetoothapis.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: devobj.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: 32feetwidcomm.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: bssdk.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: bluetoothapis.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: devobj.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: 32feetwidcomm.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Section loaded: bssdk.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: aepic.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: twinapi.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: powrprof.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: dxgi.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: propsys.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: coremessaging.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: urlmon.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: wtsapi32.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: wininet.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: dwmapi.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: twinapi.appcore.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: ntmarta.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: cryptsp.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: iertutil.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\explorer.exe Section loaded: umpdc.dll
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{41945702-8302-44A6-9445-AC98E8AFA086}\InprocServer32
Source: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe File written: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\_ISMSIDEL.INI
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll
Source: b2 ControlCenter Setup V3.75.exe Static file information: File size 16740243 > 1048576
Source: b2 ControlCenter Setup V3.75.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: b2 ControlCenter Setup V3.75.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: b2 ControlCenter Setup V3.75.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: b2 ControlCenter Setup V3.75.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: b2 ControlCenter Setup V3.75.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: b2 ControlCenter Setup V3.75.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT
Source: b2 ControlCenter Setup V3.75.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Source: b2 ControlCenter Setup V3.75.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: b2 ControlCenter Setup V3.75.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: b2 ControlCenter Setup V3.75.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: b2 ControlCenter Setup V3.75.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: b2 ControlCenter Setup V3.75.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: b2 ControlCenter Setup V3.75.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata
Drops PE files
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\MigraDoc.DocumentObjectModel-WPF.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Teslab.Louserzation.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\NationalInstruments.Visa.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.RemoteControl.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Installer\{D7F46775-46B0-4E89-8069-65CC2FA60046}\NewShortcut1_0E96F1A19A774C13AC5791AB896F9F0F.exe Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\DriverPackage.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.Core.dll Jump to dropped file
Source: C:\Windows\SysWOW64\msiexec.exe File created: C:\Users\user\AppData\Local\Temp\MSI180A.tmp Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.ServiceArea.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.LouserzationProvider.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\MigraDoc.RtfRendering-WPF.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Abt.Controls.SciChart.Wpf.dll Jump to dropped file
Source: C:\Windows\SysWOW64\msiexec.exe File created: C:\Users\user\AppData\Local\Temp\MSIF425.tmp Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Ivi.Visa.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.Charting.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\IPManager.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.Devices.Common.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\MigraDoc.Rendering-WPF.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Teslab.Wpf.Extensions.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\NGettext.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\InTheHand.Net.Personal.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Teslab.StateMachine.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Windows\Installer\MSI77F.tmp Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.Common.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Installer\{D7F46775-46B0-4E89-8069-65CC2FA60046}\ARPPRODUCTICON.exe Jump to dropped file
Source: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe File created: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\PdfSharp-WPF.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\PdfSharp.Charting-WPF.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\NationalInstruments.VisaNS.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.HVA2G.Generic.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.License.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.Core.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe File created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Xceed.Wpf.Toolkit.dll Jump to dropped file
Drops PE files to the windows directory (C:\Windows)
Source: C:\Windows\System32\msiexec.exe File created: C:\Windows\Installer\MSI77F.tmp Jump to dropped file
Stores files to the Windows start menu directory
Source: C:\Windows\System32\msiexec.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\b2 electronic GmbH
Source: C:\Windows\System32\msiexec.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\b2 electronic GmbH\b2 ControlCenter
Source: C:\Windows\System32\msiexec.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\b2 electronic GmbH\b2 ControlCenter\ControlCenter.lnk
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\msiexec.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\msiexec.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\msiexec.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process information set: NOOPENFILEERRORBOX
Allocates memory with a write watch (potentially for evading sandboxes)
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Memory allocated: 21932670000 memory reserve | memory write watch
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Memory allocated: 2194C020000 memory reserve | memory write watch
Contains long sleeps (>= 3 min)
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Thread delayed: delay time: 922337203685477
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Window / User API: threadDelayed 488
Found dropped PE file which has not been started or loaded
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\MigraDoc.DocumentObjectModel-WPF.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Teslab.Louserzation.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\NationalInstruments.Visa.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.RemoteControl.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\Microsoft\Installer\{D7F46775-46B0-4E89-8069-65CC2FA60046}\NewShortcut1_0E96F1A19A774C13AC5791AB896F9F0F.exe Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\DriverPackage.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.Core.dll Jump to dropped file
Source: C:\Windows\SysWOW64\msiexec.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSI180A.tmp Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.ServiceArea.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.LouserzationProvider.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\MigraDoc.RtfRendering-WPF.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Abt.Controls.SciChart.Wpf.dll Jump to dropped file
Source: C:\Windows\SysWOW64\msiexec.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSIF425.tmp Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Ivi.Visa.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.Charting.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\IPManager.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.Devices.Common.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\MigraDoc.Rendering-WPF.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Teslab.Wpf.Extensions.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\NGettext.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\InTheHand.Net.Personal.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Teslab.StateMachine.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.Common.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Windows\Installer\MSI77F.tmp Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\Microsoft\Installer\{D7F46775-46B0-4E89-8069-65CC2FA60046}\ARPPRODUCTICON.exe Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\PdfSharp-WPF.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\PdfSharp.Charting-WPF.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\NationalInstruments.VisaNS.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.HVA2G.Generic.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.License.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.Core.dll Jump to dropped file
Source: C:\Windows\System32\msiexec.exe Dropped PE file which has not been started: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Xceed.Wpf.Toolkit.dll Jump to dropped file
May sleep (evasive loops) to hinder dynamic analysis
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe TID: 7160 Thread sleep count: 488 > 30
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe TID: 7160 Thread sleep time: -240000s >= -30000s
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe TID: 7160 Thread sleep time: -60000s >= -30000s
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe TID: 7160 Thread sleep time: -1680000s >= -30000s
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe TID: 6540 Thread sleep time: -922337203685477s >= -30000s
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe TID: 7160 Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe File Volume queried: C:\Users\user\AppData\Local\Temp FullSizeInformation
Source: C:\Windows\SysWOW64\msiexec.exe File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\SysWOW64\msiexec.exe File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\SysWOW64\msiexec.exe File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\SysWOW64\msiexec.exe File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\SysWOW64\msiexec.exe File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\SysWOW64\msiexec.exe File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\SysWOW64\msiexec.exe File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\SysWOW64\msiexec.exe File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\msiexec.exe File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\msiexec.exe File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\msiexec.exe File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\msiexec.exe File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\msiexec.exe File Volume queried: C:\ FullSizeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Thread delayed: delay time: 60000
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Thread delayed: delay time: 60000
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Thread delayed: delay time: 60000
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Thread delayed: delay time: 922337203685477
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Thread delayed: delay time: 60000
Source: C:\Windows\System32\msiexec.exe Process information queried: ProcessInformation
Enables debug privileges
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Process token adjusted: Debug
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Memory allocated: page read and write | page guard

HIPS / PFW / Operating System Protection Evasion
barindex
Injects code into the Windows Explorer (explorer.exe)
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Memory written: PID: 1576 base: 2E7EF00 value: 00
Writes to foreign memory regions
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Memory written: C:\Windows\SysWOW64\explorer.exe base: 2E7EF00
Creates a process in suspended mode (likely to inject code)
Source: C:\Windows\SysWOW64\msiexec.exe Process created: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe "C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe"
Source: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe Process created: C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\explorer.exe
Very long cmdline option found, this is very uncommon (may be encrypted or packed)
Source: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe Process created: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe "c:\users\user\appdata\local\temp\{12bebbfb-a371-46b3-a0d0-50a2008b50c2}\b2 controlcenter setup v3.75.exe" /q"c:\users\user\desktop\b2 controlcenter setup v3.75.exe" /tempdisk1folder"c:\users\user\appdata\local\temp\{12bebbfb-a371-46b3-a0d0-50a2008b50c2}" /is_temp
Source: C:\Users\user\Desktop\b2 ControlCenter Setup V3.75.exe Process created: C:\Users\user\AppData\Local\Temp\{12BEBBFB-A371-46B3-A0D0-50A2008B50C2}\b2 ControlCenter Setup V3.75.exe "c:\users\user\appdata\local\temp\{12bebbfb-a371-46b3-a0d0-50a2008b50c2}\b2 controlcenter setup v3.75.exe" /q"c:\users\user\desktop\b2 controlcenter setup v3.75.exe" /tempdisk1folder"c:\users\user\appdata\local\temp\{12bebbfb-a371-46b3-a0d0-50a2008b50c2}" /is_temp
Queries the volume information (name, serial number etc) of a device
Source: C:\Windows\SysWOW64\msiexec.exe Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\msiexec.exe Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\msiexec.exe Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\msiexec.exe Queries volume information: C:\ VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.Common.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.Core.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.Devices.Common.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.Core.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.License.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Teslab.StateMachine.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.HVA2G.Generic.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.LouserzationProvider.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\seguili.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\seguisli.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\segoeuii.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\seguisbi.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\segoeuiz.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\seguibl.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\seguibli.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\NGettext.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Abt.Controls.SciChart.Wpf.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.Charting.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\MigraDoc.DocumentObjectModel-WPF.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.RemoteControl.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\B2.ControlCenter.ServiceArea.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\System32\WinMetadata\Windows.Devices.winmd VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\System32\WinMetadata\Windows.Foundation.winmd VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.InteropServices.WindowsRuntime\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.InteropServices.WindowsRuntime.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\DriverPackage.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\InTheHand.Net.Personal.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\IPManager.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Ivi.Visa.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\MigraDoc.Rendering-WPF.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\PdfSharp-WPF.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\MigraDoc.RtfRendering-WPF.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\NationalInstruments.Visa.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\NationalInstruments.VisaNS.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\NationalInstruments.VisaNS.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\NationalInstruments.VisaNS.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\PdfSharp.Charting-WPF.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Teslab.Wpf.Extensions.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\Xceed.Wpf.Toolkit.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXml\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXml.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXmlLinq\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXmlLinq.dll VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\webdings.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\webdings.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\segoeuil.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\segoeuil.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\segoeuil.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation
Source: C:\Program Files (x86)\b2 electronic GmbH\B2 ControlCenter\ControlCenter.App.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid
windows-stand
⊘No contacted IP infos