Edit tour

Windows Analysis Report
2024_04_Setup-S4-View-V4.20.13.exe

Overview

General Information

Sample name:	2024_04_Setup-S4-View-V4.20.13.exe
Analysis ID:	1533008
MD5:	cff2c405dcf893d747b92c600d4dc26a
SHA1:	95425a08cbcb8c9ed1f085b62f5c69937d253347
SHA256:	d34011319c9faf5400cfb72ccfd04e445b80515bbfade3f9164d08f91b8b63d0
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	20%

Signatures

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Drops PE files

Enables debug privileges

Found dropped PE file which has not been started or loaded

May sleep (evasive loops) to hinder dynamic analysis

PE file contains executable resources (Code or Archives)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Stores files to the Windows start menu directory

Uses 32bit PE files

Classification

Process Tree

System is w10x64

2024_04_Setup-S4-View-V4.20.13.exe (PID: 1048 cmdline: "C:\Users\user\Desktop\2024_04_Setup-S4-View-V4.20.13.exe" MD5: CFF2C405DCF893D747B92C600D4DC26A)

2024_04_Setup-S4-View-V4.20.13.tmp (PID: 1460 cmdline: "C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp" /SL5="$103CC,15449307,57856,C:\Users\user\Desktop\2024_04_Setup-S4-View-V4.20.13.exe" MD5: 832DAB307E54AA08F4B6CDD9B9720361)

Setup-S4-View.exe (PID: 5804 cmdline: "C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe" /SILENT /LANG=en "/DIR=expand:C:\Program Files\LACROIX Sofrel\S4-View\" MD5: 6E1FA307C84ABA5C57F5C32F237DBB3B)

Setup-S4-View.tmp (PID: 1096 cmdline: "C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp" /SL5="$10444,15151522,57856,C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe" /SILENT /LANG=en "/DIR=expand:C:\Program Files\LACROIX Sofrel\S4-View\" MD5: 832DAB307E54AA08F4B6CDD9B9720361)

_setup64.tmp (PID: 3184 cmdline: helper 105 0x404 MD5: E4211D6D009757C078A9FAC7FF4F03D4)

conhost.exe (PID: 3656 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

SNTOperationTrustZoneMigrate.exe (PID: 3632 cmdline: "C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe" MD5: DD9DD242A4F7AA3083435FCE216BCB25)

conhost.exe (PID: 2552 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: 2024_04_Setup-S4-View-V4.20.13.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Window detected: License AgreementPlease read the following important information before continuing.Please read the following License Agreement. You must accept the terms of this agreement before continuing with the installation.Last update: 1 September 2023LICENSE AND ONLINE SERVICES AGREEMENTThis license and online services agreement has been signed by and between the Customer and the LACROIX group company (LACROIX) as identified in the Order. This Agreement is accepted by the Customer by signing the Order (including by clicking to accept).The Customer and LACROIX are sometimes hereinafter collectively referred to as the Parties and individually as a Party.By downloading installing and/or using the Software or the Services the Customer unconditionally and unreservedly accepts the entire Agreement and undertakes to comply with the terms and conditions thereof. If the Customer does not agree to the terms of the Agreement the Customer must not download install or use the Software or the Services.LACROIX reserves the right to modify the terms of the Agreement at any time without notice or prior information given to the Customer in order to adapt the Agreement to changes in the Software or the Services or to technical legal or case law developments. The updated version of the Agreement is brought to the attention of the Customer simply by being posted online. The Agreement is deemed to have been accepted unreservedly by the Customer which uses the Software or the Services after this posting online. The Customer is therefore advised to consult the terms of the Agreement on a regular basis to be aware of the version then in force at the moment the Customer uses the Software or the Services.1DefinitionsCapitalised terms used in the body of the Agreement whether used in the singular or plural form shall have the meanings set forth below:API means Application Programming Interface.Customer means the legal entity or natural person being a client of LACROIX pursuant to an Order placed pursuant to this Agreement and authorised by LACROIX to download install and/or use the Software and/or the Services.Order means the document (possibly available online) signed or accepted in any other way by the Customer and LACROIX identifying the Parties the Software and/or Services ordered by the Customer the volumes and prices relating thereto the duration and the geographical area. The Customer may place one or more Orders for Software licenses and/or Services under the Agreement. The Orders form an integral part of the Agreement.Agreement means this license and online services agreement the Order referencing the said license and online services agreement and the terms and conditions contained in the internet links referenced in the Agreement.Documentation means the user documentation relating to the Software or Services whatever the form and medium of this documentation including where applicable the specific conditions of use of the Software or Services.Data means a
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Window detected: License AgreementPlease read the following important information before continuing.Please read the following License Agreement. You must accept the terms of this agreement before continuing with the installation.Last update: 1 September 2023LICENSE AND ONLINE SERVICES AGREEMENTThis license and online services agreement has been signed by and between the Customer and the LACROIX group company (LACROIX) as identified in the Order. This Agreement is accepted by the Customer by signing the Order (including by clicking to accept).The Customer and LACROIX are sometimes hereinafter collectively referred to as the Parties and individually as a Party.By downloading installing and/or using the Software or the Services the Customer unconditionally and unreservedly accepts the entire Agreement and undertakes to comply with the terms and conditions thereof. If the Customer does not agree to the terms of the Agreement the Customer must not download install or use the Software or the Services.LACROIX reserves the right to modify the terms of the Agreement at any time without notice or prior information given to the Customer in order to adapt the Agreement to changes in the Software or the Services or to technical legal or case law developments. The updated version of the Agreement is brought to the attention of the Customer simply by being posted online. The Agreement is deemed to have been accepted unreservedly by the Customer which uses the Software or the Services after this posting online. The Customer is therefore advised to consult the terms of the Agreement on a regular basis to be aware of the version then in force at the moment the Customer uses the Software or the Services.1DefinitionsCapitalised terms used in the body of the Agreement whether used in the singular or plural form shall have the meanings set forth below:API means Application Programming Interface.Customer means the legal entity or natural person being a client of LACROIX pursuant to an Order placed pursuant to this Agreement and authorised by LACROIX to download install and/or use the Software and/or the Services.Order means the document (possibly available online) signed or accepted in any other way by the Customer and LACROIX identifying the Parties the Software and/or Services ordered by the Customer the volumes and prices relating thereto the duration and the geographical area. The Customer may place one or more Orders for Software licenses and/or Services under the Agreement. The Orders form an integral part of the Agreement.Agreement means this license and online services agreement the Order referencing the said license and online services agreement and the terms and conditions contained in the internet links referenced in the Agreement.Documentation means the user documentation relating to the Software or Services whatever the form and medium of this documentation including where applicable the specific conditions of use of the Software or Services.Data means a

Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Directory created: C:\Program Files\LACROIX Sofrel	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\unins000.dat	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-NA6MU.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\Resources.de.xml	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\Resources.en.xml	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\Resources.es.xml	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\fr	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\fr\Resources.fr.xml	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\Resources.it.xml	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\unins001.dat	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-2H57J.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Licences	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Licences\is-GJBTC.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Licences\is-8S8GG.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Licences\is-1C7FG.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Licences\is-QKQ6M.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Licences\is-AVN7T.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Licences\is-NBDG7.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Licences\is-5PU52.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Licences\is-1Q05E.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Licences\is-RFS0L.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Licences\is-VA86U.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Licences\is-6LHTM.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Licences\is-8IA3J.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-3JH6B.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-9U3EE.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-IBGQ4.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-HKM4S.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-EP5BO.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-TQ04E.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-4GNF5.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-4MBH1.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-EAKNJ.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-0E3AN.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-RFN5H.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-VCOJR.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-CMV4L.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-CO470.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-MQRPV.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-K8GT2.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-5OU1M.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-24Q32.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-GJHT8.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-EPB0C.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-PAQHC.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-NIACK.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-AMCK3.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-SAULK.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-LN3AI.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-63MLF.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-HSBN8.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-1B2OG.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-VM2NU.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-6LAJA.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-011JG.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-A8B8O.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-58KO8.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-629VU.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-ETP9J.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-FQ7A5.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-GVSU9.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-RAUP2.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-L9SE8.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-E1V4F.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-R1SGO.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-JC70F.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-FFPA8.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-LKI3D.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-TR8AE.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-DO2RS.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-T78QA.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-6TKMN.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-RDUQ2.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-DV2L2.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-64KF6.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-EBEI6.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-9CU2D.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-CQKPO.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-UCSDM.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-1JODI.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-0KPQ7.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-T8JRN.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-CUTEF.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-51Q4I.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-MHHC6.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-07KGM.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-T1MUB.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-8T8MU.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-D15N5.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-B4JIE.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-C7GU2.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-LQ48F.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-F3FDQ.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-C93UM.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-EM22B.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-81M0T.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-N6KMT.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-0QSN7.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-B3LJV.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-14EBV.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-50VD7.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-NS71O.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-NPHFL.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-V52PD.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-G7IVF.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-5TC81.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-AAS65.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-HCBT0.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-DI2GE.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-KF3NS.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-JH2S8.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-9M3EF.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-3R6MR.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-1612U.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-8SVAM.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-I729J.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-MEJTF.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-7V1V2.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-5CTU6.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-MRUE4.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-IJG31.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-RKS5T.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-IO3NH.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-Q18VP.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-L48QA.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-OMBLA.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-KUKBE.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-K4C6A.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-639A2.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-5E0EU.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-PEO2L.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\is-5D9DG.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\CertMgr	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\CertMgr\is-FSGCV.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Config	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Config\is-RACOJ.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Config\is-JF1PV.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Config\is-9HN53.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\Config\is-V46HS.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-SNIS1.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-MTL24.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-4GV0Q.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-12JRF.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-2PJ6V.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-BKBVR.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-88ROD.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-TSM0G.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-MNQB6.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-Q1TBT.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-QJN7L.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-K9MBO.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-I9EUD.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-R82J1.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-AV8EA.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-45VRU.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-AIVQD.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-TETLV.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-FCHG3.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-TIL3R.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-H4HST.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\de\is-MSV9G.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-88TKO.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-HI6A6.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-U9E7M.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-84CMC.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-IFV82.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-AI79O.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-0OG0F.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-NL5PA.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-N6DPP.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-PI5H9.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-LLIH1.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-O4B33.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-GU3TJ.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-DMU3F.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-KJV73.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-IO3OE.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-5ITBB.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-JRJN5.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-39RKE.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-N93I3.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-SGKUN.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\en\is-3F4N1.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\EntLib	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\EntLib\is-C4NEP.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\EntLib\is-R8GSR.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-0I2NF.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-6F11R.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-REQFT.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-PRAPE.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-58PPC.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-HF0AC.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-ELILH.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-DQESJ.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-EU6C6.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-9TNNB.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-9121E.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-77VF3.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-4TBRK.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-VMG3H.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-9CCPB.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-699DL.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-TM2NE.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-7FRTL.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-4F771.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-CMA91.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-S8MJD.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\es\is-BND8G.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-F83O7.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-VDM61.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-UB479.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-HABQQ.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-CO0UM.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-PTTTA.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-2MNEP.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-LRAV9.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-QUNG5.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-SJKRM.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-NF99L.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-KKVKO.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-2886D.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-7SN1T.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-7ITRM.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-89MDT.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-IR9V5.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-TGF4M.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-732CK.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-609HG.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-3ONS6.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\it\is-9CSCQ.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\is-5MB86.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\is-ODMQA.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\is-ERV37.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\is-ROON0.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\is-N3HU4.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\is-7BLN2.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\is-DCCU0.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\Default	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\Default\is-5QUK0.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\Default\is-8LJ27.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\Default\is-1SDAH.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-0FSQB.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-IMF8J.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-3OCC6.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-8BABE.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-PE69T.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-TRODH.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-4EQNQ.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-RQL4I.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-SLB2H.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-GUQFH.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-K1O4R.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-0E7KK.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-3F4TS.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-Q2EFC.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-UNPN0.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-833ED.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-7NJPP.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-K8C1P.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-46DM1.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-347OL.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-D4BNT.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-3MFFG.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-ABPDN.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-SC7E2.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-3D2U2.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-F0VLA.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-21NDQ.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-E3UTF.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-54VM0.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-79K3V.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-KPLA1.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-5EA9I.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-UL6DE.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-O3R06.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-RHHQ4.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-HGR93.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-G87M5.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-1DV2O.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-5HQPS.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-49F6R.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-7ME5S.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-4FDOC.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-V4B91.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-I151H.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-K3CMC.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-LBT1Q.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-FK9BA.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\is-5BJBU.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\CertMgr	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\CertMgr\is-VSC5C.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\Config	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\Config\is-ARHJR.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\de	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\de\is-E748F.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\de\is-53UCP.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\de\is-47PKL.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\de\is-DO4N7.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\de\is-KUIC9.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\de\is-HMDUR.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\de\is-HLK9U.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\de\is-HFA8L.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\de\is-1JF6G.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\en	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\en\is-773GS.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\en\is-H0RF0.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\en\is-79MOU.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\en\is-RPPAQ.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\en\is-Q5G5I.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\en\is-8HSHI.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\en\is-5N5CP.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\en\is-VTGH2.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\en\is-BTAJO.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\es	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\es\is-OI13D.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\es\is-5FTSU.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\es\is-M8JKU.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\es\is-SK564.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\es\is-AVSQ8.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\es\is-TQQM6.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\es\is-61UM6.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\es\is-843RE.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\es\is-PKRFS.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\it	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\it\is-H8EP9.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\it\is-RL8OJ.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\it\is-33I6F.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\it\is-MBF20.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\it\is-4JBQU.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\it\is-1K23T.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\it\is-M9PDU.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\it\is-8MTID.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\it\is-1L83U.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\OpenSSL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\OpenSSL\is-JVI3R.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\OpenSSL\is-T0MCK.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\OpenSSL\is-SRF6Q.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\OpenSSL\is-F14H0.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\OpenSSL\is-TBL85.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\OpenSSL\is-KJFH8.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\OpenSSL\is-6NS90.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\OpenSSL\Default	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\OpenSSL\Default\is-EIIIS.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\OpenSSL\Default\is-LAR4K.tmp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\OpenSSL\Default\is-IAAUJ.tmp	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\Log	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Directory created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\Log\Sofrel.Uranus.Framework.Logger.Erreur.log	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp

Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9E82D52C-73A8-4180-844B-564D36F24BDE}_is1

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	File created: C:\Users\user\AppData\Local\Temp\Setup Log 2024-10-14 #001.txt	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	File created: C:\Users\user\Desktop\Setup Log 2024-10-14 #001.txt	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	File created: C:\Users\user\AppData\Local\Temp\Setup Log 2024-10-14 #002.txt	Jump to behavior

Source: 2024_04_Setup-S4-View-V4.20.13.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: d:\ExprUpdate2\Blend\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\Microsoft.Expression.Interactions\Microsoft.Expression.Interactions.pdbD} source: is-EP5BO.tmp.7.dr
Source:	Binary string: {app}\TrustZoneMigrate\Microsoft.Practices.ServiceLocation.pdb source: Setup-S4-View.tmp, 00000007.00000003.1681650165.000000000343C000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: 4{app}\SharpDX.Direct3D9.pdb` source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.ServiceLocation.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: c:\Builds\40\EntLib\ELV6-Blocks-NuGet\src\Source\Blocks\Logging\Src\Logging\obj\Release\Microsoft.Practices.EnterpriseLibrary.Logging.pdb source: SNTOperationTrustZoneMigrate.exe, 0000000A.00000002.1679450866.0000000004B72000.00000002.00000001.01000000.00000014.sdmp
Source:	Binary string: CertMgr.pdb source: is-FSGCV.tmp.7.dr
Source:	Binary string: C:\BuildAgent\work\2a0d6c9273f701c9\WPF\Build\Lib\net47\SciChart.Charting.pdbBSJB source: is-SAULK.tmp.7.dr
Source:	Binary string: CertMgr.pdbH source: is-FSGCV.tmp.7.dr
Source:	Binary string: >{app}\TrustZoneMigrate\Microsoft.Practices.ServiceLocation.pdb source: Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: {app}\Microsoft.Practices.ServiceLocation.pdb source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: d:\ExprUpdate2\Blend\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\Microsoft.Expression.Drawing\Microsoft.Expression.Drawing.pdb source: is-IMF8J.tmp.7.dr
Source:	Binary string: -{app}\Microsoft.Practices.ServiceLocation.pdb source: Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: I,*C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\Microsoft.Practices.ServiceLocation.dllps`C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\Microsoft.Practices.ServiceLocation.pdb source: Setup-S4-View.tmp, 00000007.00000003.1672740128.0000000003164000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: SharpDX.DXGI.pdb source: is-RAUP2.tmp.7.dr
Source:	Binary string: d:\ExprUpdate2\Blend\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\Microsoft.Expression.Prototyping.SketchControls\Microsoft.Expression.Prototyping.SketchControls.pdb source: is-TRODH.tmp.7.dr
Source:	Binary string: {app}\SharpDX.D3DCompiler.pdb source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: `C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\Microsoft.Practices.ServiceLocation.pdb source: Setup-S4-View.tmp, 00000007.00000003.1672740128.0000000003164000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: {app}\TrustZoneMigrate\SNACooperateTrustZone.pdb source: Setup-S4-View.tmp, 00000007.00000003.1683279345.0000000003440000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1681650165.000000000343C000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: @+{app}\TrustZoneMigrate\SNTOperationTrustZoneMigrate.pdb` source: Setup-S4-View.tmp, 00000007.00000003.1683279345.0000000003440000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1681650165.000000000343C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: d:\Projects\WorkingDir\PrismLibraryBuild\PrismLibrary\Desktop\Prism.Interactivity\obj\Release\Microsoft.Practices.Prism.Interactivity.pdb source: is-CO470.tmp.7.dr
Source:	Binary string: {app}\SharpDX.Direct3D11.pdb source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: {app}\TrustZoneMigrate\SNTOperationTrustZoneMigrate.pdb source: Setup-S4-View.tmp, 00000007.00000003.1683279345.0000000003440000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1681650165.000000000343C000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: ?C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.D3DCompiler.pdb^ source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: RC:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNACooperateTrustZone.pdb source: Setup-S4-View.tmp, 00000007.00000003.1672740128.0000000003164000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: 1{app}\TrustZoneMigrate\SNACooperateTrustZone.pdb` source: Setup-S4-View.tmp, 00000007.00000003.1683279345.0000000003440000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1681650165.000000000343C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: 5{app}\SharpDX.Direct3D11.pdb` source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: 3C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.pdb^, source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Jenkins\workspace\Uranus_Release_NuGet\03_Sources\Development\Framework\Framework.Logger\obj\Release\SUFLogger.pdb source: SNTOperationTrustZoneMigrate.exe, 0000000A.00000002.1679080591.0000000004A52000.00000002.00000001.01000000.00000012.sdmp
Source:	Binary string: =C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.Direct3D9.pdbrD source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: {app}\SharpDX.DXGI.pdb source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.D3DCompiler.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: YC:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.pdb source: Setup-S4-View.tmp, 00000007.00000003.1672740128.0000000003164000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: {app}\SharpDX.Mathematics.pdb source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Jenkins\workspace\Uranus_Release_NuGet\03_Sources\Development\Framework\Framework.TlsCallback\obj\Release\SUFTlsCallback.pdbN source: is-LBT1Q.tmp.7.dr
Source:	Binary string: c:\Builds\40\EntLib\ELV6-Blocks-NuGet\src\Source\Blocks\Common\Src\obj\Release\Microsoft.Practices.EnterpriseLibrary.Common.pdb source: SNTOperationTrustZoneMigrate.exe, 0000000A.00000002.1679541333.0000000004BE2000.00000002.00000001.01000000.00000015.sdmp
Source:	Binary string: FC:\Program Files\LACROIX Sofrel\S4-View\SharpDX.Direct3D11.Effects.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672781074.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672740128.0000000003164000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Jenkins\workspace\NPT_dev420_Operation\03_Sources\Development\Application\Operation\Operation.Visualization.V8\obj\Release\SNAOperationVisualizationV8.pdb source: is-3R6MR.tmp.7.dr
Source:	Binary string: ?C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.Mathematics.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672781074.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672740128.0000000003164000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Jenkins\workspace\NPT_dev420_Operation\03_Sources\Development\Application\Operation\Operation.Visualization.V5\obj\Release\SNAOperationVisualizationV5.pdb source: is-JH2S8.tmp.7.dr
Source:	Binary string: C:\Jenkins\workspace\Uranus_Release_NuGet\03_Sources\Development\Framework\Framework.Security\obj\Release\SUFSecurity.pdb source: is-L48QA.tmp.7.dr
Source:	Binary string: {app}\SharpDX.Direct3D9.pdb source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: d:\ExprUpdate2\Blend\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\Microsoft.Expression.Interactions\Microsoft.Expression.Interactions.pdb source: is-EP5BO.tmp.7.dr
Source:	Binary string: d:\Projects\WorkingDir\PrismLibraryBuild\PrismLibrary\Prism.Mvvm.Desktop\obj\Release\Microsoft.Practices.Prism.Mvvm.Desktop.pdb source: is-K8GT2.tmp.7.dr
Source:	Binary string: C:\BuildAgent\work\2a0d6c9273f701c9\WPF\Build\Lib\net47\SciChart.Charting.pdb source: is-SAULK.tmp.7.dr
Source:	Binary string: OC:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.ServiceLocation.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672781074.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672740128.0000000003164000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: 8{app}\TrustZoneMigrate\Microsoft.Practices.ServiceLocation.pdb` source: Setup-S4-View.tmp, 00000007.00000003.1681650165.000000000343C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.Direct3D9.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: p3{app}\SharpDX.DXGI.pdb` source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: =C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.Direct3D9.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672781074.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672740128.0000000003164000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: c:\Builds\40\EntLib\ELV6-Blocks-NuGet\src\Source\Blocks\ExceptionHandling\Src\ExceptionHandling\obj\Release\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.pdbd source: is-EAKNJ.tmp.7.dr
Source:	Binary string: >C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.Direct3D11.pdb^H source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Jenkins\workspace\NPT_dev420_Operation\03_Sources\Development\Tools\Tools.Operation.TrustZone.Migrate\obj\Release\SNTOperationTrustZoneMigrate.pdb source: SNTOperationTrustZoneMigrate.exe, 0000000A.00000000.1673307686.0000000000292000.00000002.00000001.01000000.0000000E.sdmp
Source:	Binary string: t6{app}\SharpDX.Direct3D11.Effects.pdb` source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: d:\Projects\WorkingDir\PrismLibraryBuild\PrismLibrary\Prism.SharedInterfaces\obj\Release\Microsoft.Practices.Prism.SharedInterfaces.pdb source: is-833ED.tmp.7.dr
Source:	Binary string: p2{app}\SharpDX.Mathematics.pdb` source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: >C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.Direct3D11.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672781074.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672740128.0000000003164000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: d:\ExprUpdate2\Blend\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\Microsoft.Expression.Controls\Microsoft.Expression.Controls.pdb source: is-9U3EE.tmp.7.dr
Source:	Binary string: C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.Direct3D11.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: ?C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.Mathematics.pdbB source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\dd\WPF_1\src\wpf\src\ControlsPack\WPFToolkit\Layout\obj\Release\System.Windows.Controls.Layout.Toolkit.pdb source: is-5E0EU.tmp.7.dr
Source:	Binary string: C:\dd\WPF_1\src\wpf\src\ControlsPack\WPFToolkit\Layout\obj\Release\System.Windows.Controls.Layout.Toolkit.pdbxp source: is-5E0EU.tmp.7.dr
Source:	Binary string: <{app}\Microsoft.Practices.ServiceLocation.pdb` source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: ${app}\SharpDX.Direct3D11.Effects.pdb source: Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: c:\Builds\40\EntLib\ELV6-Blocks-NuGet\src\Source\Blocks\Common\Src\obj\Release\Microsoft.Practices.EnterpriseLibrary.Common.pdbT source: SNTOperationTrustZoneMigrate.exe, 0000000A.00000002.1679541333.0000000004BE2000.00000002.00000001.01000000.00000015.sdmp
Source:	Binary string: {app}\SharpDX.Direct3D11.Effects.pdb source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: 1{app}\SharpDX.pdb` source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: 8C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.DXGI.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672781074.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672740128.0000000003164000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: FC:\Program Files\LACROIX Sofrel\S4-View\SharpDX.Direct3D11.Effects.pdbV$ source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: c:\Builds\40\EntLib\ELV6-Blocks-NuGet\src\Source\Blocks\ExceptionHandling\Src\ExceptionHandling\obj\Release\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.pdb source: is-EAKNJ.tmp.7.dr
Source:	Binary string: {app}\SharpDX.pdb source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: 7{app}\TrustZoneMigrate\SNTOperationTrustZoneMigrate.pdb source: Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.DXGI.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672781074.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672740128.0000000003164000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Jenkins\workspace\Uranus_Release_NuGet\03_Sources\Development\Framework\Framework.Environment\obj\Release\SUFEnvironment.pdb source: SNTOperationTrustZoneMigrate.exe, 0000000A.00000002.1678621608.0000000000B22000.00000002.00000001.01000000.00000011.sdmp, is-49F6R.tmp.7.dr
Source:	Binary string: ?C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.D3DCompiler.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672781074.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672740128.0000000003164000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: 8{app}\SharpDX.D3DCompiler.pdb` source: Setup-S4-View.tmp, 00000007.00000003.1681668216.0000000003438000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: 0{app}\TrustZoneMigrate\SNACooperateTrustZone.pdb source: Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Jenkins\workspace\NPT_dev420_Operation\03_Sources\Development\Application\Cooperate\Cooperate.LxConnect.Service\obj\Release\SNACooperateLxConnectService.pdb source: is-0KPQ7.tmp.7.dr
Source:	Binary string: C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.Mathematics.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Jenkins\workspace\Uranus_Release_NuGet\03_Sources\Development\Framework\Framework.TlsCallback\obj\Release\SUFTlsCallback.pdb source: is-LBT1Q.tmp.7.dr
Source:	Binary string: C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.Direct3D11.Effects.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.pdb source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: OC:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.ServiceLocation.pdb^h source: Setup-S4-View.tmp, 00000007.00000003.1652767785.0000000003168000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\Microsoft.Practices.ServiceLocation.pdb source: Setup-S4-View.tmp, 00000007.00000003.1672740128.0000000003164000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: SharpDX.DXGI.pdb X source: is-RAUP2.tmp.7.dr
Source:	Binary string: C:\Users\Michelle\Documents\Visual Studio 2017\Projects\Microsoft.SDK.Expression.Blend\Microsoft.SDK.Expression.Blend\obj\Debug\Microsoft.SDK.Expression.Blend.pdb$'>' 0'_CorDllMainmscoree.dll source: is-NIACK.tmp.7.dr
Source:	Binary string: C:\Jenkins\workspace\NPT_dev420_Operation\03_Sources\Development\Tools\Tools.Operation.TrustZone.Migrate\obj\Release\SNTOperationTrustZoneMigrate.pdb2HLH >H_CorExeMainmscoree.dll source: SNTOperationTrustZoneMigrate.exe, 0000000A.00000000.1673307686.0000000000292000.00000002.00000001.01000000.0000000E.sdmp
Source:	Binary string: C:\Users\Michelle\Documents\Visual Studio 2017\Projects\Microsoft.SDK.Expression.Blend\Microsoft.SDK.Expression.Blend\obj\Debug\Microsoft.SDK.Expression.Blend.pdb source: is-NIACK.tmp.7.dr
Source:	Binary string: C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.DXGI.dllHK8C:\Program Files\LACROIX Sofrel\S4-View\SharpDX.DXGI.pdb source: Setup-S4-View.tmp, 00000007.00000003.1672781074.0000000003168000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1672740128.0000000003164000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: c:\zlib-dll\Release\isunzlib.pdb source: Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Jenkins\workspace\Uranus_Release_NuGet\03_Sources\Development\Framework\Framework.Environment\obj\Release\SUFEnvironment.pdb\BvB hB_CorDllMainmscoree.dll source: SNTOperationTrustZoneMigrate.exe, 0000000A.00000002.1678621608.0000000000B22000.00000002.00000001.01000000.00000011.sdmp, is-49F6R.tmp.7.dr
Source:	Binary string: C:\Jenkins\workspace\Uranus_Release_NuGet\03_Sources\Development\Framework\Framework.Extension\obj\Release\SUFExtension.pdb source: SNTOperationTrustZoneMigrate.exe, 0000000A.00000002.1679375530.0000000004B12000.00000002.00000001.01000000.00000013.sdmp

Source: Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl.certum.pl/ca.crl0:
Source: Setup-S4-View.tmp, 00000007.00000003.1611905481.0000000003444000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl.certum.pl/l3.
Source: Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl.certum.pl/l3.crl0a
Source: Setup-S4-View.tmp, 00000007.00000003.1611905481.0000000003444000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q
Source: Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/COMODORSACodeSigningCA.crl0t
Source: is-9U3EE.tmp.7.dr	String found in binary or memory: http://expression/microsoft.expression.controls.dll
Source: is-IMF8J.tmp.7.dr	String found in binary or memory: http://expression/microsoft.expression.drawing.dll0
Source: is-EP5BO.tmp.7.dr	String found in binary or memory: http://expression/microsoft.expression.interactions.dll
Source: is-TRODH.tmp.7.dr	String found in binary or memory: http://expression/microsoft.expression.prototyping.sketchcontrols.dll
Source: Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.certum.pl0.
Source: Setup-S4-View.tmp, 00000007.00000003.1611905481.0000000003444000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://repository.certum.pl/l3.cer0
Source: is-SAULK.tmp.7.dr, is-AAS65.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart#SciChart.Charting.Common.Extensions
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart#SciChart.Charting.Common.ExtensionsO
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart#SciChart.Charting.Model.ChartSeries
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart#SciChart.Charting.Model.ChartSeriesQ
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart$SciChart.Charting.Common.Databinding
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart$SciChart.Charting.Common.DatabindingR
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart$SciChart.Charting.Visuals.TradeChart
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart%SciChart.Charting.Visuals.Annotations
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart%SciChart.Charting.Visuals.AnnotationsM
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart&SciChart.Charting.Visuals.PointMarkers
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart&SciChart.Charting.Visuals.PointMarkersY
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart(SciChart.Charting.Numerics.TickProviders
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart(SciChart.Charting.Numerics.TickProvidersG
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart)SciChart.Charting.Common.MarkupExtensions
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart)SciChart.Charting.Common.MarkupExtensionsO
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart-SciChart.Charting.Visuals.Axes.LabelProviders
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart.SciChart.Charting.Numerics.CoordinateProviders
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart.SciChart.Charting.Numerics.CoordinateProvidersZ
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart.SciChart.Charting.Visuals.Axes.LogarithmicAxis
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart.SciChart.Charting.Visuals.Axes.LogarithmicAxis_
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart.SciChart.Charting.Visuals.TradeChart.MultiPane
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart.SciChart.Charting.Visuals.TradeChart.MultiPaned
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart0SciChart.Charting.Numerics.CoordinateCalculators
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart0SciChart.Charting.Visuals.Axes.DiscontinuousAxis
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart0SciChart.Charting.Visuals.Axes.DiscontinuousAxisU
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart5SciChart.Charting.Visuals.RenderableSeries.Animations
Source: is-SAULK.tmp.7.dr	String found in binary or memory: http://schemas.abtsoftware.co.uk/scichart5SciChart.Charting.Visuals.RenderableSeries.Animations0
Source: is-GJBTC.tmp.7.dr	String found in binary or memory: http://www.apache.org/licenses/
Source: is-GJBTC.tmp.7.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: is-CO470.tmp.7.dr	String found in binary or memory: http://www.codeplex.com/prism
Source: is-K8GT2.tmp.7.dr	String found in binary or memory: http://www.codeplex.com/prism#Microsoft.Practices.Prism.ViewModel
Source: is-CO470.tmp.7.dr	String found in binary or memory: http://www.codeplex.com/prism:Microsoft.Practices.Prism.Interactivity.InteractionRequest
Source: is-5E0EU.tmp.7.dr	String found in binary or memory: http://www.codeplex.com/wpf
Source: 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1360056421.0000000002410000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359763477.0000000002720000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000002.1727466827.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Setup-S4-View.exe, 00000006.00000003.1603767166.00000000026C0000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.exe, 00000006.00000003.1603967138.00000000023B0000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000002.1684057553.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	String found in binary or memory: http://www.innosetup.com/
Source: Setup-S4-View.tmp, 00000007.00000003.1611905481.0000000003444000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.jrsoftware.org/0
Source: 2024_04_Setup-S4-View-V4.20.13.exe, is-F5IU6.tmp.2.dr	String found in binary or memory: http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdline
Source: 2024_04_Setup-S4-View-V4.20.13.exe, is-F5IU6.tmp.2.dr	String found in binary or memory: http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
Source: is-SRF6Q.tmp.7.dr	String found in binary or memory: http://www.openssl.org/)
Source: 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1360056421.0000000002410000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359763477.0000000002720000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000002.1727466827.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Setup-S4-View.exe, 00000006.00000003.1603767166.00000000026C0000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.exe, 00000006.00000003.1603967138.00000000023B0000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000002.1684057553.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	String found in binary or memory: http://www.remobjects.com/ps
Source: 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1360056421.0000000002410000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359763477.0000000002720000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000002.1727466827.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Setup-S4-View.exe, 00000006.00000003.1603767166.00000000026C0000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.exe, 00000006.00000003.1603967138.00000000023B0000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000002.1684057553.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	String found in binary or memory: http://www.remobjects.com/psU
Source: SNTOperationTrustZoneMigrate.exe, 0000000A.00000000.1673307686.0000000000292000.00000002.00000001.01000000.0000000E.sdmp	String found in binary or memory: http://www.sofrel.com/ConfigurationVisualizationGeneralParams/
Source: SNTOperationTrustZoneMigrate.exe, 0000000A.00000000.1673307686.0000000000292000.00000002.00000001.01000000.0000000E.sdmp	String found in binary or memory: http://www.sofrel.com/ConfigurationVisualizationGeneralParams/T
Source: is-9CU2D.tmp.7.dr	String found in binary or memory: http://www.sofrel.com/SNACooperate/SetPasswordInput.xsdT
Source: is-9CU2D.tmp.7.dr	String found in binary or memory: http://www.sofrel.com/SNACooperate/SetPasswordInput.xsdV
Source: is-64KF6.tmp.7.dr	String found in binary or memory: http://www.sofrel.com/SNAIdentityCard/E
Source: is-64KF6.tmp.7.dr	String found in binary or memory: http://www.sofrel.com/SNAIdentityCard/T
Source: is-9CU2D.tmp.7.dr	String found in binary or memory: http://www.sofrel.com/SNAOperation/SetDateTimeInput.xsdT
Source: is-9CU2D.tmp.7.dr	String found in binary or memory: http://www.sofrel.com/SNAOperation/SetDateTimeInput.xsdV
Source: is-9CU2D.tmp.7.dr	String found in binary or memory: http://www.sofrel.com/SNAOperation/V110/RestartInput.xsdT
Source: is-9CU2D.tmp.7.dr	String found in binary or memory: http://www.sofrel.com/SNAOperation/V110/RestartInput.xsdd
Source: is-9CU2D.tmp.7.dr	String found in binary or memory: http://www.sofrel.com/SNAOperation/V110/UploadOutput.xsdT
Source: is-9CU2D.tmp.7.dr	String found in binary or memory: http://www.sofrel.com/SNAOperation/V110/UploadOutput.xsdd
Source: is-9CU2D.tmp.7.dr	String found in binary or memory: http://www.sofrel.com/SNEIdentityCard/V110/T
Source: is-9CU2D.tmp.7.dr	String found in binary or memory: http://www.sofrel.com/SNEIdentityCard/V110/W
Source: is-V52PD.tmp.7.dr	String found in binary or memory: http://www.sofrel.com/StationConnection/G
Source: is-V52PD.tmp.7.dr	String found in binary or memory: http://www.sofrel.com/StationConnection/T
Source: Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://fr.lacroix-group.com/vie-privee/
Source: is-6LHTM.tmp.7.dr	String found in binary or memory: https://github.com/jquery/jquery
Source: is-6LHTM.tmp.7.dr	String found in binary or memory: https://jquery.org/
Source: 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730243352.0000000002684000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1729897385.0000000002164000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730282551.0000000002688000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730187996.0000000002620000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730034355.00000000021B0000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730133469.00000000021FC000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1729973001.00000000021AC000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359384126.0000000002154000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359252275.0000000002410000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730096712.00000000021F8000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1362003060.000000000214C000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719834895.000000000215C000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719193779.0000000002154000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719575132.0000000003310000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1361845260.0000000003110000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719478541.00000000033C4000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1726050951.00000000021A4000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.exe, 00000006.00000003.1685995917.0000000002098000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.exe, 00000006.00000003.1603142010.00000000023B0000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.exe, 00000006.00000003.1686551455.0000000002658000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.exe, 00000006.00000003.1686213258.00000000025C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://lacroix-group.com/
Source: 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730243352.0000000002684000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1729897385.0000000002164000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730282551.0000000002688000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730187996.0000000002620000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730034355.00000000021B0000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730133469.00000000021FC000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1729973001.00000000021AC000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359384126.0000000002154000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359252275.0000000002410000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730096712.00000000021F8000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1362003060.000000000214C000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1471714765.0000000000839000.00000004.00000020.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1407756392.000000000080C000.00000004.00000020.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719834895.000000000215C000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719193779.0000000002154000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719575132.0000000003310000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1718730811.0000000000811000.00000004.00000020.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1361845260.0000000003110000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719478541.00000000033C4000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1726050951.00000000021A4000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1408237246.000000000080C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lacroix-group.com/private-life/
Source: is-SAULK.tmp.7.dr	String found in binary or memory: https://www.c-sharpcorner.com/UploadFile/mahesh/binding-static-properties-in-wpf-4-5/
Source: Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.certum.pl/CPS0
Source: Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.certum.pl/repository.0
Source: is-T0MCK.tmp.7.dr, is-5MB86.tmp.7.dr	String found in binary or memory: https://www.openssl.org/H
Source: Setup-S4-View.tmp, 00000007.00000003.1679782768.0000000003150000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000002.1683990301.000000000018D000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.openssl.org/community/mailinglists.html
Source: is-SAULK.tmp.7.dr	String found in binary or memory: https://www.scichart.com/documentation/v4.x/webframe.html#Performance_Tips_&_Tricks.html

Source: 2024_04_Setup-S4-View-V4.20.13.tmp.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows
Source: 2024_04_Setup-S4-View-V4.20.13.tmp.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Source: 2024_04_Setup-S4-View-V4.20.13.tmp.0.dr	Static PE information: Resource name: RT_VERSION type: 370 sysV pure executable not stripped
Source: is-NA6MU.tmp.2.dr	Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows
Source: is-NA6MU.tmp.2.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Source: is-NA6MU.tmp.2.dr	Static PE information: Resource name: RT_VERSION type: 370 sysV pure executable not stripped
Source: Setup-S4-View.tmp.6.dr	Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows
Source: Setup-S4-View.tmp.6.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Source: Setup-S4-View.tmp.6.dr	Static PE information: Resource name: RT_VERSION type: 370 sysV pure executable not stripped

Source: 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1360056421.0000000002410000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameshfolder.dll~/ vs 2024_04_Setup-S4-View-V4.20.13.exe
Source: 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359763477.0000000002720000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameshfolder.dll~/ vs 2024_04_Setup-S4-View-V4.20.13.exe

Source: 2024_04_Setup-S4-View-V4.20.13.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3656:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2552:120:WilError_03

Source: unknown	Process created: C:\Users\user\Desktop\2024_04_Setup-S4-View-V4.20.13.exe "C:\Users\user\Desktop\2024_04_Setup-S4-View-V4.20.13.exe"
Source: C:\Users\user\Desktop\2024_04_Setup-S4-View-V4.20.13.exe	Process created: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp "C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp" /SL5="$103CC,15449307,57856,C:\Users\user\Desktop\2024_04_Setup-S4-View-V4.20.13.exe"
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Process created: C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe "C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe" /SILENT /LANG=en "/DIR=expand:C:\Program Files\LACROIX Sofrel\S4-View\"
Source: C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe	Process created: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp "C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp" /SL5="$10444,15151522,57856,C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe" /SILENT /LANG=en "/DIR=expand:C:\Program Files\LACROIX Sofrel\S4-View\"
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Process created: C:\Users\user\AppData\Local\Temp\is-2G8G9.tmp\_isetup\_setup64.tmp helper 105 0x404
Source: C:\Users\user\AppData\Local\Temp\is-2G8G9.tmp\_isetup\_setup64.tmp	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Process created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe "C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe"
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\2024_04_Setup-S4-View-V4.20.13.exe	Process created: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp "C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp" /SL5="$103CC,15449307,57856,C:\Users\user\Desktop\2024_04_Setup-S4-View-V4.20.13.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Process created: C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe "C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe" /SILENT /LANG=en "/DIR=expand:C:\Program Files\LACROIX Sofrel\S4-View\"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe	Process created: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp "C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp" /SL5="$10444,15151522,57856,C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe" /SILENT /LANG=en "/DIR=expand:C:\Program Files\LACROIX Sofrel\S4-View\"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Process created: C:\Users\user\AppData\Local\Temp\is-2G8G9.tmp\_isetup\_setup64.tmp helper 105 0x404	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Process created: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe "C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe"	Jump to behavior

Source: C:\Users\user\Desktop\2024_04_Setup-S4-View-V4.20.13.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\2024_04_Setup-S4-View-V4.20.13.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: msimg32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: msimg32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: msxml3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-2G8G9.tmp\_isetup\_setup64.tmp	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Section loaded: propsys.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Automated click: OK
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Automated click: Install
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Automated click: I accept the agreement

Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LACROIX Sofrel	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LACROIX Sofrel\S4-View	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LACROIX Sofrel\S4-View\S4-View.lnk	Jump to behavior

Source: C:\Users\user\Desktop\2024_04_Setup-S4-View-V4.20.13.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Memory allocated: AE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Memory allocated: 2430000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Memory allocated: 4430000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Queries volume information: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe VolumeInformation	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Queries volume information: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SUFEnvironment.dll VolumeInformation	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Queries volume information: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SUFLogger.dll VolumeInformation	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Queries volume information: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\Microsoft.Practices.EnterpriseLibrary.Logging.dll VolumeInformation	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Queries volume information: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SUFExtension.dll VolumeInformation	Jump to behavior
Source: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe	Queries volume information: C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\Microsoft.Practices.EnterpriseLibrary.Common.dll VolumeInformation	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Command and Scripting Interpreter	1 Windows Service	1 Windows Service	3 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	11 Process Injection	1 Disable or Modify Tools	LSASS Memory	32 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	Junk Data	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	32 Virtualization/Sandbox Evasion	Security Account Manager	2 System Owner/User Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Steganography	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Registry Run Keys / Startup Folder	11 Process Injection	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Timestomp	LSA Secrets	12 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Source	Detection	Scanner	Label	Link
2024_04_Setup-S4-View-V4.20.13.exe	0%	Virustotal		Browse
2024_04_Setup-S4-View-V4.20.13.exe	0%	ReversingLabs

Source	Detection	Scanner
C:\Program Files\LACROIX Sofrel\S4-View\CertMgr\certmgr.exe (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\CertMgr\is-FSGCV.tmp	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Expression.Controls.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Expression.Drawing.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Expression.Effects.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Expression.Interactions.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Expression.Prototyping.Interactivity.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Expression.Prototyping.SketchControls.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.EnterpriseLibrary.Common.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.Logging.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.EnterpriseLibrary.Logging.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.EnterpriseLibrary.Validation.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.Prism.Composition.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.Prism.Interactivity.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.Prism.MefExtensions.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.Prism.Mvvm.Desktop.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.Prism.Mvvm.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.Prism.PubSubEvents.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.Prism.SharedInterfaces.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Practices.ServiceLocation.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.SDK.Expression.Blend.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\Newtonsoft.Json.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\is-5MB86.tmp	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\is-7BLN2.tmp	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\is-ODMQA.tmp	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\libcrypto-1_1.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\libssl-1_1.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\OpenSSL\openssl.exe (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\SNACooperateCommunicationChangePassword.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\SNACooperateCommunicationErrorMapping.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\SNACooperateCommunicationHttpClient.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\SNACooperateCommunicationInterface.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\SNACooperateCommunicationLxConnectTransferObjects.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\SNACooperateCommunicationService.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\SNACooperateCommunicationTransferObject.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\SNACooperateCommunicationUiError.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\SNACooperateCommunicationWebApiTransferObject.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\SNACooperateEmbS4User.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\SNACooperateInitValueTransferObject.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\SNACooperateLxConnect.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\SNACooperateLxConnectService.dll (copy)	0%	ReversingLabs
C:\Program Files\LACROIX Sofrel\S4-View\SNACooperateTrustZone.dll (copy)	0%	ReversingLabs

Source	Detection	Scanner	Label	Link
http://www.innosetup.com/	0%	URL Reputation	safe
https://www.certum.pl/CPS0	0%	URL Reputation	safe
http://www.remobjects.com/psU	0%	URL Reputation	safe
https://www.openssl.org/H	0%	URL Reputation	safe
http://www.remobjects.com/ps	0%	URL Reputation	safe
http://www.codeplex.com/prism:Microsoft.Practices.Prism.Interactivity.InteractionRequest	0%	Virustotal		Browse
https://www.scichart.com/documentation/v4.x/webframe.html#Performance_Tips_&_Tricks.html	0%	Virustotal		Browse
http://www.sofrel.com/SNAOperation/SetDateTimeInput.xsdV	0%	Virustotal		Browse
http://schemas.abtsoftware.co.uk/scichart&SciChart.Charting.Visuals.PointMarkers	0%	Virustotal		Browse
http://www.sofrel.com/SNAOperation/SetDateTimeInput.xsdT	0%	Virustotal		Browse
http://schemas.abtsoftware.co.uk/scichart0SciChart.Charting.Visuals.Axes.DiscontinuousAxis	0%	Virustotal		Browse
https://github.com/jquery/jquery	0%	Virustotal		Browse
http://www.jrsoftware.org/0	0%	Virustotal		Browse
http://www.sofrel.com/ConfigurationVisualizationGeneralParams/	0%	Virustotal		Browse
http://schemas.abtsoftware.co.uk/scichart$SciChart.Charting.Visuals.TradeChart	0%	Virustotal		Browse
http://schemas.abtsoftware.co.uk/scichart5SciChart.Charting.Visuals.RenderableSeries.Animations	0%	Virustotal		Browse
http://schemas.abtsoftware.co.uk/scichart5SciChart.Charting.Visuals.RenderableSeries.Animations0	0%	Virustotal		Browse
http://schemas.abtsoftware.co.uk/scichart#SciChart.Charting.Common.ExtensionsO	0%	Virustotal		Browse
http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU	0%	Virustotal		Browse
https://fr.lacroix-group.com/vie-privee/	0%	Virustotal		Browse
http://www.sofrel.com/SNAOperation/V110/UploadOutput.xsdd	0%	Virustotal		Browse
http://schemas.abtsoftware.co.uk/scichart	0%	Virustotal		Browse
http://crl.certum.pl/l3.crl0a	0%	Virustotal		Browse
http://www.sofrel.com/SNAOperation/V110/RestartInput.xsdT	0%	Virustotal		Browse
http://www.codeplex.com/prism	1%	Virustotal		Browse
http://crl.certum.pl/ca.crl0:	0%	Virustotal		Browse
http://schemas.abtsoftware.co.uk/scichart0SciChart.Charting.Visuals.Axes.DiscontinuousAxisU	0%	Virustotal		Browse
http://www.sofrel.com/SNAOperation/V110/UploadOutput.xsdT	0%	Virustotal		Browse
https://lacroix-group.com/private-life/	0%	Virustotal		Browse
https://www.openssl.org/community/mailinglists.html	0%	Virustotal		Browse
http://schemas.abtsoftware.co.uk/scichart.SciChart.Charting.Visuals.Axes.LogarithmicAxis_	0%	Virustotal		Browse
http://www.sofrel.com/SNAIdentityCard/E	0%	Virustotal		Browse
http://schemas.abtsoftware.co.uk/scichart$SciChart.Charting.Common.Databinding	0%	Virustotal		Browse
http://schemas.abtsoftware.co.uk/scichart#SciChart.Charting.Model.ChartSeries	0%	Virustotal		Browse
http://schemas.abtsoftware.co.uk/scichart(SciChart.Charting.Numerics.TickProvidersG	0%	Virustotal		Browse
http://www.codeplex.com/prism#Microsoft.Practices.Prism.ViewModel	1%	Virustotal		Browse
http://www.sofrel.com/StationConnection/G	0%	Virustotal		Browse
http://schemas.abtsoftware.co.uk/scichart$SciChart.Charting.Common.DatabindingR	0%	Virustotal		Browse
http://www.sofrel.com/ConfigurationVisualizationGeneralParams/T	0%	Virustotal		Browse
http://www.sofrel.com/StationConnection/T	0%	Virustotal		Browse
http://www.sofrel.com/SNAIdentityCard/T	0%	Virustotal		Browse
https://lacroix-group.com/	0%	Virustotal		Browse

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.codeplex.com/prism:Microsoft.Practices.Prism.Interactivity.InteractionRequest	is-CO470.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://www.jrsoftware.org/0	Setup-S4-View.tmp, 00000007.00000003.1611905481.0000000003444000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	false	0%, Virustotal, Browse	unknown
https://www.scichart.com/documentation/v4.x/webframe.html#Performance_Tips_&_Tricks.html	is-SAULK.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://schemas.abtsoftware.co.uk/scichart&SciChart.Charting.Visuals.PointMarkers	is-SAULK.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://www.sofrel.com/ConfigurationVisualizationGeneralParams/	SNTOperationTrustZoneMigrate.exe, 0000000A.00000000.1673307686.0000000000292000.00000002.00000001.01000000.0000000E.sdmp	false	0%, Virustotal, Browse	unknown
http://www.sofrel.com/SNAOperation/SetDateTimeInput.xsdV	is-9CU2D.tmp.7.dr	false	0%, Virustotal, Browse	unknown
https://github.com/jquery/jquery	is-6LHTM.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://www.sofrel.com/SNAOperation/SetDateTimeInput.xsdT	is-9CU2D.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://schemas.abtsoftware.co.uk/scichart0SciChart.Charting.Visuals.Axes.DiscontinuousAxis	is-SAULK.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://schemas.abtsoftware.co.uk/scichart$SciChart.Charting.Visuals.TradeChart	is-SAULK.tmp.7.dr	false	0%, Virustotal, Browse	unknown
https://fr.lacroix-group.com/vie-privee/	Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	false	0%, Virustotal, Browse	unknown
http://schemas.abtsoftware.co.uk/scichart5SciChart.Charting.Visuals.RenderableSeries.Animations	is-SAULK.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://ocsp.certum.pl0.	Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU	2024_04_Setup-S4-View-V4.20.13.exe, is-F5IU6.tmp.2.dr	false	0%, Virustotal, Browse	unknown
http://www.sofrel.com/SNAOperation/V110/RestartInput.xsdT	is-9CU2D.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://www.sofrel.com/SNAOperation/V110/UploadOutput.xsdT	is-9CU2D.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://schemas.abtsoftware.co.uk/scichart5SciChart.Charting.Visuals.RenderableSeries.Animations0	is-SAULK.tmp.7.dr	false	0%, Virustotal, Browse	unknown
https://www.openssl.org/community/mailinglists.html	Setup-S4-View.tmp, 00000007.00000003.1679782768.0000000003150000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000002.1683990301.000000000018D000.00000004.00000010.00020000.00000000.sdmp	false	0%, Virustotal, Browse	unknown
http://schemas.abtsoftware.co.uk/scichart#SciChart.Charting.Common.ExtensionsO	is-SAULK.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://www.sofrel.com/SNAOperation/V110/UploadOutput.xsdd	is-9CU2D.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://schemas.abtsoftware.co.uk/scichart	is-SAULK.tmp.7.dr, is-AAS65.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://crl.certum.pl/l3.crl0a	Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	false	0%, Virustotal, Browse	unknown
http://www.codeplex.com/prism	is-CO470.tmp.7.dr	false	1%, Virustotal, Browse	unknown
http://crl.certum.pl/ca.crl0:	Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	false	0%, Virustotal, Browse	unknown
http://schemas.abtsoftware.co.uk/scichart0SciChart.Charting.Visuals.Axes.DiscontinuousAxisU	is-SAULK.tmp.7.dr	false	0%, Virustotal, Browse	unknown
https://lacroix-group.com/private-life/	2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730243352.0000000002684000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1729897385.0000000002164000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730282551.0000000002688000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730187996.0000000002620000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730034355.00000000021B0000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730133469.00000000021FC000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1729973001.00000000021AC000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359384126.0000000002154000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359252275.0000000002410000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730096712.00000000021F8000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1362003060.000000000214C000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1471714765.0000000000839000.00000004.00000020.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1407756392.000000000080C000.00000004.00000020.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719834895.000000000215C000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719193779.0000000002154000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719575132.0000000003310000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1718730811.0000000000811000.00000004.00000020.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1361845260.0000000003110000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719478541.00000000033C4000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1726050951.00000000021A4000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1408237246.000000000080C000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse	unknown
http://schemas.abtsoftware.co.uk/scichart(SciChart.Charting.Numerics.TickProvidersG	is-SAULK.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://schemas.abtsoftware.co.uk/scichart.SciChart.Charting.Visuals.Axes.LogarithmicAxis_	is-SAULK.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://www.sofrel.com/SNAIdentityCard/E	is-64KF6.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://www.sofrel.com/StationConnection/T	is-V52PD.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://schemas.abtsoftware.co.uk/scichart#SciChart.Charting.Model.ChartSeries	is-SAULK.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://schemas.abtsoftware.co.uk/scichart$SciChart.Charting.Common.Databinding	is-SAULK.tmp.7.dr	false	0%, Virustotal, Browse	unknown
https://lacroix-group.com/	2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730243352.0000000002684000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1729897385.0000000002164000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730282551.0000000002688000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730187996.0000000002620000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730034355.00000000021B0000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730133469.00000000021FC000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1729973001.00000000021AC000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359384126.0000000002154000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359252275.0000000002410000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1730096712.00000000021F8000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1362003060.000000000214C000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719834895.000000000215C000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719193779.0000000002154000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719575132.0000000003310000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1361845260.0000000003110000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1719478541.00000000033C4000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000003.1726050951.00000000021A4000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.exe, 00000006.00000003.1685995917.0000000002098000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.exe, 00000006.00000003.1603142010.00000000023B0000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.exe, 00000006.00000003.1686551455.0000000002658000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.exe, 00000006.00000003.1686213258.00000000025C0000.00000004.00001000.00020000.00000000.sdmp	false	0%, Virustotal, Browse	unknown
http://www.sofrel.com/StationConnection/G	is-V52PD.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://www.codeplex.com/prism#Microsoft.Practices.Prism.ViewModel	is-K8GT2.tmp.7.dr	false	1%, Virustotal, Browse	unknown
http://www.sofrel.com/ConfigurationVisualizationGeneralParams/T	SNTOperationTrustZoneMigrate.exe, 0000000A.00000000.1673307686.0000000000292000.00000002.00000001.01000000.0000000E.sdmp	false	0%, Virustotal, Browse	unknown
http://www.sofrel.com/SNAIdentityCard/T	is-64KF6.tmp.7.dr	false	0%, Virustotal, Browse	unknown
http://www.innosetup.com/	2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1360056421.0000000002410000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359763477.0000000002720000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000002.1727466827.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Setup-S4-View.exe, 00000006.00000003.1603767166.00000000026C0000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.exe, 00000006.00000003.1603967138.00000000023B0000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000002.1684057553.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	false	URL Reputation: safe	unknown
http://schemas.abtsoftware.co.uk/scichart$SciChart.Charting.Common.DatabindingR	is-SAULK.tmp.7.dr	false	0%, Virustotal, Browse	unknown
https://www.c-sharpcorner.com/UploadFile/mahesh/binding-static-properties-in-wpf-4-5/	is-SAULK.tmp.7.dr	false		unknown
http://www.apache.org/licenses/LICENSE-2.0	is-GJBTC.tmp.7.dr	false		unknown
http://schemas.abtsoftware.co.uk/scichart.SciChart.Charting.Numerics.CoordinateProvidersZ	is-SAULK.tmp.7.dr	false		unknown
http://schemas.abtsoftware.co.uk/scichart.SciChart.Charting.Visuals.TradeChart.MultiPaned	is-SAULK.tmp.7.dr	false		unknown
http://www.apache.org/licenses/	is-GJBTC.tmp.7.dr	false		unknown
http://schemas.abtsoftware.co.uk/scichart%SciChart.Charting.Visuals.Annotations	is-SAULK.tmp.7.dr	false		unknown
http://schemas.abtsoftware.co.uk/scichart%SciChart.Charting.Visuals.AnnotationsM	is-SAULK.tmp.7.dr	false		unknown
http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdline	2024_04_Setup-S4-View-V4.20.13.exe, is-F5IU6.tmp.2.dr	false		unknown
http://schemas.abtsoftware.co.uk/scichart#SciChart.Charting.Model.ChartSeriesQ	is-SAULK.tmp.7.dr	false		unknown
https://www.certum.pl/CPS0	Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.abtsoftware.co.uk/scichart#SciChart.Charting.Common.Extensions	is-SAULK.tmp.7.dr	false		unknown
https://www.certum.pl/repository.0	Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://schemas.abtsoftware.co.uk/scichart)SciChart.Charting.Common.MarkupExtensionsO	is-SAULK.tmp.7.dr	false		unknown
http://schemas.abtsoftware.co.uk/scichart.SciChart.Charting.Visuals.Axes.LogarithmicAxis	is-SAULK.tmp.7.dr	false		unknown
http://www.sofrel.com/SNEIdentityCard/V110/W	is-9CU2D.tmp.7.dr	false		unknown
https://jquery.org/	is-6LHTM.tmp.7.dr	false		unknown
http://schemas.abtsoftware.co.uk/scichart(SciChart.Charting.Numerics.TickProviders	is-SAULK.tmp.7.dr	false		unknown
http://www.remobjects.com/psU	2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1360056421.0000000002410000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359763477.0000000002720000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000002.1727466827.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Setup-S4-View.exe, 00000006.00000003.1603767166.00000000026C0000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.exe, 00000006.00000003.1603967138.00000000023B0000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000002.1684057553.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	false	URL Reputation: safe	unknown
http://schemas.abtsoftware.co.uk/scichart.SciChart.Charting.Numerics.CoordinateProviders	is-SAULK.tmp.7.dr	false		unknown
http://www.sofrel.com/SNEIdentityCard/V110/T	is-9CU2D.tmp.7.dr	false		unknown
http://www.codeplex.com/wpf	is-5E0EU.tmp.7.dr	false		unknown
https://www.openssl.org/H	is-T0MCK.tmp.7.dr, is-5MB86.tmp.7.dr	false	URL Reputation: safe	unknown
http://www.sofrel.com/SNACooperate/SetPasswordInput.xsdT	is-9CU2D.tmp.7.dr	false		unknown
http://schemas.abtsoftware.co.uk/scichart&SciChart.Charting.Visuals.PointMarkersY	is-SAULK.tmp.7.dr	false		unknown
http://www.openssl.org/)	is-SRF6Q.tmp.7.dr	false		unknown
http://www.remobjects.com/ps	2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1360056421.0000000002410000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.exe, 00000000.00000003.1359763477.0000000002720000.00000004.00001000.00020000.00000000.sdmp, 2024_04_Setup-S4-View-V4.20.13.tmp, 00000002.00000002.1727466827.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Setup-S4-View.exe, 00000006.00000003.1603767166.00000000026C0000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.exe, 00000006.00000003.1603967138.00000000023B0000.00000004.00001000.00020000.00000000.sdmp, Setup-S4-View.tmp, 00000007.00000002.1684057553.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	false	URL Reputation: safe	unknown
http://www.sofrel.com/SNACooperate/SetPasswordInput.xsdV	is-9CU2D.tmp.7.dr	false		unknown
http://schemas.abtsoftware.co.uk/scichart.SciChart.Charting.Visuals.TradeChart.MultiPane	is-SAULK.tmp.7.dr	false		unknown
http://schemas.abtsoftware.co.uk/scichart)SciChart.Charting.Common.MarkupExtensions	is-SAULK.tmp.7.dr	false		unknown
http://repository.certum.pl/l3.cer0	Setup-S4-View.tmp, 00000007.00000003.1611964357.0000000003150000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://schemas.abtsoftware.co.uk/scichart-SciChart.Charting.Visuals.Axes.LabelProviders	is-SAULK.tmp.7.dr	false		unknown
http://crl.certum.pl/l3.	Setup-S4-View.tmp, 00000007.00000003.1611905481.0000000003444000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://schemas.abtsoftware.co.uk/scichart0SciChart.Charting.Numerics.CoordinateCalculators	is-SAULK.tmp.7.dr	false		unknown
http://www.sofrel.com/SNAOperation/V110/RestartInput.xsdd	is-9CU2D.tmp.7.dr	false		unknown

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1533008
Start date and time:	2024-10-14 09:47:24 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	2024_04_Setup-S4-View-V4.20.13.exe
Detection:	CLEAN
Classification:	clean3.winEXE@13/678@0/0
Cookbook Comments:	Found application associated with file extension: .exe

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Program Files\LACROIX Sofrel\S4-View\Microsoft.Expression.Controls.dll (copy)	OneLaunch - EarthView3D_3o3f1.exe	Get hash	malicious	Unknown	Browse
	https://geteasypdf.com/	Get hash	malicious	Unknown	Browse
	MDE_File_Sample_4e8af2004a77f531e655e2e5cb669c388d0655c9.zip	Get hash	malicious	Unknown	Browse
	https://fastprintapp.com/lp1?channel=hud-gdn&tracking_id=142&oid=142&affid=1025&source_id=google&sub1=142imall&gclid=EAIaIQobChMI5Lzv2NSvgwMVXaOmBB3WUQkTEAEYASAAEgI9zPD_BwE	Get hash	malicious	Unknown	Browse
	https://onelaunch.com/download	Get hash	malicious	Unknown	Browse
	https://getquickmanuals.com/manuals/lp2	Get hash	malicious	Unknown	Browse
	https://download.onelaunch.com/latest/Onelaunch%20Software.exe	Get hash	malicious	Unknown	Browse
	https://download.onelaunch.com/latest/Onelaunch%20Software.exe	Get hash	malicious	Unknown	Browse
	OneLaunch - Manuals_t5m2z.exe	Get hash	malicious	Unknown	Browse
	OneLaunch - PDF_o2u43.exe	Get hash	malicious	Unknown	Browse

Process:	C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	86168
Entropy (8bit):	6.045998280536677
Encrypted:	false
SSDEEP:	1536:NV+Qu8/p1r+Cg0S+xik+WXZw+QQLaJNC8pNYw+WXsA9iYvYBS:ic1/gp4QQuhpNt+WXsoES
MD5:	4CCA26E7EE11419A33960E7428E8972D
SHA1:	86807367D7793299BBB2F558B41EE6641E2587D9
SHA-256:	81E1FD52AD744AEBCA2E9F320FE871CCDEFC1B52210CE6F04D4EC8B9C54554B8
SHA-512:	F7E0BF39F34E6760A7DBFB0D55379D01C2D23B6F22BB04CEA7A25708B050F4C6C1C8508F9A1E9B25DDD86A7A6A1AF47E982E13CB151A740A32A15228041C3644
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........GE...E...E....)..D....)..D....)..W....)..H...E...=....)..F....)..D....)..D...RichE...........PE..d.....JT..........".................p..........@..........................................`.......... ..................................................8Z......,........<...p..(...`...............................p................................................text...\|........................... ..`.data...p(..........................@....pdata..,...........................@..@.idata..............................@..@.rsrc...8Z.......\..................@..@.reloc..(....p......................@..B................................................................................................................................................................................................................................................................................

Process:	C:\Users\user\AppData\Local\Temp\is-7ILSV.tmp\2024_04_Setup-S4-View-V4.20.13.tmp
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.032303242743954
Encrypted:	false
SSDEEP:	3:0gfJPTtlvn:0gBplv
MD5:	11C33ECF9CC37CC85FDBB7A0CA0BF68A
SHA1:	82C0DDF7240D1601C71170990F064C3C7DB7DE3B
SHA-256:	F8E7507A56A4F6851CD1B3E749F9ABBB43C9D9CD77F59613917B4F68BE08C5F5
SHA-512:	DFAA96C04BDD112ADEE57E5D206D7A68C4ABADE0C485287A5D04BED55831D4A58E49D01CE03E5E975A07616123A97B1E7FFAD44BDD75EA7055939DEFAC291141
Malicious:	false
Preview:	Package : V4.20.13.241602..

Process:	C:\Users\user\Desktop\2024_04_Setup-S4-View-V4.20.13.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	713728
Entropy (8bit):	6.516598351135674
Encrypted:	false
SSDEEP:	12288:usMLIMoi3rPR37dzHRA6nX0D9OKWbO7SERb5rNUK1bce0syxyR:JMcMoi3rPR37dzHRA6G7WbuSEmK50syQ
MD5:	832DAB307E54AA08F4B6CDD9B9720361
SHA1:	EBD007FB7482040ECF34339E4BF917209C1018DF
SHA-256:	CC783A04CCBCA4EDD06564F8EC88FE5A15F1E3BB26CEC7DE5E090313520D98F3
SHA-512:	358D43522FD460EB1511708E4DF22EA454A95E5BC3C4841931027B5FA3FB1DDA05D496D8AD0A8B9279B99E6BE74220FE243DB8F08EF49845E9FB35C350EF4B49
Malicious:	false
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*..........................................@.......................................@......@...............................&...........................................................0......................................................CODE............................... ..`DATA.... ...........................@...BSS......................................idata...&.......(..................@....tls......... ...........................rdata.......0......................@..P.reloc..P....@......................@..P.rsrc...............................@..P.....................r..............@..P........................................................................................................................................

Process:	C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	713728
Entropy (8bit):	6.516598351135674
Encrypted:	false
SSDEEP:	12288:usMLIMoi3rPR37dzHRA6nX0D9OKWbO7SERb5rNUK1bce0syxyR:JMcMoi3rPR37dzHRA6G7WbuSEmK50syQ
MD5:	832DAB307E54AA08F4B6CDD9B9720361
SHA1:	EBD007FB7482040ECF34339E4BF917209C1018DF
SHA-256:	CC783A04CCBCA4EDD06564F8EC88FE5A15F1E3BB26CEC7DE5E090313520D98F3
SHA-512:	358D43522FD460EB1511708E4DF22EA454A95E5BC3C4841931027B5FA3FB1DDA05D496D8AD0A8B9279B99E6BE74220FE243DB8F08EF49845E9FB35C350EF4B49
Malicious:	false
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*..........................................@.......................................@......@...............................&...........................................................0......................................................CODE............................... ..`DATA.... ...........................@...BSS......................................idata...&.......(..................@....tls......... ...........................rdata.......0......................@..P.reloc..P....@......................@..P.rsrc...............................@..P.....................r..............@..P........................................................................................................................................

Entrypoint:	0x40aa98
Entrypoint Section:	CODE
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x2A425E19 [Fri Jun 19 22:22:17 1992 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	1
OS Version Minor:	0
File Version Major:	1
File Version Minor:	0
Subsystem Version Major:	1
Subsystem Version Minor:	0
Import Hash:	2fb819a19fe4dee5c03e8c6a79342f79

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 2024_04_Setup-S4-View-V4.20.13.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files\LACROIX Sofrel\S4-View\CertMgr\certmgr.exe (copy)

C:\Program Files\LACROIX Sofrel\S4-View\CertMgr\is-FSGCV.tmp

C:\Program Files\LACROIX Sofrel\S4-View\Config\Communication.config (copy)

C:\Program Files\LACROIX Sofrel\S4-View\Config\Environment.config (copy)

C:\Program Files\LACROIX Sofrel\S4-View\Config\EnvironmentOpe.config

C:\Program Files\LACROIX Sofrel\S4-View\Config\Visualization.config (copy)

C:\Program Files\LACROIX Sofrel\S4-View\Config\is-9HN53.tmp

C:\Program Files\LACROIX Sofrel\S4-View\Config\is-JF1PV.tmp

C:\Program Files\LACROIX Sofrel\S4-View\Config\is-RACOJ.tmp

C:\Program Files\LACROIX Sofrel\S4-View\Config\is-V46HS.tmp

C:\Program Files\LACROIX Sofrel\S4-View\EntLib\exceptionHandler.config (copy)

C:\Program Files\LACROIX Sofrel\S4-View\EntLib\is-C4NEP.tmp

C:\Program Files\LACROIX Sofrel\S4-View\EntLib\is-R8GSR.tmp

C:\Program Files\LACROIX Sofrel\S4-View\EntLib\logger.config

C:\Program Files\LACROIX Sofrel\S4-View\ExtAbout.txt

C:\Program Files\LACROIX Sofrel\S4-View\Licences\Apache License 2.TXT (copy)

C:\Program Files\LACROIX Sofrel\S4-View\Licences\MICROSOFT SOFTWARE LICENSE.TXT (copy)

C:\Program Files\LACROIX Sofrel\S4-View\Licences\MIT.TXT (copy)

C:\Program Files\LACROIX Sofrel\S4-View\Licences\Microsoft patterns & practices License.TXT (copy)

C:\Program Files\LACROIX Sofrel\S4-View\Licences\Open Source BSD 2-Clause.TXT (copy)

C:\Program Files\LACROIX Sofrel\S4-View\Licences\Open Source zlib_libpng.TXT (copy)

C:\Program Files\LACROIX Sofrel\S4-View\Licences\OpenSSL License.txt (copy)

C:\Program Files\LACROIX Sofrel\S4-View\Licences\Public License (Ms-PL).TXT (copy)

C:\Program Files\LACROIX Sofrel\S4-View\Licences\Sil Open Font License.txt (copy)

C:\Program Files\LACROIX Sofrel\S4-View\Licences\WiX.txt (copy)

Windows Analysis Report
2024_04_Setup-S4-View-V4.20.13.exe

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xe000	0x97c	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x12000	0x2c00	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x10000	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
CODE	0x1000	0xa1d0	0xa200	b7ea439d9c6d5ec722056c9243fb3054	False	0.6025028935185185	data	6.643749028594943	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
DATA	0xc000	0x250	0x400	9b2268ed5360951559d8041925d025fb	False	0.3037109375	data	2.740124513017086	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
BSS	0xd000	0xe94	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0xe000	0x97c	0xa00	df5f31e62e05c787fd29eed7071bf556	False	0.41796875	data	4.486076246232586	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0xf000	0x8	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0x10000	0x18	0x200	14dfa4128117e7f94fe2f8d7dea374a0	False	0.05078125	data	0.190488766434666	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.reloc	0x11000	0x91c	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.rsrc	0x12000	0x2c00	0x2c00	da647efdfec0462f896a352682cce1e2	False	0.3378018465909091	data	4.609557039010028	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0x12354	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 192	Dutch	Netherlands	0.5675675675675675
RT_ICON	0x1247c	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 320	Dutch	Netherlands	0.4486994219653179
RT_ICON	0x129e4	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 640	Dutch	Netherlands	0.4637096774193548
RT_ICON	0x12ccc	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1152	Dutch	Netherlands	0.3935018050541516
RT_STRING	0x13574	0x2f2	data			0.35543766578249336
RT_STRING	0x13868	0x30c	data			0.3871794871794872
RT_STRING	0x13b74	0x2ce	data			0.42618384401114207
RT_STRING	0x13e44	0x68	data			0.75
RT_STRING	0x13eac	0xb4	data			0.6277777777777778
RT_STRING	0x13f60	0xae	data			0.5344827586206896
RT_RCDATA	0x14010	0x2c	data			1.25
RT_GROUP_ICON	0x1403c	0x3e	data	English	United States	0.8387096774193549
RT_VERSION	0x1407c	0x4f4	data	English	United States	0.31545741324921134
RT_MANIFEST	0x14570	0x62c	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.4240506329113924

DLL	Import
kernel32.dll	DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, VirtualFree, VirtualAlloc, LocalFree, LocalAlloc, WideCharToMultiByte, TlsSetValue, TlsGetValue, MultiByteToWideChar, GetModuleHandleA, GetLastError, GetCommandLineA, WriteFile, SetFilePointer, SetEndOfFile, RtlUnwind, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetSystemTime, GetFileType, ExitProcess, CreateFileA, CloseHandle
user32.dll	MessageBoxA
oleaut32.dll	VariantChangeTypeEx, VariantCopyInd, VariantClear, SysStringLen, SysAllocStringLen
advapi32.dll	RegQueryValueExA, RegOpenKeyExA, RegCloseKey, OpenProcessToken, LookupPrivilegeValueA
kernel32.dll	WriteFile, VirtualQuery, VirtualProtect, VirtualFree, VirtualAlloc, Sleep, SizeofResource, SetLastError, SetFilePointer, SetErrorMode, SetEndOfFile, RemoveDirectoryA, ReadFile, LockResource, LoadResource, LoadLibraryA, IsDBCSLeadByte, GetWindowsDirectoryA, GetVersionExA, GetVersion, GetUserDefaultLangID, GetSystemInfo, GetSystemDirectoryA, GetSystemDefaultLCID, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLastError, GetFullPathNameA, GetFileSize, GetFileAttributesA, GetExitCodeProcess, GetEnvironmentVariableA, GetCurrentProcess, GetCommandLineA, GetACP, InterlockedExchange, FormatMessageA, FindResourceA, DeleteFileA, CreateProcessA, CreateFileA, CreateDirectoryA, CloseHandle
user32.dll	TranslateMessage, SetWindowLongA, PeekMessageA, MsgWaitForMultipleObjects, MessageBoxA, LoadStringA, ExitWindowsEx, DispatchMessageA, DestroyWindow, CreateWindowExA, CallWindowProcA, CharPrevA
comctl32.dll	InitCommonControls
advapi32.dll	AdjustTokenPrivileges

Target ID:	0
Start time:	03:48:18
Start date:	14/10/2024
Path:	C:\Users\user\Desktop\2024_04_Setup-S4-View-V4.20.13.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\2024_04_Setup-S4-View-V4.20.13.exe"
Imagebase:	0x400000
File size:	15'783'365 bytes
MD5 hash:	CFF2C405DCF893D747B92C600D4DC26A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Target ID:	6
Start time:	03:48:42
Start date:	14/10/2024
Path:	C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe" /SILENT /LANG=en "/DIR=expand:C:\Program Files\LACROIX Sofrel\S4-View\"
Imagebase:	0x400000
File size:	15'509'297 bytes
MD5 hash:	6E1FA307C84ABA5C57F5C32F237DBB3B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Target ID:	7
Start time:	03:48:43
Start date:	14/10/2024
Path:	C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\is-S156G.tmp\Setup-S4-View.tmp" /SL5="$10444,15151522,57856,C:\Users\user\AppData\Local\Temp\is-AGO5O.tmp\Setup-S4-View.exe" /SILENT /LANG=en "/DIR=expand:C:\Program Files\LACROIX Sofrel\S4-View\"
Imagebase:	0x400000
File size:	713'728 bytes
MD5 hash:	832DAB307E54AA08F4B6CDD9B9720361
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Target ID:	9
Start time:	03:48:44
Start date:	14/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff70f010000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	10
Start time:	03:48:49
Start date:	14/10/2024
Path:	C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files\LACROIX Sofrel\S4-View\TrustZoneMigrate\SNTOperationTrustZoneMigrate.exe"
Imagebase:	0x290000
File size:	13'824 bytes
MD5 hash:	DD9DD242A4F7AA3083435FCE216BCB25
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre