Windows Analysis Report
atencion_y_estimulacion_visual.msi

Overview

General Information

Sample name:	atencion_y_estimulacion_visual.msi
Analysis ID:	1431601
MD5:	fcda6ce6211be974da8526ccd07ff424
SHA1:	efb5f0aa45de0e352bf6a84ce43ca9243bf4d3f6
SHA256:	413b159502d249ada382b32466a4a81ea5a43abf88ce285ea2aed0d7207c73c6
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Checks for available system drives (often done to infect USB drives)

Drops PE files

Found dropped PE file which has not been started or loaded

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Classification

Signatures

AV Detection

Multi AV Scanner detection for submitted file

Source: atencion_y_estimulacion_visual.msi

Virustotal: Detection: 11%

Perma Link

Source:

Binary string: C:\Branch\win\Release\custact\x86\AICustAct.pdb source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr

Checks for available system drives (often done to infect USB drives)

Source: C:\Windows\System32\msiexec.exe	File opened: z:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: x:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: v:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: t:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: r:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: p:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: n:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: l:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: j:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: h:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: f:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: b:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: y:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: w:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: u:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: s:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: q:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: o:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: m:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: k:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: i:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: g:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: e:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: c:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: a:	Jump to behavior

Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: http://s.symcb.com/universal-root.crl0
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: http://s.symcd.com06
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: http://t1.symcb.com/ThawtePCA.crl0
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: http://t2.symcb.com0
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: http://tl.symcb.com/tl.crl0
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: http://tl.symcb.com/tl.crt0
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: http://tl.symcd.com0&
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com0;
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: http://www.advancedinstaller.com0
Source: atencion_y_estimulacion_visual.msi	String found in binary or memory: http://www.inclusive.comAI_UNINSTALLERmsiexec.exeDialogBitmapdialogALLUSERS1ButtonText_Yes&S
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: https://d.symcb.com/cps0%
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: https://d.symcb.com/rpa0
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: https://d.symcb.com/rpa0.
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: https://www.thawte.com/cps0/
Source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr	String found in binary or memory: https://www.thawte.com/repository0W

Sample file is different than original file name gathered from version info

Source: atencion_y_estimulacion_visual.msi

Binary or memory string: OriginalFilenameAICustAct.dllF vs atencion_y_estimulacion_visual.msi

Source: classification engine

Classification label: mal48.winMSI@4/5@0/0

Source: C:\Windows\System32\msiexec.exe

File created: C:\Users\user\AppData\Local\Temp\MSIDB26.tmp

Jump to behavior

Source: atencion_y_estimulacion_visual.msi

Virustotal: Detection: 11%

Source: unknown	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\atencion_y_estimulacion_visual.msi"
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding E85D5D35B24865A3B7876DC8C57EC5ED C
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding E85D5D35B24865A3B7876DC8C57EC5ED C	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msihnd.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior

Source: atencion_y_estimulacion_visual.msi

Static file information: File size 27866624 > 1048576

Source:

Binary string: C:\Branch\win\Release\custact\x86\AICustAct.pdb source: atencion_y_estimulacion_visual.msi, MSIDBF2.tmp.0.dr, MSIDC03.tmp.0.dr, MSIDE37.tmp.0.dr, MSIDB26.tmp.0.dr, MSIDC23.tmp.0.dr

Drops PE files

Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSIDB26.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSIDBF2.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSIDC23.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSIDE37.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSIDC03.tmp	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Found dropped PE file which has not been started or loaded

Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSIDB26.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSIDBF2.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSIDC23.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSIDE37.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSIDC03.tmp	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Queries the volume information (name, serial number etc) of a device

Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

⊘No contacted IP infos

ID:	1431601
Product:	CloudBasic
Start time:	14:04:19
Start date:	25.04.2024
Sample:	atencion_y_estimulacion_visual.msi
Cookbook:	default.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS
MD5:	fcda6ce6211be974da8526ccd07ff424
SHA1:	efb5f0aa45de0e352bf6a84ce43ca9243bf4d3f6
SHA256:	413b159502d249ada382b32466a4a81ea5a43abf88ce285ea2aed0d7207c73c6
Filetype:	Windows SDK Setup Transform Script (63028/2) 47.91%

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Local\Temp\MSIDB26.tmp	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows	BAE45BDE03F8FEA7755FF3A7E53A724E	5D86ABB1D8496FBE9CEF17E5B8C865408CF11CE2	3913C0E2870CA21E186C5FFEAF08E4CBAEE90CC117854AAA88050E74F314822E
C:\Users\user\AppData\Local\Temp\MSIDBF2.tmp	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows	BAE45BDE03F8FEA7755FF3A7E53A724E	5D86ABB1D8496FBE9CEF17E5B8C865408CF11CE2	3913C0E2870CA21E186C5FFEAF08E4CBAEE90CC117854AAA88050E74F314822E
C:\Users\user\AppData\Local\Temp\MSIDC03.tmp	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows	BAE45BDE03F8FEA7755FF3A7E53A724E	5D86ABB1D8496FBE9CEF17E5B8C865408CF11CE2	3913C0E2870CA21E186C5FFEAF08E4CBAEE90CC117854AAA88050E74F314822E
C:\Users\user\AppData\Local\Temp\MSIDC23.tmp	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows	BAE45BDE03F8FEA7755FF3A7E53A724E	5D86ABB1D8496FBE9CEF17E5B8C865408CF11CE2	3913C0E2870CA21E186C5FFEAF08E4CBAEE90CC117854AAA88050E74F314822E
C:\Users\user\AppData\Local\Temp\MSIDE37.tmp	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows	BAE45BDE03F8FEA7755FF3A7E53A724E	5D86ABB1D8496FBE9CEF17E5B8C865408CF11CE2	3913C0E2870CA21E186C5FFEAF08E4CBAEE90CC117854AAA88050E74F314822E

Windows Analysis Report
atencion_y_estimulacion_visual.msi

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Screenshots

Behavior Graph

Network Map

Windows Analysis Report atencion_y_estimulacion_visual.msi

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Screenshots

Behavior Graph

Network Map

Windows Analysis Report
atencion_y_estimulacion_visual.msi