fec0f2d5a256a91fdc72420df99066ef92d26f48aa31cbfb9cf4efbf2984c017

Analysis

user interaction
yes
max time kernel
135s
max time network
187s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/07/2026, 09:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

Reason

Machine shutdown

General

Target
AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576.exe
Size 690.4MB
Sample260707-lnxtaaey6s
SHA256 fec0f2d5a256a91fdc72420df99066ef92d26f48aa31cbfb9cf4efbf2984c017
MD5 fbeacd5c9ee461b50860195541442de1
SHA1 205c8c1731ac7930ecbd3dfb4b622911f7bb9a97
SHA512 5ca766ac79a04bd3b2abc057c5fad591c042182b141d0ea8270cdc027c904eb920a6b57c2954da98113d3959e07eb2a0a63a710ad49535e7ffcdf697a4e0dfaf
SSDEEP 12582912:DkeTLuuyrVaGZ9HeRgouCwIctgAqmEt6EtMLucpNxkfre/JMrmjx5D8Ze:xArVzrHeRRuC8tgAyZI36frOtx5IZe
TLSH
T1FC79335A76ADB46FE50B1A315099A6F07A7BB7E014910D0323F5B4BC4AB50E80F3DF92
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion discovery installer

Malware Config

Signatures

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\ativvaxy_nv.dat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{b2b32dc5-c51c-4b4b-9db6-29384173e916}\SET1BE.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{66e8e449-8f49-904e-87c8-a1a31042a532}\SETA5E.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETB537.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETB593.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\H9_EASU_sx1_80_sy1_80.bin	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETBBEB.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETBCA1.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\amdn1b32.dll	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\atiglpxx.dll	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{34e90dff-eb27-1847-bbcd-788d56e59477}\SETF17D.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETB56E.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETB9CD.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\atiicdxx.dat	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETBC8F.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\ativvaxy_cz_nd.dat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{b87eb450-c437-ba4d-9997-1801dff21fec}\amdfendr.sys	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}	DrvInst.exe
File created	C:\Windows\System32\DriverStore\drvstore.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\amduve64.dll	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETB9A9.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\amdicdxx.dat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\ativvaxy_vcn3.dat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\ativvaxy_vcn4.dat	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETBBFC.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\ativvaxy_FJ_nd.dat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\H9_EASU_sx1_60_sy1_60.bin	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\ativvaxy_nv.dat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\ativvaxy_gl_nd.dat	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETBE74.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\amdicdxx.dat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\atisamu32.dll	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\AMDh265Enc32.dll	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{b2b32dc5-c51c-4b4b-9db6-29384173e916}\SET207.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{b2b32dc5-c51c-4b4b-9db6-29384173e916}\SET218.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\H9_EASU_sx2_00_sy2_00.bin	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\detoured32.dll	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETBCB2.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\SETC179.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\libamdenc64.so	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{34e90dff-eb27-1847-bbcd-788d56e59477}\SETEF64.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{34e90dff-eb27-1847-bbcd-788d56e59477}\SETF022.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\amdocl.inf_amd64_282ffd8675014112\oro_compiled_kernels.hipfb	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETB82B.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\ativvaxy_cik.dat	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETB8CC.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETB8CE.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\atiadlxx.dll	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\amdgfxinfo32.dll	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\amduw23e.inf_amd64_956e2c18f56eb466\amduw23e.inf	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\uwppair.inf_amd64_705d3a840c5503a6.ini	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\H9_EASU_sx1_30_sy1_30.bin	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETB903.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETBBFC.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\amdihk64.dll	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\ativvaxy_vi_nd.dat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{34e90dff-eb27-1847-bbcd-788d56e59477}	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{fea34625-f8a8-9e41-b58f-915e12e40e2f}\SET5D9.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{fea34625-f8a8-9e41-b58f-915e12e40e2f}\amdacpbus.cat	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETB501.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\H9_EASU_sx1_60_sy1_60.bin	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{d35fdc89-9d2a-5a41-b8d9-0ef5b5be996c}\B417576\SETBCB1.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\atiesrxx.exe	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0\B417576\amdxc64.dll	DrvInst.exe

Drops file in Windows directory 35 IoCs

description	ioc	Process
File opened for modification	C:\Windows\INF\setupapi.dev.log	pnputil.exe
File created	C:\Windows\inf\oem2.inf	DrvInst.exe
File opened for modification	C:\Windows\inf\oem3.inf	DrvInst.exe
File opened for modification	C:\Windows\inf\oem5.inf	DrvInst.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File opened for modification	C:\Windows\Logs\DISM\dism.log	dismhost.exe
File created	C:\Windows\inf\oem4.inf	DrvInst.exe
File opened for modification	C:\Windows\inf\oem11.inf	DrvInst.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File opened for modification	C:\Windows\Logs\DISM\dism.log	Dism.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File created	C:\Windows\inf\oem5.inf	DrvInst.exe
File opened for modification	C:\Windows\inf\oem7.inf	DrvInst.exe
File created	C:\Windows\inf\oem8.inf	DrvInst.exe
File created	C:\Windows\inf\oem1.inf	DrvInst.exe
File opened for modification	C:\Windows\inf\oem4.inf	DrvInst.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File created	C:\Windows\inf\oem10.inf	DrvInst.exe
File opened for modification	C:\Windows\inf\oem1.inf	DrvInst.exe
File created	C:\Windows\inf\oem9.inf	DrvInst.exe
File created	C:\Windows\inf\oem3.inf	DrvInst.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	pnputil.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File created	C:\Windows\inf\oem7.inf	DrvInst.exe
File opened for modification	C:\Windows\inf\oem8.inf	DrvInst.exe
File opened for modification	C:\Windows\inf\oem10.inf	DrvInst.exe
File created	C:\Windows\inf\oem11.inf	DrvInst.exe
File opened for modification	C:\Windows\inf\oem6.inf	DrvInst.exe
File opened for modification	C:\Windows\inf\oem9.inf	DrvInst.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File opened for modification	C:\Windows\inf\oem12.inf	DrvInst.exe
File created	C:\Windows\inf\oem12.inf	DrvInst.exe
File opened for modification	C:\Windows\inf\oem2.inf	DrvInst.exe
File created	C:\Windows\inf\oem6.inf	DrvInst.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe

Executes dropped EXE 5 IoCs

pid	Process
3568	Install.exe
2228	Install.tmp
5744	7z.exe
728	amdfendrsr.exe
1144	AsusInstallerBI.exe

Loads dropped DLL 2 IoCs

pid	Process
5744	7z.exe
1144	AsusInstallerBI.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Install.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Install.tmp

Inno Setup is an open-source installation builder for Windows applications. 4 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/files/0x0006000000016ca9-3.dat	innosetup
behavioral2/memory/3568-5-0x0000000000400000-0x00000000004D8000-memory.dmp	innosetup
behavioral2/memory/3568-12-0x0000000000400000-0x00000000004D8000-memory.dmp	innosetup
behavioral2/memory/3568-1017-0x0000000000400000-0x00000000004D8000-memory.dmp	innosetup

Checks SCSI registry key(s) 3 TTPs 64 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0025	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	pnputil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	pnputil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0025	pnputil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0025	pnputil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0025	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Phantom	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	pnputil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0025	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	DrvInst.exe

Delays execution with timeout.exe 1 IoCs

defense_evasion

pid	Process
1640	timeout.exe

Modifies data under HKEY_USERS 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	DrvInst.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	DrvInst.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2228	Install.tmp
2228	Install.tmp

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious use of AdjustPrivilegeToken 9 IoCs

description	pid	Process
Token: SeRestorePrivilege	5744	7z.exe
Token: 35	5744	7z.exe
Token: SeSecurityPrivilege	5744	7z.exe
Token: SeSecurityPrivilege	5744	7z.exe
Token: SeLoadDriverPrivilege	1232	DrvInst.exe
Token: SeLoadDriverPrivilege	1268	DrvInst.exe
Token: SeLoadDriverPrivilege	1268	DrvInst.exe
Token: SeLoadDriverPrivilege	1268	DrvInst.exe
Token: SeShutdownPrivilege	3568	Install.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2228	Install.tmp

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3692	LogonUI.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 5632 wrote to memory of 3568	5632	AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576.exe	86
PID 3568 wrote to memory of 2228	3568	Install.exe	87
PID 2228 wrote to memory of 5744	2228	Install.tmp	89
PID 2228 wrote to memory of 1096	2228	Install.tmp	91
PID 1096 wrote to memory of 2512	1096	cmd.exe	93
PID 1096 wrote to memory of 3436	1096	cmd.exe	101
PID 1096 wrote to memory of 1640	1096	cmd.exe	107
PID 1096 wrote to memory of 3492	1096	cmd.exe	108
PID 3492 wrote to memory of 4932	3492	Dism.exe	109
PID 1096 wrote to memory of 4588	1096	cmd.exe	112
PID 2228 wrote to memory of 1144	2228	Install.tmp	114

C:\Users\Admin\AppData\Local\Temp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576.exe
"C:\Users\Admin\AppData\Local\Temp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5632
- C:\Users\Admin\AppData\Local\Temp\Setup_20260707110229\Install.exe
  C:\Users\Admin\AppData\Local\Temp\Setup_20260707110229\Install.exe
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:3568
- - C:\Users\Admin\AppData\Local\Temp\is-FI1CD.tmp\Install.tmp
    "C:\Users\Admin\AppData\Local\Temp\is-FI1CD.tmp\Install.tmp" /SL5="$B0256,2338254,831488,C:\Users\Admin\AppData\Local\Temp\Setup_20260707110229\Install.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:2228
  - - C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\7z.exe
      "C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\7z.exe" x "C:\Users\Admin\AppData\Local\Temp\Setup_20260707110229\Source.7z" -o"C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236" -y
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious use of AdjustPrivilegeToken
      PID:5744
  - - C:\Windows\system32\cmd.exe
      "C:\Windows\system32\cmd.exe" /C ""C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236\Install_innCMD.bat""
      4⤵
      Suspicious use of WriteProcessMemory
      PID:1096
    - - C:\Windows\system32\pnputil.exe
        
        pnputil -i -a .\Packages\Drivers\Display\WT6A_INF\u0417921.inf
        5⤵
        Drops file in Windows directory
        Checks SCSI registry key(s)
        
        PID:2512
    - - C:\Windows\system32\pnputil.exe
        
        pnputil -i -a .\Packages\Drivers\*.inf /subdirs
        5⤵
        Drops file in Windows directory
        Checks SCSI registry key(s)
        
        PID:3436
    - - C:\Windows\system32\timeout.exe
        
        timeout 5
        5⤵
        Delays execution with timeout.exe
        
        PID:1640
    - - C:\Windows\system32\Dism.exe
        
        dism /online /Add-ProvisionedAppxPackage /PackagePath:"4d0d96dcf8114ea59d7bcfc3c11dd26c.msix" /Region="all" /LicensePath:"4d0d96dcf8114ea59d7bcfc3c11dd26c_License1.xml" /DependencyPackagePath:"Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x86__8wekyb3d8bbwe.appx" /DependencyPackagePath:"Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe.appx"
        5⤵
        Drops file in Windows directory
        Suspicious use of WriteProcessMemory
        
        PID:3492
      - C:\Windows\System32\Dism\dismhost.exe
        
        C:\Windows\System32\Dism\dismhost.exe {7A6BD754-B329-47DB-BF96-46521B8BB7C6}
        6⤵
        Drops file in Windows directory
        
        PID:4932
    - - C:\Windows\system32\reg.exe
        
        reg add "HKEY_LOCAL_MACHINE\SOFTWARE\ASUS\AMD_RadeonSetting_UWP" /v DisplayVersion /t REG_SZ /d 10.25.10016.0 /f
        5⤵
        
        PID:4588
  - - C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\AsusInstallerBI.exe
      "C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\AsusInstallerBI.exe" "AMD Graphics Driver" V32.0.21013.11001 0 "Graphic-Graphics-0-0" 20260707110317 20260707110416 0
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1144

C:\Windows\system32\DrvInst.exe
DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{614dbbbc-ff72-594c-a406-4ae9f86497fc}\u0417921.inf" "9" "4e2172f7b" "0000000000000198" "WinSta0\Default" "00000000000000F0" "208" "C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236\Packages\Drivers\Display\WT6A_INF"
1⤵
- Drops file in System32 directory
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
PID:1232

C:\Windows\system32\DrvInst.exe
DrvInst.exe "1" "0" "ROOT\AMDLOG\0000" "" "" "4e7599a6f" "0000000000000000" "5ecd"
1⤵
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
PID:1268

C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_1aafc0a9b0693712\amdfendrsr.exe
C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_1aafc0a9b0693712\amdfendrsr.exe
1⤵
- Executes dropped EXE
PID:728

C:\Windows\system32\DrvInst.exe
DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{23034136-cac1-444d-b865-081925c6ef57}\amdacpbtacx.inf" "9" "4049a75b3" "0000000000000168" "WinSta0\Default" "0000000000000190" "208" "C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236\Packages\Drivers\Audio\ACPBTACX\WT64A"
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Modifies data under HKEY_USERS
PID:6032

C:\Windows\system32\DrvInst.exe
DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{53d424fa-90b2-074f-8d25-fbbfa083d13a}\amdacpbt.inf" "9" "425ee7e8f" "0000000000000190" "WinSta0\Default" "0000000000000178" "208" "C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236\Packages\Drivers\Audio\ACPBtAfd\WT64A"
1⤵
- Drops file in System32 directory
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Modifies data under HKEY_USERS
PID:952

C:\Windows\system32\DrvInst.exe
DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{6c914f74-2450-4445-b5c0-57aad33b343e}\amdacpbus.inf" "9" "4493f0ecb" "0000000000000178" "WinSta0\Default" "0000000000000194" "208" "C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236\Packages\Drivers\Audio\ACPBus\WT64A"
1⤵
- Drops file in System32 directory
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Modifies data under HKEY_USERS
PID:1492

C:\Windows\system32\DrvInst.exe
DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{c5914fc6-7789-a740-b561-abd0ee5406e3}\amdacpbus2.inf" "9" "463e87dcb" "0000000000000168" "WinSta0\Default" "0000000000000198" "208" "C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236\Packages\Drivers\Audio\ACPBus2\WT64A"
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Modifies data under HKEY_USERS
PID:4460

C:\Windows\system32\DrvInst.exe
DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{91b9d597-c44f-0244-a447-2c9d4e04641b}\AtihdWT6.inf" "9" "4812b80fb" "0000000000000198" "WinSta0\Default" "00000000000000F0" "208" "C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236\Packages\Drivers\Audio\HDMI\WT64A"
1⤵
- Drops file in System32 directory
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Modifies data under HKEY_USERS
PID:3288

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k AppReadiness -p -s AppReadiness
1⤵
PID:5924

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x4 /state0:0xa3a1e055 /state1:0x41c64e6d
1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:3692

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2516

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k CameraMonitor
1⤵
PID:4288

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Install.exe

Path C:\Users\Admin\AppData\Local\Temp\Setup_20260707110229\Install.exe
Size 3.2MB
SHA256 37302c62467a633bfb8a1d27a572a43ae02f472b2efbcb75f7f0fef5b17fd033
MD5 49361db12e06f634c42222a084480b70
SHA1 709916643128723bad271d1a2232dec48af20969
SHA512 311266ef75ed0bd66e7770050c58a6b40c304abbc9bb0159a7b75fc3635a10271a8fe5cf90fb0fb8506b189694f71faaafc934f7e3d98d3ed427ab845a945850
SSDEEP 49152:4qe3f6NvCplZh3tkNR0uZQS8TUzfR0QAxph15q8lt4iYJZoCT77rurhpQ8:NSi5ChdkkC8wzpPohD7q+cXoU8
TLSH
T1D4F5F13FF268A53ED46E1B3245B39250993BBE61A81A8C1B07FC350CCF765601E3B656
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Install.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-FI1CD.tmp\Install.tmp
Size 3.1MB
SHA256 4a08bb9334c9b8d86a0cf0f71fc24d978a797b2151816a10dec514847bea09f9
MD5 6a79eeb8f8de496bb7a9822df1efbd99
SHA1 5489f61034dd76947f0eb501a0701bf8ce0fd873
SHA512 cd90759dc3b64c7851b2d68ce063d17094372179eaae361dc0f25ef3affba143a45310fce589fc56a11a9420dc9d1c7eab24c5f53cce8e6db5510c1b93016ce0
SSDEEP 49152:lEA9P+bz2cHPcUb6HSb4SOEMkBeH7nQckO6bAGx7jXTV+333TYP:p92bz2Eb6pd7B6bAGx7s333Tg
TLSH
T1A3E54A17F388723ED06B5A32473386D89837B66169128C17A7FC394C8F356942A3E776
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AMDADLXServ.exe

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\AMDADLXServ.exe
Size 171KB
SHA256 58afd450c14714002a3c938d130d3a4afaff0a0fab927da56e97d58125b5176e
MD5 aa494b4fc9316ccbbe2701d4eb031349
SHA1 6490a0ee3d3cef47ccfd8359e6acf7b7800c662b
SHA512 ff9ba6179a66d2dffeb238acb36c97b483fba30628d74ad11a8045115d3b98f20892b21887f77fbdacd44ebb5d28d289eec726ec46a1a3d242d51b3cfa0a4544
SSDEEP 3072:Z0wrFOQe/g00zReAtH6Og8BCMXou51xiLV8jUNBiTemzxDJBC:ZdrFOQ1zReAtH6Og8BhXv1oLV84BiT74
TLSH
T1B3043C53B2A891E6D258927C49DAC245FF72BA610B61C7CF2262475E0F337E49D3E720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GameManager32.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\GameManager32.dll
Size 467KB
SHA256 dac02a9128d5c55cb22df4d782126c02af0299d585e6de1426016e364d8e88db
MD5 d83f6f29350e02030b5912b666ddbd25
SHA1 bb012abcc5d889b65a2ce5c814bb352d30c92355
SHA512 05b930975dc1ef331ec62d83858caae725bae78d39b915952c720e98c70c1a2fab13dc4648e0e152d72b8c84d8d63d5467b379aa40ae53d08d4de87782ae2daa
SSDEEP 6144:xphjf08aNHGt55ytHuFAqtKqet0mpOvoC+DbyM7JNVSyQj96EjiH73Nygb:1jfGA55yUntK4mpO4yljzibdJ
TLSH
T14AA48E01B4C18031C57A34330679E7BA8ABDA9701B585ACF57D849BBBFA06C1DB3961F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GameManager64.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\GameManager64.dll
Size 616KB
SHA256 448aadef2dc3cb4050df21c2878877e54b345dc146b558a42e566ce4a3409511
MD5 05c83f86b7399e2dc30531ccf0e7930d
SHA1 1c6502d6555b110f0cbb8be60ac6dc0fbcb6c9e4
SHA512 0d9df341a21b80f6470fd2813ce808022d705e691aefd8ca5a0a5f891d5ebb3f81e3facfe5c91e7e457ad0f852b5db6cc8188ace5f2ce344b837ef73fb351eb7
SSDEEP 6144:eXxe8UVoQGKZPjkj7al71p0LqqQ3eaDM4ouLMThV8J2JFJtu34nU7571KTczkGMi:ehe/VoQRhjkjIp0LlQ3MfuceOln7gSzQ
TLSH
T118D48D56B6D041F5E077D139CA978E66FAB2B8144720A7CB03E465AA2F133D14B3F326
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

H9_EASU_sx1_10_sy1_10.bin

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\H9_EASU_sx1_10_sy1_10.bin
Size 364KB
SHA256 8696b1c3952a7ba6fa58497b4c5a38b3bb2ee7c53369aef3d580bd86fd623f23
MD5 94ca64625a866cce1d81f8ad8f5df200
SHA1 0d4bfa5d71d5e4d5ecfcff75835c20efca2e3910
SHA512 6dd8a9ea97397228c51406afd69118e2a0013322e3ede94ef87fb9215ea2b892fda1d4921cace3f8feff0f5a344f0b88abedff25c8fcbc77ee2d2134bed5605a
SSDEEP 6144:01SEtGwCz0gbSgJmbOT9yaMVjufiO2HPq8y6/dL5oW4XNPjJknxAFPh1Pl0Ljm6i:oDVCzbGgJkOT9wufHMS8y6/XqtNq21hf
TLSH
T1F48423EB45CD1B4B65492B3FF2264D09DF9B913A4D51C34BF3E91EBA1D8B31A01A06C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

H9_EASU_sx1_20_sy1_20.bin

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\H9_EASU_sx1_20_sy1_20.bin
Size 364KB
SHA256 c1e25b983f0ed64621d448263b5a6b1638d97f3cfc9c21c736ca301f6bafbd49
MD5 d99f45ba0db0722023e1ccffb348d6c0
SHA1 d42ad1532a0618b079a5cc197f7795b27853b3ba
SHA512 0fb470ede7c1fad401bf2996c4d0f0ae05ffa3072f0ec05a07499042646abb43e09fe2c1086f8351616fcaadb68e4f536d8d65b8a2872e92f726d83778b80eda
SSDEEP 6144:o1SEtGwCz0gbSgJmbOT9yaMVjufiO2HPq8y6/dL5oW4XNPjJknxAFPh1Pl0Ljm6i:UDVCzbGgJkOT9wufHMS8y6/XqtNq21hf
TLSH
T1718423EB45CD1B4B65492B3FF2264D09DF9B913A4D51C34BF3E91EBA1D8B31A01906C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

H9_EASU_sx1_30_sy1_30.bin

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\H9_EASU_sx1_30_sy1_30.bin
Size 364KB
SHA256 174f422d1888b0f12ce16f509cf31cf751c557624eb4a2e45c2e99ea00f0ff82
MD5 c67511a4b5482c97de1a7617b13a9f53
SHA1 3f48c563167e6ba9bd7e6dfcf1cb373e6ce3d8fe
SHA512 de2c03cfdb147025063aca4a13b1da3fbd9d05e235061c3330276d6a4adfa1e0de91f196384d2cb65036e4046be5b28d6658100491fdcc4eb31cb6cda384274b
SSDEEP 6144:81SEtGwCz0gbSgJmbOT9yaMVjufiO2HPq8y6/dL5oW4XNPjJknxAFPh1Pl0Ljm6i:gDVCzbGgJkOT9wufHMS8y6/XqtNq21hf
TLSH
T11C8423EB45CD1B4B65492B3FF2264D09DF9B913A4D51C34BF3E91EBA1D8B31A01A06C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

H9_EASU_sx1_40_sy1_40.bin

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\H9_EASU_sx1_40_sy1_40.bin
Size 364KB
SHA256 65d3532608fd7ef591f5748927318aa291f8a16d9addfedf617bc2ff8fbbe082
MD5 b9c7ee0e2eef3d72dfc9b1be17e85734
SHA1 cda8c419878fc65da05c73366b9e41e79ae40d76
SHA512 3b834c07520ecc5e1a0acb30b78d61490be47a05d1d23090cd34e6a5e13c2c5f6f78a6368d7cd6f2b5387f985705dc6a6ea0388e341513965662f53141af0520
SSDEEP 6144:k1SEtGwCz0gbSgJmbOT9yaMVjufiO2HPq8y6/dL5oW4XNPjJknxAFPh1Pl0Ljm6i:4DVCzbGgJkOT9wufHMS8y6/XqtNq21hf
TLSH
T1FE8423EB45CD1B4B65492B3FF2264D09DF9B913A4D51C34BF3E91EBA1D8B31A01A06C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

H9_EASU_sx1_50_sy1_50.bin

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\H9_EASU_sx1_50_sy1_50.bin
Size 364KB
SHA256 3e6ddc01fd90203b4e5770126727c9b9626f44a6b0b5bc5f35f7497066aab629
MD5 d3adfcc89dcb14d54f980d3822813788
SHA1 b3b5b2243177332dba81ae33348830bbf204b179
SHA512 f6eb0ae1419dcdc5330c80d8002a3ffc03f67de8709a407371719ffb7c119e0e8bc47ad00b8d703cc60cef134f56eee16abdc8957ec7061b54003e742c70ce93
SSDEEP 6144:U1SEtGwCz0gbSgJmbOT9yaMVjufiO2HPq8y6/dL5oW4XNPjJknxAFPh1Pl0Ljm6i:IDVCzbGgJkOT9wufHMS8y6/XqtNq21hf
TLSH
T1038423EB45CD1B4B65492B3FF2264D09DF9B913A4D51C34BF3E91EBA1D8B31A01A06C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

H9_EASU_sx1_60_sy1_60.bin

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\H9_EASU_sx1_60_sy1_60.bin
Size 364KB
SHA256 05141d10a1c55f4ea49090c5b1c9a4f7d54ae9a5db8a4db6f60d2789a9036825
MD5 e038a7ac003a25c2b09593e6fe433afa
SHA1 49394106cec2648390301804f11ad51ad0adab45
SHA512 b87028c533e99ea47f0644feb75edc313fb601d6d9959126d1ac6790399d308acf05cef8a2734dc31d01868771c26ed8b03cbed77c38615749802e9c0b0b9e88
SSDEEP 6144:XcAhRiHoClQHq9r1QTEWj3bO+ZAlBeM3FiUoEt1MAVTpKj19YNBMJbg2wYr+ekj:sAJmPN1cvbXqBoo1MAhawBMJRwYrXkj
TLSH
T19A8423491974456D23C638C3D310BE0FA719FCCE8DB99CE5D21E8BBD4A270962E6835E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

H9_EASU_sx2_00_sy2_00.bin

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\H9_EASU_sx2_00_sy2_00.bin
Size 364KB
SHA256 084942a2723ecdc8e4cf713a8ced91e8a19aa4e3f3bf6171db4f5db7cf7974da
MD5 b1cc4d1c6baf510ae2c8d359851f0f30
SHA1 1f209df6c4a5e0598b5b836c127b6f7ec5991484
SHA512 0dc103284ad59ba0e1bbc4a15cdd0dab433412f949ef9ca449c35494ca6c4c250514e68bc035e90ac05de7f137bf0d5d1ccddb05772d670c3aede04791fbca75
SSDEEP 6144:HcAhRiHoClQHq9r1QTEWj3bO+ZAlBeM3FiUoEt1MAVTpKj19YNBMJbg2wYr+ekj:8AJmPN1cvbXqBoo1MAhawBMJRwYrXkj
TLSH
T1D68423491974456D23C638C3D310BE0FA719FCCE8DB99CE5D21E8BBD4A270962E6835E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amd-smi.exe

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amd-smi.exe
Size 3.5MB
SHA256 048599000a609cf42a7c6ea0b7cc3403f2d39d0f4fe5e2ace0d54a95a35bbd12
MD5 85d3f3c9fdcf74ba4c03747e2834356f
SHA1 d97cc3d7d579c8ab566d9b4527d50de446987c94
SHA512 7c15f25b3a8d006bfdc8cc817b2fc0011f011e865bed74701ee8d20c94dbafdeda8b1fc2a65cf4bffb144db35d9c3d3b212ca26ad2f949922c0e59ce7e1d143d
SSDEEP 49152:Tw0Kg4yuASkssQ+uMVUPjH9Uktsh5wlT4IN1YltqF4lHgSLGp8ixhN3HNAvthFu:EIzQWhd1US
TLSH
T10EF52A2B239955DCD4BBE2BDD25B0F02D36A304A033152C717A856963F2B6E45FBF620
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amd-vulkan32.json

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amd-vulkan32.json
Size 703B
SHA256 d946fbf79830ff8db30503861805d204581fbfc262755aef402635079e2d31f3
MD5 56e01ae405dd10e79cc24e562c9551f7
SHA1 c24798743ca1e88a991fdd40a04a61b59348dc47
SHA512 899eb31e8e6d3fcc7462ae44ded8fe26a1c649176de4eb402ebd5a3bc94c48cb945825d4cf3d2b2d37e527cb334f31d38d3e89f0149caac6fcb61db8ddf55d12
TLSH
T1C001A42AD921AD97017E97554DBC0705F6B3472F5496080BB8FE115D7F39A83440AF1D
MD5 SHA1 SHA512 TLSH

Submit Download

amd-vulkan64.json

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amd-vulkan64.json
Size 703B
SHA256 7633cb92deedd5ae20a04e2b47eae100990116361dc5e9a4d1cec4c145fc44fa
MD5 979930a44a0d09b98d7916a761e2f153
SHA1 ae0a59597d7ff507864ff21c4223ccf037b5fa4c
SHA512 24baf9d369c85f5e529255d3b0bfc685284cbcaa1d55c7aa0c77732ab17fe61714c7345a5cb4a44addae1c4e1ef7dad62bbc70d897233eb058adcf0e535fc66d
TLSH
T1FD01A42ADA229D97017D97554DBC0705F673472F5486080BB8FD115D7F39A83440AE1D
MD5 SHA1 SHA512 TLSH

Submit Download

amdave32.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amdave32.dll
Size 151KB
SHA256 7bdb0a1933a1bfe05d2b2561e5cea99319e0198827ea3b77bd94d3dd9684b0df
MD5 2467f378863762c532a36c62e73efcd5
SHA1 3012b751c49da0ac2788162c7e38acad3c634c56
SHA512 73547a4600e7a405fb0e0450dfc1e6bd24d3fcc74d2ea8177f79dd8f101a940ddb6817849459dbab355d939486af124842f7c47a94a41f051b31cb4b882a3b14
SSDEEP 3072:UibtVchhFW9erFvEkLwj8NuubzvESFq1s9q2xSemho:fb4hhqyXj3vESFq1qqH7e
TLSH
T1B4E37C52B5D08462DDB7483055A4EA739E3EBE911F518EEB239886380F713C1EA3496F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amdave64.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amdave64.dll
Size 175KB
SHA256 8b68ad0227e483e12427f623972ed92e27b024ba43dcc4a3237976bc288e1efe
MD5 ac29ab8f49315cb2ad7dcc0a9eee186f
SHA1 de5f412fd630b6be133b7041c94edcfe90350838
SHA512 1b678d8d158101ced5c7a49bbeb926921e6ae2a7f37f6a01793eb5e79286412bd143ef4cd0e0abe80bb8fac3c28094242ebb2a4e35a0ca4f965d0dd9581d0f94
SSDEEP 3072:cROQpk65lpC+6eWg3+nGQHrpKPDEYztkmC+0em:Ipk65lpoeRmntUuZn7
TLSH
T1CE049D5566B800BAE9779638C5908A03FF72B94207609BFF03A482791F537C29E3DB75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amdenc32.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amdenc32.dll
Size 1.2MB
SHA256 1ee620ae552fc9e4c171c32360845cfc926dfa17f8e9f7e69a246d54feb4bd52
MD5 f91420999e8d49f21f79605564edb812
SHA1 fc0b13df2c578761bdf85ed5701d7ce6cff0945f
SHA512 906170171bfea5bc2b704f377c1cafe2c6d7b9c12fc0182fe97c8dc69c1dbd88fc89d20a9a9db933b58273a5686ed6b70f9636d34722a4644cc65ad7ac6eb482
SSDEEP 24576:L9TvR8rBWZkjTVgEBl1KLALfSE7zSEFaejsaejwaejbaejLaej7aejEaejYA4w2:Lx4rCYP3PMejfejDejOej+ejuejXejYp
TLSH
T1D0450713B38D80DBD16303B598EAE22535767E1A9B2CA9CB7B50173F08797E05E30B65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amdenc64.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amdenc64.dll
Size 1.4MB
SHA256 4b4a87658524a5377ce5f738b8bc5107e68cdd28cf1313b9d78833eae9c090fa
MD5 cab1b1e712dddf81140161fcc1fafd4b
SHA1 9c1421d230d728ae8b179362e0cf2532fdf98855
SHA512 95384bf84980e7be9552fa7ab325ed8d70f43f2710ba3ef20baa6616d9c33eb450e06d98aefe2df783e34287ffc072da3cc5808e3f8bf40b4da01870a75a2d90
SSDEEP 24576:7zyX5j/VXfwRrFnWxbiUALfSE7zSEFaejsaejwaejbaejLaej7aejEaej6ViKw8f:72/VoRxEubP3PMejfejDejOej+ejuejf
TLSH
T19B654922B7EE01C7D06382758DE2D210BAB23D598B2C65DB7B40173F1E7A7E05D39A61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amdhdl32.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amdhdl32.dll
Size 129KB
SHA256 486c10949a6e2488bfac38c181231f64756f02c19db2b5096540cecbb8206d41
MD5 c947cea2fd5855d330e9586c559eb304
SHA1 bd1a95f3a5a52e8d830bb8c6b4d6131894de39f0
SHA512 f5149024a43f64864e8ec145b8d41e8529bcb434b700a256e0cd2479b7fb312ac8a3cb43c33c2d0e5eb3d1d6b7b2ce7656ce529ad7e7379352a4efb4d5930889
SSDEEP 3072:H4PMKWCck+0/C12P2s814woMCsdA8Ot+Sv+UvNQemc:YEicxT8PE+8OtBHO7c
TLSH
T119D39E52B6D080B1D9BE583014A4DA636F3DB651DF909CEB33A556A90F713C0EF34A2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amdhdl64.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amdhdl64.dll
Size 153KB
SHA256 76428a8c8d9c5bd23dd10f98206cf882394cc565fa66b0bddf15477e047c4952
MD5 b709d3c70ff4ab5557c3b77d0daea535
SHA1 249ce530d5cf1dd5319c01d08a0f027856b176ae
SHA512 d79621e8101e09e0a1be6bcecc0976600807b5c3fbd6b0fe23af5de4a87cf60276e92288f6df8a28c51821cfe71bd9ffb7074471922a628f073a8548cf118bbb
SSDEEP 3072:5beqHFuG1et2FiPkRyFoGt3qKxEt/96np401W3em6F:0qHFuG1g1Ygout1np11o76F
TLSH
T114F39E97A2E840E7E8678674C5938E43ABB2F5520B50DBEF03B482590F537C15E3EB25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amdihk32.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amdihk32.dll
Size 204KB
SHA256 28a596ceb0ea677bd6e2b8e4a6cc77a890cb52a76e805815c1ee0432f215c0f6
MD5 862349bf02996c7b8acdb7fd8977e736
SHA1 65e8ef7de2b9819e93d42fb3157fc810d3df1d35
SHA512 01767d2e9712bbc4020ccf6730dbd0a98c1699b64cea2bd6dbc6d3560a66e7e525b1f1ed9c8c70929d38c1b09912d0f55baba4bb6a21bbae90617ea846c3d01f
SSDEEP 3072:vvbCgqhLNIWMkV5qNB+xTBQhHFt4H7Wxw29x21iRaUk7emLO:vzCggJikV5Cwhux1z21iR3i7i
TLSH
T1DB249D01BA908472DA7F5D341974DBB69A3E77640FA08ECB53945DB98F313C09E3492B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amdihk64.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amdihk64.dll
Size 257KB
SHA256 111fccc1579cb61880271891617af73e10d3c053ef2d005668c2d3012936fbf3
MD5 eb6adf06f4acb10ba70c06ce552f4e55
SHA1 0f598c952ba1332b70c8870f3498b11ddbdd362f
SHA512 a8c7c1eb8c8e67d09bd122738adc9ce14768d315dee97b8d276eceebce8619f39f3eab58c567418bd6f6f59264bc9c94b60d87e370de1f8e5f2d5e20e7603ea0
SSDEEP 6144:Pegp2pzADKjMupqbDgF0F0rpz80yOe20HXLVM57+n:mgwzADK4upWDuw0rpUpH2+n
TLSH
T12D448C19A2E0A8F9EC2782B49D938E02F7B2B8C50710D7DF03A5826D9F277D15A7D711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amdlvr32.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amdlvr32.dll
Size 974KB
SHA256 4de8e5e0b837202f313922e4a21de5c81a3764c1e0c54de24788af09520b6568
MD5 e3d9fc228d122867345bf7c34a3c6c78
SHA1 4e28c84fef25ad7c6e2f1f66555bac5d911885dd
SHA512 08b80d83294e36874af03bfeb5ef31df54d9826b7aefb8a764d89ce4153988d87bb058bce86500ce4614ea5847c45743ec601c3ced6160fe941647d377d5d3f6
SSDEEP 12288:gMeyQU3fy4fep7v8Tru+rfLT2HMzf6yFSaA9X7srunP957ukbr6InCI+k+TCRDQV:wp7v+MsrSbBXkqim0VxZ
TLSH
T128258C213681C835E5AF02715E3C9AAE913DEB360BF189DFB3C4666E5D306D25730A1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amdlvr64.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amdlvr64.dll
Size 1.1MB
SHA256 919d623edf1035a1e8e10d0bd6a74575e244c9241e7adf85066f6ac20eca65a6
MD5 3ea34b88462c66b450374e496eb8d06d
SHA1 c2559e1d1e6df74400b59a9743651773a0f40b13
SHA512 c2dfbb9104a133e1304989dd6713cdcb7993bead9416157a4fdd7a7e203502f7ab2ffe5fd8be0801efcbb6b65e86a146bba8524fbdc6ce06ed7da1f15ad70177
SSDEEP 12288:35ZiRzyzn97rAWN+aP9xEFzInkYnosipDc23So/Ge1O:p8U7si1xEFzIkYvyDIbe1O
TLSH
T1FE458D4672A800E9D0BBD138CE975606F7B6B8051731ABDF17A0435A6F27BE04E7E721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amdn1b32.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amdn1b32.dll
Size 16.3MB
SHA256 3c8602e852c09e5783e8c7d7c8513940853f10cfb9e85a9c0ec44a8b3cf2f67a
MD5 af16fc6dc0dcbe1ec148360612ddf7fd
SHA1 d939867c4e9fe995b6d19686c8b542c6c79a721c
SHA512 13132932698bc9b73521c2ce70b1c8c8e36cc6c28ccdaf6c3bdd21eb9eccee0b0971dad611aa61911cf1745e4a863a801f4953b733c15ba1c660c94791bd0aee
SSDEEP 393216:3x0/3CW9Ff0IFQF9GdAt9+dZKqHgNOrkiZfGj:3K68Q6dAtfqHgNOrkMGj
TLSH
T1EA079D12A74101B6C5AD633108FBBB742B7DD7710BB61AC7669825389EE1BF11F32362
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amdn1b64.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amdn1b64.dll
Size 19.3MB
SHA256 d9a9bda8952abee7be8e6f4e91ceb60da09e07cb17794d4ce7cbb0c5652ad615
MD5 b74ab73a44c3ed89d5b6783b153308a8
SHA1 140e049788e36d3bc0d9ae85d686f5afc7087d8e
SHA512 2ef82d865aa9e3babe42d119633f5352de6ad0a947de384a5fe69e0a76b18dfac6bfd9654b0a7b677260e223128f0ca68774d443e93e39d2a590a33d0e3cbc1e
SSDEEP 393216:eRaRsFmQEXsGGKLtyklZx+Y/Cx+yg3OaB9c:T3Owc
TLSH
T12A175B46637401A8C96AB33189B75F25EFB1F4500BB15BCF11A00269AF6BBE41D7B2F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amduve32.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amduve32.dll
Size 174KB
SHA256 339a08b1cbab347bd41ad382e8872d61566414dd6842b8e892072fe906662aed
MD5 8f52e2cc90b14adc44dd3f33abea385e
SHA1 24c1997b3a90553e15b90c755a2bded6a798e8fc
SHA512 a189b1b557a8cfa5f2c46230e5a3e6281b2e6f86f4ba463f852432192abcc9c3a5a5efa7db8ca628e40c647e4e208cd243b11508bc4c9409c26b29233fa92ba5
SSDEEP 3072:v7O+f6GY7F7j7EjpyZrCSrl0ElwtWFD5FG1rye2emS:v7O+yGcn7Ejp8uOGctFG1Gv7S
TLSH
T16D048C027590C062EEB719721CB8F65A9D3DAB465F109CEB23A469384E703D1F734A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amduve64.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\amduve64.dll
Size 207KB
SHA256 c1c13a4cc8a88331576de8337e818a9d0e43ce6796a1589c47fe1c1303406f07
MD5 371b635d334988a285a498b9621b3256
SHA1 238cc4c773b6dad905452205cc322fa2b77ce1d5
SHA512 f7ba68216c6c12f464b258f09d60c98de82947984d90e807e581954dad20c2f56ea6fa15413a89d704333f03fd1b190c4482180eca48c17672cc46563452c783
SSDEEP 3072:mv92G5xGZ6cliudq2nrUzRkE+Ligo7wvzkW6qtemLxubGEM:mV2rZ6cliukNlkTWW6y7L46EM
TLSH
T14F247C56B2F410E9E4BB9274C2819A02FE7275415760EFEF03A482791F637D25E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

atidx9loader32.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\atidx9loader32.dll
Size 115KB
SHA256 326e6cd005e8a5d47c50defd8621bfc81b3085aebd60636e4d287253f58efd4f
MD5 c31374dce55845a29001b6284d843196
SHA1 56e533edfa71acdf8ecadb26fd9ff60637a5c040
SHA512 75053b632b99b48ac5e000a322b047f7e0da6ed3edd9933b9fae9e83d8b84f0d6576d7825d77b5841db2c1dd4b00eebbe014504d2bfa73017a1768de0a12047c
SSDEEP 3072:qomjbpb/0w9u/LRe6wwfQEcs9EcemVmKyhN+:7mxb/tmc5s9Ec7VSm
TLSH
T1B7C37B41B6E0C066DDBE183145A4DA625F3D7A51EFD0DCEB279592A80F303C1EF34A2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

atidxxstub32.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\atidxxstub32.dll
Size 129KB
SHA256 721dfe618720ebccce5767f37c92810413ea74e1801e2a8e27f95bbd02794462
MD5 53c39c3cd44a66007bb018a09f13c2ed
SHA1 a747e40160d82e96b08b6d4bca77bcb17acb6811
SHA512 9a1fbc2b4a9e631c579f886323ac5822202808d28dddb3213c5dc76f06421c8da86a91dd9fe48fafc9ef822d1bbccb18617f5669a4a1c1d030461ebb8e3c1a18
SSDEEP 3072:wnWfIzIFZkwv3zP5b7qwK22Oc2dgLUsu/Pemb:UWw6ZkyzwF2dYUXH7b
TLSH
T1E0D3AD5175D0C461E9BF1C3011A8EA625F3C7A91DF908CEB23A995A90F713C0EF3896E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

atidxxstub64.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\atidxxstub64.dll
Size 158KB
SHA256 ea82d63d4ef12d30e8d1079c28315fbaa95825da1424f7b582e6fd22a15c756a
MD5 32771f80e3d3ce59c453b8d423ff276c
SHA1 5ad4d071b8ab209fd010d0a548392cdd763bb3fc
SHA512 edb0867324a97a603dcadc5c77ad65fdf10f53c2634cecf1961a5fc75a11ff9802476aed05529831c72b465953d4b24c7651429bd522f4f81e1dbd5ce60e00f0
SSDEEP 3072:ZdBPChE12DqWB0rIh41c5qib7nXoI9P1r9ZwAmk95BOZeOZvkJOZv4oEemQ:x6O12Dqf0h5qifHd5xGZ1ZvpZvq7Q
TLSH
T1FDF39D9766E800ABE577863885A39B02EB76B5520B10EBEF03B483590F137C15E3DB35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

atieah32.exe

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\atieah32.exe
Size 412KB
SHA256 67e0e6b98adda285a0cd79a4b2a55946e26eddeb7403cb63aadd017c2fee5863
MD5 f76f296e144793e20c4a2ea22cd1fd48
SHA1 3d654ccda1ae70eaa7adcd6e92125007fdc96f70
SHA512 622b8fe605b7b230364d155a755b9ffe0f5544285f488873678cc996588e8d1fb4aa74c8a787cdd2a1a842bcb0df815b3d2b3f38cf2ff8df1d2314bc3e97f07b
SSDEEP 6144:44cfSyeP4vw3wzRO/oF5HEOmIJ3e6/rUXzW7Obs:uNePR3wzs/oPjIXzUO
TLSH
T1D3948D01F4D0C432D57238320E74E7BA9ABDA5701E555ACF67EC08BBAF247C0A62566F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

atieah64.exe

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\atieah64.exe
Size 546KB
SHA256 b8853bfa4a2112b20b922e8d4c54aa54b53a1691381014f5ecf81b953071809e
MD5 21d39f0cc2155e83295caccc93aca7ef
SHA1 7cdc85b9194e6cd891fc0fec7a37942516857d12
SHA512 316ce34d63fe921fafd71554fb0666efad92d652d5a8019868806ef2c9dc72a39ae384616a0be9f8180daef084171b7c8dd63f2ca8847d30fc5177d8b3737cf1
SSDEEP 12288:GO/nNnizu3jhsbd35yxXc3d/Q5Z7EXrwwwwrfVJ:GO/1jhwd359Nfr
TLSH
T1F2C49D92A3E403F5E0B7D139CA558E45FAB2B8554720E78703E456B52F133A25E3F326
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

atimpc32.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\atimpc32.dll
Size 137KB
SHA256 d0d694db18204b849ad05b560228fb1272d0f3769e596e4cc1b8ef4712370669
MD5 4ca82cf85195adc0c63bdfee96032b21
SHA1 e7f4d8395ed76399af5c9acdc2d61ebd0c914c6a
SHA512 1711a2632e436ba617c3fbb63716e94a25094a434ddd84863270b6d8f643a477ff58e5c1800370f9955f1d90ef4392a1fed0349ca0dafa650aede0d085379a5f
SSDEEP 3072:JsYoe0OmZzkpe6qF0CZwrlOyMnwPLumK0e7qwDEv5emC:GEazkpe6ApZA8/0e7q2EB7C
TLSH
T1F5D39E12B9D084A2DDB75C3055E4EAA39F3DBA421F10DAEB639456790F313C0EB3857A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

atimpc64.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\atimpc64.dll
Size 165KB
SHA256 08977983aa71953f40ca4191f6e6219ee92fdf62b67f63e0f9eb4f0367b1c25a
MD5 8e88b931e730e16f7102f4b067bee4d5
SHA1 2962cf9fea07123718782bf787fc0f09d841c4b7
SHA512 9675820d4ef74fc4d14b70dfbeefa9734a13b02532e3afb6d18635a172530ca3ff397198242a3b38d30368c0613382d143c9fcef7694d80a3ae75e2a1796fa3f
SSDEEP 3072:bK/cfIMu9p8n4j+7iuBjzz4SNuJlu7WfI3/j7780BCHOLka+em:bK/Mu9p8nI+vH4SigXguYp7
TLSH
T140F39E42B2A800EAE5778A34C5949A03FF7279424B51EBDF07A082791F237D19F3DB65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ativvaxy_FJ.dat

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\ativvaxy_FJ.dat
Size 261KB
SHA256 5d29280832a9af0fe48de5ee0c177b2de885b8fb9431fd53d8bb5348c26fcb7b
MD5 e37fb3d6a88fb54c38dd85ecfd1e815c
SHA1 c695b3e3dc21dee95f1f6c043ae794faec8df29b
SHA512 58668ae56dae699ac5a0ce0dc58672295ee50aaec9921e0c12a61d65dfc06103c5699ed3d862ec57ebbd0549f97de75a6b2d05dcdc8ccce60d74d37e98e1f99d
SSDEEP 3072:JAUA+wC6y5rxP3SxtlZiER5GkoVlbntrKLkU9vdp2uCEiC3CPmgE9KQyt+Pmq0QS:eCf5wfRAykKlp2+iC3Co4RtBq0Q1GZpV
TLSH
T1064423D268213ABDAB96B1CF73831454E74F38C75B16634F4B11A960E09FA80F75D478
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ativvaxy_cik.dat

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\ativvaxy_cik.dat
Size 229KB
SHA256 4e5986c9a62243d556523d6e3e72cb414eb275a104853b2436fa20e0d55994bd
MD5 f5ae0661c25330c79f4006ed6830d2cc
SHA1 a1b5587dbf98fdd3949e7e765a8c4706056e89dd
SHA512 15b4f6dff64768181c9239e612b20cc801aa6c9ad1855e947266de8d5a6cd58dba0dec7fe3d45e60cc98ae345e0bc103a94915089023ed90a820d402cd7d2b83
SSDEEP 6144:NDksInP2oQQzxuXn+D7e4HcYsKVZZJQPXdPp6L:NmnPdQQzywrLJQPXdPpo
TLSH
T19D3412ECC4B95E180A5445A10F68BDCABB022CCF67B1052FC57727DCBA9977A3873A11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ativvaxy_nv.dat

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\ativvaxy_nv.dat
Size 394KB
SHA256 5f69c796e5527702fd80401181ed34a8d9e9d2ec17a355a158e7dc6678e77927
MD5 f704aaf12da162e931e7f60275bcdb72
SHA1 f2e6c3acdd89b7c5a052713ca14044ed0a0498c4
SHA512 5464c5e1fb7faec2836beb1fe853e24ab99ae43233a524e22fa135879400da73d955cb281e71935bb34def52bb33798fbea338389b7ffdc03abb12fa2e606abf
SSDEEP 6144:hqdr+iiMK3Hm+tZMlqWoLkCacWGKNLuLT0El7zBfdu4YzNszHyBe4u:EdrVC3vnM8WbDWgElh1lSru
TLSH
T19284CF0EF0941F7FE3D7A3390AA2432AA518C419A706B3CB36116357D5897B0AEF61D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ativvaxy_rv.dat

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\ativvaxy_rv.dat
Size 357KB
SHA256 2cf886fe3a8530d09eab3d535feb62cbd795e33b84e00f22b26905446816c9b1
MD5 431d45e3af9b152930e78dafa3fae571
SHA1 48ffea7c61b84f90ff925a36ce5fbeb5cff82518
SHA512 003eae432f9b6673a6e88378e518560b47f1260f5c2c1ea2db39aad879a63a3156fb1ad11b25a25626fe982732c13290a57eef8651e837b52a43e8c4798e6978
SSDEEP 6144:x6SJrHzYoqWvsYYYybgqOw6S3NY3U7wwo13aImrS0x8df:bJnPLRpRw6CNYkG3dmrSDf
TLSH
T15374DF4EF1941F7BD3D3E27819F18319971CC80AA707A3DB36516316EA983A16EF21C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ativvaxy_vcn4_0_a.dat

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\ativvaxy_vcn4_0_a.dat
Size 386KB
SHA256 9d6bc1f5250b95e4296c6dec18b2bfbdab2d2761a1fce1655fe3a2817212d9b1
MD5 8b1527144a3b4b3608b7f16abbf46886
SHA1 79c8e945b94aedaff7ea8ece8827731e4b51eb34
SHA512 e6275de66e5e88541d4c2d7c1e460e581f56ac4362a4f28ac2497148e2e526c96e585c4488e383aaf40af1f0723852138a29ce5c228f3e7c7a8493bf214c17ef
SSDEEP 6144:5nLC7AIVb5FmCUKub004fTeObKMQJbCGfeHkntbxdTH+lzt5RHcbj5OK8gw:5O3V1UKiLeK/XeHktzH+lPRHcbj5bw
TLSH
T1B084F28492156F7DFBE3C43245E9C7203019580E4B4AA3AB77D8371FD24A694DEFBA90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ativvaxy_vg.dat

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\ativvaxy_vg.dat
Size 565KB
SHA256 4ef922822694b042726cc19362d5c5c935292cf5ec2e4fe241e73a82434bbb8c
MD5 f328614a730d5177c80017c4c1ac7a60
SHA1 e5d1c522b4e6b71f889c0de25be37f1e2dcfffeb
SHA512 8cfefd7067af092bf775d34326dc1728fc45370ff678de6793fb391da3fd9a48ea8becd719d6230991e41c887f6ce5bc00dd580b1451da212051cddeb8eb8933
SSDEEP 12288:e9aK8ziaigxb4gYjeoeWMFhxThtNqYniS6qGhFPHVmQ:KaK8maigxPwiWMZhtNqYniS6qGhFoQ
TLSH
T192C4F10EB0801E6BE3C3E2798DA19318D669E50D9746B3D737917727CA992B08FF21D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ativvaxy_vg20.dat

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\ativvaxy_vg20.dat
Size 370KB
SHA256 b06a2f8e6110ef13b13d36c293fa7a793d1aa736cdd4258a89e45a25d111971a
MD5 7eb39278519ed6edd1d0098f00323dca
SHA1 569adfeb2100fbb5e5deec2075092e23c3e03f14
SHA512 45ef9c3320319265e54f8a114d8b8e64addf80f521ca913bbd99471354abbc260fd26071cb38ddc83e41a94ebc6d30fa82709b49b3c7316a7f8e560d2b697a92
SSDEEP 6144:8AN61atzQPqGMugECZyFqhIMSPvU3bPhfhdcY7ia4r2yzRpe/:8w62zQP8ECZy4hIMSE3tfQas2yz6/
TLSH
T1C184DF0DF1946E3BE3D793BA49E24719562CD40AA707E3D736112326DA9A3F01DF22D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ativvaxy_vi.dat

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\ativvaxy_vi.dat
Size 317KB
SHA256 870622dcf18e92654e070d01666022d12938e24e537a15cb076e62d5bc335f96
MD5 57d18ac2821673607f18f4ccc8983792
SHA1 51fc519449c3eb7e156d4d6cfef949f1d422a302
SHA512 c63c1d31cfdbe9f670a5098bd8746fcebe198f073d2e2f9ec4477c23405054ba0db4dbf8b66b78fa3a9e32d38e4e96693bfbccb5a5a13561c4177dc080389f4d
SSDEEP 6144:1DRx4qrGUngS4qBWUhsxHnwgVobhy3RXJ//QzjdaYes2Z23JYzit:1Db4q3b4sW7nHVYhy3R1/QzjdanBZ257
TLSH
T1086423F1FDEE89A2E647C4915F082EC0EC5C06AB815656C8BF0E8F50BE3D79B241159B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

featuresync.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\featuresync.dll
Size 989KB
SHA256 ce86e19bda74bea17951e9e564fc1157cb1a88509bfafdba4f419fe30158965a
MD5 5704b2fbd1ab7788eeb0c0f3c8473a0c
SHA1 c088b5aff6156eed8c8d77785339363567517a9c
SHA512 b91ccff7a420e2b5dbc20d8157ea4a0ecee7b40b7624e7be849ba6f8a7f86b9e24680f286cd3b0542c09c41ec3281a093028fd0a4a887f5d5f298fb89bc6482d
SSDEEP 12288:nzDCUWpThCORxbILcWySyR8txp+rW20z8Rtv4QoZSGsnWmctNlRxT:z/kELP/20z8n4QoMoNNT
TLSH
T1ED258F1A739802A5E173E17DC99B8E46F7B17846032197CB07F4A79A2F277E04A7E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vulkan32.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\vulkan32.dll
Size 1.4MB
SHA256 89c926130f9dab083740a81c230d974ace7b71f3dbe34fc18fe61a70d778b308
MD5 fa8d41a126503ca334ffcd384ab1b8b1
SHA1 fb6b73203cf1eed5f43d8a0de7210c5239a9ade5
SHA512 511fffbfe98634a7b69c7d253a08055e1395323ba03c3bb37ed1f1d759f25bb10efeee415d0dccdbbcd3c6a8d40e077b1572616bd1a9b2bf71d248e89961aade
SSDEEP 24576:x9DSNa4ON17EL25FHCxF68HUzJqtliZDkQba6g3v0TAE7ysJywC:x9DSNa48HCxg8HU9qtliZDkQba6g3v0o
TLSH
T1CF657D60DF480530DDA752B44AACBB6745BEC0A2973C5ED330DCABE1EA942D1317C7A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vulkan64.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\vulkan64.dll
Size 1.5MB
SHA256 f7de655f0de7251c55293830a4d3914ff94c826d6ea4f594ab2a5eada746e56b
MD5 0c802c902ddee3193de460c446a4f2b0
SHA1 9e9ff28f172cd03cb11442094716dd07b0b87694
SHA512 870a9c80be77108243364e7f942321346048cbc03aa5e9821b174c0064e9e24d1d0535681cb315f033ec969755ddf451ae4deef2ce42c2753a24054447f31724
SSDEEP 24576:Z9QhETWhqd8nKXVtSY0ZiyL9upv1KNlCpDkw7a6g3v0TAE7SJZlGai:ZASWS0Z+pv1KNlCpDkw7a6g3v0TAE7Sq
TLSH
T145756D63DB981649D6B7C27CC9918B4BC5F1F850132047CB01AA4BE9AF43FE859BEB50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vulkaninfo32.exe

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\vulkaninfo32.exe
Size 1.6MB
SHA256 5e3aaa5404c75650bb8499ab3ccb261c7d6f92305ca7d5898356732541f6ac84
MD5 517561b3ebd0a8aaec23186164b6a3ad
SHA1 f590a2eb32ba3ca0fdc45d7de6829b46e3b5f99f
SHA512 a354f09c75f437fb3fdf1352d02f99fbe0a2b3c2597d0a046355fef85742152e8d40ae60ed6c27da2f46313a8e4e30b73a9ce9bb92f2ab20b33ec3790348421d
SSDEEP 49152:KHMqIVKgZbfMJNkY2poPYtli3kjsl82ot4+Ej2Ez+lneVqkPQETZhSGRucwv:08E+YZlkjsl82ot4+Ej2Ez+lneVqkPQL
TLSH
T1BF757B31795A8563CE9641B2526C7B76829DE8210F352AC723881FEEBB545E32F31C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vulkaninfo64.exe

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_GR~1.110\202607~1\Packages\Drivers\Display\WT6A_INF\B417576\vulkaninfo64.exe
Size 2.0MB
SHA256 2d539e5ab5ab101c529e88d65c36cdb263164c0759e13876a75266cce12ec0c7
MD5 45dfe83397f3bc9db61b5c884646063a
SHA1 da126faa15600b80306ccdd3f0774310897248a8
SHA512 b01a4e555b405a1b5ec9f1769eddac67f2c2735ea1e83f1ee7ae2c01036769f2914ba54b19b28f50daceeb0183bc7363e81ade3424bbc0c2fd6e7114d81c4e16
SSDEEP 49152:Qcji3t8YWUJm5GCYNlCSkjsVc2ot4+Ej2ED+l3eFqEfQETQhymRS8O:5j7YNm+kjsVc2ot4+Ej2ED+l3eFqEfQK
TLSH
T151A59F22319C52C5E2BFE17D4A878B47D372780603B09ADB01E509691F1BAE55E3FF62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Install.bat

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236\Install.bat
Size 874B
SHA256 843c8b64b963530efacfc226783a0b0904dee00dcdad98e4917333c31a7f3aba
MD5 6f9aca8c715f1eaabe04ba42a0114af0
SHA1 ffa36dfbcd6f1f68cfb324da1018ff12e6fb94ee
SHA512 9146514bfe444706464685a5dfbe3c4ce01b0b6607b70adce1ef121be85d9296dd158edcba6892a14e3f1390bc9e91b5674404442db44c54ae961ac9a620ecb4
TLSH
T17B112F8D3EC2529670270DDE7AFB500A733CA902710988E03D46714A00AF29A7BEB03C
MD5 SHA1 SHA512 TLSH

Submit Download

amdfendr.inf

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236\Packages\Drivers\Display\WT6A_INF\amdfendr\amdfendr.inf
Size 2KB
SHA256 6c5db50aad03da1339e3f60756a54a2a8395b0e2d87c67c13c5105d5d7a009cb
MD5 021072435a38431664594d31633604d9
SHA1 19be7ad1915da476279e232796fcdb240b381e26
SHA512 0c8c6d5cab9a9b77ed105d49055642c590c44ccf2f6ad42896d0aae74975ef1efb7e01a3958fa1f0827518b7148ea24fe55eb06de535b278c2aad03fc41f8e4e
TLSH
T16B510214834F5DB465FB2B1E7B1769C37909239011E81D9232C851B9EFF8E8D3724DAA
MD5 SHA1 SHA512 TLSH

Submit Download

amdocl.inf

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236\Packages\Drivers\Display\WT6A_INF\amdocl\amdocl.inf
Size 2KB
SHA256 ec963cc0f7b761284cfef3ca5d39943df017f88c3767da6b5cf0843020af05fa
MD5 d627a056c425e22cbec2c2a9231656c9
SHA1 3ca4543d72df600077908d9914363d9f92ebd704
SHA512 0ed18c216bc4a513a5893097297322958c0e9339b86a968c73037fab1f493e55abdc3b2d27cebcdfca90f37808b70e8560a21c263e32c59726e5b098912a0f74
TLSH
T14D51431C5D475A2CE102D702BF57340FF1DBBB9554D4A84FB174498AEB9AF88012D0BB
MD5 SHA1 SHA512 TLSH

Submit Download

amduw23e.inf

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236\Packages\Drivers\Display\WT6A_INF\amduw23e.inf
Size 7KB
SHA256 467605f5a53a6488f31a2ff00ce4e662c8a13d1e165817ccfbb9272d735fc594
MD5 80812428137e688997d514a6b08346a5
SHA1 458814b0166dbceb053cce33e6b2184740055c2c
SHA512 042bc545ad28a6e82e6b2b28a54bca093504b9891889fc4b36446c612ac4b009be6721285a499cc623f87e380c6001fa33cbe767f5a611705d95c7a3b552f4cc
SSDEEP 192:2aAPhHxVYA4lf4us4bYpYvvulVqX0fXuzMt6re:2aWHxVizMt6re
TLSH
T155E12200BF022139D65E8E07EEEE37E1BA5218C512894E9CB1E549C1DE6129D3B4EF2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amdwin-u0417921.inf

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236\Packages\Drivers\Display\WT6A_INF\amdwin\amdwin-u0417921.inf
Size 1KB
SHA256 d6cc3d9b1d903b2001afdd9422e72bcb1bee3e6405496611e801eb7d4bb5ea01
MD5 9f9de7c46765678ae308514f7fc611cf
SHA1 793357938e20e3a8460e2a8a1fa84ef76100fd0b
SHA512 d3fdd775db2b0c18f8f456ed2f1992f171613d0eac4d73a6244884df6fe15789c7767a6db8294a2bcea28bf6b954b4f547be45f9ab7e06d82f9e454537f3ae17
TLSH
T1CA4154964D4B595CD186CB41F9037442E9E572A04ACC918775B402B5EB48F48266C0EE
MD5 SHA1 SHA512 TLSH

Submit Download

u0417921.inf

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236\Packages\Drivers\Display\WT6A_INF\u0417921.inf
Size 131KB
SHA256 67f320282e88b604a157d4220f3cfa76b13a64ddaa7e632a994f95348f65cf84
MD5 f671587c770e767f2ca9c3ef67c56645
SHA1 38b230bfd833f634b37fba6ffe9f4d2147c94b5a
SHA512 420ad6ad9be0813459cf6fff6390df71c63565b27dbde0b22be71e1c64ccdf0e7ed3319a8618067e0ff293638927f509826806a505a59eff2aeb025896a19707
SSDEEP 3072:puVFZcZRlNhZ6Fd5xl5rVWr13I6tAPmFsTec2pkl0g/VEXymNZytEj2n:6rVWr13ItTeWOvNZi
TLSH
T19ED3C472332671E9C583070AF7B936A32CD8C5412ADD2C9EB2B682875417DDF0794F5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uwppair.inf

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\20260707110236\Packages\Drivers\Display\WT6A_INF\uwppair\uwppair.inf
Size 999B
SHA256 7a7d111b9c3664d585b49fd919fd476b0abb7aa37159a1ea13677674094560ce
MD5 f037744f461fab00ecb00b879069154b
SHA1 0cdf952d62edf467506efcc9a68062bc0bb4ccc6
SHA512 10885181a6fa2b9ae35732aa9cbf681ab74893f9685a2ba6548b25160181d73d3fe6d76de9908461c4a4fc748f1d77263f1062d522be382a624ab6c564636807
TLSH
T164111401BC0222B84D46CE904E4621A5F1B612F6D05FACDD32A608046B5691CD73D159
MD5 SHA1 SHA512 TLSH

Submit Download

7z.dll

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\7z.dll
Size 1.8MB
SHA256 5c844f3a05544f2a065bb55e18eebde6421efaeed4bee60e8708283753ebea1d
MD5 11a7c260826eb354bb4ef5c3b07a865f
SHA1 985c30723b523ff7e5be01a349e2cc4052ee3345
SHA512 d108732148a0c88ecfcbba7f8e9be9c50e5341805358e361ecc963f92e1e1384b3797ee6f9866e70784b2bee0bc527b270cbfc5212777c794bcfbc944a1ff37e
SSDEEP 24576:Z8sHeHKHplfu94i55tbhris2CCEnWaWBvYyozGUIjnRnU:Z8Y/Q94iZNrP2t0ZyyIjnRnU
TLSH
T175854B67F6748260D0B7C075C5E2AB9AEE7134868B3096C752819B3D3F17AF6C939720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7z.exe

Path C:\Users\Admin\AppData\Local\Temp\is-S501S.tmp\AMD_Graphic_DriverOnly_ROG_AMD_Z_V32.0.21013.11001_44576\7z.exe
Size 553KB
SHA256 dc5e8fd37ec52d44694f444b71b0df5e10991da2666e191f03affeda6e09d13f
MD5 6dd087189c04907136ba6f1e3af095c8
SHA1 1ad45d3899772ca84e625be244e312df50ad74a9
SHA512 6cb1ff22d588b0f7cc16a5cd09466e65d5892f36db1c1038df0ac536cc6327942cff0eaea2bee495da1af16d1f0a146149a79fab03e63e4ee044355b51dd5260
SSDEEP 6144:hE7cV3iwbAFRWAbd4nf0H05yqE6Hl0ChW0+ksllAXBu0lWGWUJJQ4t0BHQQf+L+T:y7a3iwbihym2g7XO3LWUQfh4CoA
TLSH
T1A5C4F826F6748335D073C0B9C5D2A69AEE7130865B308ACB0286C77C6F676E6D53A731
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dism.log

Path C:\Windows\Logs\DISM\dism.log
Size 289KB
SHA256 46c1a4be4abd4ea982613f6d025247ba22eb1e52cfd52bb703a9e91f16433938
MD5 3d0fbdbf3a41ed0b4f6ec6d5e9149af3
SHA1 e01fd1a049c02258c385bc0b0fbf8758ecccc0f7
SHA512 a000b2cfc10f02a4b51d3d468887235dce2ead84dedb8c127e46ea61a2c83fcb4279d2611baf64da7ee009842b363c412d1b6820d1fdcd33b6df33350ce31b18
SSDEEP 3072:iC1ve5J5mhbbbQbA5u5ia5uA6XQRu2b3abKbbDhPR2pmSBVxk1uVCFrGGByX:iCB
TLSH
T1FE54F05E03AB0DB192498403727A9EF962D7B882B7C8F354772FD29A77C15C6CB1E190
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amdacpbt.inf_amd64_d148e69ae6e24337.ini

Path C:\Windows\System32\DriverStore\FileRepository\amdacpbt.inf_amd64_d148e69ae6e24337.ini
Size 422B
SHA256 782d81acaa96c03a4445f796b05db0e3c9923a0f2365680e4da2b1c8fc53816e
MD5 8589e6b4066faa4b9fd0bb1ec6e0afbf
SHA1 b7128bbf97e03b62ce93f402c498751e54df195a
SHA512 e52fb3c420e274ccb11ad79d7e73e9e9195e067ea43dbfbbcc04a2a6be5a959adb0d934c7d5bbb9dfbf509b8333eaa858d88f574fc7d271eb695e3bfe97871e6
TLSH
T1E7E0231F27A5D1D93D81C407E71CAD73CD95706A4D661EC5370055804F4AD77DD1CA47
MD5 SHA1 SHA512 TLSH

Submit Download

amdacpbtacx.inf_amd64_cc1014593ebe0d0d.ini

Path C:\Windows\System32\DriverStore\FileRepository\amdacpbtacx.inf_amd64_cc1014593ebe0d0d.ini
Size 433B
SHA256 39cee2062332a37b041c348a049ecdae12dab0862b7a6ca145e1af584f3c24d1
MD5 f783efaff3389c51ef2288dd39f791a5
SHA1 ff8776e1fa367be6212ff84b2e5eea2bbcbdc92e
SHA512 4db1428a632de3eb9a970dc4df6aac2b1326a24b096b48015c23a78597f6c799db2489b1619a62fa547ee30458e40aeac83df979763955ca25a5b309a2b0fdd9
TLSH
T1BFE05C2B657462DDE10D9C12421DAA77C9897129066129E673013B805F09A279CA074F
MD5 SHA1 SHA512 TLSH

Submit Download

amdacpbus.inf_amd64_269caf7fcb60be8e.ini

Path C:\Windows\System32\DriverStore\FileRepository\amdacpbus.inf_amd64_269caf7fcb60be8e.ini
Size 1KB
SHA256 1c555dd9698f127662a6900392683b2ee9ce996fabe2cccf0ca9d5b8af660ab8
MD5 a60cd60bdb24dd541e365438aa2da57b
SHA1 e483fbe7b3ffb6aaf24dee81e3545b9bf7f1e45c
SHA512 1db4dc0d96a658c0245000b9a3f2172c07df2e33b4c13c8a97bbc00b9cbc98470f993522340cfef195ea8f2d1d933b7d63bd44a449949c9a90ed96800f91110c
TLSH
T1462144D2AAB2E6D95D0984032309BCBBC9E5B04F1F5408C572886BE05F4AF23DDC865F
MD5 SHA1 SHA512 TLSH

Submit Download

amdacpbus2.inf_amd64_4b3801e627fb2507.ini

Path C:\Windows\System32\DriverStore\FileRepository\amdacpbus2.inf_amd64_4b3801e627fb2507.ini
Size 666B
SHA256 52c72e754f0f8232cebc2960f3b3ddbf0d224717e4ddaa51e0115def0bf608fa
MD5 d8278d78507080e3a813169dd440b9b3
SHA1 3cd0499efff96043ec5592a16b33fe7846192a86
SHA512 8ad497c37a71dcf73672460fd5f7cd80568e1ce388d4f9ac298254830938f74b56aa1cf6749a64b7dbd22ede12043fc79b2a0f12424e626d7303eedf960ab588
TLSH
T147019E566571E2CA750A8526131CA8B2CC8EF2199F251CDB7300A3E0BF83977EDD964F
MD5 SHA1 SHA512 TLSH

Submit Download

amdacprgmext.inf_amd64_bd6c0bac91711d67.ini

Path C:\Windows\System32\DriverStore\FileRepository\amdacprgmext.inf_amd64_bd6c0bac91711d67.ini
Size 433B
SHA256 ee556d4dccd63e40a0e93cd8654d6b87d070b9a4213ef68b269866aae21aba6b
MD5 4fd4ebcf6c7f7553021a0d60d6798532
SHA1 78586d1206fcc9bfa50d347625864267f4226da0
SHA512 9be361370a1d3e13fa57cf4ad5b0dbaaaf85c8ec78dc440c9cfc7e01cafc0b6f8645cb64053690c82e09bcf92aaa33b82ca21b90b918006b0f0f59e731afc413
TLSH
T19BE05C571239A2ED2985A463230CAEBDC9CC709A292A1CC43190B5D80F1135DDE29363
MD5 SHA1 SHA512 TLSH

Submit Download

amdfendr.inf_amd64_1aafc0a9b0693712.ini

Path C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_1aafc0a9b0693712.ini
Size 655B
SHA256 66f7b9271786ca2f4b4d53b9143d4f9cd677119f53b85c3a6f70d74ecaee2012
MD5 c0ac758dd96957ceb12109c8edd15797
SHA1 11e79bd2d5ccf147db2dca9b5c2777af65852997
SHA512 69cfb5000bcbea8c29970dc059f3ad8c30d4c1d713afa6e703ede8b9c5e4f92a1ca20486cb3e2c8c3247977efbf2db205a2937d65d3f965917d689057a27beb1
TLSH
T155F0731B027D52CD09490523931C2C75CCCA73D94D2125F6764443F45F42A17FF58BAB
MD5 SHA1 SHA512 TLSH

Submit Download

amdocl.inf_amd64_282ffd8675014112.ini

Path C:\Windows\System32\DriverStore\FileRepository\amdocl.inf_amd64_282ffd8675014112.ini
Size 2KB
SHA256 892e32082fa047c000af32d68f227f2653e35bfb7225ae7240a8134523a4a048
MD5 3ce6c80209ad0296f946c8055acff43e
SHA1 adf8f2fe1112cd4ae813ff5367b17a0e94ba54bd
SHA512 1dbfe717c1c2b58eb61bf2c4e1a5b71ca42ec2ca71118c700ca0c3965304045529b8ec33b9b5755155cc3f1036001fc79d73f8b8004d58d9820ee712c886085d
TLSH
T11A41ED661238C0CC544741C77B0A2C33D89CF19D25572DE8F3158265CF92DA79D19AA7
MD5 SHA1 SHA512 TLSH

Submit Download

amduw23e.inf_amd64_956e2c18f56eb466.ini

Path C:\Windows\System32\DriverStore\FileRepository\amduw23e.inf_amd64_956e2c18f56eb466.ini
Size 306B
SHA256 5f92fec0612a3f8d59cf6d922986acaeee787eb6dc6510a8f49fa1dd07876b24
MD5 faa2508f9993c66d9fa6adb4818f38a3
SHA1 fcd5c81a2922714add8493ed17a78408f457128a
SHA512 c06b7b9ec5e03fb8d93d227d50f6318cccd8b7ba2a34a7918ca8d77c6f7dbc8914f66d47469781a9df7190084ae563088ae8b4d9831896384e2a7ea59f1861f9
TLSH
T1E6E07223973502EC200210932B1F6A38C62930220E1222D33244C32A8F8F5ABCC69F67
MD5 SHA1 SHA512 TLSH

Submit Download

amdwin-u0417921.inf_amd64_c833f8903d6b5dd1.ini

Path C:\Windows\System32\DriverStore\FileRepository\amdwin-u0417921.inf_amd64_c833f8903d6b5dd1.ini
Size 1KB
SHA256 62be16c809e03f0ade69aa98839094df92473ebfe9447e5d7341e0506c3f18dd
MD5 239853bd5565d5fff10411a8b7ae7ea3
SHA1 4033d1ce7257a374df72b2dc10e2a0e1595b2891
SHA512 9c11ef8719f15c09424c3a5e6a4aaf5f4252a68f2f9052fa38c03905f7478ff4c22804120d124f02e1da86fe469cd997c4ef85dbf0c03dca56ce0c5dc3ad7341
TLSH
T135316D63637880CC544B5987B7193831DC9DB1A92A765ED8B31042659F83D63EC18FA7
MD5 SHA1 SHA512 TLSH

Submit Download

atihdwt6.inf_amd64_21c8ef1919e76bac.ini

Path C:\Windows\System32\DriverStore\FileRepository\atihdwt6.inf_amd64_21c8ef1919e76bac.ini
Size 422B
SHA256 8c6b52f052a99e4c77675647bc7d5ea3a6e2842995be2f1ccfa6d8518cc83141
MD5 efed383db80cc3e01b4ab944cfcb210f
SHA1 654de8274845b9f36b7a0ee44306b2b9c2df2751
SHA512 5b5ce25236c4851d6623467f597b71771f7923bf0b720ea184a4e1c2801594b2f0bffe657011dc6d58fe295d11911e34141f42a124656856941a3297c3c9cfca
TLSH
T13AE0AB738278A1C80C82411E430C0C3ED88C338A069729C532805498EF6DE63EFF6AA3
MD5 SHA1 SHA512 TLSH

Submit Download

u0417921.inf_amd64_49573eccee0e56e0.ini

Path C:\Windows\System32\DriverStore\FileRepository\u0417921.inf_amd64_49573eccee0e56e0.ini
Size 4KB
SHA256 37ed6df243c3a34173feb296e278660b463d05dc4b274c779ea0e1b3e814ff29
MD5 16f9b5485a5cc99ce17a06bfa803642d
SHA1 6ee1b381c6f13244875b18ef87d79d98649d2f84
SHA512 98787215c9dbb839f7b43616d0e28231d0138ab40aae36e570d944a017da185a177a1ee2781547e70896b39da4433008f97abf7a213547713c80bb12bc4592e1
SSDEEP 96:Pw6yR06Ie/nTcIUhLtDX6DwYke8cwzwykVUCKxgGE2ahiE0JtMPP/vE21yX31pG8:PwH0He7cIUhLtDX5YkefSqVUCKxgG3aa
TLSH
T170A1BAA6D23580CC64064586F7163C37DC8CF09F19AF2DACB3258E598F42A67DC18A6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uwppair.inf_amd64_705d3a840c5503a6.ini

Path C:\Windows\System32\DriverStore\FileRepository\uwppair.inf_amd64_705d3a840c5503a6.ini
Size 302B
SHA256 c4edbefa69cc8afa2d9b46319465f419d34661a73fbd60a6e204c798048e1f34
MD5 412ff0160d3a50b2ea3b7d29c3710ae1
SHA1 183cccc95bc9de60e7672e1e042eeba8fccf6cd4
SHA512 ce57c30c019cb2de6edf73a00b3cb0d98e52c8f792a42062fe6150da7632aeb5587380c3b51ace5efd0f89cb3c1deddc4a7460372d4ce781ff420dbb66fafc1c
TLSH
T142E0865A432082AE79026D68666D3376C98D628B042669DF32C4D4610F1AD77CC59186
MD5 SHA1 SHA512 TLSH

Submit Download

dberr.txt

Path C:\Windows\System32\catroot2\dberr.txt
Size 63KB
SHA256 83d080f0525140785ec62763c225decc077bd68444ba44a96a8693dcbb9d47f2
MD5 22c649f04c0f64f8ba2714d408bf8ec0
SHA1 17191e12a2974848cb0654b3c8a2cc8c003eb731
SHA512 9155286965896ad60907609ae8973176ed7e8111b382e52ffee60e449ec8b165b99870299c3486857af3e718e17dc20a37e35dfcdf505fa0899083b22087bb01
SSDEEP 1536:IT0lvdlvUFSUhOdiZsTPNI6YIqht6GRz9tjzyzmAS8M1CxTAR4WBImJq+f7qZ8FB:ECv2
TLSH
T1E3536E45A4ECD608C5B30FB6B256FD72C92A659BB30F4DA530AD6301D8C3B442FBA46D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2228-13-0x0000000000400000-0x000000000071A000-memory.dmp

Download

memory/2228-653-0x0000000000400000-0x000000000071A000-memory.dmp

Download

memory/2228-15-0x0000000000400000-0x000000000071A000-memory.dmp

Download

memory/2228-19-0x0000000000400000-0x000000000071A000-memory.dmp

Download

memory/2228-299-0x0000000000400000-0x000000000071A000-memory.dmp

Download

memory/2228-1016-0x0000000000400000-0x000000000071A000-memory.dmp

Download

memory/3568-12-0x0000000000400000-0x00000000004D8000-memory.dmp

Download

memory/3568-5-0x0000000000400000-0x00000000004D8000-memory.dmp

Download

memory/3568-1017-0x0000000000400000-0x00000000004D8000-memory.dmp

Download

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads