Overview

overview

7

Static

static

3

OCCT 17.0.17.exe

windows10-2004-x64

7

OCCT 17.0.17.exe

windows11-ltsc_2024-x64

7

_Silent Install.cmd

windows10-2004-x64

7

_Silent Install.cmd

windows11-ltsc_2024-x64

7

_Unpack Portable.cmd

windows10-2004-x64

7

_Unpack Portable.cmd

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/08/2026, 00:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OCCT 17.0.17.exe
  • Size 202.2MB
  • Sample260825-ae7rcavfld
  • SHA256 1c67b7ba6d40555554afaebca02c31d8258ecd93e6e078c12a2634913a5b7611
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryinstallerpersistenceprivilege_escalationransomwareupx

Malware Config

Signatures

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 11 IoCs
  • Loads dropped DLL 12 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in System32 directory 54 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Program Files directory 7 IoCs
  • Drops file in Windows directory 10 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

    Inno Setup installer

    installer
  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies registry class 40 IoCs
  • Runs .reg file with regedit 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 62 IoCs
  • Suspicious behavior: LoadsDriver 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 15 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 14 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\OCCT 17.0.17.exe
    "C:\Users\Admin\AppData\Local\Temp\OCCT 17.0.17.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1060
    • C:\Users\Admin\AppData\Local\Temp\is-JCM3O.tmp\OCCT 17.0.17.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-JCM3O.tmp\OCCT 17.0.17.tmp" /SL5="$801EE,211687484,64512,C:\Users\Admin\AppData\Local\Temp\OCCT 17.0.17.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2320
      • C:\Windows\regedit.exe
        "C:\Windows\regedit.exe" /S "C:\Users\Admin\AppData\Local\Temp\settings.reg"
        3⤵
        • Runs .reg file with regedit
        PID:4528
      • C:\Program Files\OCCT\OCCT.exe
        "C:\Program Files\OCCT\OCCT.exe"
        3⤵
        • Executes dropped EXE
        PID:1760
        • C:\Users\Admin\AppData\Local\Temp\OCCT\Resources\OCCTGUI.exe
          C:\Users\Admin\AppData\Local\Temp\OCCT\Resources\OCCTGUI.exe --temp-path="C:\Users\Admin\AppData\Local\Temp\OCCT" --launcher-exe-path="C:\Program Files\OCCT\OCCT.exe"
          4⤵
          • Loads dropped DLL
          • Drops file in Program Files directory
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          PID:3940
        • C:\Users\Admin\AppData\Local\Temp\OCCT\Resources\GPUUNREAL\prereq\dx\DXSETUP.exe
          C:\Users\Admin\AppData\Local\Temp\OCCT\Resources\GPUUNREAL\prereq\dx\DXSETUP.exe /silent
          4⤵
          • Loads dropped DLL
          • Drops file in System32 directory
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious use of WriteProcessMemory
          PID:876
          • C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe
            C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe xinput1_3_x64.inf, Install_Driver
            5⤵
            • Executes dropped EXE
            • Drops file in System32 directory
            • Drops file in Windows directory
            PID:3484
          • C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe
            C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe X3DAudio1_7_x64.inf
            5⤵
            • Executes dropped EXE
            • Drops file in System32 directory
            • Drops file in Windows directory
            PID:5388
          • C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe
            C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe D3DX9_43_x64.inf
            5⤵
            • Executes dropped EXE
            • Drops file in System32 directory
            • Drops file in Windows directory
            PID:5704
          • C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe
            C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe d3dx10_43_x64.inf
            5⤵
            • Executes dropped EXE
            • Drops file in System32 directory
            • Drops file in Windows directory
            PID:6056
          • C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe
            C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe d3dx11_43_x64.inf
            5⤵
            • Executes dropped EXE
            • Drops file in System32 directory
            • Drops file in Windows directory
            PID:4308
          • C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe
            C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe d3dcsx_43_x64.inf
            5⤵
            • Executes dropped EXE
            • Drops file in System32 directory
            • Drops file in Windows directory
            PID:2188
          • C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe
            C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe D3DCompiler_43_x64.inf
            5⤵
            • Executes dropped EXE
            • Drops file in System32 directory
            • Drops file in Windows directory
            PID:5368
          • C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe
            C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe XACT3_7_x64.inf
            5⤵
            • Executes dropped EXE
            • Drops file in System32 directory
            • Drops file in Windows directory
            PID:5740
          • C:\Windows\system32\regsvr32.exe
            C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_7.dll
            5⤵
            • Loads dropped DLL
            • Modifies registry class
            PID:5816
          • C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe
            C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe XAudio2_7_x64.inf
            5⤵
            • Executes dropped EXE
            • Drops file in System32 directory
            • Drops file in Windows directory
            PID:1872
          • C:\Windows\system32\regsvr32.exe
            C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_7.dll
            5⤵
            • Loads dropped DLL
            • Modifies registry class
            PID:3660
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Checks SCSI registry key(s)
    • Suspicious use of AdjustPrivilegeToken
    PID:4780
  • C:\Windows\system32\srtasks.exe
    C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4644

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OCCT.config.json
        • Path C:\Program Files\OCCT\OCCT.config.json
        • Size 97B
        • SHA256 abf7e6bd6e26edc2ddcf3d38962620fdc973dfac38b88f0edf179239d014a811
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        libHarfBuzzSharp.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\OCCTGUI\qckesevb.230\libHarfBuzzSharp.dll
        • Size 1.7MB
        • SHA256 eb76238c9e8e41d44b5a5b18167c4c5b39ca5db4277af5dbe92d730f0fc14a7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libSkiaSharp.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\OCCTGUI\qckesevb.230\libSkiaSharp.dll
        • Size 9.0MB
        • SHA256 9a0d95e8caaa852c70d085af6a40a744242172ad9ea3fd6bc7599875a8a1dbcd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        D3DCompiler_43.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\D3DCompiler_43.dll
        • Size 2.0MB
        • SHA256 2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        D3DCompiler_43.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\D3DCompiler_43.dll
        • Size 2.4MB
        • SHA256 44c3a7e330b54a35a9efa015831392593aa02e7da1460be429d17c3644850e8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        D3DCompiler_43_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\D3DCompiler_43_x64.inf
        • Size 683B
        • SHA256 112ec71e22f87bf8d54b12836a85e168fabed8dde3ffe7eda9eb444ab9fb8348
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        D3DX9_43.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\D3DX9_43.dll
        • Size 2.3MB
        • SHA256 84b900dbd7fa978d6e0caee26fc54f2f61d92c9c75d10b35f00e3e82cd1d67b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        D3DX9_43_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\D3DX9_43_x64.inf
        • Size 667B
        • SHA256 71bd128262424567380c63c9c23eb819212222317026ad44e965ecac2224b848
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FEB2010_X3DAudio_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\FEB2010_X3DAudio_x64.inf
        • Size 815B
        • SHA256 68351f03f4ef83e4b8c359e3e130441081690a1866b838a1b35d64674ef3abbf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        JUN2010_D3DCompiler_43_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\JUN2010_D3DCompiler_43_x64.inf
        • Size 830B
        • SHA256 3e779533a273e3395109c7efac13ba1c804c01b3ddb16938406fbdf90d851216
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        JUN2010_D3DCompiler_43_x86.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\JUN2010_D3DCompiler_43_x86.inf
        • Size 1KB
        • SHA256 5dd568919e1b3cbcb23ab21d0f2d6c1a065070848aba5d2a896da39e55c6cbbf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        JUN2010_XACT_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\JUN2010_XACT_x64.inf
        • Size 920B
        • SHA256 f3c288d84db29f7bc4d2c771341f765b5e1940a4827fcb55a65b48eec83c71d3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        JUN2010_XACT_x86.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\JUN2010_XACT_x86.inf
        • Size 1KB
        • SHA256 ca604ce9d2ee43a09b39b23a6a2a048b1a79d85c7d78679cc73aacc75cf7a62e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        JUN2010_XAudio_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\JUN2010_XAudio_x64.inf
        • Size 923B
        • SHA256 1a0f1b929724f8b71d5ce922f19b9d539d2d804c89af947d5927b049ef0fd3d8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        JUN2010_XAudio_x86.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\JUN2010_XAudio_x86.inf
        • Size 1KB
        • SHA256 d786d06a709d5dc26067132b9735fc317763fcf8064442d6f77f65012ba179da
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        JUN2010_d3dcsx_43_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\JUN2010_d3dcsx_43_x64.inf
        • Size 815B
        • SHA256 5289b5ad22146d7cc0c35cdb2c9662742693550de8f013d1ec40e944288d155a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        JUN2010_d3dcsx_43_x86.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\JUN2010_d3dcsx_43_x86.inf
        • Size 1KB
        • SHA256 d5200b332caf4fff25eb3d224527a3944878c5c3849512779a2afcfeae4c3ca1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        JUN2010_d3dx10_43_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\JUN2010_d3dx10_43_x64.inf
        • Size 815B
        • SHA256 a65f370a741d62c2be0ca588758d089dd976092cb910bb6b1b7d008741e18377
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        JUN2010_d3dx10_43_x86.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\JUN2010_d3dx10_43_x86.inf
        • Size 1KB
        • SHA256 4d4263cbb11858c727824c4a071f992909675719be3076b4a47852bf6affd862
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        JUN2010_d3dx11_43_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\JUN2010_d3dx11_43_x64.inf
        • Size 815B
        • SHA256 2c4cf75b76203cba6378693668c8c00b564871c8bfd7fbda01e1e841477b2a3b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        JUN2010_d3dx11_43_x86.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\JUN2010_d3dx11_43_x86.inf
        • Size 1KB
        • SHA256 3925c924eb4ec4f5a643b2d14d2eda603341fbbd22118cdd8ae04aaa96f443c0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        JUN2010_d3dx9_43_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\JUN2010_d3dx9_43_x64.inf
        • Size 812B
        • SHA256 272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        JUN2010_d3dx9_43_x86.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\JUN2010_d3dx9_43_x86.inf
        • Size 1KB
        • SHA256 6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        X3DAudio1_7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\X3DAudio1_7.dll
        • Size 24KB
        • SHA256 9460709339701ad471a5cabe6365355f4d586dc4fcb86507c1331839dc555446
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        X3DAudio1_7_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\X3DAudio1_7_x64.inf
        • Size 689B
        • SHA256 1da8585eb518801a26ce5a535620ad7bb4177dfccc8e468c8a003db064849d04
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        XACT3_7_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\XACT3_7_x64.inf
        • Size 732B
        • SHA256 40f7353db82efd845b225bdf13000379a780615de09577280dbf5003ea9c0324
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        XAPOFX1_5.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\XAPOFX1_5.dll
        • Size 72KB
        • SHA256 becfdcd6b16523573cb52df87aa7d993f1b345ba903d0618c3b36535c3800197
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        XAPOFX1_5.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\XAPOFX1_5.dll
        • Size 75KB
        • SHA256 e47dcf74d50403b376c562e4121e359e5886e42fcc60b3fa8ba53e6826854c49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        XAudio2_7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\XAudio2_7.dll
        • Size 514KB
        • SHA256 d1690b602cb317f7f1e1e13e3fc5819ad8b5b38a92d812078afb1b408ccc4b69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        XAudio2_7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\XAudio2_7.dll
        • Size 506KB
        • SHA256 f8636ccc37bbfc84107992b60e4226eb7237417112267ed64b08f72983ac4314
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        XAudio2_7_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\XAudio2_7_x64.inf
        • Size 755B
        • SHA256 de3f252677d45a08de8a9bd28d49afd054fecaec58aa722ca3e2b2bd9dd20b0a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        apr2007_xinput_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\apr2007_xinput_x64.inf
        • Size 860B
        • SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        d3dcsx_43.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\d3dcsx_43.dll
        • Size 1.8MB
        • SHA256 b46a44b6fce8f141c9e02798645db2ee0da5c69ea71195e29f83a91a355fa2ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcsx_43.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\d3dcsx_43.dll
        • Size 1.8MB
        • SHA256 3c9e1b87f2763f58402b5104d21e0d9d5db352fcccf7801eaa4cd1f5dbc20945
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcsx_43_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\d3dcsx_43_x64.inf
        • Size 663B
        • SHA256 8a623bac05c6508042dd01fccd53f2771306cbb9b339404b91fe106c3c7dbaf2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        d3dx10_43.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\d3dx10_43.dll
        • Size 459KB
        • SHA256 56fcd13650fd1f075743154e8c48465dd68a236ab8960667d75373139d2631bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dx10_43.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\d3dx10_43.dll
        • Size 499KB
        • SHA256 9bffa1ea073d79e9954cb398fc91b93ed9dc79ed2205995d4b949f1cc2ad3bd1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dx10_43_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\d3dx10_43_x64.inf
        • Size 663B
        • SHA256 e36537b28026f4bf193788fe45605e9b5715117cbe4f638a9384aa3964768855
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        d3dx11_43.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\d3dx11_43.dll
        • Size 242KB
        • SHA256 492e960cb3ccfc8c25fc83f7c464ba77c86a20411347a1a9b3e5d3e8c9180a8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dx11_43.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\d3dx11_43.dll
        • Size 270KB
        • SHA256 981e42629df751217406e7150477cddc853b79abd6a8568a1566298ed8f7bd59
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dx11_43_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\d3dx11_43_x64.inf
        • Size 663B
        • SHA256 8572aa222c39fa63c22354da8114d95d06fb1f0c6a91bfbb489105deeabd6a83
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        d3dx9_43.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\d3dx9_43.dll
        • Size 1.9MB
        • SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxdllreg_x86.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\dxdllreg_x86.inf
        • Size 724B
        • SHA256 54e098294ef0ad3b14b9c77642838b5992fe4573099d8397a1ef566d9e36da40
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dxupdate.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\dxupdate.dll
        • Size 173KB
        • SHA256 fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxupdate.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\dxupdate.inf
        • Size 12KB
        • SHA256 93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        infinst.exe
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe
        • Size 68KB
        • SHA256 34ab99536ea59ad60ba6efda3ea6d18291ef096a0bab3664248d6045805da0ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        infinst.exe
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe
        • Size 74KB
        • SHA256 d808bb408a4bd695a9793e70b1c61637e008ac11174dbe1373481e2bdb0c9299
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        infinst.exe
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\infinst.exe
        • Size 81KB
        • SHA256 8c62fe8466d9a24a0f1924de37b05d672a826454804086cddc7ed87c020e67ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xactengine3_7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\xactengine3_7.dll
        • Size 234KB
        • SHA256 d7b1cf58898046c430d49cf8f778e4898280f4709340c3938d3139894166fe8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xactengine3_7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\xactengine3_7.dll
        • Size 172KB
        • SHA256 31b7d87c0b7a5e44ec6fc935f11ec9ba949d8161c667f8396896ac92e9bc6745
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xinput1_3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\xinput1_3.dll
        • Size 104KB
        • SHA256 756cad002e1553cfa1a91ebe8c1b9380ffabe0b4b1916c4a4db802396ddfbef8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xinput1_3_x64.inf
        • Path C:\Users\Admin\AppData\Local\Temp\DX5361.tmp\xinput1_3_x64.inf
        • Size 669B
        • SHA256 0d411d9424128f19fed2daa95a2983b4b29197f022a754f59d0c7740ad654cca
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        HWiNFO_x64_215.sys
        • Path C:\Users\Admin\AppData\Local\Temp\HWiNFO_x64_215.sys
        • Size 58KB
        • SHA256 cc9d399816d0f04548545fa2cc4bb9e8d141624601ac271315cbe92f6e763a1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ISTask.dll
        • Path C:\Users\Admin\AppData\Local\Temp\is-EQNAM.tmp\ISTask.dll
        • Size 66KB
        • SHA256 e916bdf232744e00cbd8d608168a019c9f41a68a7e8390aa48cfb525276c483d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VclStylesInno.dll
        • Path C:\Users\Admin\AppData\Local\Temp\is-EQNAM.tmp\VclStylesInno.dll
        • Size 3.0MB
        • SHA256 0e93313f42084d804b9ac4be53d844e549cfcaf19e6f276a3b0f82f01b9b2246
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OCCT 17.0.17.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\is-JCM3O.tmp\OCCT 17.0.17.tmp
        • Size 911KB
        • SHA256 25e18cc50376edefd666a0d98e98f8834dcb1503ee85dbb2fd6733b104533e2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 64KB
        • SHA256 a086022edded7a0b03ac5d2317ad0f8b7b8aae8ba817acdf6759ce978828d474
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 65KB
        • SHA256 a72e9f02f58069864c4efbdb2ffd086d9af5751f0deb49f931071125f26c9728
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 67KB
        • SHA256 fb7e5a36732324bcd683136aa1779c4f8995257ffb9dac795b95555974aa128c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 69KB
        • SHA256 673adb372db1ac8addc2862fe75fd84b2ea94cad2f0e1dda52e90e4a2ed40cc1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 71KB
        • SHA256 96124d90d760627efbd49d90b74404715fe00d00859ff668736bc02a9fd83353
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 73KB
        • SHA256 0e0c9529c9f01452c01591f420e09c8dd1912d9dbbb5764e0067ad73acfafe8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 74KB
        • SHA256 91f63a921f02984753b7a357220dededfa48bf5a05ab69f7494eae727afc4648
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 77KB
        • SHA256 a9de92b34a4f8ec01e82281bc0724f80853bf56913f351c7e4dd919aa58a474a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 77KB
        • SHA256 852afaaa500529ce77b3853132bcdede23bcfcfdf6b5cb22e5dfb63dcb25219d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 80KB
        • SHA256 b805ee1e889bff59f764a3d08b6e48a2569fd4b61bcecfe76c533125d28e9fbe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 80KB
        • SHA256 0263b7503f17e62505733420094d8952e1eba1b9b2b8ec49d30dc60e7e7681b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 83KB
        • SHA256 633963210cca8c06b2e70e961018bceaa4b3eadc097c4770069d2be5a31036c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 474B
        • SHA256 e747173e11fe2351396380696d6405599aaaf840b7a4765318613291e443b99f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 88KB
        • SHA256 79748e033877a27b099387768a7ea6eab27b86688f4fd9c6df712be57846f3a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 91KB
        • SHA256 88d81e87bc889faec1c1d8365ed559621a09b6a5425151bccd32194a7f3c45e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectX.log
        • Path C:\Windows\Logs\DirectX.log
        • Size 24KB
        • SHA256 c25c315ae39f410eb1d46c343d0591f1a372ec61f3b4cda93daa28cd08fbdfc1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1060-0-0x0000000000400000-0x0000000000417000-memory.dmp
        Download

        memory/1060-96-0x0000000000400000-0x0000000000417000-memory.dmp
        Download

        memory/2320-45-0x0000000007880000-0x0000000007881000-memory.dmp
        Download

        memory/2320-42-0x0000000007870000-0x0000000007871000-memory.dmp
        Download

        memory/2320-100-0x00000000073A0000-0x00000000076BA000-memory.dmp
        Download

        memory/2320-128-0x00000000073A0000-0x00000000076BA000-memory.dmp
        Download

        memory/2320-92-0x00000000073A0000-0x00000000076BA000-memory.dmp
        Download

        memory/2320-91-0x00000000022A0000-0x00000000022A1000-memory.dmp
        Download

        memory/2320-90-0x00000000073A0000-0x00000000076BA000-memory.dmp
        Download

        memory/2320-89-0x00000000073A0000-0x00000000076BA000-memory.dmp
        Download

        memory/2320-88-0x00000000073A0000-0x00000000076BA000-memory.dmp
        Download

        memory/2320-87-0x00000000073A0000-0x00000000076BA000-memory.dmp
        Download

        memory/2320-34-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-27-0x0000000007820000-0x0000000007821000-memory.dmp
        Download

        memory/2320-28-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-29-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-30-0x0000000007830000-0x0000000007831000-memory.dmp
        Download

        memory/2320-31-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-32-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-33-0x0000000007840000-0x0000000007841000-memory.dmp
        Download

        memory/2320-35-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-36-0x0000000007850000-0x0000000007851000-memory.dmp
        Download

        memory/2320-37-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-38-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-39-0x0000000007860000-0x0000000007861000-memory.dmp
        Download

        memory/2320-40-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-81-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-73-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-75-0x0000000007920000-0x0000000007921000-memory.dmp
        Download

        memory/2320-76-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-78-0x000000000753E000-0x000000000753F000-memory.dmp
        Download

        memory/2320-79-0x0000000007930000-0x0000000007931000-memory.dmp
        Download

        memory/2320-80-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-82-0x0000000007940000-0x0000000007941000-memory.dmp
        Download

        memory/2320-83-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-84-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-77-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-74-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-41-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-95-0x00000000073A0000-0x00000000076BA000-memory.dmp
        Download

        memory/2320-43-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-44-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-48-0x0000000007890000-0x0000000007891000-memory.dmp
        Download

        memory/2320-49-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-50-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-51-0x00000000078A0000-0x00000000078A1000-memory.dmp
        Download

        memory/2320-52-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-53-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-54-0x00000000078B0000-0x00000000078B1000-memory.dmp
        Download

        memory/2320-55-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-56-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-57-0x00000000078C0000-0x00000000078C1000-memory.dmp
        Download

        memory/2320-58-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-59-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-61-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-62-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-63-0x00000000078E0000-0x00000000078E1000-memory.dmp
        Download

        memory/2320-64-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-65-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-66-0x00000000078F0000-0x00000000078F1000-memory.dmp
        Download

        memory/2320-67-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-68-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-69-0x0000000007900000-0x0000000007901000-memory.dmp
        Download

        memory/2320-70-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-71-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-72-0x0000000007910000-0x0000000007911000-memory.dmp
        Download

        memory/2320-60-0x00000000078D0000-0x00000000078D1000-memory.dmp
        Download

        memory/2320-46-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-47-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-26-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-25-0x00000000076C0000-0x0000000007800000-memory.dmp
        Download

        memory/2320-24-0x0000000007810000-0x0000000007811000-memory.dmp
        Download

        memory/2320-22-0x00000000073A0000-0x00000000076BA000-memory.dmp
        Download

        memory/2320-16-0x0000000007170000-0x0000000007186000-memory.dmp
        Download

        memory/2320-5-0x00000000022A0000-0x00000000022A1000-memory.dmp
        Download

        memory/3940-1930-0x0000000180000000-0x00000001806AA000-memory.dmp
        Download

        memory/3940-1945-0x0000000180000000-0x00000001806AA000-memory.dmp
        Download