Overview

overview

7

Static

static

3

OCCT 17.0.17.exe

windows10-2004-x64

7

OCCT 17.0.17.exe

windows11-ltsc_2024-x64

7

_Silent Install.cmd

windows10-2004-x64

7

_Silent Install.cmd

windows11-ltsc_2024-x64

7

_Unpack Portable.cmd

windows10-2004-x64

7

_Unpack Portable.cmd

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    165s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    25/08/2026, 00:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    _Silent Install.cmd
  • Size 1KB
  • Sample260825-ae7rcavfld
  • SHA256 247c212eaf760f94582ff1c0454c20ba5ac3f9eb624300e45c1b3ab2a892914f
  • MD5 SHA1 SHA512 TLSH
Score
7/10
discoveryexecutioninstallerpersistenceprivilege_escalationransomwareupx

Malware Config

Signatures

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 13 IoCs
  • Loads dropped DLL 16 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in System32 directory 54 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Program Files directory 7 IoCs
  • Drops file in Windows directory 10 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

    installer
  • Checks SCSI registry key(s) 3 TTPs 8 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies registry class 40 IoCs
  • Runs .reg file with regedit 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 18 IoCs
  • Suspicious use of FindShellTrayWindow 45 IoCs
  • Suspicious use of SendNotifyMessage 43 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 16 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\_Silent Install.cmd"
    1⤵
    • Executes a command shell one-liner
    • Suspicious use of WriteProcessMemory
    PID:3328
    • C:\Users\Admin\AppData\Local\Temp\OCCT 17.0.17.exe
      "OCCT 17.0.17.exe" /SILENT
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4716
      • C:\Users\Admin\AppData\Local\Temp\is-GTTSE.tmp\OCCT 17.0.17.tmp
        "C:\Users\Admin\AppData\Local\Temp\is-GTTSE.tmp\OCCT 17.0.17.tmp" /SL5="$A01C0,211687484,64512,C:\Users\Admin\AppData\Local\Temp\OCCT 17.0.17.exe" /SILENT
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in Program Files directory
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:4344
        • C:\Windows\regedit.exe
          "C:\Windows\regedit.exe" /S "C:\Users\Admin\AppData\Local\Temp\settings.reg"
          4⤵
          • Runs .reg file with regedit
          PID:1428
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:2500
    • C:\Program Files\OCCT\OCCT.exe
      "C:\Program Files\OCCT\OCCT.exe"
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:1552
      • C:\Users\Admin\AppData\Local\Temp\OCCT\Resources\OCCTGUI.exe
        C:\Users\Admin\AppData\Local\Temp\OCCT\Resources\OCCTGUI.exe --temp-path="C:\Users\Admin\AppData\Local\Temp\OCCT" --launcher-exe-path="C:\Program Files\OCCT\OCCT.exe"
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in Program Files directory
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        PID:2496
      • C:\Users\Admin\AppData\Local\Temp\OCCT\Resources\GPUUNREAL\prereq\dx\DXSETUP.exe
        C:\Users\Admin\AppData\Local\Temp\OCCT\Resources\GPUUNREAL\prereq\dx\DXSETUP.exe /silent
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in System32 directory
        • Drops file in Windows directory
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:4672
        • C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe xinput1_3_x64.inf, Install_Driver
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:1584
        • C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe X3DAudio1_7_x64.inf
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:4144
        • C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe D3DX9_43_x64.inf
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:808
        • C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe d3dx10_43_x64.inf
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:1544
        • C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe d3dx11_43_x64.inf
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:2804
        • C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe d3dcsx_43_x64.inf
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:3520
        • C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe D3DCompiler_43_x64.inf
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:5300
        • C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe XACT3_7_x64.inf
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:2428
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_7.dll
          3⤵
          • Loads dropped DLL
          • Modifies registry class
          PID:3808
        • C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe XAudio2_7_x64.inf
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:3080
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_7.dll
          3⤵
          • Loads dropped DLL
          • Modifies registry class
          PID:1844
    • C:\Windows\system32\vssvc.exe
      C:\Windows\system32\vssvc.exe
      1⤵
      • Checks SCSI registry key(s)
      • Suspicious use of AdjustPrivilegeToken
      PID:2960
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
      1⤵
        PID:4300
      • C:\Windows\system32\srtasks.exe
        C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:5080
      • C:\Windows\system32\taskmgr.exe
        "C:\Windows\system32\taskmgr.exe" /4
        1⤵
        • Checks SCSI registry key(s)
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of SetWindowsHookEx
        PID:5780

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            OCCT.config.json
            • Path C:\Program Files\OCCT\OCCT.config.json
            • Size 97B
            • SHA256 abf7e6bd6e26edc2ddcf3d38962620fdc973dfac38b88f0edf179239d014a811
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            OCCT.lnk
            • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OCCT\OCCT.lnk
            • Size 822B
            • SHA256 329beb6e714301e9771961ee10d874ce0c5cf2b951014f93618d1052f9ae3a0d
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            libHarfBuzzSharp.dll
            • Path C:\Users\Admin\AppData\Local\Temp\.net\OCCTGUI\qckesevb.230\libHarfBuzzSharp.dll
            • Size 1.7MB
            • SHA256 eb76238c9e8e41d44b5a5b18167c4c5b39ca5db4277af5dbe92d730f0fc14a7d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            libSkiaSharp.dll
            • Path C:\Users\Admin\AppData\Local\Temp\.net\OCCTGUI\qckesevb.230\libSkiaSharp.dll
            • Size 9.0MB
            • SHA256 9a0d95e8caaa852c70d085af6a40a744242172ad9ea3fd6bc7599875a8a1dbcd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            D3DCompiler_43.dll
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\D3DCompiler_43.dll
            • Size 2.0MB
            • SHA256 2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            D3DX9_43.dll
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\D3DX9_43.dll
            • Size 2.3MB
            • SHA256 84b900dbd7fa978d6e0caee26fc54f2f61d92c9c75d10b35f00e3e82cd1d67b4
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            D3DX9_43_x64.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\D3DX9_43_x64.inf
            • Size 667B
            • SHA256 71bd128262424567380c63c9c23eb819212222317026ad44e965ecac2224b848
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            FEB2010_X3DAudio_x64.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\FEB2010_X3DAudio_x64.inf
            • Size 815B
            • SHA256 68351f03f4ef83e4b8c359e3e130441081690a1866b838a1b35d64674ef3abbf
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            JUN2010_D3DCompiler_43_x64.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\JUN2010_D3DCompiler_43_x64.inf
            • Size 830B
            • SHA256 3e779533a273e3395109c7efac13ba1c804c01b3ddb16938406fbdf90d851216
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            JUN2010_D3DCompiler_43_x86.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\JUN2010_D3DCompiler_43_x86.inf
            • Size 1KB
            • SHA256 5dd568919e1b3cbcb23ab21d0f2d6c1a065070848aba5d2a896da39e55c6cbbf
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            JUN2010_XACT_x64.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\JUN2010_XACT_x64.inf
            • Size 920B
            • SHA256 f3c288d84db29f7bc4d2c771341f765b5e1940a4827fcb55a65b48eec83c71d3
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            JUN2010_XACT_x86.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\JUN2010_XACT_x86.inf
            • Size 1KB
            • SHA256 ca604ce9d2ee43a09b39b23a6a2a048b1a79d85c7d78679cc73aacc75cf7a62e
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            JUN2010_XAudio_x64.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\JUN2010_XAudio_x64.inf
            • Size 923B
            • SHA256 1a0f1b929724f8b71d5ce922f19b9d539d2d804c89af947d5927b049ef0fd3d8
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            JUN2010_XAudio_x86.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\JUN2010_XAudio_x86.inf
            • Size 1KB
            • SHA256 d786d06a709d5dc26067132b9735fc317763fcf8064442d6f77f65012ba179da
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            JUN2010_d3dcsx_43_x64.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\JUN2010_d3dcsx_43_x64.inf
            • Size 815B
            • SHA256 5289b5ad22146d7cc0c35cdb2c9662742693550de8f013d1ec40e944288d155a
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            JUN2010_d3dcsx_43_x86.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\JUN2010_d3dcsx_43_x86.inf
            • Size 1KB
            • SHA256 d5200b332caf4fff25eb3d224527a3944878c5c3849512779a2afcfeae4c3ca1
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            JUN2010_d3dx10_43_x64.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\JUN2010_d3dx10_43_x64.inf
            • Size 815B
            • SHA256 a65f370a741d62c2be0ca588758d089dd976092cb910bb6b1b7d008741e18377
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            JUN2010_d3dx10_43_x86.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\JUN2010_d3dx10_43_x86.inf
            • Size 1KB
            • SHA256 4d4263cbb11858c727824c4a071f992909675719be3076b4a47852bf6affd862
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            JUN2010_d3dx11_43_x64.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\JUN2010_d3dx11_43_x64.inf
            • Size 815B
            • SHA256 2c4cf75b76203cba6378693668c8c00b564871c8bfd7fbda01e1e841477b2a3b
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            JUN2010_d3dx11_43_x86.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\JUN2010_d3dx11_43_x86.inf
            • Size 1KB
            • SHA256 3925c924eb4ec4f5a643b2d14d2eda603341fbbd22118cdd8ae04aaa96f443c0
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            JUN2010_d3dx9_43_x64.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\JUN2010_d3dx9_43_x64.inf
            • Size 812B
            • SHA256 272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            JUN2010_d3dx9_43_x86.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\JUN2010_d3dx9_43_x86.inf
            • Size 1KB
            • SHA256 6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            X3DAudio1_7.dll
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\X3DAudio1_7.dll
            • Size 24KB
            • SHA256 9460709339701ad471a5cabe6365355f4d586dc4fcb86507c1331839dc555446
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            X3DAudio1_7_x64.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\X3DAudio1_7_x64.inf
            • Size 689B
            • SHA256 1da8585eb518801a26ce5a535620ad7bb4177dfccc8e468c8a003db064849d04
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            XAPOFX1_5.dll
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\XAPOFX1_5.dll
            • Size 72KB
            • SHA256 becfdcd6b16523573cb52df87aa7d993f1b345ba903d0618c3b36535c3800197
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            XAudio2_7.dll
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\XAudio2_7.dll
            • Size 514KB
            • SHA256 d1690b602cb317f7f1e1e13e3fc5819ad8b5b38a92d812078afb1b408ccc4b69
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            apr2007_xinput_x64.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\apr2007_xinput_x64.inf
            • Size 860B
            • SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            d3dcsx_43.dll
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\d3dcsx_43.dll
            • Size 1.8MB
            • SHA256 b46a44b6fce8f141c9e02798645db2ee0da5c69ea71195e29f83a91a355fa2ca
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            d3dx10_43.dll
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\d3dx10_43.dll
            • Size 459KB
            • SHA256 56fcd13650fd1f075743154e8c48465dd68a236ab8960667d75373139d2631bf
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            d3dx10_43.dll
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\d3dx10_43.dll
            • Size 499KB
            • SHA256 9bffa1ea073d79e9954cb398fc91b93ed9dc79ed2205995d4b949f1cc2ad3bd1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            d3dx10_43_x64.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\d3dx10_43_x64.inf
            • Size 663B
            • SHA256 e36537b28026f4bf193788fe45605e9b5715117cbe4f638a9384aa3964768855
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            d3dx11_43.dll
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\d3dx11_43.dll
            • Size 242KB
            • SHA256 492e960cb3ccfc8c25fc83f7c464ba77c86a20411347a1a9b3e5d3e8c9180a8d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            d3dx11_43.dll
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\d3dx11_43.dll
            • Size 270KB
            • SHA256 981e42629df751217406e7150477cddc853b79abd6a8568a1566298ed8f7bd59
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            d3dx11_43_x64.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\d3dx11_43_x64.inf
            • Size 663B
            • SHA256 8572aa222c39fa63c22354da8114d95d06fb1f0c6a91bfbb489105deeabd6a83
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            d3dx9_43.dll
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\d3dx9_43.dll
            • Size 1.9MB
            • SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dxdllreg_x86.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\dxdllreg_x86.inf
            • Size 724B
            • SHA256 54e098294ef0ad3b14b9c77642838b5992fe4573099d8397a1ef566d9e36da40
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dxupdate.dll
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\dxupdate.dll
            • Size 173KB
            • SHA256 fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dxupdate.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\dxupdate.inf
            • Size 12KB
            • SHA256 93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            infinst.exe
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe
            • Size 68KB
            • SHA256 34ab99536ea59ad60ba6efda3ea6d18291ef096a0bab3664248d6045805da0ec
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            infinst.exe
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe
            • Size 74KB
            • SHA256 d808bb408a4bd695a9793e70b1c61637e008ac11174dbe1373481e2bdb0c9299
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            infinst.exe
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\infinst.exe
            • Size 81KB
            • SHA256 8c62fe8466d9a24a0f1924de37b05d672a826454804086cddc7ed87c020e67ff
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            xactengine3_7.dll
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\xactengine3_7.dll
            • Size 234KB
            • SHA256 d7b1cf58898046c430d49cf8f778e4898280f4709340c3938d3139894166fe8d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            xinput1_3.dll
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\xinput1_3.dll
            • Size 104KB
            • SHA256 756cad002e1553cfa1a91ebe8c1b9380ffabe0b4b1916c4a4db802396ddfbef8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            xinput1_3_x64.inf
            • Path C:\Users\Admin\AppData\Local\Temp\DXF771.tmp\xinput1_3_x64.inf
            • Size 669B
            • SHA256 0d411d9424128f19fed2daa95a2983b4b29197f022a754f59d0c7740ad654cca
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            HWiNFO_x64_215.sys
            • Path C:\Users\Admin\AppData\Local\Temp\HWiNFO_x64_215.sys
            • Size 58KB
            • SHA256 cc9d399816d0f04548545fa2cc4bb9e8d141624601ac271315cbe92f6e763a1e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Apr2007_xinput_x64.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Apr2007_xinput_x64.cab
            • Size 94KB
            • SHA256 e7a09f8235cc587cc63f583e39fbc75008d9677c8bb4dcc11cb8d0178a5153ac
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Feb2010_X3DAudio_x64.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Feb2010_X3DAudio_x64.cab
            • Size 53KB
            • SHA256 832b6d48e169b4725ae482ea4d1c3360a09631a89b2fac3aba81a50805a50adc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jun2010_D3DCompiler_43_x64.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Jun2010_D3DCompiler_43_x64.cab
            • Size 922KB
            • SHA256 213ad66ab9e469db1e6a49a646d082bfc3700db94172984e7e36801612af50c6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jun2010_D3DCompiler_43_x86.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Jun2010_D3DCompiler_43_x86.cab
            • Size 909KB
            • SHA256 417eebd5b19f45c67c94c2d2ba8b774c0fc6d958b896d7b1ac12cf5a0ea06e0e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jun2010_XACT_x64.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Jun2010_XACT_x64.cab
            • Size 121KB
            • SHA256 06251ab76450feb7dc2ffb9be7615f5eb56960cefa4c990ef560f2c6f2a7551b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jun2010_XACT_x86.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Jun2010_XACT_x86.cab
            • Size 91KB
            • SHA256 354c2e579ed00b391dd5d8be91b0f45115e7c232ed1b842747830be0fd26e915
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jun2010_XAudio_x64.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Jun2010_XAudio_x64.cab
            • Size 270KB
            • SHA256 51500283f69e97f5beddb073ba2a9017de3d30379c0dcc4d11dd2236ce07b317
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jun2010_XAudio_x86.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Jun2010_XAudio_x86.cab
            • Size 271KB
            • SHA256 7b4332207563beba1103744b6db5399ad150e9e6838f9d5a71497e7eb3645ebf
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jun2010_d3dcsx_43_x64.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Jun2010_d3dcsx_43_x64.cab
            • Size 735KB
            • SHA256 cdbec7e3a5a0fef016eb294b036f93c75e45c6ead8d99397f859a32d23fe20cc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jun2010_d3dcsx_43_x86.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Jun2010_d3dcsx_43_x86.cab
            • Size 744KB
            • SHA256 e2c5a2cbba7f211b6ca72ff8e5f69cba1f83be06357311b19e64f582fd3d14e4
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jun2010_d3dx10_43_x64.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Jun2010_d3dx10_43_x64.cab
            • Size 230KB
            • SHA256 efce48d425c07f1faad4a55d7061a01ed6245aac17f43163cf2a23cbc9a3054b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jun2010_d3dx10_43_x86.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Jun2010_d3dx10_43_x86.cab
            • Size 192KB
            • SHA256 a8cf71ffb80b683616d0621be96d3795b0ffda3877ed2d80cd958bfa393ddcfc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jun2010_d3dx11_43_x64.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Jun2010_d3dx11_43_x64.cab
            • Size 134KB
            • SHA256 c1d0d56b83bfb09a5e1a89e1898bb74446a847b30a968f3664ec2d87368eb63e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jun2010_d3dx11_43_x86.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Jun2010_d3dx11_43_x86.cab
            • Size 106KB
            • SHA256 a58cefe822e371d078eaf89319f832693352ba7d62079320074397f0f3425961
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jun2010_d3dx9_43_x64.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Jun2010_d3dx9_43_x64.cab
            • Size 915KB
            • SHA256 9b98a1269af7f3a0007bfdc73206a47a6ee158d34ba8a87009396c18186bb06a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jun2010_d3dx9_43_x86.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\Jun2010_d3dx9_43_x86.cab
            • Size 750KB
            • SHA256 fcc6cf0966b4853d6fa3d32ab299cde5a9824feaecb0d4f34ea452fb9fd1c867
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dxdllreg_x86.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\dxdllreg_x86.cab
            • Size 43KB
            • SHA256 4afe0249a13868b7c4a92b4d53c998adf6053eb5e2c47fd81020fd8d4bb11150
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dxupdate.cab
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\RESOUR~1\GPUUNR~1\prereq\dx\dxupdate.cab
            • Size 94KB
            • SHA256 e18a5404b612e88fa8b403c9b33f064c0a89528db7ef9a79aa116908d0e6afed
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            DSETUP32.DLL
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\Resources\GPUUNREAL\prereq\dx\DSETUP32.DLL
            • Size 1.5MB
            • SHA256 fb0e534f9b0926e518f1c2980640dfd29f14217cdfa37cf3a0c13349127ed9a8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            DXSETUP.exe
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\Resources\GPUUNREAL\prereq\dx\DXSETUP.exe
            • Size 505KB
            • SHA256 8f47d7121ef6532ad9ad9901e44e237f5c30448b752028c58a9d19521414e40d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dsetup.dll
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\Resources\GPUUNREAL\prereq\dx\dsetup.dll
            • Size 93KB
            • SHA256 2a61679eeedabf7d0d0ac14e5447486575622d6b7cfa56f136c1576ff96da21f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ORingLib.dll
            • Path C:\Users\Admin\AppData\Local\Temp\OCCT\Resources\ORING\ORingLib.dll
            • Size 290KB
            • SHA256 fbd82e30bc522e7a648bc27d7627b85fd1c3400373b6e5c911e69cb584053fcb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ISTask.dll
            • Path C:\Users\Admin\AppData\Local\Temp\is-4F59C.tmp\ISTask.dll
            • Size 66KB
            • SHA256 e916bdf232744e00cbd8d608168a019c9f41a68a7e8390aa48cfb525276c483d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            VclStylesInno.dll
            • Path C:\Users\Admin\AppData\Local\Temp\is-4F59C.tmp\VclStylesInno.dll
            • Size 3.0MB
            • SHA256 0e93313f42084d804b9ac4be53d844e549cfcaf19e6f276a3b0f82f01b9b2246
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            OCCT 17.0.17.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\is-GTTSE.tmp\OCCT 17.0.17.tmp
            • Size 911KB
            • SHA256 25e18cc50376edefd666a0d98e98f8834dcb1503ee85dbb2fd6733b104533e2b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            DirectX.log
            • Path C:\Windows\Logs\DirectX.log
            • Size 64KB
            • SHA256 d7e2a20a9b6fafa11868074335060ae7819955986deea3c3db9c0cea790d6344
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            DirectX.log
            • Path C:\Windows\Logs\DirectX.log
            • Size 65KB
            • SHA256 b5fa0ef92192cfc65f87e66fe163c5e81f08ee56a35d423bc4e35a87ad45e2bc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            DirectX.log
            • Path C:\Windows\Logs\DirectX.log
            • Size 67KB
            • SHA256 eeb4d793b874e97620afce799d68357f7b6adbd55285757887f807dabbf63752
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            DirectX.log
            • Path C:\Windows\Logs\DirectX.log
            • Size 68KB
            • SHA256 8ab0144aaf3a076c637aebdd8f73a54a63fdb02ce75c796b674b4aeae8c69a3d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            DirectX.log
            • Path C:\Windows\Logs\DirectX.log
            • Size 70KB
            • SHA256 f45a173977ca9b99a3eded95731b0717bbe01f64746105ffa53362c8e1cea18d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            DirectX.log
            • Path C:\Windows\Logs\DirectX.log
            • Size 72KB
            • SHA256 5890b905732792215c64c356f120094af5abd4a549a2022fddd072e02fb07413
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            DirectX.log
            • Path C:\Windows\Logs\DirectX.log
            • Size 74KB
            • SHA256 c0733753f14fb8a56ec7becff9b5a2f2e7d001089154f7b1199afa31862d8f57
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            DirectX.log
            • Path C:\Windows\Logs\DirectX.log
            • Size 474B
            • SHA256 be0c9116d20c1b62b69d578e10b33f8812305386a6cbf3397b0be652dd78e18c
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            DirectX.log
            • Path C:\Windows\Logs\DirectX.log
            • Size 7KB
            • SHA256 c13f3078838d4f44e8516f90147c4b50d90105b2f2cbd942b4745bbbf8befac7
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            DirectX.log
            • Path C:\Windows\Logs\DirectX.log
            • Size 4KB
            • SHA256 55e3c2409ffa3230a5f6d6f923e64216e1dc8275c03c2a830cd4bf3ac5e9472e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            memory/2496-1949-0x0000000180000000-0x00000001806AA000-memory.dmp
            Download

            memory/2496-1964-0x0000000180000000-0x00000001806AA000-memory.dmp
            Download

            memory/4344-67-0x0000000008340000-0x0000000008341000-memory.dmp
            Download

            memory/4344-27-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-63-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-59-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-57-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-65-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-66-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-71-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-72-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-74-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-87-0x0000000007F8E000-0x0000000007F8F000-memory.dmp
            Download

            memory/4344-81-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-77-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-78-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-68-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-51-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-45-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-42-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-82-0x0000000008390000-0x0000000008391000-memory.dmp
            Download

            memory/4344-41-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-80-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-75-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-35-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-70-0x0000000008350000-0x0000000008351000-memory.dmp
            Download

            memory/4344-69-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-47-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-64-0x0000000008330000-0x0000000008331000-memory.dmp
            Download

            memory/4344-61-0x0000000008320000-0x0000000008321000-memory.dmp
            Download

            memory/4344-60-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-33-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-55-0x0000000008300000-0x0000000008301000-memory.dmp
            Download

            memory/4344-58-0x0000000008310000-0x0000000008311000-memory.dmp
            Download

            memory/4344-30-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-48-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-46-0x00000000082D0000-0x00000000082D1000-memory.dmp
            Download

            memory/4344-62-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-44-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-43-0x00000000082C0000-0x00000000082C1000-memory.dmp
            Download

            memory/4344-26-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-40-0x00000000082B0000-0x00000000082B1000-memory.dmp
            Download

            memory/4344-39-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-38-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-25-0x0000000008260000-0x0000000008261000-memory.dmp
            Download

            memory/4344-49-0x00000000082E0000-0x00000000082E1000-memory.dmp
            Download

            memory/4344-56-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-54-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-52-0x00000000082F0000-0x00000000082F1000-memory.dmp
            Download

            memory/4344-37-0x00000000082A0000-0x00000000082A1000-memory.dmp
            Download

            memory/4344-29-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-79-0x0000000008380000-0x0000000008381000-memory.dmp
            Download

            memory/4344-53-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-84-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-32-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-73-0x0000000008360000-0x0000000008361000-memory.dmp
            Download

            memory/4344-76-0x0000000008370000-0x0000000008371000-memory.dmp
            Download

            memory/4344-50-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-132-0x0000000000400000-0x00000000004F7000-memory.dmp
            Download

            memory/4344-36-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4344-23-0x0000000007DF0000-0x000000000810A000-memory.dmp
            Download

            memory/4344-28-0x0000000008270000-0x0000000008271000-memory.dmp
            Download

            memory/4344-88-0x0000000007DF0000-0x000000000810A000-memory.dmp
            Download

            memory/4344-31-0x0000000008280000-0x0000000008281000-memory.dmp
            Download

            memory/4344-34-0x0000000008290000-0x0000000008291000-memory.dmp
            Download

            memory/4344-91-0x0000000007DF0000-0x000000000810A000-memory.dmp
            Download

            memory/4344-17-0x00000000024A0000-0x00000000024B6000-memory.dmp
            Download

            memory/4344-99-0x0000000007DF0000-0x000000000810A000-memory.dmp
            Download

            memory/4344-6-0x0000000002300000-0x0000000002301000-memory.dmp
            Download

            memory/4344-100-0x0000000007DF0000-0x000000000810A000-memory.dmp
            Download

            memory/4344-83-0x0000000008110000-0x0000000008250000-memory.dmp
            Download

            memory/4716-0-0x0000000000400000-0x0000000000417000-memory.dmp
            Download