Analysis

  • user interaction
    yes
  • max time kernel
    300s
  • max time network
    132s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-fr
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-frlocale:fr-fros:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/10/2026, 16:54

General

  • Target
    EvoVisLauncher.exe
  • Size 74.0MB
  • Sample261002-vexxcsswf1
  • SHA256 042b28c0b2214d334758a5dec374e54d9ed69fc948cd20c222199eed728fd4c8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 58 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\EvoVisLauncher.exe
    "C:\Users\Admin\AppData\Local\Temp\EvoVisLauncher.exe"
    1⤵
    • Loads dropped DLL
    • Enumerates connected drives
    • Reads the TCP/IP host and domain name from the registry
    • Checks processor information in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:712

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        WMSDKNS.XML

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML
        • Size 9KB
        • SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        D3DCompiler_47_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\D3DCompiler_47_cor3.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DirectWriteForwarder.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\DirectWriteForwarder.dll
        • Size 501KB
        • SHA256 691250dac9a44ffd9dac9354b636ee748dcb6c50036b895dbcfcc934323f28eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        EvoVisLauncher.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\EvoVisLauncher.dll
        • Size 7.0MB
        • SHA256 19425ee6a5616e76b83d3f04bf262b4c19049c3264df133c5e64fb1ee83bc1b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Win32.Registry.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\Microsoft.Win32.Registry.dll
        • Size 117KB
        • SHA256 077a2d629819b3d86d6c81e0647fbf30fb6273974cef51023719f2a0f1fab410
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationCore.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\PresentationCore.dll
        • Size 8.2MB
        • SHA256 4fe00893cfca54ab0b0bce95caa1f8ddc87f383c7553cc17c81da65bc54e4e3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationFramework-SystemXml.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\PresentationFramework-SystemXml.dll
        • Size 33KB
        • SHA256 592ec192e9f8590cbf2da06d30a30086c1a88d890819110aeb4db09107d633f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationFramework.Aero2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\PresentationFramework.Aero2.dll
        • Size 441KB
        • SHA256 68c67d27c2b3e3cd9b9122b450b3008ba91ee83387ee34cf89015106513b4b9d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationFramework.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\PresentationFramework.dll
        • Size 15.4MB
        • SHA256 2c349aeb8c48dbf98aa19ff3beda2f86681390039d21bbb8e9828bde4e62992a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationNative_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 6c588208852d8663d81872e0eafdecec4f2ca5cc2cede2e74e167427932e70f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Concurrent.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Collections.Concurrent.dll
        • Size 285KB
        • SHA256 bd6f2cdfd5ec6fc487c5757728d4330334b2a89a813ba291234e2c2efb60720a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Immutable.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Collections.Immutable.dll
        • Size 881KB
        • SHA256 bbe7a7b8be988d86a012ad010cc54e53f5172190498d842422fdaaf8c3be9883
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.NonGeneric.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Collections.NonGeneric.dll
        • Size 105KB
        • SHA256 bf98e26d1f68e44df462019400ddd54d77b7355c1005502121e653d94cc80f8c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Specialized.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Collections.Specialized.dll
        • Size 101KB
        • SHA256 ad848ee601e2a864f482c06a0763486c98558cdf95de66cc08c7c6020c558941
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Collections.dll
        • Size 325KB
        • SHA256 752ace8c7eddeb911c8eb4f5a71aea72be767719d2270fb39fffb2e329014103
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.ComponentModel.Primitives.dll
        • Size 77KB
        • SHA256 bfced6c24bfaea7f2872c051b4d72da87bacca7d03cfe76ce7bd9e3d2f53fd0d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.TypeConverter.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.ComponentModel.TypeConverter.dll
        • Size 753KB
        • SHA256 3244001ba95c4799a79773c984ff70276a03b46460b2883fbae8cd72609f2b16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.ComponentModel.dll
        • Size 29KB
        • SHA256 c505e75a98e5e9c05fa56ed39b919eca19adbb361e79a0b4099855f1cfdfa369
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Configuration.ConfigurationManager.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Configuration.ConfigurationManager.dll
        • Size 1.0MB
        • SHA256 033164658b573748af3be245a169fdc9673fbd59af3ece8fb1d6b7cae4c12571
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.DiagnosticSource.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Diagnostics.DiagnosticSource.dll
        • Size 441KB
        • SHA256 2217b1f68cc8a642bb5b4baba46cb610ffb65212a5e90a0a8e6d7fc6d82472c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.Process.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Diagnostics.Process.dll
        • Size 329KB
        • SHA256 30573352f23b110f0d229f84ccd4a748a5c781e0f611bd205eeb28d86b00c22f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.StackTrace.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Diagnostics.StackTrace.dll
        • Size 45KB
        • SHA256 55b81899b6377e5d00e53d7a186994ac9755cee2ec583cd906e37249461f699e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.TraceSource.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Diagnostics.TraceSource.dll
        • Size 141KB
        • SHA256 ea4ed234a1dded79c49037220948a7b47a7ccc115e86bd5ab4520ac44374ab59
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Drawing.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Drawing.Primitives.dll
        • Size 133KB
        • SHA256 4688ba89e7941b2863311b8baa62d17ef9fad4ba984dc50296b39c56f19c7b0c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.IO.Packaging.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.IO.Packaging.dll
        • Size 317KB
        • SHA256 f0fec5728921ff0836fdff56a798897b1974456e949d368aeab6a26b9571835e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.IO.Pipelines.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.IO.Pipelines.dll
        • Size 189KB
        • SHA256 fd14b649c904c10cfcb1cb8d93e41f8faa4acccd7bc468f2ad597aaf430a51d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Linq.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Linq.dll
        • Size 641KB
        • SHA256 675ed58c04594655b067a3e4f3d4f1c01a27057057166c33dc54b9916167f0da
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Memory.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Memory.dll
        • Size 157KB
        • SHA256 da40a6f6af8a20e129874628910ade425a5854e0b7b31dba95332f8e8b48e59c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Http.Json.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Net.Http.Json.dll
        • Size 129KB
        • SHA256 73cd2514009d6c9e046cb99e18f800473988f06b7895b9d888722b1f70c91e2b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Http.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Net.Http.dll
        • Size 1.7MB
        • SHA256 2617810681bb9f6f2bb2ddc47f9c6c5a63ec5a397ceefd814329dea8d38806ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.NameResolution.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Net.NameResolution.dll
        • Size 121KB
        • SHA256 9e9b296a3af8290fc210af232be164c0e00dd0e18de2b6f74b0f96cacf5fd19e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Net.Primitives.dll
        • Size 221KB
        • SHA256 46ead7b5c522317188d001f45bece7d865b394984a2373dce8e5ed0fb75222c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Requests.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Net.Requests.dll
        • Size 373KB
        • SHA256 ce8349cffa646155a317caf87fb7cb57d51f3107ccdde871b4b08f1751c6e5b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Security.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Net.Security.dll
        • Size 661KB
        • SHA256 c3d0636840840003327495c117573306f6e03f4f2bd1f1b65bfbc27f2f41deb1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Sockets.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Net.Sockets.dll
        • Size 533KB
        • SHA256 4b24bd1d219f8716a31a4a175842f382c5104b01336bd9eb7ce6cbdca716bdee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.WebClient.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Net.WebClient.dll
        • Size 165KB
        • SHA256 4d26b50ad6e78254600592b2dbe0c1e677267aea654b04d68cb2e8caa0c77def
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.WebHeaderCollection.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Net.WebHeaderCollection.dll
        • Size 61KB
        • SHA256 907fe4d1a19dc0e07875e4d2bf33524b4d7a2bfec3594c4268010862d4f21144
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ObjectModel.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.ObjectModel.dll
        • Size 81KB
        • SHA256 8785dde8d1d8d26c193b8aa1235cb73df878838843c480f22d22b281e992f608
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.CoreLib.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Private.CoreLib.dll
        • Size 14.6MB
        • SHA256 18dd52b72d7726914249749376c2e635103ab25d7f4c5d37bb3a033166f2df0e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.Uri.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Private.Uri.dll
        • Size 253KB
        • SHA256 2d661e583a48a7b84f1b5633f0879d432c2b24b8c566b034680f714796a21347
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.Xml.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Private.Xml.dll
        • Size 7.6MB
        • SHA256 09da98e70dd4271f3b37ad00e93c055116988311ae605589c40669f8a7ca062f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Reflection.Metadata.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Reflection.Metadata.dll
        • Size 1.1MB
        • SHA256 ffa8ec75245cf262361a8ee2616881a830de465b6c27d33e0fe38994d28110d2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.CompilerServices.VisualC.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Runtime.CompilerServices.VisualC.dll
        • Size 29KB
        • SHA256 0c4ad019991df6557e370b482014c1547804b5afe2fd02990aa8d2c2b835498e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.InteropServices.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Runtime.InteropServices.dll
        • Size 109KB
        • SHA256 0377b3ec6ee4ea2a4c386d59171759dd1a2a5ea58a24fae2faca8d6f7f500eb4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Security.Claims.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Security.Claims.dll
        • Size 97KB
        • SHA256 8fce868bd0c246ae38145c71d0188df9add9fd337cb4bb20d3f7872ca485f364
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Security.Cryptography.ProtectedData.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Security.Cryptography.ProtectedData.dll
        • Size 53KB
        • SHA256 49458451b5689498ea821f9ee505f2613f126911ab7c765e5f21a93c5403d719
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Security.Cryptography.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Security.Cryptography.dll
        • Size 2.0MB
        • SHA256 fec1abfdf414457b3d7d37900d7aff8f52cebe3dbadaf832f86d4270ce75c365
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Security.Principal.Windows.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Security.Principal.Windows.dll
        • Size 181KB
        • SHA256 5d5533f4ef6ea717312c1267cc295ad01655a784abc5788313f97f21e19e417a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Text.Encodings.Web.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Text.Encodings.Web.dll
        • Size 129KB
        • SHA256 9bc6dddc28132a71e153f51dae150a2bfcd1e0050525a9ee3e67790df382970c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Text.Json.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Text.Json.dll
        • Size 1.7MB
        • SHA256 0f6b5625311c1d98678cebe33a37f7e7ef3ff6ddc0c6653a0af17cd2e9e745f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Threading.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Threading.dll
        • Size 81KB
        • SHA256 3d4d5fd570ebde1da7d9e1fa15fe9de4af00d352ac9196ab1e1a93147d4cbd95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Windows.Controls.Ribbon.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Windows.Controls.Ribbon.dll
        • Size 1.4MB
        • SHA256 4fb08f9d5311d071e6a76c75036136dc0289e1aafc2bdb4b6d78763eddb341e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Windows.Extensions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Windows.Extensions.dll
        • Size 117KB
        • SHA256 a22d5275f486b1ac5b9c5aaab6b265133e138e4a875fb9e6bc9fc030b97e6af6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Xaml.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\System.Xaml.dll
        • Size 1.4MB
        • SHA256 a94e47527b3992fad1897772a31e496c32bd695dba7043af915dcc6f5a1fceb7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UIAutomationProvider.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\UIAutomationProvider.dll
        • Size 61KB
        • SHA256 8ddd9bec0c1ce431e9a1c06761fbf0d1cc38967cd24372017532e38ef36f6d94
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UIAutomationTypes.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\UIAutomationTypes.dll
        • Size 305KB
        • SHA256 e147124f1df63a677c98d12d4addedb993df754ab515603bff12d206f942e8b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WindowsBase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\WindowsBase.dll
        • Size 2.1MB
        • SHA256 5702274d0ee53d20d0847f1aa284b02679313cf743be25af9aea4372384134c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wpfgfx_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\c_crPHtIkyDbIgewWHOlj0EPpQUXmJg=\wpfgfx_cor3.dll
        • Size 1.9MB
        • SHA256 699ed38f9decff822b64a76fff30519226cfb9886abdde223a0e42b88fadea0d
        • MD5 SHA1 SHA512 SSDEEP TLSH