Overview

overview

10

Static

static

1

LDPlayer9_...ld.exe

windows11-ltsc_2024-x64

10

Analysis

  • user interaction
    yes
  • max time kernel
    253s
  • max time network
    271s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    05/11/2026, 04:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    LDPlayer9_es_1009_ld.exe
  • Size 1.2MB
  • Sample261105-e15w4asz4l
  • SHA256 e76e6696685037da3f115cf182877bf5901fef1db0b0a5aeafb810e9b0766440
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasiondiscoveryexecutionexploitguerrillainfostealerpersistenceprivilege_escalationratspywaretrojan

Malware Config

Signatures

  • Family: Guerrilla

    Guerrilla is an Android malware used by the Lemon Group threat actor.

    trojaninfostealerratguerrilla
  • Guerrilla payload 1 IoCs
  • Manipulates Digital Signatures 1 TTPs 64 IoCs

    Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.

  • Possible privilege escalation attempt 8 IoCs
    exploit
  • Creates new service(s) 2 TTPs
    persistenceexecution
  • Modifies file permissions 1 TTPs 8 IoCs
    discovery
  • Downloads MZ/PE file 3 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Power Settings 1 TTPs 1 IoCs

    powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

    persistence
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 7 IoCs
  • Launches sc.exe 4 IoCs

    Sc.exe is a Windows utlilty to control services on the system.

  • Loads dropped DLL 61 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 28 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Gathers system information 1 TTPs 1 IoCs

    Runs systeminfo.exe.

  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs
    defense_evasionspywaretrojan
  • Runs net.exe
  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of WriteProcessMemory 30 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\LDPlayer9_es_1009_ld.exe
    "C:\Users\Admin\AppData\Local\Temp\LDPlayer9_es_1009_ld.exe"
    1⤵
    • Downloads MZ/PE file
    • Enumerates connected drives
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Modifies system certificate store
    • Suspicious use of WriteProcessMemory
    PID:4672
    • C:\LDPlayer\LDPlayer9\LDPlayer_0900054101.exe
      "C:\LDPlayer\LDPlayer9\\LDPlayer_0900054101.exe" -silence -downloader -openid=1009 -language=es -path="C:\LDPlayer\LDPlayer9\"
      2⤵
      • Enumerates connected drives
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2496
      • C:\LDPlayer\LDPlayer9\dnrepairer.exe
        "C:\LDPlayer\LDPlayer9\dnrepairer.exe" cmd=install|listener=393928
        3⤵
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:3412
        • C:\Windows\SysWOW64\net.exe
          "net" start cryptsvc
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:2308
          • C:\Windows\SysWOW64\net1.exe
            C:\Windows\system32\net1 start cryptsvc
            5⤵
            • System Location Discovery: System Language Discovery
            PID:1744
        • C:\Windows\SysWOW64\regsvr32.exe
          "regsvr32" Softpub.dll /s
          4⤵
          • Manipulates Digital Signatures
          • System Location Discovery: System Language Discovery
          PID:5728
        • C:\Windows\SysWOW64\regsvr32.exe
          "regsvr32" Wintrust.dll /s
          4⤵
          • Manipulates Digital Signatures
          • System Location Discovery: System Language Discovery
          PID:5564
        • C:\Windows\SysWOW64\regsvr32.exe
          "regsvr32" Initpki.dll /s
          4⤵
          • System Location Discovery: System Language Discovery
          PID:4292
        • C:\Windows\SysWOW64\regsvr32.exe
          "C:\Windows\system32\regsvr32" Initpki.dll /s
          4⤵
          • System Location Discovery: System Language Discovery
          PID:4112
        • C:\Windows\SysWOW64\regsvr32.exe
          "regsvr32" dssenh.dll /s
          4⤵
          • System Location Discovery: System Language Discovery
          PID:3936
        • C:\Windows\SysWOW64\regsvr32.exe
          "regsvr32" rsaenh.dll /s
          4⤵
          • System Location Discovery: System Language Discovery
          PID:6000
        • C:\Windows\SysWOW64\regsvr32.exe
          "regsvr32" cryptdlg.dll /s
          4⤵
          • Manipulates Digital Signatures
          • System Location Discovery: System Language Discovery
          PID:6096
        • C:\Windows\SysWOW64\takeown.exe
          "takeown" /f "C:\LDPlayer\LDPlayer9\vms" /r /d y
          4⤵
          • Possible privilege escalation attempt
          • Modifies file permissions
          • System Location Discovery: System Language Discovery
          PID:5500
        • C:\Windows\SysWOW64\icacls.exe
          "icacls" "C:\LDPlayer\LDPlayer9\vms" /grant everyone:F /t
          4⤵
          • Possible privilege escalation attempt
          • Modifies file permissions
          • System Location Discovery: System Language Discovery
          PID:3312
        • C:\Windows\SysWOW64\takeown.exe
          "takeown" /f "C:\LDPlayer\LDPlayer9\\system.vmdk"
          4⤵
          • Possible privilege escalation attempt
          • Modifies file permissions
          • System Location Discovery: System Language Discovery
          PID:3272
        • C:\Windows\SysWOW64\icacls.exe
          "icacls" "C:\LDPlayer\LDPlayer9\\system.vmdk" /grant everyone:F /t
          4⤵
          • Possible privilege escalation attempt
          • Modifies file permissions
          • System Location Discovery: System Language Discovery
          PID:4128
        • C:\Windows\SysWOW64\takeown.exe
          "takeown" /f "C:\Users\Admin\.Ld9VirtualBox" /r /d y
          4⤵
          • Possible privilege escalation attempt
          • Modifies file permissions
          • System Location Discovery: System Language Discovery
          PID:4272
        • C:\Windows\SysWOW64\icacls.exe
          "icacls" "C:\Users\Admin\.Ld9VirtualBox" /grant everyone:F /t
          4⤵
          • Possible privilege escalation attempt
          • Modifies file permissions
          • System Location Discovery: System Language Discovery
          PID:1624
        • C:\Program Files\ldplayer9box\Ld9BoxSVC.exe
          "C:\Program Files\ldplayer9box\Ld9BoxSVC.exe" /RegServer
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3176
        • C:\Windows\SYSTEM32\regsvr32.exe
          "regsvr32" "C:\Program Files\ldplayer9box\VBoxC.dll" /s
          4⤵
          • Loads dropped DLL
          PID:5588
        • C:\Windows\SysWOW64\regsvr32.exe
          "regsvr32" "C:\Program Files\ldplayer9box\x86\VBoxClient-x86.dll" /s
          4⤵
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:1344
        • C:\Windows\SYSTEM32\regsvr32.exe
          "regsvr32" "C:\Program Files\ldplayer9box\VBoxProxyStub.dll" /s
          4⤵
          • Loads dropped DLL
          • Modifies registry class
          PID:5216
        • C:\Windows\SysWOW64\regsvr32.exe
          "regsvr32" "C:\Program Files\ldplayer9box\x86\VBoxProxyStub-x86.dll" /s
          4⤵
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          PID:4744
        • C:\Windows\SysWOW64\sc.exe
          "C:\Windows\system32\sc" create Ld9BoxSup binPath= "C:\Program Files\ldplayer9box\Ld9BoxSup.sys" type= kernel start= auto
          4⤵
          • Launches sc.exe
          • System Location Discovery: System Language Discovery
          PID:3420
        • C:\Windows\SysWOW64\sc.exe
          "C:\Windows\system32\sc" start Ld9BoxSup
          4⤵
          • Launches sc.exe
          • System Location Discovery: System Language Discovery
          PID:2780
      • C:\LDPlayer\LDPlayer9\driverconfig.exe
        "C:\LDPlayer\LDPlayer9\driverconfig.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:6124
      • C:\Windows\SysWOW64\powercfg.exe
        "C:\Windows\system32\powercfg.exe" /powerthrottling disable /path "C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe"
        3⤵
        • Power Settings
        PID:4228
      • C:\Windows\SysWOW64\takeown.exe
        "takeown" /f C:\LDPlayer\ldmutiplayer\ /r /d y
        3⤵
        • Possible privilege escalation attempt
        • Modifies file permissions
        • System Location Discovery: System Language Discovery
        PID:4112
      • C:\Windows\SysWOW64\icacls.exe
        "icacls" C:\LDPlayer\ldmutiplayer\ /grant everyone:F /t
        3⤵
        • Possible privilege escalation attempt
        • Modifies file permissions
        • System Location Discovery: System Language Discovery
        PID:712
      • C:\LDPlayer\LDPlayer9\ldplayerserviceEN.exe
        "C:\LDPlayer\LDPlayer9\ldplayerserviceEN.exe" --create
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:3312
    • C:\LDPlayer\LDPlayer9\dnplayer.exe
      "C:\LDPlayer\LDPlayer9\dnplayer.exe"
      2⤵
        PID:2464
        • C:\Windows\SysWOW64\sc.exe
          sc query HvHost
          3⤵
          • Launches sc.exe
          PID:5748
        • C:\Windows\SysWOW64\sc.exe
          sc query vmms
          3⤵
          • Launches sc.exe
          PID:4240
        • C:\Windows\SysWOW64\cmd.exe
          cmd.exe /c systeminfo
          3⤵
          • Executes a command shell one-liner
          PID:4784
          • C:\Windows\SysWOW64\systeminfo.exe
            systeminfo
            4⤵
            • Gathers system information
            PID:3004
        • C:\Program Files\ldplayer9box\vbox-img.exe
          "C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "C:\LDPlayer\LDPlayer9\vms\..\system.vmdk" --uuid 20160302-bbbb-bbbb-0eee-bbbb00000000
          3⤵
            PID:3328
          • C:\Program Files\ldplayer9box\vbox-img.exe
            "C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "C:\LDPlayer\LDPlayer9\vms\leidian0\data.vmdk" --uuid 20160302-cccc-cccc-0eee-000000000000
            3⤵
              PID:5512
            • C:\Program Files\ldplayer9box\vbox-img.exe
              "C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "C:\LDPlayer\LDPlayer9\vms\leidian0\sdcard.vmdk" --uuid 20160302-dddd-dddd-0eee-000000000000
              3⤵
                PID:1464
          • C:\Windows\System32\rundll32.exe
            C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {24AC8F2B-4D4A-4C17-9607-6A4B14068F97} -Embedding
            1⤵
              PID:5236
            • C:\Windows\System32\rundll32.exe
              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
              1⤵
                PID:2612
              • C:\LDPlayer\LDPlayer9\ldplayerserviceEN.exe
                "C:\LDPlayer\LDPlayer9\ldplayerserviceEN.exe"
                1⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of WriteProcessMemory
                PID:2888
                • C:\LDPlayer\ldmutiplayer\dnmultiplayerex.exe
                  "C:\LDPlayer\ldmutiplayer\dnmultiplayerex.exe" "from=service|dir=C:\LDPlayer\LDPlayer9\"
                  2⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  PID:3808
              • C:\Program Files\ldplayer9box\Ld9BoxSVC.exe
                "C:\Program Files\ldplayer9box\Ld9BoxSVC.exe" -Embedding
                1⤵
                  PID:4216
                  • C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe
                    "C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-0eee-000000000000 --vrde config
                    2⤵
                      PID:4272
                    • C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe
                      "C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-0eee-000000000000 --vrde config
                      2⤵
                        PID:3576
                      • C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe
                        "C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-0eee-000000000000 --vrde config
                        2⤵
                          PID:4860
                        • C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe
                          "C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-0eee-000000000000 --vrde config
                          2⤵
                            PID:3804
                          • C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe
                            "C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-0eee-000000000000 --vrde config
                            2⤵
                              PID:5208

                          Network

                                MITRE ATT&CK Enterprise v16

                                Reconnaissance

                                Resource Development

                                Initial Access

                                Execution

                                Command and Scripting Interpreter

                                1
                                T1059

                                Windows Command Shell

                                1
                                T1059.003

                                System Services

                                1
                                T1569

                                Service Execution

                                1
                                T1569.002

                                Persistence

                                Create or Modify System Process

                                1
                                T1543

                                Windows Service

                                1
                                T1543.003

                                Event Triggered Execution

                                1
                                T1546

                                Component Object Model Hijacking

                                1
                                T1546.015

                                Power Settings

                                1
                                T1653

                                Privilege Escalation

                                Create or Modify System Process

                                1
                                T1543

                                Windows Service

                                1
                                T1543.003

                                Event Triggered Execution

                                1
                                T1546

                                Component Object Model Hijacking

                                1
                                T1546.015

                                Defense Evasion

                                File and Directory Permissions Modification

                                1
                                T1222

                                Modify Registry

                                1
                                T1112

                                Subvert Trust Controls

                                2
                                T1553

                                Install Root Certificate

                                1
                                T1553.004

                                SIP and Trust Provider Hijacking

                                1
                                T1553.003

                                Credential Access

                                Discovery

                                Peripheral Device Discovery

                                1
                                T1120

                                Query Registry

                                2
                                T1012

                                System Information Discovery

                                3
                                T1082

                                System Location Discovery

                                1
                                T1614

                                System Language Discovery

                                1
                                T1614.001

                                System Network Configuration Discovery

                                1
                                T1016

                                Lateral Movement

                                Collection

                                Command and Control

                                Exfiltration

                                Impact

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                MSVCP120.dll
                                • Path C:\LDPlayer\LDPlayer9\MSVCP120.dll
                                • Size 449KB
                                • SHA256 9cb478e41026982a4366d567377e3a9880e7ce8477a5ea1fd1ddd1fa96bc1084
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                MSVCR120.dll
                                • Path C:\LDPlayer\LDPlayer9\MSVCR120.dll
                                • Size 952KB
                                • SHA256 76770d93afb655c882fade5c0909bfdd263cde0ba1762a881c69bb57dda2ccb7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                crashreport.dll
                                • Path C:\LDPlayer\LDPlayer9\crashreport.dll
                                • Size 50KB
                                • SHA256 e269811316cba3527ca1f1ff54b1bf2ca0a435349d57ff350387ad464da87617
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                dnmultiplayer.exe
                                • Path C:\LDPlayer\LDPlayer9\dnmultiplayer.exe
                                • Size 1.3MB
                                • SHA256 5d5fe3d1980f8e0619cce5e2224cf471f21008c9f3246ff616daaa713219b63c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                dnrepairer.exe
                                • Path C:\LDPlayer\LDPlayer9\dnrepairer.exe
                                • Size 41.9MB
                                • SHA256 cafc1d50da7edb0757b0cb4d995e79695657fef015a7861cb1a44c5f71569387
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                dnresource.rcc
                                • Path C:\LDPlayer\LDPlayer9\dnresource.rcc
                                • Size 5.7MB
                                • SHA256 0bbfdc2b62153f64a487ffff5416dea5fa6cb37cd061a90a3815329dc4d7f739
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Roboto-Regular.otf
                                • Path C:\LDPlayer\LDPlayer9\fonts\Roboto-Regular.otf
                                • Size 103KB
                                • SHA256 72336333d602f1c3506e642e0d0393926c0ec91225bf2e4d216fcebd82bb6cb5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                7za.exe
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\7za.exe
                                • Size 657KB
                                • SHA256 ab0519a8a8c330802ea91ac879a112d73b4c5b553851b0d601fe84a863a3d567
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-console-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-console-l1-1-0.dll
                                • Size 11KB
                                • SHA256 0dd2878a9aad0d1a64848db4a1b4e3851fd5bf049c4ba5b726d114ff45fd947a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-datetime-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-datetime-l1-1-0.dll
                                • Size 11KB
                                • SHA256 289ea86da94de73f0f0de4812caf7eda170ee612c72a713b3036b2669813d15a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-debug-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-debug-l1-1-0.dll
                                • Size 11KB
                                • SHA256 9487da37a92b40720ea2ad64ea0c9adc8b3c7bc4fe1f63a0e03e9c7a18943565
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-errorhandling-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-errorhandling-l1-1-0.dll
                                • Size 11KB
                                • SHA256 9cc0615a94b0a320f4b675eccbc3f7b8c279d9f692165afc6ce0c877f3981b08
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-file-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-file-l1-1-0.dll
                                • Size 14KB
                                • SHA256 4b2dc152f33cd7d88beba8696a57cd0383f05c50d2fb63672664717766762a1d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-file-l1-2-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-file-l1-2-0.dll
                                • Size 11KB
                                • SHA256 568d7f8551d8b4199db3359d5145bc4cb01d6d2f1347547f47967eb06a45c3b5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-file-l2-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-file-l2-1-0.dll
                                • Size 11KB
                                • SHA256 c1bca1bb524c5ae3d877a099f469b6fc34288bab26ae7a7f4fc47cd869f4958d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-handle-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-handle-l1-1-0.dll
                                • Size 11KB
                                • SHA256 85546a616d5594b884146aa4e13cdbfe841c9d956e648c6ee4840e6f4428bdcd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-heap-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-heap-l1-1-0.dll
                                • Size 11KB
                                • SHA256 8434510e84f5ade3453cfe086ed08260d309f761ed922bb8ff9ed436d8575d82
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-interlocked-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-interlocked-l1-1-0.dll
                                • Size 11KB
                                • SHA256 75b8eae29ab9acc906aafac2a198fe875d34c22b40acace1cd6c3486d67333ef
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-libraryloader-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-libraryloader-l1-1-0.dll
                                • Size 11KB
                                • SHA256 27078ba4e79087a5c1146f35da386ce043a3c2bbcaed04bd82645eddb6ed896d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-localization-l1-2-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-localization-l1-2-0.dll
                                • Size 13KB
                                • SHA256 13471eb84db95f8270398ef1deb29f0ea024db17e331497545c36eea7b2a3a7c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-memory-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-memory-l1-1-0.dll
                                • Size 11KB
                                • SHA256 d70eb06ed4f0c686dda93f35f065ec5e6249e5c737a24249738314c31f9d5202
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-namedpipe-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-namedpipe-l1-1-0.dll
                                • Size 11KB
                                • SHA256 36c42192283f129ff5637a06b7c3d72e5ed8e1c77493623384f2bdac15118f29
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-processenvironment-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-processenvironment-l1-1-0.dll
                                • Size 12KB
                                • SHA256 0d10d132cd28b57fb88135d5693ba2c1aace2fc059d85bde0318fb9b379b57b7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-processthreads-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-processthreads-l1-1-0.dll
                                • Size 13KB
                                • SHA256 28dd68501f527be6bc54f5f374bc33be983ea7ac640e66e3a56272cd3b9a5655
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-processthreads-l1-1-1.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-processthreads-l1-1-1.dll
                                • Size 11KB
                                • SHA256 b5f815d0a41add7fd9593036a8e6843fcc221298fefd61808f960eed3cc19830
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-profile-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-profile-l1-1-0.dll
                                • Size 10KB
                                • SHA256 3902aff11857535698367d4db2dfccde6168429defac82c15a535b4a07f7cdda
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-rtlsupport-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-rtlsupport-l1-1-0.dll
                                • Size 10KB
                                • SHA256 db1622a0b0013991d759c7955454a8006aa27f81a8b9b5c37cf2595b15b1b217
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-string-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-string-l1-1-0.dll
                                • Size 11KB
                                • SHA256 7bf7ff35fbcbfc1cb57597acfb23d2fb13e04e14906f4a626e4e92d689f19cbc
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-synch-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-synch-l1-1-0.dll
                                • Size 13KB
                                • SHA256 1ff0d9ceff0f982b7a78ef34c45980b88099067f4468f11fcdd46dbac00f6dd6
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-synch-l1-2-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-synch-l1-2-0.dll
                                • Size 11KB
                                • SHA256 e1a87d7d01e2376dde81a16658915ccf2ecb692739fef09adfb962523756e22d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-sysinfo-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-sysinfo-l1-1-0.dll
                                • Size 12KB
                                • SHA256 b31a83c8cc984c2a7ed9d7c9964f8ba302c1051bc478a3a34b98f4f873a6c011
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-timezone-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-timezone-l1-1-0.dll
                                • Size 11KB
                                • SHA256 f1667bbda1b58fc688b422fd2f9f7040919c4ababe00a4be78b258cae2dfc3d3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-util-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-core-util-l1-1-0.dll
                                • Size 11KB
                                • SHA256 1573af23a9ba27b2f3703a718749b776aea67e654c8c9713f92e41a67ae37c79
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-conio-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-conio-l1-1-0.dll
                                • Size 12KB
                                • SHA256 147f86ff93d61fea256b3de9149e1b36b68a83762e62a3389466218e18359ffc
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-convert-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-convert-l1-1-0.dll
                                • Size 15KB
                                • SHA256 3aa0eb4c47ac94b911f1a440324d26eee8ddf99557a718f0905bfee3cf56255f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-environment-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-environment-l1-1-0.dll
                                • Size 11KB
                                • SHA256 16ba05a1fa928501ffaee2e9dce449d28e8fe538df5ec6d8d1080b610b15d466
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-filesystem-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-filesystem-l1-1-0.dll
                                • Size 13KB
                                • SHA256 56e0bdf91edb21f5f5041f052723025c059a11360bb745f965a9903de9c61756
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-heap-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-heap-l1-1-0.dll
                                • Size 12KB
                                • SHA256 6501894e68a3871962731282a2e70614023ec3f63f600f933ec1785400716ce1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-locale-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-locale-l1-1-0.dll
                                • Size 11KB
                                • SHA256 42c235914844ce5d1bb64002fca34a776ae25ee658fc2b7b9da3291e5def7d4d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-math-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-math-l1-1-0.dll
                                • Size 21KB
                                • SHA256 0439703e47c8fce1f367f9e36248a738db6abcd9f2dd199cb190d5e59ed46978
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-multibyte-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-multibyte-l1-1-0.dll
                                • Size 19KB
                                • SHA256 224f526871c961615de17b5d7f7bbef2f3a799055cab2c8e3447b43c10c25372
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-private-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-private-l1-1-0.dll
                                • Size 62KB
                                • SHA256 bdd0cca431ee362bed4f2c1eccafb22aa8dd51d57014be8297789175e5c11f2e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-process-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-process-l1-1-0.dll
                                • Size 12KB
                                • SHA256 51862322ae3354f254045545b4ff64b7445bc99107b4526c3430de9ce5c60d88
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-runtime-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-runtime-l1-1-0.dll
                                • Size 15KB
                                • SHA256 505d2bde0d4d7cd3900a9c795cb84ab9c05208d6e5132749ab7c554ccd3c0fcc
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-stdio-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-stdio-l1-1-0.dll
                                • Size 17KB
                                • SHA256 fcd55331cc1f0ff4fb44c9590a9fb8f891b161147a6947ce48b88bf708786c21
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-string-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-string-l1-1-0.dll
                                • Size 17KB
                                • SHA256 ce74bdc6999d084a1b44b2ecea42dd28849b2825d7779effdc4c18360308b79b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-time-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-time-l1-1-0.dll
                                • Size 13KB
                                • SHA256 40d8bc312ac7bca072703e5f0852228cde418f89ba9ad69551aa7a80a2b30316
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-utility-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\api-ms-win-crt-utility-l1-1-0.dll
                                • Size 11KB
                                • SHA256 9753ae83536767c73e340c36c5f1610bc76a3e67e033b07503ec31431cba7b90
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                concrt140.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\concrt140.dll
                                • Size 242KB
                                • SHA256 2423a2a62fe0369c610837e240d691da727d95a9c1d5add512d0d0c32e328836
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                dnmultiplayerex.exe
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\dnmultiplayerex.exe
                                • Size 1.8MB
                                • SHA256 1752237b26ae8e581fa7a74c9cbf090acb023349f6f64c8c21682893c480ca2f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                libeay32.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\libeay32.dll
                                • Size 1.2MB
                                • SHA256 c90808a9783379f86c101613a5723025ded866a6d8109576559240585415bb67
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                libssh2.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\libssh2.dll
                                • Size 192KB
                                • SHA256 1ac6cfbf5dc72bc75d3d6dd8f9c49ea62c9fe60a6ece09b210be09d4a5c4e66b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                msvcp110.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\msvcp110.dll
                                • Size 522KB
                                • SHA256 c8d5572ca8d7624871188f0acabc3ae60d4c5a4f6782d952b9038de3bc28b39a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                msvcp140.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\msvcp140.dll
                                • Size 446KB
                                • SHA256 fa21058e50d0d6860da87d784f573670bf5d3efd65158145954ef96d0cd403cf
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                msvcr110.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\msvcr110.dll
                                • Size 854KB
                                • SHA256 b30160e759115e24425b9bcdf606ef6ebce4657487525ede7f1ac40b90ff7e49
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssleay32.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\ssleay32.dll
                                • Size 289KB
                                • SHA256 b23e873ceb50aeba8d59fc39ce5054ecdcf3e8b8f46de1746919b3d36cec6f1f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                vccorlib140.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\vccorlib140.dll
                                • Size 267KB
                                • SHA256 ad003c5fccf5655f1c0db97755e6e24cd0b6830c21eda6804171ac504f03fbda
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                vcruntime140.dll
                                • Path C:\LDPlayer\LDPlayer9\ldmutiplayer\vcruntime140.dll
                                • Size 84KB
                                • SHA256 1b372f064eacb455a0351863706e6326ca31b08e779a70de5de986b5be8069a1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                logsvr.txt6
                                • Path C:\LDPlayer\LDPlayer9\log\logsvr.txt6
                                • Size 727B
                                • SHA256 15b767585721c7ad19568e21a5e529c91ea30d5063616188ddb4e8a73ad1a773
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                logsvr_inst.txt
                                • Path C:\LDPlayer\LDPlayer9\log\logsvr_inst.txt
                                • Size 568B
                                • SHA256 7df488dd1501e95bb2f04b0d01830aa0061e9b5d53ab117c08b3bd588de85f20
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                logsvr_inst.txt
                                • Path C:\LDPlayer\LDPlayer9\log\logsvr_inst.txt
                                • Size 466B
                                • SHA256 8f1c1f6302c0bccd6b33498b259fbef762d4aff77fb6bf5f2e3b78fd2f96a1e7
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                phones.data
                                • Path C:\LDPlayer\LDPlayer9\phones.data
                                • Size 5KB
                                • SHA256 657fec32d9ce7b96986513645a48ddd047a5968d897c589fbc0fc9adb8c670f4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                system.vmdk
                                • Path C:\LDPlayer\LDPlayer9\system.vmdk
                                • Size 1083.8MB
                                • SHA256 d44e29d535393a7b471fe75e0ee506cbda872abb1df5876ae9c1756e72651dc1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EGL.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\EGL.dll
                                • Size 532KB
                                • SHA256 80ebebaac33cb7df8dfdd1344b63a3e1fecb980214218eeaab8ab2f023c31b3b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-console-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-console-l1-1-0.dll
                                • Size 18KB
                                • SHA256 4ceaf28cadfd0929b44e9c686b93432a7151504c8ffe2a6afe516f9b16538131
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-datetime-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-datetime-l1-1-0.dll
                                • Size 17KB
                                • SHA256 69b84f7318798a91143e3d273ae9c0bedaabba930e3702447d493e2b8dd70725
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-debug-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-debug-l1-1-0.dll
                                • Size 17KB
                                • SHA256 290030199e8b47d6bcf466f9fc81fee7e6aebc2c16a3f26dd77019f795658956
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-errorhandling-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-errorhandling-l1-1-0.dll
                                • Size 18KB
                                • SHA256 573aed3f3eb436f9b7c24d51be3be2105deb8149ebda9b964660930c957b2410
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-file-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-file-l1-1-0.dll
                                • Size 21KB
                                • SHA256 74075b7af84378cee0d035c020b320ee52a120b21f71a4972093c9e23d534830
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-file-l1-2-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-file-l1-2-0.dll
                                • Size 18KB
                                • SHA256 d9973270a952b4ce615104520051e847b26e4b1cc330a5a95ba1ae128f0dfdeb
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-file-l2-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-file-l2-1-0.dll
                                • Size 18KB
                                • SHA256 144d3a28e43e47fc1cce956255cc80467d4a6fbbb8f612ec6d85f62de030a924
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-handle-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-handle-l1-1-0.dll
                                • Size 18KB
                                • SHA256 d6bc1509fd2d4ea07e661f2f59395b4d71907d16f59942443a5d460df343dbf4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-heap-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-heap-l1-1-0.dll
                                • Size 18KB
                                • SHA256 f60267cab87dfc1accf912c212186112aba38742f621549d6bc8d67e217e7234
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-interlocked-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-interlocked-l1-1-0.dll
                                • Size 18KB
                                • SHA256 f93ddef4ac14ef778790f3f00057ab6cafc0c99dff52cc24f523d63917719970
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-libraryloader-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-libraryloader-l1-1-0.dll
                                • Size 18KB
                                • SHA256 f8e8d85035bcb478ce2ab47a6476a8c756a7c8fa05bad66b9a03ece6a2ced141
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-localization-l1-2-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-localization-l1-2-0.dll
                                • Size 20KB
                                • SHA256 6475f20f46814d28845c2fa73e9c283a8504483fa16d911325588c778cf76c26
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-memory-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-memory-l1-1-0.dll
                                • Size 18KB
                                • SHA256 dc41da54e717aef60228ee11d10669c31d3ddd532eee9ecad944c09b71b762dd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-namedpipe-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-namedpipe-l1-1-0.dll
                                • Size 18KB
                                • SHA256 b0ae48eb5ff51fa038e1ed23c7c48d266c20c2af3f9907ee6906bb0346df7f9e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-processenvironment-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-processenvironment-l1-1-0.dll
                                • Size 19KB
                                • SHA256 1cd9cff9f7d24b22993a207cb81f15ce2792fa5f941e77e8280db00db6a273ae
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-processthreads-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-processthreads-l1-1-0.dll
                                • Size 20KB
                                • SHA256 2658242ccd090181ed944f682c435e5fb880f3b21d1811d43b93478901d701b0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-processthreads-l1-1-1.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-processthreads-l1-1-1.dll
                                • Size 18KB
                                • SHA256 ae574c9b8a2467c3ee0ac3e862255e93a02627bce146ad7b720b99905dc224fc
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-profile-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-profile-l1-1-0.dll
                                • Size 17KB
                                • SHA256 cffb2007c31932b092cda3a0a39f1cfcc5766b6a1c05e5eaeabc53660cbbe786
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-rtlsupport-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-rtlsupport-l1-1-0.dll
                                • Size 18KB
                                • SHA256 eae3cd8747da3b435846901a1dbe0e430666d3d8d7ba6e54307cff5d6ee0592f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-string-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-string-l1-1-0.dll
                                • Size 18KB
                                • SHA256 7b5393e2cb79f0396d5d97510e8f0955a2586aacaf60eb8de3676006cb81dc5c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-synch-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-synch-l1-1-0.dll
                                • Size 20KB
                                • SHA256 5d1a854a0c5121e2e8866dad26545f7f8c2d2f1b15ed7f1ed0b72654a1fc299b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-synch-l1-2-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-synch-l1-2-0.dll
                                • Size 18KB
                                • SHA256 9566b81b1c6db1727a4bb3a7a3de12247ff5297f34548593280ec31f2b2e2c65
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-sysinfo-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-sysinfo-l1-1-0.dll
                                • Size 19KB
                                • SHA256 1f98f9e044d32e61445c5fab3c80c2f37ca6bab3d5b22cd5611fb5df73db04a8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-timezone-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-timezone-l1-1-0.dll
                                • Size 18KB
                                • SHA256 5909e928d791f67a13e3130033cb0e2178f5167a644c3ab5336322d38356db47
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-core-util-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-core-util-l1-1-0.dll
                                • Size 18KB
                                • SHA256 070afbdbe5b3f3b76b6b7ea2dbb9f8deff81c6ec8706eef9080671543e2ae28b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-conio-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-conio-l1-1-0.dll
                                • Size 19KB
                                • SHA256 1d4464fe335470452e58d613028dde2f105edf969d411e90ba7ca9e343c3fc89
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-convert-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-convert-l1-1-0.dll
                                • Size 22KB
                                • SHA256 91c5966932287078d0e616d8e0369347991f39765749bbffa1ed3a9df49776d9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-environment-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-environment-l1-1-0.dll
                                • Size 18KB
                                • SHA256 8d9d3e905d072c4465e4787dd5bd843d3a5dd5ac5ad9d7f232032b25facc82ab
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-filesystem-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-filesystem-l1-1-0.dll
                                • Size 20KB
                                • SHA256 8f9361d02f68392127fe264655eac4fef4a4a1bf63571f184ce26faa98670702
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-heap-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-heap-l1-1-0.dll
                                • Size 18KB
                                • SHA256 76dad3e04c9ff61b40ae1c9e039837cd1c077d59b6a008643e4fbf2dbdb564dc
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-locale-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-locale-l1-1-0.dll
                                • Size 18KB
                                • SHA256 ba1458f730ff90009483c763926d1c74383480e529541c0ef5d4de44e7a4f14c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-math-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-math-l1-1-0.dll
                                • Size 27KB
                                • SHA256 5f2bb085217304006c81c55214c6093ec476e554e31808026e424da82f58aa0e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-multibyte-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-multibyte-l1-1-0.dll
                                • Size 25KB
                                • SHA256 0aa2cf2cc029c95fc053374071d7873edddc410ff8858720ee5c29bfee62dddc
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-private-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-private-l1-1-0.dll
                                • Size 69KB
                                • SHA256 c1e206aa4c8014dcfdad15c16f50fbf4e3ce8e76e9406af923131ebc001dd5ac
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-process-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-process-l1-1-0.dll
                                • Size 19KB
                                • SHA256 36589e9738a9358065d5a72f4276505d6c2f78101508bede05bdcceea46a8cd8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-runtime-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-runtime-l1-1-0.dll
                                • Size 22KB
                                • SHA256 11aca97acda31203aeee496c9f183b49db1c54d0efa48888a15ab4ea47ee080f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-stdio-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-stdio-l1-1-0.dll
                                • Size 24KB
                                • SHA256 cf7bbe93ae75a1c46a38204a6acef71bf2f5e3cd34501825601900e07d3d7b15
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-string-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-string-l1-1-0.dll
                                • Size 24KB
                                • SHA256 b516d1772b75714f039440cf5d070b87a187d2f67b7f891c94cf1c60330fbfa7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-time-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-time-l1-1-0.dll
                                • Size 20KB
                                • SHA256 a4b0f75854949980d410c5da90c36ddb94be292431c89fd3e992f9d5f8ee9983
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                api-ms-win-crt-utility-l1-1-0.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\api-ms-win-crt-utility-l1-1-0.dll
                                • Size 18KB
                                • SHA256 d675ee0c418c4cd7ff0c19c2d945331c8e6072a51abbca548e7d9d2f1bf288dd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                concrt140.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\concrt140.dll
                                • Size 310KB
                                • SHA256 01729ff33c2e3db1033fb86e899d62026dc1c03705269bb9636227f61934d9b3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                crashreport.dll
                                • Path C:\LDPlayer\LDPlayer9\vbox64\crashreport.dll
                                • Size 51KB
                                • SHA256 6f35dc1553fdc0070464004e9ed1f5eb17ac5979405b1f30a9bd8240ca5019b5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                leidian0.config
                                • Path C:\LDPlayer\LDPlayer9\vms\config\leidian0.config
                                • Size 641B
                                • SHA256 3234516ad4a3697d16e91070711c2d82aa00e1950d5b1c652dfd33db8bc172db
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                3FE2BD01AB6BC312BF0DADE7F797388F_D700B3BF42AE699B26DDBDD3E4CB7EDD
                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3FE2BD01AB6BC312BF0DADE7F797388F_D700B3BF42AE699B26DDBDD3E4CB7EDD
                                • Size 471B
                                • SHA256 c08906a372e0a96dad9201be4a37832b0ce15b71e72695d9a09bb7ec4029fca4
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                E2C6CBAF0AF08CF203BA74BF0D0AB6D5_F24AE254AC712022CD7275ECC89876F9
                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_F24AE254AC712022CD7275ECC89876F9
                                • Size 471B
                                • SHA256 b4f6ac316c99d186ee82ac7bcb9c54d00c8c21634956ff2d3ad05977e7991617
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                F634406855CF2C9907455518D4F0AB3E
                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F634406855CF2C9907455518D4F0AB3E
                                • Size 471B
                                • SHA256 7a69fc49047100fd3e61597828704b3ff8f4c61fc0930da0b45b7c1fa02ab210
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                3FE2BD01AB6BC312BF0DADE7F797388F_D700B3BF42AE699B26DDBDD3E4CB7EDD
                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3FE2BD01AB6BC312BF0DADE7F797388F_D700B3BF42AE699B26DDBDD3E4CB7EDD
                                • Size 402B
                                • SHA256 47d76c1f7f1fcd1e8447be880f5001103b47d5a274a3b47836371d4893abc7cc
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                E2C6CBAF0AF08CF203BA74BF0D0AB6D5_F24AE254AC712022CD7275ECC89876F9
                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_F24AE254AC712022CD7275ECC89876F9
                                • Size 416B
                                • SHA256 dc62d07a529fe60d5eae4ead05fe715bd40590291f92809db456ae61429f3b3e
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                F634406855CF2C9907455518D4F0AB3E
                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F634406855CF2C9907455518D4F0AB3E
                                • Size 412B
                                • SHA256 b16b699ca73486b467fb3cb50157c95d61c0b4fcf774a76fcb8e01a678deda51
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                httpsres_ldrescdn_comrmsuploadad3she91u36o7-1793783526_jpg.webp
                                • Path C:\Users\Admin\AppData\Roaming\XuanZhi9\cache\httpsres_ldrescdn_comrmsuploadad3she91u36o7-1793783526_jpg.webp
                                • Size 277KB
                                • SHA256 f4038fa22472fb75eac0c70ed29467b953b556915465d68e803a4a094fc5e54e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                memory/2464-815-0x000000006EB00000-0x000000006EB38000-memory.dmp
                                Download

                                memory/2464-809-0x00000000704A0000-0x00000000715AE000-memory.dmp
                                Download

                                memory/2464-813-0x000000006EB40000-0x000000006EB67000-memory.dmp
                                Download

                                memory/2464-812-0x0000000073470000-0x00000000734A0000-memory.dmp
                                Download

                                memory/2464-810-0x00000000701C0000-0x000000007049E000-memory.dmp
                                Download

                                memory/2464-772-0x0000000036E60000-0x0000000036E70000-memory.dmp
                                Download

                                memory/2464-820-0x000000006E4B0000-0x000000006E4EA000-memory.dmp
                                Download

                                memory/2464-814-0x000000006EB70000-0x000000006FFA3000-memory.dmp
                                Download

                                memory/2464-819-0x000000006E760000-0x000000006E782000-memory.dmp
                                Download

                                memory/2464-818-0x000000006EA90000-0x000000006EAE0000-memory.dmp
                                Download

                                memory/2464-817-0x0000000073460000-0x000000007346C000-memory.dmp
                                Download

                                memory/2464-816-0x000000006EAE0000-0x000000006EAF9000-memory.dmp
                                Download

                                memory/2464-811-0x0000000070120000-0x00000000701BE000-memory.dmp
                                Download