| File name: | RuneScape-Setup.exe |
| Full analysis: | https://app.any.run/tasks/8d88af32-0a72-42cb-adee-13e9e8dd1b67 |
| Verdict: | Malicious activity |
| Threats: | Adware is a form of malware that targets users with unwanted advertisements, often disrupting their browsing experience. It typically infiltrates systems through software bundling, malicious websites, or deceptive downloads. Once installed, it may track user activity, collect sensitive data, and display intrusive ads, including pop-ups or banners. Some advanced adware variants can bypass security measures and establish persistence on devices, making removal challenging. Additionally, adware can create vulnerabilities that other malware can exploit, posing a significant risk to user privacy and system security. |
| Analysis date: | July 01, 2020, 02:52:18 |
| OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
| Tags: | |
| Indicators: | |
| MIME: | application/x-dosexec |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows |
| MD5: | EBAF6107073E1459FFD54DEC03321743 |
| SHA1: | 6D66AD5D6DD682C3B55CBD5211657E765E494AEE |
| SHA256: | E0260B17FDF483018C22CA5C233D61E1690055581047005B6349449A5626BBCD |
| SSDEEP: | 98304:zlT4tvhFEbBnPZ3T4QRykcsAjXwaBXdPDjxYwutcuL2fQ+C:zlT4REbBPZ3T4mykcsAjAkdrjxxutcO5 |
| .exe | | | Win32 Executable Delphi generic (57.2) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (18.2) |
| .exe | | | Win16/32 Executable Delphi generic (8.3) |
| .exe | | | Generic Win/DOS Executable (8) |
| .exe | | | DOS Executable Generic (8) |
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2016:01:15 09:22:50+01:00 |
| PEType: | PE32 |
| LinkerVersion: | 2.25 |
| CodeSize: | 65024 |
| InitializedDataSize: | 102400 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x113bc |
| OSVersion: | 5 |
| ImageVersion: | 6 |
| SubsystemVersion: | 5 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 0.0.0.0 |
| ProductVersionNumber: | 0.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Neutral |
| CharacterSet: | Unicode |
| Comments: | This installation was built with Inno Setup. |
| CompanyName: | Jagex Ltd |
| FileDescription: | RuneScape Launcher Setup |
| FileVersion: | |
| LegalCopyright: | |
| ProductName: | RuneScape Launcher |
| ProductVersion: | 2.2.7 |
| Architecture: | IMAGE_FILE_MACHINE_I386 |
|---|---|
| Subsystem: | IMAGE_SUBSYSTEM_WINDOWS_GUI |
| Compilation Date: | 15-Jan-2016 08:22:50 |
| Detected languages: |
|
| Comments: | This installation was built with Inno Setup. |
| CompanyName: | Jagex Ltd |
| FileDescription: | RuneScape Launcher Setup |
| FileVersion: | - |
| LegalCopyright: | - |
| ProductName: | RuneScape Launcher |
| ProductVersion: | 2.2.7 |
| Magic number: | MZ |
|---|---|
| Bytes on last page of file: | 0x0050 |
| Pages in file: | 0x0002 |
| Relocations: | 0x0000 |
| Size of header: | 0x0004 |
| Min extra paragraphs: | 0x000F |
| Max extra paragraphs: | 0xFFFF |
| Initial SS value: | 0x0000 |
| Initial SP value: | 0x00B8 |
| Checksum: | 0x0000 |
| Initial IP value: | 0x0000 |
| Initial CS value: | 0x0000 |
| Overlay number: | 0x001A |
| OEM identifier: | 0x0000 |
| OEM information: | 0x0000 |
| Address of NE header: | 0x00000100 |
| Signature: | PE |
|---|---|
| Machine: | IMAGE_FILE_MACHINE_I386 |
| Number of sections: | 8 |
| Time date stamp: | 15-Jan-2016 08:22:50 |
| Pointer to Symbol Table: | 0x00000000 |
| Number of symbols: | 0 |
| Size of Optional Header: | 0x00E0 |
| Characteristics: |
|
Name | Virtual Address | Virtual Size | Raw Size | Charateristics | Entropy |
|---|---|---|---|---|---|
.text | 0x00001000 | 0x0000F134 | 0x0000F200 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ | 6.39169 |
.itext | 0x00011000 | 0x00000B44 | 0x00000C00 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ | 5.74305 |
.data | 0x00012000 | 0x00000C88 | 0x00000E00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 2.24753 |
.bss | 0x00013000 | 0x000056B8 | 0x00000000 | IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 0 |
.idata | 0x00019000 | 0x00000DD0 | 0x00000E00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 4.97188 |
.tls | 0x0001A000 | 0x00000008 | 0x00000000 | IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 0 |
.rdata | 0x0001B000 | 0x00000018 | 0x00000200 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 0.204488 |
.rsrc | 0x0001C000 | 0x00017138 | 0x00017200 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 6.63008 |
Title | Entropy | Size | Codepage | Language | Type |
|---|---|---|---|---|---|
1 | 5.13965 | 1580 | Latin 1 / Western European | English - United States | RT_MANIFEST |
2 | 6.09653 | 2440 | Latin 1 / Western European | English - United States | RT_ICON |
3 | 6.11112 | 4264 | Latin 1 / Western European | English - United States | RT_ICON |
4 | 5.99197 | 9640 | Latin 1 / Western European | English - United States | RT_ICON |
5 | 7.9668 | 36447 | Latin 1 / Western European | English - United States | RT_ICON |
4091 | 2.56031 | 104 | Latin 1 / Western European | UNKNOWN | RT_STRING |
4092 | 3.25287 | 212 | Latin 1 / Western European | UNKNOWN | RT_STRING |
4093 | 3.26919 | 164 | Latin 1 / Western European | UNKNOWN | RT_STRING |
4094 | 3.33268 | 684 | Latin 1 / Western European | UNKNOWN | RT_STRING |
4095 | 3.34579 | 844 | Latin 1 / Western European | UNKNOWN | RT_STRING |
advapi32.dll |
comctl32.dll |
kernel32.dll |
oleaut32.dll |
user32.dll |
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 116 | "C:\Users\admin\AppData\Local\Temp\RuneScape-Setup.exe" | C:\Users\admin\AppData\Local\Temp\RuneScape-Setup.exe | explorer.exe | ||||||||||||
User: admin Company: Jagex Ltd Integrity Level: MEDIUM Description: RuneScape Launcher Setup Exit code: 0 Version: Modules
| |||||||||||||||
| 684 | "C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:3248 CREDAT:275457 /prefetch:2 | C:\Program Files\Internet Explorer\iexplore.exe | iexplore.exe | ||||||||||||
User: admin Company: Microsoft Corporation Integrity Level: HIGH Description: Internet Explorer Exit code: 0 Version: 11.00.9600.16428 (winblue_gdr.131013-1700) Modules
| |||||||||||||||
| 744 | C:\Windows\system32\vssvc.exe | C:\Windows\system32\vssvc.exe | — | services.exe | |||||||||||
User: SYSTEM Company: Microsoft Corporation Integrity Level: SYSTEM Description: Microsoft® Volume Shadow Copy Service Exit code: 0 Version: 6.1.7600.16385 (win7_rtm.090713-1255) Modules
| |||||||||||||||
| 1364 | "C:\Users\admin\AppData\Local\Temp\is-HC8LJ.tmp\dxwebsetup.exe" | C:\Users\admin\AppData\Local\Temp\is-HC8LJ.tmp\dxwebsetup.exe | RuneScape-Setup.tmp | ||||||||||||
User: admin Company: Microsoft Corporation Integrity Level: HIGH Description: DirectX 9.0 Web setup Exit code: 2852126720 Version: 9.29.1974.0 Modules
| |||||||||||||||
| 2164 | "C:\Users\admin\AppData\Local\Temp\RuneScape-Setup.exe" /SPAWNWND=$20132 /NOTIFYWND=$20138 | C:\Users\admin\AppData\Local\Temp\RuneScape-Setup.exe | RuneScape-Setup.tmp | ||||||||||||
User: admin Company: Jagex Ltd Integrity Level: HIGH Description: RuneScape Launcher Setup Exit code: 0 Version: Modules
| |||||||||||||||
| 2480 | C:\ProgramData\Jagex\launcher\rs2client.exe "35" "http://services.runescape.com/m=gamelogspecs/k=5/clientstats?data=" "36" "" "37" "43594" "30" "196515767263-1oo20deqm6edn7ujlihl6rpadk9drhva.apps.googleusercontent.com" "31" "false" "32" "false" "33" "" "38" "980136132" "9" "false" "8" "43594" "56" "130" "7" "0" "6" "false" "5" "1439606354" "54" "https://auth.jagex.com/" "4" "lobby13a.runescape.com" "55" "http://world19.runescape.com/k=5" "52" "0" "3" "http://world19.runescape.com/k=5" "53" "43594" "2" "https://payments.jagex.com/operator/v1/" "50" "574674003" "1" "3163" "51" "19" "18" "0" "19" "443" "13" "content.runescape.com" "10" "" "11" "0" "16" "false" "17" "true" "14" "wwGlrZHF5gKN6D3mDdihco3oPeYN2KFybL9hUUFqOvk" "15" "content.runescape.com" "27" "31899" "26" "0" "25" "1112" "24" "0" "23" "" "22" ".runescape.com" "21" "0" "20" "443" "41" "halign=true|valign=true|image=rs_logo.gif,0,-43|rotatingimage=rs3_loading_spinner.gif,0,47,9.6|progress=true,Verdana,13,0xFFFFFF,0,51" "40" "80" "43" "0" "29" "0" "42" "false" "28" "" "45" "443" "44" "false" "47" "9Cd3fNnPmLyYZ-l8EYCThzFGbCHjgsIS" "49" "1200" "48" "false" "34" "443" launcher D78 | C:\ProgramData\Jagex\launcher\rs2client.exe | — | RuneScape.exe | |||||||||||
User: admin Company: Jagex Ltd. Integrity Level: MEDIUM Description: RuneScape Client Exit code: 0 Version: 913-2 Modules
| |||||||||||||||
| 2736 | "C:\Users\admin\AppData\Local\Temp\is-FC053.tmp\RuneScape-Setup.tmp" /SL5="$2013C,3890696,168448,C:\Users\admin\AppData\Local\Temp\RuneScape-Setup.exe" /SPAWNWND=$20132 /NOTIFYWND=$20138 | C:\Users\admin\AppData\Local\Temp\is-FC053.tmp\RuneScape-Setup.tmp | RuneScape-Setup.exe | ||||||||||||
User: admin Integrity Level: HIGH Description: Setup/Uninstall Exit code: 0 Version: 51.1052.0.0 Modules
| |||||||||||||||
| 2768 | "C:\Users\admin\AppData\Local\Temp\is-2A8PQ.tmp\RuneScape-Setup.tmp" /SL5="$20138,3890696,168448,C:\Users\admin\AppData\Local\Temp\RuneScape-Setup.exe" | C:\Users\admin\AppData\Local\Temp\is-2A8PQ.tmp\RuneScape-Setup.tmp | — | RuneScape-Setup.exe | |||||||||||
User: admin Integrity Level: MEDIUM Description: Setup/Uninstall Exit code: 0 Version: 51.1052.0.0 Modules
| |||||||||||||||
| 2784 | C:\Windows\system32\DllHost.exe /Processid:{F32D97DF-E3E5-4CB9-9E3E-0EB5B4E49801} | C:\Windows\system32\DllHost.exe | — | svchost.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: HIGH Description: COM Surrogate Exit code: 0 Version: 6.1.7600.16385 (win7_rtm.090713-1255) Modules
| |||||||||||||||
| 2928 | "C:\Program Files\Jagex\RuneScape Launcher\RuneScape.exe" "--configURI" "rs-launch://www.runescape.com/k=5/l=$(Language:0)/jav_config.ws" | C:\Program Files\Jagex\RuneScape Launcher\RuneScape.exe | explorer.exe | ||||||||||||
User: admin Company: Jagex Ltd. Integrity Level: MEDIUM Description: RuneScape Launcher Exit code: 0 Version: 224.1 Modules
| |||||||||||||||
| (PID) Process: | (2736) RuneScape-Setup.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session0000 |
| Operation: | write | Name: | Owner |
Value: B00A00001CBD09AD524FD601 | |||
| (PID) Process: | (2736) RuneScape-Setup.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session0000 |
| Operation: | write | Name: | SessionHash |
Value: AC09C52FDC041D1DA7BA8CC635F7163896775A0F3C8518AB9B06C07F4BBB2EBB | |||
| (PID) Process: | (2736) RuneScape-Setup.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session0000 |
| Operation: | write | Name: | Sequence |
Value: 1 | |||
| (PID) Process: | (2736) RuneScape-Setup.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings |
| Operation: | write | Name: | ProxyEnable |
Value: 0 | |||
| (PID) Process: | (2736) RuneScape-Setup.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections |
| Operation: | write | Name: | SavedLegacySettings |
Value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| |||
| (PID) Process: | (2736) RuneScape-Setup.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap |
| Operation: | write | Name: | UNCAsIntranet |
Value: 0 | |||
| (PID) Process: | (2736) RuneScape-Setup.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap |
| Operation: | write | Name: | AutoDetect |
Value: 1 | |||
| (PID) Process: | (2736) RuneScape-Setup.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (2736) RuneScape-Setup.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (2736) RuneScape-Setup.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 3696 | dxwsetup.exe | C:\Windows\system32\directx\websetup\SETCE3F.tmp | — | |
MD5:— | SHA256:— | |||
| 3696 | dxwsetup.exe | C:\Windows\system32\directx\websetup\SETCE40.tmp | — | |
MD5:— | SHA256:— | |||
| 3696 | dxwsetup.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\78RFYB7Z\dxupdate[1].cab | — | |
MD5:— | SHA256:— | |||
| 3696 | dxwsetup.exe | C:\Windows\msdownld.tmp\AS10DF56.tmp\dxupdate.cab | — | |
MD5:— | SHA256:— | |||
| 2164 | RuneScape-Setup.exe | C:\Users\admin\AppData\Local\Temp\is-FC053.tmp\RuneScape-Setup.tmp | executable | |
MD5:— | SHA256:— | |||
| 116 | RuneScape-Setup.exe | C:\Users\admin\AppData\Local\Temp\is-2A8PQ.tmp\RuneScape-Setup.tmp | executable | |
MD5:— | SHA256:— | |||
| 3696 | dxwsetup.exe | C:\Windows\system32\DirectX\WebSetup\dxupdate.cab | compressed | |
MD5:— | SHA256:— | |||
| 3696 | dxwsetup.exe | C:\Windows\Logs\DirectX.log | text | |
MD5:— | SHA256:— | |||
| 3696 | dxwsetup.exe | C:\Windows\INF\setupapi.app.log | ini | |
MD5:— | SHA256:— | |||
| 3696 | dxwsetup.exe | C:\Windows\system32\DirectX\WebSetup\filelist.dat | text | |
MD5:— | SHA256:— | |||
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
2736 | RuneScape-Setup.tmp | HEAD | 200 | 2.18.233.19:80 | http://download.microsoft.com/download/1/7/1/1718CCC4-6315-4D8E-9543-8E28A4E18C4C/dxwebsetup.exe | unknown | — | — | whitelisted |
3696 | dxwsetup.exe | GET | 200 | 2.18.233.19:80 | http://download.microsoft.com/download/1/7/1/1718CCC4-6315-4D8E-9543-8E28A4E18C4C/Jun2006_xact_x86.cab | unknown | compressed | 131 Kb | whitelisted |
3696 | dxwsetup.exe | GET | 200 | 2.18.233.19:80 | http://download.microsoft.com/download/1/7/1/1718CCC4-6315-4D8E-9543-8E28A4E18C4C/Nov2007_x3daudio_x86.cab | unknown | compressed | 19.0 Kb | whitelisted |
3696 | dxwsetup.exe | GET | 200 | 2.18.233.19:80 | http://download.microsoft.com/download/1/7/1/1718CCC4-6315-4D8E-9543-8E28A4E18C4C/Nov2007_xact_x86.cab | unknown | compressed | 145 Kb | whitelisted |
3696 | dxwsetup.exe | GET | 200 | 2.18.233.19:80 | http://download.microsoft.com/download/1/7/1/1718CCC4-6315-4D8E-9543-8E28A4E18C4C/dxupdate.cab | unknown | compressed | 94.8 Kb | whitelisted |
3696 | dxwsetup.exe | GET | 200 | 2.18.233.19:80 | http://download.microsoft.com/download/1/7/1/1718CCC4-6315-4D8E-9543-8E28A4E18C4C/Apr2006_xact_x86.cab | unknown | compressed | 130 Kb | whitelisted |
3696 | dxwsetup.exe | GET | 200 | 2.18.233.19:80 | http://download.microsoft.com/download/1/7/1/1718CCC4-6315-4D8E-9543-8E28A4E18C4C/Aug2006_xact_x86.cab | unknown | compressed | 135 Kb | whitelisted |
3696 | dxwsetup.exe | GET | 200 | 2.18.233.19:80 | http://download.microsoft.com/download/1/7/1/1718CCC4-6315-4D8E-9543-8E28A4E18C4C/Aug2007_xact_x86.cab | unknown | compressed | 150 Kb | whitelisted |
3696 | dxwsetup.exe | GET | 200 | 2.18.233.19:80 | http://download.microsoft.com/download/1/7/1/1718CCC4-6315-4D8E-9543-8E28A4E18C4C/Aug2006_xinput_x86.cab | unknown | compressed | 45.9 Kb | whitelisted |
3696 | dxwsetup.exe | GET | 200 | 2.18.233.19:80 | http://download.microsoft.com/download/1/7/1/1718CCC4-6315-4D8E-9543-8E28A4E18C4C/Dec2006_d3dx10_00_x86.cab | unknown | compressed | 187 Kb | whitelisted |
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
2736 | RuneScape-Setup.tmp | 2.18.233.19:80 | download.microsoft.com | Akamai International B.V. | — | whitelisted |
3696 | dxwsetup.exe | 2.18.233.19:80 | download.microsoft.com | Akamai International B.V. | — | whitelisted |
684 | iexplore.exe | 91.235.140.148:80 | www.runescape.com | Level 3 Communications, Inc. | GB | suspicious |
684 | iexplore.exe | 91.235.140.148:443 | www.runescape.com | Level 3 Communications, Inc. | GB | suspicious |
684 | iexplore.exe | 93.184.220.29:80 | ocsp.digicert.com | MCI Communications Services, Inc. d/b/a Verizon Business | US | whitelisted |
684 | iexplore.exe | 172.217.16.200:443 | www.googletagmanager.com | Google Inc. | US | whitelisted |
684 | iexplore.exe | 172.217.23.163:80 | ocsp.pki.goog | Google Inc. | US | whitelisted |
684 | iexplore.exe | 209.197.3.17:443 | cdn.runescape.com | Highwinds Network Group, Inc. | US | unknown |
3248 | iexplore.exe | 204.79.197.200:80 | www.bing.com | Microsoft Corporation | US | whitelisted |
3904 | RuneScape.exe | 91.235.140.148:80 | www.runescape.com | Level 3 Communications, Inc. | GB | suspicious |
Domain | IP | Reputation |
|---|---|---|
download.microsoft.com |
| whitelisted |
www.runescape.com |
| suspicious |
ocsp.digicert.com |
| whitelisted |
www.googletagmanager.com |
| whitelisted |
ocsp.pki.goog |
| whitelisted |
cdn.runescape.com |
| unknown |
api.bing.com |
| whitelisted |
www.bing.com |
| whitelisted |
world5.runescape.com |
| unknown |
world10.runescape.com |
| unknown |
PID | Process | Class | Message |
|---|---|---|---|
2736 | RuneScape-Setup.tmp | Misc activity | ADWARE [PTsecurity] PUP.Win32/Freemake.A UserAgent |
2736 | RuneScape-Setup.tmp | Misc activity | ADWARE [PTsecurity] PUP.Win32/Freemake.A UserAgent |
2736 | RuneScape-Setup.tmp | Potential Corporate Privacy Violation | ET POLICY PE EXE or DLL Windows file download HTTP |
2736 | RuneScape-Setup.tmp | Generic Protocol Command Decode | SURICATA STREAM ESTABLISHED packet out of window |
2736 | RuneScape-Setup.tmp | Generic Protocol Command Decode | SURICATA STREAM ESTABLISHED packet out of window |
2736 | RuneScape-Setup.tmp | Generic Protocol Command Decode | SURICATA STREAM ESTABLISHED invalid ack |
2736 | RuneScape-Setup.tmp | Generic Protocol Command Decode | SURICATA STREAM Packet with invalid ack |
2736 | RuneScape-Setup.tmp | Generic Protocol Command Decode | SURICATA STREAM ESTABLISHED packet out of window |
2736 | RuneScape-Setup.tmp | Generic Protocol Command Decode | SURICATA STREAM ESTABLISHED packet out of window |
2736 | RuneScape-Setup.tmp | Generic Protocol Command Decode | SURICATA STREAM ESTABLISHED packet out of window |
Process | Message |
|---|---|
dxwsetup.exe | DLL_PROCESS_ATTACH |
dxwsetup.exe | DLL_PROCESS_ATTACH |
dxwsetup.exe | DLL_PROCESS_DETACH |
dxwsetup.exe | Invalid parameter passed to C runtime function.
|
dxwsetup.exe | Invalid parameter passed to C runtime function.
|
dxwsetup.exe | DLL_PROCESS_DETACH |
dxwsetup.exe | DLL_PROCESS_ATTACH |
dxwsetup.exe | DLL_PROCESS_ATTACH |
dxwsetup.exe | DLL_PROCESS_DETACH |
dxwsetup.exe | DLL_PROCESS_DETACH |